A shared encrypted storage system based on blockchain technology

Abstract

The present invention provides a shared encrypted storage system built based on blockchain technology, including: a master node and a consensus node; the master node is used to manage users, manage private data and services, and maintain data access information based on various logical layers deployed on the node; the consensus node is used to perform security management on users accessing the node based on various logical layers deployed on the node, initiate private data access requests, and provide private data services based on private data access requests. The shared encrypted storage system of the present invention is based on blockchain technology, ensures the authenticity of data and the execution of contracts, realizes decentralization, and realizes secure data management of data sharing.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a shared encrypted storage system built based on blockchain technology. Background Art

[0002] During the operation of the management information system, a large amount of data is generated. These data involve multiple subsystems associated with the management information system. When these data are managed systematically or even shared externally, the legitimacy of data sharing must be addressed. For example, data in corporate audits may involve special departmental situations. When faced with uncertain risks or regulations, how to share the data? The security and rights of the data must be addressed: when the data is used by the target user, there may be risks of being copied, retained, or tampered with, and the data cannot be guaranteed. If data is not shared, each user or business system will form an information island, which will bring additional workload to the management information system.

[0003] The data management modes of management information systems generally include data hosting mode and data aggregation mode. In the hosting mode, data is hosted in the central database of a specific business system, and the central database is responsible for unified management and operation. In the aggregation mode, data from different business systems are connected through API interfaces, and the data transfer system interacts with the data owner and returns query results.

[0004] However, the disadvantage of the hosting model is that the data security is not high, and the users and usage permissions all depend on the integrity of the hosting system. In the aggregation model, the data of different business systems seem to be managed independently, but in the end, the data aggregation is fully capable and has the opportunity to retain the data of each business system. Although the data owner has the authority to set not to retain the data, this risk still exists. Summary of the invention

[0005] In order to solve the problems existing in the prior art, the present invention provides a shared encrypted storage system based on blockchain technology, including a master node and a consensus node;

[0006] The master node is used to manage users, manage private data and services, and maintain data access information based on various logical layers deployed on the master node;

[0007] The consensus node is used to perform security management on users accessing the consensus node, initiate private data access requests, and provide private data services according to the private data access requests based on the various logic layers deployed on the consensus node;

[0008] The master node encapsulates private data into signed transaction information by calling the storage access interface and sends it to the consensus node; the consensus node encapsulates private data into transaction blocks at a predefined period and forwards it in the blockchain, and reaches a consensus among all consensus nodes based on the consensus algorithm, and then writes it into the local database mirror of each consensus node to achieve global data consistency;

[0009] Users of each business system query and obtain transaction information that has not been processed by the current business system from the private data database through the consensus node; the consensus node filters the confirmed transaction block messages forwarded to the current business system, extracts the transaction block messages that match the address of the current business system, and sends the matching transaction block messages to the business system; the business system uses the master node public key to verify the signature of the transaction block message, and decrypts the session key through the private key of the current business system, and then decrypts the transaction block message to obtain private data.

[0010] Preferably, the various logic layers deployed on the master node and the consensus node include: infrastructure layer, contract layer, operation and maintenance layer, presentation layer and application layer;

[0011] The infrastructure layer is used to encapsulate all infrastructures that support the implementation of smart contracts;

[0012] The contract layer is used to encapsulate static contract data;

[0013] The operation and maintenance layer is used to encapsulate dynamic operations on static contract data in the contract layer;

[0014] The presentation layer is used to encapsulate the protocol and voting mechanism;

[0015] The application layer is used to encapsulate various scenarios and applications in the business flow.

[0016] Preferably, the infrastructure layer includes: a distributed ledger, a development environment, and an oracle;

[0017] The distributed ledger is used to record all data processing process data on the shared encrypted storage system;

[0018] The development environment includes a startup node based on computer code implementation, contract deployment, and contract invocation;

[0019] The oracle performs security management on the data source of the encrypted storage system based on the security rules of the blockchain.

[0020] Preferably, the users include: data owners and data users.

[0021] Preferably, the initiating a private data access request includes:

[0022] When a data user needs to use information about a project involved in a business, he or she first searches the blockchain to see if there is a corresponding index.

[0023] If so, the data user initiates a data request to the data owner based on the blockchain; otherwise, the data user initiates a data request based on the blockchain.

[0024] Preferably, the index includes: primary keyword, public key information, private key and signature.

[0025] Preferably, providing a private data service according to a private data access request includes:

[0026] After the data owner extracts the public key information and confirms that the data user is a legitimate role, the data that meets the standard requirements is encrypted using the public key and signed with the private key to generate an encrypted data packet, which is sent based on the blockchain.

[0027] Preferably, the confirming that the data user is a legitimate role includes: confirming that the data user is a legitimate user.

[0028] Preferably, the management of users includes: reviewing the roles and attributes of users joining the blockchain.

[0029] Preferably, the maintenance data access information includes:

[0030] Review the data information in the blockchain and send and store the data certificate;

[0031] Creating and storing index information for the data information in the blockchain;

[0032] Private data access requests initiated by storage data users and private data services provided by storage data owners.

[0033] Compared with the prior art, the present invention has the following beneficial effects:

[0034] 1. The shared encrypted storage system constructed by the present invention is based on blockchain technology, which ensures the authenticity of data and the execution of contracts, realizes decentralization, and realizes a data management method for data sharing;

[0035] 2. The shared encrypted storage system constructed by the present invention is applied to the business system to realize the effective management of enterprise private data. Private data is securely shared by the business subsystem, the process is open and transparent, and the overall process ensures the integrity, verifiability and traceability of the data;

[0036] 3. The judgment of legal roles in the technical solution provided by the present invention includes data flow legitimacy verification and data usage authority verification. This double verification ensures the security of data use and complies with the business's stricter security restrictions on data. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 This is a schematic diagram of the structure of a shared encrypted storage system based on blockchain technology of the present invention;

[0038] Figure 2 This is a diagram of the smart contract model structure of the present invention;

[0039] Figure 3 This is a flow chart of the data management implementation method of the present invention;

[0040] Figure 4 Data index information provided by the present invention;

[0041] Figure 5 This is the system operation process of the present invention. DETAILED DESCRIPTION

[0042] The present invention utilizes the decentralized data management model provided by the blockchain to establish multiple business systems of the management information system and alliance chains of external users, establishes smart contracts on the blockchain through a predetermined identification mechanism, automatically identifies the rationality of user audit behavior in the entire audit process, and generates blocks through consensus among multiple parties on the alliance chain and uploads them to the chain. The application and processing of data by each user form data blocks, which are automatically authenticated. Each data block contains a batch of network interaction information, which can prevent private data from being tampered with or forged, and can realize traceability of private data access records to verify the validity of its information.

[0043] Due to the characteristics of trustlessness, decentralization, collective maintenance and reliable database based on blockchain technology, when building a shared encrypted storage system and applying it to the data management of the management information system, all relevant business system users can participate in the entire process of data management, making the workflow transparent and supervised, and all operations are recorded in an unalterable manner.

[0044] In order to better understand the present invention, the content of the present invention is further described below in conjunction with the accompanying drawings and examples.

[0045] Embodiment 1:

[0046] The present invention provides a shared encrypted storage system based on blockchain technology, and the blockchain technology adopted is as follows: Figure 1 As shown, it is composed of multiple nodes, which are used to connect multiple business systems. The main functions include receiving messages from business systems; completing the blockchain generation and submission of its own data information; and ensuring the security of the communication process. It includes master nodes and consensus nodes.

[0047] 1) Public area on the chain: The main business system is used as a public area. Through the organization of the user authority system, the connection between personnel is realized, and the management of the original members and new members is realized through the authentication mechanism. (The principle of multiple votes is adopted. For example, when adding new members to the chain, the existing personnel on the chain need to confirm. After the majority confirmation, it means that the addition is legal. Similarly, other member operations, such as deletion and change of authority, are also the same.) By maintaining the public record block chain, the data change process is recorded, and data specifications, usage rules and data traceability are formulated. It is undertaken by the master node, which is elected or directly designated by the members on the chain.

[0048] 2) On-chain member area: Each member will keep a backup of the public record blockchain, supervise the correctness of the blockchain data records in the main business process, and maintain its own private data for sharing, which is implemented by each consensus node.

[0049] The master node encapsulates private data into signed transaction information by calling the storage access interface and sends it to the consensus node; the consensus node encapsulates private data into transaction blocks at a predefined period and forwards it in the blockchain, reaches a consensus among all consensus nodes based on the consensus algorithm, and then writes it into the local database mirror of each consensus node to ensure the global consistency of the database;

[0050] Each business system queries and obtains transaction information that has not been processed by the current business system from the private data database through the consensus node; the consensus node can also filter the confirmed transaction block messages forwarded to the current business system, extract the messages that match the business system address, and send them to the business system; the business system uses the master node public key to verify the signature of the message, and uses the private key of the current business system to decrypt the session key, and then decrypts the message to obtain private data.

[0051] Optionally, when initiating consistency authentication, any node among the multiple consensus nodes is used as the authentication initiating node, and the node first obtains the hash information of the new transaction data;

[0052] Determine from the blockchain whether each block contains the ciphertext information corresponding to the above hash information. Each block in the blockchain includes a transaction message and block metadata; the transaction message includes the ciphertext information corresponding to each new transaction data; the block metadata includes the block metadata hash value of the previous block of the block; if the ciphertext information corresponding to the hash information exists in the blockchain, the consistency authentication of the new transaction data is confirmed to have passed.

[0053] Among them, the hash information of the new transaction data obtained by the authentication initiation node can be directly provided by the user of the business system, or calculated based on the new transaction data provided by the user. The authentication initiation node traverses the hash information corresponding to the ciphertext information contained in each block in the blockchain, obtains the hash value, and then compares it with the hash information of the received new transaction data. More preferably, the authentication initiation node pre-stores the index information of the hash information corresponding to the ciphertext information in each block of the blockchain, and the authentication initiation node queries the hash information corresponding to the ciphertext information at a specific position of the blockchain through the index information to see if it is consistent with the hash information of the new transaction data provided by the user. Then, the ciphertext information of the new transaction data corresponding to the index information is determined from the blockchain; the hash information of the new transaction data is calculated based on the ciphertext information of the new transaction data; when the hash information of the new transaction data is consistent with the hash information of the new transaction data, it is determined that the ciphertext information corresponding to the hash information exists in the blockchain.

[0054] Embodiment 2:

[0055] Each node on the blockchain adopts a smart contract solution, using Figure 2 The smart contract model implementation shown includes:

[0056] Infrastructure layer: encapsulates all infrastructure that supports the implementation of smart contracts, including distributed ledgers, development environments, and oracles.

[0057] Distributed ledger: The execution and interaction of smart contracts need to rely on consensus algorithms, communication networks and other technologies, and the final execution results will be recorded in a distributed ledger maintained by all nodes. In the present invention, a distributed ledger is used to record the data content of the shared encrypted storage system.

[0058] Development environment: Smart contracts can be seen as computer programs running on the blockchain. As a computer program, development, deployment and debugging involve the development environment. The present invention also undertakes functions such as starting nodes, deploying contracts, and calling contracts.

[0059] Oracle: To ensure the security of the blockchain network, smart contracts generally run in an isolated sandbox execution environment. Oracles can provide trusted sandbox external data sources for contract queries or trigger contract execution. At the same time, in order to maintain the consistency of contract execution results of distributed nodes, smart contracts also achieve randomness by querying the oracle. In the present invention, the oracle is the data source that ensures a trusted encrypted storage system.

[0060] Contract layer: encapsulates static contract data, including contract terms and audit methods agreed upon by all parties to the contract, coded scenario-response rules, and interaction rules between contracts and the outside world and between contracts specified by the contract creator. The contract layer can be regarded as a static database of smart contracts, encapsulating all smart contract call, execution, and communication rules.

[0061] Operation and maintenance layer: encapsulates a series of dynamic operations on static contract data in the contract layer, including mechanism design, formal verification, security checks, etc. The application of smart contracts usually concerns the interests of various departments of an enterprise. Malicious, erroneous, and vulnerable smart contracts can bring huge losses. The operation and maintenance layer is the key to ensuring that smart contracts can run correctly, safely, and efficiently according to the designer's wishes.

[0062] Presentation layer: encapsulates the specific manifestation of smart contracts in the application of the present invention. Including decentralized applications (DApp) and decentralized autonomous organizations (DAO); decentralized applications are based on the Ethereum corner, a transaction protocol defined, and a contract or a group of contracts executed according to the conditions set on the blockchain. Decentralized organizations are the node-based voting mechanism used in the present invention.

[0063] Application layer: encapsulates the scenarios in which smart contracts are applied in this invention and shares an encrypted storage system.

[0064] When the business system R u To consensus node R v When requesting to share private data, consensus node R v First, verify the R u Identity, and R u After reaching consensus, consensus node R v Set access limits, and then the smart contract will be based on the consensus node R v The private key provided decrypts the data and outputs the corresponding result according to the constraints, and then outputs the data to R u Previously, using R u The public key provided is used to encrypt the data. u Then decrypt it using the local private key. The details are as follows:

[0065] First R u To R v Issue a private data access request Rqt.

[0066] R v Receive data (Rqt‖Lisc Ru ‖T), Lisc Ru For Ru The identity license, T is the timestamp;

[0067] Node R v Verify R u If the identity is legal, set the u The access limit Rsc is set. When authorizing access, the access limit and the private key PK corresponding to the accessed block are combined. bv Sent to consensus node set RTY v , at this time R u Receiving data:

[0068] E PKRTYe (Rsc‖PK bv ‖T‖Lisc Rv )

[0069] Lisc Rv For R v Identity license, E PKRTYv To utilize the consensus node set RTY e A function that encrypts with the provided private key.

[0070] In the consensus node set RTY e After verifying the above information, the smart contract is executed. According to the access limit set by the node, the code in the blockchain is locked, and the shared private data is decrypted according to the provided symmetric key, using the public key PK of the business system. Ru Asymmetrically encrypt the shared data and output the result.

[0071] If the business system R u and consensus node R v Within the coverage of the same gateway, the gateway directly sends the data to the business system R u Otherwise, the consensus node currently executing the smart contract will send the encrypted result to R u The neighboring gateway is described as follows:

[0072] RTY j =E PKRTYj+1 (temp‖T‖Lisc RTYj )

[0073] in:

[0074] temp=E PKRu (Data‖Lisc Rv ‖Lisc RTYj ‖T)

[0075] Data is the private data to be shared.

[0076] 4) Business System R uAfter receiving the data, it decrypts the data using its own private key and accesses the shared data.

[0077] Embodiment 3:

[0078] There are three types of users in the present invention: data users and data service providers are other business systems, and data owners are the main business system.

[0079] 1) Data owner: The data of each business system is maintained by maintaining private data for sharing, providing external data query services, and tracking the data usage process on demand.

[0080] 2) Data users: Business systems initiate data usage requirements and obtain the right to use the marked data.

[0081] 3) Data service provider: serves both the owner and the user by recording the data flow process, maintaining the flow order, and recording relevant situations.

[0082] like Figure 3 As shown, another aspect of the present invention provides a data management implementation method, comprising:

[0083] Step 1: The business system implements and deploys the system and publishes the system's public key, data access rules, access content, access methods, and standard format for data sharing.

[0084] Step 2: Relevant business system users join the blockchain and are approved.

[0085] Step 3: Send the data certificate to the business system.

[0086] Step 4: Submit data index information. Figure 4 An example diagram showing data index information.

[0087] Step 5: Verify all received index information, summarize the verified records, and add them to the block to form a blockchain.

[0088] Embodiment 4:

[0089] Based on this, the operation process of the shared encrypted storage system of the present invention is as follows:

[0090] 1. When a data user needs to use the project information of a business, first search whether there is a corresponding index on the blockchain, without obtaining the actual data content. If it exists, obtain all the information of this index, including information description, key information (public key and private key), signature, etc. The encryption algorithms used for the private key in the present invention include: DES, 3DES, TDEA, Blowfish, RC2, RC4, RC5, IDEA, PKIPJACK, AES, etc.; the encryption algorithms used for the public key include: RSA, Elgamal, backpack algorithm, Rabin, DH, ECC, etc.;

[0091] 2. The data user initiates a data request through the main business system. The data request contains the HASH value of the data business main keyword generated by the hash algorithm, key information, request requirements, etc. If the corresponding index exists, it is sent to the department that needs to provide data. If the corresponding index does not exist, the request is initiated and waits for the data owner user to complete the business before responding to the request.

[0092] 3. After the data owner user extracts the public key information and confirms that the data user is a legitimate role (the legitimate role here includes: the confirmed data user is a legitimate user), the data that meets the standard requirements is encrypted using the public key and signed with the private key to generate an encrypted data packet and send it to the main business system.

[0093] 4. The main business system extracts the public key, verifies the legitimacy, and then uses the private key to decrypt the record and check whether it is the requested HASH value. If it is, the data is used to form a transaction record. The process is as follows: Figure 5 shown. Figure 5 In the data service, Block1 represents a distributed block; Header represents the primary key information index, Body represents the information content, and Signature is a signature, which represents personal information. The data user specifies a user for the data service, including: determining the project information based on the primary keyword of the data service, extracting relevant users from a pre-stored list of user information participating in the data service, and determining whether the data requester belongs to the relevant user. If so, the data user is considered to be the designated user of the data service. The role verification of the present invention includes dual verification of the legitimacy of the data process and the data usage authority verification, which ensures the security of data use on the basis of ensuring the security of the audit process.

[0094] In the present invention, after public key encryption and private key signature, an encrypted data packet is generated.

[0095] Embodiment 5:

[0096] The shared encrypted storage system of the present invention further includes a data supervision process. The supervision content includes the standardization and quality of the data provided by the data owner user, whether the business system is used maliciously, and whether there is a risk of data leakage during the process. The preferred process is as follows:

[0097] The data owner first interacts with the master node and obtains the global authentication parameters. Then, the data owner generates a finite field and a distribution function F. Then, the data owner initializes the hierarchical structure of the business system users and assigns a two-dimensional tensor (A i , B i ). Finally, by operating the tensor with the distribution function F, the data owner calculates the connection matrix in the global authentication parameters. The tensor B of each business system user i The product of the corresponding public tensor is the corresponding encryption key If two business systems do not have a hierarchical relationship, the product of the tensors associated with the two is zero. If they have a hierarchical relationship, the encryption key of the user of the business system at the next level can be calculated through the tensor of the user of the business system at the previous level.

[0098] The connection matrix is ​​obtained by the following process:

[0099] The data owner is the business system user V i Randomly select tensor A i =(a i，1 , a i，2 ) and B i =(b i，1 , b i，2 ). All tensors A i Mapped to a new tensor W through the distribution function F i .

[0100] The data owner will i Convert to an n-dimensional tensor Γ i . γ i，1 =b i，1 , γ i，2 =b i，i For j≠1, i has γ i，j =0; get the set of n-dimensional tensors Γ1=(γ 1,1 ,γ 1,2 ,0,…,0);Γ2=(γ 2,1 ,γ 2,2 ,0,…,0);Γ n =(γ n,1 ,0,…,0,γ n,n );

[0101] Calculating the Matrix

[0102]

[0103] Determine tensors Γ1, Γ2…Γ n Is it relevant? If so, reselect B1, B2…B n Otherwise, select an encryption key for each class and calculate the connection matrix A. That is, for each business system user V i , the data owner randomly selects his own encryption key

[0104] definition and Φ=[Φ1,…,Φ n ] T , then Γ×A=Φ;

[0105] Solve the equations in the above steps and get A = Γ -1 ×Φ;

[0106] The data owner sends ((A i , B i ), ) is sent to the business system user V i , and send F and A to the master node.

[0107] The method of the present invention can produce the following beneficial effects:

[0108] 1) All information on the index chain contains specific business system keys and the original text cannot be exported, so there is no risk of leakage.

[0109] 2) Data requests and responses between the operating system and the data owner, without the involvement of a third party, and no risk of leakage in the process.

[0110] 3) Only the private key of the business system can decrypt the data packet, and there is no risk of third-party leakage.

[0111] 4) The final usage results of the data are generated in the transaction chain of the business system, leaving traces and being traceable.

[0112] Obviously, the described embodiments are only some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0113] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0114] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0115] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0116] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0117] The above are merely embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention are included in the scope of the claims of the present invention to be approved.

Claims

1. A shared encrypted storage system based on blockchain technology, characterized in that: Including master nodes and consensus nodes; The master node is used to manage users, manage private data and services, and maintain data access information based on various logical layers deployed on the master node; The consensus node is used to perform security management on users accessing the consensus node, initiate private data access requests, and provide private data services according to the private data access requests based on the various logic layers deployed on the consensus node; The master node encapsulates private data into signed transaction information by calling the storage access interface and sends it to the consensus node; the consensus node encapsulates private data into transaction blocks at a predefined period and forwards it in the blockchain, and reaches a consensus among all consensus nodes based on the consensus algorithm, and then writes it into the local database mirror of each consensus node to achieve global data consistency; Users of each business system query and obtain transaction information that has not been processed by the current business system from the private data database through the consensus node; the consensus node filters the confirmed transaction block messages forwarded to the current business system, extracts the transaction block messages that match the address of the current business system, and sends the matching transaction block messages to the business system; the business system uses the master node public key to verify the signature of the transaction block message, and decrypts the session key through the private key of the current business system, and then decrypts the transaction block message to obtain private data.

2. The system according to claim 1, characterized in that The various logical layers deployed on the master node and the consensus node include: infrastructure layer, contract layer, operation and maintenance layer, presentation layer and application layer; The infrastructure layer is used to encapsulate all infrastructures that support the implementation of smart contracts; The contract layer is used to encapsulate static contract data; The operation and maintenance layer is used to encapsulate dynamic operations on static contract data in the contract layer; The presentation layer is used to encapsulate the protocol and voting mechanism; The application layer is used to encapsulate various scenarios and applications in the business flow.

3. The system according to claim 2, characterized in that The infrastructure layer includes: distributed ledger, development environment and oracle; The distributed ledger is used to record all data processing process data on the shared encrypted storage system; The development environment includes a startup node based on computer code implementation, contract deployment, and contract invocation; The oracle performs security management on the data source of the encrypted storage system based on the security rules of the blockchain.

4. The system according to claim 1, characterized in that The users include: data owners and data users.

5. The system according to claim 4, characterized in that The initiating a private data access request comprises: When a data user needs to use information about a project involved in a business, he or she first searches the blockchain to see if there is a corresponding index. If so, the data user initiates a data request to the data owner based on the blockchain; otherwise, the data user initiates a data request based on the blockchain.

6. The system according to claim 5, characterized in that The index includes: primary keyword, public key information, private key and signature.

7. The system according to claim 4, characterized in that Providing private data services according to the private data access request includes: After the data owner extracts the public key information and confirms that the data user is a legitimate role, the data that meets the standard requirements is encrypted using the public key and signed with the private key to generate an encrypted data packet, which is sent based on the blockchain.

8. The system according to claim 7, characterized in that The confirming that the data user is a legitimate role includes: confirming that the data user is a legitimate user.

9. The system according to claim 4, characterized in that The user management includes: reviewing the roles and attributes of users joining the blockchain.

10. The system according to claim 4, characterized in that The maintenance data access information includes: Review the data information in the blockchain and send and store the data certificate; Creating and storing index information for the data information in the blockchain; Private data access requests initiated by storage data users and private data services provided by storage data owners.

Images