Data management method and apparatus for blockchain system, medium, and electronic device

Patent metadata

Field	Value
Publication number	US-12494902-B2
Application number	US-202418610127-A
Country	US
Kind code	B2
Filing date	Mar 19, 2024
Priority date	Dec 7, 2018
Publication date	Dec 9, 2025
Grant date	Dec 9, 2025

Abstract

This application provide a data management method performed at a blockchain system. The system includes an accounting node sub-network and a service node sub-network. The method includes: generating a first data block in the accounting node sub-network; adding first key information to a block header of the first data block; adding signature corresponding to the first data block to the block header of the first data block; and releasing the block header of the first data block to the service node sub-network. The service node sub-network is configured to verify the signature comprised in the block header of the first data block, and obtain the first key information after a successful verification.

First claim

What is claimed is:

1 . A data management method performed by a blockchain system, the blockchain system comprising an accounting node sub-network including a target accounting node and a service node sub-network including a target service node, the data management method comprising:
the target accounting node performing the following operations including:
generating a first data block in the accounting node sub-network;
adding first key information to a block header of the first data block;
adding signature corresponding to the first data block to the block header of the first data block; and
releasing the block header of the first data block to the service node sub-network; and
the target service node performing the following operations including:
receiving the block header of the first data block in the service node sub-network;
verifying the signature comprised in the block header of the first data block and obtaining the first key information after a successful verification;
determining, according to the block header, that the first data block is generated in the accounting node sub-network; and
transmit an obtaining request for transaction data included in the first data block to the target accounting node in the accounting node sub-network; and
the target accounting node performing the following operations including:
receiving the obtaining request from the target service node in the service node sub-network for transaction data comprised in the first data block;
obtaining permission information of the target service node transmitting the obtaining request; and
returning, to the target service node, the transaction data comprised in the first data block according to the permission information of the target service node.

2 . The method according to claim 1 , wherein the adding first key information to a block header of the first data block comprises:
adding the first key information to a designated field comprised in the block header of the first data block, wherein the first key information is used to verify the block header of a second data block that is generated after the first data block.

3 . The method according to claim 2 , further comprising:
when the first key information is the same as key information used for verifying the block header of the first data block, setting the designated field to null.

4 . The method according to claim 2 , wherein the method further comprises:
obtaining a certificate corresponding to the second data block from a certificate authority, and using the obtained certificate as the first key information; and/or obtaining a public key and a private key corresponding to the second data block from the certificate authority, and using the obtained public key as the first key information.

5 . The method according to claim 1 , wherein the signature corresponding to the first data block is generated by:
obtaining a signature key corresponding to the first data block; and implementing a signature algorithm on data comprised in the first data block by using the signature key corresponding to the first data block.

6 . The method according to claim 1 , wherein the method further comprises:
when the accounting node sub-network generates a second data block, adding a signature corresponding to the second data block to a block header of the second data block; and releasing the block header of the second data block to the service node sub-network.

7 . A computer system for implementing a data management method at a blockchain system comprising an accounting node sub-network including a target accounting node and a service node sub-network including a target service node, the computer system comprising: one or more processors and a storage apparatus; the storage apparatus being configured to store one or more programs, the one or more programs, when executed by the one or more processors, causing the electronic device to perform the data management method including:
the target accounting node performing the following operations including:
generating a first data block in the accounting node sub-network;
adding first key information to a block header of the first data block;
adding signature corresponding to the first data block to the block header of the first data block; and
releasing the block header of the first data block to the service node sub-network; and
the target service node performing the following operations including:
receiving the block header of the first data block in the service node sub-network;
verifying the signature comprised in the block header of the first data block and obtaining the first key information after a successful verification;
determining, according to the block header, that the first data block is generated in the accounting node sub-network; and
transmit an obtaining request for transaction data included in the first data block to the target accounting node in the accounting node sub-network; and
the target accounting node performing the following operations including:
receiving the obtaining request from the target service node in the service node sub-network for transaction data comprised in the first data block;
obtaining permission information of the target service node transmitting the obtaining request; and
returning, to the target service node, the transaction data comprised in the first data block according to the permission information of the target service node.

8 . The computer system according to claim 7 , wherein the adding first key information to a block header of the first data block comprises:
adding the first key information to a designated field comprised in the block header of the first data block, wherein the first key information is used to verify the block header of a second data block that is generated after the first data block.

9 . The computer system according to claim 8 , wherein the method further comprises:
when the first key information is the same as key information used for verifying the block header of the first data block, setting the designated field to null.

10 . The computer system according to claim 8 , wherein the method further comprises:
obtaining a certificate corresponding to the second data block from a certificate authority, and using the obtained certificate as the first key information; and/or obtaining a public key and a private key corresponding to the second data block from the certificate authority, and using the obtained public key as the first key information.

11 . The computer system according to claim 7 , wherein the signature corresponding to the first data block is generated by:
obtaining a signature key corresponding to the first data block; and implementing a signature algorithm on data comprised in the first data block by using the signature key corresponding to the first data block.

12 . The computer system according to claim 7 , wherein the method further comprises:
when the accounting node sub-network generates a second data block, adding a signature corresponding to the second data block to a block header of the second data block; and releasing the block header of the second data block to the service node sub-network.

13 . A non-transitory computer-readable medium, storing a plurality of computer programs that, when executed by one or more processors of a computer system, cause the computer system to perform a data management method at a blockchain system comprising an accounting node sub-network including a target accounting node and a service node sub-network including a target service node, the method including:
the target acco

Assignees

• Tencent Tech Shenzhen Co Ltd

Inventors

• Li Maocai
• Wang Zongyou
• Kong Li
• Zhou Kaiban
• Lan Hu
• Shi Yifang
• Yang Changqing
• Zhang Jinsong
• Ding Yong
• Zhu Gengliang
• Liu Qucheng
• Chen Qiuping

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/0825

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/12

  Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32) · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title