A blockchain-based method and device for identifying, managing and using encrypted data assets

Abstract

The application provides a kind of based on blockchain's encrypted data asset right confirmation, management and use method and device, obtains or creates the encrypted data asset account representing the identity of principal part;Receive the data asset upload information of corresponding account, utilize the symmetric key of random generation to symmetrically encrypt uploaded data asset, utilize the ID of data asset as the unique identification on chain of this asset;Receive the application request of data asset owner, and right confirmation is carried out to data asset owner, utilize the public key held to asymmetrically encrypt the key of symmetrically encrypted data asset, utilize account book to store the ciphertext and right information after encryption, and the owner with right is decrypted symmetric key according to the private key of oneself and obtains data asset content, and data asset information is managed.The application can realize the management of all on-chain data assets and off-chain real world mapping.

Description

Technical Field

[0001] This invention belongs to the field of blockchain technology, specifically relating to a method and apparatus for the confirmation, management and use of encrypted data assets based on blockchain. Background Technology

[0002] The statements in this section are merely background information related to the present invention and do not necessarily constitute prior art.

[0003] With the development of blockchain, blockchain has evolved from a "ledger" for expressing virtual currency transfer transactions to being able to express various data assets. However, most blockchains are used as databases for data asset notarization, only supporting data asset storage and retrieval operations. This is mainly because the underlying blockchain does not support the full lifecycle management and operation of various data assets. On-chain data assets do not have complete semantics and cannot achieve full-process traceability.

[0004] In the real world, physical assets such as certificates, licenses, vouchers, and invoices held by individuals and businesses are stored by the entities and used and circulated in various social activities. However, according to the inventor, existing blockchain systems cannot centrally manage data assets, data assets lack complete semantics, and data assets cannot be fully mapped to the use of resources in the real world. Summary of the Invention

[0005] To address the aforementioned problems, this invention proposes a method and apparatus for the confirmation, management, and use of encrypted data assets based on blockchain. This invention enables full-lifecycle management of personal data asset information on the blockchain, realizing the management of all on-chain data assets and their mapping to the real world off-chain. It leverages the advantages of blockchain, such as traceability, immutability, and verifiability, to ensure the safety, orderliness, and reliability of various social activities.

[0006] According to some embodiments, the present invention adopts the following technical solution:

[0007] A method for establishing, managing, and using encrypted data assets based on blockchain includes the following steps:

[0008] Acquire or create encrypted data asset accounts that represent the identity of the subject;

[0009] Receive data asset upload information from the corresponding account, encrypt the uploaded data asset symmetrically using a randomly generated symmetric key, and use the data asset's ID as the asset's unique on-chain identifier;

[0010] The system receives application requests from data asset owners, confirms ownership of the data assets, uses the public key held by the owner to perform asymmetric encryption on the key of the symmetric encrypted data asset, uses the ledger to store the encrypted ciphertext and ownership information, and the owner with ownership decrypts the symmetric key with their private key to obtain the data asset content and manages or uses the data asset information.

[0011] As an alternative implementation, each encrypted data asset account generates a pair of public and private keys for unique identification, which serves as an index for associating with on-chain assets.

[0012] As an alternative implementation, the encrypted data assets generated by symmetrically encrypting the uploaded data assets using a randomly generated symmetric key are stored in the IPFS system, and the storage route is recorded through the blockchain ledger to achieve network consensus.

[0013] As an alternative implementation method, during the process of confirming the ownership of data assets, the asset encryption method, the ciphertext after the asymmetric encryption symmetric key, and the route of the encrypted assets are all recorded in the blockchain ledger to support the data owner in obtaining the data asset content by decrypting the symmetric key with their own private key.

[0014] As an alternative implementation, when the application request is a data asset content viewing request, during the authorized viewing process, the application data owner's private key is used to obtain the symmetric key for encrypting the data asset; the original data asset is decrypted, and then the authorized party's public key is used to encrypt the original data asset, generating an authorized copy of the data asset for the authorized party to view and use the asset.

[0015] As an alternative implementation, when the application request is for data asset entrustment authorization, the data asset owner pre-adds or deletes the ownership and validity period of the corresponding data asset in the blockchain data asset account. Within the validity period, the entrustee can independently view or authorize the sharing of the data asset account information.

[0016] As an alternative implementation, when the application request is for data asset transfer, the data asset owner transfers the data asset to another person. After the confirmation of rights process, the transfer is executed. After the transfer, the original data asset holder will no longer have any rights and will no longer have management authority over the asset and the account information.

[0017] As an alternative implementation, when responding to an application request, the application data asset owner obtains the symmetric key for encrypting the data asset using their private key, and obtains the authorized party's public key to encrypt the data asset and generate a copy of the data asset for authorization.

[0018] As an alternative implementation, the authorized use history of data assets is recorded in the blockchain ledger and linked to the encrypted data asset account through a globally unique asset ID to provide traceable asset transfer records.

[0019] A device for the confirmation, management, and use of encrypted data assets based on blockchain, comprising:

[0020] The asset account creation module is configured to acquire or create encrypted data asset accounts that represent the identity of the subject.

[0021] The asset account confirmation module is configured to receive data asset upload information from the corresponding account, symmetrically encrypt the uploaded data assets using a randomly generated symmetric key, and use the data asset's ID as the unique on-chain identifier for that asset.

[0022] The asset information management module is configured to receive application requests from data asset owners, confirm the ownership of data assets, use the public key held by the owner to perform asymmetric encryption on the key of the symmetric encrypted data asset, use the ledger to store the encrypted ciphertext and ownership information, and the owner with ownership can decrypt the symmetric key with their private key to obtain the data asset content and manage or use the data asset information.

[0023] Compared with the prior art, the beneficial effects of the present invention are as follows:

[0024] This invention proposes a blockchain-based encrypted data asset account, enabling trusted entities, objects, and transactions in real life to be mapped onto the blockchain. It also establishes a mutual mapping relationship between blockchain entity accounts and encrypted data asset accounts (data asset ownership confirmation). By constructing encrypted data asset accounts, important information such as detailed data asset information, data asset status information, data asset ownership information, and data asset transfer records are aggregated and linked through globally unique IDs. This allows the application of blockchain to fully reflect the object transaction process in real life, enabling entities to uniformly manage their on-chain data assets. The invention also expands and improves the functionality and scope of blockchain description.

[0025] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description

[0026] The accompanying drawings, which form part of this invention, are used to provide a further understanding of the invention. The illustrative embodiments of the invention and their descriptions are used to explain the invention and do not constitute an improper limitation of the invention.

[0027] Figure 1 This is a schematic diagram of the overall system of a blockchain encrypted data asset account according to at least one embodiment of the present invention;

[0028] Figure 2 This is a schematic diagram of the process of a blockchain encrypted data asset account according to at least one embodiment of the present invention. Detailed Implementation

[0029] The present invention will be further described below with reference to the accompanying drawings and embodiments.

[0030] It should be noted that the following detailed description is illustrative and intended to provide further explanation of the invention. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains.

[0031] It should be noted that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the scope of exemplary embodiments according to the invention. As used herein, the singular form is intended to include the plural form as well, unless the context clearly indicates otherwise. Furthermore, it should be understood that when the terms "comprising" and / or "including" are used in this specification, they indicate the presence of features, steps, operations, devices, components, and / or combinations thereof.

[0032] In order to change the current situation described in the background art, where existing blockchain systems cannot uniformly manage data assets, data assets lack complete semantics, and data assets cannot be fully mapped to real-world resource usage, this invention provides a method for establishing a blockchain encrypted data asset account with the subject as the origin.

[0033] As a typical embodiment, such as Figure 2 As shown, this method includes the following steps:

[0034] 1. Blockchain supports the creation of blockchain encrypted data asset accounts for all social entities, namely individuals and enterprises. Each account generates a pair of public and private keys, which are stored on blockchain nodes for subsequent asset encryption.

[0035] 2. Data assets (i.e., ID cards, residence permits, etc.) are uploaded to the blockchain node through the blockchain application port to generate a symmetric key. The uploaded data assets are then symmetrically encrypted using the symmetric key to generate encrypted data assets and create a unique identifier ID. The ciphertext of the symmetrically encrypted data assets is stored and retained. This process creates an on-chain data asset instance.

[0036] 3. After the data is encrypted and stored, the ownership of the encrypted data assets is confirmed, the relationship between the encrypted data asset account and the main account is clarified, that is, the owner of the data assets is determined, the public and private keys of the data owner are obtained, and the public key of the data owner is used to encrypt the symmetric key of the symmetric encrypted data assets.

[0037] 4. The encrypted symmetric key, obtained by encrypting the data owner's public key, is stored in a ledger to generate a structure that records the ownership information of the encrypted data assets. Owners can be added or deleted later based on asset flow.

[0038] 5. During the data asset authorization process, the data asset owner's private key is used to obtain the symmetric key for encrypting the data asset, and the authorized party's public key is used to encrypt the data asset to generate a copy of the data asset for authorization.

[0039] 6. The authorized use history of data assets is recorded in the blockchain ledger and linked to the encrypted data asset account through a globally unique asset ID, so that the asset transfer record can be viewed and traced later.

[0040] This embodiment details the creation of blockchain encrypted data asset accounts, the content of blockchain encrypted data asset accounts, and the application modes of blockchain encrypted data assets.

[0041] Based on blockchain infrastructure, encrypted data asset accounts are built for the main body, and smart contracts are used to associate all on-chain data assets with relevant entities according to the actual situation, thereby representing the complex asset ownership relationships in the real world.

[0042] 1) Creation of encrypted data asset accounts:

[0043] Create encrypted data asset accounts that represent the identity of social entities. Each account generates a pair of public and private keys for unique identification and uses this as an index to associate with on-chain assets.

[0044] 2) Encrypted data asset account contents:

[0045] An encrypted data asset account contains the data asset IDs owned by the account. Through the asset ID, users can view the data asset content, data asset status, list of data asset owners, historical versions of data assets, and other functions such as asset ownership confirmation, adding asset owners, deleting asset owners, viewing asset transfer history, and asset version retrospective.

[0046] On-chain storage of data assets:

[0047] The issuer uploads data assets to the blockchain node via the application, symmetrically encrypts the uploaded data assets using a randomly generated symmetric key, and outputs the data asset's ID as its unique on-chain identifier. The symmetrically encrypted data asset ciphertext is stored in the IPFS system, and the storage route is recorded through the blockchain ledger to achieve network consensus, thereby creating an encrypted data asset instance.

[0048] Viewing data asset content:

[0049] Data asset content can be viewed in two ways:

[0050] (1) Data asset owners can view their personal data assets by logging into their personal blockchain accounts; (2) Data asset owners can authorize others to view their data assets.

[0051] Viewing data asset status:

[0052] This embodiment provides a data asset status view, which can view the status of encrypted data assets. Since data assets correspond to physical proofs such as certificates and documents in real life, they include multiple statuses such as initial, normal, and frozen.

[0053] Data asset ownership confirmation:

[0054] In the process of confirming data asset ownership, the public keys of multiple owners of the data asset are used to perform asymmetric encryption on the key of the symmetric encrypted data asset. The asset encryption method, the ciphertext after the asymmetric encryption symmetric key, and the route of the encrypted asset are all recorded in the blockchain ledger, which enables data owners to decrypt the symmetric key with their own private key to obtain the data asset content.

[0055] Data asset owners can view:

[0056] It allows data asset owners to view the data. During the data uploading process, the data ownership was confirmed, the long-term holder of the data asset was identified, and the owner of the data asset can be viewed.

[0057] The number of data asset owners has increased:

[0058] It provides the function of adding ownership to data assets. If an asset has a new owner during its circulation in real life, the corresponding blockchain data asset account can add ownership to that data asset.

[0059] Deletion by data asset owner:

[0060] It provides the function of deleting data asset owners. Blockchain encrypted data assets correspond to real-world data assets, and there are issues of asset transfer and asset deletion. The blockchain encrypted data asset account provides the function of deleting the data asset owner.

[0061] Viewing data asset transfer records:

[0062] After establishing an encrypted data asset account, the entity can view the authorized usage records of the asset through the asset ID.

[0063] Data asset version rollback:

[0064] Data asset owners can view historical versions of their data assets.

[0065] 3) Application models for encrypted data asset accounts:

[0066] Once an on-chain encrypted data asset account is created, it provides multiple application modes for the data asset, such as authorized viewing, delegated authorization, asset transfer, and asset division.

[0067] Data asset authorization viewing:

[0068] Data owners can use and share their data assets by authorizing access to data assets.

[0069] During the authorized viewing process, the data owner's private key is used to obtain the symmetric key for encrypting the data asset. The original data asset is decrypted, and then the authorized party's public key is used to encrypt the original data asset, generating an authorized copy of the data asset for the authorized party to view and use. Asset authorization has a specific time option; the data owner can determine the authorization period based on specific business needs. After the authorization period expires, the authorized copy will be automatically reclaimed.

[0070] Data asset delegation and authorization:

[0071] Delegation means that the data owner temporarily transfers the right to use the data asset to another person. A time limit can be specified. During the validity period of the delegation, the delegate can independently view or authorize the sharing of the data asset.

[0072] Data asset transfer:

[0073] Data asset transfer means that the data asset owner transfers the data asset to another person. After the transfer, the original data asset holder will no longer have any rights and will no longer own the asset.

[0074] Data asset consolidation and segmentation:

[0075] Data assets support partitioning, which involves splitting a single data asset into two data assets based on needs, for actual business use. Similarly, data assets also support merging.

[0076] As another typical embodiment, a blockchain-based encrypted data asset account information management system is provided, including:

[0077] The asset account creation module is configured to acquire or create encrypted data asset accounts that represent the identity of the subject.

[0078] The asset account confirmation module is configured to receive data asset upload information from the corresponding account, symmetrically encrypt the uploaded data assets using a randomly generated symmetric key, and use the data asset's ID as the unique on-chain identifier for that asset.

[0079] The asset information management module is configured to receive application requests from data asset owners, confirm the ownership of data assets, use the public key held by the owner to perform asymmetric encryption on the key of the symmetric encrypted data asset, use the ledger to store the encrypted ciphertext and ownership information, and the owner with ownership can decrypt the symmetric key with their private key to obtain the data asset content and manage the data asset information.

[0080] like Figure 1 As shown, each of the above modules also includes several sub-modules. Each sub-module performs the steps in the above method embodiments or implements the functions of the corresponding steps, which will not be elaborated here.

[0081] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0082] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0083] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0084] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0085] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

[0086] While the specific embodiments of the present invention have been described above in conjunction with the accompanying drawings, this is not intended to limit the scope of protection of the present invention. Those skilled in the art should understand that various modifications or variations that can be made by those skilled in the art without creative effort based on the technical solutions of the present invention are still within the scope of protection of the present invention.

Claims

1. A method for the confirmation, management, and use of encrypted data assets based on blockchain, characterized by: Includes the following steps: Obtain or create encrypted data asset accounts representing the identity of the subject; each encrypted data asset account generates a public-private key pair for unique identification, which serves as an index for association with on-chain assets; each encrypted data asset account contains the data asset IDs owned by the account, and the data asset content, data asset status, list of data asset owners, and historical versions of data assets can be viewed through the asset IDs; Receive data asset upload information from the corresponding account, encrypt the uploaded data asset symmetrically using a randomly generated symmetric key, and use the data asset's ID as the asset's unique on-chain identifier; It receives application requests from data asset owners, confirms the ownership of data assets, uses the public key it holds to perform asymmetric encryption on the key of the symmetric encrypted data asset, uses the ledger to store the encrypted ciphertext and ownership information, and the owner with ownership decrypts the symmetric key with their private key to obtain the data asset content and manages or uses the data asset information. The application requests include: data asset content viewing requests, data asset entrustment authorization, and data asset transfer; when the application request is a data asset entrustment authorization, the data asset owner pre-adds or deletes the ownership and validity period of the corresponding data asset in the blockchain data asset account. Within the validity period, the entrusted party can independently view or authorize the sharing of the data asset account information. During the process of confirming ownership of data assets, the asset encryption method, the ciphertext after the asymmetric encryption symmetric key, and the route of the encrypted asset are all recorded in the blockchain ledger to support the data owner in decrypting the symmetric key with their private key to obtain the data asset content. The authorized use history of data assets is recorded in the blockchain ledger and associated with the encrypted data asset account through a globally unique asset ID to provide a traceable record of asset transfer.

2. The method for confirming, managing, and using encrypted data assets based on blockchain as described in claim 1, characterized in that: The uploaded data assets are symmetrically encrypted using a randomly generated symmetric key and the resulting encrypted data assets are stored in the IPFS system. The storage route is recorded through the blockchain ledger to achieve consensus across the entire network.

3. The method for confirming, managing, and using encrypted data assets based on blockchain as described in claim 1, characterized in that: When the application request is a request to view the content of a data asset, during the authorized viewing process, the application data owner obtains the symmetric key for encrypting the data asset using their private key; the original data asset is decrypted, and then the authorized party's public key is used to encrypt the original data asset, generating an authorized copy of the data asset for the authorized party to view and use.

4. The method for confirming, managing, and using encrypted data assets based on blockchain as described in claim 1, characterized in that: When the application request is for the transfer of data assets, the data asset owner transfers the data asset to another person. After the confirmation of rights process, the transfer is executed. After the transfer, the original data asset holder will no longer have any rights and will no longer have management authority over the asset and the account information.

5. The method for confirming, managing, and using encrypted data assets based on blockchain as described in claim 1, characterized in that: When responding to an application request, the application data asset owner obtains the symmetric key for encrypting the data asset using their private key, and obtains the authorized party's public key to encrypt the data asset, generating a copy of the data asset for authorization.

6. A device for the confirmation, management, and use of encrypted data assets based on blockchain, characterized in that: include: The asset account creation module is configured to obtain or create encrypted data asset accounts representing the identity of the subject; each encrypted data asset account generates a pair of public and private keys for unique identification, which serves as an index for association with on-chain assets; each encrypted data asset account contains the data asset IDs owned by the account, and the data asset content, data asset status, list of data asset owners, and historical versions of data assets can be viewed through the asset IDs; The asset account confirmation module is configured to receive data asset upload information from the corresponding account, symmetrically encrypt the uploaded data assets using a randomly generated symmetric key, and use the data asset's ID as the unique on-chain identifier for that asset. The asset information management module is configured to receive application requests from data asset owners, confirm the ownership of data assets, use the public key held by the owner to perform asymmetric encryption on the key of the symmetric encrypted data asset, use the ledger to store the encrypted ciphertext and ownership information, and the owner with ownership can decrypt the symmetric key with their private key to obtain the data asset content and manage or use the data asset information. The application requests include: data asset content viewing requests, data asset entrustment authorization, and data asset transfer; when the application request is a data asset entrustment authorization, the data asset owner pre-adds or deletes the ownership and validity period of the corresponding data asset in the blockchain data asset account. Within the validity period, the entrusted party can independently view or authorize the sharing of the data asset account information. During the process of confirming ownership of data assets, the asset encryption method, the ciphertext after the asymmetric encryption symmetric key, and the route of the encrypted asset are all recorded in the blockchain ledger to support the data owner in decrypting the symmetric key with their private key to obtain the data asset content. The authorized use history of data assets is recorded in the blockchain ledger and associated with the encrypted data asset account through a globally unique asset ID to provide a traceable record of asset transfer.

Images