A privacy data sharing method and system based on a decentralized digital identity

Abstract

The application provides a privacy data sharing method and system based on a decentralized digital identity, and relates to the technical field of computers.The method comprises the following steps: connecting a data sharing platform with all data owner ports, storing the identity data of all data owners in the data sharing platform, and publishing the generated personal digital certificate to the corresponding data owner port.When any data owner performs a data sharing operation, the data sharing platform calls the public key in the personal digital certificate and encrypts the shared data input by the data owner by using the public key.When any data owner needs to view the shared data, the intimacy value of the two data owners is determined, and if the intimacy value meets the sharing permission information, the private key in the personal digital certificate is called from the data owner port corresponding to the shared data to be viewed, and the encrypted shared data is decrypted by using the private key to obtain the shared data, so that the accurate sharing of data between users is realized.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular, to a privacy data sharing method and system based on decentralized digital identity. BACKGROUND

[0002] Enterprise users or individual users usually use computers and the Internet for data sharing operations, but whether it is an enterprise user or an individual user, when performing data sharing, due to the huge number of Internet users, the enterprise user or the individual user cannot accurately select the data sharing object, so there will be missed data sharing objects, and there will be a problem of not being able to achieve targeted and accurate data sharing. SUMMARY

[0003] The purpose of the present application is to provide a privacy data sharing method and system based on decentralized digital identity to improve the problem of not being able to achieve targeted and accurate data sharing in the prior art.

[0004] Embodiments of the present application are implemented as follows:

[0005] In a first aspect, the embodiments of the present application provide a privacy data sharing method based on decentralized digital identity, which includes the following steps:

[0006] Connect the data sharing platform with all data owner ports, and store the identity data of any data owner in the data sharing platform by on-chain, wherein the identity data includes identity information and identity attribute information;

[0007] The data sharing platform generates a corresponding personal digital certificate according to the identity data of any data owner, and publishes the personal digital certificate to the corresponding data owner port;

[0008] When responding to the data sharing operation of any data owner, the data sharing platform obtains the shared data input by the data owner and the sharing permission information corresponding to the shared data through the corresponding data owner port, and at the same time, the data sharing platform calls the public key in the corresponding personal digital certificate through the data owner port, encrypts the shared data using the public key, and saves it to the blockchain;

[0009] When responding to the shared data viewing request of any data owner, according to the shared data viewing request, the data owner identity information and the sharing permission information corresponding to the shared data to be viewed are determined, and the intimacy value of the data owner initiating the shared data viewing request and the data owner corresponding to the shared data to be viewed is determined.

[0010] According to the intimacy value and the sharing permission information, it is judged whether to send the corresponding shared data to the data owner port initiating the shared data viewing request;

[0011] If yes, the private key in the corresponding personal digital certificate is called from the data owner port corresponding to the shared data to be viewed, the corresponding encrypted shared data to be shared in the blockchain is obtained, the encrypted shared data to be shared is decrypted by using the private key to obtain the shared data, and the shared data is sent to the data owner port initiating the shared data viewing request.

[0012] In some embodiments of the present application, the step of establishing a connection between the data sharing platform and all data owner ports includes:

[0013] According to the identity information of the data owner, the declaration information issued by the data owner and the declaration information associated with the data owner issued by non-data owners are searched;

[0014] After checking all the declaration information, the identity attribute information is formed by using the checked all declaration information;

[0015] The identity attribute information and the identity information are anchored on the blockchain to obtain the corresponding identity data, and the identity data is a decentralized digital identity.

[0016] In some embodiments of the present application, the step of generating the corresponding personal digital certificate according to the identity data of any data owner and publishing the personal digital certificate to the corresponding data owner port includes:

[0017] According to the identity attribute information, the published personal digital certificate is verified;

[0018] When the verification is correct, the personal digital certificate is published to the corresponding data owner port according to the identity data.

[0019] In some embodiments of the present application, after the step of judging whether to send the corresponding shared data to the data owner port initiating the shared data viewing request according to the intimacy value and the sharing permission information, the method further includes:

[0020] The security of the shared data is checked to determine the security level;

[0021] According to the identity data of the data owner initiating the shared data viewing request, the data security bearing range set in advance by the data owner is obtained from the data sharing platform;

[0022] The security level and the data security bearing range are compared to determine whether the data owner port initiating the shared data viewing request can receive the shared data.

[0023] In some embodiments of the present application, the step of determining the intimacy value of the data owner initiating the shared data viewing request and the data owner corresponding to the shared data to be viewed comprises:

[0024] According to the identity information of the data owner initiating the shared data viewing request and the identity information of the data owner corresponding to the shared data to be viewed, the historical sharing situation of the two is obtained, and the historical sharing situation includes historical shared data and historical sharing times;

[0025] According to the historical shared data, all historical shared data types are determined, and according to the historical sharing times, the sharing times corresponding to each historical shared data type are determined;

[0026] All historical shared data types and sharing times corresponding to each historical shared data type are input into the trained intimacy determination model to obtain the intimacy value of the two data owners.

[0027] In some embodiments of the present application, before the step of inputting all historical shared data types and sharing times corresponding to each historical shared data type into the trained intimacy determination model, the method further comprises:

[0028] Establishing an intimacy determination model;

[0029] Obtaining a plurality of samples, and the samples include a plurality of data sharing situations;

[0030] Training the intimacy determination model using the plurality of samples to obtain the trained intimacy determination model.

[0031] In some embodiments of the present application, while the identity data of any data owner is chained, a chain-on certificate is generated;

[0032] According to the chain-on certificate, it is judged whether the identity data of the data owner is successfully chained.

[0033] In a second aspect, the embodiments of the present application provide a privacy data sharing system based on a decentralized digital identity, which comprises:

[0034] A connection establishment module is configured to establish a connection between a data sharing platform and all data owner ports, and to chain the identity data of any data owner and store it in the data sharing platform, wherein the identity data includes identity information and identity attribute information;

[0035] A personal digital certificate generation module is configured to generate a corresponding personal digital certificate according to the identity data of any data owner, and to publish the personal digital certificate to the corresponding data owner port;

[0036] The public key encryption module is configured to, when responding to a data sharing operation of any data owner, acquire, by the data sharing platform through a corresponding data owner port, shared data input by the data owner and sharing permission information corresponding to the shared data, and meanwhile, call a public key in a corresponding personal digital certificate through the data owner port, encrypt the shared data by using the public key, and save the encrypted shared data to a blockchain;

[0037] The request response module is configured to, when responding to a shared data viewing request of any data owner, determine data owner identity information and sharing permission information corresponding to shared data to be viewed according to the shared data viewing request, and determine an intimacy value of the data owner initiating the shared data viewing request and the data owner corresponding to the shared data to be viewed.

[0038] The judgment module is configured to determine whether to send the corresponding shared data to be viewed to a data owner port of the data owner initiating the shared data viewing request according to the intimacy value and the sharing permission information.

[0039] The shared data decryption module is configured to, if yes, call a private key in a corresponding personal digital certificate from a data owner port of the data owner corresponding to the shared data to be viewed, acquire the corresponding encrypted shared data to be viewed in the blockchain, decrypt the encrypted shared data to be viewed by using the private key to obtain shared data, and send the shared data to the data owner port of the data owner initiating the shared data viewing request.

[0040] In a third aspect, an electronic device is provided, which includes a memory configured to store one or more programs, and a processor. When the one or more programs are executed by the processor, the method according to any one of the first aspect is implemented.

[0041] In a fourth aspect, a computer readable storage medium is provided, which stores a computer program. When the computer program is executed by a processor, the method according to any one of the first aspect is implemented.

[0042] Compared with the prior art, the embodiments of the present application have at least the following advantages or beneficial effects:

[0043] The application provides a privacy data sharing method and system based on a decentralized digital identity, which comprises the following steps: connecting a data sharing platform with all data owner ports, and storing identity data of any data owner in the data sharing platform in a chain, wherein the identity data comprises identity information and identity attribute information. The data sharing platform generates a corresponding personal digital certificate according to the identity data of any data owner, and publishes the personal digital certificate to the corresponding data owner port, so that the personal digital certificate corresponds to the data owner port one by one, and the correctness of the personal digital certificate called in subsequent encryption and decryption of data is ensured. When responding to a data sharing operation of any data owner, the data sharing platform obtains shared data input by the data owner and sharing permission information corresponding to the shared data through the corresponding data owner port, and at the same time, the public key in the corresponding personal digital certificate is called through the data owner port, the shared data is encrypted by using the public key and saved to the block chain, so that the shared data is ensured not to be leaked. When responding to a shared data viewing request of any data owner, the data owner identity information and the sharing permission information corresponding to the shared data to be viewed are determined according to the shared data viewing request, and the intimacy value of the data owner initiating the shared data viewing request and the data owner corresponding to the shared data to be viewed is determined. According to the intimacy value and the sharing permission information, it is judged whether the corresponding shared data is sent to the data owner port initiating the shared data viewing request. If yes, the private key in the corresponding personal digital certificate is called from the data owner port corresponding to the shared data to be viewed, and the corresponding encrypted shared data in the block chain is obtained, the shared data is obtained by decrypting the encrypted shared data by using the private key, and the shared data is sent to the data owner port initiating the shared data viewing request. Therefore, the accurate sharing of data between users is realized, and the problem of missing data sharing objects is avoided. BRIEF DESCRIPTION OF DRAWINGS

[0044] In order to more clearly illustrate the technical solutions of the embodiments of the application, the following will briefly introduce the drawings needed to be used in the embodiments. It should be understood that the following drawings only show some embodiments of the application, and therefore should not be regarded as a limitation to the scope. For those skilled in the art, other related drawings can also be obtained without creative labor.

[0045] Figure 1 A flowchart of a privacy data sharing method based on a decentralized digital identity provided by the embodiment of the application;

[0046] Figure 2 A flowchart of establishing a connection provided by the embodiment of the application;

[0047] Figure 3A flowchart for issuing a personal digital certificate is provided as an embodiment of the present invention;

[0048] Figure 4 A structural block diagram of a privacy data sharing system based on decentralized digital identity provided in an embodiment of the present invention;

[0049] Figure 5 This is a schematic structural block diagram of an electronic device provided in an embodiment of the present invention.

[0050] Icons: 110 - Connection establishment module; 120 - Personal digital certificate generation module; 130 - Public key encryption module; 140 - Request and response module; 150 - Judgment module; 160 - Shared data decryption module; 101 - Memory; 102 - Processor; 103 - Communication interface. Detailed Implementation

[0051] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. The components of the embodiments of this application described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0052] Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0053] It should be noted that similar reference numerals and letters in the following figures indicate similar items; therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures. Furthermore, in the description of this application, the terms "first," "second," etc., are used only to distinguish descriptions and should not be construed as indicating or implying relative importance.

[0054] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the use of the terms "comprising," "including," or any other variations thereof is intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, the presence of an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0055] In the description of this application, it should be noted that if the terms "upper", "lower", "inner", "outer", etc. appear to indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings, or the orientation or positional relationship that the product of this application is usually placed in, it is only for the convenience of describing this application and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this application.

[0056] In the description of this application, it should also be noted that, unless otherwise explicitly specified and limited, the terms "setup" and "connection" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in this application based on the specific circumstances.

[0057] The following detailed description of some embodiments of this application is provided in conjunction with the accompanying drawings. Unless otherwise specified, the various embodiments and features described below can be combined with each other.

[0058] Example

[0059] Please refer to Figure 1 , Figure 1 The diagram shows a flowchart of a privacy data sharing method based on decentralized digital identity provided by an embodiment of the present invention. This application provides a privacy data sharing method based on decentralized digital identity, which includes the following steps:

[0060] S110: Establish a connection between the data sharing platform and all data owner ports, and store the identity data of any data owner on the blockchain in the data sharing platform. The identity data includes identity information and identity attribute information.

[0061] The identity information can include ID card information, name, phone number, etc. Identity attribute information can include gender, email address, age, and occupation, etc.

[0062] S120: The data sharing platform generates a corresponding personal digital certificate based on the identity data of any data owner and publishes the personal digital certificate to the corresponding data owner's port;

[0063] Each personal digital certificate contains a public key for encryption and a private key for decryption, corresponding to the data owner's identity data. Specifically, after generating a corresponding personal digital certificate based on the data owner's identity data, the personal digital certificate is published to the corresponding data owner's port, thus ensuring a one-to-one correspondence between the personal digital certificate and the data owner's port, guaranteeing the correctness of the personal digital certificate used in subsequent data encryption and decryption.

[0064] S130: When responding to a data sharing operation by any data owner, the data sharing platform obtains the data to be shared and the sharing permission information corresponding to the data to be shared by the data owner through the corresponding data owner port, and at the same time retrieves the public key in the corresponding personal digital certificate through the data owner port, and uses the public key to encrypt the data to be shared and save it to the blockchain.

[0065] For example, if data owner A wants to share data B, he enters data B and the corresponding sharing permission C on the data sharing platform. Then, the public key in the personal digital certificate is retrieved from the port corresponding to data owner A. The public key is used to encrypt the shared data B and save it to the blockchain.

[0066] S140: When responding to a shared data viewing request from any data owner, determine the identity information and sharing permission information of the data owner corresponding to the shared data to be viewed based on the shared data viewing request, and determine the affinity value between the data owner who initiated the shared data viewing request and the data owner corresponding to the shared data to be viewed;

[0067] S150: Based on the intimacy value and the sharing permission information, determine whether to send the corresponding data to be shared to the port of the data owner who initiated the request to view the shared data;

[0068] S160: If so, retrieve the private key from the corresponding personal digital certificate of the data owner port corresponding to the shared data to be viewed, and at the same time obtain the corresponding encrypted data to be shared in the blockchain. Use the private key to decrypt the encrypted data to be shared to obtain the shared data, and send the shared data to the data owner port that initiated the shared data viewing request.

[0069] For example, when data owner D wants to view shared data B sent by data owner A, the first step is to determine the intimacy value between data owner D and data owner A. If the intimacy value matches the sharing permission C, the private key in the personal digital certificate is retrieved from the port corresponding to data owner A. The private key is then used to decrypt the encrypted shared data B in the blockchain to obtain the shared data B.

[0070] In the above implementation process, the method first establishes a connection between the data sharing platform and all data owner ports, and stores the identity data of all data owners through the data sharing platform. Based on the identity data of each data owner, the data sharing platform generates corresponding personal digital certificates and publishes them to the corresponding data owner ports, thus ensuring a one-to-one correspondence between personal digital certificates and data owner ports, guaranteeing the correctness of the personal digital certificates used in subsequent data encryption and decryption. Then, when any data owner performs a data sharing operation, the data sharing platform retrieves the public key from the personal digital certificate through the corresponding data owner port, and uses the public key to encrypt the data to be shared, thereby ensuring that the data to be shared is not leaked. When any data owner needs to view data to be shared sent by another data owner, the platform first determines the affinity value between the data owner initiating the data sharing request and the data owner corresponding to the data to be viewed. If the affinity value meets the corresponding sharing permission information, it means that the data owner initiating the data sharing request has viewing permission. The platform then retrieves the private key from the corresponding personal digital certificate of the data owner corresponding to the data to be viewed, and uses the private key to decrypt the encrypted data to obtain the shared data. This enables precise data sharing among users, avoiding the problem of missing data sharing objects.

[0071] Please refer to Figure 2 , Figure 2 The diagram shows a flowchart of establishing a connection according to an embodiment of the present invention. In some implementations of this embodiment, the steps of establishing a connection between the data sharing platform and the ports of all data owners include:

[0072] Obtain and search for statements issued by the data owner and statements issued by non-data owners that are associated with the data owner, based on the data owner's identity information;

[0073] After checking all the declared information, the identity attribute information is constructed using all the checked declared information;

[0074] Identity attribute information and identity information are anchored on the blockchain to obtain corresponding identity data, which is a decentralized digital identity.

[0075] Specifically, by examining all the claimed information, the system proves to other entities (individuals, organizations, specific things, etc.) that the user's claimed information is credible, thereby using the credible claimed information to construct identity attribute information, further ensuring the credibility of the identity attribute information.

[0076] Please refer to Figure 3 , Figure 3 The diagram shows a flowchart of a personal digital certificate issuance method according to an embodiment of the present invention. In some implementations of this embodiment, the steps of the data sharing platform generating a corresponding personal digital certificate based on the identity data of any data owner and issuing the personal digital certificate to the corresponding data owner's port include:

[0077] Verify the issued personal digital certificate based on identity attribute information;

[0078] Once the verification is successful, the personal digital certificate is published to the corresponding data owner's portal based on the identity data.

[0079] Specifically, it can be verified whether the private key and public key in the personal digital certificate match, whether the private key matches the user's identity attribute information, and whether the public key matches the user's identity attribute information, so as to ensure that the personal digital certificate matches the corresponding data owner.

[0080] In some embodiments of this example, after the step of determining whether to send the corresponding data to be shared to the port of the data owner who initiated the shared data viewing request based on the intimacy value and the sharing permission information, the method further includes:

[0081] Conduct security checks on the data to be shared to determine the security level;

[0082] Based on the identity data of the data owner who initiated the shared data viewing request, obtain the data security tolerance range pre-set by the data owner from the data sharing platform;

[0083] By comparing the security level and the data security tolerance range, it is determined whether the data owner's port that initiated the shared data viewing request can receive the data to be shared. This further ensures that the shared data obtained by the data owner's port that initiated the shared data viewing request will not compromise the software and hardware security of that data owner's port.

[0084] In some embodiments of this example, the step of determining the affinity value between the data owner who initiated the shared data viewing request and the data owner corresponding to the shared data to be viewed includes:

[0085] Based on the identity information of the data owner who initiated the shared data viewing request and the identity information of the data owner corresponding to the shared data to be viewed, the historical sharing information of the two is obtained. The historical sharing information includes the historical shared data and the number of historical shares.

[0086] All historical shared data types are determined based on historical shared data, and the number of shares corresponding to each historical shared data type is determined based on the number of historical shares.

[0087] Input all historical shared data types and the number of times each historical shared data type is shared into the trained intimacy determination model to obtain the intimacy value between the two data owners.

[0088] Specifically, by analyzing the historical sharing patterns of two data owners using a trained intimacy determination model, the intimacy value between the two data owners was obtained.

[0089] In some embodiments of this example, before the step of inputting all historical shared data types and the number of shares corresponding to each historical shared data type into the trained intimacy determination model, the method further includes:

[0090] Establish a closeness determination model;

[0091] Acquire multiple samples, including various data sharing scenarios;

[0092] The intimacy determination model is trained using multiple samples to obtain a well-trained intimacy determination model.

[0093] In some embodiments of this example, while uploading the identity data of any data owner to the blockchain, an on-chain certificate is generated.

[0094] Based on the on-chain credentials, determine whether the identity data of the data owner has been successfully uploaded to the blockchain.

[0095] Specifically, the on-chain credentials are used to determine whether the identity data of the corresponding data owner has been successfully uploaded to the blockchain, thereby further ensuring that the identity data of all data owners is successfully stored in the data sharing platform.

[0096] Please refer to Figure 4 , Figure 4 The diagram shown is a structural block diagram of a privacy data sharing system based on decentralized digital identity provided by an embodiment of the present invention. This application provides a privacy data sharing system based on decentralized digital identity, comprising:

[0097] The connection establishment module 110 is used to establish a connection between the data sharing platform and all data owner ports, and to store the identity data of any data owner on the blockchain in the data sharing platform. The identity data includes identity information and identity attribute information.

[0098] The personal digital certificate generation module 120 is used by the data sharing platform to generate a corresponding personal digital certificate based on the identity data of any data owner, and to publish the personal digital certificate to the corresponding data owner's port;

[0099] The public key encryption module 130 is used to, in response to any data owner's data sharing operation, obtain the data to be shared and the sharing permission information corresponding to the data to be shared by the data owner through the corresponding data owner's port, and at the same time retrieve the public key in the corresponding personal digital certificate through the data owner's port, and use the public key to encrypt the data to be shared and save it to the blockchain.

[0100] The request response module 140 is used to determine the identity information and sharing permission information of the data owner corresponding to the shared data to be viewed, and to determine the affinity value between the data owner who initiated the shared data viewing request and the data owner corresponding to the shared data to be viewed, when responding to a shared data viewing request from any data owner.

[0101] The judgment module 150 is used to determine whether to send the corresponding data to be shared to the port of the data owner who initiated the request to view the shared data, based on the intimacy value and the sharing permission information;

[0102] The shared data decryption module 160 is used to retrieve the private key from the corresponding personal digital certificate of the data owner port corresponding to the shared data to be viewed, and at the same time obtain the corresponding encrypted data to be shared in the blockchain. It uses the private key to decrypt the encrypted data to be shared to obtain the shared data, and sends the shared data to the data owner port that initiated the shared data viewing request.

[0103] In the above implementation process, the system first establishes a connection between the data sharing platform and all data owner ports. The data sharing platform stores the identity data of all data owners. Based on the identity data of each data owner, the platform generates corresponding personal digital certificates and publishes them to the corresponding data owner ports, ensuring a one-to-one correspondence between personal digital certificates and data owner ports. This guarantees the correctness of the personal digital certificates used for subsequent data encryption and decryption. Then, when any data owner performs a data sharing operation, the data sharing platform retrieves the public key from the personal digital certificate through the corresponding data owner port. This public key is used to encrypt the data to be shared, ensuring that the data to be shared is not leaked. When any data owner needs to view data to be shared sent by another data owner, the system first determines the affinity value between the data owner initiating the request and the data owner corresponding to the data to be viewed. If the affinity value meets the corresponding sharing permission information, it means that the data owner initiating the request has viewing permission. The private key is then retrieved from the corresponding personal digital certificate of the data owner corresponding to the data to be viewed, and the encrypted data to be shared is decrypted using the private key. This enables precise data sharing among users, avoiding the problem of missing data sharing objects.

[0104] Please refer to Figure 5 , Figure 5 This is a schematic structural block diagram of an electronic device provided in an embodiment of this application. The electronic device includes a memory 101, a processor 102, and a communication interface 103. The memory 101, processor 102, and communication interface 103 are electrically connected to each other directly or indirectly to realize data transmission or interaction. For example, these components can be electrically connected to each other through one or more communication buses or signal lines. The memory 101 can be used to store software programs and modules, such as the program instructions / modules corresponding to the privacy data sharing system based on decentralized digital identity provided in an embodiment of this application. The processor 102 executes various functional applications and data processing by executing the software programs and modules stored in the memory 101. The communication interface 103 can be used to communicate with other node devices for signaling or data.

[0105] The memory 101 may be, but is not limited to, random access memory (RAM), read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), etc.

[0106] The processor 102 can be an integrated circuit chip with signal processing capabilities. The processor 102 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0107] Understandable. Figure 5 The structure shown is for illustrative purposes only; the electronic device may also include components that are more advanced than those shown. Figure 5 The more or fewer components shown, or having the same Figure 5 The different configurations shown. Figure 5 The components shown can be implemented using hardware, software, or a combination thereof.

[0108] In the embodiments provided in this application, it should be understood that the disclosed apparatus and methods can also be implemented in other ways. The apparatus embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than those marked in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram and / or flowchart, and combinations of blocks in block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0109] In addition, the functional modules in the various embodiments of this application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0110] If the aforementioned functions are implemented as software functional modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0111] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

[0112] It will be apparent to those skilled in the art that this application is not limited to the details of the exemplary embodiments described above, and that this application can be implemented in other specific forms without departing from the spirit or essential characteristics of this application. Therefore, the embodiments should be considered illustrative and non-limiting in all respects, and the scope of this application is defined by the appended claims rather than the foregoing description. Thus, all variations falling within the meaning and scope of equivalents of the claims are intended to be included within this application. No reference numerals in the claims should be construed as limiting the scope of the claims.

Claims

1. A privacy data sharing method based on decentralized digital identity, characterized in that, Includes the following steps: Establish a connection between the data sharing platform and all data owner ports, and store the identity data of any data owner on the blockchain in the data sharing platform, wherein the identity data includes identity information and identity attribute information; The data sharing platform generates a corresponding personal digital certificate based on the identity data of any data owner, and publishes the personal digital certificate to the corresponding data owner's port; When responding to a data sharing operation by any data owner, the data sharing platform obtains the data to be shared and the sharing permission information corresponding to the data to be shared by the data owner through the corresponding data owner port. At the same time, it retrieves the public key in the corresponding personal digital certificate through the data owner port, encrypts the data to be shared using the public key, and saves it to the blockchain. When responding to a shared data viewing request from any data owner, the identity information and sharing permission information of the data owner corresponding to the shared data to be viewed are determined according to the shared data viewing request, and the affinity value between the data owner who initiated the shared data viewing request and the data owner corresponding to the shared data to be viewed is determined. Based on whether the intimacy value matches the sharing permission information, determine whether to send the corresponding data to be shared to the port of the data owner who initiated the shared data viewing request; If so, the private key in the corresponding personal digital certificate is retrieved from the port of the data owner corresponding to the shared data to be viewed, and the corresponding encrypted data to be shared in the blockchain is obtained. The encrypted data to be shared is decrypted using the private key to obtain the shared data, and the shared data is sent to the port of the data owner who initiated the shared data viewing request. in: The step of determining the affinity value between the data owner who initiated the shared data viewing request and the data owner corresponding to the shared data to be viewed includes: Based on the identity information of the data owner who initiated the shared data viewing request and the identity information of the data owner corresponding to the shared data to be viewed, the historical sharing information of the two is obtained, including historical shared data and historical sharing counts; All historical shared data types are determined based on the historical shared data, and the number of times each historical shared data type is shared is determined based on the number of times it is shared. Input all historical shared data types and the number of times each historical shared data type is shared into the trained intimacy determination model to obtain the intimacy value between the two data owners.

2. The privacy data sharing method based on decentralized digital identity according to claim 1, characterized in that, The steps for establishing connections between the data sharing platform and all data owner ports include: Obtain and search for statements issued by the data owner and statements issued by non-data owners that are associated with the data owner, based on the data owner's identity information; After checking all the declared information, the identity attribute information is constructed using all the checked declared information; The identity attribute information and the identity information are anchored on the blockchain to obtain the corresponding identity data, which is a decentralized digital identity.

3. The privacy data sharing method based on decentralized digital identity according to claim 2, characterized in that, The steps of the data sharing platform generating a corresponding personal digital certificate based on the identity data of any data owner and publishing the personal digital certificate to the corresponding data owner's port include: The issued personal digital certificate is verified based on the aforementioned identity attribute information; Once the verification is successful, the personal digital certificate is published to the corresponding data owner's port based on the identity data.

4. The privacy data sharing method based on decentralized digital identity according to claim 1, characterized in that, After determining whether to send the corresponding data to be shared to the port of the data owner who initiated the shared data viewing request based on the intimacy value and the sharing permission information, the method further includes: Perform a security check on the data to be shared to determine its security level; Based on the identity data of the data owner who initiated the shared data viewing request, the data security tolerance range preset by the data owner is obtained from the data sharing platform; By comparing the security level with the data security tolerance range, it can be determined whether the port of the data owner who initiated the shared data viewing request can receive the data to be shared.

5. The privacy data sharing method based on decentralized digital identity according to claim 4, characterized in that, Before the step of inputting all historical shared data types and the number of shares corresponding to each historical shared data type into the trained intimacy determination model, the following steps are also included: Establish a closeness determination model; Acquire multiple samples, which include various data sharing scenarios; The intimacy determination model is trained using the multiple samples to obtain a trained intimacy determination model.

6. The privacy data sharing method based on decentralized digital identity according to claim 1, characterized in that, While uploading the identity data of any data owner to the blockchain, an on-chain certificate is generated. Based on the on-chain certificate, determine whether the identity data of the data owner has been successfully uploaded to the blockchain.

7. A privacy data sharing system based on decentralized digital identity, characterized in that, include: The connection establishment module is used to establish a connection between the data sharing platform and all data owner ports, and to store the identity data of any data owner on the blockchain in the data sharing platform, wherein the identity data includes identity information and identity attribute information; The personal digital certificate generation module is used by the data sharing platform to generate a corresponding personal digital certificate based on the identity data of any data owner, and to publish the personal digital certificate to the corresponding data owner's port; The public key encryption module is used to, in response to any data owner's data sharing operation, obtain the data to be shared and the sharing permission information corresponding to the data to be shared by the data owner through the corresponding data owner's port, and at the same time retrieve the public key in the corresponding personal digital certificate through the data owner's port, encrypt the data to be shared using the public key and save it to the blockchain. The request response module is used to, when responding to a shared data viewing request from any data owner, determine the identity information and sharing permission information of the data owner corresponding to the shared data to be viewed, and determine the affinity value between the data owner who initiated the shared data viewing request and the data owner corresponding to the shared data to be viewed; The judgment module is used to determine whether to send the corresponding data to be shared to the port of the data owner who initiated the shared data viewing request, based on whether the intimacy value matches the sharing permission information. The shared data decryption module is used to retrieve the private key from the corresponding personal digital certificate of the data owner port corresponding to the shared data to be viewed if it is determined that the corresponding data to be shared will be sent to the port of the data owner who initiated the shared data viewing request. At the same time, it obtains the corresponding encrypted data to be shared in the blockchain, decrypts the encrypted data to be shared using the private key to obtain the shared data, and sends the shared data to the port of the data owner who initiated the shared data viewing request. in: The step of determining the affinity value between the data owner who initiated the shared data viewing request and the data owner corresponding to the shared data to be viewed includes: Based on the identity information of the data owner who initiated the shared data viewing request and the identity information of the data owner corresponding to the shared data to be viewed, the historical sharing information of the two is obtained, including historical shared data and historical sharing counts; All historical shared data types are determined based on the historical shared data, and the number of times each historical shared data type is shared is determined based on the number of times it is shared. Input all historical shared data types and the number of times each historical shared data type is shared into the trained intimacy determination model to obtain the intimacy value between the two data owners.

8. An electronic device, characterized in that, include: Memory, used to store one or more programs; processor; When the one or more programs are executed by the processor, the method as described in any one of claims 1-6 is implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the method as described in any one of claims 1-6.

Images