Patent ID: 11972414
Assignee: ALIPAY (HANGZHOU) INFORMATION TECHNOLOGY CO., LTD.
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 12:
13. A computer-implemented system, comprising:
one or more computers; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
receiving, at a service processor, an access request from a data user to access target data;
obtaining, at the service processor, the target data from a data owner, wherein the service processor has permission to obtain the target data from the data owner;
generating, at the service processor, a blockchain transaction that executes an operation of recording the target data in a blockchain in response to determining that the target data is requested by the access request, the blockchain transaction comprising an original form of the target data;
transmitting, from the service processor, the blockchain transaction to a blockchain node, included in the blockchain, that stores the blockchain transaction in the blockchain when a transaction consensus is reached on the blockchain transaction, wherein the blockchain stores blockchain transactions that are associated with data responsive to an access to the data requested by a respective data user;
receiving, at the service processor, index information for the blockchain transaction from the blockchain node;
receiving verifiable authorization information transmitted by the data user;
determining whether the verifiable authorization information i) is signed by the data owner using a private key of the data owner, ii) contains identification information of the target data, and iii) is received from the data user who initiates the access request,
wherein determining that the verifiable authorization information is received from the data user comprises:
transmitting a random character to the data user,
receiving a signed random character from the data user, and
determining that the signed random character is signed with a private key of the data user; and

in response to determining that the verifiable authorization information i) is signed by the data owner using the private key of the data owner, ii) contains the identification information of the target data, and iii) is received from the data user who initiates the access request, sending, from the service processor, the target data or the index information to the data user.