Blockchain system privacy protection evaluation method and device

Abstract

The application provides a blockchain system privacy protection evaluation method and device, the blockchain system privacy protection evaluation method and device provided by the application, through privacy protection strength analysis, transaction data availability analysis and privacy protection technology performance analysis of the target blockchain system, the privacy protection analysis result of the blockchain system is obtained, the privacy protection evaluation index system of the blockchain is constructed based on the privacy protection analysis result, and the corresponding weight of the privacy protection evaluation index is allocated according to the specific application scene and type of the target blockchain system, and finally the privacy protection ability score is calculated, the quantitative evaluation of the privacy protection ability of the blockchain is realized, the privacy protection ability of the blockchain system is convenient for non-staff to understand, so that the blockchain project meeting the privacy protection standard of the user is selected.

Description

Technical Field

[0001] This invention relates to the field of blockchain technology, and in particular to a method and apparatus for assessing privacy protection in blockchain systems. Background Technology

[0002] With the development of blockchain technology, it has been gradually applied to multiple fields such as finance and energy, and is actively integrating with various basic industries to form a "blockchain+" pattern. However, the current application environment of blockchain is very complex, and its privacy protection capabilities are still relatively weak, so the problem of user and transaction information being leaked often occurs. In the current major blockchain networks, once an attacker matches a digital wallet address with its owner's personal information, because transaction information is stored in the ledger of each node, all of the owner's personal account information and transaction details will be completely visible throughout the entire network.

[0003] Privacy protection in blockchain systems can be approached from three layers: the network layer, the transaction layer, and the application layer. Regarding network layer privacy protection, attackers may eavesdrop on network information, including node IP addresses, the topological relationships between nodes, and the data transmitted at the network layer. To address this, authorization mechanisms can be used to restrict access, malicious nodes can be periodically detected and blocked, and technologies such as Tor Networks and I2P can be used to obfuscate network layer data.

[0004] Regarding transaction layer privacy protection, attackers can obtain transaction privacy information such as fund flows by analyzing transaction records in the global ledger, and then combine this with background knowledge to obtain user privacy information such as the transactor's identity. To address this issue, coin mixing mechanisms can be used to achieve digital distortion, zero-knowledge proof technology can be used to encrypt numbers, and the Lightning Network can be used to restrict node publishing.

[0005] Regarding application-layer privacy protection, attackers can obtain large amounts of user personal information by combining blockchain addresses posted by users on forums with social engineering techniques. To address this issue, methods such as warning users before the application launches about information that cannot be disclosed and restricting the underlying information users can access can be used.

[0006] While the above methods can achieve privacy protection in blockchain systems to a certain extent, the privacy protection capabilities of blockchain systems are unknown. This makes it difficult for non-professionals to select blockchain projects that meet their privacy protection standards because they cannot ascertain the privacy protection capabilities of the projects they choose.

[0007] Therefore, there is an urgent need for an accurate and effective method for assessing the privacy protection of blockchain systems to address the aforementioned issues. Summary of the Invention

[0008] The application provides a blockchain system privacy protection evaluation method and device to solve the problem that the privacy protection capability of a blockchain system cannot be known in the prior art, which makes it difficult for non-professionals to select a blockchain project that meets their privacy protection standards, and realizes quantitative evaluation of the privacy protection capability of a blockchain system.

[0009] In a first aspect, the application provides a blockchain system privacy protection evaluation method, which comprises:

[0010] obtaining transaction data of a target blockchain system;

[0011] performing privacy protection strength analysis, transaction data availability analysis and privacy protection technology performance analysis on the target blockchain system in the whole life cycle of the transaction data to obtain privacy protection analysis results;

[0012] constructing a blockchain privacy protection evaluation index system of the target blockchain system according to the privacy protection analysis results;

[0013] allocating corresponding weights to each privacy protection evaluation index in the privacy protection evaluation index system according to the application scenarios and types of the target blockchain system, and calculating a privacy protection capability score.

[0014] According to the blockchain system privacy protection evaluation method provided by the application, privacy protection strength analysis, transaction data availability analysis and privacy protection technology performance analysis are performed on the target blockchain system in the whole life cycle of the transaction data to obtain privacy protection analysis results, which comprise:

[0015] performing privacy information quantitative analysis, privacy information access control analysis, privacy information transmission security analysis, privacy information storage security analysis and privacy information correlation analysis on the transaction data to obtain privacy protection strength analysis results;

[0016] analyzing the loss rate and recoverability of the transaction data after taking privacy protection measures to obtain transaction data availability analysis results;

[0017] analyzing the calculation overhead, communication overhead and storage overhead of the privacy protection measures to obtain privacy protection technology performance analysis results.

[0018] According to the blockchain system privacy protection evaluation method provided by the application, privacy information quantitative analysis, privacy information access control analysis, privacy information transmission security analysis, privacy information storage security analysis and privacy information correlation analysis are performed on the transaction data to obtain privacy protection strength analysis results, which comprise:

[0019] The privacy information is extracted and quantized, a privacy variable set is constructed, privacy metadata is generated, a probability distribution of the privacy variable is determined, and a privacy coverage rate in the transaction data is calculated;

[0020] The transaction data access control mechanism of the target blockchain system is analyzed to obtain an access control granularity;

[0021] The communication network and consensus mechanism of the target blockchain system are analyzed to determine a transaction transmission security;

[0022] The ledger data and storage mechanism of the target blockchain system are analyzed and evaluated to determine a ledger storage security;

[0023] The associated on-chain transaction history data in the target blockchain system are analyzed to determine an anti-ledger analysis attack capability.

[0024] According to the blockchain system privacy protection evaluation method provided by the application, the blockchain privacy protection evaluation index system includes privacy protection strength evaluation indexes, transaction data availability evaluation indexes and privacy protection technology performance evaluation indexes.

[0025] According to the blockchain system privacy protection evaluation method provided by the application, the privacy protection strength evaluation indexes include privacy coverage rate, access control granularity, transaction transmission security, ledger storage security and anti-ledger analysis attack capability.

[0026] The transaction data availability evaluation indexes include transaction data loss rate and transaction data recoverability.

[0027] The privacy protection technology performance evaluation indexes include the calculation overhead, communication overhead and storage overhead of the privacy protection measures.

[0028] According to the blockchain system privacy protection evaluation method provided by the application, according to the application scene and type of the target blockchain system, the corresponding weight of the blockchain privacy protection evaluation index system is allocated, and after the privacy protection capability score is calculated, the method further includes:

[0029] According to the privacy protection analysis result, the blockchain privacy protection evaluation index system and the privacy protection capability score, a privacy protection capability evaluation report is generated.

[0030] In the second aspect, the application further provides a blockchain system privacy protection evaluation device, which comprises:

[0031] The acquisition module is used for acquiring transaction data of a target blockchain system.

[0032] The analysis module is configured to perform privacy protection strength analysis, transaction data availability analysis and privacy protection technology performance analysis on the target blockchain system in the whole life cycle of transaction data, and obtain a privacy protection analysis result.

[0033] The index construction module is configured to construct a blockchain privacy protection evaluation index system of the target blockchain system according to the privacy protection analysis result.

[0034] The evaluation module is configured to assign corresponding weights to each privacy protection evaluation index in the blockchain privacy protection evaluation index system according to the application scenario and type of the target blockchain system, and calculate a privacy protection capability score.

[0035] In a third aspect, the present application further provides an electronic device, which comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the steps of the blockchain system privacy protection evaluation method according to any one of the above aspects when executing the program.

[0036] In a fourth aspect, the present application further provides a non-transitory computer readable storage medium, which stores a computer program, and the computer program implements the steps of the blockchain system privacy protection evaluation method according to any one of the above aspects when executed by a processor.

[0037] In a fifth aspect, the present application further provides a computer program product, which comprises a computer program, and the computer program implements the steps of the blockchain system privacy protection evaluation method according to any one of the above aspects when executed by a processor.

[0038] The blockchain system privacy protection evaluation method and device provided by the present application perform privacy protection strength analysis, transaction data availability analysis and privacy protection technology performance analysis on a target blockchain system in the whole life cycle of transaction data, obtain a privacy protection analysis result of the blockchain system, construct a blockchain privacy protection evaluation index system based on the privacy protection analysis result, assign corresponding weights to privacy protection evaluation indexes according to the specific application scenario and type of the target blockchain system, and finally calculate a privacy protection capability score, thereby realizing quantitative evaluation of the privacy protection capability of a blockchain, facilitating non-staff to understand the privacy protection capability of a blockchain system and thus to select a blockchain project meeting their privacy protection standards. BRIEF DESCRIPTION OF DRAWINGS

[0039] In order to more clearly illustrate the technical solutions in the present application or prior art, the following will briefly introduce the drawings needed to be used in the embodiments or prior art description. Obviously, the drawings in the following description are some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained without creative labor based on these drawings.

[0040] Figure 1 is a flowchart of a blockchain system privacy protection evaluation method provided by the present application;

[0041] Figure 2 is a schematic diagram of the construction principle of a blockchain privacy protection evaluation index system;

[0042] Figure 3 is a structural architecture schematic diagram of a blockchain privacy protection evaluation index system hierarchical structure model;

[0043] Figure 4 is a structural schematic diagram of a blockchain system privacy protection evaluation device provided by the present application;

[0044] Figure 5 is a working principle schematic diagram of a blockchain system privacy protection evaluation device;

[0045] Figure 6 is a structural schematic diagram of an electronic device provided by the present application. DETAILED DESCRIPTION

[0046] In order to make the objects, technical solutions and advantages of the present application clearer, the technical solutions in the present application will be described clearly and completely below with reference to the drawings in the present application. Obviously, the described embodiments are some embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0047] Figure 1 The blockchain system privacy protection evaluation method provided by the present application is shown, and the method comprises:

[0048] S110: acquiring transaction data of a target blockchain system;

[0049] S120: performing privacy protection strength analysis, transaction data availability analysis and privacy protection technology performance analysis on the target blockchain system in the whole life cycle of the transaction data, to obtain a privacy protection analysis result;

[0050] S130: constructing a blockchain privacy protection evaluation index system of the target blockchain system according to the privacy protection analysis result;

[0051] S140: assigning corresponding weights to each privacy protection evaluation index in the blockchain privacy protection evaluation index system according to the specific application scenarios and types of the target blockchain system, and calculating a privacy protection capability score.

[0052] The blockchain system mentioned herein includes all existing and operable blockchain systems, such as Bitcoin, Ethereum, Hyperledger, and the like.

[0053] The blockchain system mentioned herein includes all existing and operable blockchain systems, such as Bitcoin, Ethereum, Hyperledger, and the like.

[0054] The transaction participants include ordinary users and administrators in the blockchain system, and can be the initiator, receiver and verifier of the transaction.

[0055] The consensus mechanism refers to the consensus mechanism adopted by the blockchain system, such as PoW (Proof of Work), PBFT (Byzantine Fault Tolerance), DPoS (Delegated Proof of Stake), and the like.

[0056] The distributed ledger refers to the digital ledger used to share and store transaction data in the blockchain system.

[0057] The smart contract refers to all smart contracts deployed in the blockchain system.

[0058] The privacy protection mechanism refers to all methods and strategies that can reduce the privacy protection strength of the blockchain system, such as access control, identity authentication, channel isolation, address obfuscation, zero-knowledge proof, and the like.

[0059] The blockchain application refers to a distributed application program designed and implemented based on the blockchain system.

[0060] The blockchain system in this embodiment is divided into four stages: transaction publishing, transaction consensus, transaction storage and transaction application for privacy protection strategy analysis and privacy protection capability evaluation.

[0061] The four stages are the full life cycle of transaction data mentioned in this embodiment, wherein the transaction publishing stage refers to the process of constructing transaction data content and initiating transaction request by the user of the blockchain node; the transaction consensus stage refers to the process of sending the transaction request to other nodes in the blockchain network through the broadcast mechanism, and verifying the transaction and confirming the block according to the consensus mechanism; the transaction storage stage refers to storing the block data generated in the transaction consensus stage in the distributed shared ledger of the blockchain system; and the transaction application stage refers to using the transaction history data in the shared ledger as a data source to support the blockchain application and the smart contract.

[0062] This embodiment mainly quantitatively analyzes the privacy protection strength, transaction data availability and privacy protection technology performance of the target blockchain system based on the above four stages.

[0063] Specifically, in the whole life cycle of transaction data, privacy protection strength analysis, transaction data availability analysis and privacy protection performance analysis are performed on the target blockchain system to obtain privacy protection analysis results, including:

[0064] First, privacy information quantitative analysis, privacy information access control analysis, privacy information transmission security analysis, privacy information storage security analysis and privacy information correlation analysis are performed on the transaction data to obtain privacy protection strength analysis results.

[0065] Then, the missing rate and recoverability of the transaction data after taking privacy protection measures are analyzed to obtain transaction data availability analysis results.

[0066] Finally, the calculation overhead, communication overhead and storage overhead of the privacy protection measures are analyzed to obtain privacy protection technology performance analysis results.

[0067] Specifically, the process of privacy information quantitative analysis, privacy information access control analysis, privacy information transmission security analysis, privacy information storage security analysis and privacy information correlation analysis on transaction data to obtain privacy protection strength analysis results includes:

[0068] First, privacy information is extracted and quantified, a privacy variable set is constructed, privacy metadata is generated, the probability distribution of privacy variables is determined, and the privacy coverage rate in the transaction data, i.e. the proportion of privacy information in the transaction data, is calculated. The higher the privacy coverage rate, i.e. the higher the proportion of privacy information in the transaction data, the greater the risk and benefit of privacy leakage, thereby providing a basis for implementing privacy protection and evaluation.

[0069] Then, the transaction data access control mechanism in the target blockchain system is analyzed, including identity authentication and authorization, certificate chain and channel isolation, etc., to finally determine the access control granularity and effect. For example, for private chains and consortium chains, the identity authentication and access control methods adopted are analyzed to finally determine the access control granularity and effect of privacy variables. The finer the access control granularity, the better the effect, the stronger the ability of the blockchain system to resist malicious node access, and the risk of privacy information leakage will also be reduced accordingly.

[0070] Next, the privacy protection strength of the communication network and consensus mechanism of the target blockchain system is evaluated, mainly including network monitoring, communication hijacking, malicious node attack, etc., to determine the transaction transmission security.

[0071] After that, the ledger data and storage mechanism of the target blockchain system are analyzed and evaluated, such as whether to adopt privacy protection technologies such as anonymization, data desensitization and cryptography to avoid direct public chain of sensitive data, to determine the ledger storage security.

[0072] Finally, the risk analysis of the associated on-chain transaction history data in the target blockchain system is performed, such as whether an address obfuscation mechanism, a cryptography mechanism, or other methods are used to reduce the risk of ledger analysis attacks, to determine the ledger analysis attack prevention capability.

[0073] Referring to the accompanying drawings Figure 2 The embodiment mainly determines a blockchain privacy protection evaluation index system from three aspects of privacy protection strength, transaction data availability, and privacy protection technology performance of the target blockchain, and finally determines the blockchain privacy protection evaluation index system including a privacy protection strength evaluation index, a transaction data availability evaluation index, and a privacy protection technology performance evaluation index.

[0074] The privacy protection strength evaluation index reflects the privacy protection strength by evaluating the privacy information leakage risk in the blockchain system, and mainly includes privacy coverage, access control granularity, transaction transmission security, ledger storage security, and ledger analysis attack prevention capability.

[0075] The transaction data availability evaluation index evaluates the availability of transaction data after taking privacy protection measures, aiming to evaluate whether the privacy protection mechanism used by the blockchain system affects the use of original transaction data, and mainly includes transaction data loss rate and transaction data recoverability. The transaction data loss rate is used to measure the information loss degree of the original transaction data after the privacy protection mechanism, and the transaction data recoverability is used to measure whether the original data can be recovered again after the privacy protection mechanism to supply normal function use.

[0076] The privacy protection technology performance evaluation index mainly evaluates the efficiency and resource consumption of the privacy protection technology used by the blockchain system, which can be used to measure the feasibility of the blockchain privacy protection technology, and mainly includes the calculation overhead, communication overhead, and storage overhead of the privacy protection measures, representing the calculation resource, communication resource, and storage resource consumed by the privacy protection technology when processing data.

[0077] After determining the blockchain privacy protection evaluation index system, the embodiment also needs to dynamically allocate weights to each privacy protection evaluation index in the blockchain privacy protection evaluation index system. The embodiment constructs different index weight allocation schemes and scoring calculation methods according to optional security targets (i.e., blockchain system types) and specific application scenarios, dynamically adjusts the weights of each evaluation index, and formulates corresponding scoring methods, so as to calculate the scoring results, i.e., the privacy protection capability scores.

[0078] When allocating weights, it is necessary to comprehensively consider application scenarios and security objectives. For example, for application scenarios containing sensitive information, such as medical data, a higher weight should be given to privacy coverage, while for application scenarios involving financial transactions, such as financial data, attention should be paid to the ability to prevent ledger analysis attacks. Compared to public blockchain systems, more attention should be paid to the granularity of access control for private blockchain systems, because private blockchain systems usually assume that all connected nodes are trustworthy.

[0079] This embodiment uses AHP (The Analytic Hierarchy Process) and pairwise comparison to determine the weights of the evaluation indicators and calculate the blockchain privacy protection capability score. The specific implementation process consists of the following three steps:

[0080] Step 1: Establish a hierarchical structure model for a blockchain privacy protection assessment indicator system. For example... Figure 3 As shown, the model consists of three parts: the target layer, the indicator layer, and the solution layer. The target layer represents the relative importance of each privacy protection assessment indicator in the blockchain privacy protection assessment indicator system. The criterion layer is divided into three aspects: privacy protection strength, transaction data availability, and privacy protection technical performance. The solution layer corresponds to the specific content of each privacy protection assessment indicator.

[0081] Transaction data availability assessment metrics correspond to transaction data loss rate and transaction data recoverability; privacy protection strength assessment metrics correspond to privacy coverage rate, privacy difference, access control granularity, communication protocol security, cryptographic algorithm security, address scrambling set size, smart contract security, and data usage standardization. Among these, privacy coverage rate and privacy difference are used to assess the risk of privacy leakage; access control granularity is used to assess the blockchain system's ability to resist malicious node access; communication protocol security is used to assess transaction transmission security; cryptographic algorithm security and smart contract security are used to assess ledger storage security; and address scrambling set size and data usage standardization are used to assess the risk of ledger attack prevention; privacy protection technology performance assessment metrics correspond to computational overhead, storage overhead, and communication overhead. Elements at the same layer belong to the upper layer and influence the results of the upper layer, while simultaneously dominating elements at the lower layer and being affected by the elements at the lower layer.

[0082] Step 2: Dynamically calculate the weights of each privacy protection assessment indicator in the blockchain privacy protection assessment indicator system. This embodiment uses a pairwise comparison method to compare the relative importance of the privacy protection assessment indicators according to the evaluation scale shown in Table 1, constructing four pairwise comparison matrices to evaluate the relative importance among the three assessment dimensions of privacy protection strength, transaction data availability, and privacy protection technology performance, as well as the relative importance among the privacy protection assessment indicators under each dimension.

[0083] Table 1. Definition data of evaluation criteria for the pairwise comparison method

[0084] Evaluation scale Definition Explanation 1 Equal importance Both elements are equally important 3 Moderately important Moderately prefer one element over the other based on experience and judgment 5 Quite important Strongly prefer one element over the other based on experience and judgment 7 Very important Practically a strong preference for one element over the other 9 Absolutely important There is enough evidence to be absolutely sure of a preference for one element over the other 2,4,6,8 Midpoint of adjacent scale Between two judgments

[0085] First, assume a ij , which represents the relative importance comparison result of the ith element and the jth element relative to the upper layer element to which they belong. A = (a ij ) n*n , which represents the relative importance comparison matrix obtained when n elements participate in comparison, that is:

[0086]

[0087] Second, the consistency of the obtained relative importance matrix is checked, and the consistent rate (CR) is calculated. The calculation formula is shown in the following formula (2). If CR is less than 0.1, the matrix is valid. If CR is greater than 0.1, the element value of the matrix needs to be adjusted until the consistency test requirement is met.

[0088]

[0089] wherein, wherein RI is the average random consistency index, which is only related to the order n of the matrix. CI is the inconsistency rate, which is obtained by calculating the relative difference between the maximum eigenvalue of the matrix and the order of the matrix, that is:

[0090]

[0091] In the formula, λ max (A) is the maximum eigenvalue of the relative importance comparison matrix.

[0092] Finally, the eigenvector corresponding to the maximum eigenvalue of the relative importance comparison matrix A is standardized, that is, the components of the vector are all greater than 0, and the sum of the components is equal to 1, so that the weight vector ω is obtained. The weight vector represents the relative importance of all factors relative to the upper layer factor to which they belong.

[0093] Third step: calculate the privacy protection capability score, which is the weighted sum result of the privacy protection strength score, the transaction data availability score and the privacy protection technology performance score.

[0094] First, assume R BC , which represents the privacy protection capability score of the blockchain, R P , R A and R C represent the privacy protection strength score, the transaction data availability score and the privacy protection technology performance score respectively, and the corresponding weights are α P , α A and α C , respectively. The calculation formula of the privacy protection capability score is:

[0095] R BC =α P R P +α A R A +α C R C (4)

[0096] Secondly, determine if any indicator items have excessively low scores. The determination process is as follows:

[0097] Let φ e ={e1,e2,...,e n} represents the set of privacy protection assessment indicators, S(e i ) indicates indicator item e i The score, Indicates index item e i The weights, where e i ∈φ e Regarding the privacy protection strength, considering that the various evaluation indicators are not independent of each other but rather mutually restrictive, exhibiting a "weakest link effect," that is, when the score of a certain indicator is too low, it means that the risk of privacy leakage at a weak point in the transaction data lifecycle is significantly increased, thereby leading to a significant reduction in the privacy protection capability of the entire blockchain system.

[0098] Therefore, this embodiment introduces a privacy protection benchmark value. The system then compares the scores with a privacy protection benchmark threshold η to determine if any indicator scores are too low. Privacy Protection Benchmark Value For indicator item e i The ratio of the score to the sum of all indicator scores is calculated using the following formula:

[0099]

[0100] Therefore, the formula for calculating the privacy protection strength score is as follows:

[0101]

[0102] When the minimum privacy protection baseline value is higher than the privacy protection baseline threshold, R P This is a weighted sum of all indicators; and when the minimum privacy protection benchmark value is lower than the privacy protection benchmark threshold, R... P The ratio of the score of the indicator corresponding to the minimum privacy protection benchmark value multiplied by the privacy leakage risk coefficient β, plus the weighted sum of other indicators, to the privacy protection weakening factor k.

[0103] For the two parts of transaction data availability and privacy protection technology performance, the calculation is directly performed according to the above-mentioned satisfaction of the privacy protection benchmark threshold, and the calculation formulas are respectively:

[0104]

[0105]

[0106] More preferably, after the privacy protection capability score is calculated, the embodiment further includes: generating a privacy protection capability evaluation report according to the privacy protection analysis result, the blockchain privacy protection evaluation index system and the privacy protection capability score, the report containing qualitative evaluation result analysis description and quantitative evaluation score for user reference and comparison.

[0107] The blockchain system privacy protection evaluation device provided by the present application is described below, and the blockchain system privacy protection evaluation device described below can be correspondingly referred to the blockchain system privacy protection evaluation method described above.

[0108] Figure 4 And Figure 5 The blockchain system privacy protection evaluation device provided by the present application is described below, and the blockchain system privacy protection evaluation device described below can be correspondingly referred to the blockchain system privacy protection evaluation method described above.

[0109] The acquisition module 410 is configured to acquire transaction data of a target blockchain system.

[0110] The analysis module 420 is configured to perform privacy protection strength analysis, transaction data availability analysis and privacy protection performance analysis on the target blockchain system in the whole life cycle of the transaction data, and obtain a privacy protection analysis result.

[0111] The index construction module 430 is configured to construct a blockchain privacy protection evaluation index system of the target blockchain system according to the privacy protection analysis result.

[0112] The evaluation module 440 is configured to assign corresponding weights to each privacy protection evaluation index in the blockchain privacy protection evaluation index system according to specific application scenarios and types of the target blockchain system, and calculate a privacy protection capability score.

[0113] In the embodiment, the acquisition module 410 divides the transaction data in the blockchain system into four stages of transaction publishing, transaction consensus, transaction storage and transaction application before acquiring the transaction data, and acquires related data in the whole life cycle of the transaction data.

[0114] In the embodiment, the analysis module 420 can be implemented through a blockchain privacy protection strategy analysis platform, and specifically includes:

[0115] The privacy protection strength analysis unit is used to perform privacy information quantitative analysis, privacy information access control analysis, privacy information transmission security analysis, privacy information storage security analysis, and privacy information correlation analysis on transaction data to obtain privacy protection strength analysis results.

[0116] The transaction data availability analysis unit is used to analyze the loss rate and recoverability of transaction data after privacy protection measures are taken, and to obtain the transaction data availability analysis results.

[0117] The privacy protection technology performance analysis unit is used to analyze the computational overhead, communication overhead, and storage overhead of privacy protection measures, and obtain the privacy protection technology performance analysis results.

[0118] The privacy protection strength analysis unit in this embodiment specifically includes:

[0119] The privacy information quantification subunit is used to extract and quantify privacy information, construct a set of privacy variables, generate privacy metadata, determine the probability distribution of privacy variables, and calculate the privacy coverage rate in transaction data.

[0120] The privacy information access control analysis subunit is used to analyze the transaction data access control mechanism of the target blockchain system to obtain the access control granularity.

[0121] The privacy information transmission security analysis subunit is used to assess the privacy protection strength of the target blockchain system's communication network and consensus mechanism, and determine the security of transaction transmission.

[0122] The privacy information storage security analysis subunit is used to analyze and evaluate the ledger data and storage mechanism of the target blockchain system to determine the security of ledger storage.

[0123] The transaction association analysis subunit is used to perform risk analysis on the associated on-chain transaction history data in the target blockchain system and determine the ability to prevent ledger analysis attacks.

[0124] In this embodiment, the blockchain privacy protection evaluation index system constructed by the index construction module 430 includes privacy protection strength evaluation index, transaction data availability evaluation index, and privacy protection technology performance evaluation index.

[0125] Specifically, the indicators for evaluating the strength of privacy protection include privacy coverage, access control granularity, transaction transmission security, ledger storage security, and the ability to prevent ledger analysis attacks; the indicators for evaluating the availability of transaction data include transaction data loss rate and transaction data recoverability; and the indicators for evaluating the performance of privacy protection include the computational overhead, communication overhead, and storage overhead of privacy protection measures.

[0126] More preferably, the blockchain system privacy protection assessment device provided in this embodiment of the invention further includes: an assessment report generation module, which is used to generate a privacy protection capability assessment report based on the privacy protection analysis results, the blockchain privacy protection assessment index system, and the privacy protection capability score. Users can intuitively understand the current privacy protection capability of the blockchain system based on the privacy protection capability assessment report.

[0127] Figure 6 An example is a schematic diagram of the physical structure of an electronic device, such as... Figure 6 As shown, the electronic device may include a processor 610, a communications interface 620, a memory 630, and a communication bus 640. The processor 610, communications interface 620, and memory 630 communicate with each other via the communication bus 640. The processor 610 can call logical instructions in the memory 630 to execute a blockchain system privacy protection assessment method. This method includes: acquiring transaction data of the target blockchain system; performing privacy protection strength analysis, transaction data availability analysis, and privacy protection technology performance analysis on the target blockchain system throughout the entire lifecycle of the transaction data to obtain privacy protection analysis results; constructing a blockchain privacy protection assessment index system for the target blockchain system based on the privacy protection analysis results; assigning corresponding weights to each privacy protection assessment index in the blockchain privacy protection assessment index system according to the application scenario and type of the target blockchain system, and calculating a privacy protection capability score.

[0128] Furthermore, the logical instructions in the aforementioned memory 630 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, essentially, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0129] In another aspect, the present application also provides a computer program product comprising a computer program, the computer program being stored in a non-transitory computer-readable storage medium, and the computer program being executable by a processor to enable a computer to perform the method for evaluating the privacy protection of a blockchain system, the method comprising: obtaining transaction data of a target blockchain system; performing privacy protection strength analysis, transaction data availability analysis and privacy protection technology performance analysis on the target blockchain system in the whole life cycle of the transaction data to obtain privacy protection analysis results; constructing a blockchain privacy protection evaluation index system of the target blockchain system according to the privacy protection analysis results; and assigning corresponding weights to each privacy protection evaluation index in the blockchain privacy protection evaluation index system according to the application scenario and type of the target blockchain system, and calculating a privacy protection capability score.

[0130] In another aspect, the present application also provides a non-transitory computer-readable storage medium having a computer program stored thereon, the computer program being executable by a processor to implement the method for evaluating the privacy protection of a blockchain system, the method comprising: obtaining transaction data of a target blockchain system; performing privacy protection strength analysis, transaction data availability analysis and privacy protection technology performance analysis on the target blockchain system in the whole life cycle of the transaction data to obtain privacy protection analysis results; constructing a blockchain privacy protection evaluation index system of the target blockchain system according to the privacy protection analysis results; and assigning corresponding weights to each privacy protection evaluation index in the blockchain privacy protection evaluation index system according to the application scenario and type of the target blockchain system, and calculating a privacy protection capability score.

[0131] The device embodiments described above are merely illustrative, wherein the units described as separate components can or can not be physically separate, and the components displayed as units can or can not be physical units, i.e., can be located in one place, or can be distributed on multiple network units. Part or all of the modules can be selected to achieve the purpose of the present embodiment scheme according to actual needs. Those skilled in the art can understand and implement it without creative labor.

[0132] Those skilled in the art can clearly understand the technical solutions of the various embodiments from the above description of the embodiments, and the various embodiments can be implemented by means of software with the necessary general hardware platforms, and of course, can also be implemented by hardware. Based on such understanding, the above technical solutions, essentially or in other words, the part of the prior art that makes a contribution, can be embodied in the form of a software product, which can be stored in a computer readable storage medium, such as a ROM / RAM, a magnetic disk, an optical disk, and the like, and includes a number of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0133] Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, rather than limit them; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: it can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement for some technical features therein; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for assessing privacy protection in a blockchain system, characterized in that, include: Acquire transaction data from the target blockchain system; the target blockchain system includes transaction participants, consensus mechanism, distributed shared ledger, smart contracts, privacy protection mechanism, and blockchain applications; Throughout the entire lifecycle of transaction data, the target blockchain system is subjected to privacy protection strength analysis, transaction data availability analysis, and privacy protection technology performance analysis to obtain privacy protection analysis results; The transaction data in the blockchain system is divided into four stages: transaction publication, transaction consensus, transaction storage, and transaction application. Based on the privacy protection analysis results, a blockchain privacy protection evaluation index system for the target blockchain system is constructed; the blockchain privacy protection evaluation index system includes privacy protection strength evaluation index, transaction data availability evaluation index, and privacy protection technology performance evaluation index. Based on the application scenario and type of the target blockchain system, the analytic hierarchy process (AHP) and pairwise comparison method are used to assign corresponding weights to each privacy protection assessment index in the blockchain privacy protection assessment index system, and the privacy protection capability score is calculated. Throughout the entire lifecycle of transaction data, the target blockchain system undergoes privacy protection strength analysis, transaction data availability analysis, and privacy protection technology performance analysis to obtain privacy protection analysis results, including: The transaction data is subjected to quantitative analysis of privacy information, access control analysis of privacy information, security analysis of privacy information transmission, security analysis of privacy information storage, and correlation analysis of privacy information to obtain the results of privacy protection strength analysis. The loss rate and recoverability of transaction data after privacy protection measures were implemented were analyzed to obtain the transaction data availability analysis results. The computational, communication, and storage overheads of privacy protection measures are analyzed to obtain the performance analysis results of privacy protection technologies.

2. The method for assessing privacy protection in a blockchain system according to claim 1, characterized in that, The transaction data undergoes quantitative analysis of privacy information, access control analysis of privacy information, security analysis of privacy information transmission, security analysis of privacy information storage, and correlation analysis of privacy information to obtain the results of privacy protection strength analysis, including: The privacy information is extracted and quantified to construct a set of privacy variables, generate privacy metadata, determine the probability distribution of the privacy variables, and calculate the privacy coverage rate in the transaction data. The access control mechanism of the target blockchain system's transaction data is analyzed to obtain the granularity of access control. The privacy protection strength of the target blockchain system's communication network and consensus mechanism is assessed to determine the security of transaction transmission. Analyze and evaluate the ledger data and storage mechanism of the target blockchain system to determine the security of ledger storage; Risk analysis is performed on the associated on-chain transaction history data in the target blockchain system to determine the ability to defend against ledger analysis attacks.

3. The method for assessing privacy protection in a blockchain system according to claim 2, characterized in that, The blockchain privacy protection assessment index system includes privacy protection strength assessment index, transaction data availability assessment index, and privacy protection technology performance assessment index.

4. The method for assessing privacy protection in a blockchain system according to claim 3, characterized in that, The privacy protection strength assessment indicators include privacy coverage, access control granularity, transaction transmission security, ledger storage security, and the ability to prevent ledger analysis attacks. The transaction data availability assessment metrics include transaction data loss rate and transaction data recoverability; The performance evaluation indicators for privacy protection technologies include the computational overhead, communication overhead, and storage overhead of privacy protection measures.

5. The method for assessing privacy protection in a blockchain system according to claim 1, characterized in that, Based on the application scenario and type of the target blockchain system, after assigning corresponding weights to each privacy protection assessment indicator in the blockchain privacy protection assessment indicator system and calculating the privacy protection capability score, the following steps are also included: Based on the privacy protection analysis results, the blockchain privacy protection assessment index system, and the privacy protection capability score, a privacy protection capability assessment report is generated.

6. A privacy protection assessment device for a blockchain system, characterized in that, include: The acquisition module is used to acquire transaction data of the target blockchain system; the target blockchain system includes transaction participants, consensus mechanism, distributed shared ledger, smart contracts, privacy protection mechanism, and blockchain applications; The analysis module is used to perform privacy protection strength analysis, transaction data availability analysis, and privacy protection technology performance analysis on the target blockchain system throughout the entire lifecycle of transaction data, and obtain privacy protection analysis results. The transaction data in the blockchain system is divided into four stages: transaction publication, transaction consensus, transaction storage, and transaction application. Throughout the entire lifecycle of transaction data, the target blockchain system undergoes privacy protection strength analysis, transaction data availability analysis, and privacy protection technology performance analysis to obtain privacy protection analysis results. These results include: performing privacy information quantification analysis, privacy information access control analysis, privacy information transmission security analysis, privacy information storage security analysis, and privacy information correlation analysis on transaction data to obtain privacy protection strength analysis results; analyzing the loss rate and recoverability of transaction data after implementing privacy protection measures to obtain transaction data availability analysis results; and analyzing the computational, communication, and storage overhead of privacy protection measures to obtain privacy protection technology performance analysis results. The indicator construction module is used to construct a blockchain privacy protection evaluation indicator system for the target blockchain system based on the privacy protection analysis results; the blockchain privacy protection evaluation indicator system includes privacy protection strength evaluation indicators, transaction data availability evaluation indicators, and privacy protection technology performance evaluation indicators. The evaluation module is used to assign corresponding weights to each privacy protection evaluation index in the blockchain privacy protection evaluation index system according to the application scenario and type of the target blockchain system, using the analytic hierarchy process and pairwise comparison method, and to calculate the privacy protection capability score.

7. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the steps of the privacy protection assessment method for a blockchain system as described in any one of claims 1 to 5.

8. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the privacy protection assessment method for a blockchain system as described in any one of claims 1 to 5.

9. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the privacy protection assessment method for a blockchain system as described in any one of claims 1 to 5.

Images