Digital forensic method based on blockchain privacy protection and fine-grained access control

Abstract

The invention discloses a digital forensic method based on blockchain privacy protection and fine-grained access control, comprising the following steps: a first supervisor creates a digital forensictransaction, initiates a digital forensic transaction request to a second supervisor, and transmits important information of the digital forensic transaction to the second supervisor; the second supervisor generates an attribute encryption intermediate parameter through an encryption module, and authorizes and publishes the attribute encryption intermediate parameter in the blockchain; after obtaining authorization, the first supervisor obtains the fragmentation secret key from the secret key management mechanism module through authorization information and combines the fragmentation secret key to generate a decryption secret key, and the data collection module collects data in the storage system through the decryption secret key; the first supervisor analyzes the data after acquiring thedata to obtain a data analysis result; an evidence obtaining digital report is generated, and evidence obtaining is completed; according to the invention, the potential of the block chain and the intelligent contract is utilized, and the encryption primitive is designed to construct the Internet of Vehicles digital evidence obtaining scheme based on the block chain, and the scheme has auditability, privacy protection and fine-grained data access control.

Description

technical field [0001] The invention relates to the research field of cyberspace security, in particular to a digital evidence collection method based on block chain privacy protection and fine-grained access control. Background technique [0002] With the continuous increase of vehicle sensors, control units and communication methods such as electronic control unit (ECU), Bluetooth and Wi-Fi, the function of the vehicle has been greatly enhanced. According to Ford Motor Company, modern cars have about 50-70 computers, making them a great source of digital data (e.g. where tires are open, pumps and lights on / off). These rich sensing and operating data make vehicles smarter and smarter, which will effectively promote the prosperity of the autonomous driving industry in the near future. But since everything has two sides, more and more smart vehicles also bring us a lot of safety concerns. Using vehicles as weapons to carry out terrorist attacks is not uncommon and it has ca...

AI Technical Summary

Problems solved by technology

But it also raises a burning question: If a self-driving car is involved in a fatal crash, who is to blame, the driver who developed the self-driving algorithm, or the automaker? In the latter case, the manufacturer could be sued for unprecedented sums, saving lives, and eventually going out of business

However, conducting a vehicle forensics investigation (VDF) is not easy due to multiple security issues

In fact, there are many security and privacy issues that lead to adverse effects on VDF implementation: 1) a malicious external attacker may leak the details of the credentials to a suspicious person, which will tell the suspicious person to temporarily abandon the attack; 2) law enforcement agencies May abuse the power in their hands to obtain more data irrelevant to this forensics, or even tamper with the collected evidence; 3) There may be malicious insiders in the data source, who provide law enforcement with modified historical data, or claim that historical Data has been lost, which violates the Digital chain of custody

In addition to this, there are other issues that are detrimental to the program of standardizing VDF

Specifically, as vehicles become smarter and more complex than ever before, law enforcement agencies struggle to access forensic data due to a lack of specialized tools and instead turn to the commercial community for technical support

However, the threat of privacy leakage will be brought in the process

Images