A Data Compliance Method and Device Based on a Blockchain Cloud Platform

Abstract

The present application provides a data compliance method and system based on a blockchain cloud platform. The method includes: the blockchain cloud platform receiving a data processing process of a data provider or a data recipient; for the data processing process, setting evaluation items including user authorization compliance, data desensitization compliance, privacy impact compliance, and cooperation agreement compliance; evaluating the data processing process according to the evaluation items, and generating and storing a compliance certificate based on the evaluation result; when the data is transmitted from the data provider to the data user, the data is transmitted to the end node of the blockchain cloud platform, the end node requests the compliance certificate from the blockchain cloud platform, determines the compliance nature of the compliance certificate, and determines whether to send the data. The present application conducts data compliance evaluation through the blockchain cloud platform and stores compliance certificates, enabling the data to be evaluated only once during the circulation process, reducing manual work and improving the evaluation accuracy at the same time.

Description

Technical Field

[0001] This application claims protection for a data compliance evaluation technology, and particularly relates to a data compliance method based on a blockchain cloud platform. This application also relates to a data compliance system based on a blockchain cloud platform. Background Art

[0002] Data compliance refers to a series of regulations and arrangements in which data complies with laws and regulations during the collection and use process and does not violate personal information security. At the current stage, data compliance is mainly listed one by one in the form of a table and manually reviewed to evaluate data compliance.

[0003] Therefore, in the prior art, the processing of personal information big data is inefficient, costly, and the review accuracy rate is low, resulting in the ineffective implementation of data compliance. Summary of the Invention

[0004] To solve the problem of low data compliance efficiency, this application provides a data compliance method based on a blockchain cloud platform. This application also relates to a data compliance system based on a blockchain cloud platform.

[0005] This application provides a data compliance method based on a blockchain cloud platform, including:

[0006] The blockchain cloud platform receives the data processing process of the data provider or the data recipient;

[0007] For the data processing process, set evaluation items including user authorization compliance, data desensitization compliance, privacy impact compliance, and cooperation agreement compliance;

[0008] Evaluate the data processing process according to the evaluation items, and generate and store a compliance certificate based on the evaluation result;

[0009] When the compliance certificate is transferred from the data provider to the data user, the data is transferred to the end node of the blockchain cloud platform. The end node requests the compliance certificate from the blockchain cloud platform, judges the compliance nature of the compliance certificate, and judges whether to send the data.

[0010] Optionally, the evaluation items include evaluation content, evaluation criteria, and an AI evaluation model;

[0011] Among them, the AI evaluation model obtains an evaluation result according to the input evaluation content, compares the evaluation result with the evaluation criteria, and obtains the compliance result of the evaluation result.

[0012] Optionally, the AI evaluation model includes one or more of the following models: user authorization compliance model, data desensitization compliance model, privacy impact compliance model, cooperation agreement compliance model.

[0013] Optionally, evaluating the data processing flow according to the evaluation items includes: the data processing flow includes multiple data processing nodes, and each data processing node is evaluated separately.

[0014] Optionally, the data provider and the data receiver transmit data through the blockchain cloud platform.

[0015] This application also provides a data compliance system based on a blockchain cloud platform, including:

[0016] A receiving module for receiving the data processing flow of a data provider or a data receiver by the blockchain cloud platform;

[0017] An evaluation module for setting evaluation items including user authorization compliance, data desensitization compliance, privacy impact compliance, and cooperation agreement compliance for the data processing flow;

[0018] An evidence storage module for evaluating the data processing flow according to the evaluation items, and generating and storing a compliance evidence based on the evaluation result;

[0019] Among them, when the compliance evidence is transmitted from the data provider to the data user, the data is transmitted to the end node of the blockchain cloud platform, the end node requests the compliance evidence from the blockchain cloud platform, judges the compliance nature of the compliance evidence, and judges whether to send the data.

[0020] Optionally, the evaluation items include evaluation content, evaluation criteria, and an AI evaluation model;

[0021] Among them, the AI evaluation model obtains an evaluation result according to the input evaluation content, compares the evaluation result with the evaluation criteria, and obtains a compliance result of the evaluation result.

[0022] Optionally, the AI evaluation model includes one or more of the following models: user authorization compliance model, data desensitization compliance model, privacy impact compliance model, cooperation agreement compliance model.

[0023] Optionally, evaluating the data processing flow according to the evaluation items includes: the data processing flow includes multiple data processing nodes, and each data processing node is evaluated separately.

[0024] Optionally, the data provider and the data receiver transmit data through the blockchain cloud platform.

[0025] The advantages of this application compared with the prior art are:

[0026] The present application provides a data compliance method based on a blockchain cloud platform, including: the blockchain cloud platform receiving a data processing process of a data provider or a data recipient; for the data processing process, setting evaluation items including user authorization compliance, data desensitization compliance, privacy impact compliance, and cooperation agreement compliance; evaluating the data processing process according to the evaluation items, and generating and storing a compliance certificate according to the evaluation result; when the compliance certificate is transmitted from the data provider to the data user, the data is transmitted to the end node of the blockchain cloud platform, and the end node requests the compliance certificate from the blockchain cloud platform, determines the compliance nature of the compliance certificate, and determines whether to send the data. The present application conducts data compliance evaluation through the blockchain cloud platform and stores compliance vouchers, enabling the data to be evaluated only once during the circulation process, and performing specific evaluation operations through an AI model, which reduces manual labor while improving the evaluation accuracy. Description of the Drawings

[0027] Figure 1 It is a data compliance flow chart based on the blockchain cloud platform in the present application.

[0028] Figure 2 It is a schematic diagram of the data compliance framework in the present application.

[0029] Figure 3 It is a schematic diagram of the data compliance system based on the blockchain cloud platform in the present application. Detailed Embodiment

[0030] The following content is all examples of the specific implementation process provided to elaborate in detail the technical solution to be protected by the present application. However, the present application can also be implemented in other ways different from the descriptions herein. Those skilled in the art can, under the guidance of the concept of the present application, adopt different technical means to implement the present application. Therefore, the present application is not limited by the following specific embodiments.

[0031] This application provides a data compliance method based on a blockchain cloud platform, including: the blockchain cloud platform receiving the data processing processes of data providers or data receivers; for the data processing processes, setting evaluation items including user authorization compliance, data desensitization compliance, privacy impact compliance, and cooperation agreement compliance; evaluating the data processing processes according to the evaluation items, and generating and storing compliance certificates based on the evaluation results; when the compliance certificates are passed from the data provider to the data user, the data is transmitted to the end node of the blockchain cloud platform, and the end node requests the compliance certificates from the blockchain cloud platform, determines the compliance nature of the compliance certificates, and determines whether to send the data. This application conducts data compliance evaluation through the blockchain cloud platform and stores compliance certificates, enabling the data to be evaluated only once during the transfer process, and performing specific evaluation operations through an AI model, reducing manual work while improving the evaluation accuracy.

[0032] Figure 1 It is the data compliance flow chart based on the blockchain cloud platform in this application.

[0033] Please refer to Figure 1 As shown, in S101, the blockchain cloud platform receives the data processing processes of data providers or data receivers.

[0034] The blockchain cloud platform shown is a cloud platform based on blockchain, with innovative application models of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, and encryption algorithm of blockchain in the Internet era.

[0035] This application connects data providers and data users based on the blockchain cloud platform and conducts compliance audits on data based on the blockchain.

[0036] Figure 2 It is the schematic diagram of the data compliance framework in this application.

[0037] Please refer to Figure 2 As shown, the data processing processes of the data provider and the data receiver will be sent to the blockchain cloud platform.

[0038] The blockchain cloud platform provides compliance certificates when data is transferred between data providers and data users.

[0039] The data compliance in this application may include the compliance of the data itself and the compliance of data processing. For the compliance of the data itself, the data provider should ensure the compliance of the data, and only the compliance of data processing is evaluated in this application.

[0040] Please refer to Figure 1As shown in the figure, in S102, for the data processing flow, evaluation items including user authorization compliance, data masking compliance, privacy impact compliance, and cooperation agreement compliance are set.

[0041] After the data processing flow is sent to the blockchain cloud platform, the blockchain cloud platform will conduct step-by-step compliance evaluations on the data, including compliance evaluations of evaluation items such as user authorization compliance, data masking compliance, privacy impact compliance, and cooperation agreement compliance.

[0042] Here, a mechanism of peer review in the blockchain can be adopted for data compliance evaluation. A preferred solution in this application is to conduct data compliance evaluation through an AI evaluation model.

[0043] The AI evaluation model is a pre-trained AI evaluation model, stored in a dedicated memory, and can be called according to the request of the blockchain cloud platform.

[0044] The AI evaluation model is set as multiple different AI evaluation models according to the data usage flow, and is respectively used in different situations in the data processing flow. For example: user authorization compliance model, data masking compliance model, privacy impact compliance model, cooperation agreement compliance model. The AI evaluation models are all generated through different trainings based on convolutional neural networks.

[0045] In this application, each evaluation item includes: evaluation content, evaluation criteria, and an AI evaluation model. The evaluation content is the steps of the data processing flow to be evaluated, the evaluation criteria, that is, the compliance requirements, and the AI evaluation model is used to evaluate the compliance of each process step. Specifically, the AI evaluation model obtains an evaluation result according to the input evaluation content, compares the evaluation result with the evaluation criteria, and obtains the compliance result of the evaluation result.

[0046] Please refer to Figure 1 As shown in the figure, in S103, the data processing flow is evaluated according to the evaluation items, and a compliance certificate is generated and stored according to the evaluation result.

[0047] The compliance certificate is set as a gradient certificate, which mainly marks the compliance of the data processing flow through degree representation.

[0048] Specifically, each step of the data processing flow in this application is a data processing node. Different importance coefficients are respectively assigned according to the importance of the compliance of each data processing node. Finally, the final compliance score is obtained through calculation, and its expression is as follows:

[0049] P=(AJ1 + AJ2 + AJ3 + … + AJ n )

[0050] Where P is the compliance score, A represents the importance coefficient, which can have different values corresponding to each different node, and the J1...J n represents the compliance score of each node.

[0051] In the above formula, the importance coefficient can be set manually.

[0052] The compliance score expression of each node is as follows:

[0053]

[0054] Through the above steps, the comprehensive score P is finally obtained.

[0055] In this application, there is also a special node in the data processing nodes. If the data processing of this node violates laws and regulations, then J of the node is 0, and finally the violation items can be listed in the comprehensive score. Finally, according to the comprehensive score, node scores and violation items, a certificate is generated and stored in the blockchain.

[0056] Please refer to Figure 1 As shown, when the compliance deposit certificate in S104 is transmitted from the data provider to the data user, the data is transmitted to the end node of the blockchain cloud platform. The end node requests the compliance deposit certificate from the blockchain cloud platform, judges the compliance nature of the compliance deposit certificate, and judges whether to send the data.

[0057] When the data provider transmits data to the data user, it obtains the certificate of the data through the blockchain cloud platform and sends it to the data user together with the data. Preferably, the data provider sends the data to the data user through the blockchain cloud platform.

[0058] Further, the blockchain cloud platform receives the data sent by the data provider through the end node, and then judges whether to send the data to the data recipient. Specifically, after receiving the data, the blockchain node requests the compliance deposit certificate from the blockchain cloud platform and judges the compliance nature of the compliance deposit certificate. The compliance nature includes compliance and non-compliance. When it is judged to be compliant, the data is sent to the data recipient. When it is judged to be non-compliant, the data transmission is stopped and the compliance deposit certificate is sent to the data sender.

[0059] This application also provides a data compliance system based on the blockchain cloud platform, including: a receiving module 301, an evaluation module 302, an evidence deposit module 303, and a certificate module 304.

[0060] Figure 3 is a schematic diagram of the data compliance system based on the blockchain cloud platform of this application.

[0061] Please refer toFigure 3 As shown in the figure, the receiving module 301 is used for the blockchain cloud platform to receive the data processing processes of data providers or data receivers.

[0062] The blockchain cloud platform shown is a blockchain-based cloud platform, which has an innovative application mode of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, and encryption algorithm of the blockchain in the Internet era.

[0063] This application connects data providers and data users based on the blockchain cloud platform and conducts compliance audits on data based on the blockchain.

[0064] Please refer to Figure 2 As shown in the figure, the data processing processes of the data provider and the data receiver will be sent to the blockchain cloud platform.

[0065] The blockchain cloud platform provides a compliance certificate when data is transferred between data providers and data users.

[0066] In this application, the data compliance can include the compliance of the data itself and the compliance of data processing. For the compliance of the data itself, the data provider should ensure the compliance of the data. In this application, only the compliance of data processing is evaluated.

[0067] Please refer to Figure 3 As shown in the figure, the evaluation module 302 is used to set evaluation items including user authorization compliance, data desensitization compliance, privacy impact compliance, and cooperation agreement compliance for the data processing process.

[0068] After the data processing process is sent to the blockchain cloud platform, the blockchain cloud platform will conduct step-by-step compliance evaluations on the data, including compliance evaluations of evaluation items such as user authorization compliance, data desensitization compliance, privacy impact compliance, and cooperation agreement compliance.

[0069] Here, a mechanism of peer review in the blockchain can be used for data compliance evaluation. A preferred solution adopted in this application is to conduct data compliance evaluation through an AI evaluation model.

[0070] The AI evaluation model is a pre-trained AI evaluation model, stored in a dedicated memory, and can be called according to the request of the blockchain cloud platform.

[0071] The AI evaluation model is set as multiple different AI evaluation models according to the data usage process, and is respectively used in different situations in the data processing process. For example: user authorization compliance model, data desensitization compliance model, privacy impact compliance model, cooperation agreement compliance model. The AI evaluation models are all generated through different trainings based on convolutional neural networks.

[0072] In this application, each evaluation item protects: evaluation content, evaluation criteria, and an AI evaluation model. The evaluation content and the steps of the data processing flow to be evaluated, the evaluation criteria, that is, the compliance requirements, and the AI evaluation model is used to evaluate the compliance of each process step. Specifically, the AI evaluation model obtains an evaluation result based on the input evaluation content, compares the evaluation result with the evaluation criteria, and obtains the compliance result of the evaluation result.

[0073] Please refer to Figure 1 As shown, the evidence storage module 303 is used to evaluate the data processing flow according to the evaluation item, and generate and store a compliance certificate according to the evaluation result.

[0074] The compliance certificate is set as a gradient certificate, which mainly marks the compliance of the data processing flow through degree representation.

[0075] Specifically, each step of the data processing flow in this application is a data processing node. Different importance coefficients are respectively assigned according to the importance of the compliance of each data processing node, and finally the final compliance score is obtained through calculation. The expression is as follows:

[0076] P=(AJ1 + AJ2 + AJ3 + … + AJ n )

[0077] Where P is the compliance score, A represents the importance coefficient, which can have different values corresponding to each different node, and the J1...J n represents the compliance score of each node.

[0078] In the above formula, the importance coefficient can be set manually.

[0079] The compliance score expression of each node is as follows:

[0080]

[0081] Through the above steps, the comprehensive score P is finally obtained.

[0082] In this application, there are also special nodes in the data processing nodes. If the data processing of this node violates laws and regulations, then J of the node is 0, and finally the violation items can be listed in the comprehensive score. Finally, a certificate is generated according to the comprehensive score, node score and violation items, and stored in the blockchain.

[0083] Please refer to Figure 3 As shown, the certificate module 304 is provided by the blockchain cloud platform when the compliance certificate is transmitted from the data provider to the data user.

[0084] When the data provider transfers data to the data user, it obtains a certificate for the data through the blockchain cloud platform and sends it to the data user together with the data. Preferably, the data provider sends data to the data user through the blockchain cloud platform.

Claims

1. A data compliance method based on a blockchain cloud platform, characterized in that Including: The data processing process of the blockchain cloud platform receiving data providers or data receivers; For the said data processing process, set evaluation items including user authorization compliance, data desensitization compliance, privacy impact compliance, and cooperation agreement compliance; Evaluate the said data processing process according to the said evaluation items, and the said evaluation items include evaluation content, evaluation criteria, and AI evaluation models; wherein, the said AI evaluation model obtains an evaluation result according to the input said evaluation content, compares the evaluation result with the said evaluation criteria to obtain the compliance result of the evaluation result, generates a compliance certificate according to the evaluation result and stores it; When the said compliance certificate is transferred from the data provider to the data user, the data is transferred to the end node of the blockchain cloud platform, the end node requests the said compliance certificate from the blockchain cloud platform, judges the compliance nature of the said compliance certificate, and judges whether to send the data; Among them, evaluating the said data processing process according to the said evaluation items includes: the said data processing process includes multiple data processing nodes, each data processing node is evaluated separately, each step of the said data processing process is a data processing node, different importance coefficients are assigned according to the importance of each data processing node's compliance, and finally the final compliance score is obtained through calculation, and its expression is as follows: Where P is the final compliance score, and A represents the importance coefficient, which has different values corresponding to each different node. The …… represents the compliance score of each node.

2. The data compliance method based on the blockchain cloud platform according to claim 1, wherein The said AI evaluation model includes one or more of the following models: user authorization compliance model, data desensitization compliance model, privacy impact compliance model, cooperation agreement compliance model.

3. The data compliance method based on the blockchain cloud platform according to claim 1, characterized in that The said data provider and data receiver transfer data through the blockchain cloud platform.

4. A data compliance system based on a blockchain cloud platform, characterized in that, Including: A receiving module for the blockchain cloud platform to receive the data processing process of data providers or data receivers; An evaluation module for setting evaluation items including user authorization compliance, data desensitization compliance, privacy impact compliance, and cooperation agreement compliance for the said data processing process; A certificate module for evaluating the said data processing process according to the said evaluation items, and the said evaluation items include evaluation content, evaluation criteria, and AI evaluation models; wherein, the said AI evaluation model obtains an evaluation result according to the input said evaluation content, compares the evaluation result with the said evaluation criteria to obtain the compliance result of the evaluation result, and generates a compliance certificate according to the evaluation result and stores it; A certificate module for when the said compliance certificate is transferred from the data provider to the data user, the data is transferred to the end node of the blockchain cloud platform, the end node requests the said compliance certificate from the blockchain cloud platform, judges the compliance nature of the said compliance certificate, and judges whether to send the data; Among them, evaluating the said data processing process according to the said evaluation items includes: the said data processing process includes multiple data processing nodes, each data processing node is evaluated separately, each step of the said data processing process is a data processing node, different importance coefficients are assigned according to the importance of each data processing node's compliance, and finally the final compliance score is obtained through calculation, and its expression is as follows: where P is the compliance score, A represents the importance coefficient, which has different values corresponding to each different node, and the …… represents the compliance score of each node.

5. The data compliance system based on the blockchain cloud platform according to claim 4, characterized in that, The AI evaluation model includes one or more of the following models: user authorization compliance model, data de - identification compliance model, privacy impact compliance model, and cooperation agreement compliance model.

6. The data compliance system based on the blockchain cloud platform according to claim 4, characterized in that, The data provider and the data recipient transfer data through the blockchain cloud platform.

Images