Method, apparatus, and electronic device for blockchain-based recordkeeping

Patent metadata

Field	Value
Publication number	US-11550935-B2
Application number	US-202017105144-A
Country	US
Kind code	B2
Filing date	Nov 25, 2020
Priority date	Oct 31, 2018
Publication date	Jan 10, 2023
Grant date	Jan 10, 2023

Abstract

Provided is a method for blockchain-based recordkeeping and implementable by a terminal device. The method comprises: obtaining target data; computing a data digest of the target data, and extracting a key segment from the target data; signing, in a secure operation environment included in the terminal device, the data digest and/or the key segment based on a private key associated with the terminal device to generate a signature; and submitting to a blockchain the data digest, the key segment, and the signature, for one or more nodes in the blockchain to verify the signature based on a public key corresponding to the private key, and to record the data digest and the key segment in the blockchain in response to the signature being verified to be valid.

First claim

What is claimed is:

1. A device comprising: one or more processors and one or more non-transitory computer-readable mediums coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the device to perform operations comprising:
capturing streaming target data comprising video data or audio data;
applying a hash algorithm to each of a plurality of fragments of the target data to respectively generate a plurality of hash values, each of the hash values corresponding to one of the plurality of fragments;
periodically extracting a key segment from one of the fragments of the streaming target data;
digitally signing, in a trusted execution environment (TEE) of the device, the extracted key segment and the hash value of the one of the fragments by using a private key stored in the TEE to generate a signature;
generating a blockchain transaction comprising the extracted key segment, the hash value of the one of the fragments, and the signature; and
transmitting the blockchain transaction to a blockchain network for consensus processing and storage of the extracted key segment and the hash value of the one of the fragments to a blockchain on the blockchain network.

2. The device of claim 1 , wherein the target data comprises the video data, and extracting the key segment from the one of the fragments of the streaming target data comprises:
detecting an abnormal event in the video data; and
in response to the abnormal event being detected, extracting a video segment corresponding to an occurrence period of the abnormal event as the key segment.

3. The device according to claim 2 , wherein the device comprises a body-worn camera or an event data recorder.

4. The device of claim 1 , wherein the streaming target data comprises the audio data, and extracting the key segment from the one of the fragments of the streaming target data comprises:
detecting a keyword in the audio data; and
in response to the keyword being detected, extracting an audio segment of a preset length comprising the preset keyword as the key segment.

5. The device of claim 1 , wherein the operations further comprise:
obtaining identity information of a user using the device;
authenticating the identity of the user based on the identity information; and
in response to authenticating the identity of the user, digitally signing in the TEE, at the device, using the private key stored in the TEE, the extracted key segment and the hash value of the one of the fragments to generate the signature.

6. The device of claim 1 , wherein the operations further comprise:
in response to a user using the device for the first time, obtaining identity information of the user;
authenticating, based on the identity information, the identity of the user;
in response to authenticating the identity of the user, invoking a key generating algorithm stored in the TEE to generate the private key and a public key corresponding to the private key;
associating the private key with the identity information of the user to create an association relationship; and
storing the private key and the association relationship in the TEE environment.

7. The device of claim 1 , wherein the operations further comprise:
determining an acquisition timestamp of the streaming target data, wherein the transaction comprises the acquisition timestamp.

8. The device of claim 7 , wherein the operations further comprise:
determining an acquisition location of the streaming target data, wherein the transaction comprises the acquisition location.

9. The device of claim 1 , wherein the operations further comprise:
storing in the TEE environment, at the device, device authentication information signed by a private key associated with a manufacturer of the device;
obtaining, at the device, a public key corresponding to the private key associated with the manufacturer; and
prior to digitally signing the extracted key segment and the hash value of the one of the fragments, verifying, at the device, based on the public key, a signature of the device authentication information to determine that the device is valid.

10. A non-transitory computer-readable storage medium storing instructions that, when executed by a processor, cause a device to perform operations comprising:
capturing streaming target data comprising video data or audio data;
applying a hash algorithm to each of a plurality of fragments of the target data to respectively generate a plurality of hash values, each of the hash values corresponding to one of the plurality of fragments;
periodically extracting a key segment from one of the fragments of the streaming target data;
digitally signing, in a trusted execution environment (TEE) of the device, the extracted key segment and the hash value of the one of the fragments by using a private key stored in the TEE to generate a signature;
generating a blockchain transaction comprising the extracted key segment, the hash value of the one of the fragments, and the signature; and
transmitting the blockchain transaction to a blockchain network for consensus processing and storage of the extracted key segment and the hash value of the one of the fragments to a blockchain on the blockchain network.

11. The non-transitory computer-readable storage medium of claim 10 , wherein the target data comprises the video data, and extracting the key segment from the one of the fragments of the streaming target data comprises:
detecting an abnormal event in the video data; and
in response to the abnormal event being detected, extracting a video segment corresponding to an occurrence period of the abnormal event as the key segment.

12. The non-transitory computer-readable storage medium of claim 10 , wherein the streaming target data comprises the audio data, and extracting the key segment from the one of the fragments of the streaming target data comprises:
detecting a keyword in the audio data; and
in response to the keyword being detected, extracting an audio segment of a preset length comprising the preset keyword as the key segment.

13. The non-transitory computer-readable storage medium of claim 10 , wherein the operations further comprise:
obtaining identity information of a user using the device;
authenticating the identity of the user based on the identity information; and
in response to authenticating the identity of the user, digitally signing in the TEE, at the device, using the private key stored in the TEE, the hash value and the segment to generate the signature.

14. The non-transitory computer-readable storage medium of claim 10 , wherein the operations further comprise:
in response to a user using the device for the first time, obtaining identity information of the user;
authenticating, based on the identity information, the identity of the user;
in response to authenticating the identity of the user, invoking a key generating algorithm stored in the TEE to generate the private key and a public key corresponding to the private key;
associating the private key with the identity information of the user to create an association relationship; and
storing the private key and the association relationship in the TEE environment.

15. The non-transitory computer-readable storage medium of claim 10 , wherein the operations further comprise:
determining an acquisition timestamp of the streaming target data, wherein the transaction comprises the acquisition timestamp.

16. The non-transitory computer-readable storage medium of claim 15 , wherein the operations further comprise: d

Assignees

• Advanced New Technologies Co Ltd

Inventors

• Zhang Hong
• Jiang Haitao
• Wang Linqing
• Weng xinyu
• Li Fuqiang
• Lin Feng
• Wu Jun
• Zeng Xiaodong
• Yang Lei

Classifications

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L9/50 Primary

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/3247

  involving digital signatures · CPC title