Express data cross-border sharing method based on blockchain and proxy re-encryption

Abstract

This invention discloses a method for cross-border sharing of express delivery data based on blockchain and proxy re-encryption, comprising the following steps: generating system public parameters PP and a public-private key pair according to security parameter λ; the auditing department obtains the ciphertext of the symmetric key and storage address from the storage blockchain, and decrypts it into plaintext; after the auditing department approves M, it performs the first encryption on M and uploads the obtained initial ciphertext CT and digest to the shared blockchain; the proxy node uses the public key pk provided by the auditing department and the express delivery company's overseas data platform. U Generate re-encryption key rk A→U The proxy node uses the re-encryption key rk provided by the auditing department. A→U The initial ciphertext CT is re-encrypted, and the re-encrypted ciphertext CT' is sent to the overseas data platform of the express delivery company. The overseas data platform of the express delivery company uses its private key to decrypt the re-encrypted ciphertext CT' to obtain the required plaintext data M. This invention enables secure and private cross-border sharing of express delivery data under supervision with low overhead.

Description

Technical Field

[0001] This invention belongs to the field of logistics technology, and more specifically, relates to a method for cross-border sharing of express delivery data based on blockchain and agent re-encryption. Background Technology

[0002] With the development of technologies such as big data and cloud computing, the amount of data generated by express delivery services has increased dramatically, and the demand for data utilization has continued to grow. This has placed higher demands on data transmission, storage, and sharing.

[0003] However, with the increasingly complex international situation, countries around the world have introduced laws and regulations related to cross-border data transfer. Express delivery data carries user information, and whether Chinese express delivery companies are opening branches overseas or engaging in international express delivery business, cross-border sharing of express delivery data is involved. Currently, the compliance of express delivery companies with relevant laws and regulations is rather ambiguous, and there is a lack of effective technical means for supervision. Therefore, new technological means are needed to achieve cross-border sharing of express delivery data under supervision. At present, there is no reasonable solution to this problem.

[0004] Therefore, there is an urgent need for a new method for cross-border sharing of express delivery data based on blockchain and agent re-encryption. Summary of the Invention

[0005] This invention proposes a method for cross-border sharing of express delivery data based on blockchain and proxy re-encryption, aiming to solve the problems mentioned in the background technology.

[0006] To address at least one of the aforementioned technical problems, according to one aspect of the present invention, a method for cross-border sharing of express delivery data based on blockchain and proxy re-encryption is provided, comprising the following steps:

[0007] Step 1: Based on the security parameter λ, generate the system public parameter PP, and generate public-private key pairs (PK) for the auditing department and the express delivery company's overseas data platform. A ,sk A ) and (pk U ,sk U );

[0008] Step 2: The auditing department obtains the ciphertext of the symmetric key and storage address from the storage blockchain, decrypts it into plaintext, and then obtains the ciphertext of the express delivery data that needs to be shared across borders from the domestic cloud server based on this plaintext information, and decrypts it into plaintext M; after the auditing department approves M, it performs the first encryption on M and uploads the obtained initial ciphertext CT and digest to the shared blockchain.

[0009] Step 3: The proxy node, based on the information provided by the auditing department... Public key comparison with overseas data platforms of express delivery companiesU Generate re-encryption key rk A→U ;

[0010] Step 4: The proxy node, based on the information provided by the auditing department... and Use the re-encryption key rk A→U The initial ciphertext CT is re-encrypted, and the re-encrypted ciphertext CT' is sent to the express delivery company's overseas data platform;

[0011] Step 5: The express delivery company's overseas data platform uses its private key to decrypt the re-encrypted ciphertext CT' to obtain the required plaintext data M.

[0012] Furthermore, step 1 specifically involves:

[0013] Based on the security parameter λ, two cyclic groups G and G of order q are selected. T Where q is a large prime number of length λ bits, and g, g1, h1, h2 ∈ G are generators of G; e: G × G → G T Use a bilinear mapping function; choose a hash function H: Where H represents mapping a string of arbitrary length consisting of 0s or 1s to a group of q-order integers consisting of elements (0, 1, ..., q-1). Above; Generate system common parameters PP = {q, g, G, G} T According to the system's common parameter PP, the auditing department and the express delivery company's overseas data platform randomly select... And generate their respective public and private key pairs (pk) A ,sk A ) and (pk U ,sk U ), where sk A =x A , sk U =x U ,

[0014] Furthermore, step 2 specifically involves the auditing department randomly selecting... Based on the system's public parameter PP, the audit department's public key pk A Given plaintext M of the express delivery data, calculate the initial ciphertext CT = (c1, c2, c3), and upload the initial ciphertext CT and the digest to the blockchain, where c1 = g k c2 = M·e(g1,pk) A ) k c3 = H(H(c1)||H(c1||c2)) k .

[0015] Furthermore, in step 2, the domestic data platform of the express delivery company uses attribute encryption to store the symmetric key and storage address in the encrypted storage blockchain.

[0016] Furthermore, step 3 specifically involves: randomly selecting proxy nodes. And based on the system's common parameter PP, the audit department provided... Public key comparison with overseas data platforms of express delivery companies U Generate a re-encryption key rk A→U = (rk1, rk2, rk3, rk4), where rk1 = g r ,

[0017] rk3=e(pk U ,pk U ) r ,

[0018] Furthermore, step 4 specifically involves: the proxy node acting on the information provided by the auditing department. and Use the re-encryption key rk A→U The initial ciphertext CT is re-encrypted, and the re-encrypted ciphertext CT' = (c1', c2', c3', c4', c5', c6') is sent to the overseas data platform of the express delivery company, where c1' = c1, c2' = c2·e(c1, rk2), c3' = c3, and c4' = rk1.

[0019] Furthermore, step 5 specifically involves: the express delivery company's overseas data platform using the system's public parameter PP and the private key sk... U Decrypting the re-encrypted ciphertext CT' yields the desired plaintext data M, where

[0020] According to another aspect of the present invention, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps of the cross-border sharing method for express delivery data based on blockchain and proxy re-encryption of the present invention.

[0021] According to another aspect of the present invention, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the steps of the cross-border sharing method for express delivery data based on blockchain and proxy re-encryption of the present invention.

[0022] Compared with existing technologies, the beneficial effects of the above-mentioned method of the present invention are as follows: The present invention collects express delivery data through the domestic data platform of express delivery companies, and stores the express delivery data in a domestic cloud server with symmetric encryption. The symmetric key and storage address information are encrypted and stored on the storage blockchain. The review department obtains the symmetric key and storage address of the express delivery data in the domestic cloud server from the storage blockchain, and approves the express delivery data that needs to be shared across borders to ensure that it does not contain personal privacy information. Express delivery data that meets the requirements for data export is encrypted and sent to the sharing blockchain by the review department. The proxy node realizes secure and private sharing of express delivery data through proxy re-encryption technology, and completes the sharing with low overhead. Attached Figure Description

[0023] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings of the embodiments will be briefly described below. Obviously, the drawings described below only relate to some embodiments of the present invention and are not intended to limit the present invention.

[0024] Figure 1 This is a flowchart of the method of the present invention;

[0025] Figure 2 This is a schematic diagram illustrating how the review department obtains plaintext data of express delivery packages to be reviewed in Embodiment 1 of the present invention. Detailed Implementation

[0026] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention.

[0027] Unless otherwise defined, the technical or scientific terms used herein shall have the ordinary meaning as understood by one of ordinary skill in the art to which this invention pertains.

[0028] Example 1:

[0029] like Figure 1-2 As shown, this invention proposes a method for cross-border sharing of express delivery data based on blockchain and agent re-encryption.

[0030] like Figure 1 As shown, a method for cross-border sharing of express delivery data based on blockchain and agent re-encryption includes the following steps:

[0031] Step 1: Based on the security parameter λ, generate the system public parameter PP, and generate public-private key pairs (PK) for the auditing department and the express delivery company's overseas data platform. A ,sk A ) and (pk U ,sk U).

[0032] Based on the security parameter λ, two cyclic groups G and G of order q are selected. T Where q is a large prime number of length λ bits, and g, g1, h1, h2 ∈ G are generators of G; e: G × G → G T Use a bilinear mapping function; choose a hash function H: Where H represents mapping a string of arbitrary length consisting of 0s or 1s to a group of q-order integers consisting of elements (0, 1, ..., q-1). Above; Generate system common parameters PP = {q, g, G, G} T According to the system's common parameter PP, the auditing department and the express delivery company's overseas data platform randomly select... And generate their respective public and private key pairs (pk) A ,sk A ) and (pk U ,sk U ), where sk A =x A , sk U =x U ,

[0033] Step 2: The auditing department obtains the ciphertext of the symmetric key and storage address from the storage blockchain, decrypts it into plaintext, and then, based on this plaintext information, obtains the ciphertext of the express delivery data to be shared across borders from the domestic cloud server, and decrypts it into plaintext M. After the auditing department approves M, it performs the first encryption on M and uploads the resulting initial ciphertext CT and digest to the shared blockchain.

[0034] The review department selects randomly. Based on the system's public parameter PP, the audit department's public key pk A Given plaintext M of the express delivery data, calculate the initial ciphertext CT = (c1, c2, c3), and upload the initial ciphertext CT and the digest to the blockchain, where c1 = g k c2 = M·e(g1,pk) A ) k c3 = H(H(c1)||H(c1||c2)) k .

[0035] In step 2, the courier company's domestic data platform can use attribute encryption to store the symmetric key and storage address in the blockchain. This method adds attributes to the review department during encryption, facilitating direct decryption and shortening the review time. The method for obtaining plaintext courier data to be reviewed in this embodiment is as follows: Figure 2As shown.

[0036] Step 3: The proxy node, based on the information provided by the auditing department... Public key comparison with overseas data platforms of express delivery companies U Generate re-encryption key rk A→U .

[0037] Proxy nodes are selected randomly. And based on the system's common parameter PP, the audit department provided... Public key comparison with overseas data platforms of express delivery companies U Generate a re-encryption key rk A→U = (rk1, rk2, rk3, rk4), where rk1 = g r , rk3=e(pk U ,pk U ) r ,

[0038] Step 4: The proxy node, based on the information provided by the auditing department... and Use the re-encryption key rk A→U The initial ciphertext CT is re-encrypted, and the re-encrypted ciphertext CT' is sent to the express delivery company's overseas data platform.

[0039] The proxy node is based on the information provided by the auditing department. and Use the re-encryption key rk A→U The initial ciphertext CT is re-encrypted, and the re-encrypted ciphertext CT' = (c1', c2', c3', c4', c5', c6') is sent to the overseas data platform of the express delivery company, where c1' = c1, c2' = c2·e(c1, rk2), c3' = c3, and c4' = rk1.

[0040] Step 5: The express delivery company's overseas data platform uses its private key to decrypt the re-encrypted ciphertext CT' to obtain the required plaintext data M.

[0041] The overseas data platform of the express delivery company uses the system's public parameter PP and the private key sk U Decrypting the re-encrypted ciphertext CT' yields the desired plaintext data M, where

[0042] Example 2:

[0043] The computer-readable storage medium of this embodiment stores a computer program that, when executed by a processor, implements the steps in the method for cross-border sharing of express delivery data based on blockchain and proxy re-encryption in Embodiment 1.

[0044] The computer-readable storage medium in this embodiment can be an internal storage unit of the terminal, such as the terminal's hard disk or memory; the computer-readable storage medium in this embodiment can also be an external storage device of the terminal, such as a plug-in hard disk, smart memory card, secure digital card, flash memory card, etc. equipped on the terminal; furthermore, the computer-readable storage medium can include both the terminal's internal storage unit and external storage devices.

[0045] The computer-readable storage medium of this embodiment is used to store computer programs and other programs and data required by the terminal. The computer-readable storage medium can also be used to temporarily store data that has been output or will be output.

[0046] Example 3:

[0047] The computer device of this embodiment includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, it implements the steps in the method for cross-border sharing of express delivery data based on blockchain and proxy re-encryption in Embodiment 1.

[0048] In this embodiment, the processor can be a central processing unit, or other general-purpose processors, digital signal processors, application-specific integrated circuits, off-the-shelf programmable gate arrays or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor, etc. The memory can include read-only memory and random access memory, and provides instructions and data to the processor. A portion of the memory can also include non-volatile random access memory. For example, the memory can also store device type information.

[0049] Those skilled in the art will understand that the content disclosed in the embodiments can be provided as a method, system, or computer program product. Therefore, this solution can take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this solution can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage) containing computer-usable program code.

[0050] This solution is described with reference to flowchart illustrations and / or block diagrams of methods and computer program products according to embodiments of this solution. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing device, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0051] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0052] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0053] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. The storage medium can be a magnetic disk, optical disk, read-only memory (ROM), or random access memory (RAM), etc.

[0054] The examples described herein are merely preferred embodiments of the invention and are not intended to limit the concept and scope of the invention. Any modifications and improvements made by those skilled in the art to the technical solutions of the invention without departing from the design concept of the invention should fall within the protection scope of the invention.

Claims

1. A method for cross-border sharing of express delivery data based on blockchain and proxy re-encryption, characterized in that, Includes the following steps: Step 1: Based on safety parameters Generate system common parameters It also generates public and private key pairs for the auditing department and the express delivery company's overseas data platform. and ; Step 2: The auditing department obtains the ciphertext of the symmetric key and storage address from the storage blockchain, decrypts it into plaintext, and then, based on this plaintext information, retrieves the ciphertext of the express delivery data that needs to be shared across borders from the domestic cloud server, and decrypts it into plaintext. The auditing department After the review is approved, Perform the first encryption and obtain the initial ciphertext. And upload the summary to the shared blockchain; Step 3: The proxy node, based on the information provided by the auditing department... Public keys of overseas data platforms of express delivery companies Generate re-encryption key ; Step 4: The proxy node, based on the information provided by the auditing department... and Use re-encryption key For the initial ciphertext Perform re-encryption and then re-encrypt the ciphertext. Send to the overseas data platform of the courier company; Step 5: The express delivery company's overseas data platform uses its private key to re-encrypt the ciphertext. Decrypt to obtain the required plaintext data ; Step 1 specifically includes: According to safety parameters Choose two Cyclic group of order and ,in for Large prime numbers with a bit length , , , for Generators; Use a bilinear mapping function; choose a hash function. ,in This represents mapping a string of arbitrary length consisting of 0s or 1s to a string composed of elements. Composed of Group of integers of order Above; Generate system common parameters According to system common parameters The auditing department and the express delivery company's overseas data platform randomly selected and generate their respective public and private key pairs. and ,in , , , ; Step 2 is as follows: The review department selects randomly. According to system common parameters The public key of the auditing department and express delivery data in plain text Calculate the initial ciphertext and the initial ciphertext And the summary is uploaded to the blockchain, where , , ; Step 3 specifically involves: Proxy nodes are selected randomly. And based on the system common parameters The audit department provided Public keys of overseas data platforms of express delivery companies Generate a re-encryption key ,in , , , ; Step 4 is as follows: The proxy node is based on the information provided by the auditing department. and Use re-encryption key For the initial ciphertext Perform re-encryption and then re-encrypt the ciphertext. Send to the overseas data platform of the express delivery company, among which , , , , , .

2. The method according to claim 1, characterized in that, In step 2, the domestic data platform of the express delivery company uses attribute encryption to store the symmetric key and storage address in the encrypted storage blockchain.

3. The method according to claim 1, characterized in that, Step 5 specifically involves: the express delivery company's overseas data platform using system public parameters. and using the private key Re-encrypt ciphertext Decrypt to obtain the required plaintext data ,in .

4. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by the processor, it implements the steps in the method for cross-border sharing of express delivery data based on blockchain and agent re-encryption as described in any one of claims 1 to 3.

5. A computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the steps in the method for cross-border sharing of express delivery data based on blockchain and proxy re-encryption as described in any one of claims 1 to 3.

Images