A Data Trusted Transaction Method and System Based on Blockchain and Privacy Computing

Abstract

The present invention relates to a method and system for trustworthy data transactions based on blockchain and privacy computing. In this application, the seller encrypts the data digest of the local data and uploads it to the data trading platform system; the trustworthy data trading platform system evaluates the content of the buyer's order according to the valuation rules, and generates an advance payment contract after the buyer accepts the valuation result; the buyer pays the payment amount of the advance payment contract to the trustworthy data trading platform; the trustworthy data trading platform system queries the data digest library and the content of the platform database according to the buyer's order information, and sends a data request to the seller that meets the buyer's order conditions; the seller obtains the target data that meets the buyer's order conditions, and through data-in-domain privacy security policy processing or data-out-of-domain privacy security policy processing, realizes the desensitization, on-chain encryption calculation of the target data and feeds it back to the buyer; after the transaction is completed, the advance payment contract is triggered to automatically allocate the amount to the seller who provides the target data.

Description

Technical Field

[0001] The present invention relates to the technical field of data trusted transactions, and in particular to a method and system for data trusted transactions based on blockchain and privacy computing. Background Art

[0002] With the explosion of data volume in all walks of life, the secure management and efficient utilization of data transactions are crucial. Traditional data trading platforms often act as intermediaries responsible for data trading and distribution. However, there are many potential risks in this model: the privacy of data owners may be leaked or misused during the transaction process, and the data may be reused without authorization by the platform or the demanding party. These problems will not only cause economic losses and legal risks to data owners, but also may weaken the trust in data trading platforms and hinder the development of the data trading market. Therefore, it has become an urgent task to build a secure, reliable, efficient and transparent data trading platform. Summary of the Invention

[0003] To solve the above technical problems or at least partially solve the above technical problems, the present invention provides a method and system for data trusted transactions based on blockchain and privacy computing.

[0004] In a first aspect, the present invention provides a method for data trusted transactions based on blockchain and privacy computing, including:

[0005] The seller counts the local data according to the set data digest format to form a data digest, encrypts the data digest with the public key of the trusted data trading platform system, and uploads it to the data digest library of the data trading platform system for storage;

[0006] The buyer generates a buyer order in the buyer system according to the information required by the buyer, encrypts it with the public key of the trusted data trading platform system, and submits it to the trusted data trading platform system;

[0007] The trusted data trading platform system evaluates the content of the buyer order according to the valuation rules. After the buyer accepts the valuation result, the trusted data trading platform system generates an advance payment contract, and the buyer pays the payment amount of the advance payment contract to the trusted data trading platform;

[0008] The trusted data trading platform system queries the content of the data digest library and the platform database according to the buyer order information, and sends a data request to the seller that meets the buyer order conditions;

[0009] After the seller receives the data request from the trusted data trading platform system, it queries in the local database to obtain the target data that meets the buyer's order conditions. For the target data that meets the high privacy requirements, it processes through the data non-disclosure privacy security policy to generate the statistical information of the high-privacy target data, performs the on-chain encryption calculation of the statistical information and feedbacks it to the buyer. For the target data that does not meet the high privacy requirements, it processes through the data disclosure privacy security policy to achieve the desensitization on-chain encryption calculation of the target data and feedbacks it to the buyer;

[0010] After the transaction is completed, it triggers the prepayment contract to automatically allocate the amount to the seller who provides the target data.

[0011] Furthermore, the buyer and the seller respectively register their identities in the buyer system and the seller system, and use the asymmetric encryption algorithm to generate a pair of public and private keys for the registered buyer and seller. The identities of the buyer and seller users and the corresponding public key information are recorded on the blockchain for identity verification and encryption during the data transaction process.

[0012] Furthermore, the definition of the data digest format is as follows:

[0013] DS = <SellAddress,KeyField,DataContent,UploadTime> pk_platform ,

[0014] Among them, SellAddress represents the address of the seller in the data digest; KeyField represents the key fields, including one or several combinations of the following key fields: product name, product brand, transaction time, city where located; DataContent represents the content of the data digest, including one or several combinations of the following content: weekly sales volume statistics of each product, monthly sales volume statistics of each product, quarterly sales volume statistics of each product; UploadTime represents the time when the data digest is uploaded, and pk_platform represents the public key of the trusted data trading platform system.

[0015] Furthermore, the content format of the buyer's order is as follows:

[0016] OrderContent = <Indicator,Dimension,DataRange,(Option)> pk_platform ,

[0017] OrderContent represents the order content; Indicator refers to the metrics to be counted, including one or a combination of the following metrics: sales volume, sales amount, sales volume ratio, sales amount ratio; Dimension refers to the dimensions to be counted, including one or a combination of the following dimensions: brand name, brand category, location, payment method, gender; DataRange refers to the data ranges to be counted, including one or a combination of the following ranges: product range, city range, time range, age range, Option is an optional item, and pk_platform represents the public key of the trusted data trading platform system.

[0018] Furthermore, the privacy and security policy for data leaving the domain includes:

[0019] Perform data desensitization on the non-essential sensitive information fields of the target data that meet the conditions to obtain desensitized data;

[0020] First encrypt the desensitized data once with the buyer's public key, and then encrypt it twice with the public key of the trusted data trading platform system, and upload the doubly encrypted desensitized data to the trusted data trading platform system;

[0021] The trusted data trading platform system decrypts the doubly encrypted desensitized data once with its own public key, uploads the data after the first decryption and the data queried from the platform database to the blockchain, and performs encrypted calculations using the privacy and security calculation contract on the chain to obtain the encrypted calculation result returned by the blockchain;

[0022] The trusted data trading platform system sends the encrypted statistical result to the buyer, and the buyer decrypts the statistical result of the encrypted calculation twice with its own private key to obtain the final statistical result.

[0023] Furthermore, the privacy and security policy for data not leaving the domain includes:

[0024] Perform data aggregation calculations on the target data that meet the conditions to generate the required statistical information;

[0025] First encrypt the statistical information once with the buyer's public key, and then encrypt it twice with the public key of the trusted data trading platform system to achieve double encryption of the statistical information;

[0026] Perform a hash commitment on the statistical information (SI) to generate a hash commitment proof: HashC(SI) = hash(SI), where hash() is a hash function;

[0027] Upload the doubly encrypted statistical information Enc(SI) and the hash commitment proof HashC(SI) to the trusted data trading platform system. The hash commitment is uploaded by the trusted data trading platform system to the blockchain for evidence storage, and the doubly encrypted statistical information is decrypted once by the trusted data trading platform system;

[0028] The trusted data trading platform system aggregates the statistical information of all sellers and the statistical information of the platform database, uploads it to the blockchain, and uses the on-chain privacy and security computing contract for calculation to obtain the encrypted statistical result returned by the blockchain;

[0029] The trusted data trading platform sends the encrypted statistical result to the buyer, and the buyer uses its own private key for secondary decryption to obtain the final statistical result.

[0030] Furthermore, the format of the statistical information is specified by the trusted data trading platform system, and the format is as follows:

[0031] SI = <DSAddress, Timestamp, <Information_1, Information_2,...>>

[0032] DSAddress represents the address of the seller in the statistical information, Timestamp represents the time when the seller uploads the statistical information, and Information_i therein represents the key fields of the statistical information, which are generated by the trusted data trading platform system according to the order format.

[0033] Furthermore, the seller sets data access permissions to allow the authorized trusted data trading trusted platform system to access the seller's data. The seller monitors the status of the data and the behavior of the transaction, and provides traceability of the entire life cycle of the data.

[0034] In a second aspect, the present application provides a trusted data trading system based on blockchain and privacy computing for the trusted data trading method based on blockchain and privacy computing, including: a seller system, a buyer system, a trusted data trading platform system, and a blockchain system. Both the seller system and the buyer system support interaction with the trusted data trading platform system, and the trusted data trading platform system supports interaction with the blockchain system;

[0035] The buyer system includes: a buyer identity registration module, an order creation module, a statistical result receiving module, and a statistical result decryption module;

[0036] The seller system includes a seller identity registration module, a data authorization module, a data monitoring module, and a data statistics encryption module;

[0037] The trusted data trading platform system includes an order valuation module, a data platform database query module, a data transaction record blockchain module, a privacy security calculation library creation module, a data content return module, a smart contract creation and deployment module, a data content encryption and decryption module, and a data content request module;

[0038] The blockchain system includes a data transaction construction module, a data upload record storage module, a data usage record storage module, a smart contract execution module, and a seller data hash commitment deposit module.

[0039] Furthermore, the buyer identity registration module is responsible for the verification and registration process of the buyer's identity; new users need to register through the buyer identity registration module before use. The user provides necessary authentication information, and the buyer identity registration module encrypts the authentication information and submits it to the blockchain network for verification to create a unique identity identifier. After the identity verification is passed, the identity and corresponding public key information of the buyer user will be recorded on the blockchain; the order creation module is responsible for the creation and management process of the buyer's order; the buyer inputs the details of the buyer's order through the order creation module. After the buyer's order is created, it is uploaded to the trusted data trading platform system for valuation; the statistical result receiving module is responsible for receiving the final required data statistical results. When the trusted data trading trusted platform system performs privacy security calculations on the data, the generated statistical results will be sent to the statistical result receiving module; the statistical result decryption module is responsible for decrypting the received encrypted statistical results;

[0040] The seller identity registration module is responsible for the verification and registration process of the seller's identity; new users need to register before use. The user needs to provide necessary authentication information, and the seller identity registration module encrypts the authentication information and submits it to the blockchain network for verification to create a unique identity identifier. After the identity verification is passed, the identity and corresponding public key information of the seller user will be recorded on the blockchain; the data authorization module is responsible for managing the access rights of the seller's data to ensure that only the authorized trusted data trading trusted platform system can access specific data; the data monitoring module is responsible for real-time monitoring of the data status and transaction behavior to provide full life cycle traceability of the data; the data statistics encryption module is responsible for encrypting the original data or statistical information;

[0041] The order valuation module is responsible for valuing the content of the buyer's order according to the valuation rules to ensure that the buyer makes payments within an acceptable price range; the database query module of the data platform is responsible for querying information from the database content of the data trading platform; the data transaction record blockchain module is responsible for recording the usage of data each time a data transaction is made; the privacy and security computing library creation module is responsible for creating a series of privacy and security computing algorithm interfaces for the invocation of privacy and security smart contracts to facilitate more convenient privacy and security computing. The privacy and security computing algorithms include homomorphic encryption algorithms, privacy and security intersection algorithms, privacy and security union algorithms, and secret sharing algorithms; the data content return module is responsible for returning the statistical results after privacy computing to the buyer system; the smart contract creation and deployment module is responsible for creating specific privacy and security computing contracts according to the buyer's order requirements of the user for subsequent encrypted computing of data; the data content request module is responsible for the data trading platform system to initiate requests for data that meet the conditions from the seller system.

[0042] The data transaction construction module is responsible for constructing and initiating data transaction requests. The trusted data trading platform system initiates data transactions. After the transaction construction is completed, the information will be added to the blockchain network for confirmation; the data upload record storage module is responsible for recording the uploaded data information; the data usage record storage module is responsible for recording the access and usage of data each time; the smart contract execution module is responsible for automatically executing the terms of the privacy and security computing contract. When the transaction conditions are met, the smart contract will be automatically triggered to perform related operations; the seller data hash commitment deposit module is responsible for saving the hash commitment generated by the seller.

[0043] The above technical solutions provided by the embodiments of the present invention have the following advantages compared with the prior art:

[0044] 1. The data trusted trading method and system based on blockchain and privacy computing provided by the present disclosure provide a trusted space for data trading based on blockchain and privacy and security technologies, solve the problem of traditional data leakage, and ensure the security and privacy of data.

[0045] 2. The data trusted trading method and system based on blockchain and privacy computing provided by the present disclosure emphasize the traceability of data. Each time data is operated, it needs to be recorded on the chain first, and the full life cycle of the data is recorded on the chain from data purchase to data statistics.

[0046] 3. The data trusted trading method and system based on blockchain and privacy computing provided by the present disclosure propose privacy strategies for data out-of-domain and data in-domain to meet the data requirements in different privacy level scenarios, provide a more flexible data privacy solution for users, make the system more user-friendly, and at the same time ensure the security of data.

[0047] 4. The data trusted transaction method and system provided by the present disclosure propose a series of platform privacy security computing libraries, provide customized privacy security computing contracts for each user, and realize the security and privacy of user data while ensuring the public transparency of data computing.

[0048] In summary, the present invention applies blockchain and privacy computing technologies to data transaction management, establishes a decentralized, transparent and tamper-proof trusted data transaction space, ensures the authenticity and security of transaction data, improves the transparency of data transactions, and effectively solves the problems of data security and traceability. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] The accompanying drawings herein are incorporated into the specification and constitute a part of this specification, showing embodiments consistent with the present invention and used together with the specification to explain the principles of the present invention.

[0050] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the accompanying drawings required for use in the description of the embodiments or the prior art. Obviously, for those of ordinary skill in the art, other drawings can also be obtained based on these drawings without creative efforts.

[0051] Figure 1 It is a flowchart of a data trusted transaction method based on blockchain and privacy computing provided by an embodiment of the present invention;

[0052] Figure 2 It is a processing flowchart of a privacy security policy for data out-of-domain provided by an embodiment of the present invention;

[0053] Figure 3 It is a processing flowchart of a privacy security policy for data not out-of-domain provided by an embodiment of the present invention;

[0054] Figure 4 It is a schematic diagram of a trusted data transaction system based on blockchain and privacy computing provided by an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0055] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are some but not all of the embodiments of the present invention. All other embodiments obtained by those of ordinary skill in the art without creative efforts based on the embodiments of the present invention belong to the scope of protection of the present invention.

[0056] It should be noted that in this article, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed, or elements inherent to such process, method, article or device. Without further limitation, an element defined by the statement "including one..." does not exclude the existence of additional identical elements in the process, method, article or device including the said element.

[0057] Embodiment 1

[0058] As Figure 1 shown, the technical solution of the present invention realizes a data trusted transaction method based on blockchain and privacy computing, which is realized based on a trusted data transaction system based on blockchain and privacy computing including a buyer system, a seller system, a blockchain system and a data trading platform system, and includes the following steps:

[0059] Register the identities of the buyer and the seller in the buyer system and the seller system. Use the asymmetric encryption algorithm to generate a pair of public and private keys for the registered buyer and seller to protect the data analysis results of the buyer and the data information of the seller. The identities of the buyer and seller users and the corresponding public key information are recorded on the blockchain to provide an identity authentication basis for subsequent transactions and data encryption for subsequent transactions.

[0060] The data trading platform system generates a data digest format. The seller counts the local data according to the data digest format to form a data digest, and uploads the data digest to the data digest library of the data trading platform system for storage after encrypting it with the public key of the trusted data trading platform system.

[0061] In the present disclosure, the definition of the said data digest format is as follows:

[0062] DS = <SellAddress, KeyField, DataContent, UploadTime> pk_platform .

[0063] Wherein, SellAddress represents the address of the seller in the data digest, KeyField represents the key fields, including one or a combination of the following key fields: product name, product brand, transaction time, city where located, DataContent represents the content of the data digest, including one or a combination of the following contents: weekly sales volume statistics of each product, monthly sales volume statistics of each product, quarterly sales volume statistics of each product; UploadTime represents the time when the data digest is uploaded, and pk_platform represents the public key of the trusted data trading platform system;

[0064] The buyer generates a buyer's order in the buyer's system based on the information it needs, encrypts it using the public key of the trusted data trading platform system, and submits it to the trusted data trading platform system. The content format of the buyer's order is as follows:

[0065] OrderContent = <Indicator, Dimension, DataRange, (Option)> pk_platform ,

[0066] OrderContent represents the order content; Indicator refers to the metrics to be counted, including one or a combination of the following metrics: sales volume, sales amount, sales volume ratio, sales amount ratio; Dimension refers to the dimensions to be counted, including one or a combination of the following dimensions: brand name, brand category, location, payment method, gender; DataRange refers to the data range to be counted, including one or a combination of the following ranges: product range, city range, time range, age range, Option is an optional item, and pk_platform represents the public key of the trusted data trading platform system.

[0067] The trusted data trading platform system evaluates the content of the buyer's order according to the valuation rules, returns the valuation result to the buyer. Once the buyer accepts the valuation result, the trusted data trading platform system will generate a prepayment contract, and the buyer pays the payment amount of the prepayment contract to the trusted data trading platform.

[0068] The trusted data trading platform system queries the data summary library and the content of the platform database according to the buyer's order information, and sends the data request to the seller who meets the conditions specified in the buyer's order.

[0069] After receiving the data request from the trusted data trading platform system, the seller queries in the local database to obtain the target data that meets the requirements. Subsequently, according to the importance level of the target data, it is divided into low-privacy-level data and high-privacy-level data. Low-privacy-level data does not meet high privacy, and high-privacy-level data meets high privacy. They need to be processed in two ways: the data out-of-domain privacy security policy and the data in-domain privacy security policy. Among them, data out-of-domain means that the low-privacy-level data that meets the requirements is encrypted and uploaded to the trusted data trading platform system, and data in-domain means that the statistical information of the high-privacy-level data that meets the requirements is generated, and the statistical information is encrypted and uploaded to the trusted data trading platform system for processing. Data out-of-domain ensures the authenticity of the data, making the cost of data forgery very high; data in-domain ensures the privacy security of the seller's data and does not disclose the original data information.

[0070] Refer to Figure 2 As shown, the privacy security policy for data out-of-domain includes:

[0071] Perform data desensitization on non-essential sensitive information fields of eligible target data to obtain desensitized data;

[0072] First encrypt the desensitized data once with the buyer's public key, and then encrypt it twice with the public key of the trusted data trading platform system. Upload the doubly encrypted desensitized data to the trusted data trading platform system;

[0073] The trusted data trading platform system decrypts the doubly encrypted desensitized data once with its own public key, uploads the data after the first decryption and the data queried from the platform database to the blockchain, and performs encrypted calculations using the privacy and security calculation contract on the chain to obtain the encrypted calculation results returned by the blockchain;

[0074] The trusted data trading platform system sends the encrypted statistical results to the buyer, and the buyer uses its own private key to decrypt the statistical results of the encrypted calculation twice to obtain the final statistical results.

[0075] Refer to Figure 3 As shown, the privacy and security policy for data not leaving the domain includes:

[0076] Perform data aggregation calculations on eligible target data to generate the required statistical information;

[0077] The format of the statistical information is specified by the trusted data trading platform system, and the format is as follows:

[0078] SI = <DSAddress, Timestamp, <Information_1, Information_2,...>>

[0079] DSAddress represents the address of the seller in the statistical information, Timestamp represents the time when the seller uploads the statistical information, and Information_i in it represents the key fields of the statistical information, which are generated by the trusted data trading platform system according to the order format. For example, if you want to count the sales volume information of a certain commodity in May 2023, it can be split into Information_1 = May 2023, Information_2 = a certain commodity, Information_3 = sales volume.

[0080] First encrypt the statistical information once with the buyer's public key, and then encrypt it twice with the public key of the trusted data trading platform system to achieve double encryption of the statistical information. Double encrypt the statistical information using the buyer's public key and the public key of the trusted data trading platform system. Encrypt it once with the buyer's public key to ensure that the data uploaded to the chain cannot be decrypted by the trusted data trading platform system. Encrypt it twice with the public key of the trusted data trading platform system to ensure that the data uploaded to the chain cannot be decrypted by the buyer. The encrypted information is as follows:

[0081] Enc(SI) i = Enc(pk_platform, Enc(pk_buyer, SI));

[0082] Among them, i represents the i-th seller, pk_platform represents the public key of the trusted data trading platform system, and pk_buyer represents the public key of the buyer.

[0083] Perform a hash commitment on the statistical information to generate a hash commitment proof: HashC(SI) = hash(SI), where hash() is a hash function, such as SHA-256, SHA-3. The hash commitment utilizes the one-way irreversible property of the hash function, that is, it is difficult to reverse-engineer the data v from the hash value H(v).

[0084] Upload the double-encrypted statistical information Enc(SI) and the hash commitment proof HashC(SI) to the trusted data trading platform system. The hash commitment is uploaded by the trusted data trading platform system to the blockchain for evidence storage, and the double-encrypted statistical information is decrypted once by the trusted data trading platform system.

[0085] The trusted data trading platform system aggregates the statistical information of all sellers and the statistical information of the platform database, uploads them to the blockchain, and uses the on-chain privacy security calculation contract for calculation to obtain the encrypted statistical result returned by the blockchain. The trusted data trading platform system uploads the encrypted statistical information Enc(SI)1, Enc(SI)2,..., Enc(SI) n of multiple eligible sellers and the statistical information SI_X of the platform database to the blockchain, and calls the platform privacy calculation library to create a privacy security calculation contract. The so-called platform privacy calculation library is a series of privacy security calculation algorithm libraries, including homomorphic encryption algorithms, privacy intersection algorithms, and secret sharing algorithms, and calculates the encrypted statistical result according to the privacy security calculation contract.

[0086] The trusted data trading platform sends the encrypted statistical result to the buyer, and the buyer uses its own private key for secondary decryption to obtain the final statistical result.

[0087] The data trading platform returns the calculated encrypted statistical result to the buyer, triggering the prepayment contract to automatically send the buyer's payment amount to the seller. The buyer uses its own private key to decrypt the encrypted statistical result to obtain the final statistical result.

[0088] Embodiment 2

[0089] Such as Figure 4As shown in the figure, the present disclosure provides a trusted data trading system based on blockchain and privacy computing, including: a seller system, a buyer system, a trusted data trading platform system, and a blockchain system. Both the seller system and the buyer system support interaction with the trusted data trading platform system, and the trusted data trading platform system supports interaction with the blockchain system. There can be multiple buyer systems and seller systems according to requirements, while the data trading trusted space system and the blockchain system are both one.

[0090] The buyer system includes: a buyer identity registration module, an order creation module, a statistical result receiving module, and a statistical result decryption module;

[0091] The buyer identity registration module is responsible for the verification and registration process of the buyer's identity. New users register through the buyer identity registration module before use. The user provides necessary authentication information, and the buyer identity registration module encrypts the authentication information and submits it to the blockchain network for verification to create a unique identity identifier. After the identity verification is passed, the identity and corresponding public key information of the buyer user will be recorded on the blockchain to provide an identity verification basis for subsequent transactions and data encryption for subsequent transactions.

[0092] The order creation module is responsible for the creation and management process of the buyer's order. The buyer inputs the details of the buyer's order through the order creation module, such as required statistical requirements (statistical indicators, statistical dimensions), data requirements (geographical scope, time range, commodity scope), and output requirements (display charts, file types). After the buyer's order is created, it is uploaded to the trusted data trading platform system for valuation;

[0093] The statistical result receiving module is responsible for receiving the final required data statistical results. When the trusted data trading trusted platform system performs privacy and security calculations on the data, the generated statistical results will be sent to the statistical result receiving module;

[0094] The statistical result decryption module is responsible for decrypting the received encrypted statistical results. The buyer decrypts the data with his own private key to obtain the final desired statistical result information.

[0095] The seller system includes a seller identity registration module, a data authorization module, a data monitoring module, and a data statistics encryption module;

[0096] The seller identity registration module is responsible for the verification and registration process of the seller's identity. New users need to register before use. The user needs to provide necessary authentication information, and the seller identity registration module encrypts the authentication information and submits it to the blockchain network for verification to create a unique identity identifier. After the identity verification is passed, the identity and corresponding public key information of the seller user will be recorded on the blockchain to provide an identity verification basis for subsequent transactions;

[0097] The data authorization module is responsible for managing the access rights of the seller's data, ensuring that only the authorized trusted data trading trusted platform system can access specific data;

[0098] The data monitoring module is responsible for real-time monitoring of the data status and transaction behavior, providing full life cycle traceability of the data;

[0099] The data statistics encryption module is responsible for encrypting the original data or statistical information to protect the privacy and data security of the seller.

[0100] The said trusted data trading platform system includes an order valuation module, a data platform database query module, a data transaction record blockchain module, a privacy and security computing library creation module, a data content return module, an intelligent contract creation and deployment module, a data content encryption and decryption module, and a data content request module.

[0101] The order valuation module is responsible for estimating a price range based on the buyer's order information to ensure that the buyer makes payment within an acceptable price range;

[0102] The data platform database query module is responsible for querying the information in the database of the data trading platform;

[0103] The data transaction record blockchain module is responsible for recording the usage of data every time data is traded;

[0104] The privacy and security computing library creation module is responsible for creating a series of privacy and security computing algorithm interfaces for the invocation of privacy and security intelligent contracts to facilitate more convenient privacy and security computing. The privacy and security computing algorithms include homomorphic encryption algorithms, privacy and security intersection algorithms, privacy and security union algorithms, and secret sharing algorithms;

[0105] The data content return module is responsible for returning the statistical results after privacy computing to the buyer system;

[0106] The intelligent contract creation and deployment module is responsible for creating specific privacy and security computing contracts according to the buyer's order requirements of the user for subsequent encryption computing of data;

[0107] The data content request module is responsible for the data trading platform system to initiate a request for the qualified data of the seller system.

[0108] The said blockchain system includes a data transaction construction module, a data upload record storage module, a data usage record storage module, an intelligent contract execution module, and a seller data hash commitment deposit and evidence module;

[0109] The data transaction construction module is responsible for constructing and initiating a data transaction request. The trusted data trading platform system initiates a data transaction. After the transaction construction is completed, the information will be added to the blockchain network for confirmation;

[0110] The data upload record saving module is responsible for recording the uploaded data information, such as upload time, data size, and data hash;

[0111] The data usage record saving module is responsible for recording the access and usage of data each time, such as usage time, user identity, and data range used;

[0112] The smart contract execution module is responsible for automatically executing the privacy and security computing contract terms. When the transaction conditions are met, the smart contract will be automatically triggered to perform related operations;

[0113] The seller data hash commitment depository module is responsible for saving the hash commitment generated by the seller, ensuring that the seller cannot deny the originality and integrity of the data, and strengthening the security and credibility of data transactions.

[0114] In the embodiments provided by the present invention, it should be understood that the disclosed structure and method can be implemented in other ways. For example, the structural embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the displayed or discussed coupling or direct coupling or communication connection between each other can be through some interfaces. The indirect coupling or communication connection of the structure or unit can be in an electrical, mechanical or other form.

[0115] In addition, each functional unit in various embodiments of the present invention can be integrated in a processing unit, or each unit can exist physically alone, or two or more units can be integrated in one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

[0116] The above are only the specific embodiments of the present invention, enabling those skilled in the art to understand or implement the present invention. Various modifications to these embodiments will be obvious to those skilled in the art. The general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to these embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features claimed herein.

Claims

1. A data trusted transaction method based on blockchain and privacy computing, characterized in that, Including: The seller counts the local data according to the set data digest format to form a data digest, encrypts the data digest with the public key of the trusted data trading platform system, and uploads it to the data digest library of the trusted data trading platform system for storage; The buyer generates a buyer's order in the buyer's system according to the information required, and submits it to the trusted data trading platform system after encrypting it with the public key of the trusted data trading platform system; The trusted data trading platform system evaluates the content of the buyer's order according to the valuation rules. After the buyer accepts the valuation result, the trusted data trading platform system generates a prepayment contract, and the buyer pays the payment amount of the prepayment contract to the trusted data trading platform system; The trusted data trading platform system queries the data digest library and the content of the platform database according to the buyer's order information, and sends the data request to the seller that meets the buyer's order conditions; After receiving the data request from the trusted data trading platform system, the seller queries in the local database to obtain the target data that meets the buyer's order conditions. For the target data that meets the high privacy requirements, through the data non-out-of-domain privacy security policy processing, the generation of the statistical information of the high privacy target data is realized, the on-chain encryption calculation of the statistical information is carried out and fed back to the buyer; among them, the privacy security policy of data non-out-of-domain includes: performing data aggregation calculation on the qualified target data to generate the required statistical information; encrypting the statistical information once with the buyer's public key and then encrypting it twice with the public key of the trusted data trading platform system to achieve double encryption of the statistical information; performing hash commitment on the statistical information SI to generate a hash commitment proof: HashC(SI)=hash(SI), where hash() is a hash function; uploading the doubly encrypted statistical information Enc(SI) and the hash commitment proof HashC(SI) to the trusted data trading platform system, the hash commitment is uploaded by the trusted data trading platform system to the blockchain for deposit, and the doubly encrypted statistical information is decrypted once by the trusted data trading platform system; the trusted data trading platform system aggregates the statistical information of all sellers and the statistical information of the platform database, uploads it to the blockchain, and uses the on-chain privacy security calculation contract for calculation to obtain the encrypted statistical result returned by the blockchain; the trusted data trading platform system sends the encrypted statistical result to the buyer, and the buyer performs secondary decryption with its own private key to obtain the final statistical result; For target data that does not meet high privacy requirements, it is processed through the data outbound privacy security policy to achieve desensitization, on-chain encryption calculation of the target data, and feedback to the buyer; among them, the privacy security policy for data outbound includes: desensitizing unnecessary sensitive information fields of eligible target data to obtain desensitized data; first encrypting the desensitized data once with the buyer's public key, and then encrypting it twice with the public key of the trusted data trading platform system, and uploading the doubly encrypted desensitized data to the trusted data trading platform system; the trusted data trading platform system decrypts the doubly encrypted desensitized data once with its own public key, uploads the data after the first decryption and the data queried from the platform database to the blockchain, and performs encrypted calculation using the privacy security calculation contract on the chain to obtain the statistical result of the encrypted calculation returned by the blockchain; the trusted data trading platform system sends the encrypted statistical result to the buyer, and the buyer uses its own private key to decrypt the statistical result of the encrypted calculation twice to obtain the final statistical result; After the transaction is completed, the prepayment contract is triggered to automatically allocate the amount to the seller who provides the target data.

2. The data trusted transaction method based on blockchain and privacy computing according to claim 1, characterized in that The buyer and the seller register their identities in the buyer system and the seller system respectively, and use the asymmetric encryption algorithm to generate a pair of public and private keys for the registered buyer and seller. The identities of the buyer and seller users and the corresponding public key information are recorded on the blockchain for identity verification and encryption during the data transaction process.

3. The data trustworthy trading method based on blockchain and privacy computing according to claim 1, wherein The definition of the data digest format is as follows: DS = <SellAddress, KeyField, DataContent, UploadTime> pk_platform , Among them, SellAddress represents the address of the seller in the data digest; KeyField represents the key fields, including one or several combinations of the following key fields: product name, product brand, transaction time, city where located; DataContent represents the content of the data digest, including one or several combinations of the following content: weekly sales volume statistics of each product, monthly sales volume statistics of each product, quarterly sales volume statistics of each product; UploadTime represents the time when the data digest is uploaded, and pk_platform represents the public key of the trusted data trading platform system.

4. The data trusted transaction method based on blockchain and privacy computing according to claim 1, characterized in that, The content format of the buyer's order is as follows: OrderContent=<Indicator,Dimension,DataRange,(Option)> pk_platform , OrderContent represents the order content; Indicator refers to the metrics to be counted, including one or several combinations of the following metrics: sales volume, sales amount, sales volume ratio, sales amount ratio; Dimension refers to the dimensions to be counted, including one or several combinations of the following dimensions: brand name, brand category, location, payment method, gender; DataRange refers to the data range to be counted, including one or several combinations of the following ranges: product range, city range, time range, age range, Option is an optional item, and pk_platform represents the public key of the trusted data trading platform system.

5. The data trusted transaction method based on blockchain and privacy computing according to claim 1, characterized in that, The format of the statistical information is specified by the trusted data trading platform system, and the format is as follows: SI=<DSAddress, Timestamp, <Information_1,Information_2, ...>> DSAddress represents the address of the seller in the statistical information, Timestamp represents the time when the seller uploads the statistical information, and Information_i, where i = 1, 2,... represents the key fields of the statistical information, which are generated by the trusted data trading platform system according to the order format.

6. The data trusted transaction method based on blockchain and privacy computing according to claim 1, characterized in that The seller sets data access permissions to allow the authorized trusted data trading platform system to access the seller's data. The seller monitors the status of the data and the behavior of the transaction, and provides traceability of the entire life cycle of the data.

7. A trusted data trading system based on blockchain and privacy computing, which is used to implement the trusted data trading method based on blockchain and privacy computing as described in any one of claims 1-6, and is characterized in that, Including: The seller system, the buyer system, the trusted data trading platform system, and the blockchain system. Both the seller system and the buyer system support interaction with the trusted data trading platform system, and the trusted data trading platform system supports interaction with the blockchain system; The buyer system includes: a buyer identity registration module, an order creation module, a statistical result receiving module, and a statistical result decryption module; The seller system includes: a seller identity registration module, a data authorization module, a data monitoring module, and a data statistics encryption module; The trusted data trading platform system includes: an order valuation module, a data platform database query module, a data transaction record chain - up module, a privacy - safe computing library creation module, a data content return module, a smart contract creation and deployment module, a data content encryption and decryption module, and a data content request module; The blockchain system includes: a data transaction construction module, a data upload record storage module, a data usage record storage module, a smart contract execution module, and a seller data hash commitment deposit and proof module.

8. The trusted data trading system based on blockchain and privacy computing according to claim 7, characterized in that, The buyer identity registration module is responsible for the verification and registration process of the buyer's identity; new users need to register through the buyer identity registration module before use. The user provides necessary authentication information, and the buyer identity registration module encrypts the authentication information and submits it to the blockchain network for verification, creating a unique identity identifier. After the identity verification is passed, the identity and corresponding public key information of the buyer user will be recorded on the blockchain; the order creation module is responsible for the creation and management process of the buyer's order; The buyer inputs the details of the buyer's order through the order creation module. After the buyer's order is created, it is uploaded to the trusted data trading platform system for valuation; The statistical result receiving module is responsible for receiving the final required data statistical results. When the trusted data trading platform system performs privacy - safe calculations on the data, the generated statistical results will be sent to the statistical result receiving module; The statistical result decryption module is responsible for decrypting the received encrypted statistical results; The seller identity registration module is responsible for the verification and registration process of the seller's identity; New users need to register before use. The user needs to provide necessary authentication information. The seller identity registration module encrypts the authentication information and submits it to the blockchain network for verification, creating a unique identity identifier. After the identity verification is passed, the identity and corresponding public key information of the seller user will be recorded on the blockchain; the data authorization module is responsible for managing the access permissions of the seller's data to ensure that only the authorized trusted data trading platform system can access specific data; The data monitoring module is responsible for real - time monitoring of the status of the data and the behavior of the transaction, and provides traceability of the entire life cycle of the data; The data statistics encryption module is responsible for encrypting the original data or statistical information; The order valuation module is responsible for valuing the content of the buyer's order according to the valuation rules to ensure that the buyer makes payment within an acceptable price range; The data platform database query module is responsible for querying information from the database content of the trusted data trading platform system; the data transaction record blockchain module is responsible for recording and blockchain-ing the usage of data each time data is traded; The privacy and security computing library creation module is responsible for creating privacy and security computing algorithm interfaces for the invocation of privacy and security smart contracts. The privacy and security computing algorithms include homomorphic encryption algorithms, privacy and security intersection algorithms, privacy and security union algorithms, and secret sharing algorithms; The data content return module is responsible for returning the statistical results after privacy and security computing to the buyer system; the smart contract creation and deployment module is responsible for creating specific privacy and security computing contracts according to the buyer's order requirements of the user for subsequent encrypted computing of data; the data content request module is responsible for the trusted data trading platform system to initiate a request for data that meets the conditions from the seller system; The data transaction construction module is responsible for constructing and initiating data transaction requests. When the trusted data trading platform system initiates a data transaction and the transaction construction is completed, the information will be added to the blockchain network for confirmation; the data upload record storage module is responsible for recording the uploaded data information; The data usage record storage module is responsible for recording the access and usage of data each time; The smart contract execution module is responsible for automatically executing the terms of the privacy and security computing contract. When the transaction conditions are met, the smart contract will be automatically triggered to execute relevant operations; the seller data hash commitment deposit and evidence module is responsible for saving the hash commitment generated by the seller.

Images