Data privacy protection method and system based on block chain and authority contract

Abstract

The invention discloses a data privacy protection method and system based on a block chain and an permission contract, and relates to the technical field of block chains. The method comprises the following steps of: 1) storing encrypted private data on a block chain to form a private data directory; 2) querying required data, and proposing a data use application to an owner through a private data application contract; 3) after obtaining the application, enabling the owner to authorize the use permission of the data to the user or reject the application through the authorization smart contract, and record the authorization information behavior on the block chain. 4) when a private data access request of the user is obtained, judging whether the user has the access authority or not through the authorization code and the access rule. and 5) after the privilege control contract verification is passed, decrypting the privacy data to obtain the original data, encrypting the original data by using the public key of the requester, and returning the encrypted privacy data. According to the method and system, the security of the privacy data can be remarkably improved, and the ownership of the privacy data can be ensured to facilitate sharing of the privacy data.

Description

technical field [0001] The invention belongs to the technical field of block chains, and in particular relates to a method and system for data privacy protection based on block chains and authority contracts. Background technique [0002] At present, blockchain-based privacy data-related contracts are becoming more and more abundant, and more and more privacy data-related contracts need to introduce authority control. If there is no permission control for smart contracts, the security requirements for private data cannot be met. In the privacy data query scenario, if the privacy data query function does not correctly set the permission interception logic, the whole set of logic will be easily manipulated by the attacker, and the privacy data will not be able to play a protective role. In addition, the security of private data is protected, but the sharing of private data is extremely inconvenient. Users cannot obtain private data information in a timely manner, and cannot u...

AI Technical Summary

Problems solved by technology

If there is no permission control for smart contracts, the security requirements for private data cannot be met

In the privacy data query scenario, if the privacy data query function does not correctly set the permission interception logic, the whole set of logic will be easily manipulated by the attacker, and the privacy data will not be able to play a protective role

In addition, the security of private data is protected, but the sharing of private data is extremely inconvenient. Users cannot obtain private data information in a timely manner, and cannot maximize the value of data.

Images