Technical database sharing and verification matching system and method based on block chain technology

Abstract

The invention relates to the technical field of data sharing, and discloses a technical database sharing and verification matching system and method based on a block chain technology, and the method comprises the steps: determining shared data according to data contents and metadata records in a technical database; after the shared data is encrypted, setting a query verification mode and a query index of the encrypted shared data to determine a sharing rule of the shared data; according to the sharing rule, identifying an identity type of the data sharing request, and extracting identity verification data of the identity type to set a permission verification mechanism; setting a decryption interval of the shared data by using a permission verification mechanism and a digital signature extracted from the identity verification data; decrypted data is extracted from the decryption interval to be matched with the data sharing request, and a sharing verification result of the technical database is analyzed according to a matching result; according to the invention, the security of data sharing can be ensured, and the trust degree between the data provider and the data requester is improved.

Description

Technical Field

[0001] The present invention relates to the field of data sharing technology, and in particular to a technology database sharing and verification matching system and method based on blockchain technology. Background Art

[0002] Technical database sharing and verification matching refers to the process of sharing data resources between different users, systems or organizations and ensuring the accuracy and consistency of the data so that it can be used correctly at the receiving end. The use of technical database sharing and verification matching can achieve effective sharing and utilization of data while protecting data privacy and security. With the rapid development of information technology and the explosive growth of global data volume, all walks of life have accumulated massive data resources. In order to improve the utilization efficiency of data resources, it is necessary to effectively store, manage and utilize these data.

[0003] Traditional technical database sharing and verification matching mainly achieves the utilization and management of database resources through centralized storage systems and manual verification of data accuracy. However, this method is prone to the risk of data leakage or loss, resulting in a low level of trust between data providers and data requesters. Summary of the invention

[0004] In order to solve the above problems, the present invention provides a technology database sharing and verification matching system and method based on blockchain technology, which can ensure the security of data sharing and improve the level of trust between data providers and data requesters.

[0005] In a first aspect, the present invention provides a technology database sharing and verification matching method based on blockchain technology, comprising:

[0006] Acquire a technology database to be shared, identify data content in the technology database, perform hash processing on the data content to generate hash data, collect metadata records of the technology database, and determine shared data of the technology database based on the hash data and the metadata records;

[0007] Identify the data type of the shared data, analyze the data sensitivity of the shared data, encrypt the shared data based on the data type and the data sensitivity to obtain encrypted shared data, set a query verification method and a query index for the encrypted shared data, and set a sharing rule for the shared data based on the query verification method and the query index;

[0008] Based on the sharing rule, a data sharing request for the shared data is identified, an identity type corresponding to the data sharing request is analyzed, wherein the identity type includes a data requester and a data provider, identity verification data corresponding to the identity type is extracted, and based on the identity verification data, a permission verification mechanism for the data sharing request is set;

[0009] Extracting the digital signature of the shared data from the identity verification data, setting the access level of the shared data according to the permission verification mechanism, and setting the decryption interval of the shared data based on the digital signature and the access level;

[0010] The decrypted data of the decryption interval is extracted, and the matching degree between the decrypted data and the data sharing request is calculated, and the sharing verification result of the technical database is analyzed according to the matching degree.

[0011] In a possible implementation manner of the first aspect, determining the shared data of the technical database based on the hash data and the metadata record includes:

[0012] Based on the hash data and the metadata record, identifying a data transaction pool of the technical database;

[0013] Extracting transaction data from the data transaction pool and setting a transaction block for the transaction data;

[0014] Calculate the hash value of the transaction data in the transaction block, and set a satisfying condition for the hash value;

[0015] Based on the satisfied conditions, setting a block propagation mode of the transaction data;

[0016] Creating a blockchain copy of the transaction data according to the block propagation method and the transaction block;

[0017] Based on the blockchain copy, shared data of the technical database is determined.

[0018] In a possible implementation manner of the first aspect, identifying the data type of the shared data includes:

[0019] Performing functional division on the shared data to obtain classification functions;

[0020] Based on the classification function, setting the classification code of the shared data;

[0021] Extracting metadata records from the shared data;

[0022] Based on the metadata record and the classification code, a data type of the shared data is identified.

[0023] In a possible implementation manner of the first aspect, analyzing the data sensitivity of the shared data includes:

[0024] Extracting data attributes corresponding to the shared data, and setting sensitivity scores corresponding to the data attributes;

[0025] Setting a hierarchical level of the shared data according to the sensitivity score and the data attribute;

[0026] Based on the hierarchical level, analyzing the potential impact corresponding to the data attribute;

[0027] The data sensitivity of the shared data is analyzed by combining the sensitivity score and the potential impact.

[0028] In a possible implementation manner of the first aspect, encrypting the shared data based on the data type and the data sensitivity to obtain the encrypted shared data includes:

[0029] Analyze applicable scenarios of the shared data based on the data type and the data sensitivity;

[0030] According to the applicable scenario, set the encryption method of the shared data;

[0031] Identify the key management mechanism corresponding to the encryption method;

[0032] Based on the encryption method and the key management mechanism, the shared data is encrypted to obtain encrypted shared data.

[0033] In a possible implementation manner of the first aspect, setting a query index for the encrypted shared data includes:

[0034] Classifying the encrypted shared data to obtain classified data;

[0035] Analyzing the query frequency corresponding to the classified data, and extracting the query field of the classified data according to the query frequency;

[0036] Creating an encrypted index of the query field and identifying a query condition of the query field;

[0037] In the encrypted index, setting a matching answer corresponding to the query condition;

[0038] Setting a verification method for the matching answer;

[0039] A query index for the encrypted shared data is set based on the encryption index and the verification method.

[0040] In a possible implementation manner of the first aspect, setting a sharing rule for the shared data based on the query verification mode and the query index includes:

[0041] Based on the query verification method and the query index, identifying the access group and access content corresponding to the shared data;

[0042] Calculating the information carrying capacity of the access content in the shared data;

[0043] According to the information carrying capacity, setting the access rights of the access group;

[0044] Identifying the identity level of the access group, and setting the permission level of the access permission based on the identity level;

[0045] Defining access conditions for the shared data according to the permission level;

[0046] The sharing rules of the shared data are set in combination with the permission level and the access condition.

[0047] In a possible implementation manner of the first aspect, setting the permission verification mechanism for the data sharing request based on the identity verification data includes:

[0048] extracting original credential information of the data sharing request based on the identity verification data;

[0049] Identify input credentials of the data sharing request and set a number of incorrect attempts to input the credentials;

[0050] Calculate the matching variable between the input credential and the original credential information;

[0051] Based on the matching variable, setting access control permissions for the data sharing request;

[0052] A permission verification mechanism for the data sharing request is set according to the number of error attempts and the access control permission.

[0053] In a possible implementation manner of the first aspect, setting a decryption interval of the shared data based on the digital signature and the access level includes:

[0054] Authentication is performed on the digital signature to obtain an authentication result;

[0055] Determining the scope of authority of the access level according to the identity authentication result;

[0056] Analyzing the permission request for sharing the data in combination with the identity authentication result and the permission scope;

[0057] Setting a decryption key corresponding to the permission request;

[0058] A decryption interval of the shared data is set based on the permission request and the decryption key.

[0059] In a second aspect, the present invention provides a technology database sharing and verification matching system based on blockchain technology, characterized in that the system includes:

[0060] A shared data generation module, used to obtain a technology database to be shared, identify data content in the technology database, perform hash processing on the data content to generate hash data, collect metadata records of the technology database, and determine shared data of the technology database based on the hash data and the metadata records;

[0061] a data encryption module, used to identify the data type of the shared data, analyze the data sensitivity of the shared data, encrypt the shared data based on the data type and the data sensitivity to obtain encrypted shared data, set a query verification method and a query index for the encrypted shared data, and set a sharing rule for the shared data based on the query verification method and the query index;

[0062] A permission verification module, used to identify the data sharing request of the shared data based on the sharing rule, analyze the identity type corresponding to the data sharing request, wherein the identity type includes the data requester and the data provider, extract the identity verification data corresponding to the identity type, and set the permission verification mechanism of the data sharing request based on the identity verification data;

[0063] A data decryption module, used to extract the digital signature of the shared data from the identity verification data, set the access level of the shared data according to the permission verification mechanism, and set the decryption interval of the shared data based on the digital signature and the access level;

[0064] The verification and matching module is used to extract the decrypted data of the decryption interval, calculate the matching degree between the decrypted data and the data sharing request, and analyze the sharing verification result of the technical database according to the matching degree.

[0065] Compared with the prior art, the technical principle and beneficial effects of this solution are:

[0066] The embodiment of the present invention obtains the technical database to be shared and identifies the data content in the technical database, so as to understand the type, structure, value and other information of the data, provide a data source for subsequent data sharing, verification and matching, and improve the efficiency and scalability of data sharing; the embodiment of the present invention sets the sharing rules of the shared data based on the query verification method and the query index, so as to ensure the accurate matching between the query request and the shared data. In the process of data sharing, different data providers and users can exchange and share data in an orderly manner through the sharing rules, break the data silos, promote the circulation and integration of data, and thus mine more data value; the embodiment of the present invention sets the permission verification mechanism of the data sharing request based on the identity verification data, so as to improve the trust inside and outside the system, and users can be sure that the access and use of data are strictly controlled, thereby enhancing their confidence in the system. ; Further, the embodiment of the present invention sets the decryption interval of the shared data based on the digital signature and the access level, which can ensure the confidentiality of the data during transmission and storage, prevent unauthorized access, and limit the way potential attackers obtain sensitive data, thereby improving the security of data sharing and user experience; the embodiment of the present invention extracts the decrypted data of the decryption interval and calculates the matching degree between the decrypted data and the data sharing request, which can verify whether the decryption process is successful and whether the decrypted data is intact, thereby enhancing the security of the data; further, the embodiment of the present invention analyzes the shared verification results of the technical database according to the matching degree, which can quickly respond to the needs of the requester, provide the data required by the requester, improve the efficiency of data sharing, meet the immediate needs of users or systems, and better manage and utilize data resources, thereby improving the trust between the data provider and the requester. Therefore, the technical database sharing and verification matching method based on blockchain technology proposed in the embodiment of the present invention can ensure the security of data sharing and improve the trust between the data provider and the data requester. BRIEF DESCRIPTION OF THE DRAWINGS

[0067] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0068] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0069] Figure 1A flowchart of a technology database sharing and verification matching method based on blockchain technology provided by one embodiment of the present invention;

[0070] Figure 2 A module diagram of a technology database sharing and verification matching system based on blockchain technology provided by one embodiment of the present invention. DETAILED DESCRIPTION

[0071] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0072] The embodiment of the present invention provides a method for sharing and verifying a technical database based on blockchain technology. The execution subject of the method for sharing and verifying a technical database based on blockchain technology includes but is not limited to at least one of the electronic devices such as a server and a terminal that can be configured to execute the method provided by the embodiment of the present invention. In other words, the method for sharing and verifying a technical database based on blockchain technology can be executed by software or hardware installed on a terminal device or a server device, and the software can be a blockchain platform. The server includes but is not limited to: a single server, a server cluster, a cloud server or a cloud server cluster, etc. The server can be an independent server, or it can be a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content distribution networks (CDNs), and big data and artificial intelligence platforms.

[0073] See also Figure 1 FIG. 1 is a flow chart of a method for sharing and verifying a technical database based on blockchain technology according to an embodiment of the present invention. Figure 1 The blockchain-based technical database sharing and verification matching methods described in the paper include:

[0074] S1. Obtain a technical database to be shared, identify the data content in the technical database, perform hash processing on the data content to generate hash data, collect metadata records of the technical database, and determine the shared data of the technical database based on the hash data and the metadata records.

[0075] The embodiment of the present invention obtains the technical database to be shared and identifies the data content in the technical database, so as to understand the type, structure, value and other information of the data, and provide a data source for subsequent data sharing, verification and matching. The technical database refers to a data set used to store and manage technical information, data and knowledge, and the data content refers to specific information or data items in the technical database, such as technical documents.

[0076] Optionally, the data content identification in the technical database can be obtained through a database management system, such as MySQL.

[0077] Furthermore, the embodiments of the present invention can ensure that the data on the blockchain is not tampered with and enhance the integrity of the data by performing hash processing on the data content to generate hash data, and by sharing the hash value of the data, the original data may not be shared, thereby improving the transparency and privacy of the data. The hash data refers to data composed of output values ​​obtained by processing the original data through a hash function.

[0078] Optionally, the hash processing of the data content can be implemented using a hash function, such as SHA-256.

[0079] The embodiment of the present invention can serve as a basis for data sharing by collecting metadata records of the technical database, allowing different users or systems to more easily understand and use data from different technical databases, thereby promoting cross-domain and cross-institutional sharing of data. The metadata record refers to a summary record that describes the data content in the technical database, such as data attributes, data ownership and data status.

[0080] Optionally, the metadata record collection of the technical database can be implemented using a metadata warehouse.

[0081] Furthermore, the embodiments of the present invention can improve the integrity and security of the technical database and improve the efficiency and scalability of data sharing by determining the shared data of the technical database based on the hash data and the metadata record. The shared data refers to various shared data recorded and verified in the blockchain network.

[0082] As an embodiment of the present invention, determining the shared data of the technical database based on the hash data and the metadata record includes: identifying a data transaction pool of the technical database based on the hash data and the metadata record; extracting transaction data in the data transaction pool, and setting a transaction block of the transaction data; calculating a hash value of the transaction data in the transaction block, and setting a satisfaction condition for the hash value; setting a block propagation method for the transaction data based on the satisfaction condition; creating a blockchain copy of the transaction data according to the block propagation method and the transaction block; and determining the shared data of the technical database based on the blockchain copy.

[0083] Among them, the data transaction pool refers to a place for temporarily storing transaction data waiting to be confirmed and included in the block, the transaction data refers to the data waiting to be traded in the data transaction pool, the transaction block refers to a structured data packet that stores and propagates transaction data, the hash value refers to an output value of a fixed length generated by calculating input data of any length through a hash function, the satisfying condition refers to the format requirements that the calculated hash value needs to meet, such as the number of leading zeros of the hash value, the block propagation method refers to a propagation method in which the newly created transaction block is broadcast to all nodes in the entire blockchain network and verified and accepted by each node, and the blockchain copy refers to a data copy of the transaction data stored on each participating node in the blockchain network.

[0084] Optionally, the data transaction pool identification of the technical database based on the hash data and the metadata record can be obtained through the API interface provided by the node software, the transaction block setting of the transaction data can be implemented using client software, such as geth software, the hash value satisfaction condition setting can be obtained through the number of leading zeros of the hash value, the block propagation mode setting of the transaction data based on the satisfaction condition can be implemented using blockchain broadcasting, and the hash value calculation of the transaction data in the transaction block can be obtained through a hash algorithm, such as the MD5 algorithm.

[0085] S2. Identify the data type of the shared data, analyze the data sensitivity of the shared data, encrypt the shared data based on the data type and the data sensitivity to obtain encrypted shared data, set a query verification method and a query index for the encrypted shared data, and set sharing rules for the shared data based on the query verification method and the query index.

[0086] By identifying the data type of the shared data, the embodiment of the present invention can adopt the most appropriate storage format and indexing mechanism for each type of data, thereby improving the retrieval speed and processing efficiency of the shared data. The data type refers to the type or form of data stored and shared in the technical database, such as the blockchain data type.

[0087] As an embodiment of the present invention, the identifying of the data type of the shared data includes: performing functional division on the shared data to obtain a classification function; based on the classification function, setting a classification code for the shared data; extracting metadata records from the shared data; and identifying the data type of the shared data based on the metadata record and the classification code.

[0088] The classification function refers to the ability to classify data according to its characteristics and uses in order to facilitate shared data management, and the classification coding refers to converting the shared data into a specific format coding, such as a binary format of the shared data.

[0089] Optionally, based on the classification function, the classification encoding setting of the shared data can be implemented using a standardized encoding format, such as a JSON format.

[0090] Furthermore, the embodiments of the present invention can evaluate the risks that may be caused by data leakage or improper handling by analyzing the data sensitivity of the shared data, and ensure the implementation of appropriate security controls to ensure the security of shared data. The data sensitivity refers to the confidentiality, importance, and level of risks and impacts that may be caused by leakage or improper handling of the data.

[0091] As an embodiment of the present invention, the analyzing the data sensitivity of the shared data includes: extracting data attributes corresponding to the shared data, and setting sensitivity scores corresponding to the data attributes; setting a hierarchical level of the shared data according to the sensitivity score and the data attributes; based on the hierarchical level, analyzing the potential impact corresponding to the data attributes; and analyzing the data sensitivity of the shared data in combination with the sensitivity score and the potential impact.

[0092] Among them, the data attribute refers to the data content classification contained in the shared data, such as personal identity information, health information and property information; the sensitivity score refers to the quantitative index score of the sensitive information contained in the data classification attribute in the shared data; the hierarchical level refers to the importance level of the shared data set according to the data attributes and sensitivity score; the potential impact refers to the risks and effects brought about by the leakage or sharing of the content corresponding to the importance level of the shared data.

[0093] Optionally, the sensitivity score setting corresponding to the data attribute can be obtained through SAL ib in the Python library, and the potential impact analysis of the shared data based on the hierarchical level can be implemented using the risk assessment results of the data content.

[0094] The embodiment of the present invention encrypts the shared data based on the data type and the data sensitivity to obtain encrypted shared data, which can achieve fine-grained access control, ensure that only users with correct permissions can decrypt and access specific data, and ensure that once the data is encrypted and uploaded to the chain, it cannot be modified, thereby enhancing the trust of all parties. The encrypted shared data refers to the data after encryption processing.

[0095] As an embodiment of the present invention, the shared data is encrypted based on the data type and the data sensitivity to obtain encrypted shared data, including: analyzing applicable scenarios of the shared data based on the data type and the data sensitivity; setting an encryption method for the shared data according to the applicable scenarios; identifying a key management mechanism corresponding to the encryption method; and encrypting the shared data based on the encryption method and the key management mechanism to obtain encrypted shared data.

[0096] Among them, the applicable scenarios refer to the specific purposes of data sharing, such as data transmission, data storage and data verification; the encryption methods refer to the encryption algorithms and technologies used to protect data security; and the key management mechanism refers to the measures used to generate, store, distribute, use and destroy keys.

[0097] Optionally, the applicable scenario analysis of the shared data based on the data type and the data sensitivity can be obtained through data processing requirements of the shared data. According to the applicable scenarios, the encryption method setting of the shared data can be implemented using symmetric encryption, asymmetric encryption and hybrid encryption. The key management mechanism identification corresponding to the encryption method can be obtained through an encryption library, such as OpenSSL.

[0098] Furthermore, the embodiments of the present invention can increase the transparency of shared data, improve the credibility of data, and enhance the trust between participants in the system by setting a query verification method and query index for the encrypted shared data. The query verification method refers to a method used by the system to confirm the accuracy and completeness of the query results after the user submits a query request. The query index refers to a data structure created in the database to speed up data query.

[0099] Optionally, the query verification mode setting of the encrypted shared data can be obtained through a digital signature.

[0100] As an embodiment of the present invention, setting the query index of the encrypted shared data includes: classifying the encrypted shared data to obtain classified data; analyzing the query frequency corresponding to the classified data, and extracting the query field of the classified data according to the query frequency; creating an encrypted index of the query field, and identifying the query condition of the query field; setting the matching answer corresponding to the query condition in the encrypted index; setting the verification method of the matching answer; and setting the query index of the encrypted shared data based on the encrypted index and the verification method.

[0101] Among them, the classified data refers to different types of data obtained after the data classification process, the query frequency refers to the number of times a certain data field or data category is queried, the query field refers to a specific field in the technical database that users often use to perform queries, the encrypted index refers to an index with identity authentication created to improve query efficiency, the query condition refers to the condition set by the user when querying data, the matching answer refers to the data record or result filtered out according to the query condition, and the verification method refers to a method of verifying the authenticity and integrity of the data answer, such as hash verification.

[0102] Optionally, the query frequency analysis corresponding to the classified data can be implemented using a log analysis tool, such as the PRTG Network Monitor tool. Based on the query frequency, the query field extraction of the classified data can be obtained through a query optimizer, the encrypted index creation of the query field can be implemented using an encryption algorithm, the query condition identification of the query field can be defined by a database query language, such as SQL, and the matching answer verification method can be implemented using an authentication token.

[0103] The embodiment of the present invention sets the sharing rules of the shared data based on the query verification method and the query index, thereby ensuring an accurate match between the query request and the shared data. In the process of data sharing, through the sharing rules, different data providers and users can exchange and share data in an orderly manner, breaking down data silos, promoting the circulation and integration of data, and thus mining more data value. The sharing rules refer to regulations and conditions that clearly define how data is shared, accessed and used, such as content usage specification rules.

[0104] As an embodiment of the present invention, the sharing rules of the shared data are set based on the query verification method and the query index, including: identifying the access group and access content corresponding to the shared data based on the query verification method and the query index; calculating the information carrying capacity of the access content in the shared data; setting the access rights of the access group according to the information carrying capacity; identifying the identity level of the access group, and setting the permission level of the access rights based on the identity level; defining the access conditions of the shared data according to the permission level; and setting the sharing rules of the shared data in combination with the permission level and the access conditions.

[0105] Among them, the access group refers to the set of users who are authorized to access shared data, the access content refers to the data or information that the access group is authorized to access, the information carrying capacity refers to the amount of effective information contained in the access content, the access permission refers to the operations that the access group can perform on the access content, such as data reading, the identity level refers to the level or status of the user or access group in the organization, the permission level refers to the data operation permission level set according to the user's identity level and the information carrying capacity of the data, and the access condition refers to the conditions that the user needs to meet when accessing the data.

[0106] Optionally, based on the query verification method and the query index, the access group and access content identification corresponding to the shared data can be obtained through an identity authentication service, and according to the information carrying capacity, the access permission setting of the access group can be implemented using roles and access control, and the access condition definition of the shared data can be obtained through a security policy, such as a multi-factor authentication policy.

[0107] In an optional embodiment of the present invention, the information carrying capacity of the access content in the shared data is calculated using the following formula:

[0108]

[0109] Where C represents the information carrying capacity of the accessed content, n represents the total number of accessed content, and x ij represents the value of the i-th access content on the j-th shared data evaluation index, represents the average value of the evaluation index corresponding to the j-th shared data, m represents the total number of shared data evaluation indexes, i represents the index of the accessed content, and j represents the index of the evaluation index corresponding to the shared data.

[0110] S3. Based on the sharing rules, identify the data sharing request for the shared data, analyze the identity type corresponding to the data sharing request, wherein the identity type includes the data requester and the data provider, extract the identity authentication data corresponding to the identity type, and set the permission verification mechanism for the data sharing request based on the identity authentication data.

[0111] The embodiment of the present invention identifies the data sharing request for the shared data based on the sharing rules, and can automatically verify the identity and authority of the requester according to the sharing rules, ensuring that only users who meet the requirements can access and share data, thereby improving the efficiency of data sharing and accelerating the speed of data circulation.

[0112] Optionally, the data sharing request identification of the shared data based on the sharing rule can be obtained through an automated workflow tool, such as a Pabbly Connect tool.

[0113] Furthermore, the embodiments of the present invention can determine whether the party has the right to access specific data by analyzing the identity type corresponding to the data sharing request, help implement an effective identity authentication mechanism, and trace back to the original data provider in the event of data leakage or dispute to achieve responsibility definition. The identity type refers to the roles and qualifications of the requester and provider in the data sharing and verification matching system.

[0114] Optionally, the identity type analysis corresponding to the data sharing request may be implemented using an identity verification mechanism, such as verifying the identity of an organization or individual through official channels.

[0115] The embodiment of the present invention can confirm the true identity of the data requester and the provider by extracting the identity authentication data corresponding to the identity type, prevent impersonation and fraud, and ensure that only legitimate users can access the data. The identity authentication data refers to information used to verify the identity of the data requester and the provider.

[0116] Optionally, the identity authentication data extraction corresponding to the identity type can be obtained through an identity authentication tool, such as an OAuth 2.0 tool.

[0117] Furthermore, the embodiments of the present invention can improve the trust inside and outside the system by setting up a permission verification mechanism for the data sharing request based on the identity verification data. Users can be sure that access to and use of data are strictly controlled, thereby enhancing their confidence in the system. The permission verification mechanism refers to a verification mechanism for confirming the identity of the user or entity requesting shared data.

[0118] As an embodiment of the present invention, the permission verification mechanism for the data sharing request is set based on the identity verification data, including: extracting the original credential information of the data sharing request based on the identity verification data; identifying the input credentials of the data sharing request, and setting the number of incorrect attempts for the input credentials; calculating the matching variables between the input credentials and the original credential information; setting the access control permissions of the data sharing request based on the matching variables; and setting the permission verification mechanism for the data sharing request according to the number of incorrect attempts and the access control permissions.

[0119] Among them, the original credential information refers to the credentials provided by the user during the identity authentication process, such as a user name and password, the input credentials refer to the credentials entered by the user when trying to access shared data, the number of incorrect attempts refers to the maximum number of attempts to limit the user's incorrect credential input within a certain period of time, the matching variable refers to the variable of the matching result between the input credential and the original credential information, and the access control permission refers to the restriction on whether to allow the user to access specific resources or services based on the calculation result of the matching variable.

[0120] Optionally, the extraction of original credential information of the data sharing request based on the identity authentication data can be collected and obtained by the identity authentication system when the user logs in, the input credential identification of the data sharing request can be implemented using API, the number of incorrect attempts to input the credential can be obtained by the number of errors recorded by the system, and the access control permission setting of the data sharing request based on the matching variable can be implemented using an access control list.

[0121] In an optional embodiment of the present invention, the matching variable between the input credential and the original credential information is calculated using the following formula:

[0122]

[0123] Among them, match represents the matching variable between the input credential and the original credential information, H (password) represents the hash value of the input credential, and stored_hash represents the hash value of the stored original credential information. When the hash values ​​of the input credential and the original credential information are equal, it means that the input credential and the original credential information match successfully, and match is 1; otherwise, it means that the input credential and the original credential information fail to match, and match is 0.

[0124] S4. Extract the digital signature of the shared data from the identity verification data, set the access level of the shared data according to the authority verification mechanism, and set the decryption interval of the shared data based on the digital signature and the access level.

[0125] The embodiment of the present invention can help record and audit data access behavior and ensure the transparency and traceability of the data processing process by extracting the digital signature of the shared data from the identity authentication data. The digital signature refers to a technology for verifying the authenticity and integrity of data generated by cryptographic technology.

[0126] Optionally, the extraction of the digital signature of the shared data in the identity verification data may be implemented using an asymmetric encryption algorithm.

[0127] Furthermore, the embodiments of the present invention can more effectively manage data access permissions by setting the access level of the shared data according to the permission verification mechanism, ensuring that the data is used by appropriate personnel when needed, thereby improving data utilization efficiency. The access level refers to the permission level required for accessing a specific resource.

[0128] Optionally, according to the permission verification mechanism, the access level setting of the shared data can be obtained by data sensitivity and user identity information, such as senior management may have broad access rights to sensitive data, while ordinary employees may have only limited access rights.

[0129] The embodiment of the present invention sets the decryption interval of the shared data based on the digital signature and the access level, thereby ensuring the confidentiality of the data during transmission and storage, preventing unauthorized access, and limiting the ways in which potential attackers obtain sensitive data, thereby improving the security of data sharing and user experience. The decryption interval refers to the interval range in which the data can be decrypted and accessed only under specific conditions or permissions after encryption.

[0130] As an embodiment of the present invention, setting the decryption interval of the shared data based on the digital signature and the access level includes: authenticating the digital signature to obtain an identity authentication result; determining the permission range of the access level based on the identity authentication result; analyzing the permission request for the shared data in combination with the identity authentication result and the permission range; setting a decryption key corresponding to the permission request; and setting the decryption interval of the shared data based on the permission request and the decryption key.

[0131] Among them, the identity authentication result refers to the user identity proof result obtained after the user passes the identity authentication, the permission scope refers to the scope of data that the user can access or the scope of operations that can be performed according to his access level, the permission request refers to the user's request to access specific data, and the decryption key refers to the key used to decrypt encrypted data.

[0132] Optionally, the identity authentication of the digital signature can be obtained through biometric identification, and the permission scope of the access level determined based on the identity authentication result can be implemented using the system's access control policy, and the decryption key setting corresponding to the permission request can be generated by a key management system.

[0133] S5. Extract the decrypted data of the decryption interval, calculate the matching degree between the decrypted data and the data sharing request, and analyze the sharing verification result of the technical database according to the matching degree.

[0134] The embodiment of the present invention can verify whether the decryption process is successful and whether the decrypted data is intact by extracting the decrypted data of the decryption interval and calculating the degree of matching between the decrypted data and the data sharing request, thereby enhancing the security of the data. The decrypted data refers to the data restored to its original state after encryption processing, and the degree of matching refers to the consistency or similarity between the decrypted data and the data sharing request in terms of content, format, purpose, etc.

[0135] Optionally, the extraction of decrypted data in the decryption interval may be implemented by a decryption tool, such as a third-party tool Passware Kit.

[0136] In an optional embodiment of the present invention, the matching degree between the decrypted data and the data sharing request is calculated using the following formula:

[0137]

[0138] Among them, cos(q,z) represents the matching degree between the decrypted data and the data sharing request, q represents the feature vector of the decrypted data, z represents the feature vector of the data sharing request, q represents the feature vector of the data sharing request, ’ represents the element of decrypted data, and z' represents the element of data sharing request.

[0139] Furthermore, the embodiments of the present invention can quickly respond to the needs of the requester by analyzing the shared verification results of the technical database according to the matching degree, provide the data required by the requester, improve the efficiency of data sharing, meet the immediate needs of users or systems, and better manage and utilize data resources, and improve the level of trust between data providers and requesters. The shared verification results refer to the conclusions or results obtained from a series of verification tests on the information in the technical database during the data sharing process.

[0140] Optionally, the shared verification result analysis of the technical database based on the matching degree can be implemented using a multi-cloud data management platform, such as the NineData platform.

[0141] It can be seen that the embodiment of the present invention can understand the type, structure, value and other information of the data by acquiring the technical database to be shared and identifying the data content in the technical database, so as to provide a data source for subsequent data sharing, verification and matching, and improve the efficiency and scalability of data sharing; the embodiment of the present invention can ensure the accurate matching between query requests and shared data by setting the sharing rules of the shared data based on the query verification method and the query index. In the process of data sharing, different data providers and users can exchange and share data in an orderly manner through the sharing rules, breaking data silos, promoting the circulation and integration of data, and thus mining more data value; the embodiment of the present invention can improve the trust inside and outside the system by setting the permission verification mechanism of the data sharing request based on the identity verification data, so that users can be sure that the access and use of data are strictly controlled, thereby enhancing the control of the system. confidence; further, the embodiment of the present invention sets the decryption interval of the shared data based on the digital signature and the access level, which can ensure the confidentiality of the data during transmission and storage, prevent unauthorized access, and limit the way potential attackers obtain sensitive data, thereby improving the security of data sharing and user experience; the embodiment of the present invention extracts the decrypted data of the decryption interval and calculates the degree of matching between the decrypted data and the data sharing request, which can verify whether the decryption process is successful and whether the decrypted data is intact, thereby enhancing the security of the data; further, the embodiment of the present invention analyzes the shared verification results of the technical database according to the matching degree, which can quickly respond to the needs of the requester, provide the data required by the requester, improve the efficiency of data sharing, meet the immediate needs of users or systems, and better manage and utilize data resources, thereby improving the trust between the data provider and the requester. Therefore, the technical database sharing and verification matching method based on blockchain technology proposed in the embodiment of the present invention can ensure the security of data sharing and improve the trust between the data provider and the data requester.

[0142] like Figure 2 Shown is a system functional module diagram of technical database sharing and verification matching based on blockchain technology of the present invention.

[0143] The technology database sharing and verification matching system 200 based on blockchain technology of the present invention can be installed in an electronic device. According to the functions implemented, the technology database sharing and verification matching system based on blockchain technology can include a shared data generation module 201, a data encryption module 202, an authority verification module 203, a data decryption module 204, and a verification matching module 205. The module of the present invention can also be called a unit, which refers to a series of computer program segments that can be executed by an electronic device processor and can complete fixed functions, which are stored in the memory of the electronic device.

[0144] In the embodiment of the present invention, the functions of each module / unit are as follows:

[0145] The shared data generation module 201 is used to obtain a technology database to be shared, identify data content in the technology database, perform hash processing on the data content to generate hash data, collect metadata records of the technology database, and determine shared data of the technology database based on the hash data and the metadata records;

[0146] The data encryption module 202 is used to identify the data type of the shared data, analyze the data sensitivity of the shared data, encrypt the shared data based on the data type and the data sensitivity to obtain encrypted shared data, set a query verification method and a query index for the encrypted shared data, and set a sharing rule for the shared data based on the query verification method and the query index;

[0147] The authority verification module 203 is used to identify the data sharing request of the shared data based on the sharing rule, analyze the identity type corresponding to the data sharing request, wherein the identity type includes the data requester and the data provider, extract the identity verification data corresponding to the identity type, and set the authority verification mechanism of the data sharing request based on the identity verification data;

[0148] A data decryption module 204 is used to extract the digital signature of the shared data from the identity verification data, set the access level of the shared data according to the permission verification mechanism, and set the decryption interval of the shared data based on the digital signature and the access level;

[0149] The verification matching module 205 is used to extract the decrypted data of the decryption interval, calculate the matching degree between the decrypted data and the data sharing request, and analyze the sharing verification result of the technical database according to the matching degree.

[0150] In detail, each module in the blockchain-based technology database sharing and verification matching system 200 in the embodiment of the present invention is used in the same manner as described above. Figure 1 The technical means of the technical database sharing and verification matching method based on blockchain technology described in the text are the same and can produce the same technical effects, so they will not be repeated here.

Claims

1. A technology database sharing and verification matching method based on blockchain technology, characterized in that: The method comprises: Acquire a technology database to be shared, identify data content in the technology database, perform hash processing on the data content to generate hash data, collect metadata records of the technology database, and determine shared data of the technology database based on the hash data and the metadata records; Identify the data type of the shared data, analyze the data sensitivity of the shared data, encrypt the shared data based on the data type and the data sensitivity to obtain encrypted shared data, set a query verification method and a query index for the encrypted shared data, and set a sharing rule for the shared data based on the query verification method and the query index; Based on the sharing rule, a data sharing request for the shared data is identified, an identity type corresponding to the data sharing request is analyzed, wherein the identity type includes a data requester and a data provider, identity verification data corresponding to the identity type is extracted, and based on the identity verification data, a permission verification mechanism for the data sharing request is set; Extracting the digital signature of the shared data from the identity verification data, setting the access level of the shared data according to the permission verification mechanism, and setting the decryption interval of the shared data based on the digital signature and the access level; The decrypted data of the decryption interval is extracted, and the matching degree between the decrypted data and the data sharing request is calculated, and the sharing verification result of the technical database is analyzed according to the matching degree.

2. The method according to claim 1, characterized in that The determining, based on the hash data and the metadata record, the shared data of the technical database comprises: Based on the hash data and the metadata record, identifying a data transaction pool of the technical database; Extracting transaction data from the data transaction pool and setting a transaction block for the transaction data; Calculate the hash value of the transaction data in the transaction block, and set a satisfying condition for the hash value; Based on the satisfied conditions, setting a block propagation mode of the transaction data; Creating a blockchain copy of the transaction data according to the block propagation method and the transaction block; Based on the blockchain copy, shared data of the technical database is determined.

3. The method according to claim 1, characterized in that The identifying the data type of the shared data comprises: Performing functional division on the shared data to obtain classification functions; Based on the classification function, setting the classification code of the shared data; Extracting metadata records from the shared data; Based on the metadata record and the classification code, a data type of the shared data is identified.

4. The method according to claim 1, characterized in that: The analyzing the data sensitivity of the shared data includes: Extracting data attributes corresponding to the shared data, and setting sensitivity scores corresponding to the data attributes; Setting a hierarchical level of the shared data according to the sensitivity score and the data attribute; Based on the hierarchical level, analyzing the potential impact corresponding to the data attribute; The data sensitivity of the shared data is analyzed by combining the sensitivity score and the potential impact.

5. The method according to claim 1, characterized in that The encrypting the shared data based on the data type and the data sensitivity to obtain the encrypted shared data includes: Analyze applicable scenarios of the shared data based on the data type and the data sensitivity; According to the applicable scenario, set the encryption method of the shared data; Identify the key management mechanism corresponding to the encryption method; Based on the encryption method and the key management mechanism, the shared data is encrypted to obtain encrypted shared data.

6. The method according to claim 1, characterized in that The step of setting a query index for the encrypted shared data includes: Classifying the encrypted shared data to obtain classified data; Analyzing the query frequency corresponding to the classified data, and extracting the query field of the classified data according to the query frequency; Creating an encrypted index of the query field and identifying a query condition of the query field; In the encrypted index, setting a matching answer corresponding to the query condition; Setting a verification method for the matching answer; A query index for the encrypted shared data is set based on the encryption index and the verification method.

7. The method according to claim 1, characterized in that The setting of the sharing rule of the shared data based on the query verification mode and the query index includes: Based on the query verification method and the query index, identifying the access group and access content corresponding to the shared data; Calculating the information carrying capacity of the access content in the shared data; According to the information carrying capacity, setting the access rights of the access group; Identifying the identity level of the visitor group, and setting the permission level of the access permission based on the identity level; Defining access conditions for the shared data according to the permission level; The sharing rules of the shared data are set in combination with the permission level and the access condition.

8. The method according to claim 1, characterized in that The step of setting the permission verification mechanism for the data sharing request based on the identity verification data includes: Based on the identity verification data, extracting original credential information of the data sharing request; Identify input credentials of the data sharing request and set a number of incorrect attempts to input the credentials; Calculate the matching variable between the input credential and the original credential information; Based on the matching variable, setting access control permissions for the data sharing request; A permission verification mechanism for the data sharing request is set according to the number of error attempts and the access control permission.

9. The method according to claim 1, characterized in that: The step of setting a decryption interval of the shared data based on the digital signature and the access level includes: Authentication is performed on the digital signature to obtain an authentication result; Determining the scope of authority of the access level according to the identity authentication result; Analyzing the permission request for sharing the data in combination with the identity authentication result and the permission scope; Setting a decryption key corresponding to the permission request; A decryption interval of the shared data is set based on the permission request and the decryption key.

10. A technology database sharing and verification matching system based on blockchain technology, characterized in that: The system comprises: A shared data generation module, used to obtain a technology database to be shared, identify data content in the technology database, perform hash processing on the data content to generate hash data, collect metadata records of the technology database, and determine shared data of the technology database based on the hash data and the metadata records; a data encryption module, used to identify the data type of the shared data, analyze the data sensitivity of the shared data, encrypt the shared data based on the data type and the data sensitivity to obtain encrypted shared data, set a query verification method and a query index for the encrypted shared data, and set a sharing rule for the shared data based on the query verification method and the query index; A permission verification module, used to identify the data sharing request of the shared data based on the sharing rule, analyze the identity type corresponding to the data sharing request, wherein the identity type includes the data requester and the data provider, extract the identity verification data corresponding to the identity type, and set the permission verification mechanism of the data sharing request based on the identity verification data; A data decryption module, used to extract the digital signature of the shared data from the identity verification data, set the access level of the shared data according to the permission verification mechanism, and set the decryption interval of the shared data based on the digital signature and the access level; The verification and matching module is used to extract the decrypted data of the decryption interval, calculate the matching degree between the decrypted data and the data sharing request, and analyze the sharing verification result of the technical database according to the matching degree.

Images