Industrial Internet of Things data market transaction method based on block chain

Abstract

The invention relates to the technical field of Internet of Things, and particularly provides an industrial Internet of Things data market transaction method based on a block chain. The method comprises the following steps: initializing a system, and obtaining private keys and public keys of a platform, a consumer and a data provider; issuing transaction vouchers to the consumers and the data providers qualified for examination through the platform, so as to enable the consumers and the data providers to obtain permissions of participating in transaction; according to the obtained authority of participating in the transaction, the data provider and the consumer respectively upload data information and send a purchase request; the data provider determines the purchase qualification of the consumer according to the purchase request sent by the private address; according to the method, the purchase privacy of consumers is protected, the transaction process is simplified, and the method is suitable for an industrial Internet of Things market mode.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to an industrial Internet of Things data market transaction method based on blockchain. Background Art

[0002] Most trading platforms require a trusted third party, and exposing transaction information to a third party will inevitably cause the risk of data or privacy leakage, which is a problem that all parties to the transaction have to face. Unlike traditional databases, blockchain can prevent tampering and provide reliable audit trails, enhancing the trust of both parties involved in the transaction. In addition, the use of smart contracts automates and executes the terms of data transactions without the need for intermediaries, thereby reducing transaction costs, improving efficiency, and reducing the risk of data leakage. However, blockchain also has an important feature, that is, all data is publicly stored on the chain and can be accessed by anyone, so blockchain technology is often used in combination with encryption technology.

[0003] In the prior art, a personal data transaction scheme based on ring signatures is proposed. In this scheme, with the help of deniable ring signatures and Monero, malicious cloud servers are prevented from establishing a behavioral profile database of data users (DU). In addition, a blockchain-based shipping data sharing scheme is proposed. In this scheme, when the data is accessed, a hash anonymous identity is designed to verify the access rights of the data requester, thereby protecting identity privacy, and without leaking data privacy, zero-knowledge proofs (zk-SNARKs) are used to verify whether the flight operation data meets the specific requirements put forward by the data requester. However, the above scheme cannot protect the purchase privacy of consumers, the transaction process is complicated, and it is not suitable for the industrial Internet of Things market model. Summary of the invention

[0004] In view of this, the present invention provides an industrial Internet of Things data market transaction method based on blockchain to protect consumers' purchase privacy and simplify the transaction process to adapt to the industrial Internet of Things market model.

[0005] In a first aspect, the present invention provides an industrial Internet of Things data market transaction method based on blockchain, the method comprising:

[0006] Step 1: Initialize the system and obtain the private and public keys of the platform, consumers, and data providers;

[0007] Step 2: Issue transaction vouchers to qualified consumers and data providers through the platform to enable them to obtain the right to participate in the transaction;

[0008] Step 3: Based on the acquired rights to participate in the transaction, the data provider and the consumer upload data information and send a purchase request respectively;

[0009] Step 4: The data provider determines the consumer's eligibility to purchase through the purchase request sent via the private address;

[0010] Step 5: Transfer data and complete the transaction.

[0011] Optionally, step 1 includes:

[0012] Define G1 and G2, G1 is the cyclic additive group of prime number q, G2 is the cyclic multiplicative group of prime number q; e: G1×G1→G2, Q∈G1, e represents mapping;

[0013] Define a secure cryptographic hash function Hash, which is expressed as:

[0014] H: {0, 1} * —>Z q * ;

[0015] Among them, Z q * represents the multiplicative group of integers of q;

[0016] (1) Select a random number t∈Z q * As the platform's private key, calculate T = tP as the platform's public key, and the platform's public key is associated with the platform's blockchain address;

[0017] (2) Select a random number c∈Z q * As the consumer's private key, calculate C = cP as the consumer's public key. The consumer's public key is associated with the consumer's blockchain address;

[0018] (3) Select a random number d∈Z q * As the private key of the data provider, D=dP is calculated as the public key of the data provider, and the public key of the data provider is associated with the blockchain address of the data provider;

[0019] The system parameters and the public key data G1, G2, q, P, Q, e, T, C, P of the transaction parties are publicly stored in the blockchain; and the symmetric encryption / decryption algorithm is predefined in the blockchain: (E sym , D sym ), asymmetric encryption / decryption algorithm: (a pk , A sk ), signature / verification algorithm (Sig, Ver).

[0020] Optionally, the step 2 includes:

[0021] Assume that the data used for qualification review by consumers and data providers is u, and the public keys of consumers and data providers are denoted as C and D respectively;

[0022] Consumers and data providers perform the following functions:

[0023] Encrypt u using symmetric key k: N = E k (u);

[0024] Use the signature algorithm on u to obtain Sig(u);

[0025] Encrypt k using the platform's public key T, and get K = A T (k);

[0026] Send (K, N, Sig(u)) and the public keys of the consumer and data provider to the platform;

[0027] The platform uses the sender's public key to perform verification operations on Sig(u). If the verification fails, the request is rejected; if the verification succeeds, the following functions are executed:

[0028] Perform private key decryption on K and get k = a t (K);

[0029] Perform symmetric key decryption on N to obtain u = D k (N);

[0030] The obtained data u is reviewed. If it is unqualified, the request is rejected; if it is qualified, the following steps are performed:

[0031] Calculate R = tC / D, and then publish the transaction certificate on the blockchain: Lice = (seql, R, CR), where seql is the unique identifier of the certificate and CR is the specific information of the certificate, including the validity period and the specific permissions of the public key owner in the certificate;

[0032] Use the sender's public key to encrypt the hash value of Lice, and get Lice*=A C / D (H(Lice)), encrypt Lice using the sender's public key to obtain Lice d =A C / D (Lice); perform the signature algorithm on Lice to obtain Sig(Lice), and then send (Lice*, Lice d , Sig(Lice)) to the sender.

[0033] Optionally, step 3 includes:

[0034] Data providers and consumers receive (Lice*, Lice d, Sig(Lice)) uses the private key to decrypt to get Lice, and then uses the verification algorithm Ver to determine whether Sig(Lice) is a platform; if so, proceed to the next step; assuming that the data provider wants to sell data M;

[0035] The data provider performs the following operations:

[0036] Calculate M*=H(M), generate M`=(M*, CRM, D), and then upload M` to the blockchain; where CRM is the metadata of data M;

[0037] The consumer does the following:

[0038] Select the data M to be purchased on the platform and obtain M` from the blockchain;

[0039] Use the data provider’s public key D and the consumer’s private key c to calculate Y=cD;

[0040] Hash Y to obtain Y*=H(Y), then select the last 160 bits of Y* as the private address; select a random number c1∈Z q * As the private key of the privacy address, calculate C1=c1P as the public key of the privacy address;

[0041] Calculate F = aQ;

[0042] Calculate Lice*=H(Lice), encrypt Lice*, M* and F using the public key of the data provider, and get Lice d =A,M D =A D (M*), F D =A D (F), and then use the privacy address to send V = (M D , Lice d , F D ).

[0043] Optionally, step 4 includes:

[0044] After receiving V, the data provider uses the data provider's private key d to d 、M D and F D Decrypt to get Lice*, M* and F. Find the Hash value of the Lice provided by the consumer in the blockchain to get the Lice provided by the consumer. Compare it with M` uploaded by the data provider to get the data M that the consumer wants to buy.

[0045] The data provider obtains R from the Lice stored in the blockchain and then executes the following formula:

[0046] e(R,Q)=e(T,F);

[0047] If the formula is true, the purchase request sent from the private address is eligible for purchase;

[0048] The data provider chooses to agree or reject the purchase request for consideration; if the request is agreed, z∈Z is randomly generated q * , use the public key C1 of the privacy address to encrypt (1, z) to get V1, and send it to the privacy address; if you disagree, use the public key C1 of the privacy address to encrypt (0, z) to get V2, and send it to the privacy address.

[0049] Optionally, step 5 includes:

[0050] The consumer uses the private key c1 of the privacy address to decrypt the obtained V1 or V2; if the data provider replies that it agrees, the consumer uses the data provider's public key D to encrypt the address ADR used to receive data in the middleware to obtain: ADR*=A D (ADR), and then send the ADR* to the data provider using the privacy address;

[0051] After receiving ADR*, the data provider uses its private key d to decrypt it to obtain ADR, and then uses the middleware to send data M to the address;

[0052] After obtaining data M, the consumer calculates m=H(M), and then determines whether the following formula is true: m=M*; if the formula is true, the consumer uses the privacy address to send M to the data provider. D , completing the transaction.

[0053] In the technical solution provided by the present invention, the method includes initializing the system, obtaining the private keys and public keys of the platform, consumers, and data providers; issuing transaction vouchers to consumers and data providers who have passed the qualification review through the platform so that they can obtain the authority to participate in the transaction; according to the obtained authority to participate in the transaction, the data provider and the consumer respectively upload data information and send purchase requests; through the purchase request sent by the private address, the data provider determines the consumer's purchase qualifications; transmits data and completes the transaction. This method protects the consumer's purchase privacy, simplifies the transaction process, and is suitable for the industrial Internet of Things market model. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0055] Figure 1 A flowchart of an industrial Internet of Things data market transaction method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0056] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0057] It should be clear that the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0058] The terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. The singular forms "a", "said" and "the" used in the embodiments of the present invention are also intended to include plural forms, unless the context clearly indicates other meanings.

[0059] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0060] The word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrases "if it is determined" or "if (stated condition or event) is detected" may be interpreted as "when it is determined" or "in response to determining" or "when detecting (stated condition or event)" or "in response to detecting (stated condition or event)", depending on the context.

[0061] Figure 1 The flowchart of the industrial Internet of Things data market transaction method provided by the embodiment of the present invention is as follows: Figure 1 As shown, the method includes:

[0062] Step 1: Initialize the system and obtain the private and public keys of the platform, consumers, and data providers.

[0063] In the embodiment of the present invention, step 1 includes:

[0064] Define G1 and G2, G1 is the cyclic additive group of prime number q, G2 is the cyclic multiplicative group of prime number q; e: G1×G1→G2, Q∈G1, e represents mapping;

[0065] Define a secure cryptographic hash function Hash, which is expressed as:

[0066] H: {0, 1} * —>Z q * ;

[0067] Among them, Z q * represents the multiplicative group of integers of q;

[0068] (1) Select a random number t∈Z q * As the platform's private key, calculate T = tP as the platform's public key, and the platform's public key is associated with the platform's blockchain address;

[0069] (2) Select a random number c∈Z q * As the consumer's private key, calculate C = cP as the consumer's public key. The consumer's public key is associated with the consumer's blockchain address;

[0070] (3) Select a random number d∈Z q * As the private key of the data provider, D=dP is calculated as the public key of the data provider, and the public key of the data provider is associated with the blockchain address of the data provider;

[0071] The system parameters and the public key data G1, G2, q, P, Q, e, T, C, P of the transaction parties are publicly stored in the blockchain; and the symmetric encryption / decryption algorithm is predefined in the blockchain: (E sym , D sym ), asymmetric encryption / decryption algorithm: (a pk , A sk ), signature / verification algorithm (Sig, Ver).

[0072] Step 2: Issue transaction vouchers to qualified consumers and data providers through the platform to enable them to obtain the authority to participate in the transaction.

[0073] In the embodiment of the present invention, step 2 includes:

[0074] Assume that the data used for qualification review by consumers and data providers is u, and the public keys of consumers and data providers are denoted as C and D respectively;

[0075] Consumers and data providers perform the following functions:

[0076] Encrypt u using symmetric key k: N = E k (u);

[0077] Use the signature algorithm on u to obtain Sig(u);

[0078] Encrypt k using the platform's public key T, and get K = A T (k);

[0079] Send (K, N, Sig(u)) and the public keys of the consumer and data provider to the platform;

[0080] The platform uses the sender's public key to perform verification operations on Sig(u). If the verification fails, the request is rejected; if the verification succeeds, the following functions are executed:

[0081] Perform private key decryption on K and get k = a t (K);

[0082] Perform symmetric key decryption on N to obtain u = D k (N);

[0083] The obtained data u is reviewed. If it is unqualified, the request is rejected; if it is qualified, the following steps are performed:

[0084] Calculate R = tC / D, and then publish the transaction certificate on the blockchain: Lice = (seql, R, CR), where seql is the unique identifier of the certificate and CR is the specific information of the certificate, including the validity period and the specific permissions of the public key owner in the certificate;

[0085] Use the sender's public key to encrypt the Hash value of Lice, and get Lice*=A C / D (H(Lice)), encrypt Lice using the sender's public key to obtain Lice d =A C / D (Lice); perform the signature algorithm on Lice to obtain Sig(Lice), and then send (Lice*, Lice d , Sig(Lice)) to the sender.

[0086] Step 3: Based on the acquired rights to participate in the transaction, the data provider and the consumer upload data information and send a purchase request respectively.

[0087] In the embodiment of the present invention, step 3 includes:

[0088] Data providers and consumers receive (Lice*, Liced , Sig(Lice)) uses the private key to decrypt to get Lice, and then uses the verification algorithm Ver to determine whether Sig(Lice) is a platform; if so, proceed to the next step; assuming that the data provider wants to sell data M;

[0089] The data provider performs the following operations:

[0090] Calculate M*=H(M), generate M`=(M*, CRM, D), and then upload M` to the blockchain; where CRM is the metadata of data M;

[0091] The consumer does the following:

[0092] Select the data M to be purchased on the platform and obtain M` from the blockchain;

[0093] Use the data provider’s public key D and the consumer’s private key c to calculate Y=cD;

[0094] Hash Y to obtain Y*=H(Y), then select the last 160 bits of Y* as the private address; select a random number c1∈Z q * As the private key of the privacy address, calculate C1=c1P as the public key of the privacy address;

[0095] Calculate F = aQ;

[0096] Calculate Lice*=H(Lice), encrypt Lice*, M* and F using the public key of the data provider, and get Lice d =A,M D =A D (M*), F D =A D (F), and then use the privacy address to send V = (M D , Lice d , F D ).

[0097] Step 4: The data provider determines the consumer's eligibility to purchase through the purchase request sent via the private address.

[0098] In the embodiment of the present invention, step 4 includes:

[0099] After receiving V, the data provider uses the data provider's private key d to d 、M D and F DDecrypt to get Lice*, M* and F. Find the Hash value of the Lice provided by the consumer in the blockchain to get the Lice provided by the consumer. Compare it with M` uploaded by the data provider to get the data M that the consumer wants to buy.

[0100] The data provider obtains R from the Lice stored in the blockchain and then executes the following formula:

[0101] e(R,Q)=e(T,F);

[0102] If the formula is true, the purchase request sent from the private address is eligible for purchase;

[0103] The data provider chooses to agree or reject the purchase request for consideration; if the request is agreed, z∈Z is randomly generated q * , use the public key C1 of the privacy address to encrypt (1, z) to get V1, and send it to the privacy address; if you disagree, use the public key C1 of the privacy address to encrypt (0, z) to get V2, and send it to the privacy address.

[0104] Step 5: Transfer data and complete the transaction.

[0105] In the embodiment of the present invention, step 5 includes:

[0106] The consumer uses the private key c1 of the privacy address to decrypt the obtained V1 or V2; if the data provider replies that it agrees, the consumer uses the data provider's public key D to encrypt the address ADR used to receive data in the middleware to obtain: ADR*=A D (ADR), and then send the ADR* to the data provider using the privacy address;

[0107] After receiving ADR*, the data provider uses its private key d to decrypt it to obtain ADR, and then uses the middleware to send data M to the address;

[0108] After obtaining data M, the consumer calculates m=H(M), and then determines whether the following formula is true: m=M*; if the formula is true, the consumer uses the privacy address to send M to the data provider. D , completing the transaction.

[0109] Compared with the prior art, the present invention has the following beneficial effects:

[0110] 1. The present invention provides a third party: a data trading platform. The platform provides transaction vouchers for all parties involved in the transaction, reducing the risk of information leakage caused by the third party.

[0111] 2. Consumers who have obtained transaction vouchers can freely purchase data on the platform without having to apply for transaction vouchers on the platform every time they make a purchase, which reduces transaction complexity.

[0112] 3. Privacy addresses and bilinear pairing are used to protect consumers’ privacy, so that data providers and other users cannot obtain consumers’ purchase records or configure consumers’ behavior files.

[0113] 4. The data purchase process and related purchase information are all stored in the blockchain, avoiding the risk of information tampering and providing assistance for future audits.

[0114] In the technical solution provided by the present invention, the method includes initializing the system, obtaining the private keys and public keys of the platform, consumers, and data providers; issuing transaction vouchers to consumers and data providers who have passed the qualification review through the platform so that they can obtain the authority to participate in the transaction; according to the obtained authority to participate in the transaction, the data provider and the consumer respectively upload data information and send purchase requests; through the purchase request sent by the private address, the data provider determines the consumer's purchase qualifications; transmits data and completes the transaction. This method protects the consumer's purchase privacy, simplifies the transaction process, and is suitable for the industrial Internet of Things market model.

[0115] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0116] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A blockchain-based industrial Internet of Things data market transaction method, characterized in that: The method comprises: Step 1: Initialize the system and obtain the private and public keys of the platform, consumers, and data providers; Step 2: Issue transaction vouchers to qualified consumers and data providers through the platform to enable them to obtain the right to participate in the transaction; Step 3: Based on the acquired rights to participate in the transaction, the data provider and the consumer upload data information and send a purchase request respectively; Step 4: The data provider determines the consumer's eligibility to purchase through the purchase request sent via the private address; Step 5: Transfer data and complete the transaction.

2. The method according to claim 1, characterized in that The step 1 comprises: Define G1 and G2, G1 is the cyclic additive group of prime number q, G2 is the cyclic multiplicative group of prime number q; e: G1×G1→G2, Q∈G1, e represents mapping; Define a secure cryptographic hash function Hash, which is expressed as: H:{0,1} * —>Z q * ; Among them, Z q * represents the multiplicative group of integers of q; (1) Select a random number t∈Z q * As the platform's private key, calculate T = tP as the platform's public key, and the platform's public key is associated with the platform's blockchain address; (2) Select a random number c∈Z q * As the consumer's private key, calculate C = cP as the consumer's public key. The consumer's public key is associated with the consumer's blockchain address; (3) Select a random number d∈Z q * As the private key of the data provider, D=dP is calculated as the public key of the data provider, and the public key of the data provider is associated with the blockchain address of the data provider; The system parameters and the public key data G1, G2, q, P, Q, e, T, C, P of the transaction parties are publicly stored in the blockchain; and the symmetric encryption / decryption algorithm is predefined in the blockchain: (E sym , D sym ), asymmetric encryption / decryption algorithm: (a pk , A sk ), signature / verification algorithm (Sig, Ver).

3. The method according to claim 1, characterized in that The step 2 comprises: Assume that the data used for qualification review by consumers and data providers is u, and the public keys of consumers and data providers are denoted as C and D respectively; Consumers and data providers perform the following functions: Encrypt u using symmetric key k: N = E k (u); Use the signature algorithm on u to obtain Sig(u); Encrypt k using the platform's public key T, and get K = A T (k); Send (K, N, Sig(u)) and the public keys of the consumer and data provider to the platform; The platform uses the sender's public key to perform verification operations on Sig(u). If the verification fails, the request is rejected; if the verification succeeds, the following functions are executed: Perform private key decryption on K and get k = a t (K); Perform symmetric key decryption on N to obtain u = D k (N); The obtained data u is reviewed. If it is unqualified, the request is rejected; if it is qualified, the following steps are performed: Calculate R = tC / D, and then publish the transaction certificate on the blockchain: Lice = (seql, R, CR), where seql is the unique identifier of the certificate and CR is the specific information of the certificate, including the validity period and the specific permissions of the public key owner in the certificate; Use the sender's public key to encrypt the hash value of Lice, and get Lice*=A C / D (H(Lice)), encrypt Lice using the sender's public key to obtain Lice d =A C / D (Lice); perform the signature algorithm on Lice to obtain Sig(Lice), and then send (Lice*, Lice d , Sig(Lice)) to the sender.

4. The method according to claim 1, characterized in that The step 3 comprises: Data providers and consumers receive (Lice*, Lice d , Sig(Lice)) uses the private key to decrypt to get Lice, and then uses the verification algorithm Ver to determine whether Sig(Lice) is a platform; if so, proceed to the next step; assuming that the data provider wants to sell data M; The data provider performs the following operations: Calculate M*=H(M), generate M`=(M*, CRM, D), and then upload M` to the blockchain; where CRM is the metadata of data M; The consumer does the following: Select the data M to be purchased on the platform and obtain M` from the blockchain; Use the data provider’s public key D and the consumer’s private key c to calculate Y=cD; Hash Y to obtain Y*=H(Y), then select the last 160 bits of Y* as the private address; select a random number c1∈Z q * As the private key of the privacy address, calculate C1=c1P as the public key of the privacy address; Calculate F = aQ; Calculate Lice*=H(Lice), encrypt Lice*, M* and F using the public key of the data provider, and get Lice d =A,M D =A D (M*), F D =A D (F), and then use the privacy address to send V = (M D , Lice d , F D ).

5. The method according to claim 1, characterized in that The step 4 comprises: After receiving V, the data provider uses the data provider's private key d to d 、M D and F D Decrypt to get Lice*, M* and F. Find the Hash value of the Lice provided by the consumer in the blockchain to get the Lice provided by the consumer. Compare it with M` uploaded by the data provider to get the data M that the consumer wants to buy. The data provider obtains R from the Lice stored in the blockchain and then executes the following formula: e(R,Q)=e(T,F); If the formula is true, the purchase request sent from the private address is eligible for purchase; The data provider chooses to agree or reject the purchase request for consideration; if the request is agreed, z∈Z is randomly generated q * , use the public key C1 of the privacy address to encrypt (1, z) to get V1, and send it to the privacy address; if you disagree, use the public key C1 of the privacy address to encrypt (0, z) to get V2, and send it to the privacy address.

6. The method according to claim 1, characterized in that The step 5 comprises: The consumer uses the private key c1 of the privacy address to decrypt the obtained V1 or V2; if the data provider replies that it agrees, the consumer uses the data provider's public key D to encrypt the address ADR used to receive data in the middleware to obtain: ADR*=A D (ADR), and then send the ADR* to the data provider using the privacy address; The data provider receives A D R* then uses its private key d to decrypt to get ADR, and then uses the middleware to send data M to the address; After obtaining data M, the consumer calculates m = H (M), and then determines whether the following formula is true: m = M*; If the formula is established, the private address is used to send M to the data provider. D , completing the transaction.

Images