A data element trusted circulation system and method based on blockchain

Abstract

The present invention provides a data element trusted circulation system and method based on blockchain, which relates to the field of data communication, including a blockchain network, an operation module, a transaction module and a supervision module. The blockchain network registers offline trusted entities as trust nodes, the number of trust nodes is n, the blockchain network registers users as user nodes, the user nodes and trust nodes are interconnected, and n hidden nodes are also arranged in the blockchain network; the present invention encrypts the summary of a data product by a private key, and other user nodes can decrypt it by a product public key, so as to browse the summary and understand the product, which greatly ensures the security of the data product information, and the generation of the public key and the private key is generated by the data product information, so that the private key and the public key are unique and not easy to be cracked, which ensures the difference between the public key and the private key of different data products, and further ensures the security of the data product.

Description

Technical Field

[0001] The present invention relates to the field of data communication technology, and in particular to a blockchain-based data element trusted circulation system and method thereof. Background Art

[0002] The current data circulation schemes are rich and varied, and each has its own advantages and disadvantages. For example, data circulation based on the data sharing and exchange system can effectively solve the data silos between departments or systems;

[0003] Breaking through data barriers to a certain extent provides convenience for various departments or systems in data analysis and governance, but there are also certain problems, such as the inability to ensure security during data exchange and transmission, as follows:

[0004] 1. The transmission channel is very easy to be captured and analyzed to obtain data;

[0005] 2. Each department or system node itself cannot provide security protection and is likely to be attacked by hackers to steal data from the node server;

[0006] In order to ensure the security of data products during storage and transaction, the present invention proposes a blockchain-based data element trusted circulation system and method. Summary of the invention

[0007] In response to the above problems, the present invention proposes a blockchain-based data element trusted circulation system and method, which encrypts the summary of the data product through a private key, and other user nodes can decrypt it through the product public key, so as to browse the summary and understand the product, thereby greatly ensuring the security of data product information.

[0008] To achieve the purpose of the present invention, the present invention is implemented through the following technical solutions: a blockchain-based data element trusted circulation system, including a blockchain network, an operation module, a transaction module and a supervision module, the blockchain network registers offline trusted entities as trust nodes, the number of the trust nodes is n, the blockchain network registers users as user nodes, the user nodes and the trust nodes are interconnected, the blockchain network is also provided with n hidden nodes, the hidden nodes are only unilaterally connected with the trust nodes, and the trust nodes, user nodes and hidden nodes are all provided with storage modules;

[0009] The hidden nodes and the trusted nodes are used for fragmented storage of data product ciphertexts;

[0010] The operation module is used to transmit the user's registration information to the blockchain network to complete the registration of the user node. The operation module also includes a feature collection module and a replacement module;

[0011] The feature collection module collects information of each data product, wherein the data information of the data product includes a product description, data fields and product examples;

[0012] The replacement module has a replacement code table stored inside, and the replacement module is used to replace letter information in the data product with digital information;

[0013] The operation module generates a public key and a private key of the data product through the received data product information;

[0014] The transaction module is used for publishing data products, generating orders, delivering data products, and generating transaction statistics reports;

[0015] The supervision module is used for service review, transaction supervision, delivery supervision and operation supervision. The supervision module includes a verification module, and the verification module is used to verify the verification of data product information.

[0016] After receiving the registration information sent by the operation module, the blockchain network encrypts it through a hash algorithm to generate a digital identification and uses the identification to generate a user node corresponding to the user in the blockchain network.

[0017] The transaction module extracts the summary of the data product information, encrypts it with a private key to form a ciphertext, and uploads it to the storage module of the user node. Other user nodes can browse the summary of the data product after decrypting the ciphertext with the data product public key of the user node to determine whether to conduct a transaction.

[0018] The operation module replaces the letters in the received data product information with corresponding integers, and the specific replacement method is a=0, b=1, c=2, ..., z=25.

[0019] The method for generating the public key and the private key of the data product includes:

[0020] S1. Digitalize the data product information uploaded by the user node to generate a sequence X, and split the sequence X into prime numbers a and b in the middle of the sequence X;

[0021] S2. If the sequence X cannot be split into two prime numbers, then add an integer Z after the sequence X that can make the sequence X generate two prime numbers;

[0022] S3, multiplying the prime number a and the prime number b to obtain the product y;

[0023] S4. Calculate the Euler function of y, φ(y)=(a-1)(b-1);

[0024] S5. Randomly select an integer e, and e satisfies 1<e<φ(y);

[0025] S6. Calculate the modular inverse element d of e with respect to φ(y), that is:

[0026] ed1≡(modφ(y));

[0027] The above formula is equivalent to ed - 1 = kφ(y). Based on the known e and φ(y), d is calculated using the extended Euclidean algorithm.

[0028] S7. Encapsulate y and e into a public key, and encapsulate y and d into a private key.

[0029] The transaction module generates a ciphertext Q after encrypting the complete information of the data product with a public key, splits the ciphertext Q into n fragments, and the transaction module randomly stores the split fragment information in the storage modules of n-1 trusted nodes and 1 hidden node.

[0030] The splitting method of the ciphertext Q includes:

[0031] H1, after scanning the text information of the ciphertext Q, select n-3 common nodes and 2 adjacent key nodes;

[0032] H2. Split the text information of the ciphertext Q at the common nodes and the key nodes, and send the ciphertext between the two key nodes to the hidden nodes for storage.

[0033] When the encrypted information is split, a set of hidden timestamps are generated on the fragmented information according to the order of information splitting, and a set of correctly sorted series is generated and sent to the supervision module.

[0034] The verification method of the verification module includes:

[0035] J1. Hash the ciphertext Q to obtain a hash value of fixed length;

[0036] J2. Perform hash processing on the n fragments after splitting. Each fragment obtains a unique hash value and stores it in the verification module.

[0037] J3. After the fragment transmission is completed, the verification module compares the calculated hash value of the fragment with the received hash value to ensure the integrity of each fragment;

[0038] J4. The supervision module reorganizes the n fragment information through the correct sequence of timestamps, and then calculates the hash value of the reorganized information through the verification module;

[0039] J5. Compare the hash value of the reorganized information with the hash value of the ciphertext Q to ensure the integrity of the entire text.

[0040] Using the above data element trusted circulation system, the data element trusted circulation method includes the following steps:

[0041] E1. After the transaction module receives the transaction request, the buyer makes payment through the user node, and the supervision module freezes the payment assets. At the same time, the seller's user node uploads the data product private key to the supervision module and freezes it;

[0042] E2. The transaction module mobilizes the trusted node to send n-1 fragment information to the buyer's user node, and the hidden node sends 1 fragment information to the trusted node that does not participate in this sending work, and the trusted node sends the last fragment information to the buyer's user node;

[0043] E3. The supervision module correctly sorts the n pieces of information according to the stored timestamp sequence, so that the ciphertext obtained by the buyer user node is the correctly sorted ciphertext;

[0044] E4. At the same time, the verification module verifies the hash value of the fragment information to ensure the integrity of the fragment information, and compares the hash value of the reorganized information with the hash value of the ciphertext Q to ensure the integrity of the information;

[0045] E5. When all fragmented information is transmitted and the integrity of the transmitted information is ensured, the regulatory module sends the private key to the buyer's user node and transfers the payment assets to the seller's user node.

[0046] The beneficial effects of the present invention are as follows: the present invention encrypts the user's registration information through a hash algorithm, and generates a unique digital identity through encryption to generate a binary series and upload it to the user node, so that each user node can quickly authenticate and communicate with each other while ensuring the user's privacy and preventing the leakage of user information. The summary of the data product is encrypted by a private key, and other user nodes can decrypt it through the product public key, so as to browse the summary and understand the product, which greatly ensures the security of the data product information. The generation of the public key and the private key is generated by the data product information, so that the private key and the public key are unique and not easy to be cracked, which ensures that the public keys and private keys of different data products are different, and further ensures the security of the data product. After the data product is uploaded to the blockchain network, it is encrypted by the private key of the data product to form a ciphertext, which ensures the security of the data product. The ciphertext is then split into n information fragments. This split storage method further increases the security of data information. The n information is randomly sent to n-1 trusted nodes and one hidden node for storage. The hidden node is only revealed when it is working. At this time, even if a trusted node or all trusted nodes are attacked, resulting in information fragments being leaked, the fragmented information obtained by the attacker is incomplete and the order is random. This greatly increases the security of data products during storage. At the same time, the number of hidden nodes is n, which further increases the security of information sending. At the same time, the system is equipped with a verification module, which calculates the hash value of the overall ciphertext and fragment information, and then compares it with the hash value of the received overall ciphertext and fragment information, thereby verifying the transmitted information to ensure the integrity of the information received by the recipient. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 It is a schematic diagram of the architecture of the present invention.

[0048] Figure 2 It is a schematic diagram of generating user nodes and trust nodes of the present invention.

[0049] Figure 3 It is a schematic diagram of generating the public key and the private key used in the present invention.

[0050] Figure 4 It is a schematic diagram of the flow of data information of the present invention. DETAILED DESCRIPTION

[0051] In order to deepen the understanding of the present invention, the present invention will be further described in detail below in conjunction with examples. The examples are only used to explain the present invention and do not constitute a limitation on the protection scope of the present invention.

[0052] according to Figure 1-Figure 2As shown, this embodiment proposes a blockchain-based data element trusted circulation system, including a blockchain network, an operation module, a transaction module and a supervision module. The blockchain network registers offline entities that can be trusted as trust nodes, and the number of trust nodes is n. The blockchain network registers users as user nodes, and the user nodes and trust nodes are interconnected. The blockchain network is also provided with n hidden nodes, and the hidden nodes are only unilaterally connected with the trust nodes. Storage modules are provided in the trust nodes, user nodes and hidden nodes;

[0053] By building a blockchain network and conducting offline inspections, the trusted subjects will be registered in the blockchain network to build trust nodes to ensure the credibility of the trust nodes. At the same time, for general users, their registration information will be registered on the blockchain network to build user nodes. User nodes can quickly conduct identity authentication and data transactions through the blockchain network.

[0054] The hidden nodes and the trusted nodes are used for fragmented storage of data product ciphertexts;

[0055] Fragmented information is stored through hidden nodes and trusted nodes, thus ensuring the security of information storage. Even if a trusted node or all trusted nodes are breached, it will not cause the leakage of complete information, further increasing the security of information storage. At the same time, hidden nodes are usually not exposed and only connect with trusted nodes when working. Trusted nodes are trustworthy and will not cause hidden nodes to be exposed.

[0056] The operation module is used to transmit the user's registration information to the blockchain network to complete the registration of the user node. The operation module also includes a feature collection module and a replacement module;

[0057] The feature collection module collects information of each data product, wherein the data information of the data product includes a product description, data fields and product examples, which are used to generate a public key and a private key of the data product;

[0058] The replacement module has a replacement code table stored inside, and the replacement module is used to replace the letter information in the data product with digital information, so that it is impossible to reversely deduce all the product information from the public key and the private key;

[0059] The operation module provides users with quick registration and information modification functions, and manages users' data information, data products and orders to facilitate user use;

[0060] The transaction module is used for publishing data products, generating orders, delivering data products, and generating transaction statistics reports;

[0061] The supervision module is used for transaction supervision, delivery supervision and operation supervision. The supervision module includes a verification module, and the verification module is used to verify the verification of data product information.

[0062] The transaction module facilitates users to publish data products, generate orders, deliver data products, and generate transaction statistics reports, while the supervision module is used to ensure the completion of transactions, delivery supervision, and operation supervision, thereby ensuring the operation of the entire system.

[0063] After receiving the registration information sent by the operation module, the blockchain network encrypts it through a hash algorithm to generate a digital identification and uses the identification to generate a user node corresponding to the user in the blockchain network.

[0064] The user's registration information is encrypted through a hash algorithm, and a unique digital identity is generated by encrypting a binary series and uploaded to the user node, so that each user node can quickly authenticate and communicate with each other while ensuring the user's privacy and preventing the leakage of user information.

[0065] according to Figure 3 As shown, the operation module further generates the public key and private key of the data product through the received information of the data product, and the transaction module extracts the summary of the data product information, encrypts it with the private key to form a ciphertext and puts it into the storage module of the user node. After other user nodes decrypt the ciphertext with the data product public key of the user node, they can browse the summary of the data product to determine whether to conduct a transaction.

[0066] The operation module encrypts the summary of the data product with a private key, and other user nodes can decrypt it with the product public key to browse the summary and understand the product, which greatly ensures the security of data product information.

[0067] The operation module replaces the letters in the received data product information with corresponding integers, and the specific replacement method is a=0, b=1, c=2, ..., z=25.

[0068] This replacement method is used to replace the letters in the data product information in order to facilitate the generation of the public key and private key of the data product, and also to prevent the data product information from being reverse parsed.

[0069] The method for generating the public key and private key of the user node includes:

[0070] S1. Digitalize the data product information uploaded by the user node to generate a sequence X, and split the sequence X into prime numbers a and b in the middle of the sequence X;

[0071] S2. If the sequence X cannot be split into two prime numbers, then add an integer Z after the sequence X that can make the sequence X generate two prime numbers;

[0072] S3, multiplying the prime number a and the prime number b to obtain the product y;

[0073] S4. Calculate the Euler function of y, φ(y)=(a-1)(b-1);

[0074] S5. Randomly select an integer e, and e satisfies 1<e<φ(y);

[0075] S6. Calculate the modular inverse element d of e with respect to φ(y), that is:

[0076] ed1≡(modφ(y));

[0077] The above formula is equivalent to ed - 1 = kφ(y). Based on the known e and φ(y), d is calculated using the extended Euclidean algorithm.

[0078] S7. Encapsulate y and e into a public key, and encapsulate y and d into a private key.

[0079] The public key and private key generated by this method can be used to encrypt and decrypt data products, increasing the security of data products. At the same time, the public key and private key generated by this method are unique to the data product and are not easy to be cracked, ensuring that the public keys and private keys of different data products are different, further ensuring the security of data products.

[0080] according to Figure 4 As shown, the transaction module further generates a ciphertext Q after encrypting the complete information of the data product with a public key, splits the ciphertext Q into n fragments, and the transaction module randomly stores the split fragment information in the storage modules of n-1 trusted nodes and 1 hidden node.

[0081] After the data product is uploaded to the blockchain network, it is encrypted using the private key of the data product to form a ciphertext to ensure the security of the data product. The ciphertext is then split into n information fragments. This split storage method further increases the security of the data information, and the n information is randomly sent to n-1 trusted nodes and one hidden node for storage. The hidden node is only revealed when it is working. At this time, even if a trusted node or all trusted nodes are attacked, resulting in the leakage of information fragments, the attacker obtains incomplete fragment information and the order is random, which greatly increases the security of the data product during storage. At the same time, the number of hidden nodes is n, and the number of trusted nodes is also n. When transmitting a specific information, each trusted node only propagates a set of information fragments, further increasing the security of information sending.

[0082] The splitting method of the ciphertext Q includes:

[0083] H1, after scanning the text information of the ciphertext Q, select n-3 common nodes and 2 adjacent key nodes;

[0084] H2. Split the text information of the ciphertext Q at the common nodes and the key nodes, and send the ciphertext between the two key nodes to the hidden nodes for storage.

[0085] By selecting n-3 common nodes and cooperating with 2 key nodes, the ciphertext Q is irregularly divided into n fragments, and the fragments formed between the two key nodes are sent to the hidden node for storage, which further increases the security of the information in this system.

[0086] When the encrypted information is split, a set of hidden timestamps are generated on the fragmented information according to the order of information splitting, and a set of correct sorted series are generated and sent to the supervision module. This system authenticates the fragmented information through the timestamp, and the timestamp is hidden. The supervision module ensures the stable sending of the fragmented information through the timestamp, and at the same time, the fragmented information is correctly sorted through the stored sorted series and the timestamp to ensure the reception and decryption of the ciphertext after it is sent.

[0087] The verification method of the verification module includes:

[0088] J1. Hash the ciphertext Q to obtain a hash value of fixed length;

[0089] J2. Perform hash processing on the n fragments after splitting. Each fragment obtains a unique hash value and stores it in the verification module.

[0090] J3. After the fragment transmission is completed, the verification module compares the calculated hash value of the fragment with the received hash value to ensure the integrity of each fragment;

[0091] J4. The supervision module reorganizes the n fragment information through the correct sequence of timestamps, and then calculates the hash value of the reorganized information through the verification module;

[0092] J5. Compare the hash value of the reorganized information with the hash value of the ciphertext Q to ensure the integrity of the entire text.

[0093] By setting up the verification module, the integrity of the received information after the fragmented information is transmitted can be verified, thereby ensuring the consistency before and after the information transmission and ensuring the completion of the transaction.

[0094] Using the above data element trusted circulation system, the data element trusted circulation method includes the following steps:

[0095] E1. After the transaction module receives the transaction request, the buyer makes payment through the user node, and the supervision module freezes the payment assets. At the same time, the seller's user node uploads the data product private key to the supervision module and freezes it;

[0096] E2. The transaction module mobilizes the trusted node to send n-1 fragment information to the buyer's user node, and the hidden node sends 1 fragment information to the trusted node that does not participate in this sending work, and the trusted node sends the last fragment information to the buyer's user node;

[0097] E3. The supervision module correctly sorts the n pieces of information according to the stored timestamp sequence, so that the ciphertext obtained by the buyer user node is the correctly sorted ciphertext;

[0098] E4. At the same time, the verification module verifies the hash value of the fragment information to ensure the integrity of the fragment information, and compares the hash value of the reorganized information with the hash value of the ciphertext Q to ensure the integrity of the information;

[0099] E5. When all fragmented information is transmitted and the integrity of the transmitted information is ensured, the regulatory module sends the private key to the buyer's user node and transfers the payment assets to the seller's user node.

[0100] The above shows and describes the basic principles, main features and advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments. The above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. A trusted circulation system for data elements based on blockchain, characterized by: It includes a blockchain network, an operation module, a transaction module and a supervision module. The blockchain network registers offline trusted entities as trust nodes. The number of trust nodes is n. The blockchain network registers users as user nodes. The user nodes and trust nodes are interconnected. The blockchain network is also provided with n hidden nodes. The hidden nodes are only unilaterally connected with the trust nodes. The trust nodes, user nodes and hidden nodes are all provided with storage modules. The hidden nodes and the trusted nodes are used for fragmented storage of the ciphertext of the data product; The operation module is used to transmit the user's registration information to the blockchain network to complete the registration of the user node. The operation module also includes a feature collection module and a replacement module; The feature collection module collects information of each data product, wherein the data information of the data product includes a product description, data fields and product examples; The replacement module has a replacement code table stored inside, and the replacement module is used to replace letter information in the data product with digital information; The operation module generates a public key and a private key of the data product through the received data product information; The transaction module is used for publishing data products, generating orders, delivering data products, and generating transaction statistics reports; The supervision module is used for service review, transaction supervision, delivery supervision and operation supervision. The supervision module includes a verification module, which is used to verify the verification of data product information; The transaction module extracts the summary of the data product information, encrypts it with a private key to form a ciphertext, and puts it into the storage module of the user node. Other user nodes can browse the summary of the data product after decrypting the ciphertext with the data product public key of the user node to determine whether to conduct a transaction; The transaction module generates a ciphertext Q after encrypting the complete information of the data product with a public key, splits the ciphertext Q into n fragments, and the transaction module randomly stores the split fragment information in the storage modules of n-1 trusted nodes and 1 hidden node; The splitting method of the ciphertext Q includes: H1, after scanning the text information of the ciphertext Q, select n-3 common nodes and 2 adjacent key nodes; H2, split the text information of the ciphertext Q at the common nodes and the key nodes, and send the ciphertext between the two key nodes to the hidden node for storage; When the encrypted information is split, a set of hidden timestamps are generated on the fragmented information according to the order of information splitting, and a set of correctly sorted series is generated and sent to the supervision module.

2. According to claim 1, a blockchain-based data element trusted circulation system is characterized by: After receiving the registration information sent by the operation module, the blockchain network encrypts it through a hash algorithm to generate a digital identification and uses the identification to generate a user node corresponding to the user in the blockchain network.

3. A blockchain-based data element trusted circulation system according to claim 2, characterized in that: The operation module replaces the letters in the received data product information with corresponding integers, and the specific replacement method is a=0, b=1, c=2, ..., z=25.

4. A blockchain-based data element trusted circulation system according to claim 3, characterized in that: The method for generating the public key and the private key of the data product includes: S1. Digitalize the data product information uploaded by the user node to generate a sequence X, and split the sequence X into prime numbers a and b in the middle of the sequence X; S2. If the sequence X cannot be split into two prime numbers, then add an integer Z after the sequence X that can make the sequence X generate two prime numbers; S3, multiplying the prime number a and the prime number b to obtain the product y; S4. Calculate the Euler function of y, φ(y)=(a-1)(b-1); S5. Randomly select an integer e, and e satisfies 1<e<φ(y); S6. Calculate the modular inverse element d of e with respect to φ(y), that is: ed1≡(modφ(y)); Based on the known e and φ(y), d is calculated using the extended Euclidean algorithm; S7. Encapsulate y and e into a public key, and encapsulate y and d into a private key.

5. According to claim 1, a blockchain-based data element trusted circulation system is characterized by: The verification method of the verification module includes: J1. Hash the ciphertext Q to obtain a hash value of fixed length; J2. Perform hash processing on the n fragments after splitting. Each fragment obtains a unique hash value and stores it in the verification module. J3. After the fragment transmission is completed, the verification module compares the calculated hash value of the fragment with the received hash value to ensure the integrity of each fragment; J4. The supervision module reorganizes the n fragment information through the correct sequence of timestamps, and then calculates the hash value of the reorganized information through the verification module; J5. Compare the hash value of the reorganized information with the hash value of the ciphertext Q to ensure the integrity of the entire text.

6. A trusted circulation method for data elements based on blockchain, characterized by: Based on the data element trusted circulation system described in any one of claims 1 to 5 above, the data element trusted circulation method thereof comprises the following steps: E1. After the transaction module receives the transaction request, the buyer makes payment through the user node, and the supervision module freezes the payment assets. At the same time, the seller's user node uploads the data product private key to the supervision module and freezes it; E2. The transaction module mobilizes the trusted node to send n-1 fragment information to the buyer's user node, and the hidden node sends 1 fragment information to the trusted node that does not participate in this sending work, and the trusted node sends the last fragment information to the buyer's user node; E3. The supervision module correctly sorts the n pieces of information according to the stored timestamp sequence, so that the ciphertext obtained by the buyer user node is the correctly sorted ciphertext; E4. At the same time, the verification module verifies the hash value of the fragment information to ensure the integrity of the fragment information, and compares the hash value of the reorganized information with the hash value of the ciphertext Q to ensure the integrity of the information; E5. When all fragmented information is transmitted and the integrity of the transmitted information is ensured, the regulatory module sends the private key to the buyer's user node and transfers the payment assets to the seller's user node.

Images