Blockchain-based industrial internet of things data market transaction method

Abstract

The application relates to the technical field of Internet of Things, and particularly provides an industrial Internet of Things data market transaction method based on a block chain. The method comprises the following steps: initializing a system, obtaining private keys and public keys of a platform, a consumer and a data provider; issuing transaction vouchers for the consumer and the data provider who pass the qualification examination through the platform, so that the consumer and the data provider obtain the permission to participate in the transaction; the data provider and the consumer respectively perform uploading data information and sending a purchase request operation according to the obtained permission to participate in the transaction; the data provider determines the purchase qualification of the consumer through the purchase request sent by a private address; data transmission is performed, and the transaction is completed; the method protects the purchase privacy of the consumer, simplifies the transaction process, and is suitable for an industrial Internet of Things market mode.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet of Things, and in particular to a blockchain-based industrial Internet of Things data market transaction method. BACKGROUND

[0002] Most transaction platforms need a trusted third party, and exposing transaction information to the third party inevitably risks data or privacy leakage, which is a problem that all parties to the transaction have to face. Unlike traditional databases, blockchain can prevent tampering and provide reliable audit tracking, enhancing the trust of both parties participating in the transaction. In addition, the use of smart contracts automates and enforces the terms of data transactions without the need for intermediaries, reducing transaction costs, improving efficiency, and reducing the risk of data leakage. However, blockchain also has an important feature that all data is publicly stored on the chain and can be accessed by anyone, so blockchain technology is often used in combination with encryption technology.

[0003] A personal data transaction scheme based on ring signature is proposed in the prior art, which avoids the establishment of a behavior profile database of data users (DUs) by a malicious cloud server with non-repudiable ring signatures and Monero. In addition, a blockchain-based shipping data sharing scheme is proposed, in which a hash anonymous identity is designed to verify the access rights of data requesters when data is accessed, thereby protecting identity privacy, and zero-knowledge proof (zk-SNARKs) is used to verify whether the flight operation data meets the specific requirements of the data requester without revealing the data privacy. However, the above-mentioned scheme cannot protect the purchase privacy of consumers, the transaction process is complex, and it is not suitable for the industrial Internet of Things market model. SUMMARY

[0004] Therefore, the present application provides a blockchain-based industrial Internet of Things data market transaction method to protect the purchase privacy of consumers, simplify the transaction process, and adapt to the industrial Internet of Things market model.

[0005] In a first aspect, the present application provides a blockchain-based industrial Internet of Things data market transaction method, which comprises:

[0006] Step 1, initializing the system to obtain the private key and public key of the platform, the consumer, and the data provider;

[0007] Step 2, issuing transaction credentials to consumers and data providers who have passed the qualification review through the platform to enable them to obtain the right to participate in transactions;

[0008] Step 3, according to the obtained right to participate in transactions, the data provider and the consumer perform the operations of uploading data information and sending purchase requests, respectively;

[0009] Step 4, the data provider determines the purchase qualification of the consumer through the purchase request sent by the privacy address;

[0010] Step 5, data transmission is performed, and the transaction is completed.

[0011] Optionally, the step 1 comprises:

[0012] G1 and G2 are defined, G1 is a cyclic additive group of a prime number q, G2 is a cyclic multiplicative group of a prime number q; e: G1 x G1 -> G2, Q ∈ G1, and e represents a mapping;

[0013] A secure encryption hash function Hash is defined, and an expression form of the secure encryption hash function Hash is:

[0014] H: {0, 1} * -> Z q * ;

[0015] Z q * represents an integer multiplicative group of q;

[0016] (1) a random number t ∈ Z q * is selected as a private key of the platform, T = tP is calculated as a public key of the platform, and the public key of the platform is associated with a blockchain address of the platform;

[0017] (2) a random number c ∈ Z q * is selected as a private key of the consumer, C = cP is calculated as a public key of the consumer, and the public key of the consumer is associated with a blockchain address of the consumer;

[0018] (3) a random number d ∈ Z q * is selected as a private key of the data provider, D = dP is calculated as a public key of the data provider, and the public key of the data provider is associated with a blockchain address of the data provider;

[0019] The parameters of the system and the public key data G1, G2, q, P, Q, e, T, C, P of the transaction parties are publicly stored in the blockchain; and a symmetric encryption / decryption algorithm (E sym , D sym ), an asymmetric encryption / decryption algorithm (a pk , A sk ), and a signature / verification algorithm (Sig, Ver) are predefined in the blockchain.

[0020] Optionally, the step 2 comprises:

[0021] Assume the data used for qualification by the consumer and the data provider is u, the public keys of the consumer and the data provider are denoted as C, D respectively;

[0022] The consumer and the data provider perform the following functions:

[0023] Encrypt u using symmetric key k: N = E k (u) ;

[0024] Use signature algorithm on u to get Sig(u);

[0025] Encrypt k using the public key T of the platform to get K = A T (k) ;

[0026] Send (K, N, Sig(u)) to the platform with the public keys of the consumer and the data provider;

[0027] The platform performs verification operation on Sig(u) using the public keys of the sender, and rejects the request if the verification fails; if the verification succeeds, it performs the following functions:

[0028] Perform private key decryption on K to get k = a t (K) ;

[0029] Perform symmetric key decryption on N to get u = D k (N) ;

[0030] Perform data qualification on the obtained data u, and reject the request if it is unqualified; if it is qualified, perform the following steps:

[0031] Calculate R = tC / D, and then publish the transaction voucher Lice = (seql, R, CR) on the blockchain, where seql is the unique identifier of the voucher, and CR is the specific information of the voucher, including the validity period and the specific rights of the public key owner in the voucher;

[0032] Encrypt the Hash value of Lice using the public key of the sender to get Lice* = A C / D (H(Lice)), encrypt Lice using the public key of the sender to get Lice d = A C / D (Lice) ; perform signature algorithm on Lice to get Sig(Lice), and then send (Lice*, Lice d , Sig(Lice)) to the sender.

[0033] Optionally, the step 3 comprises:

[0034] The data provider and the consumer perform the following steps on the received (Lice*, Lice dSig(Lice) is decrypted using the private key to obtain Lice, and then the verification algorithm Ver is used on Sig(Lice) to determine whether it is the platform; if so, the next step is performed; assuming that the data to be sold by the data provider is M;

[0035] The data provider performs the following operations:

[0036] M* = H(M) is calculated, M` = (M*, CRM, D) is generated, and then M` is uploaded to the blockchain; wherein CRM is the metadata of the data M;

[0037] The consumer performs the following operations:

[0038] The platform selects the data M to be purchased, and obtains M` from the blockchain;

[0039] Y = cD is calculated using the public key D of the data provider and the private key c of the consumer;

[0040] Y* = H(Y) is obtained by Hash processing Y, and then the last 160 bits of Y* are selected as the private address; a random number c1∈Z q * As a private key of the private address, C1 = c1P is calculated as a public key of the private address;

[0041] F = aQ is calculated;

[0042] Lice* = H(Lice) is calculated, Lice, M* and F are encrypted using the public key of the data provider, and Lice d = A, M D = A D (M*), F D = A D (F), and then V = (M D , Lice d , F D ) is sent to the data provider using the private address.

[0043] Optionally, the step 4 comprises:

[0044] After receiving V, the data provider decrypts Lice d , M D and F D using the private key d of the data provider to obtain Lice*, M* and F, obtains the Lice provided by the consumer by looking up the Hash value of Lice in the blockchain, and obtains the data M to be purchased by the consumer by comparing with M` uploaded by the data provider;

[0045] The data provider obtains R from Lice stored in the blockchain, and then performs the following formula:

[0046] e(R,Q)=e(T,F);

[0047] If the formula is correct, the purchase request sent by the privacy address has the purchase qualification;

[0048] The data provider chooses to agree or refuse the purchase request for consideration, and if agreeing to the request, generates z at random in Z q * , encrypts (1, z) using the public key C1 of the privacy address to obtain V1, and sends to the privacy address; if not agreeing, encrypts (0, z) using the public key C1 of the privacy address to obtain V2, and sends to the privacy address.

[0049] Optionally, the step 5 comprises:

[0050] The consumer decrypts the obtained V1 or V2 using the private key c1 of the privacy address; if the data provider replies to agree, the consumer encrypts the address ADR for receiving data in the middleware using the public key D of the data provider to obtain ADR*=A D (ADR), and then sends ADR* to the data provider using the privacy address;

[0051] The data provider decrypts ADR* using the private key d after receiving ADR* to obtain ADR, and then sends data M to the address using the middleware;

[0052] The consumer calculates m=H(M) after obtaining data M, and then judges whether the following formula is correct: m=M*; if the formula is correct, sends M to the data provider using the privacy address to complete the transaction. D

[0053] In the technical scheme provided by the application, the method comprises initializing the system, obtaining the private key and the public key of the platform, the consumer and the data provider; issuing a transaction voucher for the consumer and the data provider who pass the qualification review through the platform, so that they obtain the permission to participate in the transaction; the data provider and the consumer respectively perform the operation of uploading data information and sending a purchase request according to the obtained permission to participate in the transaction; the data provider determines the purchase qualification of the consumer through the purchase request sent by the privacy address; performs data transmission, and completes the transaction, which protects the purchase privacy of the consumer, simplifies the transaction process, and is suitable for the industrial internet of things market mode. BRIEF DESCRIPTION OF DRAWINGS

[0054] In order to more clearly illustrate the technical scheme of the embodiments of the application, the drawings needed in the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the application, and other drawings can be obtained by those skilled in the art without creative labor.​

[0055] Figure 1 The flow chart of the industrial Internet of Things data market transaction method provided by the embodiment of the present application. DETAILED DESCRIPTION

[0056] To make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

[0057] It should be clear that the described embodiments are only some of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

[0058] The terms used in the embodiments of the present application are only for the purpose of describing the specific embodiments, and are not intended to limit the present application. The singular forms "a", "an" and "the" used in the embodiments of the present application are also intended to include the plural forms, unless the context clearly indicates otherwise.

[0059] It should be understood that the term "and / or" used herein only describes the association relationship of the associated objects, which means that there can be three relationships, for example, A and / or B, which can represent the three cases of A alone, A and B together, and B alone. In addition, the character " / " in this paper generally represents that the front and rear associated objects are a "or" relationship.

[0060] Depending on the context, the word "if" as used herein can be interpreted as "when" or "upon" or "in response to determining" or "in response to detecting". Similarly, depending on the context, the phrase "if it is determined" or "if (a stated condition or event) is detected" can be interpreted as "when it is determined" or "in response to determining" or "when (a stated condition or event) is detected" or "in response to detecting (a stated condition or event)".

[0061] Figure 1 The flow chart of the industrial Internet of Things data market transaction method provided by the embodiment of the present application, as shown in Figure 1 The method comprises the following steps:

[0062] Step 1, initializing the system, obtaining the private key and public key of the platform, consumer and data provider.

[0063] In the embodiment of the application, step 1 comprises:

[0064] G1 and G2 are defined, G1 is a cyclic additive group of a prime number q, G2 is a cyclic multiplicative group of the prime number q; e: G1 x G1 -> G2, Q is in G1, and e represents a mapping;

[0065] A secure encryption hash function Hash is defined, and an expression form of the secure encryption hash function Hash is:

[0066] H: {0, 1} * -> Z q * ;

[0067] Z q * represents an integer multiplicative group of q;

[0068] (1) a random number t is selected, t is in Z q * , as a private key of a platform, T = tP is calculated as a public key of the platform, and the public key of the platform is associated with a blockchain address of the platform;

[0069] (2) a random number c is selected, c is in Z q * , as a private key of a consumer, C = cP is calculated as a public key of the consumer, and the public key of the consumer is associated with a blockchain address of the consumer;

[0070] (3) a random number d is selected, d is in Z q * , as a private key of a data provider, D = dP is calculated as a public key of the data provider, and the public key of the data provider is associated with a blockchain address of the data provider;

[0071] The parameters of the system and the public key data G1, G2, q, P, Q, e, T, C, P of the transaction parties are publicly stored in the blockchain; and symmetric encryption / decryption algorithms (E sym , D sym ), asymmetric encryption / decryption algorithms (a pk , A sk ), and signature / verification algorithms (Sig, Ver) are predefined in the blockchain.

[0072] Step 2, transaction credentials are issued to consumers and data providers who pass the qualification examination by the platform, so that the consumers and the data providers obtain the permission to participate in the transaction.

[0073] In the embodiment of the application, step 2 comprises:

[0074] It is assumed that data used for qualification examination of the consumer and the data provider is u, and the public keys of the consumer and the data provider are respectively represented as C and D.

[0075] The consumer and the data provider perform the following functions:

[0076] Encrypt u using symmetric key k: N = E k (u) ;

[0077] Use a signature algorithm on u to obtain Sig (u) ;

[0078] Encrypt k using the public key T of the platform to obtain K = A T (k) ;

[0079] Send (K, N, Sig (u) ) to the platform with the public key of the consumer and the data provider;

[0080] The platform performs a verification operation on Sig (u) using the public key of the sender, and if the verification fails, the request is rejected; if the verification succeeds, the following functions are performed:

[0081] Perform private key decryption on K to obtain k = a t (K) ;

[0082] Perform symmetric key decryption on N to obtain u = D k (N) ;

[0083] Perform data review on the obtained data u, and if it is unqualified, the request is rejected; if it is qualified, the following steps are performed:

[0084] Calculate R = tC / D, and then publish the transaction voucher Lice = (seql, R, CR) on the blockchain, wherein seql is the unique identifier of the voucher, and CR is the specific information of the voucher, including the validity period and the specific rights of the public key owner in the voucher;

[0085] Encrypt the Hash value of Lice using the public key of the sender to obtain Lice* = A C / D (H(Lice)), encrypt Lice using the public key of the sender to obtain Lice d = A C / D (Lice) ; Perform a signature algorithm on Lice to obtain Sig (Lice), and then send (Lice*, Lice d , Sig (Lice) ) to the sender.

[0086] Step 3, according to the obtained rights of participating in the transaction, the data provider and the consumer respectively perform the operations of uploading data information and sending purchase requests.

[0087] In the embodiment of the application, step 3 comprises:

[0088] The data provider and the consumer perform the operations of uploading data information and sending purchase requests respectively according to the received (Lice*, Liced Sig(Lice) is decrypted using the private key to obtain Lice, and then a verification algorithm Ver is used on Sig(Lice) to determine whether it is the platform; if so, the next step is performed; assuming that the data to be sold by the data provider is M;

[0089] The data provider performs the following operations:

[0090] M* = H(M) is calculated, M` = (M*, CRM, D) is generated, and then M` is uploaded to the blockchain; wherein CRM is the metadata of the data M;

[0091] The consumer performs the following operations:

[0092] The platform selects the data M to be purchased, and obtains M` from the blockchain;

[0093] Y = cD is calculated using the public key D of the data provider and the private key c of the consumer;

[0094] Y* = H(Y) is obtained by Hash processing Y, and then the last 160 bits of Y* are selected as the private address; a random number c1 is selected from Z q * The private key of the private address is calculated as C1 = c1P, and the public key of the private address is calculated as A1 = c1A;

[0095] F = aQ is calculated;

[0096] Lice* = H(Lice) is calculated, Lice d = A, M D = A D (M*) and F D = A D (F) are encrypted using the public key of the data provider, and then V = (M D , Lice d , F D ) is sent to the data provider using the private address.

[0097] Step 4, the purchase request sent through the private address is used by the data provider to determine the purchase qualification of the consumer.

[0098] In the embodiment of the application, step 4 includes:

[0099] After receiving V, the data provider uses the private key d of the data provider to decrypt Lice d , M D and F DDecryption is performed to obtain Lice*, M* and F, the consumer-provided Lice is obtained by searching for the Hash value of Lice in the blockchain, and the data M that the consumer wants to purchase is obtained by comparing with the M` uploaded by the data provider;

[0100] The data provider obtains R from Lice stored in the blockchain, and then performs the following formula:

[0101] e(R, Q) = e(T, F);

[0102] If the formula is correct, the purchase request from the privacy address has purchase qualification;

[0103] The data provider chooses to agree or refuse the purchase request for consideration; if the request is agreed, z is randomly generated from Z q * , (1, z) is encrypted using the public key C1 of the privacy address to obtain V1, and is sent to the privacy address; if not, (0, z) is encrypted using the public key C1 of the privacy address to obtain V2, and is sent to the privacy address.

[0104] Step 5, data transmission is performed to complete the transaction.

[0105] In the embodiment of the application, step 5 comprises:

[0106] The consumer uses the private key c1 of the privacy address to decrypt the obtained V1 or V2; if the data provider replies to agree, the consumer uses the public key D of the data provider to encrypt the address ADR for receiving data in the middleware to obtain: ADR*=A D (ADR), and then sends ADR* to the data provider using the privacy address;

[0107] The data provider uses its private key d to decrypt ADR* to obtain ADR after receiving ADR*, and then uses the middleware to send data M to the address;

[0108] The consumer calculates m=H(M) after obtaining data M, and then judges whether the following formula is correct: m=M*; if the formula is correct, M D is sent to the data provider using the privacy address, and the transaction is completed.

[0109] Compared with the prior art, the application has the following beneficial effects:

[0110] 1. A third party: a data transaction platform is provided in the application. The platform provides transaction credentials for each party participating in the transaction, reducing the risk of information leakage caused by the third party.

[0111] 2. The consumer who has obtained the transaction voucher can freely purchase data on the platform without applying for a transaction voucher every time, reducing the complexity of transactions.

[0112] 3. Privacy addresses and bilinear pairings are used to protect the privacy of consumers, so that data providers and other users cannot obtain the purchase records of consumers and cannot configure the behavior files of consumers.

[0113] 4. The purchase process of data and related purchase information are all stored in the blockchain, avoiding the risk of tampering with information and providing help for future audits.

[0114] The technical solution provided by the application comprises the following steps: initializing the system, obtaining the private key and public key of the platform, the consumer and the data provider; issuing transaction vouchers to consumers and data providers who pass the qualification examination through the platform, so that they can obtain the right to participate in transactions; the data provider and the consumer perform the operations of uploading data information and sending purchase requests, respectively, according to the obtained right to participate in transactions; the data provider determines the purchase qualification of the consumer through the purchase request sent by the privacy address; data transmission is performed, and the transaction is completed, the method protects the purchase privacy of the consumer, simplifies the transaction process, and is suitable for the industrial Internet of Things market mode.

[0115] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described system, device and unit can refer to the corresponding processes in the foregoing method embodiments, which will not be described here.

[0116] The above only describes the preferred embodiments of the application and is not intended to limit the application. Any modification, equivalent replacement, improvement, etc. within the spirit and principles of the application should be included in the protection scope of the application.

Claims

1. A blockchain-based industrial IoT data market trading method, characterized in that, The method includes: Step 1: Initialize the system and obtain the private and public keys of the platform, consumers, and data providers; Step 2: Issue transaction certificates to qualified consumers and data providers through the platform to grant them the right to participate in transactions; Step 3: Based on the obtained transaction participation permissions, the data provider and the consumer respectively upload data information and send purchase requests; Step 4: The data provider determines the consumer's eligibility to purchase by sending a purchase request via a private address; Step 5: Transfer data and complete the transaction; Step 2 includes: Assume that the data used for eligibility verification by the consumer and the data provider is u, and the public keys of the consumer and the data provider are represented by C and D, respectively; Consumers and data providers perform the following functions: Encrypt u using symmetric key k: N = E k (u); Apply the signature algorithm to u to obtain Sig(u); Encrypt k using the platform's public key T to obtain K = A T (k); Send (K, N, Sig(u)) along with the public keys of the consumer and the data provider to the platform; The platform uses the sender's public key to perform a verification operation on Sig(u). If the verification fails, the request is rejected; if the verification succeeds, the following functions are executed: Decrypting K using the private key yields k = a t (K); Performing symmetric key decryption on N yields u = D k (N); The obtained data u is reviewed; if it is unqualified, the request is rejected; if it is qualified, the following steps are performed: Calculate R = tC / D, and then publish the transaction certificate on the blockchain: Lice = (seql, R, CR), where seql is the unique identifier of the certificate, CR is the specific information of the certificate, including the validity period and the specific permissions of the public key owner within the certificate; where t is the platform's private key; Encrypt the hash value of Lice using the sender's public key to obtain Lice` = A C / D (H(Lice)) is obtained by encrypting Lice using the sender's public key. d = A C / D (Lice); Perform a signature algorithm on Lice to obtain Sig(Lice), then send (Lice`, Lice... d Sig(Lice)) to the sender; Step 3 includes: Data providers and consumers have different opinions on the received (Lice', Lice) d Sig(Lice) is decrypted using the private key to obtain Lice. Then, the Ver verification algorithm is used on Sig(Lice) to determine whether it is a platform. If it is, proceed to the next step. Assume that the data provider wants to sell M data. The data provider performs the following operations: calculate = H(M), generate M` = ( CRM (data source) and D), then upload M' to the blockchain; where CRM is the metadata of data M; Consumers perform the following actions: Select the data M to purchase on the platform and obtain M' from the blockchain; Calculate Y=cD using the data provider's public key D and the consumer's private key c; Obtain by hashing Y = H(Y), then select The last 160 bits are used as the privacy address; a random number c1∈ As the private key for the privacy address, calculate C1 = c1P as the public key for the privacy address; Calculate F = aQ; calculate = H(Lice), using the data provider's public key pair , Encrypt F to obtain Lice d =A D ( M D = A D ( ), F D =A D (F), then use the private address to send V=(M) to the data provider. D Lice d F D ); Define G1 and G2, where G1 is the cyclic additive group of prime numbers q and G2 is the cyclic multiplicative group of prime numbers q; e: G1×G1→ G2, ∀P, Q∈G1, e represents a mapping; Define a secure cryptographic hash function Hash, expressed in the following form: H： —> ； in, Let q be the integer multiplication group.

2. The method according to claim 1, characterized in that, Step 1 includes: (1) Select a random number t∈ As the platform's private key, T = tP is calculated as the platform's public key, and the platform's public key is associated with the platform's blockchain address; (2) Select a random number c∈ The consumer's private key is used to calculate C = cP, which is then used as the consumer's public key. The consumer's public key is associated with the consumer's blockchain address. (3) Select a random number d∈ The private key of the data provider is used to calculate D = dP, which is used as the public key of the data provider. The public key of the data provider is associated with the blockchain address of the data provider. The system parameters and the public key data G1, G2, q, P, Q, e, T, C, and D of each party to the transaction are publicly stored in the blockchain; and a predefined symmetric encryption / decryption algorithm, E, is also present in the blockchain. sym D sym Asymmetric encryption / decryption algorithm: a pk A sk Signature / verification algorithm: Sig, Ver.

3. The method according to claim 2, characterized in that, Step 4 includes: After receiving V, the data provider uses its private key d to access Lice. d M D and F D Decrypt to obtain , F obtains the consumer-provided Lie by searching for its hash value in the blockchain, and then compares it with the data M' uploaded by the data provider to obtain the data M that the consumer wants to purchase. The data provider obtains R from the Lice stored on the blockchain and then executes the following formula: e(R,Q)=e(T,F); If the formula is true, then the purchase request sent from the private address is eligible to make the purchase; The data provider, for various reasons, may choose to agree to or reject the purchase request; if the request is agreed to, then a random z∈ If you disagree, encrypt (1, z) using the public key C1 of the private address to obtain V1 and send it to the private address; if you disagree, encrypt (0, z) using the public key C1 of the private address to obtain V2 and send it to the private address.

4. The method according to claim 3, characterized in that, Step 5 includes: The consumer decrypts the obtained V1 or V2 using the private key c1 of the privacy address; if the data provider replies with consent, the consumer uses the data provider's public key D to encrypt the address ADR used to receive data in the middleware. =A D (ADR), and then send to the data provider using the private address. ; The data provider received Then, the private key d is used to decrypt and obtain ADR. Then, the middleware is used to send data M to address ADR. After receiving data M, the consumer calculates m = H(M), and then determines whether the following formula holds true: m = If the formula holds true, then send M to the data provider using the private address. D The transaction was completed.

Images