A traceable data authorization transfer control method and system

Abstract

The present invention relates to the technical field of data authorization management, and in particular to a traceable data authorization transmission control method and system; the present invention can provide a system for a data demander in the process of data circulation to obtain data request authorization from a data subject, and transmit the scope, restriction, validity period and other contents of the authorization to each level of upstream data suppliers, so that each level of data supplier can identify whether the next level of data supplier and the final data demander have obtained the authorization of the data subject, thereby avoiding unauthorized data supply, and the final data supplier and the data subject himself can know the expansion path of the data authorization chain, effectively solving the problems of difficulty in authorization, difficulty in tracing and difficulty in providing evidence in data circulation.

Description

Technical Field

[0001] The present invention relates to the technical field of data authorization management, and in particular to a traceable data authorization transfer control method and system. Background Art

[0002] At present, data has become an indispensable basis for decision-making in many fields such as financial risk control and human resources background investigation. The Cybersecurity Law stipulates that the circulation of personal data must ensure the consent of the person concerned. However, when personal data circulates between different data users, existing technologies cannot ensure that the meaning of "consent" is truly, completely, and non-reusable to all parties involved in the data circulation, and is subject to supervision and audit by the data subject. How to protect the legitimate rights and interests of data subjects and how to balance data circulation efficiency and data rights protection have always been huge challenges faced by the industry. The existence of this problem makes participants in the data circulation market tread on thin ice and also makes supervision and law enforcement face difficulties.

[0003] At present, there are few technologies on data authorization management at home and abroad, mainly targeting the field of point-to-point authorization (such as patent application number CN201580028983.2: Dynamic authorization method and system) and hardware authorization (such as CN201510506345.9: A device authorization system and authorization method). Not only are there no patents related to authorization management in the field of data circulation and transaction, but more importantly, there are no relevant technical patents on authorization chain transmission, control and backtracking. Data authorization management is still blank at home and abroad.

[0004] In summary, developing a traceable data authorization transfer control method and system is still a key issue that needs to be urgently addressed in the field of data authorization management technology. Summary of the invention

[0005] In view of the above-mentioned shortcomings of the prior art, the present invention provides a traceable data authorization transmission control method and system to solve the problems of difficulty in authorization, tracing and proving in data circulation raised in the above-mentioned background technology.

[0006] For the purposes of this invention, the following terms are defined:

[0007] (1) Data subject: refers to the subject to which the data refers or describes, including natural persons, legal persons, unincorporated enterprises, etc.;

[0008] (2)Keys: refers to the primary key of the data, which is used to retrieve and refer to the data content;

[0009] (3) V value: refers to the specific content of the data, that is, Value, which is the specific object of data rights protection;

[0010] (4) Data demanders: refers to the parties that need to use the data subject’s data based on business scenarios and request the data subject’s authorization, such as banks, securities companies, human resources companies, etc.

[0011] (5) Data supplier: refers to the party that holds the data of the data subject, undertakes the obligation of custody, and provides the data V value to the data demander based on the authorization of the data subject, such as credit reporting companies, e-commerce companies, operators, etc.

[0012] (6) Intermediate data transfer party: refers to the data intermediary that undertakes the functions of data processing, integration, derivation, and aggregation between the final supplier and the demander during the data circulation process.

[0013] To achieve the purpose of the present invention, the present invention provides the following technical solutions:

[0014] A traceable data authorization transmission control system includes an authorization platform, a data subject end, a data demander end and an intermediate transmission end, wherein the authorization platform is connected to the data subject end, the data demander end and the data supplier end, the data subject end is connected to the data demander end, and the data demander end is connected to the intermediate transmission end.

[0015] The present invention is further configured to include: a data supplier end, wherein the data supplier end is connected to an intermediate transmission end.

[0016] The present invention also provides a traceable data authorization transfer control method, comprising the following steps:

[0017] (1) Key allocation: Data circulation participants register their real names in the system, and the system allocates a pair of keys to each participant;

[0018] (2) Data product registration: The data supplier registers the data product on the authorized platform through the data supplier terminal;

[0019] (3) Generation of data authorization token: When the data demander establishes a business relationship with the data subject, the data demander requests the data ID and the primary key that refers to the data subject's identity from the data subject through the data demander. After the data demander collects the data subject ID through the data demander, it assembles a long string, and then encrypts the string using the public key assigned by the system and passes the ciphertext to the system. After receiving the request ciphertext, the system will use the private key assigned to the data demander to decrypt the request content and generate the authorization contract text based on it, and pass it to the data subject for review and verification. The system will request the data subject to perform different types of authorization signatures based on the confidentiality level of the data keys requested by the demander. After receiving the authorization signature, the system will generate an authorization token;

[0020] (4) Transmission and verification of data authorization token: After the data demander obtains the authorization token, it requests the data transfer from the intermediate transmission party or the final data supplier, and reports the name of the intermediate transmission party or the data supplier to the system. After receiving the data circulation request, the system uses the private key of the data supplier or the intermediate transmission party to encrypt the demander's certificate number and data subject ID in the authorization code. The encrypted authorization token will be transmitted to the data demander. The data demander carries the authorization token to request the data intermediate party or the data supplier to transmit the data value. After receiving the request, the data intermediate party or the final data supplier verifies the validity of the authorization with the system. If the verification is passed, the data value can be released.

[0021] (5) The final data supplier verifies the authorization chain: When there are multiple intermediate data transfer parties, the final data supplier can use the received authorization token to request the system to query the number and names of the intermediate data transfer parties in the entire data transfer chain, or extract the authorization contract documents of the data subject to conduct compliance inspection;

[0022] (6) Data subject reversely checks the data transmission chain: The system provides the data subject with the right to query the entire data flow chain and all uses of the data subject by using an ID that can verify the identity. The data subject can promptly discover data infringements or set up a data transmission blacklist in the system to prohibit specific demanders or intermediate transmission parties from using the data of the subject.

[0023] The present invention is further configured as follows: in step (1), the key includes a public key and a private key.

[0024] The present invention is further configured as follows: in step (2), the registered content includes Keys, Values, permitted usage codes and confidentiality levels.

[0025] The present invention is further configured as follows: in step (3), the character string is composed of the data subject ID + requested data Keys + requested purpose code + requested authorization validity period + the institution's certificate number.

[0026] The present invention is further configured as follows: in step (3), the structure of the authorization token produced is: serial code + KEYs + generation time + validity time + purpose code + CA signature ciphertext + data subject ID + demander's certificate number.

[0027] The present invention is further configured as follows: in step (4), during verification, the authorization token is decrypted using the public key of the organization to verify whether the decrypted authorization code result is consistent with the ID transmitted by the demander, verify whether the effective time matches the current timestamp, and verify whether the KEYs match.

[0028] Beneficial Effects

[0029] Compared with the known public technology, the technical solution provided by the present invention has the following advantages:

[0030] Beneficial effects:

[0031] The present invention can provide a system for data demanders in the process of data circulation to obtain data request authorization from data subjects, and transmit the scope, restrictions, validity period and other contents of the authorization to each level of upstream data suppliers, so that each level of data suppliers can identify whether the next level of data suppliers and the final data demanders have obtained the authorization of the data subject, thereby avoiding unauthorized data supply. The final data supplier and the data subject himself can know the development path of the data authorization chain, effectively solving the problems of difficulty in authorization, traceability and evidence in data circulation. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 A schematic diagram of a traceable data authorization transfer control system;

[0033] Figure 2 The present invention is a flowchart of a traceable data authorization transfer control method.

[0034] Description of the numbers in the figure:

[0035] 100, authorization platform; 200, data subject end; 300, data demander end; 400, intermediate transmission end; 500, data supplier end. DETAILED DESCRIPTION

[0036] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention; it is obvious that the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments, and all other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making creative work are within the scope of protection of the present invention.

[0037] In the description of the present invention, it should be noted that the terms "upper", "lower", "inner", "outer", "top / bottom" and the like indicate positions or positional relationships based on the positions or positional relationships shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific position, be constructed and operated in a specific position, and therefore cannot be understood as limiting the present invention. In addition, the terms "first" and "second" are used for descriptive purposes only and cannot be understood as indicating or implying relative importance.

[0038] In the description of the present invention, it should be noted that, unless otherwise clearly stipulated and limited, the terms "installed", "provided with", "mounted / connected", "connected", etc. should be understood in a broad sense. For example, "connection" can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, and it can be the internal connection of two components; for ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0039] Embodiment 1:

[0040] Please refer to Figure 1 As shown, a traceable data authorization transmission control system includes an authorization platform 100, a data subject end 200, a data demander end 300 and an intermediate transmission end 400. The authorization platform 100 is connected to the data subject end 200, the data demander end 300 and the data supplier end 500. The data subject end 200 is connected to the data demander end 300, the data demander end 300 is connected to the intermediate transmission end 400, and also includes a data supplier end 500, which is connected to the intermediate transmission end 400.

[0041] It should be noted that the data subject end 200, the data demander end 300, the intermediate transmission end 400 and the data supplier end 500 in the system are respectively used by the data subject, the data demander, the intermediate transmission end and the data supplier, and can be a server, a control device, or other devices capable of information exchange to realize information interaction within the system.

[0042] Embodiment 2:

[0043] Based on Example 1, the present invention further provides a traceable data authorization transfer control method, comprising the following steps:

[0044] (1) Key distribution: Data circulation participants register in the system with their real names, and the system allocates a pair of keys to each participant, which includes a public key and a private key.

[0045] In this step, the key is a parameter, which is a parameter input into the algorithm for converting plain text into cipher text or cipher text into plain text. Through real-name authentication, the information of each participant is stored in the system for confirmation of identity information during subsequent information interaction.

[0046] (2) Data commodity registration: The data supplier registers the data commodity on the authorization platform 100 through the data supplier terminal 500. The registration content includes Keys, Values, permitted usage codes, and confidentiality levels.

[0047] In this step, the data supplier registers the data product on the authorization platform 100 so that the authorization platform 100 has the relevant information of the data product to facilitate the subsequent acquisition of the data product information.

[0048] (3) Generation of data authorization token: When the data demander establishes a business relationship with the data subject, the data demander requests the data ID and the primary key that refers to the data subject's identity from the data subject end 200 through the data demander end 300. After the data demander collects the data subject ID through the data demander end 300, it assembles a long string, and then encrypts the string using the public key assigned by the system and passes the ciphertext to the system. After receiving the request ciphertext, the system will use the private key assigned to the data demander to decrypt the request content and generate the authorization contract text based on it, and pass it to the data subject end 200 for review and verification by the data subject. The system will request the data subject to perform different types of authorization signatures based on the confidentiality level of the data keys requested by the demander. After receiving the authorization signature, the system will generate an authorization token.

[0049] In this step, the string is composed of data subject ID + requested data Keys + requested purpose code + requested authorization validity period + institution certificate number. As an example, 330125196801010101-0201-M2-3302987898U9. The structure of the authorization token is: serial code + KEYs + generation time + validity period + purpose code + CA signature ciphertext + data subject ID + requester certificate number, such as: 20212112010005-MobileNumb er-202112011359-M2-ZX01-cidejfw924:xmsa1324n-330125196801010101-0201-3302987898U9. It should be noted that the signature methods in the present invention include but are not limited to biometric ID signature, voiceprint signature, CA certificate signature, etc. The authorization code produced in this step is in a frozen state and has not yet been delivered to the data demander.

[0050] (4) Transmission and verification of data authorization tokens: After the data demander obtains the authorization token, it requests the intermediary or data final supplier to transmit data, and reports the name of the intermediary or data supplier to the system. After receiving the data flow request, the system uses the private key of the data supplier or the intermediary to encrypt the demander's ID number and data subject ID in the authorization code. The encrypted authorization token will be transmitted to the data demander. The data demander carries the authorization token to request the data intermediary or data supplier to transmit the data Value. After receiving the request, the data intermediary or data final supplier verifies the validity of the authorization with the system. If the verification is successful, the data Value can be released.

[0051] In this step, during verification, the authorization token is decrypted using the public key of the organization to check whether the decrypted authorization code is consistent with the ID passed by the demander, whether the validity time matches the current timestamp, and whether the KEYs match.

[0052] Furthermore, after encryption is complete, the authorization token structure is as follows:

[0053] (Plain text) serial number + KEYs + generation time + validity time + purpose code + CA signature ciphertext

[0054] (Hash string 1) ID

[0055] (Hash string 2) Requester's ID number

[0056] As an implementation method, the data demander carries the authorization token to request the data intermediary or data supplier to transfer the data Value, and the request parameters include: authorization code (authorization token) + data subject ID + requested Keys.

[0057] (5) The final data supplier verifies the authorization chain: When there are multiple intermediate data transfer parties, the final data supplier can use the received authorization token to request the system to query the number and names of the intermediate data transfer parties in the entire data transfer chain, or extract the authorization contract documents of the data subject to conduct compliance checks.

[0058] In this step, the final supplier can discover problems such as unauthorized transmission, expired authorization, and inconsistent authorization purposes.

[0059] (6) Data subject reversely checks the data transmission chain: The system provides the data subject with the right to query the entire data flow chain and all uses of the data subject by using an ID that can verify the identity. The data subject can promptly discover data infringements or set up a data transmission blacklist in the system to prohibit specific demanders or intermediate transmission parties from using the data of the subject.

[0060] In this step, by checking the data transmission chain through the data subject, data infringement can be discovered in a timely manner, or specific demanders or intermediate transmission parties can be prohibited from using the subject's data, thereby effectively improving security.

[0061] The present invention can provide a system for data demanders in the process of data circulation to obtain data request authorization from data subjects, and transmit the scope, restrictions, validity period and other contents of the authorization to each level of upstream data suppliers, so that each level of data suppliers can identify whether the next level of data suppliers and the final data demanders have obtained the authorization of the data subject, thereby avoiding unauthorized data supply. The final data supplier and the data subject himself can know the development path of the data authorization chain, effectively solving the problems of difficulty in authorization, traceability and evidence in data circulation.

[0062] Various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiment, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or a combination thereof: a discrete logic circuit having a logic gate circuit for implementing a logical function on a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0063] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements will not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A traceable data authorization transfer control method, characterized in that: The method comprises the following steps: (1) Key allocation: Data circulation participants register their real names in the system, and the system allocates a pair of keys to each participant; (2) Data product registration: The data supplier registers the data product on the authorization platform (100) through the data supplier terminal (500); (3) Generation of data authorization token: When the data demander establishes a business relationship with the data subject, the data demander requests the data ID and the primary key that refers to the data subject's identity from the data subject end (200) through the data demander end (300). After the data demander collects the data subject ID through the data demander end (300), it assembles a long string, and then encrypts the string using the public key assigned by the system and passes the ciphertext to the system. After receiving the request ciphertext, the system will use the private key assigned to the data demander to decrypt the request content and generate the authorization contract text based on it, and pass it to the data subject end (200) for the data subject to review and verify. The system will request the data subject to perform different types of authorization signatures according to the confidentiality level of the data keys requested by the demander. After receiving the authorization signature, the system will generate an authorization token; (4) Transmission and verification of data authorization token: After the data demander obtains the authorization token, it requests the data transfer from the intermediate transmission party or the final data supplier, and reports the name of the intermediate transmission party or the data supplier to the system. After receiving the data circulation request, the system uses the private key of the data supplier or the intermediate transmission party to encrypt the demander's certificate number and data subject ID in the authorization code. The encrypted authorization token will be transmitted to the data demander. The data demander carries the authorization token to request the data intermediate party or the data supplier to transmit the data value. After receiving the request, the data intermediate party or the final data supplier verifies the validity of the authorization with the system. If the verification is passed, the data value can be released. (5) The final data supplier verifies the authorization chain: When there are multiple intermediate data transfer parties, the final data supplier can use the received authorization token to request the system to query the number and names of the intermediate data transfer parties in the entire data transfer chain, or extract the authorization contract documents of the data subject to conduct compliance inspection; (6) Data subject reversely checks the data transmission chain: The system provides the data subject with the right to query the entire data flow chain and all uses of the data subject by using an ID that can verify the identity. The data subject can promptly discover data infringements or set up a data transmission blacklist in the system to prohibit specific demanders or intermediate transmission parties from using the data of the subject.

2. A traceable data authorization transfer control method according to claim 1, characterized in that: In step (1), the key includes a public key and a private key.

3. A traceable data authorization transfer control method according to claim 1, characterized in that: In step (2), the registered content includes Keys, Values, permitted usage codes and confidentiality levels.

4. A traceable data authorization transfer control method according to claim 1, characterized in that: In step (3), the character string is composed of the data subject ID + requested data keys + requested purpose code + requested authorization validity period + the institution's certificate number.

5. A traceable data authorization transmission control method according to claim 1, characterized in that: In step (3), the structure of the authorization token is: serial code + KEYs + generation time + validity time + purpose code + CA signature ciphertext + data subject ID + demander's certificate number.

6. A traceable data authorization transfer control method according to claim 1, characterized in that: In step (4), during verification, the authorization token is decrypted using the public key of the organization to verify whether the decrypted authorization code is consistent with the ID transmitted by the demander, whether the validity time matches the current timestamp, and whether the KEYs match.

7. A traceable data authorization delivery control system, which is established based on the traceable data authorization delivery control method as described in any one of claims 1 to 6, and the system includes an authorization platform (100), a data subject end (200), a data demander end (300) and an intermediate delivery end (400), the authorization platform (100) is connected to the data subject end (200), the data demander end (300) and the data supplier end (500), the data subject end (200) is connected to the data demander end (300), and the data demander end (300) is connected to the intermediate delivery end (400).

8. A traceable data authorization transmission control system according to claim 7, further comprising a data supplier end (500), wherein the data supplier end (500) is connected to the intermediate transmission end (400).

Images