A personal information rights management method based on blockchain and IPFS

Abstract

The present invention discloses a personal information rights management method based on blockchain and IPFS, aiming to solve the core issues of personal information security and rights protection. The method uses blockchain and smart contract technology to ensure that the authorization process is visible to users and that the authorization information cannot be tampered with. At the same time, IPFS is introduced as a storage method for personal information, returning the control of personal information to users and providing a reliable means of evidence collection for disputes over the use of personal information. By integrating blockchain, smart contracts and IPFS, the present invention can effectively protect the security of personal information, achieve complete control of information by individuals, and provide effective support for the protection of personal rights.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and specifically to a personal information rights management method based on blockchain and IPFS. Background Art

[0002] At present, there are two main methods for personal information and authorization information management on the market: authorization information management methods based on central servers and authorization information management methods based on blockchain.

[0003] Most existing personal information authorization methods rely on a central server storing personal information and personal authorization information. When performing personal authorization, personal information is submitted to a platform (the service platform provided by the service provider is similar to a website or app) and the corresponding authorization information is generated. While these methods can effectively protect users' personal information from being known by parties outside the platform, they rely on users' trust in the platform but lack the ability to regulate the platform itself and authorize the collection of evidence of malicious behavior. Their main drawback is that they rely on users' trust in the platform, making it difficult for users to counteract its behavior when the platform acts maliciously, and thus making it difficult to collect evidence to protect their own rights and interests.

[0004] This blockchain-based authorization information management method uses the blockchain to store and maintain transactions granted to the platform that include user consent, and provides a smart contract to correct and revoke any consent granted by the user. This solution is suitable for scenarios where authorization and personal information modification are required. However, the previously verified content stored on the blockchain contains personal data, which may result in personal data being obtained by the platform without a record of this operation. Main disadvantages: 1. It does not support refined query methods (such as range queries and keyword queries) and has low query performance; 2. Personal information stored on the blockchain is difficult to delete or modify, and there are privacy risks. Using smart contracts as an automated permission management mechanism is affected by the characteristics of blockchain transactions and cannot respond to user needs in a timely manner; 3. After authorization, it is difficult to obtain evidence of incorrect personal information acquisition or personal information tampering. Summary of the Invention

[0005] (1) Technical problems solved

[0006] In response to the shortcomings of the existing technology, the present invention provides a personal information rights management method based on blockchain and IPFS to solve the above technical problems.

[0007] (2) Technical solution

[0008] To solve the above technical problems, the present invention provides the following technical solutions: a personal information rights management method based on blockchain and IPFS, characterized in that it includes: performing environmental network deployment according to demand, including: step S101: the platform side deploys multiple blockchain consensus nodes to form a trusted blockchain network environment, which serves as the basic environment for implementing data forensics and authorization processes; step S102: the platform side deploys the IPFS network environment to store user-encrypted files; step S103: the user side deploys a personal blockchain node as a first account to interact with the blockchain network, for participating in the authorization process that cannot be tampered with or forged, and obtaining a private key address and generating a corresponding public key address; step S104: the user side deploys a personal IPFS node as a second account to interact with the IPFS network, connected to the platform's IPFS network, and used as a support basis for file uploading, storage, and file control rights;

[0009] When it is determined that the platform side needs authorization, the platform side sends a notification to inform the user, and uses a smart contract based on the blockchain environment network to send an authorization transaction containing authorization information to the user side, so that the user side enters the blockchain network through a personal blockchain node to review and confirm the authorization, wherein the authorization information includes personal information, authorization purpose, authorization scope and authorization duration. After the user side confirms the authorization, it will generate a first data fingerprint with the corresponding personal information, and broadcast the first data fingerprint to the blockchain network, so that when the blockchain network determines that the authorization transaction is agreed upon, it will package the transaction information into a new block and add it to the blockchain, so as to complete the storage of the authorization operation, authorization information and data fingerprint;

[0010] The user end encrypts the personal information required for authorization using the private key, uploads the encrypted file to the IPFS network through the IPFS node, and obtains the corresponding CID from the IPFS network through the IPFS node;

[0011] After the user confirms that all authorized transactions have been uploaded to the IPFS network, the platform is informed of the CID;

[0012] After the platform obtains the CID, it performs data matching and generates an alert if the match is unsuccessful.

[0013] Furthermore, the method also includes: after the user encrypts the personal information required for authorization using a private key, the user can choose whether to upload the encrypted file to the IPFS network through the IPFS node according to actual needs.

[0014] Furthermore, after the user end confirms that all authorized transactions have been uploaded to the IPFS network, the step of informing the platform end of the C ID includes: the user end confirms the authorized transaction and uploads it to the chain as evidence, the user end stores personal information on the IPFS network, and the user end transmits the CID to the platform end so that the platform end can download the user's personal information file from the IPFS network through the CID.

[0015] Furthermore, after the platform obtains the C ID, it performs data matching, and if the match is unsuccessful, the steps of generating an early warning include: after the platform obtains the C ID, it uses the user's public key address to decrypt, and uses the decrypted data to form a second data fingerprint; obtains the first data fingerprint uploaded to the blockchain by the user; determines whether the first data fingerprint and the second data fingerprint are consistent; if it is determined that the first data fingerprint and the second data fingerprint are inconsistent, generates an early warning, and sends the early warning information to the user.

[0016] Furthermore, the method also includes: when a dispute arises due to the use of personal information, records are downloaded through the IPFS network, and the data fingerprint corresponding to the C ID is used as proof to resolve the issue of responsibility.

[0017] Furthermore, the method also includes: obtaining all relevant authorization records and information queried by the user from the blockchain and forming a first data fingerprint as a whole, obtaining all authorization information queried by the user from the platform and forming a second data fingerprint, and comparing the first data fingerprint and the second data fingerprint to see if they are consistent, and generating an alarm if they are inconsistent.

[0018] (3) Beneficial effects

[0019] Compared with the existing technology, the present invention provides a personal information rights management method based on blockchain and IPFS, which has the following beneficial effects: the present invention aims to solve the core issues of personal information security and rights protection. The method uses blockchain and smart contract technology to ensure that the authorization process is visible to the user and that the authorization information cannot be tampered with. At the same time, IPFS is introduced as a storage method for personal information, returning the control of personal information to the user and providing a reliable means of evidence collection for disputes over the use of personal information. By integrating blockchain, smart contracts and IPFS, the present invention can effectively protect the security of personal information, achieve complete control of information by individuals, and provide effective support for the protection of personal rights. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 This is a flowchart of the personal information rights management method based on blockchain and IPFS of the present invention;

[0021] Figure 2 yes Figure 1Schematic diagram of the sub-step flow of step S1;

[0022] Figure 3 yes Figure 1 Schematic diagram of the sub-step flow chart of step S5. DETAILED DESCRIPTION

[0023] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0024] like Figure 1 As shown, the present invention discloses a personal information rights management method based on blockchain and IPFS, which includes the following steps:

[0025] Step S1: Deploy the environment network as required. It should be understood that step S1 mainly deploys the blockchain network and the IPFS network.

[0026] Preferably, if Figure 2 As shown, the environment network deployment according to the requirements in step S1 specifically includes:

[0027] Step S101: The platform deploys multiple blockchain consensus nodes to form a trusted blockchain network environment, which serves as the basic environment for data forensics and authorization processes.

[0028] Step S102: The platform deploys the IPFS network environment to store the user's encrypted files.

[0029] Step S103: The user deploys a personal blockchain node as the primary account for interacting with the blockchain network, participating in the tamper-proof and unforgeable authorization process, obtaining a private key address, and generating a corresponding public key address. It should be understood that in step S103, the primary account is created on the platform, and the private and public keys are used to establish an association between the user's blockchain node and the platform account. This means that the user can log in and access the blockchain network using the primary account.

[0030] Step S104: The user deploys a personal IPFS node as a second account to interact with the IPFS network, connecting to the platform's IPFS network to support file upload, storage, and file control. It should be understood that in step S104, the second account can be used to log in and access the IPFS network.

[0031] Step S2: When it is determined that the platform side needs authorization, the platform side sends a notification to inform the user, and uses the smart contract based on the blockchain environment network to send an authorization transaction containing authorization information to the user side, so that the user side can enter the blockchain network through the personal blockchain node to review and confirm the authorization. After the user side confirms the authorization, it will generate a first data fingerprint with the corresponding personal information, and broadcast the first data fingerprint to the blockchain network, so that when the blockchain network determines that the authorization transaction is agreed upon, it will package the transaction information into a new block and add it to the blockchain to complete the storage of the authorization operation, authorization information and data fingerprint.

[0032] Preferably, the authorization information includes personal information, authorization purpose, authorization scope and authorization duration.

[0033] Step S3: After the user encrypts the personal information required for authorization using the private key, the encrypted file is uploaded to the IPFS network through the IPFS node, and the corresponding CID is obtained from the IPFS network through the IPFS node. It should be understood that in step S3, the CID is the unique identifier of the file (i.e., the authorization information) in the IPFS network. The CID can be used to determine the location of the file in the IPFS network and the file content can be retrieved using the CID.

[0034] Furthermore, the blockchain- and IPFS-based personal information rights management method also includes: after the user encrypts the personal information required for authorization using a private key, the user can choose whether to upload the encrypted file to the IPFS network via an IPFS node based on actual needs. It should be understood that using the user's private key to encrypt personal information provides an additional layer of protection for personal information, and private key encryption can serve as proof of the data's origin.

[0035] Step S4: After the user confirms that all authorized transactions have been uploaded to the IPFS network, it informs the platform of the CID.

[0036] In this embodiment, after the user end confirms that all authorized transactions have been uploaded to the IPFS network in step S4, the steps of informing the platform end of the CID specifically include: the user end confirms the authorized transaction and uploads it to the chain as evidence, the user end stores personal information on the IPFS network, and the user end transmits the CID to the platform end so that the platform end can download the user's personal information file from the IPFS network through the C ID.

[0037] It should be understood that this embodiment downloads the user's personal information file from the IPFS network through CID. Such a process can avoid the situation where the authorization transaction fails due to problems in the blockchain and the personal information is not obtained by the platform before authorization. At the same time, this process provides data evidence and download records, enhancing the legal acquisition of data and privacy protection.

[0038] Step S5: After the platform obtains the CID, it performs data matching. If the match is unsuccessful, an early warning is generated.

[0039] Preferably, if Figure 3 As shown, in step S5, after the platform obtains the C ID, it performs data matching. If the matching is unsuccessful, the steps of generating an early warning specifically include:

[0040] Step S501: After the platform obtains the C ID, it uses the user's public key address to decrypt it and uses the decrypted data to form a second data fingerprint.

[0041] Step S502: Obtain the first data fingerprint uploaded by the user terminal to the blockchain.

[0042] Step S503: Determine whether the first data fingerprint and the second data fingerprint are consistent;

[0043] Step S504: If it is determined that the first data fingerprint and the second data fingerprint are inconsistent, an early warning is generated and the early warning information is sent to the user.

[0044] Furthermore, the personal information rights management method based on blockchain and IPFS also includes: when a dispute arises due to the use of personal information, records are downloaded through the IPFS network, and the data fingerprint corresponding to the C ID is used as proof to resolve the responsibility issue.

[0045] Furthermore, the blockchain and IPFS-based personal information rights management method further includes: obtaining all relevant authorization records and information queried by the user from the blockchain and forming a first data fingerprint as a whole; obtaining all the authorization information queried by the user from the platform and forming a second data fingerprint; and comparing the first data fingerprint with the second data fingerprint to determine whether they are consistent. If they are inconsistent, an alarm is generated. It should be understood that this step is the query step.

[0046] It should be understood that the user side accesses the blockchain network through the blockchain node to query all user-related authorization records and information. The platform side stores all user authorization records and information in the database. The platform side provides a query module function. The platform side query uses the database to store consistent authorization information on the blockchain, providing users with query efficiency far higher than that on the blockchain, and has a more flexible query method. Through the indexing and optimization of the database, the query module can quickly retrieve and obtain the required data, greatly improving the query efficiency and response speed.

[0047] In summary, the present invention provides tamper-proof authorization operations and authorization information evidence collection through the blockchain and smart contracts, weakens the power of the platform, and provides corresponding evidence collection to protect user rights. Compared with the traditional method, the present invention has the following advantages: 1. Using data fingerprint and database technology to realize the off-chain storage of authorization information in the blockchain, while ensuring the authenticity of the query results from the database, providing a more flexible query method and higher query performance than the query on the blockchain; 2. Using IPFS to store personal information instead of blockchain to realize the modification and deletion of personal information, maintain local IPFS nodes and interact with the IPFS network, and know the CID through the local IPFS node without going through the IPFS network, preventing the platform from directly obtaining CID. ID, returns the data ownership to the user, and the user uploads a new version of personal information on the IPFS network while prohibiting access to the old version. Before the modification of the evidence, the platform cannot access and use the old version of personal information; 3. At the time of authorization, the data fingerprint of the personal information submitted in the smart contract is recorded in the blockchain, the IPFS data access record is recorded, the personal information private key is encrypted to confirm the owner of the data, and the fingerprint generated by decrypting the personal information is used to confirm the division of responsibilities in the process of personal information delivery, and the malicious behavior of the platform using tampered personal information is proved.

[0048] It should be noted that the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, article, or apparatus that includes a series of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not preclude the presence of other identical elements in the process, method, article, or apparatus that includes the element.

[0049] While embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions, and variations may be made to these embodiments without departing from the principles and spirit of the invention, and that the scope of the invention is defined by the appended claims and their equivalents.

Claims

1. A personal information rights management method based on blockchain and IPFS, characterized in that: include: The environment network is deployed according to the requirements, including: Step S101: the platform side deploys multiple blockchain consensus nodes to form a trusted blockchain network environment, which serves as the basic environment for data forensics and authorization process implementation; Step S102: the platform side deploys the IPFS network environment to store user encrypted files; Step S103: the user side deploys a personal blockchain node as the first account to interact with the blockchain network, used to participate in the tamper-proof and non-forgeable authorization process, and obtain the private key address and generate the corresponding public key address; Step S104: the user side deploys a personal IPFS node as the second account to interact with the IPFS network, connected to the platform's IPFS network, and used as a support basis for file upload, storage and file control rights; When it is determined that the platform side needs authorization, the platform side sends a notification to inform the user, and uses a smart contract based on the blockchain environment network to send an authorization transaction containing authorization information to the user side, so that the user side enters the blockchain network through a personal blockchain node to review and confirm the authorization, wherein the authorization information includes personal information, authorization purpose, authorization scope and authorization duration. After the user side confirms the authorization, it will generate a first data fingerprint with the corresponding personal information, and broadcast the first data fingerprint to the blockchain network, so that when the blockchain network determines that the authorization transaction is agreed upon, it will package the transaction information into a new block and add it to the blockchain, so as to complete the storage of the authorization operation, authorization information and data fingerprint; The user end encrypts the personal information required for authorization using the private key, uploads the encrypted file to the IPFS network through the IPFS node, and obtains the corresponding CID from the IPFS network through the IPFS node; After the user confirms that all authorized transactions have been uploaded to the IPFS network, the platform is informed of the CID; After the platform obtains the CID, it performs data matching and generates an alert if the match fails. The method further includes: after the user encrypts the personal information required for authorization using a private key, according to actual needs, choosing whether to upload the encrypted file to the IPFS network through an IPFS node; Encrypting personal information using the user's private key adds a layer of protection to personal information, where the private key encryption serves as proof that the data originated from the user; After the user end confirms that all authorized transactions have been uploaded to the IPFS network, the steps of informing the platform end of the CID include: the user end confirms the authorized transaction and uploads it to the chain as evidence, the user end stores personal information on the IPFS network, and the user end transmits the CID to the platform end, so that the platform end downloads the user's personal information file from the IPFS network through the CID.

2. The personal information rights management method based on blockchain and IPFS according to claim 1 is characterized in that: After the platform obtains the CID, it performs data matching and generates an early warning if the matching is unsuccessful. The steps include: After the platform obtains the CID, it uses the user's public key address to decrypt it and uses the decrypted data to form a second data fingerprint; Obtaining the first data fingerprint uploaded to the blockchain by the user terminal; Determining whether the first data fingerprint and the second data fingerprint are consistent; If it is determined that the first data fingerprint and the second data fingerprint are inconsistent, an early warning is generated and the early warning information is sent to the user.

3. The personal information rights management method based on blockchain and IPFS according to claim 2 is characterized in that: The method also includes: when a dispute arises due to the use of personal information, records are downloaded through the IPFS network, and the data fingerprint corresponding to the CID is used as proof to resolve the issue of responsibility.

4. The personal information rights management method based on blockchain and IPFS according to claim 1 is characterized in that: The method further includes: obtaining all relevant authorization records and information queried by the user from the blockchain and forming a first data fingerprint as a whole; obtaining all authorization information queried by the user from the platform and forming a second data fingerprint; and comparing the first data fingerprint with the second data fingerprint to see if they are consistent, and generating an alarm if they are inconsistent.

Images