Mechanism data sharing system and method based on block chain

Abstract

The invention provides a mechanism data sharing system and method based on a block chain. The system comprises an institution subsystem and a block chain network, the mechanism subsystem is used for determining original data and a data access API which need to be shared; generating metadata; the metadata and the data access API are packaged and transmitted to the block chain network through the own data sharing gateway; the block chain network is used for performing on-chain storage on metadata and a data access API (Application Program Interface) and providing a retrieval interface; the retrieval interface is used for querying metadata and data access API which meet retrieval conditions from the chain, and returning a query result to the user; a user sends a data acquisition request to the data sharing gateway; and the data sharing gateway is used for querying the corresponding original data from the original data storage system of the mechanism subsystem and transmitting the queried original data to the user. A large amount of original data does not need to be stored in the block chain network, and acquisition of the original data is not affected even if the reading capability of the block chain network is low.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a blockchain-based institutional data sharing system and method. Background Art

[0002] With the rapid development of information technology, traditional institutions (such as medical, education, transportation, public security, etc.) increasingly rely on their internal centralized business systems to manage and store large amounts of data, and these systems accumulate huge amounts of data during operation. However, traditional centralized business systems generally have data island problems, that is, the centralized business systems of various institutions operate independently, and data is difficult to communicate with each other, which greatly limits the comprehensive utilization and value mining of data.

[0003] As an emerging distributed ledger technology, blockchain technology is decentralized, tamper-proof and highly transparent, providing a new way to solve the above problems. Through consensus mechanisms and cryptography, blockchain ensures that data cannot be tampered with once recorded, and achieves full data tracking and traceability, improving the credibility and security of data. However, using blockchain only to store raw data has the problem of being unable to store large-scale data and having poor read and write performance. Summary of the invention

[0004] In response to at least one of the above technical problems, an embodiment of the present invention provides a blockchain-based institutional data sharing system and method.

[0005] According to a first aspect, an institutional data sharing system based on blockchain provided by an embodiment of the present invention includes at least one institutional subsystem and a blockchain network; wherein:

[0006] Each institutional subsystem is used to: determine the original data and data access API that need to be shared in its own original data storage system; generate corresponding metadata based on the original data that needs to be shared; and package and transmit the metadata and data access API to the blockchain network through its own data sharing gateway; wherein each institutional subsystem has its own original data storage system and data sharing gateway;

[0007] The blockchain network is used to store the received metadata and data access API on the chain and provide a unified retrieval interface; wherein the retrieval interface is used to query metadata and data access API that meet the retrieval conditions from the chain upon receiving the retrieval conditions of the user, and return the query results to the user; after receiving the query results, the user sends a data acquisition request carrying the metadata in the query results to the data sharing gateway of the corresponding institution subsystem through the data access API in the query results;

[0008] The data sharing gateway of each institutional subsystem is used to: when receiving a data acquisition request sent by a user, query the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmit the queried original data to the user.

[0009] In one embodiment, each institutional subsystem is specifically used to: generate corresponding permission information while generating corresponding metadata, and package the permission information together with the metadata and the data access API through its own data sharing gateway and transmit the package to the blockchain network;

[0010] Correspondingly, the blockchain network is specifically used to: store the received metadata, the data access API and the permission information on the chain;

[0011] Correspondingly, the data sharing gateway of each institutional subsystem is specifically used for: when receiving a data acquisition request sent by a user, checking whether the user has access rights according to the permission information on the chain; if it is determined that the user has access rights after checking, querying the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmitting the queried original data to the user.

[0012] In one embodiment, each institutional subsystem is specifically used to: generate corresponding verification information while generating corresponding metadata, and package the verification information together with the metadata and the data access API through its own data sharing gateway and transmit the verification information to the blockchain network; wherein the verification information is a first hash value obtained by performing hash calculation on the original data to be shared;

[0013] Correspondingly, the blockchain network is specifically used to: store the received metadata, the data access API and the verification information on the chain; the retrieval interface is specifically used to: when receiving the user's retrieval conditions, query the metadata, data access API and verification information that meet the retrieval conditions from the chain, and return the query results to the user; wherein, after the user obtains the original data from the data sharing gateway, the user performs a hash calculation on the obtained original data to obtain a second hash value, and determines whether the second hash value is the same as the first hash value; if so, it is determined that the obtained original data is trustworthy.

[0014] In one embodiment, the blockchain network is specifically used to: when receiving the metadata and the data access API, parse the metadata using smart contract technology, verify the format correctness and completeness of the parsing results, and store the metadata and the data access API on the chain after verification.

[0015] In one embodiment, the blockchain network is specifically used to: store the metadata and the data access API on multiple blockchain nodes through a consensus mechanism to obtain multiple data copies.

[0016] According to a second aspect, a blockchain-based institutional data sharing method provided by an embodiment of the present invention is implemented based on the system described in any one of the first aspects, and the method includes:

[0017] Each institutional subsystem determines the original data and data access API that need to be shared in its original data storage system, generates corresponding metadata based on the original data that needs to be shared, and packages and transmits the metadata and data access API to the blockchain network through its own data sharing gateway; wherein each institutional subsystem has its own original data storage system and data sharing gateway;

[0018] The received metadata and data access API are stored on the blockchain network, and a unified search interface is provided, so that when the search interface receives the user's search conditions, it queries the metadata and data access API that meet the search conditions from the chain, and returns the query results to the user; wherein, after receiving the query results, the user sends a data acquisition request carrying the metadata in the query results to the data sharing gateway of the corresponding institution subsystem through the data access API in the query results;

[0019] When the data sharing gateway of each institutional subsystem receives a data acquisition request sent by a user, it queries the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmits the queried original data to the user.

[0020] In one embodiment, the original data to be shared as needed generates corresponding metadata; and the metadata and the data access API are packaged and transmitted to the blockchain network through its own data sharing gateway, including: while generating the corresponding metadata, corresponding permission information is generated, and the permission information is packaged together with the metadata and the data access API through its own data sharing gateway and transmitted to the blockchain network;

[0021] Correspondingly, storing the received metadata and the data access API on-chain through the blockchain network includes: storing the received metadata, the data access API and the permission information on-chain through the blockchain network;

[0022] Correspondingly, querying the corresponding original data from the original data storage system of the institution subsystem according to the metadata carried in the data acquisition request includes: checking whether the user has access rights according to the permission information on the chain; if it is determined that the user has access rights, querying the corresponding original data from the original data storage system of the institution subsystem according to the metadata carried in the data acquisition request.

[0023] In one embodiment, the original data to be shared as needed generates corresponding metadata; and the metadata and the data access API are packaged and transmitted to the blockchain network through its own data sharing gateway, including: while generating the corresponding metadata, corresponding verification information is generated, and the verification information is packaged together with the metadata and the data access API through its own data sharing gateway and transmitted to the blockchain network; wherein the verification information is a first hash value obtained by performing hash calculation on the original data to be shared;

[0024] Correspondingly, the storing the received metadata and the data access API on the chain through the blockchain network includes: storing the received metadata, the data access API and the verification information on the chain through the blockchain network, so that the search interface can query the metadata, data access API and verification information that meet the search conditions from the chain when receiving the search conditions of the user, and return the query results to the user;

[0025] Among them, after the user obtains the original data from the data sharing gateway, the user performs hash calculation on the obtained original data to obtain a second hash value, and determines whether the second hash value is the same as the first hash value; if so, it is determined that the obtained original data is trustworthy.

[0026] In one embodiment, storing the received metadata and the data access API on-chain through the blockchain network includes: when the metadata and the data access API are received through the blockchain network, parsing the metadata using smart contract technology, verifying the format correctness and completeness of the parsing results, and storing the metadata and the data access API on-chain after verification.

[0027] In one embodiment, storing the received metadata and the data access API on-chain through the blockchain network includes: storing the metadata and the data access API on multiple blockchain nodes through a consensus mechanism to obtain multiple data copies.

[0028] In the blockchain-based institutional data sharing system and method provided by the embodiment of the present invention, each institutional subsystem determines the original data and data access API that need to be shared in its original data storage system, generates corresponding metadata according to the original data to be shared, and packages and transmits the metadata and data access API to the blockchain network through its own data sharing gateway. The blockchain network stores the received metadata and data access API on the chain, and provides a unified retrieval interface, so that when the retrieval interface receives the user's retrieval conditions, it queries the metadata and data access API that meet the retrieval conditions from the chain, and returns the query results to the user. After receiving the query results, the user sends a data acquisition request carrying the metadata in the query results to the data sharing gateway of the corresponding institutional subsystem through the data access API in the query results. When the data sharing gateway of each institutional subsystem receives the data acquisition request sent by the user, it queries the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmits the queried original data to the user. It can be seen that in the embodiment of the present invention, a large amount of original data does not need to be stored in the blockchain network, reducing the scale of blockchain storage data. Since the original data is obtained from the data sharing gateway rather than the blockchain network, even if the blockchain network has low reading capacity, it will not affect the acquisition of the original data. Moreover, the reliability and non-tamperability of the data are ensured by using the blockchain network. In addition, in the embodiment of the present invention, the original data storage system of the institution subsystem is still used, and there is no need to redeploy the database. Therefore, there is no deployment of a new database and migration of a large amount of data, which reduces technical complexity and cost. Through the system provided by the embodiment of the present invention, ordinary users can access the original data of different institutions, and users of one institution can access the original data of another institution, that is, data sharing between institutions is realized, avoiding the problem of data islands. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 This is a schematic diagram of the architecture of an institutional data sharing system based on blockchain in one embodiment of the present invention;

[0030] Figure 2 A schematic diagram of a data sharing gateway in an institutional subsystem in one embodiment of the present invention packaging relevant data and transmitting the data to a blockchain network;

[0031] Figure 3 A schematic diagram of a blockchain network performing multi-node storage through a consensus mechanism in one embodiment of the present invention;

[0032] Figure 4 A schematic diagram of a process of a user performing a data query in one embodiment of the present invention;

[0033] Figure 5 The figure is a flowchart of a method for sharing institutional data based on blockchain in one embodiment of the present invention. DETAILED DESCRIPTION

[0034] In the first aspect, the embodiment of the present invention provides an institutional data sharing system based on blockchain, see Figure 1 , the system includes at least one institutional subsystem and a blockchain network; wherein:

[0035] Each institutional subsystem is used to: determine the original data and data access API that need to be shared in its own original data storage system; generate corresponding metadata based on the original data that needs to be shared; and package and transmit the metadata and data access API to the blockchain network through its own data sharing gateway; wherein each institutional subsystem has its own original data storage system and data sharing gateway;

[0036] The blockchain network is used to store the received metadata and data access API on the chain and provide a unified retrieval interface; wherein the retrieval interface is used to query metadata and data access API that meet the retrieval conditions from the chain upon receiving the retrieval conditions of the user, and return the query results to the user; after receiving the query results, the user sends a data acquisition request carrying the metadata in the query results to the data sharing gateway of the corresponding institution subsystem through the data access API in the query results;

[0037] The data sharing gateway of each institutional subsystem is used to: when receiving a data acquisition request sent by a user, query the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmit the queried original data to the user.

[0038] Among them, the institutional subsystem can be the data management system corresponding to various institutions such as medical, educational, transportation, and public security. Each institutional subsystem has its own original data storage system and data sharing gateway. The original data storage system can be a file storage system, a database system, etc. Each institutional subsystem is responsible for preparing the original data that needs to be shared based on its own original data storage system, and generating corresponding metadata based on the original data that needs to be shared. Among them, the original data that needs to be shared can be the data already in the original data storage system, or it can be the newly generated data for the current business. Among them, metadata is used for users to retrieve data, and the metadata contains basic descriptions and index information of the data. Each institutional subsystem needs to provide a data access API, and of course, it can also provide a calling method. See Figure 2Each institutional subsystem interacts with the blockchain network and users through its own data sharing gateway. Therefore, after each institutional subsystem generates metadata, it packages the metadata and the data access API through its own data sharing gateway and transmits the packaged data packet to the blockchain network.

[0039] Among them, the role of the blockchain network is to receive data packets from the institutional subsystem, parse the data packets, and then store them on the blockchain nodes to achieve on-chain storage, and provide a unified retrieval interface to the outside. When the user needs to retrieve the original data, the corresponding metadata must be obtained first. To obtain the metadata, the search conditions must be entered, and the search conditions are transmitted to the search interface. The search interface will search on each blockchain node according to the search conditions, thereby retrieving the query results that meet the search conditions. The query results include metadata and data access APIs, and the query results are returned to the user. The user can generate a data acquisition request based on the metadata in the query result. The data acquisition request carries user information, metadata, etc., so that the user sends the data acquisition request to the data sharing gateway of the corresponding institutional subsystem through the data access API in the query result.

[0040] Among them, the function of the data sharing gateway of each institutional subsystem is to receive data acquisition requests from users, parse the data acquisition requests, obtain user information and metadata, and then query the corresponding original data from the original data storage system based on the metadata, and return the queried original data to the user, so that the user can obtain the desired original data.

[0041] The user in the embodiment of the present invention can be understood as a client or browser where an ordinary user or an institutional user is located, referred to as a user terminal for short.

[0042] In one embodiment, each institutional subsystem is specifically used to: generate corresponding permission information while generating corresponding metadata, and package and transmit the permission information together with the metadata and the data access API to the blockchain network through its own data sharing gateway;

[0043] Correspondingly, the blockchain network is specifically used to: store the received metadata, the data access API and the permission information on the chain;

[0044] Correspondingly, the data sharing gateway of each institutional subsystem is specifically used for: when receiving a data acquisition request sent by a user, checking whether the user has access rights according to the permission information on the chain; if it is determined that the user has access rights after checking, querying the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmitting the queried original data to the user.

[0045] That is to say, the institutional subsystem generates permission information while generating metadata. Then the data sharing gateway packages the permission information, metadata and data access API together, and transmits the packaged data packet to the blockchain network. After receiving the data packet, the blockchain network will store it on the chain. When the data sharing gateway of an institutional subsystem receives a data acquisition request, it will determine whether the user has access rights based on the user information and permission information in the data acquisition request. If the user has access rights, the corresponding original data will be queried from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and the queried original data will be transmitted to the user.

[0046] Among them, permission information defines which users or organizations have the right to access the original data.

[0047] It can be seen that by verifying whether a user has access rights through permission information, the access security of the original data can be improved.

[0048] In one embodiment, each institutional subsystem is specifically used to: generate corresponding verification information while generating corresponding metadata, and package the verification information together with the metadata and the data access API through its own data sharing gateway and transmit the verification information to the blockchain network; wherein the verification information is a first hash value obtained by performing hash calculation on the original data to be shared;

[0049] Correspondingly, the blockchain network is specifically used to: store the received metadata, the data access API and the verification information on the chain; the retrieval interface is specifically used to: when receiving the user's retrieval conditions, query the metadata, data access API and verification information that meet the retrieval conditions from the chain, and return the query results to the user; wherein, after the user obtains the original data from the data sharing gateway, the user performs a hash calculation on the obtained original data to obtain a second hash value, and determines whether the second hash value is the same as the first hash value; if so, it is determined that the obtained original data is trustworthy.

[0050] It can be seen that when the institutional subsystem generates metadata, it will perform hash calculation on the original data to be shared, and obtain the first hash value. The first hash value is used as verification information. The data sharing gateway packages the metadata, verification information and data access API together, and transmits the packaged data packet to the blockchain network. After receiving the data packet, the blockchain network stores it on the chain. When the user enters the search conditions at the front end, the search interface searches on the blockchain node according to the search conditions, and the query results obtained include metadata, data access API and verification information, which are returned to the user. The user generates a data acquisition request at the front end, and sends the data acquisition request to the data sharing network of the corresponding institutional subsystem through the data access API. After receiving the data acquisition request, the data sharing network searches the corresponding original data storage system according to the metadata in the data acquisition request, obtains the original data, and feeds the original data back to the user. After receiving the original data, the user can perform hash calculation on the original data to obtain the second hash value, and then determine whether the second hash value is the same as the first hash value; if so, it is determined that the acquired original data is trustworthy, so that the user can use the original data.

[0051] Specifically, the SHA256 hash algorithm may be used to calculate the hash value.

[0052] It can be seen that by verifying the verification information, the security and credibility of the original data during transmission and use can be ensured.

[0053] In one embodiment, the blockchain network is specifically used to: when receiving the metadata and the data access API, parse the metadata using smart contract technology, verify the format correctness and completeness of the parsing results, and store the metadata and the data access API on the chain after verification.

[0054] It can be seen that the metadata, data access API, and even verification information, permission information, etc. sent by any institutional subsystem of the blockchain network can first be parsed through smart contracts to obtain the parsing results, and then verify the format correctness and integrity of the parsing results. After the verification is passed, the parsing results are stored on the chain. Smart contract technology is an automatically executed code that can be triggered to run immediately after the data is uploaded.

[0055] In one embodiment, see Figure 3 The blockchain network can be specifically used to: store the metadata and the data access API on multiple blockchain nodes through a consensus mechanism to obtain multiple data copies.

[0056] It can be seen that the blockchain network stores multiple copies on multiple blockchain nodes through a consensus mechanism. Data uploaded to the blockchain network will be permanently recorded. The characteristics of the blockchain ensure that the data cannot be tampered with once recorded, thereby improving the security and credibility of the data. Moreover, since the data is backed up on each node in the blockchain network, even if some nodes fail or are attacked, the data can still be restored from other nodes.

[0057] Among them, the data sharing gateway will also package the institutional information together with metadata, data access API, verification information, permission information, etc. and send it to the blockchain network, so that the blockchain network can know which institutional subsystem’s relevant data is stored.

[0058] See also Figure 4 When a user wants to access the original data, he first retrieves the metadata from the blockchain network, and after obtaining the metadata, sends a data acquisition request to the data sharing network of the corresponding institutional subsystem, so that the data sharing gateway performs a query, obtains the original data and returns it to the user. The user calculates the second hash value of the received original data, and determines whether the second hash value is equal to the first hash value in the verification information. If they are equal, the original data can be used.

[0059] It can be seen that in the embodiment of the present invention, a large amount of original data does not need to be stored in the blockchain network, reducing the scale of blockchain storage data. Moreover, the reliability and non-tamperability of the data are ensured by using the blockchain network. In addition, the original data storage system of the institution subsystem is still used in the embodiment of the present invention, and the database does not need to be redeployed. Therefore, there is no new database deployment and migration of a large amount of data, which reduces the technical complexity and cost. Through the system provided by the embodiment of the present invention, ordinary users can access the original data of different institutions, and users of one institution can access the original data of another institution, that is, data sharing between institutions is realized, avoiding the problem of data islands. Moreover, in the embodiment of the present invention, the user's access rights are verified by permission information, and the user uses verification information to verify the received data, which can greatly improve the user's access security and the credibility of the data. Therefore, the present invention realizes the efficiency, security and credibility of institutional data sharing.

[0060] In a second aspect, an embodiment of the present invention provides a method for sharing institutional data based on blockchain, which is implemented based on the system provided in the first aspect, see Figure 5 , the method includes S110 to S130:

[0061] S110, each institutional subsystem determines the original data and data access API that need to be shared in its own original data storage system, generates corresponding metadata according to the original data to be shared, and packages and transmits the metadata and the data access API to the blockchain network through its own data sharing gateway; wherein each institutional subsystem has its own original data storage system and data sharing gateway;

[0062] S120, storing the received metadata and data access API on the blockchain network, and providing a unified retrieval interface, so that when the retrieval interface receives the user's retrieval conditions, it queries the metadata and data access API that meet the retrieval conditions from the chain, and returns the query results to the user; wherein, after receiving the query results, the user sends a data acquisition request carrying the metadata in the query results to the data sharing gateway of the corresponding institution subsystem through the data access API in the query results;

[0063] S130. When the data sharing gateway of each institutional subsystem receives a data acquisition request sent by a user, it queries the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmits the queried original data to the user.

[0064] In one embodiment, the original data to be shared as needed generates corresponding metadata; and the metadata and the data access API are packaged and transmitted to the blockchain network through its own data sharing gateway, including: while generating the corresponding metadata, corresponding permission information is generated, and the permission information is packaged together with the metadata and the data access API through its own data sharing gateway and transmitted to the blockchain network;

[0065] Correspondingly, storing the received metadata and the data access API on-chain through the blockchain network includes: storing the received metadata, the data access API and the permission information on-chain through the blockchain network;

[0066] Correspondingly, querying the corresponding original data from the original data storage system of the institution subsystem according to the metadata carried in the data acquisition request includes: checking whether the user has access rights according to the permission information on the chain; if it is determined that the user has access rights, querying the corresponding original data from the original data storage system of the institution subsystem according to the metadata carried in the data acquisition request.

[0067] In one embodiment, the original data to be shared as needed generates corresponding metadata; and the metadata and the data access API are packaged and transmitted to the blockchain network through its own data sharing gateway, including: while generating the corresponding metadata, corresponding verification information is generated, and the verification information is packaged together with the metadata and the data access API through its own data sharing gateway and transmitted to the blockchain network; wherein the verification information is a first hash value obtained by performing hash calculation on the original data to be shared;

[0068] Correspondingly, the storing the received metadata and the data access API on the chain through the blockchain network includes: storing the received metadata, the data access API and the verification information on the chain through the blockchain network, so that the search interface can query the metadata, data access API and verification information that meet the search conditions from the chain when receiving the search conditions of the user, and return the query results to the user;

[0069] Among them, after the user obtains the original data from the data sharing gateway, the user performs hash calculation on the obtained original data to obtain a second hash value, and determines whether the second hash value is the same as the first hash value; if so, it is determined that the obtained original data is trustworthy.

[0070] In one embodiment, storing the received metadata and the data access API on-chain through the blockchain network includes: when the metadata and the data access API are received through the blockchain network, parsing the metadata using smart contract technology, verifying the format correctness and completeness of the parsing results, and storing the metadata and the data access API on-chain after verification.

[0071] In one embodiment, storing the received metadata and the data access API on-chain through the blockchain network includes: storing the metadata and the data access API on multiple blockchain nodes through a consensus mechanism to obtain multiple data copies.

[0072] It is understandable that the explanation of the relevant contents, specific implementation methods, beneficial effects, examples, etc. in the method provided in the embodiment of the present invention can be found in the corresponding parts of the system provided in the first aspect, and will not be repeated here.

[0073] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0074] Those skilled in the art should be aware that in one or more of the above examples, the functions described in the present invention can be implemented by hardware, software, widgets, or any combination thereof. When implemented by software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on a computer-readable medium.

[0075] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made on the basis of the technical solution of the present invention should be included in the scope of protection of the present invention.

Claims

1. A blockchain-based institutional data sharing system, characterized in that: The system includes at least one institutional subsystem and a blockchain network; wherein: Each institutional subsystem is used to: determine the original data and data access API that need to be shared in its own original data storage system; generate corresponding metadata based on the original data that needs to be shared; and package and transmit the metadata and data access API to the blockchain network through its own data sharing gateway; wherein each institutional subsystem has its own original data storage system and data sharing gateway; The blockchain network is used to store the received metadata and data access API on the chain and provide a unified retrieval interface; wherein the retrieval interface is used to query metadata and data access API that meet the retrieval conditions from the chain upon receiving the retrieval conditions of the user, and return the query results to the user; after receiving the query results, the user sends a data acquisition request carrying the metadata in the query results to the data sharing gateway of the corresponding institution subsystem through the data access API in the query results; The data sharing gateway of each institutional subsystem is used to: when receiving a data acquisition request sent by a user, query the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmit the queried original data to the user.

2. The system according to claim 1, characterized in that Each institutional subsystem is specifically used to: generate corresponding permission information while generating corresponding metadata, and package the permission information together with the metadata and the data access API through its own data sharing gateway and transmit them to the blockchain network; Correspondingly, the blockchain network is specifically used to: store the received metadata, the data access API and the permission information on the chain; Correspondingly, the data sharing gateway of each institutional subsystem is specifically used for: when receiving a data acquisition request sent by a user, checking whether the user has access rights according to the permission information on the chain; if it is determined that the user has access rights after checking, querying the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmitting the queried original data to the user.

3. The system according to claim 1, characterized in that Each institutional subsystem is specifically used to: generate corresponding verification information while generating corresponding metadata, and package the verification information together with the metadata and the data access API through its own data sharing gateway and transmit the verification information to the blockchain network; wherein the verification information is a first hash value obtained by performing hash calculation on the original data to be shared; Correspondingly, the blockchain network is specifically used to: store the received metadata, the data access API and the verification information on the chain; the retrieval interface is specifically used to: when receiving the user's retrieval conditions, query the metadata, data access API and verification information that meet the retrieval conditions from the chain, and return the query results to the user; wherein, after the user obtains the original data from the data sharing gateway, the user performs a hash calculation on the obtained original data to obtain a second hash value, and determines whether the second hash value is the same as the first hash value; if so, it is determined that the obtained original data is trustworthy.

4. The system according to claim 1, characterized in that The blockchain network is specifically used to: when receiving the metadata and the data access API, parse the metadata using smart contract technology, verify the format correctness and completeness of the parsing results, and store the metadata and the data access API on the chain after verification.

5. The system according to claim 1, characterized in that The blockchain network is specifically used to store the metadata and the data access API on multiple blockchain nodes through a consensus mechanism to obtain multiple data copies.

6. A method for sharing institutional data based on blockchain, characterized in that: The method is implemented based on the system according to any one of claims 1 to 5, and the method comprises: Each institutional subsystem determines the original data and data access API that need to be shared in its original data storage system, generates corresponding metadata based on the original data that needs to be shared, and packages and transmits the metadata and data access API to the blockchain network through its own data sharing gateway; wherein each institutional subsystem has its own original data storage system and data sharing gateway; The received metadata and data access API are stored on the blockchain network, and a unified search interface is provided, so that when the search interface receives the user's search conditions, it queries the metadata and data access API that meet the search conditions from the chain, and returns the query results to the user; wherein, after receiving the query results, the user sends a data acquisition request carrying the metadata in the query results to the data sharing gateway of the corresponding institution subsystem through the data access API in the query results; When the data sharing gateway of each institutional subsystem receives a data acquisition request sent by a user, it queries the corresponding original data from the original data storage system of the institutional subsystem according to the metadata carried in the data acquisition request, and transmits the queried original data to the user.

7. The method according to claim 6, characterized in that generating corresponding metadata according to the original data to be shared as needed; and packaging the metadata and the data access API through its own data sharing gateway and transmitting them to the blockchain network, including: generating corresponding permission information while generating the corresponding metadata, and packaging the permission information together with the metadata and the data access API through its own data sharing gateway and transmitting them to the blockchain network; Correspondingly, storing the received metadata and the data access API on-chain through the blockchain network includes: storing the received metadata, the data access API and the permission information on-chain through the blockchain network; Correspondingly, querying the corresponding original data from the original data storage system of the institution subsystem according to the metadata carried in the data acquisition request includes: checking whether the user has access rights according to the permission information on the chain; if it is determined that the user has access rights, querying the corresponding original data from the original data storage system of the institution subsystem according to the metadata carried in the data acquisition request.

8. The method according to claim 6, characterized in that generating corresponding metadata according to the original data to be shared as needed; and packaging the metadata and the data access API through its own data sharing gateway and transmitting them to the blockchain network, including: generating corresponding verification information while generating the corresponding metadata, packaging the verification information together with the metadata and the data access API through its own data sharing gateway and transmitting them to the blockchain network; wherein the verification information is a first hash value obtained by performing a hash calculation on the original data to be shared; Correspondingly, the storing the received metadata and the data access API on the chain through the blockchain network includes: storing the received metadata, the data access API and the verification information on the chain through the blockchain network, so that the search interface can query the metadata, data access API and verification information that meet the search conditions from the chain when receiving the search conditions of the user, and return the query results to the user; Among them, after the user obtains the original data from the data sharing gateway, the user performs hash calculation on the obtained original data to obtain a second hash value, and determines whether the second hash value is the same as the first hash value; if so, it is determined that the obtained original data is trustworthy.

9. The method according to claim 6, characterized in that The storing the received metadata and the data access API on-chain through the blockchain network includes: when the metadata and the data access API are received through the blockchain network, the metadata is parsed using smart contract technology, and the format correctness and completeness of the parsing results are verified, and the metadata and the data access API are stored on-chain after verification.

10. The method according to claim 6, characterized in that The storing the received metadata and the data access API on-chain through the blockchain network includes: storing the metadata and the data access API on multiple blockchain nodes through a consensus mechanism to obtain multiple data copies.

Images