Trusted data space platform fusing multiple trusted environments and data use method

Abstract

The invention relates to the technical field of credible data space, and provides a credible data space platform fusing multiple credible environments and a data use method, and the platform comprises a data credible circulation environment, a plurality of data credible supply environments and a plurality of data credible use environments. The data credible supply environment and the data credible use environment realize supply-demand link through the data credible circulation environment; the data credible circulation environment comprises a data product credible transaction environment and a data information credible delivery environment; a data operation platform is deployed in the data product trusted transaction environment and is used for shelving, browsing and ordering data products; according to the data information credible delivery environment, a block chain data internet is adopted, an encrypted digital asset account is opened on a block chain for each credible object, issued data information assets are stored, data right confirmation is realized through a multi-party encryption technology, and dynamic authorization of the data information assets is realized through a digital envelope technology. The method is not limited by a specific privacy computing technology architecture and is flexible to construct.

Description

Technical Field

[0001] The present invention relates to the field of trusted data space technology, and in particular to a trusted data space platform integrating multiple trusted environments and a data use method. Background Art

[0002] The statements in this section merely provide background art related to the present invention and do not necessarily constitute prior art.

[0003] The circulation of data elements needs to solve the problems of data assetization, data security, trust system, and benefit distribution. Trusted Data Matrix (TDM) is considered to be the data infrastructure for data circulation, which aims to promote the sharing, opening and trading of data in a reliable, secure and transparent manner under the protection of data rights and interests by different stakeholders. Traditional data circulation methods such as "data packet transmission" and "API access control based on data resources" are difficult to solve the data barrier problems caused by intermediary trust, data interception, tampering and leakage, and traceability supervision. It is urgent to build a distributed data development, circulation and application environment trusted by multiple parties to fully release the value of data.

[0004] At present, the construction method of trusted data space mainly draws on the trusted industrial data space architecture proposed by Europe, integrates the actual data circulation and application, and takes into account the distributed and centralized architecture models. Privacy computing technologies such as federated learning and multi-party secure computing are all part of the trusted data space. However, privacy computing is mainly based on data encryption security technology, which is used to solve the application of data in the scenario of not leaving the domain. There are problems such as the inability to unify the standards of multiple technical schools, high technical barriers, and limited applicable scenarios. Summary of the invention

[0005] In order to address the shortcomings of the prior art, the present invention provides a trusted data space platform and data usage method that integrates multiple trusted environments, decoupling the trusted data space into three types of trusted domains: a supply-side trust domain, a demand-side trust domain, and a circulation trust domain, which can be sustainably expanded, are not restricted by a specific privacy computing technology architecture, and are flexible to construct; and the constructed circulation trust domain uses the blockchain data Internet as a public trusted delivery channel for data information. Compared with privacy computing and multi-party secure computing, which require the construction of dedicated data and model exchange channels, it is more universal, low-cost, and more trusted.

[0006] In order to achieve the above object, the present invention adopts the following technical solution:

[0007] A first aspect of the present invention provides a trusted data space platform integrating multiple trusted environments.

[0008] A trusted data space platform integrating multiple trusted environments, including a trusted data circulation environment, multiple trusted data supply environments, and multiple trusted data use environments. The trusted data supply environment and the trusted data use environment realize supply and demand links through the trusted data circulation environment.

[0009] The data trusted supply environment is used to provide data products for transactions and data information for delivery;

[0010] The data trusted use environment is used to integrate and apply data products obtained from transactions and data information obtained from delivery;

[0011] The data trusted circulation environment includes a data product trusted transaction environment and a data information trusted delivery environment; a data operation platform is deployed in the data product trusted transaction environment for listing, browsing and ordering data products; the data information trusted delivery environment adopts the blockchain data Internet, opens an encrypted digital asset account on the blockchain for each trusted object, stores the issued data information assets, realizes data rights confirmation through multi-party encryption technology, and realizes dynamic authorization of data information assets through digital envelope technology.

[0012] Furthermore, the data trusted supply environment includes a data product development environment and a data processing environment;

[0013] The data product development environment is used to provide data product developers with model development, testing and expression capabilities based on the open data resource directory, metadata and data access methods of data resources. After the developed data products are reviewed by the data resource holders, the data product expression information is released to the outside, and the data product model is deployed to the data processing environment according to the product expression information;

[0014] The data processing environment is used to extract the required original data from the data resources when receiving a data delivery request, and calculate the output data information according to the data product model.

[0015] Furthermore, the extraction of the original data is based on a data product transaction order, and the data product transaction order is generated after the data product is ordered.

[0016] Furthermore, the data trusted use environment includes an application product development environment and an information processing environment;

[0017] The application product development environment is used to provide the application product developer with model development, testing and expression capabilities based on the ordered data products and application requirements. After the developed application product is reviewed by the data information user, the application product model is deployed to the information processing environment according to the application product expression information;

[0018] The information processing environment is used to obtain required data information from the data information delivery channel when receiving a business request, and calculate the output data knowledge according to the product model.

[0019] Furthermore, the blockchain data internet provides a data information issuing terminal for data resource holders, a data information receiving terminal for data information users, and a data information carrying terminal for individuals;

[0020] The data information issuing terminal for data resource holders is used for each data resource holder to issue and manage the data information processed by itself;

[0021] The personal data information carrying terminal is used to receive, manage and authorize the data information carried by the individual;

[0022] The data information receiving end facing the data information user is used for each data information user to receive, manage and use the authorized data information.

[0023] Furthermore, the blockchain data internet is composed of interconnected city chains, industry chains, enterprise chains and regional chains.

[0024] Furthermore, the data trusted supply environment is established based on boundary access control, and the boundary is trusted by the data resource holder.

[0025] Furthermore, the data trusted use environment is established based on boundary access control, and the boundary is trusted by the data information user.

[0026] Furthermore, the delivery metering data generated by the data information trusted delivery environment during the data information delivery process is returned to the data product trusted transaction environment as a billing basis for data product transactions.

[0027] A second aspect of the present invention provides a data use method, based on a trusted data space platform integrating multiple trusted environments as described in the first aspect, comprising the following steps:

[0028] Data resource holders provide data products and data information through a trusted data supply environment;

[0029] The data information carrier puts the data product on the data operation platform, and the data information user browses and orders the data product through the data operation platform;

[0030] The data resource holder publishes the data information to the blockchain data network, and the data information user obtains the data information based on the trusted delivery of the blockchain data network;

[0031] The data trusted usage environment integrates and applies data products and data information.

[0032] Compared with the prior art, the present invention has the following beneficial effects:

[0033] The trusted data space platform described in the present invention integrates multiple trusted environments, which decouples the trusted data space into three types of trusted domains: a supply-side trust domain, a demand-side trust domain, and a circulation trust domain. Each of them can be sustainably expanded, is not restricted by a specific privacy computing technology architecture, and is flexible in construction.

[0034] The trusted data space platform described in the present invention integrates multiple trusted environments. The circulation trust domain it constructs adopts the blockchain data Internet as a public trusted delivery channel for data information. Compared with privacy computing and multi-party secure computing, which require the construction of dedicated data and model exchange channels, it is more universal, low-cost and more trusted.

[0035] The trusted data space platform that integrates multiple trusted environments described in the present invention makes full use of existing trust domains: supply-side trust domain and demand-side trust domain. It does not necessarily require the deployment of a highly complex and costly privacy computing environment. It can be a traditional data development and processing system with low technical barriers and good applicability.

[0036] The trusted data space platform that integrates multiple trusted environments described in the present invention, whose blockchain data network constructs a technical trust environment, is independent of organizations or individuals.

[0037] The trusted data space platform described in the present invention integrates multiple trusted environments, and the trusted data space it constructs is a distributed open space. First, it supports the supply-side trust domain to continuously access the trust domain of new data resource holders; second, it supports the demand-side trust domain to continuously access the trust domain of new application scenarios; third, it supports the blockchain data Internet of the circulation trust domain to continuously expand new city chains, industry chains, enterprise chains and regional chains, and continuously open new encrypted digital asset accounts for data resource holders, data information carriers and data information users.

[0038] The trusted data space platform integrating multiple trusted environments described in the present invention, through the reconstruction of the architecture, can effectively break down data barriers by ensuring that the original data does not leave the domain without the need for complex privacy computing technology on the data supply side, and only the processed data information enters the circulation trust domain. The data demand side can ensure that the organization's business model does not leave the domain without the need for multi-party secure computing technology, and can generate data knowledge in its own trust domain using multi-source data information processing to meet business needs and effectively protect the organization's business secrets and intellectual property rights carried by the model. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The accompanying drawings in the specification, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments and descriptions of the present invention are used to explain the present invention and do not constitute improper limitations on the present invention.

[0040] Figure 1 This is an architecture diagram of a trusted data space platform integrating multiple trusted environments according to Embodiment 1 of the present invention;

[0041] Figure 2 This is an architecture diagram of a trusted data provision environment according to Embodiment 1 of the present invention;

[0042] Figure 3 This is an architecture diagram of a trusted data usage environment according to Embodiment 1 of the present invention;

[0043] Figure 4 This is an architecture diagram of a trusted data circulation environment according to Embodiment 1 of the present invention;

[0044] Figure 5 This is an architecture diagram of a trusted data space management and service system according to Embodiment 1 of the present invention;

[0045] Figure 6 This is a flow chart of a data transaction method according to Embodiment 2 of the present invention;

[0046] Figure 7 This is a flowchart of the data delivery method of embodiment 2 of the present invention. DETAILED DESCRIPTION

[0047] The present invention will be further described below in conjunction with the accompanying drawings and embodiments.

[0048] It should be noted that the following detailed descriptions are exemplary and are intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used herein have the same meanings as those commonly understood by those skilled in the art to which the present invention belongs.

[0049] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit exemplary embodiments according to the present invention. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should be understood that when the terms "comprising" and / or "including" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.

[0050] In the present invention, terms such as "upper", "lower", "left", "right", "front", "back", "vertical", "horizontal", "side", "bottom", etc. indicate directions or positional relationships based on the directions or positional relationships shown in the accompanying drawings. They are relational words determined only for the convenience of describing the structural relationships of the various parts or elements of the present invention, and do not specifically refer to any part or element in the present invention and should not be understood as limitations on the present invention.

[0051] In the present invention, terms such as "fixed connection", "connected", "connection", etc. should be understood in a broad sense, indicating that it can be fixedly connected, integrally connected or detachably connected; it can be directly connected or indirectly connected through an intermediate medium. Relevant scientific research or technical personnel in this field can determine the specific meanings of the above terms in the present invention according to specific circumstances, and they should not be understood as limiting the present invention.

[0052] In the absence of conflict, the embodiments of the present invention and the features of the embodiments may be combined with each other.

[0053] Example 1

[0054] Embodiment 1 of the present invention provides a trusted data space platform integrating multiple trusted environments.

[0055] Trusted data space needs to solve the security and trust issues of data supply, data circulation, and data application respectively, and make full use of the existing security and trust system to provide efficient, low-cost, and universal overall solutions that are suitable for all scenarios. Both data supply and data use have established their own trust domains using network information security facilities and management systems, and the deployment of data product development and data processing facilities in them is controlled and trusted by the trust domain controller.

[0056] In view of the support demand for trusted data space for data circulation, the application complexity and applicability of privacy computing related technologies required for trusted data space are overcome, and the existing data supply and data application trust domains are fully utilized to deploy data resource development, data processing, application scenario development, and information processing facilities. The development and processing facilities in each trusted domain are linked through the blockchain trusted network to form a trusted data space composed of interconnected multiple trusted environments, thereby solving the problems of high cost, complex technology, poor applicability, difficulty in implementing application scenarios, and difficulty in continuous expansion faced by the construction of trusted data space. The trusted data space platform provided in this embodiment integrates multiple trusted environments, builds a trusted data circulation domain based on the blockchain network based on the existing data supply trust domain and data application trust domain, links the existing multiple data supply and data use trust domain, and forms a distributed trusted data space that is endless and expands on demand, becoming an indispensable security trust layer in the data infrastructure, and providing data trusted processing and delivery support for upper-level data operations.

[0057] This embodiment provides a trusted data space platform that integrates multiple trusted environments, such as Figure 1 As shown, the existing data supply trust domain (data trusted supply environment) and the data usage trust domain (data trusted usage environment) are linked through the data trusted circulation domain (data trusted circulation environment).

[0058] In this embodiment, data products refer to the methods and forms of extracting, processing and outputting data from data resources, have clear application scenarios and application values, and are the transaction units of data circulation. Data information refers to the instantiated data products that are formed by processing data resources using data products, have use value, can be provided to the outside world, and belong to specific social entities, and are the delivery units of data circulation.

[0059] Among them, there can be multiple trusted data supply environments, which are controlled and trusted by multiple data resource holders, responsible for providing data products for transactions and outputting data information on demand for delivery.

[0060] There can also be multiple trusted data usage environments, which are controlled and trusted by multiple data information users, and are responsible for integrating and applying data products obtained from transactions and data information obtained from delivery.

[0061] The trusted data supply environment and the trusted data usage environment realize the supply and demand linkage through the trusted data circulation environment. The trusted data circulation environment is responsible for data product transactions and data information delivery. It is realized by blockchain technology and is trusted by multiple parties including data resource holders, data information users and data information carriers (individuals and enterprises).

[0062] For a trusted data supply environment, such as Figure 2 shown.

[0063] There are multiple sources of data supply on the data supply side. Each data resource holder already has its own data resource control domain and has built a trust domain for data resources through traditional network information security technology facilities and security management systems. Usually, this security trust domain is established based on boundary access control. The boundary is trusted by the data resource holders, in which the data product development environment and data processing environment are deployed, and data products and data information are output. They are trusted by the data resource holders and ensure that the original data in their data resources does not leave their control domain.

[0064] Among them, one or more data resources held by the organization, such as government data from the integrated government big data platform, and department data or enterprise data from the self-built data resource center, are collections of original data that reflect business facts.

[0065] Data resources provide the data development environment with a data resource directory, metadata dictionary, and data access methods; data resources provide the data processing environment with a data resource address and output the original data that can be obtained through the data access method.

[0066] The data product development environment provides model development, testing and expression capabilities to data product developers entrusted and trusted by data resource holders based on the open data resource directory, metadata and data access methods of data resources. After the developed data products are reviewed by the data resource holders, data product expression information can be released to the outside, and data product models can be deployed to the data processing environment according to the product expression information, providing data processing methods for the data processing environment. Among them, product expression includes data expression, model expression and computing power expression. Data expression is used for supply and demand matching in data product transactions. Model expression is used to deploy data processing methods to the data processing environment, including traditional data warehouse models, pre-trained AI models, data information interface implementation logic, static data report preparation methods, static data set provision methods and human-computer interaction tools that can obtain data information. Computing power expression is used to explain the computing power conditions required by the data product model.

[0067] The data processing environment provides a computing environment based on the deployed data product model and the computing power expression in the product expression. When a data delivery request is received, the required raw data is extracted from the data resources, the data information is calculated and output according to the product model, and the data delivery process is started. The data information output by the data processing environment includes two categories: personal information or non-personal information, which determines the delivery method of the data information.

[0068] For trusted data usage environments, such as Figure 3 shown.

[0069] There are multiple scenarios of data usage on the data demand side. The data information users of each application scenario already have business application control domains, and have built a trust domain for the application scenario through traditional network information security technology facilities and security management systems. Like the trust domain on the supply side, this security trust domain is usually established based on boundary access control, and the boundary is trusted by the data information users of the application scenario. Deploy the application product development environment and information processing environment in it, receive the ordered multi-source data products, input the delivered multi-source data information, and output the processed data knowledge to the application scenario for business processing or business decision-making.

[0070] Among them, the organization has one or more business application scenarios, puts forward the demand for the use of data information, and entrusts and trusts the application product developer to develop the application product.

[0071] The application product development environment provides application product developers with model development, testing and expression capabilities based on the ordered data products and application requirements. After the developed application products are reviewed by the data information users, general application products can be provided to the outside for trading, and customized application products can only be used in the specific application scenarios of the data information users. The application product model is deployed to the information processing environment in accordance with the application product expression information, and information processing methods are provided for the information processing environment.

[0072] The information processing environment provides a computing environment based on the deployed application product model and the computing power expression in the product expression. When receiving a business request, it obtains the required data information from the data information delivery channel and calculates and outputs data knowledge according to the product model. Application product expression includes data expression, model expression and computing power expression. Data expression is used for supply and demand matching in general application product transactions. Model expression is used to deploy information processing methods to the information processing environment, including pre-trained AI models, data knowledge interface implementation logic, static data report analysis methods and human-computer interaction tools that can obtain data knowledge. Computing power expression is used to illustrate the computing power conditions required by the application product model.

[0073] For a trusted data circulation environment, such as Figure 4 shown.

[0074] The data supply side provides valuable data to the data demand side in the form of data information. There is no trust between the two sides, and the data information may be tampered with, denied, leaked, or lost during the transmission process. It is necessary to build an end-to-end data information trusted delivery channel between the data information issuer and the data information receiver. If the delivered data information belongs to personal information, the delivery process also requires personal participation and personal consent or authorization. Due to the existence of multiple data resource suppliers, multiple data information users, and numerous data information carriers, these end-to-end trusted delivery channels constitute a data information trusted delivery network, connecting the data information supply side, the data information demand side, and individuals. In addition, data information delivery is triggered by data transactions, and it is also necessary to establish a transaction mechanism for data products or application products to achieve supply and demand docking and matching of data products or application products. Therefore, it is necessary to establish a trusted circulation domain between the two sides, in which a trusted transaction environment for data products and a trusted delivery environment for data information are deployed.

[0075] Since the data product trading environment does not involve data information but only product expression information, in order to obtain larger scale benefits of data circulation, an institutional trust mechanism can be adopted, and a centralized data product trading platform can be operated by an authorized and credible data trading organization.

[0076] The data information delivery environment involves data information content, and data delivery cannot be carried out through intermediaries and centralized platforms. A technical trust mechanism needs to be established. Blockchain is the best technology to achieve technical trust in an untrusted environment. Through distributed city, industry, enterprise, and regional blockchains, an interconnected blockchain data network is built as a trusted delivery network for data information.

[0077] Among them, in the trusted transaction environment of data products, a data operation platform is deployed. The platform provides the ability to put data products on the shelves and publish them. The developed data products are published to the data counter of the data product supermarket or the data flagship store, and are independently managed, priced and traded. The data expression information in the product expression is used for supply and demand matching; the platform provides data product supermarket capabilities, that is, the data product transaction portal, which centrally provides data product catalogs and expression information, expands the scale of data product transactions, and the listed data products are managed separately according to the data resource holders, with global unified classification, unified search, personalized recommendation and quality evaluation; the platform provides data product ordering services for the majority of data demanders, and provides demand collection, demand matching, transaction order placement, data delivery initiation, receiving and delivering metering data and transaction evidence storage functions.

[0078] The trusted data information delivery environment is an open distributed architecture. The core is a blockchain data Internet composed of a series of interconnected city chains, industry chains, enterprise chains and regional chains. It has trusted subjects, trusted objects and trusted transaction capabilities. It realizes the trust of subjects through digital identity technology, and the trust of objects (data) through digital asset technology. All operations in the data circulation link are recorded in the blockchain account book for evidence tracing to realize transaction trust. These homogeneous or heterogeneous city, industry, enterprise and regional blockchains realize subject unification, object mutual recognition and transaction intercommunication through multi-chain cross-chain protocols. The blockchain data Internet opens an encrypted digital asset account on the blockchain for each trusted object to store the issued data information assets, realize data confirmation through multi-party encryption technology, and realize dynamic authorization of data information assets through digital envelope technology. Among them, the trusted subject refers to social entities such as individuals, enterprises, organizations, etc. that open accounts on the blockchain. The trusted object refers to the data on the blockchain, that is, the delivered data information. The trustworthiness of the delivered data is guaranteed based on the blockchain's anti-tampering, anti-repudiation and traceability capabilities.

[0079] Three types of terminals are provided on the blockchain data network: the data information issuing terminal (D terminal) for data resource holders, the data information receiving terminal (B terminal) for data information users, and the data information carrying terminal (C terminal) for individuals. Each data resource holder uses the D terminal to issue and manage the data information processed by himself, and each person uses the C terminal to receive, manage, and authorize the data information he carries. Each data information user receives, manages, and uses the authorized data information through the B terminal. When a data product transaction order is reached, the data delivery process is triggered by the business of the data information receiving terminal, and the amount of data information delivered is provided to the data product trading platform as delivery measurement data for transaction reconciliation and profit distribution. The data information trusted delivery network has the characteristics of the next stage of the Internet of Web3.0.

[0080] This embodiment provides a trusted data space platform integrating multiple trusted environments, connected to a trusted data space management and service system, such as Figure 5 shown.

[0081] A trusted data space is an operating environment that requires continuous expansion of the data supply side, data demand side, blockchain network, various entities and objects entering the space. It requires real-time supervision and traceability of the issuance, transactions, delivery, and use of the space, and provides a management service portal for data space operators.

[0082] Among them, supply-side access management provides registration of the trusted space of each data resource holder, including information such as organizational identity, data product development environment address, data processing environment address, etc., to control the access and disconnection of the trusted space of the data resource holder.

[0083] Demand-side access management provides registration for each data information user, including organizational identity, application product development environment address, information processing environment address and other information, and controls the access and disconnection of the trusted environment of data information users.

[0084] Blockchain access management provides registration for city chains, industry chains, enterprise chains and regional chains, including blockchain identification, cross-chain protocols, cross-chain gateway addresses and other information.

[0085] Subject management provides unified management of various subjects, including data resource holders, data product developers, data information carriers, application product developers, data information users, data product transaction operators, and data information delivery service providers. It helps them open accounts on the data product trading platform and collects subject accounts opened in various blockchains.

[0086] Object management provides unified management of data products and data information, collects listed data products and issued data information from data trading platforms and data information delivery networks, forms a unified product catalog and metadata, and issues data information assets to the blockchain network.

[0087] Transaction monitoring collects transaction order information from the data product trading platform for unified management; delivery monitoring collects delivery measurement information from the data information delivery network.

[0088] Traceability supervision conducts spatial operation monitoring based on the collected supply and demand access, subject, object, blockchain, transaction, and delivery information.

[0089] This embodiment provides a trusted data space platform that integrates multiple trusted environments, decoupling the trusted data space into three types of trusted domains: a supply-side trust domain, a demand-side trust domain, and a circulation trust domain. Each of them can be sustainably expanded, is not restricted by a specific privacy computing technology architecture, and is flexible to construct.

[0090] This embodiment provides a trusted data space platform that integrates multiple trusted environments and makes full use of existing trust domains: supply-side trust domain and demand-side trust domain. It does not necessarily require the deployment of a highly complex and costly privacy computing environment. It can be a traditional data development and processing system with low technical barriers and good applicability.

[0091] This embodiment provides a trusted data space platform that integrates multiple trusted environments. The circulating trust domain blockchain data Internet constructed is a public trusted delivery channel for data information. Compared with privacy computing and multi-party secure computing, which require the construction of dedicated data and model exchange channels, it is more universal, low-cost, and more trusted.

[0092] This embodiment provides a trusted data space platform that integrates multiple trusted environments. The blockchain data network constructs a technical trust environment that is independent of organizations or individuals.

[0093] This embodiment provides a trusted data space platform that integrates multiple trusted environments. The trusted data space constructed is a distributed open space. First, it supports the supply-side trust domain to continuously access the trust domain of new data resource holders. Second, it supports the demand-side trust domain to continuously access the trust domain of new application scenarios. Third, it supports the blockchain data Internet of the circulation trust domain to continuously expand new city chains, industry chains, enterprise chains and regional chains, and continuously open new encrypted digital asset accounts for data resource holders, data information carriers and data information users.

[0094] This embodiment provides a trusted data space platform that integrates multiple trusted environments. Through the reconstruction of the architecture, the data supply side does not need complex privacy computing technology to ensure that the original data does not leave the domain, and only the processed data information enters the circulation trust domain, effectively breaking down data barriers. The data demand side does not need multi-party secure computing technology to ensure that the organization's business model does not leave the domain, and uses multi-source data information to process and generate data knowledge in its own trust domain to meet business needs and effectively protect the organization's business secrets and intellectual property rights carried by the model.

[0095] This embodiment provides a trusted data space platform that integrates multiple trusted environments, positioning the trusted data space between the data infrastructure and the data operation platform. The upper-level data operation platform provides algorithm models to the trusted data space, and the lower-level IT infrastructure provides computing power. The trusted data space in the middle performs data processing, information transmission, and information processing. On the basis of horizontally decoupling the trusted data space into the supply-side trust domain, circulation trust domain, and demand-side trust domain, the data element circulation system is vertically decoupled into the data operation platform, the trusted data space, and the computing power infrastructure, which helps to build a multi-party collaborative upstream, midstream, and downstream data circulation ecology.

[0096] Example 2

[0097] Embodiment 2 of the present invention provides a method for using data, based on a trusted data space platform integrating multiple trusted environments as in Embodiment 1, including data transaction and data delivery.

[0098] For data transactions, such as Figure 6 As shown, the following steps are included:

[0099] Step 1: With the authorization of the data resource holder, the data source provides the data resource directory, metadata dictionary, and data access method to the data development environment;

[0100] Step 2: The data product developer develops and tests the data product model in the data product development environment based on the entrustment of the data resource holder;

[0101] Step 3: The data operator puts the developed data products on the data product supermarket in the data product trusted transaction environment, that is, displays the data expression information of the data products in the data product supermarket to match supply and demand;

[0102] Step 4: The data information user on the data demand side browses the data products through the data product supermarket in the data product trusted transaction environment, orders the data products, and forms a data product transaction order;

[0103] Step 5: The data operator deploys the data product model to the data information trusted delivery environment according to the data product transaction order;

[0104] Step 6: The data information user requests data delivery in the data information trusted delivery environment, triggering the data delivery process.

[0105] Among them, the data delivery process, such as Figure 7 As shown, the following steps are included:

[0106] Step 601: The data information user applies for data delivery through the data information receiving terminal in the data information trusted delivery environment;

[0107] Step 602: The data processing environment receives a data delivery request from a data information user, extracts original data resources from a data source according to a data product transaction order, and processes the original data resources based on a data product model to form data information;

[0108] Step 603: The data resource holder uses the data information issuing terminal (D terminal) in the data information trusted delivery environment to issue the data information to the blockchain data network;

[0109] Step 604: If personal data is involved, the individual authorizes through the data information carrying terminal (C terminal);

[0110] Step 605: After personal authorization, the data information user obtains the data information based on the trusted delivery of the blockchain data network through the data information receiving end (end B); the delivery metering data generated during the delivery process is returned to the data product trusted transaction environment as the billing basis for the data product transaction.

[0111] Step 606: The data information user may entrust the data application product developer to develop an application data product for it in the application product development environment based on business needs, and deploy the application data product model in the information processing environment;

[0112] Step 607: The data information user processes the delivered multi-source data information based on the application data product model in the information processing environment, and integrates them to form data knowledge that better meets the needs of the data information user;

[0113] Step 608: The data information user may directly apply the received data information to actual application scenarios, or may process the data information into data knowledge through application data products and then apply it to actual application scenarios.

[0114] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A trusted data space platform integrating multiple trusted environments, characterized in that: It includes a trusted data circulation environment, multiple trusted data supply environments, and multiple trusted data use environments. The trusted data supply environment and the trusted data use environment realize the supply and demand link through the trusted data circulation environment. The data trusted supply environment is used to provide data products for transactions and data information for delivery; The data trusted use environment is used to integrate and apply data products obtained from transactions and data information obtained from delivery; The data trusted circulation environment includes a data product trusted transaction environment and a data information trusted delivery environment; a data operation platform is deployed in the data product trusted transaction environment for data product listing, browsing and ordering; The data information trusted delivery environment adopts the blockchain data Internet, opens an encrypted digital asset account on the blockchain for each trusted object, stores the issued data information assets, realizes data rights confirmation through multi-party encryption technology, and realizes dynamic authorization of data information assets through digital envelope technology.

2. A trusted data space platform integrating multiple trusted environments as claimed in claim 1, characterized in that: The data trusted supply environment includes a data product development environment and a data processing environment; The data product development environment is used to provide data product developers with model development, testing and expression capabilities based on the open data resource directory, metadata and data access methods of data resources. After the developed data products are reviewed by the data resource holders, the data product expression information is released to the outside, and the data product model is deployed to the data processing environment according to the product expression information; The data processing environment is used to extract the required original data from the data resources when receiving a data delivery request, and calculate the output data information according to the data product model.

3. A trusted data space platform integrating multiple trusted environments as claimed in claim 2, characterized in that: The original data is extracted based on a data product transaction order, and the data product transaction order is generated after the data product is ordered.

4. The trusted data space platform integrating multiple trusted environments as claimed in claim 1, characterized in that: The data trusted use environment includes application product development environment and information processing environment; The application product development environment is used to provide the application product developer with model development, testing and expression capabilities based on the ordered data products and application requirements. After the developed application product is reviewed by the data information user, the application product model is deployed to the information processing environment according to the application product expression information; The information processing environment is used to obtain required data information from the data information delivery channel when receiving a business request, and calculate the output data knowledge according to the product model.

5. The trusted data space platform integrating multiple trusted environments as claimed in claim 1, characterized in that: The blockchain data internet provides a data information issuing terminal for data resource holders, a data information receiving terminal for data information users, and a data information carrying terminal for individuals; The data information issuing terminal for data resource holders is used for each data resource holder to issue and manage the data information processed by itself; The personal data information carrying terminal is used to receive, manage and authorize the data information carried by the individual; The data information receiving end facing the data information user is used for each data information user to receive, manage and use the authorized data information.

6. The trusted data space platform integrating multiple trusted environments as claimed in claim 1, characterized in that: The blockchain data internet is composed of interconnected city chains, industry chains, enterprise chains and regional chains.

7. The trusted data space platform integrating multiple trusted environments as claimed in claim 1, characterized in that: The data trusted supply environment is established based on boundary access control, and the boundary is trusted by the data resource holder.

8. The trusted data space platform integrating multiple trusted environments as claimed in claim 1, characterized in that: The data trusted use environment is established based on boundary access control, and the boundary is trusted by the data information users.

9. The trusted data space platform integrating multiple trusted environments as claimed in claim 1, characterized in that: The delivery metering data generated by the data information trusted delivery environment during the data information delivery process is returned to the data product trusted transaction environment as a billing basis for data product transactions.

10. A data use method, based on a trusted data space platform integrating multiple trusted environments as claimed in any one of claims 1 to 9, characterized in that: include: Data resource holders provide data products and data information through a trusted data supply environment; The data information carrier puts the data product on the data operation platform, and the data information user browses and orders the data product through the data operation platform; The data resource holder publishes the data information to the blockchain data network, and the data information user obtains the data information based on the trusted delivery of the blockchain data network; The data trusted usage environment integrates and applies data products and data information.

Images