A method and system for realizing government affair data exchange based on a blockchain

Abstract

The application discloses a kind of based on block chain and realizes the method and system of government affair data exchange, it is related to data exchange field, the method includes the following steps:Step1: control plane and data plane decoupling is carried out, and the function module for data processing on and under block chain is deployed;Step2: government affair data publishing personnel uploads the government affair data item to be exchanged, carries out adaptive format conversion, and publishes metadata and passes through data access authority method;Step3: obtain the upload and publication data in Step2, and build shared data item on block chain;The application introduces a kind of two-way check mechanism, real-time check is carried out to uploaded and downloaded data, when facing network failure and the like cause data loss, can automatically detect and respond in time, avoid the cumbersome step of artificial check, by real-time comparison the consistency of uploaded and downloaded data, and any abnormal data is tracked, ensure the integrity and authenticity of data in transmission process.

Description

Technical Field

[0001] This invention relates to the field of data exchange technology, specifically to a method and system for realizing government data exchange based on blockchain. Background Technology

[0002] With the continuous construction and application of national e-government integration, data resource sharing plays an increasingly important role in the construction of digital government. Digital government construction has become a national strategy, and the focus of digital government construction is to achieve orderly sharing of data resources. At the national level, we will continue to strengthen top-level design, coordinate deployment, and promote overall progress to facilitate cross-regional, cross-departmental, and cross-level data sharing and business collaboration in government services, ensure the quality of shared government data resources, clarify the rights and interests of all parties involved in government data sharing, unleash the potential of government data to support decision-making and consultation, strengthen the protection of the security of dynamic government data, and ensure high-quality and orderly sharing of government data.

[0003] However, existing technologies for exchanging government data still have certain shortcomings, including:

[0004] 1. The lack of a two-way verification mechanism for uploaded and downloaded data makes it easy for data to be tampered with during circulation, or for data to be lost due to network failures or other reasons. The manual verification process is quite troublesome, which greatly interferes with the normal circulation of data. It is difficult to verify whether uploaded and downloaded data match in real time, and it is also difficult to track abnormal data.

[0005] 2. The lack of encryption measures for the verification process makes it easy for information to be leaked on the transmission link during the verification process. The lack of encryption for the traceability process makes it difficult to guarantee information security and has certain limitations. Summary of the Invention

[0006] (a) Technical problems to be solved

[0007] In view of the above-mentioned shortcomings of the existing technology, the present invention provides a method and system for realizing government data exchange based on blockchain, which can effectively solve the problems of the existing technology.

[0008] (II) Technical Data Solution

[0009] To achieve the above objectives, the present invention is implemented through the following technical data solutions.

[0010] This invention discloses a method for exchanging government data based on blockchain, comprising the following steps:

[0011] Step 1: Decouple the control plane from the data plane and deploy functional modules for data processing on and off the blockchain;

[0012] Step 2: Government data publishers upload the government data items to be exchanged, perform format conversion for compatibility, and publish metadata and data access permission methods;

[0013] Step 3: Obtain the uploaded and published data from Step 2, and construct shared data items on the blockchain;

[0014] Step 4: Connect to shared data items, run the verification model, analyze whether the data flow in the data upload and download links matches, and mark and trace the data when there is no matching data in the flow.

[0015] Step 5: Obtain the traceability information of the tagged data and generate an inspection report to the management endpoint;

[0016] Step 6: Package the verified data, connect the data package to the associated identity information, bind it, register and save it;

[0017] Step 7: Users access the platform, initiate a data access request, and after identity verification, authorization is granted on the blockchain. Users can then query the data they need from the published data.

[0018] Step 8: The user remotely retrieves the data, performs analysis and processing, and then ends the access.

[0019] Furthermore, the attributes of the government data items in Step 2 include: data identifier, metadata, data fingerprint, data provider, data release time, validity period, data access permission, data acquisition method, and additional condition information.

[0020] Furthermore, the verification model in Step 4 performs bidirectional decryption in the encrypted environment based on the symmetric encryption algorithm used in the current transmission link, obtains the original uploaded and downloaded data for matching, and clears the buffer generated by decryption after the matching is completed.

[0021] Furthermore, in Step 4, when tracing the source of the data, the data needs to be reconstructed, divided into several data blocks, and calculated using the Lagrange interpolation method.

[0022] Furthermore, in Step 7, after the user queries the required data, they initiate a data request to apply for data access permission. The government data publisher makes a judgment based on the data user's request. If the judgment fails, the user's request is rejected and a prompt is given. If the request is approved, access control permissions are granted on the blockchain, and the data resource access method is returned to the user in an encrypted manner.

[0023] Furthermore, in Step 7, if a user obtains data access authorization on the blockchain, the management end transmits the data under the blockchain through an encrypted channel.

[0024] Furthermore, in Step 8, after obtaining the data, the user decrypts it to obtain the data resource access method, remotely accesses and obtains the data resource. The management terminal determines whether the user has the permission to obtain the data based on the authorization information on the chain. If the permission is granted, the data resource is transmitted to the user through an encrypted channel. If the permission is denied, the access link is cut off.

[0025] Furthermore, the data resources acquired in Step 8 can be selected to be transmitted to the user's local machine for processing, or transmitted to a trusted computing environment for processing. If the data is transmitted to a trusted computing environment for processing, the data processing service is used to perform the calculations, and then the results are returned to the user's local machine.

[0026] A system for exchanging government data based on blockchain includes:

[0027] The management console is used to manage the global functional console and to send and edit control commands.

[0028] The publishing end is used by government data publishers to publish shared data and establish a shared data chain;

[0029] The approval panel is used to approve published data, remove invalid and erroneous data, and approve access requests.

[0030] The blockchain access point is used to transmit the submitted data to the blockchain share and configure the appropriate transmission channel;

[0031] The user-side interface is used to verify user identity information, and grants login permissions after successful verification.

[0032] The application side provides an interface for data querying and submitting data access requests.

[0033] The computing end is used to perform calculations on the data using data processing services;

[0034] The verification end is used to verify the matching of uploaded and downloaded data, mark abnormal data, and trace its source.

[0035] Furthermore, the management terminal and the blockchain access terminal are connected via a wireless network, the publishing terminal and the approval terminal are connected via a wireless network, the approval terminal and the blockchain access terminal are connected via a wireless network, the user terminal and the application terminal are connected via a wireless network, the application terminal and the blockchain access terminal are connected via a wireless network, the verification terminal and the computing terminal are connected via a wireless network, and the computing terminal and the blockchain access terminal are connected via a wireless network.

[0036] (III) Beneficial Effects

[0037] Compared with known prior art, the technical data solution provided by this invention has the following beneficial effects:

[0038] 1. By adding a two-way verification mechanism for uploaded and downloaded data, data is prevented from being tampered with during circulation. If data is lost due to network failure or other reasons, it can be detected in a timely manner without the need for manual verification, which is more convenient and avoids causing significant interference to the normal flow of data. It can check whether uploaded and downloaded data match in real time and track abnormal data.

[0039] 2. By adding encryption measures to the verification process, the transmission link is protected during the verification process to prevent leakage and ensure the security of the traceability process, further reducing potential risks. Attached Figure Description

[0040] To more clearly illustrate the technical data solutions in the embodiments of the present invention or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely some embodiments of the present invention, and those skilled in the art can obtain other drawings based on these drawings without any creative effort.

[0041] Figure 1 This is a flowchart illustrating a method for exchanging government data based on blockchain.

[0042] Figure 2 A schematic diagram of the framework of a system for exchanging government data based on blockchain;

[0043] The numbers in the diagram represent: 1. Management end; 2. Publishing end; 3. Approval end; 4. Blockchain access end; 5. User end; 6. Application end; 7. Calculation end; 8. Verification end. Detailed Implementation

[0044] To make the objectives, technical data solutions, and advantages of the embodiments of the present invention clearer, the technical data solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.

[0045] The present invention will be further described below with reference to embodiments.

[0046] Example 1

[0047] This embodiment presents a method for exchanging government data based on blockchain, such as... Figure 1 As shown, it includes the following steps:

[0048] Step 1: Decouple the control plane from the data plane and deploy functional modules for data processing on and off the blockchain;

[0049] Step 2: Government data publishers upload the government data items to be exchanged, perform format conversion for compatibility, and publish metadata and data access permission methods;

[0050] Step 3: Obtain the uploaded and published data from Step 2, and construct shared data items on the blockchain;

[0051] Step 4: Connect to shared data items, run the verification model, analyze whether the data flow in the data upload and download links matches, and mark and trace the data when there is no matching data in the flow.

[0052] Step 5: Obtain the traceability information of the tagged data and generate an inspection report to the management endpoint;

[0053] Step 6: Package the verified data, connect the data package to the associated identity information, bind it, register and save it;

[0054] Step 7: Users access the platform, initiate a data access request, and after identity verification, authorization is granted on the blockchain. Users can then query the data they need from the published data.

[0055] Step 8: The user remotely retrieves the data, performs analysis and processing, and then ends the access.

[0056] As a preferred implementation in this embodiment, the attributes of the government data items in Step 2 include: data identifier, metadata, data fingerprint, data provider, data release time, validity period, data access permission, data acquisition method, and additional condition information.

[0057] As a preferred implementation method in this embodiment, the verification model in Step 4 performs bidirectional decryption in the encrypted environment based on the symmetric encryption algorithm used in the current transmission link, obtains the original uploaded and downloaded data for matching, and clears the buffer generated by decryption after the matching is completed.

[0058] In this embodiment, when tracing the data in Step 4, the data needs to be reconstructed, divided into several data blocks, and then calculated using the Lagrange interpolation method.

[0059] In this embodiment, after the user queries the required data in Step 7, the user initiates a data request to apply for data access permission. The government data publisher judges the request based on the data user's request. If the judgment fails, the user's request is rejected and a prompt is given. If the request is approved, access control permission is granted on the blockchain, and the data resource access method is returned to the user in an encrypted manner.

[0060] In this embodiment, if the user obtains data access authorization on the blockchain in Step 7, the management terminal transmits the data under the blockchain through an encrypted channel.

[0061] In this embodiment, after obtaining the data in Step 8, the user decrypts the data resource access method, remotely accesses and obtains the data resource. The management terminal determines whether the user has the permission to obtain the data based on the authorization information on the chain. If the user is authorized, the data resource is transmitted to the user through an encrypted channel. If the user is not authorized, the access link is cut off.

[0062] In this embodiment, the data resources obtained in Step 8 can be selected to be transmitted to the user's local machine for processing, or to a trusted computing environment for processing. If the data is selected to be transmitted to a trusted computing environment for processing, the data processing service is used to perform the calculations, and then the results are returned to the user's local machine.

[0063] In this embodiment, a two-way verification mechanism is implemented for uploaded and downloaded data to prevent data from being tampered with during the flow of data. When data is lost due to network failure or other reasons, it can be known in a timely manner without the need for manual verification, which is more convenient and avoids causing significant interference to the normal flow of data. It can check whether the uploaded and downloaded data match in real time and track abnormal data.

[0064] Blockchain, with its advantages of decentralization, traceability, and immutability, can provide strong security for transaction information. In the Ethereum blockchain, consensus nodes can manage and execute smart contracts deployed on the blockchain through a peer-to-peer network. In this invention, smart contracts are used to build secure execution protocols to achieve secure key management, integrity auditing, and fair payment mechanisms.

[0065] Example 2

[0066] At other levels, this embodiment also provides a system for exchanging government data based on blockchain, such as... Figure 2 As shown, management terminal 1 is used to manage the global function terminals and send and edit control commands;

[0067] Release terminal 2 is used by government data publishers to release shared data and establish a shared data chain;

[0068] Approval terminal 3 is used to approve the published data, remove invalid and erroneous data, and approve access requests.

[0069] Blockchain access terminal 4 is used to transmit the submitted data to the blockchain share and configure the appropriate transmission channel;

[0070] User terminal 5 is used to verify user identity information. Login permissions are granted after successful verification.

[0071] Application Terminal 6 is used to provide an interface for data querying and to submit data access requests.

[0072] Calculation terminal 7 is used to perform calculations on the data using data processing services;

[0073] Verification terminal 8 is used to verify the matching of uploaded and downloaded data, mark abnormal data, and trace its source.

[0074] In this embodiment, as Figure 2 As shown, the management terminal 1 and the blockchain access terminal 4 are connected via a wireless network; the publishing terminal 2 and the approval terminal 3 are connected via a wireless network; the approval terminal 3 and the blockchain access terminal 4 are connected via a wireless network; the user terminal 5 and the application terminal 6 are connected via a wireless network; the application terminal 6 and the blockchain access terminal 4 are connected via a wireless network; the verification terminal 8 and the computing terminal 7 are connected via a wireless network; and the computing terminal 7 and the blockchain access terminal 4 are connected via a wireless network.

[0075] In this embodiment, the verification process is encrypted to protect the transmission link during the verification process, prevent leakage, ensure the security of the traceability process, and further reduce potential risks.

[0076] When a data disclosure scheme is proposed, it must include a valid integrity verification protocol. This protocol ensures that if data on a cloud server is lost or damaged, the cloud storage service provider will be unable to verify the data and will promptly return a signal indicating incompleteness. The scheme must guarantee the confidentiality and security of data during upload and storage. During integrity verification, neither external nor internal adversaries should be able to access user data privacy information. The scheme must also ensure fair transactions between users and cloud storage service providers. When a user detects that the cloud data is complete, they must pay the corresponding fees for cloud storage services. If the cloud data is incomplete, i.e., lost or damaged, the cloud storage service provider must be held accountable and provide appropriate compensation to the user. This scheme will use smart contracts to build a secure transaction protocol to ensure fair storage payments between both parties. During the data download phase, due to hardware / software failures or network latency, downloaded data may be lost or damaged during transmission. In this case, users may not be able to download the correct original data. Therefore, the scheme needs to check whether the downloaded data is consistent with the uploaded original data. Users can use blockchain technology to verify the correctness of the downloaded data.

[0077] On the data plane, the functions of storing, transmitting, and computing the shared data ontology are completed. Data is stored locally without changing the existing data storage model. Only a small amount of data index and permission information is submitted to the blockchain. Data is transmitted in encrypted form. Data users obtain data access authorization on the chain. Data publishers transmit data off-chain through encrypted channels to ensure data transmission security. Relying on a trusted computing environment, a data processing sandbox is built to complete data processing and computing, ensuring that data is not leaked.

[0078] Example 3

[0079] In this embodiment, the data regulator transparently audits the data sharing and exchange process on the blockchain. Data flow control strategies and the entire sharing process are all recorded on the blockchain, satisfying the data regulator's requirements for defining the responsibilities of sharing entities, data accountability, and data leakage accountability. The blockchain is used to record and measure data provision and usage behavior, establishing a ledger for data auditing and billing. Based on this ledger, an incentive mechanism for open data sharing can be designed to encourage data owners to actively provide data, expand data acquisition channels and willingness, help users obtain fresh and valuable data on demand, promote data flow, revitalize data usage value, and achieve a leap from data aggregation to data operation capabilities.

[0080] Working principle: When in use, this invention implements a two-way verification mechanism for uploaded and downloaded data, preventing data from being tampered with during the flow of data. When data is lost due to network failure or other reasons, it can be detected in a timely manner without the need for manual verification, which is more convenient and avoids causing significant interference to the normal flow of data. It can verify whether the uploaded and downloaded data match in real time and track abnormal data.

[0081] Encrypting the verification process protects the transmission link during verification, prevents leakage, ensures the security of the traceability process, and further reduces potential risks.

[0082] Data regulators can transparently audit the data sharing and exchange process on the blockchain. Data flow control strategies and the entire sharing process are all on the blockchain, which meets the data regulators' requirements for defining the responsibilities of sharing entities, data accountability, and data leakage accountability. The blockchain is used to record and measure data provision and data usage behavior, and establish a data audit and billing ledger. Based on this ledger, incentive mechanisms for data sharing and openness can be designed to encourage data owners to actively provide data, expand the channels and willingness to obtain data, help users obtain fresh and valuable data on demand, promote data flow, revitalize the value of data use, and realize the leap from data collection to data operation capabilities.

[0083] Leveraging the advantages of blockchain technology to establish an innovative data sharing and exchange model, empowering government service innovation, enabling cross-departmental and cross-regional data sharing and utilization in e-government, promoting the orderly and efficient flow of data production factors within the region, and improving the intelligence and precision of urban management. In the government sector, it is mainly applied to government data sharing, financial supervision, and electronic invoices.

[0084] The above embodiments are only used to illustrate the technical data solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical data solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions will not cause the essence of the corresponding technical data solutions to deviate from the spirit and scope of the technical data solutions of the embodiments of the present invention.

Claims

1. A method for exchanging government data based on blockchain, characterized in that, Includes the following steps: Step 1: Decouple the control plane from the data plane and deploy functional modules for data processing on and off the blockchain; Step 2: Government data publishers upload the government data items to be exchanged, perform format conversion for compatibility, and publish metadata and data access permission methods; Step 3: Obtain the uploaded and published data from Step 2, and construct shared data items on the blockchain; Step 4: Connect to shared data items, run the verification model, analyze whether the data flow in the data upload and download links matches, and mark and trace the data when there is no matching data in the flow. Step 5: Obtain the traceability information of the tagged data and generate an inspection report to the management endpoint; Step 6: Package the verified data, connect the data package to the associated identity information, bind it, register and save it; Step 7: Users access the platform, initiate a data access request, and after identity verification, authorization is granted on the blockchain. Users can then query the data they need from the published data. Step 8: The user remotely retrieves the data, performs analysis and processing, and then ends the access; In Step 4, the verification model performs bidirectional decryption in the encrypted environment based on the symmetric encryption algorithm used in the current transmission link, obtains the original uploaded and downloaded data for matching, and clears the buffer generated by decryption after the matching is completed. In Step 4, when tracing the source of the data, the data needs to be reconstructed, divided into several data blocks, and then calculated using the Lagrange interpolation method.

2. The method for exchanging government data based on blockchain according to claim 1, characterized in that, The attributes of the government data items in Step 2 include: data identifier, metadata, data fingerprint, data provider, data release time, validity period, data access permission, data acquisition method, and additional conditions.

3. The method for exchanging government data based on blockchain according to claim 1, characterized in that, In Step 7, after the user queries the required data, they initiate a data request to apply for data access permission. The government data publisher judges the data user's request. If the judgment fails, the user's request is rejected and a prompt is given. If the request is approved, access control permission is granted on the blockchain, and the data resource access method is returned to the user in an encrypted manner.

4. The method for exchanging government data based on blockchain according to claim 1, characterized in that, In Step 7, if a user obtains data access authorization on the blockchain, the management end transmits the data under the blockchain through an encrypted channel.

5. The method for exchanging government data based on blockchain according to claim 1, characterized in that, In Step 8, after obtaining the data, the user decrypts it to obtain the data resource access method, remotely accesses and obtains the data resource. The management terminal determines whether the user has the permission to obtain the data based on the authorization information on the chain. If the user is authorized, the data resource is transmitted to the user through an encrypted channel. If the user is not authorized, the access link is cut off.

6. The method for exchanging government data based on blockchain according to claim 1, characterized in that, The data resources obtained in Step 8 can be selected to be transmitted to the user's local machine for processing, or to a trusted computing environment for processing. If the data is selected to be transmitted to a trusted computing environment for processing, the data processing service is used to perform the calculations, and then the results are returned to the user's local machine.

7. A system for exchanging government data based on blockchain, the system being an implementation system of the method for exchanging government data based on blockchain according to any one of claims 1-6, characterized in that, include: The management terminal (1) is used to manage the global function terminal and send and edit control commands; The publishing end (2) is used by government data publishers to publish shared data and establish a shared data chain; The approval end (3) is used to approve the published data, remove invalid and erroneous data, and approve the application for access information; Blockchain access terminal (4) is used to transmit the submitted data to the blockchain sharing and configure the appropriate transmission channel; The user terminal (5) is used to verify the user's identity information and grant login permissions after verification. The application end (6) is used to provide an interface for data query and to submit data request access information; The computing terminal (7) is used to perform calculations on the data using data processing services; The verification terminal (8) is used to verify the matching of uploaded and downloaded data, mark abnormal data and trace its source.

8. A system for exchanging government data based on blockchain according to claim 7, characterized in that, The management terminal (1) and the blockchain access terminal (4) are connected via a wireless network. The publishing terminal (2) and the approval terminal (3) are connected via a wireless network. The approval terminal (3) and the blockchain access terminal (4) are connected via a wireless network. The user terminal (5) and the application terminal (6) are connected via a wireless network. The application terminal (6) and the blockchain access terminal (4) are connected via a wireless network. The verification terminal (8) and the computing terminal (7) are connected via a wireless network. The computing terminal (7) and the blockchain access terminal (4) are connected via a wireless network.

Images