A secure sharing method for industrial Internet of Things data

Abstract

The present invention provides a method for securely sharing industrial Internet of Things data, which belongs to the technical field of Internet of Things data sharing, and includes: data owners and data users publish registration information on a blockchain to obtain an initial reputation value; the data owner stores encrypted file data in a database and submits a data storage transaction to a blockchain member at the same time; the data user judges the reliability of the data by the reputation value of the data owner and determines the data file to be obtained; the data user checks whether his own reputation value is greater than the shared reputation threshold set by the data owner, and if so, initiates a data sharing request to the data owner; the data owner returns the encryption key of the data to the data user, and the data user obtains the data file through the data storage address and the encryption key, completing a data sharing transaction. The method can enhance the security of the Internet of Things data contribution process.

Description

Technical Field

[0001] The present invention belongs to the technical field of Internet of Things data sharing, and in particular relates to a method for securely sharing industrial Internet of Things data. Background Art

[0002] With the continuous development and implementation of the concept of industrial Internet of Things, a large number of intelligent sensor devices are deployed in industrial sites for data collection, and through high-reliability and low-power communication technology, real-time data processing and analysis are completed, which are widely used in fields such as smart factories, smart grids and smart medical care. At the same time, with the continuous increase in the amount of data, it is often difficult to provide high-quality product manufacturing and services relying solely on internal enterprise data. It is necessary to realize cross-enterprise and cross-industry data sharing in the industrial Internet of Things to improve resource allocation and production efficiency among industries.

[0003] Therefore, efficient and secure data sharing has become a research hotspot in the field of industrial Internet of Things. In the existing research schemes, there are still the following shortcomings: (1) Since the intelligent devices for data collection usually do not have sufficient data storage and processing capabilities, industrial data are usually stored in a centralized storage platform such as a cloud server, and a trusted third party processes the user's data storage and query requests. However, centralized data management is subject to attacks such as single point failure and denial of service, and the cloud server is not sufficiently trustworthy. When performing related operations, it will be curious about the user's privacy data; (2) The shared data may contain sensitive personal or corporate data, such as identity information or location information. The leakage of such data during the data sharing process will greatly damage the interests of the data owner, and thus the data owner will be unwilling to share the relevant data, forming a "data island" problem in the industrial Internet of Things. (3) In addition, malicious data owners may provide wrong data for sharing, thereby affecting the accuracy of data collected by honest participants. In the existing research schemes, such malicious participants are often difficult to track and revoke.

[0004] In summary, there is an urgent need for a secure industrial IoT data sharing method to protect the security and privacy of participants in the data sharing process, promote honest data interaction between nodes, and better promote cross-enterprise and cross-industry data sharing. Summary of the invention

[0005] In order to overcome the deficiencies of the above-mentioned prior art, the present invention provides a method for securely sharing industrial Internet of Things data.

[0006] In order to achieve the above object, the present invention provides the following technical solutions:

[0007] A secure sharing method for industrial Internet of Things data, comprising:

[0008] Data owners and data users initiate registration requests to the certificate agency and publish registration information on the blockchain to obtain initial reputation values;

[0009] The data owner stores the encrypted file data in the database and submits a data storage transaction to the blockchain. The data storage transaction includes: the data storage address, index value, reputation value of the data owner, and shared reputation threshold.

[0010] Data users retrieve data in the blockchain based on index values ​​and judge the reliability of data based on the reputation value of the data owner. After determining the data file to be obtained, the data user checks whether his or her own reputation value is greater than the shared reputation threshold set by the data owner. If so, a data sharing request is initiated to the data owner.

[0011] The data owner verifies the identity of the data user and checks the reputation value of the data user. If the sharing conditions are met, the data encryption key is returned to the data user and a data sharing transaction is submitted to the blockchain;

[0012] Data users obtain data files through data storage addresses and encryption keys to complete a data sharing transaction.

[0013] Furthermore, the data owner and data user initiate a registration request to the certificate agency and publish their registration information on the blockchain to obtain an initial reputation value; including:

[0014] The system administrator sets a security parameter λ;

[0015] The certificate agency CA selects the elliptic curve cryptography parameter params according to the parameter λ, and the finite field of params is F p ;

[0016] CA chooses a one-way hash function H:{0,1} * →F p , select a random number sk CA ∈F p As the private key, calculate the public key PK CA After the calculation is completed, CA publishes the public parameters {params,PK CA ,H};

[0017] According to the public parameters, blockchain members Pick a random number As its private key, further calculate its public key After the calculation is completed, the blockchain members jointly operate and maintain a blockchain ledger And publish the public key information of blockchain members on the blockchain;

[0018] User U in Industrial Internet of Things i , use the public parameters to generate the private key sk i and public key PK i , initiate a registration request to the CA (DID i ,PK i ), where DID i Represents a unique identification code; after receiving the request, CA uses the private key sk CA Sign an identity certificate Cert for the user i =sign((DID i ,PK i ),sk CA ) and send it to the user;

[0019] UserU i Initiate a registration request to the blockchain member (DID i ,PK i ,Cert i ), after verifying the identity of the user, the blockchain member initializes a reputation value RS for it i and publish its registration information (PK) on the blockchain through a consensus mechanism i ,RS i ).

[0020] Furthermore, the data owner stores the encrypted file data in the database and submits a data storage transaction to the blockchain member, including:

[0021] For a data file M i The data owner DO extracts the index keyword of this data file as KW i , using symmetric encryption to protect data M i , get the ciphertext CT i =Enc S (M i , K), K is the symmetric encryption key used for this encryption;

[0022] DO will ciphertext CT i Stored in a distributed database, the distributed database returns its storage address as

[0023] DO submits a data storage transaction to the blockchain member, including RS DO Represents the reputation value of DO, RS T represents the shared reputation threshold set by DO;

[0024] Blockchain members run smart contracts to verify the correctness of transactions. If the verification is completed, the data storage transaction is published on the blockchain through the consensus mechanism.

[0025] Furthermore, the data user retrieves data from the blockchain according to the index value and determines the reliability of the data according to the reputation value of the data owner; including:

[0026] The data user DU downloads the latest blockchain transaction block from the blockchain members, using the keyword KW i Retrieve relevant information through the reputation value RS of the data owner DO Determine the data files that need to be obtained.

[0027] Further, the data sharing request includes: (PK DU ,Cert DU ,trans id ), where trans id Indicates the transaction sequence number of this data storage transaction on the blockchain.

[0028] Furthermore, after the data owner verifies the identity of the data user and checks the reputation value of the data user, if the sharing conditions are met, the data encryption key is returned to the data user and a data sharing transaction is submitted to the blockchain members, including:

[0029] After receiving the request, DO passes Cert DU Verify the identity of DU and use PK DU Initiate a reputation query request to the blockchain member to verify whether RS DU >RS T If the verification is successful, a shared authorization information is returned to DU, and the shared authorization information includes (Enc S (K,K s )); K is the encryption key of the data, K s A shared secret key negotiated by both parties;

[0030] DO uploads a data sharing transaction (PK DO ,PK DU ,Cert DO ,Cert DU ,trans id ).

[0031] Furthermore, the data user obtains the data file through the data storage address and encryption key to complete a data sharing transaction, including:

[0032] After receiving the authorization information, DU uses the ECDH protocol to calculate K s , decrypt Enc S (K,K s ) obtain the encryption key K of the shared data;

[0033] DU based on the storage address in the data storage transaction Get the ciphertext CT from the distributed database i Then, using the key K and the decryption function Dec S (CT i ,K) completes decryption and obtains the plaintext M i ;

[0034] After receiving the data sharing transaction sent by DO, the blockchain members verify the correctness of the transaction and write the transaction into the blockchain through a consensus mechanism among the members.

[0035] Furthermore, it also includes:

[0036] DO chooses a random number r s ∈F p , calculate α=H(trans id ||r s2 ), using the blind signature technology, DO blinds α to Blind(α) and sends the result to DU;

[0037] After DU receives Blind(α), it uses blind signature technology and private key sk DU Sign the message and get σ'=sign(Blind(α),sk DU ), and returns the result to DO;

[0038] DO unblinding UnBlind(sign(Blind(α),sk DU )), get the signature of the message by DU σ = sign(α,sk DU ), DO is the rating token TK signed by DU DO =(α,σ);

[0039] DO gives DU a reputation rating based on its behavior in this data interaction. i ∈{0,1}, where: 1 means that DU has completed the data sharing transaction normally and reliably, and 0 means that DU has leaked DO's private data in the process; in the process of DU's reputation rating to DO, 1 means that DO has provided correct IIoT data, and 0 means that it has provided low-quality or erroneous data;

[0040] DO uses homomorphic encryption to protect the privacy of feedback values, namely C i =Enc T (re i ,PK A ), where the secret key PK used for homomorphic encryption A Generated and published by all blockchain members. In addition, DO uses the non-interactive zero-knowledge proof π DO →ZkPoK{(C i ,re i ):C i =Enc T (re i ,PK A )∧re i ∈{0,1}};

[0041] After the calculation is completed, DO submits a reputation rating feedback transaction (PK DU ,TK DO ,C i ,π DO );

[0042] Blockchain members verify the correctness of the reputation rating feedback transaction, including verifying the blind signature TK DO and non-interactive zero-knowledge proof π DO , the correct reputation feedback transactions are recorded in the blockchain through a consensus mechanism.

[0043] Furthermore, it also includes:

[0044] The blockchain periodically updates the user's reputation value. i After a certain time interval, the blockchain members elect a leader node, and the leader node runs the smart contract to control U i Reputation feedback value Aggregation is performed, and the aggregation result is C T , The blockchain leader publishes this result to all blockchain members;

[0045] According to the aggregation result C T , each blockchain member calculates part of the decryption parameters separately Send the decryption parameters to the leader node, which aggregates all the decryption parameters. Get the final aggregation result

[0046] The blockchain leader updates the user U based on the reputation aggregation results i The reputation value of is updated as

[0047] PR stands for positive reputation feedback. It means that DU honestly completes the data interaction process, and NR indicates negative reputation feedback;

[0048] Indicates that DU has committed fraud in the data exchange process, RS old and N old represents the reputation value and total number of reputation feedback of DU before this time period, and positive integers μ1 and μ2 represent the reward coefficient and penalty coefficient respectively;

[0049] Blockchain leaders will Submitted to the blockchain ledger as a reputation aggregation update transaction.

[0050] The secure sharing method of industrial Internet of Things data provided by the present invention has the following beneficial effects:

[0051] The present invention adopts blockchain technology for data management. As a decentralized, tamper-proof and verifiable public account book, blockchain provides transparent and traceable data transaction records for data participants. In addition, the present invention introduces a reputation mechanism in the data sharing process. The two parties involved in data sharing provide reputation feedback to each other based on their behavior, and aggregate and publish on the blockchain platform. The reputation value can be used to judge the credibility of nodes in the industrial Internet of Things. Honest participants will accumulate higher reputation values ​​in the data sharing process, while malicious participants will continuously reduce their reputation values ​​in the process. This solves the problem in the prior art that malicious data owners may provide erroneous data for sharing, thereby affecting the accuracy of data collected by honest participants. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] In order to more clearly illustrate the embodiment of the present invention and its design scheme, the following briefly introduces the drawings required for this embodiment. The drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0053] Figure 1 A schematic diagram of a method for securely sharing industrial Internet of Things data according to the present invention;

[0054] Figure 2 A schematic diagram of a data sharing process in an industrial Internet of Things according to an embodiment of the present invention;

[0055] Figure 3 A schematic diagram of a reputation feedback process in an industrial Internet of Things according to an embodiment of the present invention;

[0056] Figure 4 Schematic diagram of the reputation aggregation process in the industrial Internet of Things according to an embodiment of the present invention. DETAILED DESCRIPTION

[0057] In order to enable those skilled in the art to better understand the technical solution of the present invention and implement it, the present invention is described in detail below in conjunction with the accompanying drawings and specific embodiments. The following embodiments are only used to more clearly illustrate the technical solution of the present invention, and cannot be used to limit the scope of protection of the present invention.

[0058] Example:

[0059] The present invention provides a method for securely sharing industrial Internet of Things data, specifically: Figure 1 As shown, it includes: the data owner and the data user initiate a registration request to the certificate agency, and publish the registration information on the blockchain to obtain the initial reputation value; the data owner stores the encrypted file data in the database, and submits a data storage transaction to the blockchain members at the same time; the data storage transaction includes: the storage address of the data, the index value, the reputation value of the data owner, and the shared reputation threshold; the data user retrieves the data from the blockchain according to the index value, judges the reliability of the data by the reputation value of the data owner, and determines the data file to be obtained; after determining the data file to be obtained, the data user checks whether its own reputation value is greater than the shared reputation threshold set by the data owner, and if it is satisfied, initiates a data sharing request to the data owner; after the data owner verifies the identity of the data user and verifies the reputation value of the data user, if the sharing conditions are met, the encryption key of the data is returned to the data user, and a data sharing transaction is submitted to the blockchain members; the data user obtains the data file through the data storage address and encryption key to complete a data sharing transaction.

[0060] The following are specific embodiments of the present invention:

[0061] (1) The system administrator works with the certificate agency to publish public parameters. Blockchain members generate their own public and private keys based on the public parameters and publish their public key information in the blockchain ledger. Industrial Internet of Things users (including data users and data owners) generate public and private keys based on the public parameters, initiate registration requests to the certificate agency, and publish their registration information on the blockchain to obtain an initial reputation value.

[0062] (2) The registered data owner will encrypt the generated data file and store it in the distributed database, and submit a data storage transaction to the blockchain members, including the data storage address, index value, data owner's reputation value and shared reputation threshold. After verifying the correctness of this transaction, the blockchain members will record this transaction on the blockchain.

[0063] (3) Data users retrieve data from the blockchain based on the index value and judge the reliability of the data based on the reputation value of the data owner. After determining a data file that needs to be obtained, the data user checks whether its own reputation value is greater than the shared reputation threshold set by the data owner. If so, it initiates a data sharing request to the data owner. After the data owner verifies its identity and checks its reputation value, if the sharing conditions are met, the encryption key of the data is returned to the data user through a secure channel and a data sharing transaction is submitted to the blockchain members. The data user obtains the data file through the data storage address and encryption key, thus completing a data sharing transaction.

[0064] (4) After the transaction is completed, the two parties sharing data use blind signatures to sign a rating token for each other. After completion, based on the other party's behavior in this data sharing, the participant will choose a reputation feedback value and use homomorphic encryption to protect the privacy of this feedback. The participant submits a reputation feedback transaction to the blockchain member, including a rating token, the encrypted feedback value and a non-interactive zero-knowledge proof to prove the correctness of this feedback value without revealing the specific feedback value.

[0065] (5) After a fixed period of time, for each registered user in the blockchain, the blockchain members will run a smart contract to aggregate all reputation feedback values ​​about it and update its reputation score.

[0066] Specifically, step (1) is:

[0067] 1.1 During initialization, the system administrator sets a security parameter λ. The certificate agency (CA) selects appropriate elliptic curve cryptography (ECC) parameters params based on the parameter λ. Assume that the selected finite field is F p , CA further selects a one-way hash function H:{0,1} * →F p , and select a random number sk CA ∈F p As the private key, calculate the public key PK CA After the calculation is completed, CA publishes the public parameters {params,PK CA ,H};

[0068] 1.2 Based on public parameters, blockchain members Pick a random number As its private key, further calculate its public key After the calculation is completed, the blockchain members jointly operate and maintain a blockchain ledger And publish their public key information on the blockchain;

[0069] 1.3 User U in Industrial Internet of Things i , use the public parameters to generate the private key sk i and public key PK i , initiate a registration request to the CA (DID i ,PK i ), where DID i Represents a unique identification code. After receiving the request, CA uses the private key sk CA Sign an identity certificate Cert for the user i =sign((DID i ,PK i ),sk CA ) and sent to the user. Finally, the user initiates a registration request (DID i ,PK i ,Cert i ), after verifying the identity of the user, the blockchain member initializes a reputation value RS for it i and publish its registration information (PK) on the blockchain through a consensus mechanism i ,RS i ).

[0070] Specifically, step (2) is:

[0071] 2.1 For a data file M i The data owner (DO) extracts the index keyword of this data file as KW i , using symmetric encryption to protect data M i , get the ciphertext CT i =Enc S (M i ,K), K is the symmetric encryption key used for this encryption, DO converts the ciphertext CT i Stored in a distributed database, the distributed database returns its storage address as

[0072] 2.2DO submits a data storage transaction to the blockchain member, including RS DO Represents the reputation value of DO, RS T Indicates the shared reputation threshold set by DO, that is, the reputation value of the user who obtains this shared data must be greater than this threshold;

[0073] 2.3 Blockchain members run smart contracts to verify the correctness of the transaction. If the verification is completed, the transaction is published on the blockchain through the consensus mechanism.

[0074] Specifically, step (3) is:

[0075] 3.1 Data User (DU) will download the latest blockchain transaction block from the blockchain members, using the keyword KW i Retrieve relevant information. The credibility of the data can be obtained from the reputation value RS of the data owner. DO Reflect. At the same time, DU checks its own reputation value R DU Whether it meets the reputation threshold R set by the data owner T , that is, whether RS ​​is satisfied DU >RS T , if satisfied, a data sharing request is sent to DO, including (PK DU ,Cert DU ,trans id ), where trans id Indicates the transaction sequence number of this data storage transaction on the blockchain;

[0076] 3.2 After receiving the request, DO passes Cert DU Verify the identity of DU and use PK DU Initiate a reputation query request to the blockchain member to verify whether RS DU >RS T If the verification is successful, a shared authorization message is returned to DU, including (Enc S (K,K s ), where K is the encryption key of the data, K s The shared secret key negotiated by both parties can be selected using the ECDH protocol. At the same time, DO uploads a data sharing transaction (PK DO ,PK DU ,Cert DO ,Cert DU ,trans id );

[0077] 3.3 After receiving the authorization information, DU uses the ECDH protocol to calculate K s , decrypt Enc S (K,K s ) can obtain the encryption key K of the shared data. DU uses the storage address in the data storage transaction Get the ciphertext CT from the distributed database i , and finally use the key K and decryption function Dec S (CT i ,K) completes decryption and obtains the plaintext M i ;

[0078] 3.4 After receiving the data sharing transaction sent by DO, the blockchain members verify the correctness of the transaction and write the transaction into the blockchain through a consensus mechanism among the members.

[0079] Specifically, step (4) is:

[0080] 4.1DO choose a random number r s ∈F p , calculate α=H(trans id ||r s2 ), using the blind signature technology, DO blinds α to Blind(α) and sends the result to DU;

[0081] 4.2 After DU receives Blind(α), it uses blind signature technology and private key sk DU Sign the message and get σ'=sign(Blind(α),sk DU ), and returns the result to DO;

[0082] 4.3DO Unblind(sign(Blind(α),sk DU )), get the signature of the message by DU σ = sign(α,sk DU ), DO is the rating token TK signed by DU DO =(α,σ);

[0083] 4.4DO will give a reputation rating feedback to DU based on its behavior in this data interaction. i ∈{0,1}, 1 means that DU has completed the data sharing transaction normally and reliably, and 0 means that DU has leaked DO's private data in the process. (In the process of DU's reputation rating to DO, 1 means that DO provides correct industrial IoT data, and 0 means that it provides low-quality or wrong data.) DO uses homomorphic encryption to protect the privacy of feedback values, that is, C i =Enc T (re i ,PK A ), where the secret key PK used for homomorphic encryption A Generated and published by all blockchain members. In addition, DO uses the non-interactive zero-knowledge proof π DO →ZkPoK{(C i ,re i 0:C i =Enc T (re i ,PK A )∧re i ∈{0,1}}, that is, proof encryption feedback C i It is encrypted by plaintext within the specified range but does not disclose the specific plaintext information. After the calculation is completed, DO submits a reputation rating feedback transaction (PKDU ,TK DO ,C i ,π DO );

[0084] 4.5 Blockchain members verify the correctness of this transaction, including verifying the blind signature TK DO and non-interactive zero-knowledge proof π DO , the correct reputation feedback transactions are recorded in the blockchain through a consensus mechanism.

[0085] Specifically, step (5) is:

[0086] 5.1 The blockchain will regularly update the user's reputation value. i After a certain time interval, the blockchain members elect a leader node, which will run the smart contract to perform the U i Reputation feedback value Aggregation is performed, and the aggregation result is C T , The blockchain leader publishes this result to all blockchain members;

[0087] 5.2 Based on the aggregation results C T , each blockchain member calculates part of the decryption parameters separately Send the decryption parameters to the leader node, which aggregates all the decryption parameters. Get the final aggregation result

[0088] 5.3 Blockchain leader updates user U based on reputation aggregation results i The reputation value of is updated as PR stands for positive reputation feedback. It means that DU honestly completed the data exchange process, while NR indicates negative reputation feedback. Indicates that DU has committed fraud in the data exchange process, RS old and N old Represents the reputation value and total reputation feedback number of DU before this time period. The positive integers μ1 and μ2 represent the reward coefficient and penalty coefficient respectively, which are set by the system according to security requirements.

[0089] 5.4 Finally, blockchain leaders will Submitted to the blockchain ledger as a reputation aggregation update transaction, available for review and verification by all members.

[0090] Compared with the prior art, the present invention has the advantages that:

[0091] In the existing technology, industrial IoT data is generally stored in cloud servers and centrally managed by trusted third parties, which are vulnerable to single point failures and denial of service attacks. The present invention combines blockchain technology with distributed databases. Data is stored in a distributed database off the chain and indexed on the blockchain, achieving efficient storage, query and sharing of data. At the same time, due to the decentralized and tamper-proof nature of blockchain, the present invention can provide higher reliability and security.

[0092] In the existing technology, most data sharing methods do not consider the existence of malicious participants, that is, the participants may leak private data or provide erroneous data. The present invention introduces a reputation mechanism to regulate the behavior of data participants. Honest participants will continuously accumulate and increase their reputation values ​​after data interaction, while malicious participants will continuously reduce their own reputation values ​​due to malicious behavior. In addition, the present invention stipulates that only users who meet a certain reputation threshold can share data, thereby suppressing such malicious behavior.

[0093] Since the participants need to provide reputation feedback for each other's behavior after completing data sharing, the present invention uses privacy protection technology to protect the personal privacy of the feedback provider, including: blind signature, homomorphic encryption, and zero-knowledge proof. The blind signature technology makes it impossible for malicious participants to link the feedback provider with the real IoT user. At the same time, homomorphic encryption and zero-knowledge proof can protect the confidentiality of the reputation feedback value and ensure that the encrypted reputation feedback is within the correct range.

[0094] The embodiments described above are only preferred specific implementation modes of the present invention, and the protection scope of the present invention is not limited thereto. Any simple changes or equivalent replacements of the technical solutions that can be obviously obtained by any technician familiar with the field within the technical scope disclosed in the present invention belong to the protection scope of the present invention.

Claims

1. A method for securely sharing industrial Internet of Things data, characterized in that: include: Data owners and data users initiate registration requests to the certificate agency and publish registration information on the blockchain to obtain initial reputation values; The data owner stores the encrypted file data in the database and submits a data storage transaction to the blockchain; Data storage transactions include: data storage address, index value, data owner’s reputation value, and shared reputation threshold; Data users retrieve data in the blockchain based on index values ​​and judge the reliability of data based on the reputation value of the data owner. After determining the data file to be obtained, the data user checks whether his or her own reputation value is greater than the shared reputation threshold set by the data owner. If so, a data sharing request is initiated to the data owner. After receiving the sharing request, the data owner verifies the identity of the data user and checks the reputation value of the data user. If the sharing conditions are met, the encryption key of the data is returned to the data user and a data sharing transaction is submitted to the blockchain; Data users obtain data files through the data storage address and encryption key in the blockchain to complete a data sharing transaction; The data owner and data user initiate a registration request to the certificate agency and publish their registration information on the blockchain to obtain an initial reputation value; including: The system administrator sets a security parameter λ; The certificate agency CA selects the elliptic curve cryptography parameter params according to the parameter λ, and the finite field of params is F p ; CA chooses a one-way hash function H:{0,1} * →F p , select a random number sk CA ∈F p As the private key, calculate the public key PK CA After the calculation is completed, CA publishes the public parameters {params,PK CA ,H}; According to the public parameters, blockchain members Pick a random number As its private key, further calculate its public key After the calculation is completed, the blockchain members jointly operate and maintain a blockchain ledger And publish the public key information of blockchain members on the blockchain; User U in Industrial Internet of Things i , use the public parameters to generate the private key sk i and public key PK i , initiate a registration request to the CA (DID i ,PK i ), where DID i Represents a unique identification code; after receiving the request, CA uses the private key sk CA Sign an identity certificate Cert for the user i =sign((DID i ,PK i ),sk CA ) and send it to the user; UserU i Initiate a registration request to the blockchain member (DID i ,PK i ,Cert i ), after verifying the identity of the user, the blockchain member initializes a reputation value RS for it i and publish its registration information (PK) on the blockchain through a consensus mechanism i ,RS i ); The data owner stores the encrypted file data in the database and submits a data storage transaction to the blockchain member, including: For a data file M i The data owner DO extracts the index keyword of this data file as KW i , using symmetric encryption to protect data M i , get the ciphertext CT i =Enc S (M i , K), K is the symmetric encryption key used for this encryption; DO will ciphertext CT i Stored in a distributed database, the distributed database returns its storage address as DO submits a data storage transaction to the blockchain member, including (KW i ,PK DO ,Cert DO , RS DO ,RS T ), where RS DO Represents the reputation value of DO, RS T represents the shared reputation threshold set by DO; Blockchain members run smart contracts to verify the correctness of transactions. If the verification is successful, the data storage transaction is published on the blockchain through the consensus mechanism; DO chooses a random number r s ∈F p , calculate α=H(trans id ||r s ), using the blind signature technology, DO blinds α to Blind(α) and sends the result to the data user DU; After DU receives Blind(α), it uses blind signature technology and private key sk DU Sign the message and get σ'=sign(Blind(α),sk DU ), and returns the result to DO; DO unblinding UnBlind(sign(Blind(α),sk DU )), get the signature of the message by DU σ = sign(α,sk DU ), DO is the rating token TK signed by DU DO =(α,σ); DO gives DU a reputation rating based on its behavior in this data interaction. i ∈{0,1}, where: 1 means that DU has completed the data sharing transaction normally and reliably, and 0 means that DU has leaked DO's private data in the process; in the process of DU's reputation rating to DO, 1 means that DO has provided correct IIoT data, and 0 means that it has provided low-quality or erroneous data; DO uses homomorphic encryption to protect the privacy of feedback values, namely C i =Enc T (re i ,PK A ), where the secret key PK used for homomorphic encryption A Generated and published by all blockchain members. In addition, DO uses the non-interactive zero-knowledge proof π DO →ZkPoK{(C i ,re i ):C i =Enc T (re i ,PK A )∧re i ∈{0,1}}; After the calculation is completed, DO submits a reputation rating feedback transaction (PK DU ,TK DO ,C i ,π DO ); Blockchain members verify the correctness of the reputation rating feedback transaction, including verifying the blind signature TK DO and non-interactive zero-knowledge proof π DO , the correct reputation feedback transactions are recorded in the blockchain through a consensus mechanism; The blockchain periodically updates the user's reputation value. i After a certain time interval, the blockchain members elect a leader node, and the leader node runs the smart contract to control U i Reputation feedback value Aggregation is performed, and the aggregation result is C T , The blockchain leader publishes this result to all blockchain members; According to the aggregation result C T , each blockchain member calculates part of the decryption parameters separately Send the decryption parameters to the leader node, which aggregates all the decryption parameters. Get the final aggregation result The blockchain leader updates the user U based on the reputation aggregation results i The reputation value of is updated as PR stands for positive reputation feedback. It means that DU honestly completes the data interaction process, and NR indicates negative reputation feedback; Indicates that DU has committed fraud in the data exchange process, RS old and N old represents the reputation value and total number of reputation feedback of DU before this time period, and positive integers μ1 and μ2 represent the reward coefficient and penalty coefficient respectively; Blockchain leaders will (PK DU ,RS new ,N new ,C T , De1,…, ) is submitted to the blockchain ledger as a reputation aggregation update transaction.

2. According to claim 1, a method for securely sharing industrial Internet of Things data is characterized in that: The data user retrieves data from the blockchain according to the index value and determines the reliability of the data according to the reputation value of the data owner; including: Data user DU downloads the latest blockchain transaction block from blockchain members, using keyword KW i Retrieve relevant information through the reputation value RS of the data owner DO Determine the data files that need to be obtained.

3. A method for securely sharing industrial Internet of Things data according to claim 2, characterized in that: The data sharing request includes: DU ,Cert DU ,trans id ), where trans id Indicates the transaction sequence number of this data storage transaction on the blockchain.

4. A method for securely sharing industrial Internet of Things data according to claim 3, characterized in that: After the data owner verifies the identity of the data user and checks the reputation value of the data user, if the sharing conditions are met, the data encryption key is returned to the data user and a data sharing transaction is submitted to the blockchain members, including: After receiving the request, DO passes Cert DU Verify the identity of DU and use PK DU Initiate a reputation query request to the blockchain member to verify whether RS DU >RS T If the verification is successful, a shared authorization information is returned to DU, and the shared authorization information includes (Enc S (K,K s )); K is the encryption key of the data, K s A shared secret key negotiated by both parties; DO uploads a data sharing transaction (PK DO ,PK DU ,Cert DO ,Cert DU ,trans id ).

5. A method for securely sharing industrial Internet of Things data according to claim 4, characterized in that: The data user obtains the data file through the data storage address and encryption key to complete a data sharing transaction, including: After receiving the authorization information, DU uses the ECDH protocol to calculate K s , decrypt Enc S (K,K s ) obtain the encryption key K of the shared data; DU based on the storage address in the data storage transaction Get the ciphertext CT from the distributed database i Then, using the key K and the decryption function Dec S (CT i ,K) completes decryption and obtains the plaintext M i ; After receiving the data sharing transaction sent by DO, the blockchain members verify the correctness of the transaction and write the transaction into the blockchain through a consensus mechanism among the members.

Images