File travel scene data transaction secure storage method and medium

Abstract

The invention discloses a document travel scene data transaction secure storage method and a medium. The method comprises the following steps: collecting necessary data of a data provider through a client of a document travel transaction platform; encrypting the sensitive data, and uploading the encrypted sensitive data, the privacy preference data of the data provider and the information of the data visitor to a server side of the text travel transaction platform; packaging the encrypted sensitive data, the privacy preference data and the data visitor information into a structured privacy tuple; storing the privacy tuple in a relational database, and storing the hash value of the privacy tuple in a block chain; configuring an access control strategy, and limiting that only authorized users or system nodes can access and operate data stored in the relational database; the access request of the privacy tuple data is verified and authorized through the block chain platform, and all data accesses are ensured to conform to the privacy preference of a data provider. According to the invention, the security of the user sensitive data in the text travel scene data transaction can be effectively improved.

Description

Technical Field

[0001] The present invention relates to the field of data security, and more specifically, to a method and medium for securely storing data transactions in cultural and tourism scenarios. Background Art

[0002] In data transactions in cultural and tourism scenarios, such as ordering air tickets, train tickets, hotels, scenic spot tickets and purchasing cultural and tourism products, a large amount of tourists' personal sensitive information will be involved, such as ID number, contact information, home address, bank card number, purchase history, etc. If this information is illegally obtained or leaked, it will seriously damage the personal rights and interests of tourists. Some scenic spots and venues lack sufficient security protection measures in the process of data collection, storage, and transmission, resulting in the leakage of personal information data.

[0003] At present, data security issues in the process of cultural and tourism scene data transactions mainly include the following aspects:

[0004] 1. Illegal use and collection of data: There are problems of illegal collection and use of data in the cultural and tourism industries in some regions. Some scenic spots and venues illegally collect users' sensitive personal information without the users' consent by hiding contracts and tacitly allowing it, and even use the collected information for other purposes or sell it to third parties, which seriously damages the legitimate rights and interests of users.

[0005] 2. Cyber ​​attacks and data theft: The network and data security protection capabilities of the cultural and tourism industries in some regions vary widely. Some scenic spots and venues lack effective network security management and industry guidance, and have insufficient protection measures, making them vulnerable to cyber attacks and data theft, leading to catastrophic consequences.

[0006] 3. Security supervision issues during data transactions: Data transactions in cultural and tourism scenarios involve multiple entities and complex transaction processes. How to ensure the security and compliance of data during transactions is an important issue. Lack of effective supervision and guidance may lead to illegal use or leakage of data during transactions.

[0007] Therefore, how to effectively ensure the security of the collection, storage, access and use of user sensitive data in cultural and tourism scenario data transactions is an urgent problem that needs to be solved. Summary of the invention

[0008] The purpose of the present invention is to propose a secure storage method and medium for cultural and tourism scene data transactions, so as to effectively improve the security of user sensitive data in cultural and tourism scene data transactions, and ensure the data security of the collection, storage, access and use of user data during data transactions.

[0009] To achieve the above purpose, the present invention proposes a method for secure storage of cultural and tourism scene data transactions, comprising:

[0010] Collect necessary data from data providers through the client of the cultural and tourism transaction platform, including: sensitive data, privacy preference data and data accessor information;

[0011] Encrypting the sensitive data, and uploading the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information to the server of the cultural and tourism transaction platform;

[0012] On the server side, the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information are encapsulated into a structured privacy tuple;

[0013] Applying a hash function to the privacy tuple to generate a corresponding hash value;

[0014] Storing the private tuple in a relational database and storing the hash value in a blockchain;

[0015] Configure access control policies to restrict only authorized users or system nodes to access and operate data stored in the relational database;

[0016] Verify and authorize access requests to private tuple data in the relational database through the blockchain platform, and ensure that all data access complies with the privacy preferences of the data provider;

[0017] The data consistency between the hash value stored on the blockchain and the privacy tuple stored in the relational database is regularly verified to ensure the integrity and non-tampering of the data.

[0018] Optionally, encrypting the sensitive data includes:

[0019] Encrypt the sensitive data using a strong encryption algorithm and generate a strong key in a secure environment, and store the strong key using a hardware security module or an encryption key management service;

[0020] The strong encryption algorithm includes the AES advanced encryption algorithm and the RSA asymmetric encryption algorithm.

[0021] Optionally, uploading the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information to the server of the cultural and tourism transaction platform includes:

[0022] Packing the encrypted sensitive data with the privacy preference data of the data provider and the data accessor information to form a data packet;

[0023] The data table is transmitted to the server via an HTTPS connection using the TLS / SSL encryption protocol;

[0024] After receiving the data packet, the server uses the corresponding encryption protocol to decrypt the data packet and verify the integrity of the data.

[0025] Optionally, the step of encapsulating the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information into a structured privacy tuple includes:

[0026] Formatting the privacy preferences of data providers into a machine-readable form;

[0027] Encode the data accessor's information into a verifiable format;

[0028] Bind the encrypted sensitive data di, formatted privacy preference data pi and encoded data accessor information ui together to form a privacy tuple: pt =<di,pi,ui> ;

[0029] The sensitive data include: user identity information, phone number, address, transaction data, platform account name and password, bank card account number and password;

[0030] The privacy preference data includes data access permissions, data usage restrictions, data sharing policies, data retention periods, secondary use of data, data use consent, and data accessor roles set by users;

[0031] The data accessor information includes the accessor's identity, access rights, identity verification information, authorized data sensitivity level, and access purpose description.

[0032] Optionally, applying a hash function to the encrypted private tuple to generate a hash value corresponding to the encrypted private tuple includes:

[0033] Convert all data elements in the privacy tuple into a continuous byte stream by formatting or encoding to form serialized data;

[0034] The serialized data is processed using a hash algorithm to generate a corresponding hash value; the hash value

[0035] The generated hash value is validated to ensure that it conforms to the expected format and length.

[0036] Optionally, verifying and authorizing the access request to the private tuple data in the relational database through the blockchain platform includes:

[0037] Receiving an access request to a privacy tuple from an access node, wherein the access node includes a user node and a merchant node;

[0038] Retrieve the corresponding privacy tuple from the relational database, and obtain the privacy preference data and data accessor information in the privacy tuple;

[0039] The following preset verification processes are automatically executed through smart contracts:

[0040] Based on the acquired data accessor information, verify the identity of the requester and check whether the requester has the permission to access the privacy tuple to ensure that the requester is an authorized data accessor;

[0041] Verify that the access request complies with the privacy preferences set by the data provider and review the requester's previous access history to check for any irregularities or unusual patterns to determine whether to grant the access request;

[0042] If the access request is approved, an access credential and temporary key are generated to access and decrypt the data;

[0043] If the access request is denied, a corresponding access denial notification is sent to the requester.

[0044] Optionally, it also includes:

[0045] When an authorized user needs to access sensitive data, the corresponding privacy tuple is retrieved from the relational database and the corresponding hash value is obtained from the blockchain, and the privacy tuple, the corresponding hash value and the temporary key are transmitted to the authorized user node;

[0046] The authorized user independently calculates the hash value of the privacy tuple and compares it with the received hash value to verify the data integrity of the privacy tuple. If the data integrity verification passes, the encrypted sensitive data in the data tuple is decrypted using the temporary key.

[0047] Optionally, it also includes:

[0048] Smart contracts continuously monitor data access behavior to ensure that access behavior complies with the scope of authorization and does not exceed authorized access;

[0049] If any abnormality or violation is found during the monitoring process, access will be denied, the violation will be recorded, the administrator will be notified, and the security response mechanism will be automatically triggered.

[0050] Optionally, it also includes:

[0051] After the access is completed, the smart contract generates an access log with the access details and verification results corresponding to the access request, and stores the access log on the blockchain. The access details include: the identity of the requester, the request time, and the type of data requested;

[0052] Subsequent audits are conducted based on the access logs to ensure that the data has not been misused or leaked during the access process.

[0053] The present invention also proposes a non-transitory computer-readable storage medium, which stores computer instructions, and the computer instructions are used to enable a computer to execute the above-mentioned cultural and tourism scene data transaction security storage method.

[0054] The beneficial effects of the present invention are:

[0055] The present invention collects sensitive data of data providers through the client, encrypts the sensitive data, and transmits it to the server with the privacy preferences of the data providers and the data accessor information in an encrypted manner, thereby ensuring the security of the data transmission process. The encrypted sensitive data, the privacy preferences of the data providers and the data accessor information are then encapsulated into a privacy tuple on the server side, and a hash function is applied to the privacy tuple, and the hash value is stored on the blockchain, thereby ensuring the immutability and integrity of the data. The encrypted privacy tuple is then stored in a relational database for effective data management and query processing, and strict access control is implemented to ensure that only authorized users and systems can access the privacy tuple. At the same time, the method uses smart contracts to automatically execute data access rules, thereby improving the efficiency and security of data processing, and recording and monitoring all accesses and operations to the data, thereby facilitating subsequent audits.

[0056] Furthermore, the present invention implements a method for tightly coupling the private attribute data, privacy preferences and data accessor data elements of the data provider into a privacy tuple. The method provides a secure, tamper-proof and efficient query platform by combining relational database and blockchain technology. Combining relational database and blockchain technology, it provides an efficient data management platform that supports large-scale data storage and query processing. The use of encryption and blockchain technology significantly improves the security of data and prevents unauthorized access and data leakage; the implementation of privacy tuples and privacy preferences ensures that the privacy rights and interests of data providers are respected and protected; the hash value on the blockchain provides an immutable audit trail to ensure the integrity and authenticity of the data; the transparency and immutability of the blockchain enhance the trust between data stakeholders; the use of smart contracts reduces manual intervention and improves the automation and intelligence level of data processing; the system framework in the present invention is flexible in design and can adapt to different application scenarios and data types, with good scalability.

[0057] The system of the present invention has other characteristics and advantages, which will be apparent from the drawings incorporated herein and the following detailed description, or will be described in detail in the drawings incorporated herein and the following detailed description, which together serve to explain the specific principles of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] The above and other objects, features and advantages of the present invention will become more apparent through a more detailed description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, in which like reference numerals generally represent like components.

[0059] Figure 1 A diagram showing the steps of a method for securely storing cultural and tourism scene data transactions according to the present invention. DETAILED DESCRIPTION

[0060] The present invention will be described in more detail below with reference to the accompanying drawings. Although preferred embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to make the present invention more thorough and complete, and to fully convey the scope of the present invention to those skilled in the art.

[0061] Example 1

[0062] like Figure 1 As shown, this embodiment provides a method for securely storing cultural and tourism scene data transactions, including:

[0063] S1: Collect necessary data from data providers through the client of the cultural and tourism transaction platform, including sensitive data, privacy preference data and data accessor information;

[0064] Specifically, the data of data providers (consumers and other users) is collected through the user interface provided by the client (mobile phone APP or computer web page, etc.) of the cultural and tourism transaction platform. The client can be used to collect the privacy preferences and sensitive data of the data provider, and can also be used to display the results of the data visitor's query. Preferably, necessary data is collected from the data provider, including sensitive data, privacy preferences and data visitor information, to avoid excessive collection of information that is easy to leak. The data collection method preferably collects the data provider's data in a secure manner (such as encrypted forms, secure APIs, etc.).

[0065] S2: Encrypt the sensitive data, and upload the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information to the server of the cultural tourism transaction platform;

[0066] In this step, encrypting the sensitive data includes:

[0067] Encrypt the sensitive data using a strong encryption algorithm and generate a strong key in a secure environment, and store the strong key using a hardware security module or an encryption key management service;

[0068] The strong encryption algorithm includes the AES advanced encryption algorithm and the RSA asymmetric encryption algorithm.

[0069] In this step, uploading the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information to the server of the cultural and tourism transaction platform includes:

[0070] Packing the encrypted sensitive data with the privacy preference data of the data provider and the data accessor information to form a data packet;

[0071] The data table is transmitted to the server via an HTTPS connection using the TLS / SSL encryption protocol;

[0072] After receiving the data packet, the server uses the corresponding encryption protocol to decrypt the data packet and verify the integrity of the data.

[0073] Specifically, the collected data can be classified, the sensitivity level of the data can be determined, and marked accordingly. Sensitive data can be encrypted using strong encryption standards, such as AES (Advanced Encryption Standard), RSA, DES (Data Encryption Standard), etc., and strong keys are generated for the encryption process, and the secure generation and storage of the keys are ensured. In this embodiment, symmetric encryption algorithms (such as AES) are preferably used because they are more efficient when processing large amounts of data. At the same time, key management strategies are implemented, including the generation, storage, distribution, update and destruction of keys, and keys are stored in a secure environment, such as using hardware security modules (HSM), secure encryption devices, key storage services provided by the operating system, or other secure key storage solutions to store keys. It is necessary to avoid storing keys in plain text in unsafe places, such as ordinary files or databases.

[0074] At the same time, the data is encrypted during transmission to prevent it from being intercepted during transmission. Data can be transmitted through secure HTTPS communication protocols, such as TLS (Transport Layer Security) or SSL (Secure Sockets Layer), which provide encryption, authentication and integrity protection during data transmission. In the specific implementation process, the encrypted data is encapsulated into a format suitable for transmission, which may include adding header information, sequence numbers and other necessary transmission metadata. The data is sent through a secure network channel, which may be an internal network or the public Internet, but always through an encrypted connection. At the same time, network traffic can be monitored to ensure that there is no unauthorized access or data leakage. The target system (server side) receives the transmitted data and verifies it to ensure that the data has not been tampered with during transmission. Digital signatures or message authentication codes (MACs) can be used to verify the integrity and source of the data.

[0075] S3: On the server side, the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information are encapsulated into a structured privacy tuple;

[0076] In this step, the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information are encapsulated into a structured privacy tuple, including:

[0077] Formatting the privacy preferences of data providers into a machine-readable form;

[0078] Encode the data accessor's information into a verifiable format;

[0079] Bind the encrypted sensitive data di, formatted privacy preference data pi and encoded data accessor information ui together to form a privacy tuple: pt =<di,pi,ui> ;

[0080] The sensitive data include: user identity information, phone number, address, transaction data, platform account name and password, bank card account number and password;

[0081] The privacy preference data includes data access permissions, data usage restrictions, data sharing policies, data retention periods, secondary use of data, data use consent, and data accessor roles set by users;

[0082] The data accessor information includes the accessor's identity, access rights, identity verification information, authorized data sensitivity level, and access purpose description.

[0083] Specifically, the data provider's sensitive data (attribute data), privacy preferences, and data accessor information are tightly bound into a privacy tuple. This encapsulation ensures that data access and processing must comply with the privacy preferences set by the data provider. Based on the privacy tuple, the data provider can control its sensitive data and ensure that the privacy preferences of the data are respected.

[0084] S4: Apply a hash function to the privacy tuple to generate a corresponding hash value;

[0085] This step specifically includes:

[0086] Convert all data elements in the privacy tuple into a continuous byte stream by formatting or encoding to form serialized data;

[0087] The serialized data is processed using a hash algorithm to generate a corresponding hash value; the hash value

[0088] The generated hash value is validated to ensure that it conforms to the expected format and length.

[0089] Specifically, a hash function can convert input data of any length into an output of a fixed length, for example, a SHA-256 hash function always generates a 256-bit (32-byte) hash value. This embodiment can use a suitable hash function to generate a hash value of a required length.

[0090] S5: storing the privacy tuple in a relational database, and storing the hash value in a blockchain;

[0091] Specifically, the encrypted privacy tuples are stored in a relational database for efficient data management and query processing. The generated hash values ​​are stored on the blockchain, using the immutability and decentralization of the blockchain to protect the security and integrity of the data.

[0092] Among them, relational databases provide efficient data storage, management and retrieval mechanisms, which can handle large amounts of data and complex queries. The transaction management capabilities of relational databases ensure the atomicity, consistency, isolation and persistence (ACID properties) of data operations, and can effectively maintain the integrity and reliability of data. By implementing data integrity constraints (such as primary keys, foreign keys, uniqueness and check constraints), relational databases help maintain data accuracy and consistency. At the same time, relational databases also provide fine-grained data access control mechanisms that can define the access rights of different users or roles to data, thereby enhancing data security.

[0093] This method combines relational databases with blockchains, using the immutability and decentralization of blockchains to protect data integrity, while using the efficient query and transaction management capabilities of relational databases to handle complex data operations, thereby achieving a secure and efficient data management environment that ensures data privacy and security while providing powerful data processing capabilities.

[0094] S6: configuring an access control policy to restrict only authorized users or system nodes to access and operate the data stored in the relational database;

[0095] Specifically, blockchain can be used as an access control platform to implement control strategies such as role-based access control (RBAC) to ensure that only authorized users can access data.

[0096] S7: Verify and authorize access requests to the private tuple data in the relational database through the blockchain platform, and ensure that all data access complies with the privacy preferences of the data provider;

[0097] In this step, the access request to the private tuple data in the relational database is verified and authorized through the blockchain platform, including:

[0098] Receiving an access request to a privacy tuple from an access node, wherein the access node includes a user node and a merchant node;

[0099] Retrieve the corresponding privacy tuple from the relational database, and obtain the privacy preference data and data accessor information in the privacy tuple;

[0100] The following preset verification processes are automatically executed through smart contracts:

[0101] Based on the acquired data accessor information, verify the identity of the requester and check whether the requester has the permission to access the privacy tuple to ensure that the requester is an authorized data accessor;

[0102] Verify that the access request complies with the privacy preferences set by the data provider and review the requester's previous access history to check for any irregularities or unusual patterns to determine whether to grant the access request;

[0103] If the access request is approved, an access credential and temporary key are generated to access and decrypt the data;

[0104] If the access request is denied, a corresponding access denial notification is sent to the requester.

[0105] In this embodiment, this step also includes:

[0106] When an authorized user needs to access sensitive data, the corresponding privacy tuple is retrieved from the relational database and the corresponding hash value is obtained from the blockchain, and the privacy tuple, the corresponding hash value and the temporary key are transmitted to the authorized user node;

[0107] The authorized user independently calculates the hash value of the privacy tuple and compares it with the received hash value to verify the data integrity of the privacy tuple. If the data integrity verification passes, the encrypted sensitive data in the data tuple is decrypted using the temporary key.

[0108] In this embodiment, this step also includes:

[0109] Smart contracts continuously monitor data access behavior to ensure that access behavior complies with the scope of authorization and does not exceed authorized access;

[0110] If any abnormality or violation is found during the monitoring process, access will be denied, the violation will be recorded, the administrator will be notified, and the security response mechanism will be automatically triggered.

[0111] In this embodiment, it also includes:

[0112] After the access is completed, the smart contract generates an access log with the access details and verification results corresponding to the access request, and stores the access log on the blockchain. The access details include: the identity of the requester, the request time, and the type of data requested;

[0113] Subsequent audits are conducted based on the access logs to ensure that the data has not been misused or leaked during the access process.

[0114] Specifically, this method adopts a privacy protection framework that combines blockchain and smart contracts. Smart contracts can automatically process access requests to privacy tuples, which can improve the efficiency and security of data processing while reducing human intervention and ensuring that all operations comply with preset rules and compliance requirements.

[0115] S8: Regularly verify the data consistency between the hash values ​​stored on the blockchain and the privacy tuples stored in the relational database to ensure the integrity and non-tampering of the data.

[0116] Specifically, by regularly comparing the hash value on the blockchain with the current hash value of the data in the database, it can be ensured that the data has not been tampered with or damaged since the last verification. If the data in the database is modified without authorization, its hash value will change and will not match the hash value stored on the blockchain, so that data tampering can be detected. This verification mechanism adds a layer of protection to the data, making any unauthorized access or attack to the database more likely to be discovered. Regular verification can also increase transparency about data access and change history, which helps audit and monitor data usage. In short, through this regular verification mechanism, the security and reliability of private tuple data stored in blockchains and relational databases can be ensured, providing an additional security layer for data protection.

[0117] It should be noted that the privacy tuple is the core concept of the method of the present invention. Based on the privacy tuple, the data provider can control its sensitive data and ensure that the privacy preference of the data is respected. The following is the complete working mechanism of the privacy tuple:

[0118] (1) Collection of data elements: First, collect three key data elements from data providers:

[0119] Sensitive data (attribute data): private and sensitive data provided by the data provider, such as personally identifiable information.

[0120] Data provider privacy preference data: Data provider's preferences on how their data should be stored, managed, and queried.

[0121] Data accessor data: Information about the individual or group requesting access to data, including their access rights and roles.

[0122] Bind data elements: Bind the above three data elements together to form a privacy tuple. This tuple contains all the necessary information to ensure that the privacy preferences of the data provider are respected when the data is retrieved or processed.

[0123] (2) Apply hash function: Apply a hash function to the privacy tuple to convert it into a fixed-length hash value. This hash value will be stored on the blockchain to ensure the immutability and security of the data.

[0124] (3) Storage on the blockchain: The hashed private tuple is stored on the blockchain. The immutability and decentralization of the blockchain provide an additional layer of security for the data, ensuring the persistence and tamper-proofness of the private tuple.

[0125] (4) Storage in a relational database: At the same time, the original private tuples (unhashed) and the related data provider data are stored in a relational database for efficient data management and query processing.

[0126] (5) Query processing: When a data accessor requests access to data, the system first retrieves the corresponding hash privacy tuple (hash value) from the blockchain. The system then verifies the consistency of this hash tuple with the privacy tuple stored in the relational database to ensure the integrity of the data.

[0127] (6) Execute privacy-aware queries: Based on the verified privacy tuples, the system executes privacy-aware queries to ensure that only data that meets the privacy preferences of the data provider is retrieved and returned to the data accessor.

[0128] (6) Access control and authorization: The blockchain platform acts as an intermediary for access control and query authentication, ensuring that all query requests to the relational database are verified through the blockchain, thereby protecting the privacy of data providers.

[0129] In this way, privacy tuples ensure that data providers have control over their data while providing a mechanism to verify and enforce privacy preferences so that data storage, management, and query processing all comply with privacy protection requirements.

[0130] In summary, the method of the present invention has the following advantages:

[0131] (1) Enhanced data security:

[0132] The use of encryption and blockchain technology significantly improves data security and prevents unauthorized access and data leakage.

[0133] (2) Privacy protection:

[0134] The implementation of privacy tuples and privacy preferences ensures that the privacy interests of data providers are respected and protected.

[0135] (3) Data integrity:

[0136] The hashes on the blockchain provide an immutable audit trail, ensuring the integrity and authenticity of the data.

[0137] (4) Transparency and trust:

[0138] The transparency and immutability of blockchain enhance trust among data stakeholders.

[0139] (5) Compliance:

[0140] The design of the solution ensures that data processing activities comply with relevant laws, regulations and industry standards.

[0141] (6) Efficient data management:

[0142] Combining relational database and blockchain technology, it provides an efficient data management platform that supports large-scale data storage and query processing.

[0143] (7) Automation and intelligence:

[0144] The use of smart contracts reduces manual intervention and improves the level of automation and intelligence in data processing.

[0145] (8)Flexibility and scalability:

[0146] The framework is flexibly designed to adapt to different application scenarios and data types and has good scalability.

[0147] By implementing the solution of the present invention, personal privacy data can be effectively stored and protected during the data transaction process in cultural and tourism scenarios, while also promoting the safe sharing and use of data, providing support for data-driven decision-making and innovation.

[0148] Example 2

[0149] The present invention also proposes a non-transitory computer-readable storage medium, which stores computer instructions, and the computer instructions are used to enable a computer to execute the cultural and tourism scene data transaction security storage method described in Example 1.

[0150] According to the computer-readable storage medium of the embodiment of the present disclosure, non-transitory computer-readable instructions are stored thereon. When the non-transitory computer-readable instructions are executed by a processor, all or part of the steps of the above-mentioned methods of each embodiment of the present disclosure are executed.

[0151] The above-mentioned computer-readable storage media include, but are not limited to: optical storage media (e.g., CD-ROM and DVD), magneto-optical storage media (e.g., MO), magnetic storage media (e.g., magnetic tape or mobile hard disk), media with built-in rewritable non-volatile memory (e.g., memory card) and media with built-in ROM (e.g., ROM box).

[0152] The embodiments of the present invention have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and changes will be apparent to those skilled in the art without departing from the scope and spirit of the described embodiments.

Claims

1. A method for secure storage of cultural and tourism scene data transactions, characterized in that: include: Collect necessary data from data providers through the client of the cultural and tourism transaction platform, including: sensitive data, privacy preference data and data accessor information; Encrypting the sensitive data, and uploading the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information to the server of the cultural and tourism transaction platform; On the server side, the encrypted sensitive data, the privacy preference data of the data provider, and the data accessor information are encapsulated into a structured privacy tuple; Applying a hash function to the privacy tuple to generate a corresponding hash value; Storing the private tuple in a relational database and storing the hash value in a blockchain; Configure access control policies to restrict only authorized users or system nodes to access and operate data stored in the relational database; Verify and authorize access requests to private tuple data in the relational database through the blockchain platform, and ensure that all data access complies with the privacy preferences of the data provider; The data consistency between the hash value stored on the blockchain and the privacy tuple stored in the relational database is regularly verified to ensure the integrity and non-tampering of the data.

2. The method for secure storage of cultural and tourism scene data transactions according to claim 1 is characterized in that: The encrypting the sensitive data comprises: Encrypt the sensitive data using a strong encryption algorithm and generate a strong key in a secure environment, and store the strong key using a hardware security module or an encryption key management service; The strong encryption algorithm includes the AES advanced encryption algorithm and the RSA asymmetric encryption algorithm.

3. The method for secure storage of cultural and tourism scene data transactions according to claim 1 is characterized in that: The method of uploading the encrypted sensitive data, the privacy preference data of the data provider and the data accessor information to the server of the cultural and tourism transaction platform includes: Packing the encrypted sensitive data with the privacy preference data of the data provider and the data accessor information to form a data packet; The data table is transmitted to the server via an HTTPS connection using the TLS / SSL encryption protocol; After receiving the data packet, the server uses the corresponding encryption protocol to decrypt the data packet and verify the integrity of the data.

4. The method for secure storage of cultural and tourism scene data transactions according to claim 3 is characterized in that: The encrypted sensitive data, the privacy preference data of the data provider and the data accessor information are encapsulated into a structured privacy tuple, including: Formatting the privacy preferences of data providers into a machine-readable form; Encode the data accessor's information into a verifiable format; Bind the encrypted sensitive data di, formatted privacy preference data pi and encoded data accessor information ui together to form a privacy tuple: pt =<di,pi,ui> ; The sensitive data include: user identity information, phone number, address, transaction data, platform account name and password, bank card account number and password; The privacy preference data includes data access permissions, data usage restrictions, data sharing policies, data retention periods, secondary use of data, data use consent, and data accessor roles set by users; The data accessor information includes the accessor's identity, access rights, identity verification information, authorized data sensitivity level, and access purpose description.

5. The method for secure storage of cultural and tourism scene data transactions according to claim 1 is characterized in that: The step of applying a hash function to the encrypted privacy tuple to generate a hash value corresponding to the encrypted privacy tuple includes: Convert all data elements in the privacy tuple into a continuous byte stream by formatting or encoding to form serialized data; The serialized data is processed using a hash algorithm to generate a corresponding hash value; the hash value The generated hash value is validated to ensure that it conforms to the expected format and length.

6. The method for secure storage of cultural and tourism scene data transactions according to claim 1 is characterized in that: The verifying and authorizing the access request to the private tuple data in the relational database through the blockchain platform includes: Receiving an access request to a privacy tuple from an access node, wherein the access node includes a user node and a merchant node; Retrieve the corresponding privacy tuple from the relational database, and obtain the privacy preference data and data accessor information in the privacy tuple; The following preset verification processes are automatically executed through smart contracts: Based on the acquired data accessor information, verify the identity of the requester and check whether the requester has the permission to access the privacy tuple to ensure that the requester is an authorized data accessor; Verify that the access request complies with the privacy preferences set by the data provider and review the requester's previous access history to check for any irregularities or unusual patterns to determine whether to grant the access request; If the access request is approved, an access credential and temporary key are generated to access and decrypt the data; If the access request is denied, a corresponding access denial notification is sent to the requester.

7. The method for secure storage of cultural and tourism scene data transactions according to claim 6 is characterized in that: Also includes: When an authorized user needs to access sensitive data, the corresponding privacy tuple is retrieved from the relational database and the corresponding hash value is obtained from the blockchain, and the privacy tuple, the corresponding hash value and the temporary key are transmitted to the authorized user node; The authorized user independently calculates the hash value of the privacy tuple and compares it with the received hash value to verify the data integrity of the privacy tuple. If the data integrity verification passes, the encrypted sensitive data in the data tuple is decrypted using the temporary key.

8. The method for secure storage of cultural and tourism scene data transactions according to claim 6 is characterized in that: Also includes: Smart contracts continuously monitor data access behavior to ensure that access behavior complies with the scope of authorization and does not exceed authorized access; If any abnormality or violation is found during the monitoring process, access will be denied, the violation will be recorded, the administrator will be notified, and the security response mechanism will be automatically triggered.

9. The method for secure storage of cultural and tourism scene data transactions according to claim 8 is characterized in that: Also includes: After the access is completed, the smart contract generates an access log with the access details and verification results corresponding to the access request, and stores the access log on the blockchain. The access details include: the identity of the requester, the request time, and the type of data requested; Subsequent audits are conducted based on the access logs to ensure that the data has not been misused or leaked during the access process.

10. A non-transitory computer-readable storage medium, characterized in that: The non-transitory computer-readable storage medium stores computer instructions, which are used to enable a computer to execute the cultural and tourism scene data transaction security storage method described in any one of claims 1-9.

Images