Abstract: Embodiments of this application provide a blockchain-based data processing method, a device, and a medium. The method includes: sending a first channel closing message on a chain-off channel; receiving a second signature in a second state and a second channel closing message that are sent on the off-chain channel, where the second signature is obtained by signing the second channel closing message; and signing a third channel closing message to obtain a first signature in the second state, and sending the first signature. This application can ensure transaction security and improve a transaction processing capability.

Abstract: A method and an apparatus for controlling a data access right are disclosed. The method includes: receiving, by a first proxy node, a first request message from a request node, where the first request message includes an identity of the request node and an identifier of to-be-accessed data; determining a first encrypted ciphertext on a blockchain based on the identifier; determining, based on the identity, whether the request node has a right to read the first encrypted ciphertext; and if yes, initiating a right verification request for the request node to at least one second proxy node, and determining, based on a feedback result of the at least one second proxy node, provisioning of the first encrypted ciphertext. A proxy node is added to the blockchain network, so that a data source can freely grant or revoke the right of the request node without modifying a ciphertext, ensuring information security.

Abstract: A method and an apparatus for controlling a data access right are disclosed. The method includes: receiving, by a first proxy node, a first request message from a request node, where the first request message includes an identity of the request node and an identifier of to-be-accessed data; determining a first encrypted ciphertext on a blockchain based on the identifier; determining, based on the identity, whether the request node has a right to read the first encrypted ciphertext; and if yes, initiating a right verification request for the request node to at least one second proxy node, and determining, based on a feedback result of the at least one second proxy node, provisioning of the first encrypted ciphertext. A proxy node is added to the blockchain network, so that a data source can freely grant or revoke the right of the request node without modifying a ciphertext, ensuring information security.

Abstract: A method and an apparatus for controlling a data access right are disclosed. The method includes: receiving, by a first proxy node, a first request message from a request node, where the first request message includes an identity of the request node and an identifier of to-be-accessed data; determining a first encrypted ciphertext on a blockchain based on the identifier; determining, based on the identity, whether the request node has a right to read the first encrypted ciphertext; and if yes, initiating a right verification request for the request node to at least one second proxy node, and determining, based on a feedback result of the at least one second proxy node, provisioning of the first encrypted ciphertext. A proxy node is added to the blockchain network, so that a data source can freely grant or revoke the right of the request node without modifying a ciphertext, ensuring information security.

Abstract: Embodiments of this application provide a blockchain-based data processing method, a device, and a medium. The method includes: sending a first channel closing message on a chain-off channel; receiving a second signature in a second state and a second channel closing message that are sent on the off-chain channel, where the second signature is obtained by signing the second channel closing message; and signing a third channel closing message to obtain a first signature in the second state, and sending the first signature. This application can ensure transaction security and improve a transaction processing capability.

Abstract: Embodiments relate to a wireless communication device of a group of wireless communication devices configured to communicate with a base station, the wireless communication device comprising a transceiver configured to receive a token from the base station and a processor configured to generate a first data structure on the basis of a function of the token and of a key ki of the wireless communication device and a second data structure comprising an identity idi of the wireless communication device, wherein the transceiver is further configured to broadcast the first data structure and the second data structure to the group of wireless communication devices and the base station.

Abstract: A method and an apparatus for controlling a data access right are disclosed. The method includes: receiving, by a first proxy node, a first request message from a request node, where the first request message includes an identity of the request node and an identifier of to-be-accessed data; determining a first encrypted ciphertext on a blockchain based on the identifier; determining, based on the identity, whether the request node has a right to read the first encrypted ciphertext; and if yes, initiating a right verification request for the request node to at least one second proxy node, and determining, based on a feedback result of the at least one second proxy node, provisioning of the first encrypted ciphertext. A proxy node is added to the blockchain network, so that a data source can freely grant or revoke the right of the request node without modifying a ciphertext, ensuring information security.

Abstract: A data processing method and apparatus include: generating, by a terminal device, a first public key and a first private key; sending the first public key to a key generation center (KGC), where the first public key is used by the KGC or a server to generate a transform key, and the transform key is used by the server to transform data that is encrypted based on an attribute structure of the terminal device into data that is encrypted based on the first public key; receiving second data sent by the server, where the second data is data that is generated after the server processes first data according to the transform key; and decrypting the second data according to the first private key. In the data processing, main work is completed by the server with no need to use a secure channel to transmit a key.

Abstract: Embodiments relate to a wireless communication device of a group of wireless communication devices configured to communicate with a base station, the wireless communication device comprising a transceiver configured to receive a token from the base station and a processor configured to generate a first data structure on the basis of a function of the token and of a key ki of the wireless communication device and a second data structure comprising an identity idi of the wireless communication device, wherein the transceiver is further configured to broadcast the first data structure and the second data structure to the group of wireless communication devices and the base station.

Abstract: Embodiments relate to a wireless communication device of a group of wireless communication devices configured to communicate with a base station, the wireless communication device comprising a transceiver configured to receive a token from the base station and a processor configured to generate a first data structure on the basis of a function of the token and of a key ki of the wireless communication device and a second data structure comprising an identity idi of the wireless communication device, wherein the transceiver is further configured to broadcast the first data structure and the second data structure to the group of wireless communication devices and the base station.

Abstract: A system and method for obfuscating data includes random numbers generated by applying a one-way compression function to auxiliary inputs which may at least include a secret key and a data partner identifier. For each row of data to be obfuscated, the following is performed: a plurality of data blocks is constructed from the each row of data to be obfuscated, wherein the number (n) of the data blocks is predetermined; a dot product is generated which is obtained by: generating a plurality of products by multiplying each of the plurality of data blocks with an exclusive one of the plurality of random numbers and summing the plurality of products; and an obfuscated form of the each row of data to be obfuscated is generated by determining a remainder of a modulo operation which is performed using the dot product as dividend and a predetermined integer value as divisor.

Abstract: A data processing method and apparatus include: generating, by a terminal device, a first public key and a first private key; sending the first public key to a key generation center (KGC), where the first public key is used by the KGC or a server to generate a transform key, and the transform key is used by the server to transform data that is encrypted based on an attribute structure of the terminal device into data that is encrypted based on the first public key; receiving second data sent by the server, where the second data is data that is generated after the server processes first data according to the transform key; and decrypting the second data according to the first private key. In the data processing, main work is completed by the server with no need to use a secure channel to transmit a key.

Abstract: A system and method for searching a symmetrically encrypted database for conjunctive keywords is provided. More particularly, the system and method provides means for searching a symmetrically encrypted database for conjunctive keywords by utilizing an encrypted index table and a Bloom filter. The encrypted index table contains encrypted keywords and their associated index pairs while the Bloom filter contains elements that represent encrypted identity-keyword pairs of the database.

Abstract: A system and method for obfuscating data includes random numbers generated by applying a one-way compression function to auxiliary inputs which may at least include a secret key and a data partner identifier. For each row of data to be obfuscated, the following is performed: a plurality of data blocks is constructed from the each row of data to be obfuscated, wherein the number (n) of the data blocks is predetermined; a dot product is generated which is obtained by: generating a plurality of products by multiplying each of the plurality of data blocks with an exclusive one of the plurality of random numbers and summing the plurality of products; and an obfuscated form of the each row of data to be obfuscated is generated by determining a remainder of a modulo operation which is performed using the dot product as dividend and a predetermined integer value as divisor.

Abstract: A system and method for searching a symmetrically encrypted database for conjunctive keywords is provided. More particularly, the system and method provides means for searching a symmetrically encrypted database for conjunctive keywords by utilizing an encrypted index table and a Bloom filter. The encrypted index table contains encrypted keywords and their associated index pairs while the Bloom filter contains elements that represent encrypted identity-keyword pairs of the database.