A method and device for realizing data portability based on blockchain technology
By adopting a blockchain technology-based method in the data transfer process, using collaboration between the alliance chain and data subjects, the issues of identity verification, data format uniformity and trust during the data transfer process are solved, and the data is reliable and trustworthy Transfer.
Patent Information
- Application Number
- CN202311727116.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-12-14
- Publication Date
- 2025-02-11
- Estimated Expiration
- 2043-12-14
AI Technical Summary
During the data transfer process, there are problems with identity verification, inconsistent data format, the risk of information storage being tampered with, and the complex data transmission process, resulting in technical and trust issues, affecting the effective implementation of data portability rights.
Using a blockchain technology-based method, reliable data transmission is achieved through collaboration between the alliance chain, data subject, data sender and data receiver. The specific steps include the data subject initiating a transaction request, the data sender verifies his identity and publishes transaction information to the alliance chain, and the data receiver matches the transaction information from the alliance chain and performs comparisons to ensure the integrity of the data and the reliability of the source.
Through blockchain technology, the trust problem of multiple parties is solved, ensuring that data is not tampered with during data transmission, and the reliable and trustworthy transfer of data is achieved, reducing the complexity of identity verification and data format uniformity.
Smart Images

Figure CN117689383B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of data transfer, and in particular to a method and device for implementing data portability based on blockchain technology. Background Art
[0002] In order to better balance the freedom and control of data flow and strengthen the data subject's control over their personal data, the "right to data portability" has been proposed as a legal right of the data subject. The right to data portability means that when the data controller processes the user data in an automated manner based on the data subject's consent or based on a contractual agreement, the data subject has the right to obtain a copy of the aforementioned data related to him or her that he or she has provided to the data controller; at the same time, the data subject has the right to transmit such data copies to another data controller.
[0003] Although the law protects the right to portability of personal information and requires companies that act as controllers / processors of personal information to support individuals' requests to transfer personal information between different institutions, there may be various problems when transferring data, such as identity verification, inconsistent data formats, the risk of information storage being tampered with, and complex data transmission processes. These problems may result in the inability to be effectively implemented due to technical and trust issues. Summary of the invention
[0004] In view of the above problems, the present application is proposed to provide a method and device for implementing data portability rights based on blockchain technology to overcome the above problems or at least partially solve the above problems, including:
[0005] A method for implementing data portability based on blockchain technology, the method involving a consortium chain, a data subject, a data sender and a data receiver; the data subject is used to initiate a transaction request; the data sender is used to receive the transaction request of the data subject, and provide the transaction information of the data subject to the data subject, and publish the transaction information to the consortium chain; the consortium chain is used to receive the transaction information sent by the data sender; the data subject is also used to send the transaction information provided by the data sender to the data receiver;
[0006] The method comprises:
[0007] When the data recipient receives the transaction information sent by the data subject, the data recipient initiates a data matching request to the alliance chain; wherein the alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient;
[0008] The data receiver receives the transaction information corresponding to the data subject matched from the alliance chain;
[0009] When the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the data recipient stores the transaction information in the local system of the data recipient.
[0010] Furthermore, before the step of the data recipient receiving the transaction information sent by the data subject, the step further includes:
[0011] The data recipient verifies the identity of the data subject;
[0012] When the identity authentication of the data subject is passed, the data recipient waits for the data subject to upload the transaction information.
[0013] Furthermore, the step in which the data recipient receives the transaction information sent by the data subject includes:
[0014] The data receiver calculates a hash value of the transaction information sent by the data subject.
[0015] Furthermore, when the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the step of the data recipient storing the transaction information into the local system of the data recipient includes:
[0016] The data recipient verifies the identity of the data subject based on the transaction information on the alliance chain;
[0017] When the identity authentication of the data subject is passed, the data recipient compares the hash value of the transaction information sent by the data subject with the hash value of the transaction information on the alliance chain to obtain a comparison result;
[0018] When the comparison result is passed, the data recipient stores the transaction information into the local system of the data recipient.
[0019] A method for realizing data portability based on blockchain technology, the method involving a consortium chain, a data subject, a data sender, and a data receiver;
[0020] The method comprises:
[0021] When the data subject initiates the transaction request to the data sender, the data subject accepts the identity verification of the data sender; wherein the data sender is used to accept the transaction request of the data subject and verify the identity of the data subject;
[0022] When the identity authentication of the data subject is passed, the data subject waits for the data sender to send the corresponding transaction information; wherein the data sender is also used to provide the transaction information of the data subject to the data subject and publish the transaction information to the alliance chain; the alliance chain is used to receive the transaction information sent by the data sender;
[0023] The data subject receives the corresponding transaction information sent by the data sender and accepts the identity verification of the data receiver;
[0024] When the identity authentication of the data subject is passed, the data subject sends the transaction information to the data recipient; wherein the data recipient is used to receive the transaction information sent by the data subject and initiate a data matching request to the alliance chain; the alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient; the data recipient is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the compared transaction information.
[0025] A method for implementing data portability based on blockchain technology, the method involving a consortium chain, a data subject, a data sender, and a data receiver; the data subject is used to initiate a transaction request;
[0026] The method comprises:
[0027] When the data sender receives the transaction request from the data subject, it verifies the identity of the data subject;
[0028] When the data subject passes the identity authentication of the data sender, the data sender sends the transaction information of the data subject to the data subject and the alliance chain; wherein the data subject is also used to send the transaction information provided by the data sender to the data receiver; the alliance chain is used to receive the transaction information sent by the data sender; the data receiver is used to receive the transaction information sent by the data subject and initiate a data matching request to the alliance chain; the alliance chain is also used to receive the data matching request from the data receiver, and send the transaction information matching the data matching request to the data receiver; the data receiver is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the compared transaction information.
[0029] Furthermore, the step in which the data sender sends the transaction information of the data subject to the data subject and the alliance chain includes:
[0030] The data sender sends the transaction information to the data subject;
[0031] The data sender sends the hash value corresponding to the transaction information to the alliance chain.
[0032] A device for implementing data portability based on blockchain technology, the device involving a consortium chain, a data subject, a data sender and a data receiver; the data subject is used to initiate a transaction request; the data sender is used to receive the transaction request of the data subject, and provide the transaction information of the data subject to the data subject, and publish the transaction information to the consortium chain; the consortium chain is used to receive the transaction information sent by the data sender; the data subject is also used to send the transaction information provided by the data sender to the data receiver;
[0033] The device comprises:
[0034] A matching request initiation module, configured to initiate a data matching request to the alliance chain when the data receiving party receives the transaction information sent by the data subject; wherein the alliance chain is also configured to accept the data matching request from the data receiving party, and send the transaction information matching the data matching request to the data receiving party;
[0035] A matching information receiving module, used for the data receiving party to receive the transaction information matched with the data subject from the alliance chain;
[0036] The transaction information storage module is used for, when the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the data recipient stores the transaction information in the local system of the data recipient.
[0037] Furthermore, it also includes:
[0038] A verification and acceptance module, used for the data recipient to verify the identity of the data subject;
[0039] The upload waiting module is used for the data recipient to wait for the data subject to upload the transaction information after the identity authentication of the data subject is passed.
[0040] A data portability implementation system based on blockchain technology, the system and alliance chain, data subject, data sender and data receiver;
[0041] The system comprises:
[0042] The data subject is used to initiate the transaction request to the data sender;
[0043] The data sender is used to verify the identity of the data subject;
[0044] The data sender is further used to send the verified transaction information of the data subject to the data subject and the alliance chain;
[0045] The alliance chain is used to receive the transaction information sent by the data sender;
[0046] The data recipient is used to verify the identity of the data subject;
[0047] The data subject is also used to send the transaction information to the data recipient;
[0048] The data receiver is also used to initiate a data matching request to the alliance chain;
[0049] The alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient;
[0050] The data receiver is further configured to receive the transaction information matched from the alliance chain and corresponding to the data matching request;
[0051] The data receiver is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the compared transaction information.
[0052] This application has the following advantages:
[0053] In the embodiment of the present application, compared with the problems of identity verification, inconsistent data format, risk of information storage being tampered and complex data transmission process in the prior art, the present application provides a solution for realizing reliable and trusted transfer of personal information through blockchain technology, specifically: when the data recipient receives the transaction information sent by the data subject, the data recipient initiates a data matching request to the alliance chain; wherein the alliance chain is also used to accept the data matching request of the data recipient and send the transaction information matching the data matching request to the data recipient; the data recipient receives the transaction information corresponding to the data subject matched from the alliance chain; when the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the data recipient stores the transaction information in the local system of the data recipient. Due to the access mechanism of the alliance chain, it is ensured that the transaction is issued by the certified institution, solving the problem of multi-party trust. Although transaction information is transmitted by the data subject himself, the tamper-proof nature of blockchain ensures that transaction information will not be tampered with during transmission from the data sender to the data receiver. If tampered with, it can be easily discovered. BRIEF DESCRIPTION OF THE DRAWINGS
[0054] In order to more clearly illustrate the technical solution of the present application, the following is a brief introduction to the drawings required for use in the description of the present application. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.
[0055] Figure 1 This is a flowchart of a method for implementing data portability based on blockchain technology provided by an embodiment of the present application;
[0056] Figure 2 This is a data flow diagram of personal data transfer of a method for implementing data portability based on blockchain technology provided by an embodiment of the present application;
[0057] Figure 3 This is a logic implementation flow chart of a data sender of a method for implementing data portability rights based on blockchain technology provided by an embodiment of the present application;
[0058] Figure 4 This is a logic implementation flow chart of a data receiver of a method for implementing data portability rights based on blockchain technology provided by an embodiment of the present application;
[0059] Figure 5 This is a timing diagram of a method for implementing data portability based on blockchain technology provided in one embodiment of the present application;
[0060] Figure 6 This is a flowchart of a method for implementing data portability based on blockchain technology provided by an embodiment of the present application;
[0061] Figure 7 This is a flowchart of a method for implementing data portability based on blockchain technology provided by an embodiment of the present application;
[0062] Figure 8 This is a structural diagram of a device for implementing data portability rights based on blockchain technology provided in one embodiment of the present application. DETAILED DESCRIPTION
[0063] In order to make the objects, features and advantages of the present application more obvious and understandable, the present application is further described in detail below in conjunction with the accompanying drawings and specific implementation methods. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.
[0064] The inventors analyzed the prior art and found that the specific problems that could not be effectively implemented due to technical and trust issues include:
[0065] 1. Identity verification of data recipients and senders requires the introduction of external systems, such as a credible third party.
[0066] 2. It is difficult to ensure uniformity in the data formats and metadata processed by different personal information processors. Personal information processors cannot guarantee to provide data export / import interfaces that are compatible with the systems of other personal information processors. Currently, there is no authoritative platform for unified metadata and data formats.
[0067] 3. After the data copy is generated and transmitted by the user himself, there is a risk of tampering, and it may also be forged, and may lose credibility and cannot be accepted by the data recipient. If a digital signature is used for the data copy, there will be a CA trust issue, and using a certificate issued by an authoritative CA will introduce additional expenses for special certificate application and maintenance.
[0068] 4. If a data controller directly transfers personal information related to a data subject to another data controller, both parties must prove that the transfer has been approved by the data subject. This may require the introduction of negotiation or association operations, making the process complicated.
[0069] These factors will affect the transfer and circulation of personal information.
[0070] Example 1
[0071] Reference Figure 1 , showing a method for implementing data portability based on blockchain technology provided by an embodiment of the present application, the method involving an alliance chain, a data subject, a data sender, and a data receiver;
[0072] include:
[0073] S110. When the data recipient receives the transaction information sent by the data subject, the data recipient initiates a data matching request to the alliance chain; wherein the alliance chain is further used to accept the data matching request from the data recipient, and send the transaction information matching the data matching request to the data recipient;
[0074] S120, the data recipient receives the transaction information corresponding to the data subject matched from the alliance chain;
[0075] S130. When the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the data recipient stores the transaction information in the local system of the data recipient.
[0076] In the embodiments of the present application,
[0077] Below, a method for implementing data portability rights based on blockchain technology in this exemplary embodiment will be further explained.
[0078] It should be noted that the alliance chain described in the present invention is a personal information transfer alliance chain created by an institution or industry association, and each legally operating institution voluntarily joins the alliance chain after real-name authentication. The data subject refers to the owner of the data, that is, the individual, organization or entity that owns or controls the data. The data sender and the data receiver are both data controllers. The data subject receives the personal data about itself provided to the controller (ie, the data sender) in a structured, common and machine-readable format, and has the right to transmit the data to another controller (ie, the data sender and receiver) without hindrance.
[0079] As an example, see Figure 2-5, the data sender (i.e., institution A) and the data receiver (i.e., institution B) have both joined the alliance chain through real-name authentication. After the data subject makes a transaction request for data transfer to the data sender, the data sender verifies the personal identity of the data subject. When the identity verification is passed, the data sender responds to the request of the data subject and provides the transaction information of the data subject in electronic form. The transaction information is a copy of personal information, which can be encrypted or unencrypted. At the same time, the data sender publishes a transaction on the alliance chain, and the content of the transaction information is the hash value of the copy file or content of the personal information. The alliance chain receives the transaction information sent by the data sender.
[0080] The data subject will download a copy of the above personal information from the data sender and can view the contents of the copy but cannot modify it.
[0081] As another example, if the data subject fails to pass the identity authentication of the data sender, the data sender rejects the transaction request of the data subject for data transfer.
[0082] In a specific implementation, after the data subject passes the identity authentication of the data sender, the data sender publishes the hash value of the copy of the personal information of the data subject to the alliance chain. This embodiment uses the anti-tampering characteristics of the blockchain to solve the problem of authenticity verification of the copy data, and adopts the method of separating the file and the hash value, and only saves the hash value of the personal data copy file on the blockchain. Since the hash value is a process of mapping data of any length to a fixed-length hash value, it has a streamlined feature to avoid the problem of the alliance chain becoming large and bloated due to the large size of the personal information copy file. Subsequently, by calculating whether the hash value of the file is on the chain, it can be determined whether the file has been officially released and whether it has been tampered with.
[0083] In an embodiment of the present invention, before step S110, the method further includes:
[0084] S100, the data recipient verifies the identity of the data subject;
[0085] S101. When the identity authentication of the data subject is passed, the data recipient waits for the data subject to upload the transaction information.
[0086] As an example, see Figure 3-4 The data recipient opens a personal information import interface, accepts the data subject's data transfer transaction request, and verifies the data subject's identity information. When the data subject's identity authentication is passed, the data recipient waits for the data subject to upload a copy of the personal information.
[0087] As another example, if the data subject fails to pass the identity authentication of the data recipient, the data recipient rejects the data subject's request to import personal information.
[0088] As described in step S110, when the data recipient receives the transaction information sent by the data subject, the data recipient initiates a data matching request to the alliance chain; wherein the alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient.
[0089] In an embodiment of the present invention, the specific process of "the data recipient receives the transaction information sent by the data subject" in step S110 can be further explained in combination with the following description.
[0090] As described in the following steps, the data receiver calculates a hash value of the transaction information sent by the data subject.
[0091] As an example, see Figure 2-5 After the data subject passes the identity verification of the data recipient, he / she shall submit a copy of his / her personal information to the data recipient in the manner provided by the data recipient. The copy of personal information shall be confirmed and submitted in person by the data subject user to ensure that the transfer of personal information has been informed and agreed by the user.
[0092] After receiving the copy of the personal information of the data subject, the data receiver calculates the hash value of the copy file. The data receiver initiates a data matching request to the alliance chain, and after receiving the request, the alliance chain queries the transaction information matching the data matching request and returns the query result to the data receiver.
[0093] As described in step S120, the data recipient receives the transaction information corresponding to the data subject matched from the alliance chain.
[0094] It should be noted that in addition to recording the hash value of the copy of personal information, the alliance chain may also record other data, such as personal subject identity identification, etc., which is defined by the alliance chain organizer and is not limited by the present invention.
[0095] As an example, after the data recipient queries the transaction information from the alliance chain, it obtains the hash value of the copy of the transaction on the alliance chain.
[0096] As described in step S130, when the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the data recipient stores the transaction information in the local system of the data recipient.
[0097] In one embodiment of the present invention, the specific process of step S130 "when the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the data recipient stores the transaction information into the local system of the data recipient" can be further explained in combination with the following description.
[0098] As described in the following steps, the data recipient verifies the identity of the data subject based on the transaction information on the alliance chain;
[0099] As described in the following steps, when the identity authentication of the data subject is passed, the data recipient compares the hash value of the transaction information sent by the data subject with the hash value of the transaction information on the alliance chain to obtain a comparison result;
[0100] As described in the following steps, when the comparison result is passed, the data recipient stores the transaction information into the local system of the data recipient.
[0101] As an example, see Figure 2-5 , the data recipient queries the transaction from the alliance chain, obtains the hash value of the copy on the chain, and verifies the authenticity and integrity of the personal information copy file through hash value comparison. At the same time, from the alliance chain, through the identity information of the data subject on the alliance chain, check the identity of the transaction initiator (that is, the identity of the data subject) to determine the reliability of the copy source. The alliance chain is used to authenticate the identity of the personal information processor, solve the problem of different data processors requiring multi-party trust, and ensure the reliability of the source of personal information.
[0102] After the verification of the copy of the personal information file is passed, the data recipient adds the information in the copy of the personal information into the system of this organization through automated or manual means, thereby achieving the purpose of transferring personal information from organization A to organization B.
[0103] The present invention uses blockchain to preserve electronic evidence. Through technical means such as electronic signatures, trusted timestamps, hash value verification, blockchain data structures, etc., it can reliably ensure that the content of electronic evidence remains intact (adding endorsements and changes in form during data exchange, storage and display do not affect the integrity) and has not been changed (maintaining identity) since its formation, and can be recognized and trusted.
[0104] During the transfer process, the data sender shall ensure that the copy of personal information will not be illegally tampered with, damaged or leaked from the data sender to the data subject. The data receiver shall ensure the security of personal information from the moment the copy file is received by the individual to the moment the transferred personal information is stored in the institution's own system. The copy file and personal information shall be kept safe, ensuring that the file is only accessed by authorized personnel or programs and is not illegally tampered with, damaged or leaked. After the copy information is imported, it is advisable to provide individuals with a way to query it.
[0105] It should be noted that the file format and interface implementation for exporting and importing personal information by the data sender and the data receiver are defined by the organization itself and are not limited by the present invention.
[0106] The personal information copy of the present invention is provided by the data subject user himself to other personal information processors. Compared with the direct transmission of personal data between different personal information processors, it has the following advantages:
[0107] (1) Proof that the data transfer activity has been fully informed and authorized by the user.
[0108] (II) Different personal information processors do not need to negotiate the specific data format in advance, and the sender and receiver's systems do not need to be forcibly adapted, saving a lot of custom development work. The personal information processors on both sides only need to agree on a common data format, such as json, XML, etc., to ensure that the data copy is stored in a machine-readable form.
[0109] However, there are the following problems: the copy is not trusted and there is a risk of the copy being tampered with, forged or damaged.
[0110] Trust issues can generally be resolved through digital certificates. Digital certificates require a CA that is recognized by all personal information processors, and the CA issues the certificate. If multiple personal information processors are involved, it is difficult to reach a consensus. The present invention proposes to solve the multi-party trust problem through blockchain technology, and ensure that the copy of personal information submitted by the user is authentic and not tampered with.
[0111] Due to the access mechanism of the alliance chain, the institutions that join the alliance chain have passed the real-name authentication, ensuring that the transaction (the content mainly includes the hash value of the copy of personal information) is issued by the real-name authenticated institution, solving the problem of multi-party trust. Although the copy of personal information is transmitted by the user himself, the tamper-proof feature of the blockchain ensures that the copy of personal information will not be tampered with during the transmission process from institution A to institution B. If tampered, it will be easily discovered.
[0112] Example 2
[0113] Reference Figure 6, shows a method for realizing data portability based on blockchain technology, the method involving a consortium chain, a data subject, a data sender, and a data receiver;
[0114] include:
[0115] S610: When the data subject initiates the transaction request to the data sender, the data subject accepts the identity verification of the data sender; wherein the data sender is used to accept the transaction request of the data subject and verify the identity of the data subject;
[0116] S620: When the identity authentication of the data subject is passed, the data subject waits for the data sender to send corresponding transaction information; wherein the data sender is further used to provide the transaction information of the data subject to the data subject and publish the transaction information to the alliance chain; the alliance chain is used to receive the transaction information sent by the data sender;
[0117] S630: The data subject receives the corresponding transaction information sent by the data sender and accepts the identity verification of the data receiver;
[0118] S640. When the identity authentication of the data subject is passed, the data subject sends the transaction information to the data recipient; wherein the data recipient is used to receive the transaction information sent by the data subject, and initiate a data matching request to the alliance chain; the alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient; the data recipient is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the transaction information that has passed the comparison.
[0119] Below, a method for implementing data portability rights based on blockchain technology in this exemplary embodiment will be further explained.
[0120] As an example, an institution or industry association creates a personal information transfer alliance chain, and the data sender and the data recipient have both joined the alliance chain through real-name authentication; the data subject makes a request for data transfer to the data sender, and the data sender verifies the identity of the data subject, responds to the individual's request, provides a copy of the personal information in electronic form (encrypted or unencrypted), and publishes a transaction on the alliance chain at the same time, and the transaction content is the hash value of the personal information copy file or content.
[0121] The data subject downloads a copy of the above personal information from the data sender and can view the contents of the copy but cannot modify it.
[0122] The data subject passes the identity authentication of the data recipient and submits the copy of the above personal information to the data recipient in the manner provided by the data recipient. After the data recipient obtains the copy of the personal information, it calculates the hash value of the copy file. The data recipient queries the transaction from the alliance chain, obtains the hash value of the copy on the chain, and verifies the authenticity and integrity of the copy file by comparing the hash values. At the same time, the identity of the transaction initiator is checked from the chain to determine the reliability of the copy source. After the verification of the copy file is passed, the data recipient adds the information in the copy to the system of the institution through automated or manual methods.
[0123] It should be noted that the method of this embodiment is basically similar to that of Embodiment 1, so the description is relatively simple, and the relevant parts may refer to the partial description of Method Embodiment 1.
[0124] Example 3
[0125] Reference Figure 7 , shows a method for implementing data portability based on blockchain technology, the method involving a consortium chain, a data subject, a data sender and a data receiver; the data subject is used to initiate a transaction request;
[0126] include:
[0127] S710: When the data sender receives the transaction request from the data subject, it verifies the identity of the data subject;
[0128] S720. When the data subject passes the identity authentication of the data sender, the data sender sends the transaction information of the data subject to the data subject and the alliance chain; wherein the data subject is also used to send the transaction information provided by the data sender to the data receiver; the alliance chain is used to receive the transaction information sent by the data sender; the data receiver is used to receive the transaction information sent by the data subject and initiate a data matching request to the alliance chain; the alliance chain is also used to receive the data matching request from the data receiver, and send the transaction information matching the data matching request to the data receiver; the data receiver is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the compared transaction information.
[0129] Below, a method for implementing data portability rights based on blockchain technology in this exemplary embodiment will be further explained.
[0130] As described in step S720, the data sender sends the transaction information of the data subject to the data subject and the alliance chain.
[0131] In one embodiment of the present invention, the specific process of "the data sender sends the transaction information of the data subject to the data subject and the alliance chain" in step S720 can be further explained in combination with the following description.
[0132] As described in the following steps, the data sender sends the transaction information to the data subject;
[0133] As described in the following steps, the data sender sends the hash value corresponding to the transaction information to the alliance chain.
[0134] As an example, an institution or industry association creates a personal information transfer alliance chain, and the data sender and the data recipient have both joined the alliance chain through real-name authentication; the data subject makes a request for data transfer to the data sender, and the data sender verifies the identity of the data subject, responds to the individual's request, provides a copy of the personal information in electronic form (encrypted or unencrypted), and publishes a transaction on the alliance chain at the same time, and the transaction content is the hash value of the personal information copy file.
[0135] The data subject downloads a copy of the above personal information from the data sender and can view the contents of the copy but cannot modify it.
[0136] The data subject passes the identity authentication of the data recipient and submits the copy of the above personal information to the data recipient in the manner provided by the data recipient. After the data recipient obtains the copy of the personal information, it calculates the hash value of the copy file. The data recipient queries the transaction from the alliance chain, obtains the hash value of the copy on the chain, and verifies the authenticity and integrity of the copy file by comparing the hash values. At the same time, the identity of the transaction initiator is checked from the chain to determine the reliability of the copy source. After the verification of the copy file is passed, the data recipient adds the information in the copy to the system of the institution through automated or manual methods.
[0137] It should be noted that the method of this embodiment is basically similar to that of Embodiment 1, so the description is relatively simple, and the relevant parts may refer to the partial description of Method Embodiment 1.
[0138] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.
[0139] Reference Figure 8, shows an adaptation verification test device for an operating system provided by an embodiment of the present application, the device involves a consortium chain, a data subject, a data sender and a data receiver; the data subject is used to initiate a transaction request; the data sender is used to receive the transaction request of the data subject, and provide the transaction information of the data subject to the data subject, and publish the transaction information to the consortium chain; the consortium chain is used to receive the transaction information sent by the data sender; the data subject is also used to send the transaction information provided by the data sender to the data receiver;
[0140] The device comprises:
[0141] A matching request initiating module 810 is used for initiating a data matching request to the alliance chain when the data receiving party receives the transaction information sent by the data subject; wherein the alliance chain is also used for accepting the data matching request of the data receiving party and sending the transaction information matching the data matching request to the data receiving party;
[0142] A matching information receiving module 820, used for the data receiving party to receive the transaction information matched with the data subject from the alliance chain;
[0143] The transaction information storage module 830 is used for the data recipient to store the transaction information in the local system of the data recipient when the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain.
[0144] In one embodiment of the present invention, it also includes:
[0145] Verification acceptance module 800, used for the data recipient to verify the identity of the data subject;
[0146] The upload waiting module 801 is used for the data recipient to wait for the data subject to upload the transaction information after the identity authentication of the data subject is passed.
[0147] In one embodiment of the present invention, the matching request initiating module 810 includes:
[0148] A calculation submodule is used for the data recipient to calculate the hash value of the transaction information sent by the data subject.
[0149] In one embodiment of the present invention, the transaction information storage module 830 includes:
[0150] A verification submodule, used for the data recipient to verify the identity of the data subject based on the transaction information on the alliance chain;
[0151] A comparison submodule, which is used for, when the identity authentication of the data subject is passed, the data receiver compares the hash value of the transaction information sent by the data subject with the hash value of the transaction information on the alliance chain to obtain a comparison result;
[0152] The storage submodule is used for, when the comparison result is passed, the data recipient stores the transaction information into the local system of the data recipient.
[0153] An embodiment of the present application also provides an adaptation verification test device for an operating system, the device involving a consortium chain, a data subject, a data sender, and a data receiver;
[0154] The device comprises:
[0155] A first identity authentication module, configured to enable the data subject to accept the identity authentication of the data sender when the data subject initiates the transaction request to the data sender; wherein the data sender is configured to accept the transaction request of the data subject and verify the identity of the data subject;
[0156] A waiting receiving module, which is used for the data subject to wait for the data sender to send the corresponding transaction information after the identity authentication of the data subject is passed; wherein the data sender is also used to provide the transaction information of the data subject to the data subject and publish the transaction information to the alliance chain; the alliance chain is used to receive the transaction information sent by the data sender;
[0157] A second identity authentication module, used for the data subject to receive the corresponding transaction information sent by the data sender and accept the identity authentication of the data receiver;
[0158] An information sending module is used for, when the identity authentication of the data subject is passed, the data subject sends the transaction information to the data recipient; wherein, the data recipient is used to receive the transaction information sent by the data subject and initiate a data matching request to the alliance chain; the alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient; the data recipient is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the transaction information that has passed the comparison.
[0159] An embodiment of the present application further provides an adaptation verification test device for an operating system, the device involving a consortium chain, a data subject, a data sender, and a data receiver; the data subject is used to initiate a transaction request;
[0160] The device comprises:
[0161] A third identity authentication module, configured to verify the identity of the data subject when the data sender receives the transaction request of the data subject;
[0162] A data upload module, used for when the data subject passes the identity authentication of the data sender, the data sender sends the transaction information of the data subject to the data subject and the alliance chain; wherein, the data subject is also used to send the transaction information provided by the data sender to the data receiver; the alliance chain is used to receive the transaction information sent by the data sender; the data receiver is used to receive the transaction information sent by the data subject and initiate a data matching request to the alliance chain; the alliance chain is also used to receive the data matching request of the data receiver, and send the transaction information matching the data matching request to the data receiver; the data receiver is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the transaction information that has passed the comparison.
[0163] In one embodiment of the present invention, the data uploading module includes:
[0164] A first upload submodule, used for the data sender to send the transaction information to the data subject;
[0165] The second uploading submodule is used for the data sender to send the hash value corresponding to the transaction information to the alliance chain.
[0166] The present application also provides a system for implementing data portability based on blockchain technology, the system and alliance chain, data subject, data sender and data receiver;
[0167] The system comprises:
[0168] The data subject is used to initiate the transaction request to the data sender;
[0169] The data sender is used to verify the identity of the data subject;
[0170] The data sender is further used to send the verified transaction information of the data subject to the data subject and the alliance chain;
[0171] The alliance chain is used to receive the transaction information sent by the data sender;
[0172] The data recipient is used to verify the identity of the data subject;
[0173] The data subject is also used to send the transaction information to the data recipient;
[0174] The data receiver is also used to initiate a data matching request to the alliance chain;
[0175] The alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient;
[0176] The data receiver is further configured to receive the transaction information matched from the alliance chain and corresponding to the data matching request;
[0177] The data receiver is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the compared transaction information.
[0178] As for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.
[0179] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present application.
[0180] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.
[0181] The above is a detailed introduction to a method and device for implementing data portability based on blockchain technology provided by the present application. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for those skilled in the art, according to the idea of the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.
Claims
1. A method for implementing data portability based on blockchain technology, characterized in that: The method involves a consortium chain, a data subject, a data sender and a data receiver; the data subject is used to initiate a transaction request; the data sender is used to receive the transaction request of the data subject, and provide the transaction information of the data subject to the data subject, and publish the transaction information to the consortium chain; the consortium chain is used to receive the transaction information sent by the data sender; The data subject is also used to send the transaction information provided by the data sender to the data receiver; The method comprises: When the data recipient receives the transaction information sent by the data subject, the data recipient initiates a data matching request to the alliance chain; wherein the alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient; The data receiver receives the transaction information corresponding to the data subject matched from the alliance chain; When the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the data recipient stores the transaction information in the local system of the data recipient.
2. The method according to claim 1, characterized in that Before the step of the data recipient receiving the transaction information sent by the data subject, the method further includes: The data recipient verifies the identity of the data subject; When the identity authentication of the data subject is passed, the data recipient waits for the data subject to upload the transaction information.
3. The method according to claim 1, characterized in that The step in which the data receiver receives the transaction information sent by the data subject includes: The data receiver calculates a hash value of the transaction information sent by the data subject.
4. The method according to claim 3, characterized in that When the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the step of the data recipient storing the transaction information into the local system of the data recipient includes: The data recipient verifies the identity of the data subject based on the transaction information on the alliance chain; When the identity authentication of the data subject is passed, the data recipient compares the hash value of the transaction information sent by the data subject with the hash value of the transaction information on the alliance chain to obtain a comparison result; When the comparison result is passed, the data recipient stores the transaction information into the local system of the data recipient.
5. A method for implementing data portability based on blockchain technology, characterized in that: The method involves a consortium chain, a data subject, a data sender, and a data receiver; The method comprises: When the data subject initiates the transaction request to the data sender, the data subject accepts the identity verification of the data sender; wherein the data sender is used to accept the transaction request of the data subject and verify the identity of the data subject; When the identity authentication of the data subject is passed, the data subject waits for the data sender to send the corresponding transaction information; wherein the data sender is also used to provide the transaction information of the data subject to the data subject and publish the transaction information to the alliance chain; the alliance chain is used to receive the transaction information sent by the data sender; The data subject receives the corresponding transaction information sent by the data sender and accepts the identity verification of the data receiver; When the identity authentication of the data subject is passed, the data subject sends the transaction information to the data recipient; wherein the data recipient is used to receive the transaction information sent by the data subject and initiate a data matching request to the alliance chain; the alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient; the data recipient is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the compared transaction information.
6. A method for implementing data portability based on blockchain technology, characterized in that: The method involves a consortium chain, a data subject, a data sender, and a data receiver; the data subject is used to initiate a transaction request; The method comprises: When the data sender receives the transaction request from the data subject, it verifies the identity of the data subject; When the data subject passes the identity authentication of the data sender, the data sender sends the transaction information of the data subject to the data subject and the alliance chain; wherein the data subject is also used to send the transaction information provided by the data sender to the data receiver; the alliance chain is used to receive the transaction information sent by the data sender; the data receiver is used to receive the transaction information sent by the data subject and initiate a data matching request to the alliance chain; the alliance chain is also used to receive the data matching request from the data receiver, and send the transaction information matching the data matching request to the data receiver; the data receiver is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the compared transaction information.
7. The method according to claim 6, characterized in that The step of the data sender sending the transaction information of the data subject to the data subject and the alliance chain includes: The data sender sends the transaction information to the data subject; The data sender sends the hash value corresponding to the transaction information to the alliance chain.
8. A device for implementing data portability based on blockchain technology, characterized in that: The device involves a consortium chain, a data subject, a data sender and a data receiver; the data subject is used to initiate a transaction request; the data sender is used to receive the transaction request of the data subject, and provide the transaction information of the data subject to the data subject, and publish the transaction information to the consortium chain; the consortium chain is used to receive the transaction information sent by the data sender; The data subject is also used to send the transaction information provided by the data sender to the data receiver; The device comprises: A matching request initiation module, configured to initiate a data matching request to the alliance chain when the data receiving party receives the transaction information sent by the data subject; wherein the alliance chain is also configured to accept the data matching request from the data receiving party, and send the transaction information matching the data matching request to the data receiving party; A matching information receiving module, used for the data receiving party to receive the transaction information matched with the data subject from the alliance chain; The transaction information storage module is used for, when the transaction information sent by the data subject is consistent with the transaction information matched from the alliance chain, the data recipient stores the transaction information in the local system of the data recipient.
9. The device according to claim 8, characterized in that Also includes: A verification and acceptance module, used for the data recipient to verify the identity of the data subject; The upload waiting module is used for the data recipient to wait for the data subject to upload the transaction information after the identity authentication of the data subject is passed.
10. A data portability implementation system based on blockchain technology, characterized in that: The system and alliance chain, data subject, data sender and data receiver; The system comprises: The data subject is used to initiate the transaction request to the data sender; The data sender is used to verify the identity of the data subject; The data sender is further used to send the verified transaction information of the data subject to the data subject and the alliance chain; The alliance chain is used to receive the transaction information sent by the data sender; The data recipient is used to verify the identity of the data subject; The data subject is also used to send the transaction information to the data recipient; The data receiver is also used to initiate a data matching request to the alliance chain; The alliance chain is also used to accept the data matching request of the data recipient, and send the transaction information matching the data matching request to the data recipient; The data receiver is further configured to receive the transaction information matched from the alliance chain and corresponding to the data matching request; The data receiver is also used to compare the transaction information sent by the data subject with the transaction information matched from the alliance chain, and store the compared transaction information.
Citation Information
Patent Citations
Transaction data processing method and device based on alliance chain
CN111369355A
Alliance chain-based industrial internet Handle recognition system analysis and authentication method
CN113779605A