Method, apparatus, and electronic device for blockchain-based recordkeeping

1. A method for blockchain-based recordkeeping, implementable by a terminal device, the method comprising:

storing a first signature in a secure operation environment of the terminal device, wherein the first signature comprises device authentication information signed based on a first private key associated with a manufacturer of the terminal device;

obtaining target data, wherein the target data comprises video data;

computing a data digest of the target data;

extracting a key segment from the target data comprises:

detecting an abnormal event in the video data; and

in response to the abnormal event being detected:

extracting a video segment corresponding to an occurrence period of the abnormal event as the key segment;

verifying the first signature of the device authentication information based on a first public key corresponding to the first private key associated with the manufacturer of the terminal device;

in response to verifying the first signature:

determining that the terminal device is a valid terminal device; and

signing, in the secure operation environment of the terminal device, the data digest and/or the key segment based on a second private key associated with the terminal device to generate a second signature; and

submitting to a blockchain the data digest, the key segment, and the second signature, for one or more nodes in the blockchain to verify the second signature based on a second public key corresponding to the second private key associated with the terminal device, and to record the data digest and the key segment in the blockchain in response to the second signature being verified to be valid.

2. The method according to claim 1 , wherein the second private key associated with the terminal device is stored in the secure operation environment.

3. The method according to claim 1 , wherein signing, in the secure operation environment of the terminal device, the data digest and/or the key segment based on the second private key associated with the terminal device to generate the second signature comprises:

signing, in the secure operation environment of the terminal device, the data digest and the key segment as a whole based on the second private key associated with the terminal device to generate the second signature.

4. The method according to claim 1 , wherein signing, in the secure operation environment of the terminal device, the data digest and/or the key segment based on the second private key associated with the terminal device to generate the second signature comprises:

signing, in the secure operation environment of the terminal device, the data digest based on the second private key associated with the terminal device to generate the second signature.

5. The method according to claim 1 , wherein the target data comprises audio data; and

extracting the key segment from the target data comprises:

detecting a preset keyword in the audio data, and

in response to the preset keyword being detected, extracting an audio segment of a preset length comprising the preset keyword as the key segment.

6. The method according to claim 1 , wherein signing, in the secure operation environment of the terminal device, the data digest and/or the key segment based on the second private key associated with the terminal device to generate the second signature comprises:

obtaining identity information of a user using the terminal device;

authenticating the identity of the user based on the obtained identity information; and

signing, in the secure operation environment of the terminal device, the data digest and/or the key segment based on the second private key associated with the terminal device to generate the second signature in response to the identity of the user being authenticated as valid.

7. The method according to claim 1 , wherein the method further comprises:

obtaining identity information of a user using the terminal device in response to the user using the terminal device for the first time;

authenticating the identity of the user based on the obtained identity information;

invoking a key generating algorithm to generate the second private key associated with the terminal device and the second public key corresponding to the second private key associated with the terminal device in response to the identity of the user being authenticated as valid, wherein a key generating algorithm is stored in the secure operation environment of the terminal device; and

associating the generated second private key with the identity information of the user, and storing the generated second private key associated with the identity information of the user in the secure operation environment.

8. The method according to claim 7 , wherein signing, in the secure operation environment of the terminal device, the data digest and/or the key segment based on the second private key associated with the terminal device to generate the second signature comprises:

obtaining identity information of a user using the terminal device;

determining whether the second private key associated with the identity information is stored in the secure operation environment included in the terminal device; and

signing, in the secure operation environment included in the terminal device, the data digest and/or the key segment based on the second private key associated with the identity information in response to the second private key associated with the identity information being stored in the secure operation environment included in the terminal device.

9. The method according to claim 1 , wherein the terminal device comprises a body-worn camera or an event data recorder.

10. The method according to claim 1 , wherein the target data comprises video data, audio data, or image data, or a combination thereof.

11. An apparatus for blockchain-based recordkeeping, included in a terminal device, the apparatus comprising:

one or more processors and one or more non-transitory computer-readable memories coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the apparatus to perform operations comprising:

storing a first signature in a secure operation environment of the terminal device, wherein the first signature comprises device authentication information signed based on a first private key associated with a manufacturer of the terminal device;

obtaining target data, wherein the target data comprises video data;

computing a data digest of the target data;

extracting a key segment from the target data comprises:

detecting an abnormal event in the video data; and

in response to the abnormal event being detected:

extracting a video segment corresponding to an occurrence period of the abnormal event as the key segment;

verifying the first signature of the device authentication information based on a first public key corresponding to the first private key associated with the manufacturer of the terminal device;

in response to verifying the first signature;

determining that the terminal device is a valid terminal device, and

signing, in the secure operation environment of the terminal device, the data digest and/or the key segment based on a second private key associated with the terminal device to generate a second signature; and

submitting to a blockchain the data digest, the key segment, and the signature, for one or more nodes in the blockchain to verify the signature based on a second public key corresponding to the second private key associated with the terminal device, and to record the data digest and the key segment in the blockchain in response to the second signature being verified to be valid.

12. The apparatus according to claim 11 , wherein the second private key associated with the terminal device is stored in the secure operation environment.

13. The apparatus according to claim 11 , wherein signing, in the secure operation environment of the terminal device, the data digest and/or the key segment based on the second private key associated with the terminal device to generate the second signature comprises:

signing, in the secure operation environment of the terminal device, the data digest and the key segment as a whole based on the second private key associated with the terminal device to generate the second signature.

14. The apparatus according to claim 11 , wherein signing, in the secure operation environment of the terminal device, the data digest and/or the key segment based on the second private key associated with the terminal device to generate the second signature comprises:

signing, in the secure operation environment of the terminal device, the data digest based on the second private key associated with the terminal device to generate the second signature.

15. The apparatus according to claim 11 , wherein the target data comprises audio data; and

extracting the key segment from the target data comprises:

detecting a preset keyword in the audio data, and

in response to the preset keyword being detected, extracting an audio segment of a preset length comprising the preset keyword as the key segment.

16. A non-transitory computer-readable storage medium, included in a terminal device and configured with instructions executable by one or more processors of the terminal device to cause the one or more processors to perform operations comprising:

storing a first signature in a secure operation environment of the terminal device, wherein the first signature comprises device authentication information signed based on a first private key associated with a manufacturer of the terminal device;

obtaining target data, wherein the target data comprises video data;

computing a data digest of the target data;

extracting a key segment from the target data comprises:

detecting an abnormal event in the video data; and

in response to the abnormal event being detected:

extracting a video segment corresponding to an occurrence period of the abnormal event as the key segment;

verifying the first signature of the device authentication information based on a first public key corresponding to the first private key associated with the manufacturer of the terminal device;

in response to verifying the first signature;

determining that the terminal device is a valid terminal device, and

signing, in a secure operation environment included in the terminal device, the data digest and/or the key segment based on a private key associated with the terminal device to generate a second signature; and

submitting to a blockchain the data digest, the key segment, and the second signature, for one or more nodes in the blockchain to verify the second signature based on a second public key corresponding to the second private key associated with the terminal device, and to record the data digest and the key segment in the blockchain in response to the second signature being verified to be valid.