Blockchain and nft-based personal internet of things high-sensitive data right confirmation method and device

Abstract

The application provides a personal Internet of Things high-sensitive data right confirmation method based on a blockchain and an NFT, which comprises the following steps: a CA server issues an identity certificate for a user and a right confirmation server respectively; the user connects an Internet of Things device through an intelligent control terminal, and initiates a data right confirmation request to the right confirmation server when high-sensitive data is generated; the right confirmation server sequentially performs NFT tokenization processing on the high-sensitive data to be confirmed in a first-in-first-out order to generate metadata and temporarily store the metadata in a local cache area; the right confirmation server listens to the state of a blockchain network in real time, and sequentially sends data right confirmation transactions of the metadata in the local cache area to blockchain nodes in a first-in-first-out order; the blockchain nodes acquire the metadata, calculate whether a time difference between a transaction initiation time and a current time exceeds a specified time difference, if not, acquire a hash value in the metadata, and if there is no right-confirmed metadata corresponding to the hash value on the chain, bind the metadata with a TokenID on the chain and generate an NFT right confirmation voucher.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet of Things data right confirmation, and in particular to a personal Internet of Things high-sensitive data right confirmation method and device based on a blockchain and NFT. BACKGROUND

[0002] The development of technologies such as big data, cloud computing, and the Internet of Things is driving the development of a personal Internet of Things model, which is centered on individual users, connects other smart Internet of Things devices and resources through an individual smart phone terminal in accordance with an agreed protocol, and meets the smart services of individual users in high-quality and portable life needs.

[0003] In the existing personal Internet of Things model, due to the lack of right confirmation of personal high-sensitive data, after the smart Internet of Things device manufacturers collect user data, the sensitive data is privately used to obtain benefits without the user's knowledge, infringing on the user's right to protect personal data. Therefore, it is urgent to propose a personal Internet of Things high-sensitive data right confirmation scheme to realize the user's consent right, right to know, and ownership of personal data use.

[0004] The characteristics of decentralization, non-tamperability, and openness and transparency of the blockchain technology can provide support for data right confirmation. In addition, with the help of NFT technology, personal Internet of Things high-sensitive data can be tokenized to generate non-divisible and unique personal data right confirmation credentials.

[0005] However, existing data right confirmation schemes using blockchain or NFT require a series of steps such as on-chain consensus, and the time required for the right confirmation process is long, which is contrary to the rapidity of personal Internet of Things high-sensitive data. If personal high-sensitive data is not processed in time, it may still be tampered with before being chained, which cannot guarantee the accuracy of data right confirmation; in addition, the existing data right confirmation technology lacks verification of the correctness of the data owner's identity, and cannot prevent others from maliciously attacking to replace the personal data owner for right confirmation. SUMMARY

[0006] In order to ensure the accuracy of data right confirmation and the correctness of the identity verification of the data owner, the present application provides a personal Internet of Things high-sensitive data right confirmation method and device based on a blockchain and NFT.

[0007] In one aspect, the present application provides a personal Internet of Things high-sensitive data right confirmation method based on a blockchain and NFT, comprising:

[0008] Step 1: the CA server issues an identity certificate for the user and the right confirmation server, respectively, and uses the public key in the user's identity certificate as the user's identity identifier;

[0009] Step 2: The user connects the Internet of Things device through the intelligent control terminal. When the intelligent control terminal operates the Internet of Things device to generate high-sensitive data, the digital fingerprint and hash value of the high-sensitive data are immediately generated, and a data right request carrying the digital fingerprint and hash value is initiated to the right server; the digital fingerprint includes the user's identity and the timestamp t1 of the generation of high-sensitive data;

[0010] Step 3: After the right server receives the data right request, the user's identity in the digital fingerprint is verified. When the verification is passed, the high-sensitive data to be righted is sequentially processed by NFT tokenization according to the time stamp t1 in the order of time stamp t1 to generate metadata and temporarily store the metadata in the local cache area; the metadata includes the timestamp t3 when the metadata is generated and the hash value of the high-sensitive data;

[0011] Step 4: The right server real-time monitors the state of the blockchain network. When it is monitored that the state of the blockchain network is not crowded, the metadata in the local cache area is sequentially sent to the blockchain node according to the time stamp t3 in the order of time stamp t3.

[0012] Step 5: The blockchain node acquires the metadata and records the current timestamp t4, calculates whether the time difference between timestamp t4 and timestamp t3 exceeds the specified time difference, if yes, the current data right transaction is not performed, if not, the hash value in the metadata is acquired, if the hash value corresponding to the righted metadata does not exist on the chain, the metadata is bound with the TokenID on the chain and the NFT right certificate is generated.

[0013] Further, in step 2, the data right request further includes: the user's signature for the high-sensitive data;

[0014] Correspondingly, in step 3, after the right server receives the data right request, it further includes: verifying whether the user's signature is valid, if valid, continue to verify the user's identity in the digital fingerprint.

[0015] Further, in step 3, verifying the user's identity in the digital fingerprint specifically includes: if the user's identity extracted from the digital fingerprint is consistent with the user's identity sending the data right request, the verification is passed, otherwise the verification is not passed.

[0016] Further, in step 3, when the verification is passed, it further includes: the right server signs the data right request.

[0017] Further, in step 3, the metadata further includes the user's identity, timestamp t1, the number of data to be righted, state information for representing whether the metadata has been bound with TokenID on the chain, and the right server signature for the data right request.

[0018] Correspondingly, after obtaining the metadata, the blockchain node further includes: verifying whether the signature of the right server is valid.

[0019] Further, it further includes:

[0020] Statistically, the average value of the off-chain processing time of a plurality of high sensitive data is calculated as the specified time difference.

[0021] On the other hand, the present application provides a personal Internet of Things high sensitive data right device based on blockchain and NFT, comprising a CA server, a right server, a smart control terminal and a blockchain network.

[0022] The CA server is used to issue identity certificates for users and right servers respectively.

[0023] The smart control terminal is used for user connection and operation of Internet of Things devices, and immediately generates the digital fingerprint and hash value of the high sensitive data when operating the Internet of Things device to generate high sensitive data, and initiates a data right request carrying the digital fingerprint and hash value to the right server; the digital fingerprint includes the identity of the user and the timestamp t1 of the generation of high sensitive data; wherein the public key in the user identity certificate is used as the identity of the user.

[0024] The right server is used to receive the data right request, verify the identity of the user in the digital fingerprint, and when the verification is passed, sequentially process the high sensitive data to be righted according to the time stamp t1 to generate metadata and temporarily store the metadata in the local cache area; the metadata includes the timestamp t3 when the metadata is generated and the hash value of the high sensitive data; and is used to monitor the state of the blockchain network in real time, and when the state of the blockchain network is not crowded, the metadata in the local cache area is sequentially sent to the blockchain node according to the time stamp t3.

[0025] The blockchain network includes a plurality of blockchain nodes, each of which is used to obtain metadata and record the current timestamp t4, calculate whether the time difference between the timestamp t4 and the timestamp t3 exceeds the specified time difference, if yes, do not perform the current data right transaction, if not, obtain the hash value in the metadata, if the hash value does not exist on the chain, the metadata is bound with the TokenID on the chain and an NFT right certificate is generated.

[0026] The beneficial effects of the present application are:

[0027] (1) Using digital fingerprint technology to generate a digital fingerprint with the identity of the data owner at the first time of generating high-sensitive data, and verifying the identity of the personal data owner by obtaining the digital fingerprint information in the subsequent data right confirmation process, so as to ensure the correctness of the data owner's identity in the data right confirmation.

[0028] (2) Using timestamp technology to record the generation timestamp t1, metadata generation timestamp t3 and on-chain right confirmation timestamp t4 of high-sensitive data; wherein, the timestamp t1 is used to ensure that the metadata is processed in the order of t1, and the timestamp t3 is used to ensure that the data right confirmation transaction is initiated in the order of t3, so that the processing time of each high-sensitive data to be confirmed on the right confirmation server can be limited within a normal range; at the same time, by comparing the time difference between the timestamp t4 and the timestamp t3 with the specified time difference, the right confirmation transaction of high-sensitive data exceeding the specified time difference is filtered out, so that the situation that the attacker tampers with the high-sensitive data and then maliciously confirms the right can be avoided to a certain extent.

[0029] (3) By data caching, the metadata is temporarily stored in the local cache area to ensure that the order of the off-chain data right confirmation transaction is in the order of the timestamp, preventing the data from being tampered with again before being on-chain, ensuring the non-objection of the data, and thus ensuring the accuracy of the data right confirmation.

[0030] (4) By means of NFT technology, the personal Internet of Things high-sensitive data is tokenized to generate non-divisible and unique personal data right confirmation credentials, and relying on the characteristics of the blockchain itself being tamper-proof, the trusted storage of the personal data right confirmation credentials is provided, and the on-chain right confirmation of the data is realized. BRIEF DESCRIPTION OF DRAWINGS

[0031] Figure 1 is a flowchart of a personal Internet of Things high-sensitive data right confirmation method based on blockchain and NFT provided by an embodiment of the present application;

[0032] Figure 2 is a schematic diagram of metadata and NFT right confirmation credentials provided by an embodiment of the present application;

[0033] Figure 3 is a structural schematic diagram of a personal Internet of Things high-sensitive data right confirmation device based on blockchain and NFT provided by an embodiment of the present application. DETAILED DESCRIPTION

[0034] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of the embodiments of this invention will be clearly described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.

[0035] Example 1

[0036] like Figure 1 As shown, this embodiment of the invention provides a method for establishing ownership of highly sensitive personal IoT data based on blockchain and NFTs, including the following steps:

[0037] S101: The CA server issues identity certificates to both the user and the authentication server, and uses the public key in the user's ID card as the user's identity identifier;

[0038] Specifically, the identity certificate includes a public key and a private key; the user's private key is kept by the user, and the ownership verification server's private key is also kept by itself. The purpose of using the user's public key as the user's identity identifier is that the user's identity identifier will be used in subsequent processes when generating digital fingerprints for highly sensitive data. In this way, it can be ensured that only users authenticated by the CA server can initiate data ownership verification requests.

[0039] Similarly, only the rights confirmation server certified by the CA server can process user-initiated data rights confirmation requests and connect to the blockchain node to request on-chain NFT rights confirmation, thus ensuring the correctness and accuracy of the entire rights confirmation process from the source of the data rights confirmation process.

[0040] S102: When a user connects to an IoT device via a smart control terminal, and the smart control terminal generates highly sensitive data by operating the IoT device, it immediately generates a digital fingerprint and hash value of the highly sensitive data and sends a data ownership request carrying the digital fingerprint and hash value to the ownership server (to save time, the ownership server closest to the smart control terminal can be selected at this time); the digital fingerprint includes the user's identity identifier and the timestamp t1 of the highly sensitive data generation.

[0041] S103: When the ownership confirmation server receives the data ownership confirmation request at time t2, it verifies the user's identity in the digital fingerprint. After the verification is successful, it performs NFT tokenization on the highly sensitive data to be confirmed in the order of timestamp t1 to generate metadata and temporarily stores the metadata in the local cache. The metadata includes the timestamp t3 when the metadata is generated and the hash value of the highly sensitive data.

[0042] S104: The right server listens to the state of the blockchain network in real time, and when it is detected that the state of the blockchain network is not crowded, the metadata in the local cache area is sent to the blockchain node in the order of the timestamp t3, and the user who initiates the data right request first is ensured to realize the on-chain data right earlier.

[0043] Specifically, since the time for the blockchain to process a data right request often exceeds the time for the user to initiate a data right request to the right server, the right server does not directly send the on-chain right request to the blockchain node, but temporarily stores the generated metadata in the cache area to ensure that the right transaction is initiated to the blockchain in the order of t3.

[0044] S105: The blockchain node obtains the metadata and records the current timestamp t4, calculates whether the time difference between the timestamp t4 and the timestamp t3 exceeds the specified time difference, if yes, the current data right transaction is not performed, if no, the hash value in the metadata is obtained, if the hash value corresponding to the righted metadata does not exist on the chain, the metadata is bound to the TokenID on the chain based on the ERC721 standard and an NFT right certificate is generated.

[0045] Specifically, the blockchain node is selected from all right servers. When selecting the blockchain node, the right server with superior performance, wide coverage and good network environment is preferred. When setting the specified time difference, the off-chain processing time of several high-sensitive data can be counted and the average value is calculated as the specified time difference. The hash value in the metadata is obtained, which is compared with the hash value of the righted data on the chain to prevent repeated righting due to network factors.

[0046] In addition, the CA server and the right server in the embodiment can adopt an edge server.

[0047] The personal Internet of Things high-sensitive data righting method based on the blockchain and NFT provided by the embodiment has the following advantages:

[0048] (1) The digital fingerprint technology is used to generate a digital fingerprint with data owner identity at the first time of generating high-sensitive data, and the personal data owner identity is verified by obtaining the digital fingerprint information in the subsequent data righting process, so as to ensure the correctness of the data owner identity in the data righting process.

[0049] (2) The timestamp technology is used to record the generation timestamp t1 of the high-sensitive data, the metadata generation timestamp t3 and the on-chain authorization timestamp t4; wherein, the timestamp t1 is used to ensure that the metadata is processed in the order of t1 when being generated, the timestamp t3 is used to ensure that the data authorization transaction is processed in the order of t3 when being initiated, in this way, it can be ensured that the processing time of each high-sensitive data to be authorized on the authorization server is limited within a normal range; at the same time, by comparing the time difference between the timestamp t4 and the timestamp t3 with the specified time difference, the authorization transaction of the high-sensitive data exceeding the specified time difference is filtered out, so that the situation that the attacker tampers with the high-sensitive data and then maliciously authorizes it can be avoided to a certain extent.

[0050] (3) The metadata is temporarily stored in the local cache area through data caching to ensure that the order of the off-chain initiated data authorization transaction is sequentially in the order of the timestamps, so as to prevent the data from being tampered with again before being on-chained, ensure the non-objection of the data, and thus ensure the accuracy of the data authorization.

[0051] (4) By means of the NFT technology, the personal Internet of Things high-sensitive data is tokenized to generate non-divisible and unique personal data authorization credentials, and relying on the characteristics of the block chain itself being tamper-proof, the trusted storage of the personal data authorization credentials is provided, and the on-chain authorization of the data is realized.

[0052] Embodiment 2

[0053] On the basis of the above-mentioned embodiments, the present embodiment further provides a personal Internet of Things high-sensitive data authorization method based on a block chain and NFT, which is different from the above-mentioned embodiments in that:

[0054] In order to further ensure the correctness of the verification of the identity of the owner of the data to be authorized in the data authorization process, in the step S102, the user signature for the high-sensitive data is also carried in the data authorization request, so that in the step S103, after the authorization server receives the data authorization request, it first verifies whether the user signature is valid, and if it is valid, it continues to verify the identity of the user in the digital fingerprint; otherwise, the subsequent process is ended.

[0055] Specifically, in the present embodiment, a triple is used to represent the data authorization request confirmReq, such as confirmReq<data_confirm, dataHash, sig1>; wherein, data_confirm is a digital fingerprint; dataHash is a hash value of the high-sensitive data; sig1 is a user signature for the high-sensitive data; optionally, the present embodiment uses SHA256 to generate the hash value of the high-sensitive data.

[0056] In the embodiment, the identity of the user in the digital fingerprint is verified, specifically including: if the identity of the user extracted from the digital fingerprint is consistent with the identity of the user sending the data right request, the verification is passed, otherwise the verification is not passed.

[0057] Embodiment 3

[0058] Based on the above embodiments, the embodiment of the application further provides a personal Internet of Things high-sensitive data right method based on a block chain and an NFT, which is different from the above embodiments in that:

[0059] In order to avoid the purpose of tampering by attackers attacking the right server in the data right process, in the step S103, after the verification is passed, the right server also includes signing the data right request.

[0060] Correspondingly, when the metadata is generated, the generated metadata also includes the identity of the user, the timestamp t1, the number of the data to be righted, the state information for representing whether the metadata has been bound with the TokenID on the chain, and the right server signature for the data right request.

[0061] Correspondingly, in the step S105, after the block chain node obtains the metadata, it first verifies whether the right server signature is valid, and if it is valid, it continues to calculate whether the time difference between the timestamp t4 and the timestamp t3 exceeds the specified time difference.

[0062] Specifically, in actual application, a seven-tuple is used to represent the metadata user_Meta of the data to be righted, such as user_Meta<userID, dataHash, t1, dataNums, state, t3, sig2>, wherein userID is the identity of the user; dataNums is the number of the data to be righted, which is increased by 1 by default, and the number can reflect the number of righted data completed by the user; state is state information for representing whether the metadata has been bound with the TokenID on the chain, and the state value is invalid and valid, which is invalid before being bound and is modified to valid after being bound successfully; sig2 is the right server signature for the data right request. The content of the NFT right certificate is the content in the metadata user_Meta, and the difference between the two is that the state value is modified from invalid to valid, as shown in the following table. Figure 2

[0063] Embodiment 4

[0064] As shown in the following table. Figure 3 ​As shown, the embodiment of the present application also provides a personal Internet of Things high-sensitive data right confirmation device based on blockchain and NFT, comprising a CA server, a right confirmation server, an intelligent control terminal and a blockchain network.

[0065] The CA server is used to issue identity certificates for the user and the right confirmation server respectively, to ensure the security of the system; the intelligent control terminal is used for the user to connect and operate the Internet of Things device, and when high-sensitive data is generated in the operation of the Internet of Things device, immediately generate the digital fingerprint and the hash value of the high-sensitive data and initiate a data right confirmation request carrying the digital fingerprint and the hash value to the right confirmation server; the digital fingerprint includes the identity of the user and the timestamp t1 of the generation of the high-sensitive data; wherein the public key in the user identity certificate is used as the identity of the user; the right confirmation server is used to verify the identity of the user in the digital fingerprint after receiving the data right confirmation request, and when the verification is passed, sequentially process the high-sensitive data to be confirmed according to the chronological order of the timestamp t1 to generate metadata and temporarily store the metadata in the local cache area; the metadata includes the timestamp t3 when the metadata is generated and the hash value of the high-sensitive data; and is used to monitor the state of the blockchain network in real time, and when it is monitored that the state of the blockchain network is not crowded, sequentially send the metadata in the local cache area to the blockchain node according to the chronological order of the timestamp t3; the blockchain network comprises a plurality of blockchain nodes, each blockchain node is used to obtain the metadata and record the current timestamp t4, calculate whether the time difference between the timestamp t4 and the timestamp t3 exceeds the specified time difference, if yes, do not perform the current data right confirmation transaction, if not, obtain the hash value in the metadata, if the hash value corresponding to the right confirmed metadata does not exist on the chain, bind the metadata with the TokenID on the chain and generate an NFT right confirmation voucher.

[0066] It should be noted that the personal Internet of Things high-sensitive data right confirmation device based on blockchain and NFT provided by the embodiment of the present application is to realize the above-mentioned method embodiments, and its functions can be referred to the above-mentioned method embodiments, which will not be repeated here.

[0067] Finally, it should be pointed out that: the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: it can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement for part of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A personal IoT high-sensitive data rights confirmation method based on blockchain and NFT, characterized in that, Comprising: Step 1: The CA server issues identity certificates for the user and the authority server respectively, and uses the public key in the user identity certificate as the user's identity identifier; Step 2: The user connects the Internet of Things device through the intelligent control terminal, and when the intelligent control terminal operates the Internet of Things device to generate high sensitive data, the digital fingerprint and hash value of the high sensitive data are immediately generated and a data authority request carrying the digital fingerprint and hash value is initiated to the authority server; the digital fingerprint includes the user's identity identifier and the timestamp t1 of the generation of the high sensitive data; Step 3: After the authority server receives the data authority request, the user's identity identifier in the digital fingerprint is verified, and when the verification is passed, the high sensitive data to be authorized is sequentially processed by NFT tokenization according to the chronological order of the timestamp t1 to generate metadata and temporarily store the metadata in the local cache area; the metadata includes the timestamp t3 when the metadata is generated and the hash value of the high sensitive data; Step 4: The authority server monitors the state of the blockchain network in real time, and when it is monitored that the state of the blockchain network is not crowded, the metadata in the local cache area is sequentially sent to the blockchain node according to the chronological order of the timestamp t3; Step 5: The blockchain node acquires the metadata and records the current timestamp t4, calculates whether the time difference between the timestamp t4 and the timestamp t3 exceeds the specified time difference, if yes, the current data authority transaction is not performed, if not, the hash value in the metadata is acquired, if there is no authorized metadata corresponding to the hash value on the chain, the metadata is bound with the TokenID on the chain and the NFT authority certificate is generated; In step 3, the metadata further includes the user's identity identifier, the timestamp t1, the number of data to be authorized, the state information for indicating whether the metadata has been bound with the TokenID on the chain, and the signature of the authority server for the data authority request; Correspondingly, after the blockchain node acquires the metadata, it further includes: the blockchain node verifies whether the signature of the authority server is valid.

2. The blockchain and NFT-based personal IoT high-sensitive data right confirmation method according to claim 1, characterized in that, In step 2, the data authority request further includes: the user's signature for the high sensitive data; Correspondingly, in step 3, after the authority server receives the data authority request, it further includes: verifying whether the user's signature is valid, if valid, then continue to verify the user's identity identifier in the digital fingerprint.

3. The blockchain and NFT-based personal IoT high-sensitive data right confirmation method according to claim 1 or 2, characterized in that, In step 3, verifying the user's identity identifier in the digital fingerprint specifically includes: if the user's identity identifier extracted from the digital fingerprint is consistent with the identity identifier of the user sending the data authority request, the verification is passed, otherwise the verification is not passed.

4. The blockchain and NFT-based personal IoT high-sensitive data right confirmation method according to claim 1, characterized in that, In step 3, after the verification is passed, the authority server further signs the data authority request.

5. The blockchain and NFT-based personal IoT high-sensitive data right confirmation method according to claim 1, characterized in that, Further comprising: Statistically process the off-chain processing time of a plurality of high sensitive data and calculate the average value as the specified time difference. 6.A personal IoT high-sensitive data right confirmation device based on a blockchain and an NFT, characterized in that, Comprising a CA server, an authority server, an intelligent control terminal and a blockchain network; The CA server is configured to issue identity certificates for the user and the authority server respectively; The intelligent control terminal is used for user connection and operation of Internet of Things devices, and when high-sensitive data is generated in operation of the Internet of Things devices, immediately generates a digital fingerprint and a hash value of the high-sensitive data and initiates a data right confirmation request carrying the digital fingerprint and the hash value to the right confirmation server; the digital fingerprint includes an identity of the user and a timestamp t1 of generation of the high-sensitive data; wherein the public key in the user identity certificate is used as the identity of the user; The right confirmation server is used for, after receiving the data right confirmation request, verifying the identity of the user in the digital fingerprint, when the verification is passed, sequentially performing NFT tokenization processing on the high-sensitive data to be confirmed in the order of the timestamp t1 to generate metadata and temporarily storing the metadata in a local cache area; the metadata includes a timestamp t3 when the metadata is generated and a hash value of the high-sensitive data; and is used for real-time monitoring of a blockchain network state, when it is monitored that the blockchain network state is not crowded, sequentially sending the metadata in the local cache area to a blockchain node in the order of the timestamp t3; The blockchain network includes a plurality of blockchain nodes, each of which is used for obtaining the metadata and recording a current timestamp t4, calculating whether a time difference between the timestamp t4 and the timestamp t3 exceeds a specified time difference, if yes, not performing the current data right confirmation transaction, if no, obtaining the hash value in the metadata, if there is no right-confirmed metadata corresponding to the hash value on the chain, binding the metadata with a TokenID on the chain and generating an NFT right confirmation voucher; In the right confirmation server, the metadata further includes the identity of the user, the timestamp t1, a number of the data to be confirmed, state information used for representing whether the metadata has been bound with the TokenID on the chain, and a right confirmation server signature for the data right confirmation request; Correspondingly, the blockchain node obtaining the metadata further includes: the blockchain node verifying whether the right confirmation server signature is valid.

Images