A method for access control of private data on a blockchain

Abstract

The application relates to a private data access control method on a blockchain, and belongs to the technical field of blockchain access control. When private data is uploaded or inquired by using a smart contract on a blockchain, a user signs a verification code by using an SM2 signature function in a mobile super SIM card to generate a token with time effectiveness, the smart contract on the blockchain verifies the time effectiveness and correctness of the token to perform trusted authentication on the user, and the blockchain performs a data uploading or inquiring function of the user after the authentication. The application solves the problem of insecure private data storage and realizes trusted access control when private data is accessed. The private data is stored by using a blockchain to solve the insecurity of private data storage, realize data tamper resistance, and enhance the security of data storage.

Description

Technical Field

[0001] This invention relates to an access control method for private data on a blockchain, belonging to the field of blockchain-access control technology. Background Technology

[0002] With the development of network technology, increasingly intelligent devices have brought unprecedented convenience to people's lives. Mobile phones have become indispensable smart devices, and while using them, people also store a large amount of private data. In recent years, incidents of reselling, maliciously deleting, and modifying personal information, as well as data leaks by insiders, have occurred frequently, seriously affecting user privacy and security. Therefore, a privacy data access control method is needed to protect the privacy data on users' mobile phones.

[0003] Blockchain has security features such as decentralization, high trust, traceability, and immutability, which meet the security and trustworthiness requirements of users' privacy data storage. However, in addition to storage security, a secure access control method is also needed to protect data access.

[0004] China Mobile's Super SIM card chip features Physical Anti-cloning (PUF), ensuring one card per user. Beyond PUF, this chip also supports mainstream Chinese commercial cryptographic algorithms and international algorithms, providing secure encryption for mobile data transmission. Therefore, the SM2 signature module within the Super SIM card can be used for trusted user authentication, enabling reliable access control. Summary of the Invention

[0005] The technical problem to be solved by this invention is to provide an access control method for private data on a blockchain, which addresses the insecurity of storing private data on mobile phones and the insecurity of existing access control methods.

[0006] The technical solution of this invention is: a method for access control of private data on a blockchain. First, an access control smart contract is deployed on the blockchain. This smart contract includes at least a user registration module, a data upload module, and a data access module. Second, three types of data tables are established in a database for the smart contract to use for access control. These three types of data tables are: a user information table, a user verification information table, and a user private data table. Finally, the user uses the user registration module of the smart contract to bind their user information and their Super SIM card, and establishes the user verification information table and the user private data table. After successful registration, the user generates a valid token and uses the data upload module to upload their private data. Finally, the user generates a valid token and executes the data access module to query their private data.

[0007] The specific steps are as follows:

[0008] Step 1: The user initiates a registration request using the user registration module of the smart contract to register a legitimate user on the blockchain.

[0009] The specific registration process is as follows:

[0010] Step 1.1: The user registration module of the smart contract returns a verification code to the user via the blockchain. verify After the user signs the verification code using the SM2 signature function of the mobile super SIM card, a registration information msg is generated. register =msg(Code) verify ,Srign code PubKey SIM (,PhoneNum), where PubKey SIM It is the public key in the SIM card used to verify the SM2 signature, and PhoneNum is the registered user's mobile phone number.

[0011] Step 1.2: After receiving the registration information, the smart contract uses the public key in the registration information to authenticate the signature in the registration information. If the authentication is successful, the signature public key and the mobile phone number in the registration information are stored in the user table, completing the user registration process.

[0012] Step 2: The user submits a data upload request to the smart contract data upload module in the blockchain, sending their private data from their mobile phone. The blockchain stores the received data in the consensus ledger of each node, achieving secure storage of the private data.

[0013] The specific upload process is as follows:

[0014] Step 2.1: The user submits a data upload request to the smart contract data upload module in the blockchain. The blockchain then sends a verification code to the mobile phone of the account to which the data belongs. verify and the verification code Code verify and generation time T gen Store in the user information verification table.

[0015] Step 2.2: After receiving the verification code on your mobile phone, use the SM2 signature function of the China Mobile Super SIM card to sign the verification code and generate the verification code signature value Sign. code Then, the verification code and signature value are used to generate a token, i.e., token = msg(Code). verify Sign code ).

[0016] Step 2.3: The user uploads the data (data) along with the token to generate an upload message (msg). upload =msg(data, token) and send it to the blockchain.

[0017] Step 2.4: After receiving the uploaded message packet, the blockchain first extracts the token and queries the generation time T in the user information verification table. gen Check if the designed time limit has been exceeded. If the time limit verification passes, then query the public key PubKey in the user information table. SIM The public key is then used to verify the signature value in the token. If the signature verification is successful, the data from the uploaded message is stored in the user's private data table, and consensus is reached to ensure data storage security.

[0018] Step 3: When a user or other user needs to access private data, they need to submit a data access request to the smart contract data access module in the blockchain. The blockchain sends a verification code to the user who owns the data. Once the user who owns the data grants access, the blockchain returns a time-limited token. Within the time limit, other users can access the private data.

[0019] The specific access process is as follows:

[0020] Step 3.1: The user submits a data access request to the smart contract data access module in the blockchain, and the blockchain sends a verification code to the mobile phone of the account to which the data belongs. verify and the verification code Code verify and generation time T gen Store in the user information verification table.

[0021] Step 3.2: After receiving the verification code on your mobile phone, use the SM2 signature function of the China Mobile Super SIM card to sign the verification code and generate the verification code signature value Sign. code Then, the verification code and signature value are used to generate a token, i.e., token = msg(Code). verify Sign code Finally, the token is sent to the blockchain for verification.

[0022] Step 3.3: After receiving the token, the blockchain queries the generation time T in the user information verification table. gen Check if the designed time limit has been exceeded. If the time limit verification passes, then query the public key PubKey in the user information table. SIM The public key is then used to verify the signature value in the token. Once the signature verification is successful, the information from the user's private data table is sent to the accessing user.

[0023] This invention is based on establishing a trusted data access control method when using blockchain to store user privacy data, thereby protecting data access and solving the problem of insecure data storage of privacy data by using blockchain to store mobile phone privacy data.

[0024] The beneficial effects of this invention are: it solves the storage security problem of private data stored on mobile phones and enables trusted user access to private data. By uploading private data to the blockchain, it achieves secure storage of private data, ensuring its immutability and integrity; it achieves secure matching of one person, one card by binding the user's mobile super SIM card with a data account on the blockchain; and it implements trusted data access control through time-sensitive tokens. Attached Figure Description

[0025] Figure 1 This is a flowchart of the present invention;

[0026] Figure 2 This is a detailed registration flowchart of the present invention;

[0027] Figure 3 This is a detailed flowchart of the upload process of this invention;

[0028] Figure 4 This is a detailed flowchart of the access process of this invention. Detailed Implementation

[0029] The present invention will be further described below with reference to the accompanying drawings and specific embodiments.

[0030] Example 1: As Figure 1 As shown, a method for access control of private data on a blockchain includes the following steps:

[0031] Step 1: The user initiates a registration request to the blockchain to register a legitimate user.

[0032] The specific registration process is as follows: Figure 2 As shown:

[0033] Step 1.1: The user registration module of the smart contract returns a verification code to the user via the blockchain. verify After the user signs the verification code using the SM2 signature function of the mobile super SIM card, a registration information msg is generated. register =msg(Code) verify Sign code PubKey SIM (,PhoneNum), where PubKey SIM It is the public key in the SIM card used to verify the SM2 signature, and PhoneNum is the registered user's mobile phone number.

[0034] Step 1.2: After receiving the registration information, the smart contract uses the public key in the registration information to authenticate the signature in the registration information. If the authentication is successful, the signature public key and the mobile phone number in the registration information are stored in the user table, completing the user registration process.

[0035] Step 2: Users send their private data from their phones to the blockchain. The blockchain stores the received data in the consensus ledger of each node, achieving secure storage of the private data.

[0036] The specific upload process is as follows: Figure 3 As shown:

[0037] Step 2.1: The user submits a data upload request to the smart contract data upload module in the blockchain. The blockchain then sends a verification code to the mobile phone of the account to which the data belongs. verify and the verification code Code verify and generation time T gen Store in the user information verification table.

[0038] Step 2.2: After receiving the verification code on your mobile phone, use the SM2 signature function of the China Mobile Super SIM card to sign the verification code and generate the verification code signature value Sign. code Then, the verification code and signature value are used to generate a token, i.e., token = msg(Code). verify Sign code ).

[0039] Step 2.3: The user uploads the data (data) along with the token to generate an upload message (msg). upload=msg(data, token) and send it to the blockchain.

[0040] Step 2.4: After receiving the uploaded message packet, the blockchain first extracts the token and queries the generation time T in the user information verification table. gen Check if the designed time limit has been exceeded. If the time limit verification passes, then query the public key PubKey in the user information table. SIM The public key is then used to verify the signature value in the token. If the signature verification is successful, the data from the uploaded message is stored in the user's private data table, and consensus is reached to ensure data storage security.

[0041] Step 3: When a user or other user needs to access private data, the blockchain sends a verification code to the user who owns the data. Once the user who owns the data grants access, the blockchain returns a time-limited token, within which other users can access the private data.

[0042] The detailed access process is as follows (see attached). Figure 4 As shown:

[0043] Step 3.1: The user submits a data access request to the smart contract data access module in the blockchain, and the blockchain sends a verification code to the mobile phone of the account to which the data belongs. verify and the verification code Code verify and generation time T gen Store in the user information verification table.

[0044] Step 3.2: After receiving the verification code on your mobile phone, use the SM2 signature function of the China Mobile Super SIM card to sign the verification code and generate the verification code signature value Sign. code Then, the verification code and signature value are used to generate a token, i.e., token = msg(Code). verify Sign code Finally, the token is sent to the blockchain for verification.

[0045] Step 3.3: After receiving the token, the blockchain queries the generation time T in the user information verification table. gen Check if the designed time limit has been exceeded. If the time limit verification passes, then query the public key PubKey in the user information table. SIM The public key is then used to verify the signature value in the token. Once the signature verification is successful, the information from the user's private data table is sent to the accessing user.

[0046] The specific embodiments of the present invention have been described in detail above with reference to the accompanying drawings. However, the present invention is not limited to the above embodiments. Within the scope of knowledge possessed by those skilled in the art, various changes can be made without departing from the spirit of the present invention.

Claims

1. A method for access control of private data on a blockchain, characterized in that: Step 1: deploying an access control smart contract on the blockchain, the access control smart contract comprising at least a user registration module, a data upload module and a data access module; Step 2: establishing three types of data tables in the database for use by the smart contract to achieve access control, the three types of data tables being: a user information table, a user verification information table and a user private data table; the user private data table being used to store data data in the uploaded message; Step 3: the user binds the user information and the super SIM card in the user's hand using the user registration module of the smart contract, and establishes the user's verification information table and the user's private data table, after successful registration, the user uploads private data using the data upload module by generating a valid token, and the user performs a query private data operation by generating a valid token to execute the data access module; the specific steps of Step 3 being: Step 3.1: the user initiates a registration request using the user registration module of the smart contract to register a legal user on the blockchain; the specific steps of Step 3.1 being: Step 3.1.2: the smart contract authenticates the signature in the registration information using the public key in the registration information after receiving the registration information, and if the authentication is passed, the signature public key and mobile phone number in the registration information are stored in the user information table to complete the user registration step; Step 3.2: the user submits a data upload application to the smart contract data upload module in the blockchain, sends the private and confidential data on the mobile phone, and the blockchain stores the received data in the consensus ledger in each node to achieve secure storage of private data; Step 3.3: when the user or other users need to access private data, they need to submit a data access application to the smart contract data access module in the blockchain, the blockchain sends a verification code to the user to whom the data belongs, and when the user allows access, the blockchain returns a time-limited token, within which time limit the remaining users can access the private data; the specific steps of Step 3.2 being: the specific steps of Step 3.3 being: ​ ​ The user authentication information table is used to store the verification code Code verify and the generation time T gen ; ​ ​ ​ ​ ​ Step3.1.1: User uses the user registration module of the smart contract, and the blockchain returns a verification code Code to the user verify , and the user uses the SM2 signature function of the mobile super SIM card to sign the verification code to generate registration information msg register = msg(Code verify , Sign code , PubKey SIM , PhoneNum), where PubKey SIM is the public key in the SIM card for verifying the SM2 signature, and PhoneNum is the mobile phone number of the registered user; ​ ​ ​ 2.The method of claim 1, wherein, ​ Step3.2.1: the user applies for data uploading to the smart contract data uploading module in the blockchain, the blockchain sends a verification code Code to the mobile phone of the data ownership account verify , and stores the verification code Code verify and the generation time T gen in the user information verification table; Step3.2.2: After receiving the verification code, the mobile phone uses the SM2 signature function of the mobile super SIM card to sign the verification code to generate a verification code signature value Sign code , and then generates a token with the verification code and the signature value, that is, token = msg(Code verify , Sign code ) ; Step 3.2.3: User generates upload message msg with uploaded data data and token upload = msg(data, token) and sends to blockchain; Step3.2.4: After receiving the upload message package, the blockchain first disassembles the token and queries the generation time T in the user information verification table gen , checks whether it exceeds the designed timeliness, and if the timeliness verification is passed, then queries the public key PubKey SIM in the user information table and verifies the signature value in the token with the public key. After the signature correctness verification is passed, the data data in the upload message is stored in the user private data table, and consensus is performed to ensure the storage security of the data. 3.The method of claim 2, wherein: ​ Step3.3.1: the user makes a data access application to the smart contract data access module in the blockchain, the blockchain sends a verification code Code to the mobile phone of the data belonging account verify , and stores the verification code Code verify and the generation time T gen in the user information verification table; Step3.3.2: After receiving the verification code, the mobile phone uses the SM2 signature function of the mobile super SIM card to sign the verification code to generate a verification code signature value Sign code , and then generates a token with the verification code and the signature value, i.e., token = msg(Code verify , Sign code ), and finally sends the token to the blockchain for verification; Step 3.3.3: After the blockchain receives the token, it queries the user information verification table for the generation time T gen , checks whether the time limit has been exceeded, and if the time limit verification is passed, it then queries the public key PubKey SIM in the user information table and verifies the signature value in the token with the public key. After the signature correctness verification is passed, the information in the user private data table is sent to the access user.

Images