Cross-chain data transmission type sandbox supervision method and system for ideal lattice attribute encryption on block chain

By adopting ideal lattice attribute encryption technology and smart contracts on the blockchain, we have built a cross-chain data supervision sandbox, which solves problems such as insufficient response timeliness and encryption algorithm security threats in cross-chain data supervision, and achieves security, compliance and efficient supervision of cross-chain data.

CN119577034AActive Publication Date: 2025-03-07TIANJIN UNIVERSITY OF TECHNOLOGY

Patent Information

Application Number
CN202411720432.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-11-28
Publication Date
2025-03-07
Estimated Expiration
2044-11-28

AI Technical Summary

Technical Problem

The existing blockchain technology has problems such as insufficient response timeliness, difficulty in positioning problem nodes, encryption algorithms face quantum computing threats, and insufficient compliance detection in cross-chain data supervision, resulting in an increase in the risk of cross-chain data leakage and abuse.

Method used

Adopt the ideal grid attribute encryption technology on the blockchain, build a regulatory sandbox through a third-party platform, configure alliance chain nodes, and realize identity registration and permission management of data providers, data users and regulatory agencies. Use smart contracts for data encryption, compliance detection, access control and anomaly detection to ensure the security and compliance of data during cross-chain transmission.

Benefits of technology

It realizes secure access control for cross-chain data, ensures the privacy and integrity of data, resists quantum computing attacks, reduces the risk of cross-chain data leakage and abuse, and improves regulatory efficiency and compliance.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119577034A_ABST
    Figure CN119577034A_ABST
Patent Text Reader

Abstract

The invention discloses a cross-chain data penetration type sandbox supervision method and system for ideal lattice attribute encryption on a block chain, and the method comprises the following steps: a third-party platform selects and builds a block chain, configures each node on an alliance chain, and forms a supervision sandbox; the third-party platform carries out sandbox initialization, namely, a public key and a main private key are generated according to an ideal lattice encryption algorithm; the data provider, the data user and the supervision mechanism register identities on the block chain; arranging cross-chain data to be shared by a data provider, and defining an access strategy of the cross-chain data; a data user initiates an access request to the data and submits the access request; after the data user obtains the access authorization, data decryption is carried out by utilizing the attribute private key and the decryption ciphertext of the data user; and the supervision mechanism monitors and checks the flow direction and access condition of the data in real time through the block chain in the supervision sandbox, and identifies an abnormal access mode through an integrated anomaly detection mechanism of the smart contract. According to the method, the privacy and the integrity of the cross-chain data are guaranteed.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a cross-chain data penetration sandbox supervision method and system with ideal grid attribute encryption on a blockchain. Background Art

[0002] With the vigorous development of blockchain technology, a large amount of transaction data from different fields are stored on the blockchain and exchanged with each other through various cross-domain technologies. If abnormal situations cannot be supervised in time, resulting in cross-chain data leakage, there will be irreversible and instantaneous risks that spread globally.

[0003] From the perspective of the current data supervision system, the response timeliness of the existing supervision system is poor, some links require manual intervention, and it is impossible to achieve real-time detection and reporting of abnormal situations in the supervision process. In addition, due to the complexity and diversity of nodes involved in cross-chain data exchange, sharing and other interactive operations, the current system often finds it difficult to quickly locate problem nodes after a data leakage incident occurs, making it difficult to effectively prevent the abuse and improper use of cross-chain data.

[0004] From the perspective of cross-chain data security, with the rapid development of quantum computing technology, existing encryption algorithms face unprecedented security threats, which may make the currently widely used encryption technology easy to crack in theory. Especially in the process of cross-chain data exchange, chain data may be exposed to users on any chain, and data access rights are difficult to be strictly controlled. Once the encryption measures are cracked, attackers can easily obtain sensitive information or tamper with data, greatly increasing the risk of data attack and abuse, identity theft or leakage of trade secrets, which may in turn damage the commercial competitiveness of the participants.

[0005] From the perspective of the entire cross-chain data exchange and supervision process, the existing mechanism cannot meet compliance and regulatory requirements at the same time, and it is difficult to ensure that data uploads comply with various compliance regulations. In particular, data transmitted between different chains may not have undergone strict compliance review, and it is impossible to ensure that it complies with the requirements of relevant laws and regulations, resulting in an increase in the potential risk of compliance issues. At the same time, the regulatory system lacks effective real-time monitoring and anomaly detection functions, which delays the response to potential violations or non-compliant behaviors, making it impossible for all participants to take preventive measures or adjust regulatory strategies in a timely manner, increasing the regulatory blind spot of the cross-chain data flow process.

[0006] In order to solve the above problems, it is necessary to develop a method of penetrating supervision based on blockchain technology and ideal lattice attribute-based encryption using a regulatory sandbox mechanism. Summary of the invention

[0007] In view of the technical problems pointed out in the above background technology, the purpose of the present invention is to provide a cross-chain data penetration sandbox supervision method and system with ideal grid attribute encryption on blockchain.

[0008] To achieve the purpose of the present invention, the technical solution provided by the present invention is as follows:

[0009] First aspect

[0010] The present invention provides a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on a blockchain, comprising the following steps:

[0011] Step 1: The third-party platform selects and builds a blockchain, configures each node on the alliance chain, forms a regulatory sandbox, determines the participating data providers, data users, and regulatory agencies, and all participants jointly formulate sandbox rules to clarify the specifications for data uploading, shared access, and supervision;

[0012] Step 2: The third-party platform initializes the sandbox, that is, generates the public key IPK and the master private key MPK according to the ideal lattice encryption algorithm, and deploys smart contracts according to the different identity requirements of data providers, data users and regulators to build a decentralized network in the regulatory sandbox;

[0013] Step 3: Data providers, data users, and regulators register their identities on the blockchain, provide identity type and data source information, and the smart contract generates a unique identifier OID according to the rules and records it on the blockchain; the third-party platform allocates a specific attribute vector set A based on the user's role and the permissions granted in the sandbox rules, and generates the corresponding private key ISK_i for the user distribution;

[0014] Step 4: The data provider organizes the cross-chain data M to be shared and defines its access policy S. Then, the data M is encrypted into ciphertext C and uploaded to the blockchain through a smart contract. The blockchain also records the relevant metadata, upload timestamp and hash value. The smart contract automatically performs compliance testing on the uploaded data to ensure that it complies with the regulatory rules formulated by the regulatory sandbox, and based on this, the identity and authority of the data provider are verified to ensure the legitimacy of the cross-domain data.

[0015] Step 5: The data user initiates a request to access the data and submits an access application. The smart contract checks the user's identity OID and attribute vector set A to determine whether it complies with the provider's data access policy S. If it does, it generates a visitor-specific authorization token, otherwise it denies access. The access request and results are recorded in the blockchain to achieve transparent supervision and timely traceability.

[0016] Step 6: After the data user obtains access authorization, it uses its attribute private key ISK_i and decrypted ciphertext C_i to decrypt the data. After the data user's attributes meet the data provider's access policy S, the data is successfully decrypted to obtain the plaintext data Mi_i;

[0017] Step 7: The regulator uses blockchain monitoring within the regulatory sandbox to view the flow and access of data in real time, identifies abnormal access patterns through the integrated anomaly detection mechanism of smart contracts, and sends warnings to various participants;

[0018] Step 8: All participants can provide feedback on the operation logs over a period of time to evaluate the effectiveness of the current blockchain regulatory sandbox and make optimizations and adjustments.

[0019] Second aspect

[0020] The present invention provides a cross-chain data penetration sandbox supervision system with ideal grid attribute encryption on a blockchain, and the system executes the above method.

[0021] Compared with the prior art, the present invention has the following beneficial effects:

[0022] 1. The present invention provides an effective cross-chain data security access control mechanism by effectively combining the attribute-based encryption algorithm on the ideal lattice with the decentralization and immutability of the blockchain. By publishing reasonable attribute allocation and access policies on the blockchain, diverse users can safely upload, access and decrypt trusted cross-chain data. Data users must first apply for cross-chain data operations. After the regulatory sandbox determines that they meet the access identity authority and access policy given by the data provider, they can view the cross-chain data and record their operation logs, thereby ensuring the privacy and integrity of the cross-chain data. At the same time, the attribute-based encryption algorithm scheme on the ideal lattice has the ability to resist quantum computing attacks, ensuring that even attackers with powerful computing capabilities cannot crack the ciphertext. Security is enhanced by using hash functions and random numbers to prevent replay attacks and ciphertext analysis.

[0023] 2. The present invention enables participants from different industries and fields to operate cross-chain data under a lower regulatory burden in this regulatory sandbox, but continue to be supervised by the regulatory agency. It not only promotes cooperation and data sharing among all participants, but also ensures the compliance and legality of cross-chain data during the circulation process. The regulatory sandbox also provides a flexible environment to observe and evaluate the security of cross-chain data, ensuring that reviews and interventions are carried out in the early stages of abnormal operations to prevent potential compliance issues or market manipulation. In this regulatory sandbox, a participant feedback channel is also established to collect opinions from multiple parties, regularly evaluate the effectiveness of the regulatory sandbox, and adjust compliance inspection standards and data sharing rules. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 A system architecture diagram provided for an embodiment of the present invention;

[0025] Figure 2 A schematic diagram of a general workflow of the regulatory sandbox system provided in an embodiment of the present invention;

[0026] Figure 3 This is a workflow diagram for uploading, encrypting, and decrypting cross-chain data in an embodiment of the present invention. DETAILED DESCRIPTION

[0027] The following is a clear and complete description of the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] In response to the technical problems pointed out by the background technology, an expected method to solve data leakage and cross-chain data penetration supervision is: to form a sandbox supervision mechanism, in which cross-chain data is allowed to be uploaded to the blockchain for sharing or exchange before encryption is used, and it is stipulated that only participants who meet the set identity authority conditions can view the data, so as to reduce the leakage of cross-domain data of the blockchain and shorten the time to find the leaker; set the blockchain of the regulator to record the data upload, viewing and other operations of different participants in real time, report and trace the abnormal situations in time, reduce the losses to multiple participants after the cross-chain data leakage, and form a supervision method with regulators, regulated persons and professional service providers as the main participants, to form a flat supervision method with reduced compliance costs and improved supervision efficiency, to combat data leakage caused by possible quantum attacks, and meet the new supervision requirements of full time and space, full life cycle, automation, intelligence, security and trustworthiness.

[0029] like Figure 1 As shown, the overall architecture of the embodiment of the present application is composed of four participants: a third-party platform, a data provider, a data user, and a regulatory agency. The four participants work independently and collaborate with each other, as follows:

[0030] (1) Third-party platforms

[0031] The third-party platform is mainly responsible for selecting and building blockchains, configuring each node on the alliance chain, and forming a regulatory sandbox. It also helps all participants to jointly formulate sandbox rules and clarify the specifications for data uploading, shared access, and supervision. It also initializes the sandbox, generates the public key IPK and the master private key MPK according to the given ideal lattice attribute-based encryption algorithm, deploys smart contracts for the different identity requirements of data providers, data users, and regulators, distributes unique identity identifiers, user vector attributes and other parameters, and builds a decentralized network in the regulatory sandbox.

[0032] (2) Data Provider

[0033] The data provider (DP) uploads the data to the blockchain according to the rules jointly formulated in the sandbox, and provides metadata of the data, including data type, upload time, encrypted access policy, etc. After encrypting the data with attribute-based encryption (ABE) on the ideal grid, it receives the encryption key sent to the user by the blockchain for storage. The data provider must ensure that the data must be encrypted in the JSON format specified by the platform and stored on the blockchain, and plain text data cannot be directly stored.

[0034] (3) Data users

[0035] The data user (DU) needs to provide the smart contract with its data identifier OID, user ID, and user attribute vector set A_DU when submitting a data access request. The data user can access the data after the user verification is passed and the access policy S is satisfied at the same time. If the data user receives an access authorization token, the data can be accessed, and its private key can be used to decrypt the target ciphertext data. When the obtained decryption token is used again beyond a certain range or time, it will become invalid, and the data user is prohibited from forwarding it again or sharing it illegally.

[0036] (4) Regulatory agencies

[0037] The regulatory authority (RI) is responsible for monitoring all data uploads, access, and decryption operations to ensure compliance of data content. It has the authority to view all access logs and can intervene as needed. It is also necessary to regularly review data uploads, access patterns, and user behaviors to ensure there is no abuse. Regulators can also use smart contracts to automate the audit process, identify potential abnormal access patterns, and automatically issue alerts and record them in the blockchain when anomalies are detected for further investigation by regulators.

[0038] like Figure 2-3As shown, the method provided in this embodiment mainly has four participating parties: data provider, data user, regulator, and third-party platform, which realizes the effective supervision of encrypted upload, permission access and data flow of cross-domain blockchain data, ensures the compliance and security of cross-chain data in the whole process, and promotes data sharing between different domains. Specifically, it includes the following steps:

[0039] Step 1: The third-party platform selects and builds a blockchain, configures each node on the alliance chain, forms a regulatory sandbox, and determines the participating data providers, data users, and regulatory agencies. All participants jointly formulate sandbox rules to clarify the specifications for data uploading, shared access, and supervision.

[0040] Step 2: The third-party platform initializes the sandbox, that is, generates the public key IPK and the master private key MPK according to the ideal lattice encryption algorithm, and deploys smart contracts according to the different identity requirements of data providers, data users and regulators to build a decentralized network in the regulatory sandbox.

[0041] Step 3: Data providers, data users, and regulators register their identities on the blockchain, provide identity type, data source and other information, and the smart contract generates a unique identifier OID according to the rules and records it on the blockchain. The third-party platform assigns a specific attribute vector set A based on the user's role and the permissions granted in the sandbox rules, and generates the corresponding private key ISK_i for the user distribution.

[0042] Step 4: The data provider uploads and organizes the cross-chain data M to be shared, defines its access policy S, and then encrypts the data M into ciphertext C and uploads it to the blockchain through a smart contract. The blockchain also records the relevant metadata, upload timestamp, and hash value. The smart contract automatically performs compliance testing on the uploaded data to ensure that it complies with the regulatory rules formulated by the regulatory sandbox, and based on this, verifies the identity and authority of the data provider to ensure the legitimacy of the cross-domain data.

[0043] Step 5: The data user initiates a request to access the data and submits an access application. The smart contract checks the user's identity OID and attribute vector set A to determine whether it complies with the provider's data access policy S. If it does, it generates a dedicated authorization token for the visitor, otherwise it denies access. The access request and results are recorded in the blockchain to achieve transparent supervision and timely traceability.

[0044] Step 6: After the data user obtains access authorization, it uses its attribute private key ISK_i and decrypted ciphertext C_i to decrypt the data. After the data user's attributes meet the data provider's access policy S, the data is successfully decrypted to obtain the plaintext data M_i.

[0045] Step 7: The regulator uses blockchain monitoring within the regulatory sandbox to view the flow and access of data in real time, identifies abnormal access patterns through the integrated anomaly detection mechanism of smart contracts, and sends warnings to all participants.

[0046] Step 8: All participants can provide feedback on the operation logs over a period of time to evaluate the effectiveness of the current blockchain regulatory sandbox and make optimizations and adjustments.

[0047] Preferably, the data rules in the regulatory sandbox in step 1 are: operations of different participants in the sandbox must comply with GDPR rules. The details are as follows:

[0048] 1.1: The data provider (DP) is responsible for uploading data to the blockchain and encrypting the data using attribute-based encryption (ABE) on the ideal grid. The data provider must provide metadata for the data, including data type, upload time, encrypted access policy, etc. The data must be encrypted in the JSON format specified by the platform and stored on the blockchain. Plain text data cannot be stored.

[0049] 1.2: The data user (DU) submits a data access request and provides the data identifier OID, user ID, and user attribute vector set A_DU to the smart contract. After the data user is verified, the data can be accessed if the access policy S is met. If the request is compliant, the blockchain will return an access authorization token. At this time, the ciphertext data is decrypted using its private key. The decryption token obtained by the data user is limited to use within a specific scope, and secondary forwarding or illegal sharing is prohibited.

[0050] 1.3: The Regulatory Authority (RI) is responsible for monitoring all data upload, access and decryption operations to ensure compliance. It has the authority to view all access logs and can intervene as needed. It is required to regularly review data uploads, access patterns and user behaviors to ensure there is no abuse. All operations of the participants will generate audit logs on the blockchain for the regulatory authority to query and analyze. At the same time, smart contracts are used to automate the audit process and identify potential abnormal access patterns. When anomalies are detected, alarms will be automatically issued and recorded in the blockchain for further investigation by the regulatory authority.

[0051] Preferably, the sandbox initialization in step 2: formulate a secure hash function H on the blockchain. Input a large prime number p and select an ideal lattice G generator g to generate a public key IPK and a master private key MPK, and the generation formula is IPK=g α modp, where α is chosen randomly.

[0052] Preferably, the specific implementation method of step 3 is: the user provides his / her identity type, unique identity number and other information, obtains the unique identifier OID generated by the smart contract according to the rules, and is recorded on the blockchain. i The user-specific attribute vector A is assigned based on the identity type and the permissions granted in the sandbox rules. A consists of l bit strings of length n, that is, A = {A1, A2, ...An}. For user U i Each attribute A j ∈A generates the corresponding private key ISK={e1, e2,…en}.

[0053] Preferably, the specific implementation method of step 4 is: the data provider defines an access policy S for the cross-chain data M, S = (a1, a2, ..., an), the threshold value is k, which means that at least k attribute values ​​of the data user attribute vector and the encrypted public key vector must be the same before the user can decrypt the data; then provide the data provider identity attribute set A_DP, and encrypt the data M as a ring polynomial with coefficients {0,1} into a ciphertext C, C = E(M,S,PK) = (c0,c i ), i∈l. The blockchain also records relevant metadata, upload timestamps, and hash values, automatically performs compliance testing, and verifies the identity and authority of data providers to ensure compliance with the rules set by the regulatory sandbox.

[0054] Preferably, the specific implementation method of step 5 is: the data user U i A decryption request is made and its attribute set A_DU is provided. When its attributes meet the access policy S, the smart contract continues to execute, generates an access authorization token, and executes step 6; if it does not meet the access policy S, the access fails.

[0055] Preferably, step 6 comprises the following steps:

[0056] Step 6.1: After the data user meets the viewing permission and obtains the temporary access authorization token, he uses the user private key ISK_DU and decryption ciphertext C_DU to decrypt the target data M.

[0057] Step 6.2: When decrypting, the data user will first obtain the shared key K=H(c1,A i ), and obtain the private key to restore the plaintext, the formula is

[0058] Step 6.3: After successfully decrypting the data using the private key to obtain the plaintext data M_i, the data user can view, download, share, and generate a record log.

[0059] Preferably, the specific implementation method of step 7 is: the regulatory agency RI monitors the flow and access of data in real time through the operations recorded by the blockchain in the regulatory sandbox, identifies abnormal access patterns through the integrated anomaly detection mechanism of the smart contract, sends warnings to each participant, and tracks the source of the abnormal data user.

[0060] Preferably, the specific implementation method of step 8 is: after the data in the sandbox is uploaded and viewed a certain number of times, all participants can provide feedback on the operation logs during this period, evaluate the effectiveness of the current blockchain regulatory sandbox, and make optimizations and adjustments.

[0061] In addition, this embodiment also provides a cross-chain data penetration sandbox supervision system with ideal grid attribute encryption on the blockchain, and the system executes the above method.

[0062] Finally, it should be noted that the above embodiments are only used to illustrate and explain the present invention, and are not intended to limit the present invention to the scope of the described embodiments. In addition, those skilled in the art can understand that the present invention is not limited to the above embodiments, and more variations and modifications can be made according to the teachings of the present invention, and these variations and modifications all fall within the scope of the protection claimed by the present invention.

Claims

1. A cross-chain data penetration sandbox supervision method with ideal grid attribute encryption on blockchain, characterized in that: The following steps are involved: Step 1: The third-party platform selects and builds a blockchain, configures each node on the alliance chain, forms a regulatory sandbox, determines the participating data providers, data users, and regulatory agencies, and all participants jointly formulate sandbox rules to clarify the specifications for data uploading, shared access, and supervision; Step 2: The third-party platform initializes the sandbox, that is, generates the public key IPK and the master private key MPK according to the ideal lattice encryption algorithm, and deploys smart contracts according to the different identity requirements of data providers, data users and regulators to build a decentralized network in the regulatory sandbox; Step 3: Data providers, data users, and regulators register their identities on the blockchain, provide identity type and data source information, and the smart contract generates a unique identifier OID based on the rules and records it on the blockchain; The third-party platform allocates a specific attribute vector set A according to the user's role and the permissions granted in the sandbox rules, and generates the corresponding private key ISK_i for the user distribution; Step 4: The data provider organizes the cross-chain data M to be shared and defines its access policy S. Then, the data M is encrypted into ciphertext C and uploaded to the blockchain through a smart contract. The blockchain also records the relevant metadata, upload timestamp and hash value. The smart contract automatically performs compliance testing on the uploaded data to ensure that it complies with the regulatory rules formulated by the regulatory sandbox, and based on this, the identity and authority of the data provider are verified to ensure the legitimacy of the cross-domain data. Step 5: The data user initiates a request to access the data and submits an access application. The smart contract checks the user's identity OID and attribute vector set A to determine whether it complies with the provider's data access policy S. If it does, it generates a visitor-specific authorization token, otherwise it denies access. The access request and results are recorded in the blockchain to achieve transparent supervision and timely traceability. Step 6: After the data user obtains access authorization, it uses its attribute private key ISK_i and decrypted ciphertext C_i to decrypt the data. After the data user's attributes meet the data provider's access policy S, the data is successfully decrypted to obtain the plaintext data Mi_i; Step 7: The regulator uses blockchain monitoring within the regulatory sandbox to view the flow and access of data in real time, identifies abnormal access patterns through the integrated anomaly detection mechanism of smart contracts, and sends warnings to various participants; Step 8: All participants can provide feedback on the operation logs over a period of time to evaluate the effectiveness of the current blockchain regulatory sandbox and make optimizations and adjustments.

2. According to claim 1, a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on blockchain is characterized in that: The data rules in the regulatory sandbox in step S1 are: all operations of different participants in the sandbox must comply with GDPR rules, as follows: 1.1: The data provider DP is responsible for uploading the data to the blockchain and encrypting the data using attribute-based encryption ABE on the ideal grid; the data provider must provide the metadata of the data, including data type, upload time, and encrypted access policy; the data must be encrypted in the JSON format specified by the platform and stored on the blockchain, and plain text data cannot be stored; 1.2: The data user DU submits a data access request and provides the smart contract with the data identifier OID, user ID, and user attribute vector set A_DU; After the data user passes the verification, he can access the data if the access policy S is met. If the request is compliant, the blockchain will return an access authorization token. At this time, the ciphertext data will be decrypted using the private key. The decryption token obtained by the data user can only be used within a specific scope, and secondary forwarding or illegal sharing is prohibited. 1.3: The regulatory agency RI is responsible for monitoring all data upload, access and decryption operations to ensure compliance; it has the authority to view all access logs and can intervene as needed, and is required to regularly review data uploads, access patterns and user behaviors to ensure there is no abuse; all operations of the participants will generate audit logs on the blockchain for the regulatory agency to query and analyze, and smart contracts will be used to automate the audit process to identify potential abnormal access patterns. When anomalies are detected, an alarm will be automatically issued and recorded in the blockchain for further investigation by the regulatory agency.

3. According to claim 2, a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on blockchain is characterized in that: The sandbox initialization in step 2 is as follows: formulate a secure hash function H on the blockchain, input a large prime number p and select an ideal lattice G generator g, generate a public key IPK and a master private key MPK, and the generation formula is IPK=g α modp, where α is chosen randomly.

4. According to claim 3, a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on blockchain is characterized in that: The specific implementation method of step 3 is as follows: the user provides his / her identity type and unique identity number information, obtains the unique identifier OID generated by the smart contract according to the rules, and is recorded on the blockchain; the third-party platform generates a unique identifier OID based on each user U i The user-specific attribute vector A is assigned based on the identity type and the permissions granted in the sandbox rules. A consists of l bit strings of length n, that is, A = {A1, A2, ...An}. For user U i Each attribute A j ∈A generates the corresponding private key ISK={e1, e2,…en}.

5. According to claim 4, a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on blockchain is characterized in that: The specific implementation method of step 4 is as follows: the data provider defines an access policy S for the cross-chain data M, where S = (a1, a2, ..., an), and the threshold value is k, indicating that at least k attribute values ​​in the data user attribute vector and the encrypted public key vector must be the same before the data can be decrypted; then the data provider identity attribute set A_DP is provided, and the data M is regarded as a ring polynomial with coefficients {0,1} and encrypted into a ciphertext C, where C = E(M,S,PK) = (c0,c i ), i∈l; the blockchain also records relevant metadata, upload timestamps and hash values, automatically performs compliance detection, and verifies the identity and authority of the data provider to ensure compliance with the rules set by the regulatory sandbox.

6. According to claim 5, a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on blockchain is characterized in that: The specific implementation method of step 5 is as follows: the data user U i A decryption request is made and its attribute set A_DU is provided. When its attributes meet the access policy S, the smart contract continues to execute, generates an access authorization token, and executes step 6; if it does not meet the access policy S, the access fails.

7. According to claim 6, a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on blockchain is characterized in that: The step 6 comprises the following steps: Step 6.1: After the data user meets the viewing permission and obtains the temporary access authorization token, he uses the user private key ISK_DU and the decrypted ciphertext C_DU to decrypt the target data M; Step 6.2: When decrypting, the data user will first obtain the shared key K=H(c1,A i ), and obtain the private key to restore the plaintext, the formula is Step 6.3: After successfully decrypting the data using the private key to obtain the plaintext data M_i, the data user can view, download, share, and generate a record log.

8. According to claim 7, a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on blockchain is characterized in that: The specific implementation method of step 7 is as follows: the regulatory agency RI monitors the flow and access of data in real time through the operations recorded in the blockchain within the regulatory sandbox, identifies abnormal access patterns through the integrated anomaly detection mechanism of the smart contract, sends warnings to each participant, and tracks the source of the abnormal data user.

9. According to claim 8, a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on blockchain is characterized in that: The specific implementation method of step 8 is as follows: after the data in the sandbox has been uploaded and viewed a certain number of times, all participants can provide feedback on the operation logs during this period, evaluate the effectiveness of the current blockchain regulatory sandbox, and make optimizations and adjustments.

10. A cross-chain data penetration sandbox supervision system with ideal grid attribute encryption on blockchain, characterized in that: The system executes the method according to any one of claims 1 to 9.

Citation Information

Patent Citations

  • Digital collection issuing supervision method and device based on block chain, and storage medium

    CN115310056A

  • Heterogeneous multi-chain data cross-domain access control method based on threshold homomorphic encryption

    CN118337359A

  • Apparatus and method for terminating an authorization to access a record in a blockchain ledger

    US20210176052A1

  • Web3 Decentralized Blockchain Based NFT Framework... Applications

    US20240185191A1

  • Method and System to Implement an NFT Architecture Framework for Bitcoin Inscriptions, Ordinals and Smart Contracts Interworking with a Cross-Chain Communications Network of Bridges, Substrates, and Parachains, Off-Chain IPFS Decentralized Smart Contract Storage, Zero Trust Security Framework, Bitcoin NFT Tokenization, Bitcoin NFT Copyright Ownership and Validation using DRM, Open AI Applications for Smart Contracts, and WebRTC-QUIC Secure Video and Messaging Communications

    US20240370865A1

Cited By

  • Multi-agent security interaction method, equipment and medium

    CN120880690A

  • Data compliance design method based on trusted data space scene

    CN121547302A

  • A data compliance design method based on a trusted data space scenario

    CN121547302B