Providing data authorization based on blockchain

1. A blockchain-based data authorization method, comprising:

receiving, by a blockchain node, a data acquisition transaction submitted by a data user for obtaining target data possessed by a data owner;

transmitting, by the blockchain node, the data acquisition transaction to a second blockchain node based on a blockchain consensus process;

determining, by the blockchain node, that the data user has obtained authorization of the target data;

executing, by the blockchain node, a smart contract invoked by the data acquisition transaction to provide one or more of the target data and a computational result of one or more predetermined computational operations performed based on the target data to the data user;

providing, by the blockchain node and based at least on the blockchain node and the second blockchain node executing the smart contract, the target data and the computational result to the data user, wherein a transaction execution result event based on the target data and the computational result are written in a transaction log by the smart contract, and wherein the transaction log is monitored and available to be acquired by the data user;

encrypting, by the blockchain node, the target data in a trusted execution environment (TEE) to obtain encrypted target data; and

storing, by the blockchain node, the encrypted target data to a database associated with the blockchain node;

wherein the executing the smart contract is performed in the TEE after reading the encrypted target data into the TEE and decrypting the encrypted target data,

wherein the smart contract is executed to provide the target data to the data user if the target data has low data privacy level, and the smart contract is executed to provide the computational result of the one or more predetermined computational operations if the target data has high data privacy level.

2. The method according to claim 1 , wherein the smart contract comprises a list of authorized users including the data user and the determining that the data user has obtained authorization of the target data is performed based on the list of authorized users.

3. The method according to claim 1 , further comprising:

invoking, by the blockchain node, a request interface defined in the smart contract based on an authorization request transaction submitted by the data user to cause the smart contract to write an authorization request event into the transaction log of the data owner; and

invoking, by the blockchain node, an authorization interface defined in the smart contract based on an authorization confirmation transaction submitted by the data owner to cause the smart contract to mark the data user as an authorized user.

4. The method according to claim 1 , wherein one or more operation rules of the one or more predetermined computational operations are predefined in the smart contract or are transferred into the smart contract through the data acquisition transaction.

5. The method according to claim 1 , wherein providing, by the blockchain node and based on, at least, the blockchain node and the second blockchain node executing the smart contract, the target data and the computational result to the data user comprises:

encrypting the target data and the computational result; and

storing the encrypted target data and the encrypted computational result within the transaction execution result event in the transaction log, wherein the encrypted target data and the encrypted computational result are configured to enable the data user to decrypt the encrypted target data and the encrypted computational result to obtain the target data and the computational result.

6. The method according to claim 1 , wherein the data acquisition transaction is a cyphertext of a privacy depository transaction, and executing the smart contract further comprises:

decrypting, by the blockchain node the cyphertext in the TEE to obtain the target data.

7. The method according to claim 1 , wherein the blockchain node stores a digital digest of the target data, the target data is stored by the data owner in a storage media other than a blockchain, and is retrieved by another smart contract from the storage media and transferred to the smart contract to perform the one or more predetermined computational operations.

8. A computer-implemented system, comprising:

one or more computers, and

one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform operations comprising:

receiving, by a blockchain node, a data acquisition transaction submitted by a data user for obtaining target data possessed by a data owner;

transmitting, by the blockchain node, the data acquisition transaction to a second blockchain node based on a blockchain consensus process;

determining, by the blockchain node, that the data user has obtained authorization of the target data;

executing, by the blockchain node, a smart contract invoked by the data acquisition transaction to provide one or more of the target data and a computational result of one or more predetermined computational operations performed based on the target data to the data user;

providing, by the blockchain node and based at least on the blockchain node and the second blockchain node executing the smart contract, the target data and the computational result to the data user, wherein a transaction execution result event based on the target data and the computational result are written in a transaction log by the smart contract, and wherein the transaction log is monitored and available to be acquired by the data user;

encrypting, by the blockchain node, the target data in a trusted execution environment (TEE) to obtain encrypted target data; and

storing, by the blockchain node, the encrypted target data to a database associated with the blockchain node;

wherein the executing the smart contract is performed in the TEE after reading the encrypted target data into the TEE and decrypting the encrypted target data,

wherein the smart contract is executed to provide the target data to the data user if the target data has low data privacy level, and the smart contract is executed to provide the computational result of the one or more predetermined computational operations if the target data has high data privacy level.

9. The computer-implemented system according to claim 8 , wherein the smart contract comprises a list of authorized users including the data user and the determining that the data user has obtained authorization of the target data is performed based on the list of authorized users.

10. The computer-implemented system according to claim 8 , further comprising:

invoking, by the blockchain node, a request interface defined in the smart contract based on an authorization request transaction submitted by the data user to cause the smart contract to write an authorization request event into the transaction log of the data owner; and

invoking, by the blockchain node, an authorization interface defined in the smart contract based on an authorization confirmation transaction submitted by the data owner to cause the smart contract to mark the data user as an authorized user.

11. The computer-implemented system according to claim 8 , wherein one or more operation rules of the one or more predetermined computational operations are predefined in the smart contract or are transferred into the smart contract through the data acquisition transaction.

12. The computer-implemented system according to claim 8 , wherein providing, by the blockchain node and based on, at least, the blockchain node and the second blockchain node executing the smart contract, the target data and the computational result to the data user comprises:

encrypting the target data and the computational result; and

storing the encrypted target data and the encrypted computational result within the transaction execution result event in the transaction log, wherein the encrypted target data and the encrypted computational result are configured to enable the data user to decrypt the encrypted target data and the encrypted computational result to obtain the target data and the computational result.

13. The computer-implemented system according to claim 8 , wherein the data acquisition transaction is a cyphertext of a privacy depository transaction, and executing the smart contract further comprises:

decrypting, by the blockchain node the cyphertext in the TEE to obtain the target data.

14. The computer-implemented system according to claim 8 , wherein the blockchain node stores a digital digest of the target data, the target data is stored by the data owner in a storage media other than a blockchain, and is retrieved by another smart contract from the storage media and transferred to the smart contract to perform the one or more predetermined computational operations.

15. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

receiving, by a blockchain node, a data acquisition transaction submitted by a data user for obtaining target data possessed by a data owner;

transmitting, by the blockchain node, the data acquisition transaction to a second blockchain node based on a blockchain consensus process;

determining, by the blockchain node, that the data user has obtained authorization of the target data;

executing, by the blockchain node, a smart contract invoked by the data acquisition transaction to provide one or more of the target data and a computational result of one or more predetermined computational operations performed based on the target data to the data user;

providing, by the blockchain node and based at least on the blockchain node and the second blockchain node executing the smart contract, the target data and the computational result to the data user, wherein a transaction execution result event based on the target data and the computational result are written in a transaction log by the smart contract, and wherein the transaction log is monitored and available to be acquired by the data user;

encrypting, by the blockchain node, the target data in a trusted execution environment (TEE) to obtain encrypted target data; and

storing, by the blockchain node, the encrypted target data to a database associated with the blockchain node;

wherein the executing the smart contract is performed in the TEE after reading the encrypted target data into the TEE and decrypting the encrypted target data,

wherein the smart contract is executed to provide the target data to the data user if the target data has low data privacy level, and the smart contract is executed to provide the computational result of the one or more predetermined computational operations if the target data has high data privacy level.

16. The non-transitory, computer-readable medium of claim 15 , wherein the smart contract comprises a list of authorized users including the data user and the determining that the data user has obtained authorization of the target data is performed based on the list of authorized users.