Method, apparatus, and electronic device for blockchain-based recordkeeping

Patent metadata

Field	Value
Publication number	US-10885207-B2
Application number	US-202015931879-A
Country	US
Kind code	B2
Filing date	May 14, 2020
Priority date	Oct 31, 2018
Publication date	Jan 5, 2021
Grant date	Jan 5, 2021

Abstract

Provided is a method for blockchain-based recordkeeping and implementable by a terminal device. The method comprises: obtaining target data; computing a data digest of the target data, and extracting a key segment from the target data; signing, in a secure operation environment included in the terminal device, the data digest and/or the key segment based on a private key associated with the terminal device to generate a signature; and submitting to a blockchain the data digest, the key segment, and the signature, for one or more nodes in the blockchain to verify the signature based on a public key corresponding to the private key, and to record the data digest and the key segment in the blockchain in response to the signature being verified to be valid.

First claim

What is claimed is:

1. A device comprising: one or more processors and one or more non-transitory computer-readable mediums coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the device to perform operations comprising:
capturing streaming target data comprising video data or audio data;
applying a hash algorithm to each of a plurality of fragments of the target data to respectively generate a plurality of hash values, each of the hash values corresponding to one of the plurality of fragments;
periodically extracting a key segment from the streaming target data by:
detecting an abnormal event in the video data, and extracting a video segment corresponding to an occurrence period of the abnormal event as the key segment; or
detecting a keyword in the audio data, and extracting an audio segment of a preset length comprising the preset keyword as the key segment;

digitally signing, in a trusted execution environment (TEE) of the device, the corresponding hash value and the extracted key segment by using a private key stored in the TEE to generate a signature;
generating a blockchain transaction comprising the corresponding hash value, the extracted key segment, and the signature; and
transmitting the blockchain transaction to a blockchain network for consensus processing and storage of the corresponding hash value and the extracted key segment to a blockchain on the blockchain network.

2. The device of claim 1 , wherein the target data comprises the video data, and extracting the key segment from the streaming target data comprises:
detecting the abnormal event in the video data; and
in response to the abnormal event being detected, extracting the video segment corresponding to the occurrence period of the abnormal event as the extracted key segment.

3. The device according to claim 2 , wherein the device comprises a body-worn camera or an event data recorder.

4. The device of claim 1 , wherein the streaming target data comprises the audio data, and extracting the key segment from the streaming target data comprises:
detecting the keyword in the audio data; and
in response to the keyword being detected, extracting the audio segment of the preset length comprising the preset keyword as the extracted key segment.

5. The device of claim 1 , wherein the operations further comprise:
obtaining identity information of a user using the device;
authenticating the identity of the user based on the identity information; and
in response to authenticating the identity of the user, digitally signing in the TEE, at the device, using the private key stored in the TEE, the corresponding hash value and the extracted key segment to generate the signature.

6. The device of claim 1 , wherein the operations further comprise:
in response to a user using the device for the first time, obtaining identity information of the user;
authenticating, based on the identity information, the identity of the user;
in response to authenticating the identity of the user, invoking a key generating algorithm stored in the TEE to generate the private key and a public key corresponding to the private key;
associating the private key with the identity information of the user to create an association relationship; and
storing the private key and the association relationship in the TEE environment.

7. The device of claim 1 , wherein the operations further comprise:
determining an acquisition timestamp of the streaming target data, wherein the transaction comprises the acquisition timestamp.

8. The device of claim 7 , wherein the operations further comprise:
determining an acquisition location of the streaming target data, wherein the transaction comprises the acquisition location.

9. The device of claim 1 , wherein the operations further comprise:
storing in the TEE environment, at the device, device authentication information signed by a private key associated with a manufacturer of the device;
obtaining, at the device, a public key corresponding to the private key associated with the manufacturer; and
prior to digitally signing the corresponding hash value and the extracted key segment, verifying, at the device, based on the public key, a signature of the device authentication information to determine that the device is valid.

10. A non-transitory computer-readable storage medium storing instructions that, when executed by a processor, cause a device to perform operations comprising:
capturing streaming target data comprising video data or audio data;
applying a hash algorithm to each of a plurality of fragments of the target data to respectively generate a plurality of hash values, each of the hash values corresponding to one of the plurality of fragments;
periodically extracting a key segment from the streaming target data by:
detecting an abnormal event in the video data, and extracting a video segment corresponding to an occurrence period of the abnormal event as the key segment; or
detecting a keyword in the audio data, and extracting an audio segment of a preset length comprising the preset keyword as the key segment;

digitally signing, in a trusted execution environment (TEE) of the device, the corresponding hash value and the extracted key segment by using a private key stored in the TEE to generate a signature;
generating a blockchain transaction comprising the corresponding hash value, the extracted key segment, and the signature; and
transmitting the blockchain transaction to a blockchain network for consensus processing and storage of the corresponding hash value and the extracted key segment to a blockchain on the blockchain network.

11. The non-transitory computer-readable storage medium of claim 10 , wherein the target data comprises the video data, and extracting the extracted key segment from the streaming target data comprises:
detecting the abnormal event in the video data; and
in response to the abnormal event being detected, extracting the video segment corresponding to the occurrence period of the abnormal event as the extracted key segment.

12. The non-transitory computer-readable storage medium of claim 10 , wherein the streaming target data comprises the audio data, and extracting the key segment from the streaming target data comprises:
detecting the keyword in the audio data; and
in response to the keyword being detected, extracting the audio segment of the preset length comprising the preset keyword as the extracted key segment.

13. The non-transitory computer-readable storage medium of claim 10 , wherein the operations further comprise:
obtaining identity information of a user using the device;
authenticating the identity of the user based on the identity information; and
in response to authenticating the identity of the user, digitally signing in the TEE, at the device, using the private key stored in the TEE, the hash value and the segment to generate the signature.

14. The non-transitory computer-readable storage medium of claim 10 , wherein the operations further comprise:
in response to a user using the device for the first time, obtaining identity information of the user;
authenticating, based on the identity information, the identity of the user;
in response to authenticating the identity of the user, invoking a key generating algorithm stored in the TEE to generate the private key and a public key corresponding to the private key;
associating the private key with the identity information of the user to create an association relationship; and
storing the private key and the association relationship in the T

Assignees

• Advanced New Technologies Co Ltd

Inventors

• Zhang Hong
• Jiang Haitao
• Wang Linqing
• Weng xinyu
• Li Fuqiang
• Lin Feng
• Wu Jun
• Zeng Xiaodong
• Yang Lei

Classifications

• H04L9/50 Primary

  using hash chains, e.g. blockchains or hash trees · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• H04N21/8358

  involving watermark {(protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467)} · CPC title

• G06F21/64 Primary

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title