Block chain-based mesenchymal stem cell safety inspection method and system
Through a blockchain-based security verification method, stem cell testing data is formatted and encrypted, which solves the problems of easy data tampering and low processing efficiency in traditional methods, achieves data security, integrity and traceability, and improves processing efficiency.
Patent Information
- Application Number
- CN202510997757.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-19
- Publication Date
- 2025-10-03
- Estimated Expiration
- 2045-07-19
AI Technical Summary
Traditional mesenchymal stem cell safety testing methods have problems such as easy data tampering and loss, low processing efficiency, and difficulty in tracing and sharing.
A blockchain-based security inspection method is adopted to obtain the core detection data and environmental parameters of stem cells, establish structured data objects, format the data and embed timestamps and device ID metadata, perform data status feature evaluation, configure encryption strategies, use multi-party secure computing and distributed key management for encryption, generate zero-knowledge proof, and upload the encrypted information to the blockchain for management.
It ensures the security, integrity and traceability of stem cell data, improves the efficiency and accuracy of data processing, and realizes the safe inspection and management of data.
Smart Images

Figure CN120750600A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of data processing, and in particular to a blockchain-based mesenchymal stem cell security inspection method and system. Background Art
[0002] With the rapid development of biotechnology, mesenchymal stem cells are increasingly being used in medical and scientific research. Mesenchymal stem cells possess the potential for self-renewal and multipotential differentiation, capable of forming various cell types, offering new avenues for disease treatment and tissue repair. However, the safety and efficacy of mesenchymal stem cells are crucial for their application, making rigorous safety testing of mesenchymal stem cells crucial.
[0003] Traditional mesenchymal stem cell safety testing methods rely primarily on laboratory testing and manual record-keeping, which presents numerous limitations. Laboratory test data can be easily tampered with or lost, making it difficult to guarantee the authenticity and integrity of the data. Furthermore, manual record-keeping is inefficient, prone to errors, and hinders data traceability and sharing. Furthermore, with the continued advancement of mesenchymal stem cell research and application, the volume of data has increased dramatically, and traditional testing methods are no longer able to meet the data processing and security management needs of a big data environment.
[0004] To overcome these limitations and improve the efficiency and accuracy of mesenchymal stem cell safety testing, it is necessary to introduce advanced technologies. Blockchain technology, as a distributed database technology, offers the advantages of decentralization, immutability, and traceability, providing a new solution for data security. Blockchain technology enables distributed storage and encryption of mesenchymal stem cell testing data, ensuring its authenticity and integrity. Furthermore, blockchain's smart contract functionality enables automated data management and access control, improving data processing efficiency. However, directly applying blockchain technology to mesenchymal stem cell safety testing also presents challenges. These include effectively formatting and standardizing data, ensuring data security and privacy, ensuring the legal sharing and use of data, and promptly identifying and addressing potential security risks. Summary of the Invention
[0005] The present invention aims to solve the technical problems in the existing technology that mesenchymal stem cell security inspection data is easily tampered with and lost, and the processing efficiency is low, and it is difficult to trace and share. A blockchain-based mesenchymal stem cell security inspection method and system are provided to solve the problem.
[0006] The technical solution of the present invention to solve the above technical problems is as follows:
[0007] In a first aspect, the present invention provides a blockchain-based mesenchymal stem cell security inspection method, the method comprising: obtaining core detection data and environmental parameters of stem cells, formatting the core detection data and environmental parameters, embedding timestamps and device ID metadata, and establishing a structured data object; performing data state feature evaluation of the structured data object, and configuring an encryption strategy based on the data state feature evaluation results and the perturbation strategy; encrypting the structured data object based on the encryption strategy using multi-party secure computing, the encryption is completed through a distributed key management mechanism, and the encryption key is sharded and stored in multiple trust nodes; generating zero-knowledge proof for the encrypted ciphertext and encryption parameters, and recording the perturbation strategy and encryption parameters as metadata, and managing them through a dedicated perturbation control contract; uploading the encrypted ciphertext, zero-knowledge proof, and dedicated perturbation control contract to the blockchain according to a preset block data structure for security inspection management.
[0008] In the second aspect, the present invention provides a mesenchymal stem cell security inspection system based on blockchain, which includes: a data acquisition module for acquiring core detection data and environmental parameters of stem cells, formatting the core detection data and environmental parameters, embedding timestamps and device ID metadata, and establishing structured data objects; an encryption configuration module for performing data state feature evaluation of structured data objects, and configuring encryption strategies based on data state feature evaluation results and perturbation strategies; a data encryption module for encrypting structured data objects based on the encryption strategies using multi-party secure computing, wherein the encryption is completed through a distributed key management mechanism, and the encryption key is sharded and stored in multiple trust nodes; a contract management module for generating zero-knowledge proofs for encrypted ciphertexts and encryption parameters, and recording perturbation strategies and encryption parameters as metadata, and managing them through dedicated perturbation control contracts; a security management module for uploading encrypted ciphertexts, zero-knowledge proofs, and dedicated perturbation control contracts to the blockchain according to a preset block data structure for security inspection management.
[0009] The beneficial effects of the present invention are: by obtaining the core detection data and environmental parameters of stem cells, establishing structured data objects, and configuring encryption strategies based on data state feature evaluation and perturbation strategies, encryption is performed using multi-party secure computing and distributed key management, and zero-knowledge proof is generated and metadata is managed. Finally, the encrypted information and contracts are uploaded to the blockchain for security inspection and management, thereby ensuring the security, integrity and traceability of stem cell data and improving the efficiency and accuracy of data processing. BRIEF DESCRIPTION OF THE DRAWINGS
[0010] Figure 1 A schematic diagram of a blockchain-based mesenchymal stem cell safety inspection method provided by the present invention.
[0011] Figure 2This is a schematic diagram of the structure of a blockchain-based mesenchymal stem cell safety inspection system provided by the present invention.
[0012] Explanation of the accompanying drawings: data acquisition module 11, encryption configuration module 12, data encryption module 13, contract management module 14, security management module 15. DETAILED DESCRIPTION
[0013] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making any creative efforts shall fall within the scope of protection of the present invention.
[0014] In the description of the present invention, the terms "first" and "second" are used for descriptive purposes only and should not be understood to indicate or imply relative importance or implicitly specify the number of the technical features indicated. Therefore, a feature specified as "first" or "second" may explicitly or implicitly include one or more of the specified features. In the description of the present invention, "plurality" means two or more, unless otherwise specifically defined.
[0015] In the description of the present invention, the term "for example" is used to mean "used as an example, illustration or illustration". Any embodiment of the present invention described as "for example" is not necessarily to be construed as being more preferred or advantageous than other embodiments. The following description is given to enable any person skilled in the art to implement and use the present invention. In the following description, details are listed for the purpose of explanation. It should be understood that a person of ordinary skill in the art can recognize that the present invention can be implemented without using these specific details. In other examples, well-known structures and processes are not elaborated in detail to avoid obscuring the description of the present invention with unnecessary details. Therefore, the present invention is not intended to be limited to the embodiments shown, but is consistent with the widest scope consistent with the principles and features disclosed herein.
[0016] Example 1:
[0017] like Figure 1 As shown, an embodiment of the present invention provides a blockchain-based mesenchymal stem cell security verification method, the method comprising:
[0018] S10: Acquire core detection data and environmental parameters of stem cells, format the core detection data and environmental parameters, embed timestamp and device ID metadata, and create a structured data object.
[0019] For example, core stem cell test data and environmental parameters are obtained. The core test data covers key information such as stem cell activity indicators, differentiation ability assessment, gene expression levels, etc. Specifically, stem cell activity indicators are used to assess the survival rate, proliferation ability, and metabolic state of stem cells. The test is shown in Table 1 below:
[0020] Table 1: Stem cell activity detection test table
[0021]
[0022]
[0023]
[0024]
[0025] Differentiation capacity assessment refers to the evaluation of multidirectional differentiation potential through differentiation induction or marker detection. For example, mesenchymal stem cells need to be evaluated for osteogenic, adipogenic, and chondrogenic differentiation. Specific evaluation data are shown in Table 2 below:
[0026] Table 2 Differentiation ability evaluation experimental data table
[0027]
[0028]
[0029] Gene expression levels were quantified using molecular biology techniques to determine the specific gene expression in stem cells. The test data are shown in Table 3:
[0030] Table 3 Gene expression level experimental data
[0031]
[0032]
[0033] These data directly reflect the intrinsic characteristics and quality status of stem cells; the environmental parameters include culture temperature, humidity, gas composition (such as oxygen and carbon dioxide concentrations), etc., which play a vital role in the growth and maintenance of stem cells. After obtaining these data, data formatting must be performed to uniformly convert the data into a specific format, such as JSON or XML format, to ensure data consistency and readability. Next, the timestamp and device ID metadata are embedded. The timestamp records the specific time when the data was acquired, and the device ID clarifies which detection device the data comes from, which provides an important basis for data traceability and verification. Through these steps, a structured data object containing core detection data, environmental parameters, timestamp and device ID is finally established. For example, in a stem cell culture experiment, the activity detection data of a batch of stem cells in a specific incubator (device ID is XYZ123) at 14:00 on May 10, 2024 is 85%, the culture environment temperature is 37°C, the oxygen concentration in the gas composition is 20%, the carbon dioxide concentration is 5%, etc. After formatting these data and embedding the corresponding metadata, a complete structured data object is formed, which is convenient for subsequent data storage, analysis and sharing.
[0034] S20: Execute data state feature evaluation of the structured data object, and configure an encryption strategy based on the data state feature evaluation result and the perturbation strategy.
[0035] Furthermore, when executing the data processing flow, data status feature evaluation is carried out for the established structured data objects. The data status feature evaluation focuses on key features such as data integrity, accuracy, consistency and timeliness. Integrity considers whether the data is missing key fields. For example, in a structured data object containing a patient's medical records, if the key diagnosis result field is missing, its integrity is problematic; accuracy evaluates whether the data value is true and reliable. For example, if the patient's age data has an obviously unreasonable value, the accuracy is questionable; consistency checks whether the data remains consistent in different records or at different time points. For example, the blood type information of the same patient is inconsistent in different records; timeliness determines whether the data is valid within the specified time range. For example, if some test data exceeds the specified validity period, the timeliness is insufficient.
[0036] After completing the data state feature evaluation, an encryption strategy is configured in conjunction with a perturbation strategy. The perturbation strategy involves adding some controllable interference factors to the data to enhance data security, such as making slight numerical adjustments or character replacements to sensitive data fields. Based on the data state feature evaluation results, if the data integrity is good, the accuracy is high, the consistency is strong, and the timeliness meets the requirements, but considering the high sensitivity of the data, a more complex encryption strategy can be configured, such as using the Advanced Encryption Standard (AES) algorithm in combination with a longer key length. If the data state feature evaluation shows that there are certain problems with the data, such as slightly insufficient integrity, a relatively simple encryption strategy may be selected, combined with a specific perturbation strategy, such as marking and perturbing some missing fields before encrypting them using a symmetric encryption algorithm. For example, in structured data objects of financial transactions, if the evaluation finds that the overall data quality is high but involves sensitive information such as user passwords, an encryption strategy including multiple encryption steps and random perturbation factor injection is configured to ensure the security of the data during transmission and storage.
[0037] S30: Encrypt the structured data object based on the encryption strategy using multi-party secure computing, wherein the encryption is completed through a distributed key management mechanism, and the encryption key is stored in multiple trust nodes in a fragmented manner.
[0038] Preferably, when processing sensitive structured data objects, multi-party secure computing technology is employed and encryption operations are performed based on pre-configured encryption policies. This multi-party secure computing allows multiple parties to jointly complete data computation tasks without disclosing their private data, focusing on achieving a secure encryption process. The encryption process utilizes a distributed key management mechanism to ensure key security. The core of this distributed key management mechanism is to shard the encryption key and then store these key shards across multiple mutually trusted nodes.
[0039] For example, in a scenario involving medical data sharing, multiple medical institutions need to share structured patient data objects while ensuring data privacy. First, the specific encryption method and parameters are determined based on the established encryption strategy. Next, using multi-party secure computation technology, all participating parties collaborate to encrypt the data using complex algorithms and protocols without exposing their own data. During the encryption process, a distributed key management mechanism is employed to split the encryption key into multiple parts, for example, five. These key shards are then stored on five different trusted nodes, which may be secure servers within different medical institutions or specialized third-party secure storage facilities. Only when specific conditions are met, such as obtaining authorization for a sufficient number of key shards, can the complete key be reassembled to decrypt the data. This ensures secure data encryption while enabling secure data sharing among multiple parties.
[0040] S40: Generate zero-knowledge proof for the encrypted ciphertext and encryption parameters, record the perturbation strategy and encryption parameters as metadata, and manage them through a dedicated perturbation control contract.
[0041] After the encryption of structured data objects is completed, the next step is to generate zero-knowledge proofs and record and manage metadata. Zero-knowledge proof is an encryption technology that allows one party (the prover) to prove to another party (the verifier) that a statement is true without revealing any additional information other than the truth of the statement. Here, generating a zero-knowledge proof for encrypted ciphertext and encryption parameters means proving the correctness and compliance of the encryption process to relevant parties without revealing the specific content of the encrypted ciphertext and encryption parameters. For example, in a financial transaction system, after encrypting transaction data, generating a zero-knowledge proof can prove to regulators that the transaction data was indeed encrypted according to the specified encryption parameters, but the regulators cannot know the specific content of the transaction data.
[0042] The perturbation strategy and encryption parameters are also recorded as metadata. The perturbation strategy is the method used to perturb the data before encryption, while the encryption parameters are the various parameter settings used during the encryption process. Recording this metadata facilitates subsequent auditing and traceability of the encryption process. For example, in a medical research project, encrypting a patient's genetic data, the perturbation strategy might include random replacement of portions of the genetic sequence. Encryption parameters include the encryption algorithm type and key length. Recording these as metadata facilitates researchers' understanding of the data processing process.
[0043] Finally, a dedicated perturbation control contract manages this metadata and encryption process. This is a smart contract, based on blockchain technology, that specifies, in code, the rules for using perturbation policies and encryption parameters, as well as permission management. For example, in a supply chain finance scenario involving the exchange of sensitive data among multiple parties, a dedicated perturbation control contract can restrict access to and modification of perturbation policies to specific authorized parties, ensuring the security and controllability of the encryption process. When adjustments to perturbation policies or encryption parameters are required, they must be made according to the contract's procedures, ensuring transparency and standardization of the entire encryption and data management process.
[0044] S50: Upload the encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contract to the blockchain according to the preset block data structure for security verification and management.
[0045] Specifically, after encrypting the structured data object, generating a zero-knowledge proof, and developing a dedicated perturbation control contract, the data is uploaded to the blockchain for security verification and management. This involves uploading the encrypted ciphertext, zero-knowledge proof, and dedicated perturbation control contract to the blockchain according to a pre-defined block data structure. The block data structure typically consists of a header and a data body. The header records block metadata, such as timestamp and previous block hash value, while the data body stores the specific encrypted ciphertext, zero-knowledge proof, and dedicated perturbation control contract. Once uploaded to the blockchain, the data is securely verified and managed, leveraging the blockchain's immutability and traceability. For example, in a supply chain management system, encrypted data from product production, transportation, and sales, along with the corresponding zero-knowledge proofs and dedicated perturbation control contracts that govern the data processing process, is uploaded to the blockchain. This allows all parties to verify the authenticity and integrity of the data in real time, ensuring a secure and transparent supply chain.
[0046] In a specific embodiment, the data state characteristic evaluation of the structured data object is performed, and the encryption strategy is configured based on the data state characteristic evaluation result and the perturbation strategy, including: performing data type identification on the structured data object to establish a first state characteristic; performing data length analysis on the structured data object to establish a second state characteristic; performing data sensitivity analysis on the structured data object to establish a third state characteristic; and using the first state characteristic, the second state characteristic, and the third state characteristic as the data state characteristic evaluation results to construct an encryption strategy.
[0047] Preferably, when evaluating the data state characteristics of a structured data object and configuring an encryption strategy based on the evaluation results and the perturbation strategy, the type of the structured data object is first identified. In the field of stem cell technology, structured data objects may contain multiple types of data, such as stem cell gene sequence data (bioinformatics data) and culture environment temperature and humidity records (environmental parameter data). By identifying the types of these data, the essential attributes of different data can be clarified, and then the first state characteristics can be established. The first state characteristics reflect the basic category of the data and provide a basic basis for subsequent processing.
[0048] Next, data length analysis is performed on the structured data objects. For example, in the case of experimental data records in stem cell research, the data length generated by different experimental batches and different test items can vary significantly. For example, a comprehensive stem cell differentiation capacity test may generate a large number of data records, while a simple cell viability test may generate relatively short data records. Data length analysis can provide an understanding of the data size and thus establish a second state feature. This feature helps assess data storage and transmission requirements, as well as the potential complexity encountered during encryption.
[0049] At the same time, data sensitivity analysis is performed on structured data objects. Stem cell genetic information is highly sensitive, and its disclosure could have serious consequences for the research subjects. On the other hand, the operating parameters of culture equipment are relatively less sensitive. By accurately determining the sensitivity of the data, a third-state feature is established. This feature clarifies the confidentiality requirements of the data and is a key consideration in developing encryption strategies.
[0050] Finally, the first state feature (data type), second state feature (data length), and third state feature (data sensitivity) are used as the data state feature evaluation results to construct an encryption strategy. For example, for data such as stem cell gene sequences that are highly sensitive, bioinformatics-type, and may have a large data length, the Advanced Encryption Standard (AES) algorithm is used, and a longer key length is set, while combining multiple encryption technologies to ensure data security; while for data such as temperature and humidity records of the culture environment that are low-sensitivity, environmental parameter-type, and have a short data length, a relatively simple encryption algorithm can be used to ensure a certain degree of security while improving processing efficiency. In this way, based on the data state feature evaluation results and the perturbation strategy in the actual application scenario, encryption strategies suitable for different structured data objects can be accurately configured.
[0051] In a specific embodiment, the method of constructing an encryption strategy using the first state feature, the second state feature, and the third state feature as data state feature evaluation results also includes: sorting the data state features in state and constructing a subset space of the perturbation strategy based on the state sorting results; generating a perturbation strategy after configuring a random factor in the subset space; and configuring an encryption strategy using the perturbation strategy and the data state feature evaluation results.
[0052] Specifically, in the process of building an encryption strategy, it is necessary to sort the data state features. Assume that the structured data object obtained contains the cell morphology image data of mesenchymal stem cells (data type), the size of the image data (data length), and the sensitivity of the cell key marker detection results (data sensitivity). When sorting the states, data sensitivity may be given priority, because the key marker detection results of mesenchymal stem cells are highly sensitive information, which is related to security and compliance; the second is the data type. Cell morphology image data has specific bioinformatics characteristics, and the processing requirements are different from general text data; the last is the data length. Although the image data size will affect the processing efficiency, it has a slightly lower priority than the first two when building an encryption strategy. Through such sorting, the importance of different state features in building a strategy is clarified.
[0053] Then, a subset space of perturbation strategies is constructed based on the state sorting results. The subset space can be understood as establishing the limiting boundaries of the perturbation selection space. For example, for highly sensitive mesenchymal stem cell key marker test result data, the subset space can be limited to only allow slight numerical perturbations, and the perturbation range is strictly controlled within a certain interval to ensure data accuracy and security; for cell morphology image data, the subset space may allow certain regular perturbations on the image pixel values, but cannot change the overall characteristics of the image; and for general record data with shorter data lengths, the subset space may be relatively loose, allowing a variety of perturbation methods.
[0054] After configuring random factors within the subset space, a perturbation strategy is generated. The introduction of random factors increases the uncertainty of the perturbation and improves data security. For example, when perturbing the numerical values of key mesenchymal stem cell markers, the random factors can cause the specific values of each perturbation to vary randomly within a certain range. When perturbing the pixel values of cell morphology image data, the random factors determine the specific location and amplitude of the pixel value perturbation. In this way, perturbation strategies that match different data state characteristics are generated. Finally, encryption strategies are configured using the generated perturbation strategies and the previous data state characteristic evaluation results. For highly sensitive data in mesenchymal stem cell security testing, a high-strength encryption algorithm, such as the Advanced Encryption Standard (AES) combined with multiple encryption techniques, is employed, combining specific perturbation strategies and high data sensitivity evaluation results to ensure absolute data security during transmission and storage. For general data, a relatively simple encryption algorithm is used, combined with appropriate perturbation strategies, to improve processing efficiency while ensuring data security. Through this process, encryption strategies tailored to the different structured data objects used in mesenchymal stem cell security testing can be precisely constructed.
[0055] In a specific embodiment, after uploading the encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contract to the blockchain according to the preset block data structure, it includes: activating the on-chain status judgment contract, calling the dedicated disturbance control contract with the on-chain status judgment contract, and reading the recorded metadata; judging whether the disturbance intensity of the recorded metadata meets the minimum disturbance entropy requirement of the corresponding data state feature evaluation result, and establishing a first judgment result; using the preset block data structure to perform data integrity verification, and establishing a second judgment result; generating a judgment tag based on the first judgment result and the second judgment result, and performing blockchain management based on the judgment tag.
[0056] Optionally, after the encrypted ciphertext, zero-knowledge proof, and dedicated perturbation control contract are uploaded to the blockchain according to the pre-set block data structure, the on-chain data verification and management process begins. First, the on-chain status judgment contract is activated. This contract automatically calls the dedicated perturbation control contract and reads the recorded metadata. This metadata contains key information from the previously configured perturbation strategy, such as the perturbation method and perturbation range. For example, suppose the uploaded data is encrypted ciphertext and related information regarding the differentiation capacity of mesenchymal stem cells. After reading the metadata, the on-chain status judgment contract determines whether the perturbation intensity of the recorded metadata meets the minimum perturbation entropy requirement of the corresponding data state characteristic evaluation results. Perturbation entropy is a metric that measures the degree of perturbation, and the minimum perturbation entropy requirement is pre-set based on the data state characteristic evaluation results. For example, for highly sensitive data such as mesenchymal stem cell differentiation capacity, which the data state characteristic evaluation results indicate requires high-level protection, the minimum perturbation entropy requirement will be relatively high. If the perturbation intensity meets this requirement, the first judgment result is "passed"; otherwise, it is "failed."
[0057] Subsequently, a data integrity check is performed using the preset block data structure. This pre-set block data structure specifies the data storage format and verification rules within the block. Data integrity is crucial in mesenchymal stem cell security testing. For example, any missing or tampered cell test data can lead to erroneous test results. By comparing the data hash value, data length, and other information stored in the block with the original uploaded data, it is determined whether the data has been altered during the upload or storage process. If the data is complete and correct, the second judgment result is "complete"; if the data is missing or corrupted, it is "incomplete."
[0058] Finally, a judgment label is generated based on the first and second judgment results. If the first judgment result is "passed" and the second judgment result is "complete," the judgment label may be "qualified"; if either judgment result is "failed" or "incomplete," the judgment label is "unqualified." Blockchain management is performed based on this judgment label. "Qualified" data is allowed to be stored and shared normally on the blockchain, providing reliable data support for subsequent research and application of mesenchymal stem cell safety testing. "Unqualified" data is marked or further measures such as repair and deletion are taken to ensure the quality and security of the data stored on the blockchain. Through this process, uploaded data is strictly verified and identified from a blockchain perspective, ensuring the credibility and availability of mesenchymal stem cell safety testing data.
[0059] In a specific embodiment, after uploading the encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contract to the blockchain according to the preset block data structure, it also includes: obtaining an information viewing request; using the information viewing request to perform a joint authentication of the requester's identity, purpose, access frequency, and compliance; if the joint authentication is passed, the blockchain broadcasts a shard request for a one-time request token to all trusted nodes; obtaining request response feedback from all trusted nodes, and when no less than a threshold number of request response feedbacks are received, reconstructing a one-time decryption key; and feeding back the one-time decryption key to the corresponding requester.
[0060] Furthermore, after uploading the encrypted ciphertext, zero-knowledge proof, and dedicated perturbation control contract to the blockchain according to the preset block data structure, the relevant processes for information access requests must be processed. When a user initiates an information access request, for example, in a mesenchymal stem cell safety testing project, a research institution wishes to access specific mesenchymal stem cell experimental data stored on the blockchain. The system then uses this information access request to perform a multi-faceted joint authentication of the requester. This joint authentication includes identity authentication of the requester to ensure that the requester is a legitimate and authorized institution or individual; purpose authentication to clarify the specific purpose of the data being accessed, such as academic research, drug development, or other compliant purposes; access frequency authentication to prevent the requester from accessing the data excessively, ensuring system stability and data security; and compliance authentication to verify that the requester's actions comply with relevant laws, regulations, and industry standards. For example, in the case of mesenchymal stem cell safety testing, the requester may be required to comply with data protection regulations and ethical guidelines for stem cell research.
[0061] If joint authentication succeeds, the blockchain broadcasts a shard request for a one-time token to all trusted nodes. Trusted nodes are rigorously screened and certified reliable nodes in the blockchain network, working together to maintain the security and stable operation of the blockchain. For example, in a blockchain network comprised of multiple reputable medical and scientific research institutions, these institutions, acting as trusted nodes, will process the shard request according to their own security policies and rules upon receiving it. The system then receives response feedback from all trusted nodes. When a threshold number of responses are received, the system reconstructs the one-time decryption key. This threshold is pre-set based on the blockchain's security requirements and the distribution of trusted nodes. It ensures that the decryption key can only be successfully reconstructed when a sufficient number of trusted nodes respond. For example, if the threshold is set to 7, the one-time decryption key can only be reconstructed when at least 7 trusted nodes have provided valid responses.
[0062] Finally, the reconstructed one-time decryption key is fed back to the corresponding requester. The requester can use this key to decrypt the encrypted ciphertext and obtain the required mesenchymal stem cell experimental data. This process enables secure access and sharing of encrypted data on the blockchain while ensuring data security, meeting the data collaboration needs of different institutions in mesenchymal stem cell safety testing technology.
[0063] In a specific embodiment, after uploading the encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contract to the blockchain according to the preset block data structure, it also includes: establishing an abnormal isolation partition in the blockchain; performing a cumulative abnormality score on each block, and the evaluation indicators of the cumulative abnormality score include a disturbance abnormality indicator and an access abnormality indicator; if the cumulative abnormality score of any block meets the preset abnormality threshold, the corresponding block is isolated to the abnormal isolation partition.
[0064] For example, after the encrypted ciphertext, zero-knowledge proof, and dedicated perturbation control contract are uploaded to the blockchain according to the pre-set block data structure, anomaly monitoring and isolation will be further implemented to ensure the security and reliability of the data on the blockchain. First, an anomaly isolation partition is established on the blockchain. This partition is used to store blocks experiencing anomalies to prevent the spread of anomalies and affect the normal operation of the entire blockchain. A cumulative anomaly score is then assigned to each block. This cumulative anomaly score is derived through a comprehensive evaluation of multiple evaluation metrics, including a perturbation anomaly index and an access anomaly index. The perturbation anomaly index focuses on whether the data exhibited anomalies during the perturbation process. For example, when perturbing stem cell experimental data, if the difference between the perturbed data and the original data exceeds the normal range, or if the perturbation method does not conform to the pre-set perturbation strategy, the perturbation anomaly index may be triggered. For example, if the originally specified numerical perturbation of stem cell gene expression data results in a significant change in the expression of key genes, this would constitute a perturbation anomaly. The access anomaly index focuses on monitoring access to blocks. If the access frequency to a block suddenly increases significantly, or if the access source is unusual, such as from unauthorized organizations or individuals, this could indicate a security risk. For example, in a mesenchymal stem cell safety testing project, normally only a few collaborating research institutions would regularly access the relevant data block. However, if a sudden influx of unidentified access requests occurs, this would constitute an access anomaly.
[0065] The cumulative anomaly score of each block is continuously monitored. Once the cumulative anomaly score of any block meets the preset anomaly threshold, it indicates that the block presents a high security risk. At this point, the corresponding block is automatically isolated to the established anomaly isolation partition. For example, if a block storing mesenchymal stem cell clinical trial data reaches a preset threshold due to disturbance anomalies and access anomalies, it will be quickly isolated to prevent the potential security threat from affecting the security and normal use of other data on the entire blockchain. This process effectively ensures the security of data storage and sharing in the blockchain field of mesenchymal stem cell safety testing technology.
[0066] In a specific embodiment, the security verification management includes: when any requester accesses the blockchain, synchronously establishing an access event record on the chain, the access event record including an approval record and a rejection record; generating an access proof hash value of the accessed data based on the access event record; and associating and binding the access proof hash value with the hash value of the accessed data for storage.
[0067] Specifically, during security verification management, when any requester accesses the blockchain, an access event record is created on-chain. This access event record can be thought of as an access log on the blockchain, detailing each access, including approval and rejection records. A approval record indicates that the requester has successfully passed identity verification and permission review, gaining access to the data. A rejection record indicates that the requester was unable to access the data due to reasons such as identity authentication failure or insufficient permissions. For example, suppose a pharmaceutical company wishes to access mesenchymal stem cell clinical trial data stored on the blockchain. When the pharmaceutical company initiates an access request, the system immediately creates an access event record. If the pharmaceutical company provides valid identification and its access rights comply with regulations, the system generates an approval record. Otherwise, if the pharmaceutical company's identity is questionable or it lacks the appropriate access rights, the system generates a rejection record.
[0068] Next, a proof-of-access hash value for the accessed data is generated based on the access event record. A hash value is a unique and irreversible data identifier. A unique proof-of-access hash value is generated by processing the access event record using a specific hash algorithm. This hash value uniquely represents the access event. Finally, the proof-of-access hash value is associated and bound to the hash value of the accessed data and stored. The hash value of the accessed data is also a unique identifier obtained by processing the data itself using a hash algorithm. Storing the two in association and binding establishes a binding relationship between the data and the access event, facilitating subsequent auditing and tracing. For example, if data access needs to be reviewed later, the proof-of-access hash value can be used to quickly locate the corresponding access event record. The hash value of the accessed data can also be used to verify the data's integrity and whether it has been tampered with. This process effectively ensures the security and traceability of data access using blockchain in the field of mesenchymal stem cell security testing technology.
[0069] The blockchain-based mesenchymal stem cell safety verification method provided by the embodiments of the present invention has at least the following technical effects:
[0070] 1. By performing type identification, data length analysis, and data sensitivity analysis on structured data objects, multi-dimensional data state features are established. Based on these features, states are sorted, a subset space of perturbation strategies is constructed, and random factors are introduced to generate perturbation strategies, which are then used to configure encryption strategies. This dynamic and refined encryption strategy construction approach provides targeted protection based on the characteristics of different data. In mesenchymal stem cell safety testing, high-intensity encryption is used for highly sensitive critical test data, while relatively simple encryption is used for general environmental parameters. This ensures data security while improving processing efficiency, effectively balancing data security and performance requirements.
[0071] 2. Structured data objects are encrypted using multi-party secure computation based on encryption policies. The encryption keys are sharded and stored across multiple trusted nodes, enhancing data security and reliability. Furthermore, zero-knowledge proofs are generated for the encrypted ciphertext and encryption parameters, proving the compliance of the encryption process without revealing the specific data content. The encrypted ciphertext, zero-knowledge proof, and other information are uploaded to the blockchain, where security verification and management are performed using the blockchain's immutable and traceable properties. This integrated application ensures the security and credibility of mesenchymal stem cell data during encryption, storage, and sharing, meeting the stringent data privacy and security requirements of stem cell research.
[0072] 3. Anomaly isolation partitions are established on the blockchain, and each block is cumulatively scored for anomalies. Block anomalies are determined based on disturbance anomaly and access anomaly indicators. If a block meets preset thresholds, the anomaly block is isolated. Furthermore, when a requester accesses the blockchain, an access event record is created, a hash value for the access proof is generated, and this is stored in association with the hash value of the accessed data. These mechanisms enable comprehensive and secure management of mesenchymal stem cell data access and storage on the blockchain, enabling timely detection and resolution of anomalies, preventing data leaks and malicious access, ensuring the stable operation of the blockchain system and data security, and providing reliable technical support for mesenchymal stem cell safety testing.
[0073] Example 2:
[0074] like Figure 2 As shown, based on the same inventive concept as the blockchain-based mesenchymal stem cell safety verification method provided in Example 1, an embodiment of the present invention further provides a blockchain-based mesenchymal stem cell safety verification system, the system comprising:
[0075] The data acquisition module 11 is used to acquire the core detection data and environmental parameters of the stem cells, format the core detection data and environmental parameters, embed timestamp and device ID metadata, and establish a structured data object.
[0076] The encryption configuration module 12 is used to perform data state feature evaluation on structured data objects and configure encryption strategies based on the data state feature evaluation results and the disturbance strategy.
[0077] The data encryption module 13 is used to encrypt the structured data object based on the encryption strategy using multi-party secure computing. The encryption is completed through a distributed key management mechanism, and the encryption key is stored in multiple trust nodes in a fragmented manner.
[0078] The contract management module 14 is used to generate zero-knowledge proofs for encrypted ciphertexts and encryption parameters, record perturbation strategies and encryption parameters as metadata, and control contract management through dedicated perturbations.
[0079] The security management module 15 is used to upload encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contract to the blockchain according to the preset block data structure for security verification management.
[0080] Furthermore, the encryption configuration module 12 is further configured to perform the following steps:
[0081] Perform data type identification on the structured data object to establish a first state feature; perform data length analysis on the structured data object to establish a second state feature; perform data sensitivity analysis on the structured data object to establish a third state feature; use the first state feature, the second state feature, and the third state feature as data state feature evaluation results to construct an encryption strategy.
[0082] Furthermore, the encryption configuration module 12 is further configured to perform the following steps:
[0083] The data state characteristics are state-sorted, and a subset space of a perturbation strategy is constructed based on the state sorting result; after configuring a random factor in the subset space, a perturbation strategy is generated; and an encryption strategy is configured using the perturbation strategy and the data state characteristic evaluation result.
[0084] Furthermore, the security management module 15 is further configured to perform the following steps:
[0085] Activate the on-chain status judgment contract, call the dedicated disturbance control contract with the on-chain status judgment contract, and read the recorded metadata; determine whether the disturbance intensity of the recorded metadata meets the minimum disturbance entropy requirement of the corresponding data state feature evaluation result, and establish a first judgment result; use the preset block data structure to perform data integrity verification, and establish a second judgment result; generate a judgment tag based on the first and second judgment results, and perform blockchain management based on the judgment tag.
[0086] Furthermore, the security management module 15 is further configured to perform the following steps:
[0087] Obtain an information viewing request; use the information viewing request to jointly authenticate the requester's identity, purpose, access frequency, and compliance; if the joint authentication passes, the blockchain broadcasts a shard request for a one-time request token to all trusted nodes; obtain request response feedback from all trusted nodes, and when no less than a threshold number of request response feedback is received, reconstruct the one-time decryption key; and feed the one-time decryption key back to the corresponding requester.
[0088] Furthermore, the security management module 15 is further configured to perform the following steps:
[0089] An abnormality isolation partition is established on the blockchain; a cumulative abnormality score is performed on each block, and the evaluation indicators of the cumulative abnormality score include a disturbance abnormality index and an access abnormality index; if the cumulative abnormality score of any block meets a preset abnormality threshold, the corresponding block is isolated to the abnormality isolation partition.
[0090] Furthermore, the security management module 15 is further configured to perform the following steps:
[0091] When any requester accesses the blockchain, an access event record is synchronously established on the chain, and the access event record includes an approval record and a rejection record; an access proof hash value of the accessed data is generated based on the access event record; and the access proof hash value is associated and bound with the hash value of the accessed data for storage.
[0092] Through the above detailed description of a blockchain-based mesenchymal stem cell security verification method in this specification, those skilled in the art can clearly understand a blockchain-based mesenchymal stem cell security verification system in this embodiment. For the system disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant details can be referred to the method section.
[0093] The above description of the disclosed embodiments is intended to enable one skilled in the art to implement or use the present application. Various modifications to these embodiments will be readily apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application is not limited to the embodiments shown herein, but is intended to conform to the widest scope consistent with the principles and novel features disclosed herein.
Claims
1. A blockchain-based mesenchymal stem cell safety testing method, characterized in that: The method comprises: Acquiring core detection data and environmental parameters of stem cells, formatting the core detection data and environmental parameters, embedding timestamp and device ID metadata, and establishing a structured data object; Perform data state feature evaluation on structured data objects, and configure encryption strategies based on the data state feature evaluation results and perturbation strategies; Encrypting the structured data object based on the encryption strategy using multi-party secure computation, wherein the encryption is accomplished through a distributed key management mechanism, and the encryption key is stored in multiple trusted nodes in a fragmented manner; Generate zero-knowledge proofs for encrypted ciphertext and encryption parameters, record perturbation strategies and encryption parameters as metadata, and manage them through dedicated perturbation control contracts; Upload encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contract to the blockchain according to the preset block data structure for security verification and management.
2. A blockchain-based mesenchymal stem cell safety inspection method according to claim 1, characterized in that: The step of evaluating the data state characteristics of the structured data object and configuring the encryption strategy based on the data state characteristic evaluation result and the perturbation strategy includes: Identify the data type of the structured data object and establish a first state feature; performing data length analysis of the structured data object and establishing a second state feature; Perform data sensitivity analysis on structured data objects and establish third-state features; An encryption strategy is constructed by using the first state feature, the second state feature, and the third state feature as data state feature evaluation results.
3. A blockchain-based mesenchymal stem cell safety inspection method according to claim 2, characterized in that: The constructing of an encryption strategy by using the first state feature, the second state feature, and the third state feature as data state feature evaluation results further includes: Sorting the data state features, and constructing a subset space of the perturbation strategy based on the state sorting results; After configuring the random factors in the subset space, generating a perturbation strategy; An encryption strategy is configured using the disturbance strategy and the data state feature evaluation result.
4. A blockchain-based mesenchymal stem cell safety inspection method according to claim 1, characterized in that: After uploading the encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contract to the blockchain according to the preset block data structure, it includes: Activate the on-chain status judgment contract, use the on-chain status judgment contract to call the dedicated disturbance control contract, and read the recorded metadata; Determine whether the disturbance intensity of the recorded metadata meets the minimum disturbance entropy requirement of the corresponding data state feature evaluation result, and establish a first determination result; Performing data integrity verification using the preset block data structure to establish a second determination result; A judgment tag is generated according to the first judgment result and the second judgment result, and blockchain management is performed according to the judgment tag.
5. A blockchain-based mesenchymal stem cell safety inspection method according to claim 1, characterized in that: After uploading the encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contract to the blockchain according to the preset block data structure, the following steps are also included: Get information viewing request; Using the information to review the request for joint authentication of the requester's identity, purpose, access frequency, and compliance; If the joint authentication is successful, the blockchain broadcasts a shard request for a one-time token to all trusted nodes; Obtain request response feedback from all trusted nodes. When no less than a threshold number of request response feedback is received, reconstruct the one-time decryption key. The one-time decryption key is fed back to the corresponding requester.
6. A blockchain-based mesenchymal stem cell safety inspection method according to claim 1, characterized in that: After uploading the encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contract to the blockchain according to the preset block data structure, the following steps are also included: Establishing abnormal isolation partitions in the blockchain; Performing a cumulative anomaly score on each block, wherein the evaluation indicators of the cumulative anomaly score include a disturbance anomaly index and an access anomaly index; If the cumulative anomaly score of any block meets the preset anomaly threshold, the corresponding block is isolated to the anomaly isolation partition.
7. A blockchain-based mesenchymal stem cell safety inspection method according to claim 1, characterized in that: The safety inspection management includes: When any requester accesses the blockchain, an access event record is synchronously created on the chain, including approval records and rejection records; Generate an access proof hash value for the accessed data based on the access event record; The access proof hash value is associated and bound with the hash value of the accessed data for storage.
8. A blockchain-based mesenchymal stem cell safety inspection system, characterized in that: A system for implementing a blockchain-based mesenchymal stem cell safety verification method according to any one of claims 1 to 7, comprising: A data acquisition module is used to obtain core detection data and environmental parameters of stem cells, format the core detection data and environmental parameters, embed timestamp and device ID metadata, and create a structured data object; An encryption configuration module is used to perform data state feature evaluation of structured data objects and configure encryption strategies based on the data state feature evaluation results and perturbation strategies; A data encryption module, configured to encrypt structured data objects based on the encryption strategy using multi-party secure computing, wherein the encryption is performed through a distributed key management mechanism, and the encryption key is stored in multiple trusted nodes in a fragmented manner; The contract management module is used to generate zero-knowledge proofs for encrypted ciphertext and encryption parameters, record perturbation strategies and encryption parameters as metadata, and control contract management through dedicated perturbation; The security management module is used to upload encrypted ciphertext, zero-knowledge proof, and dedicated disturbance control contracts to the blockchain according to the preset block data structure for security verification and management.
Citation Information
Patent Citations
Blockchain data sharing method, system and device and medium
CN112181922A
Intelligent contract crowdsourcing task method based on block chain
CN118886626A
Intelligent evaluation method and system for enterprise credit score based on block chain
CN120317975A
Intelligent data security encryption method in edge computing environment
CN120342679A
Data exchange and computer-implemented crediting protocol
US12166821B2
Cited By
Distributed file system based on block chain
CN121326866A