METHOD, APPARATUS, AND SYSTEM FOR SERVICE DATA PROCESSING AND VERIFICATION

• US 20190311116A1
• Filed: 06/05/2019
• Published: 10/10/2019
• Est. Priority Date: 12/06/2016
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: Li, Yi
• Granted Patent: US 10,789,356 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Techniques for detecting data tampering are described. One example method includes identifying particular data associated with a service system; generating fingerprint data as a result of executing a fingerprint function on the particular data; storing the fingerprint data in a blockchain maintained by a blockchain network; storing the particular data in a storage device in the service system; after storing the fingerprint data to the blockchain and storing the particular data in the storage device: identifying a request to verify that the particular data stored in the storage device has not been modified since it was stored; generating verification fingerprint data as a result of executing the fingerprint function on the particular data stored in the storage device; determining that the verification fingerprint data matches the fingerprint data stored; and in response, determining that the particular data stored in the storage device has not been modified since it was stored.

Claims

1. A computer-implemented method for detecting data tampering, comprising:

identifying particular data associated with performance of a service by a service system;

generating fingerprint data as a result of executing a fingerprint function on the particular data, wherein the fingerprint function is configured to always produce the fingerprint data when executed on the particular data, and wherein the fingerprint function is configured to always produce different fingerprint data when executed on data different from the particular data;

storing the fingerprint data in a blockchain maintained by a blockchain network;

storing the particular data in a storage device in the service system;

after storing the fingerprint data to the blockchain and storing the particular data in the storage device;

generating verification fingerprint data as a result of executing the fingerprint function on the particular data stored in the storage device;

determining that the verification fingerprint data matches the fingerprint data stored in the blockchain; and

in response to determining that the verification fingerprint data matches, determining that the particular data stored in the storage device has not been modified since it was stored.

2. The computer-implemented method of claim 1, further comprising:

after identifying the particular data, extracting key element data of a predetermined type from the particular data, wherein the fingerprint function is configured to process the key element data to generate the fingerprint data.

3. The computer-implemented method of claim 1, wherein the fingerprint function is configured to be unidirectional and irreversible.

4. The computer-implemented method of claim 1, wherein the fingerprint function includes a hash function, and wherein the fingerprint data is a hash value associated with the particular data.

5. The computer-implemented method of claim 4, wherein the hash function is a customized hash function specific to at least one of the service system or a type of the particular data.

6. The computer-implemented method of claim 1, wherein storing the fingerprint data in the blockchain is performed using an asynchronous method.

7. The computer-implemented method of claim 1, wherein the service system is an accounting system, and wherein the particular data is accounting data.

8. The computer-implemented method of claim 1, further comprising:

before generating the verification fingerprint data, identifying a request to verify that the particular data stored in the storage device has not been modified since it was stored.

9. The computer-implemented method of claim 8, wherein the particular data is first data, the request is a first request, the verification fingerprint data is first verification fingerprint data, the fingerprint data is first fingerprint data, the method further comprising:

identifying a second request to verify that second data stored in the storage device has not been modified since it was stored;

generating second verification fingerprint data as a result of executing the fingerprint function on the second data stored in the storage device;

determining that the second verification fingerprint data does not match second fingerprint data stored in the blockchain and associated with second data; and

in response to determining that the second verification fingerprint data does not match, determining that the second data stored in the storage device has been modified since it was stored.

10. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

identifying particular data associated with performance of a service by a service system;

generating fingerprint data as a result of executing a fingerprint function on the particular data, wherein the fingerprint function is configured to always produce the fingerprint data when executed on the data to be stored, and wherein the fingerprint function is configured to always produce different fingerprint data when executed on data different from the data to be stored;

storing the fingerprint data in a blockchain maintained by a blockchain network;

storing the particular data in a storage device in the service system;

after storing the fingerprint data to the blockchain and storing the particular data in the storage device;

generating verification fingerprint data as a result of executing the fingerprint function on the particular data stored in the storage device;

determining that the verification fingerprint data matches the fingerprint data stored in the blockchain; and

in response to determining that the verification fingerprint data matches, determining that the particular data stored in the storage device has not been modified since it was stored.

11. The non-transitory, computer-readable medium of claim 10, the operations further comprising:

after identifying the particular data, extracting key element data of a predetermined type from the particular data, wherein the fingerprint function is configured to process the key element data to generate the fingerprint data.

12. The non-transitory, computer-readable medium of claim 10, wherein the fingerprint function is configured to be unidirectional and irreversible.

13. The non-transitory, computer-readable medium of claim 10, wherein the fingerprint function includes a hash function, and wherein the fingerprint data is a hash value associated with the particular data.

14. The non-transitory, computer-readable medium of claim 13, wherein the hash function is a customized hash function specific to at least one of the service system or a type of the particular data.

15. The non-transitory, computer-readable medium of claim 10, wherein storing the fingerprint data in the blockchain is performed using an asynchronous method.

16. The non-transitory, computer-readable medium of claim 10, wherein the service system is an accounting system, and wherein the particular data is accounting data.

17. The non-transitory, computer-readable medium of claim 10, the operations further comprising:

before generating the verification fingerprint data, identifying a request to verify that the particular data stored in the storage device has not been modified since it was stored.

18. The non-transitory, computer-readable medium of claim 17, wherein the particular data is first data, the request is a first request, the verification fingerprint data is first verification fingerprint data, the fingerprint data is first fingerprint data, the operations further comprising:

identifying a second request to verify that second data stored in the storage device has not been modified since it was stored;

generating second verification fingerprint data as a result of executing the fingerprint function on the second data stored in the storage device;

determining that the second verification fingerprint data does not match second fingerprint data stored in the blockchain and associated with second data; and

in response to determining that the second verification fingerprint data does not match, determining that the second data stored in the storage device has been modified since it was stored.

19. A computer-implemented system, comprising:

one or more computers; and

one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising;

identifying particular data associated with performance of a service by a service system;

generating fingerprint data as a result of executing a fingerprint function on the particular data, wherein the fingerprint function is configured to always produce the fingerprint data when executed on the data to be stored, and wherein the fingerprint function is configured to always produce different fingerprint data when executed on data different from the data to be stored;

storing the fingerprint data in a blockchain maintained by a blockchain network;

storing the particular data in a storage device in the service system;

after storing the fingerprint data to the blockchain and storing the particular data in the storage device;

generating verification fingerprint data as a result of executing the fingerprint function on the particular data stored in the storage device;

determining that the verification fingerprint data matches the fingerprint data stored in the blockchain; and

in response to determining that the verification fingerprint data matches, determining that the particular data stored in the storage device has not been modified since it was stored.

20. The non-transitory, computer-readable system of claim 19, the operations further comprising:

after identifying the particular data, extracting key element data of a predetermined type from the particular data, wherein the fingerprint function is configured to process the key element data to generate the fingerprint data.