A business data resource operation system

Abstract

The present invention discloses a business data resource operation system, which relates to the field of data operation technology, including: a data resource center-master node and a data resource center-sub-node, wherein in the data resource center-master node, a network gate module is used to perform one-way security protection on business network data when the business network data is mapped to the Internet for interaction, obtain data calculation results and data value with privacy protection, and map the required data calculation results and data value to the Internet according to demand; a service module is used to provide required data sharing and opening services, privacy computing services and blockchain services to the outside world through a data service portal, and output data calculation results and data value with privacy protection in the Internet; the data resource center-sub-node is a data provider and a data developer. The present invention provides data calculation results and values ​​with privacy protection, and solves the contradiction between data privacy protection and safe circulation and sharing.

Description

Technical Field

[0001] The present invention relates to the technical field of data operation, and in particular to a business data resource operation system. Background Art

[0002] With the development of technology, the business data resource system has gradually matured, including functions such as data collection, storage, management and use, and through data governance, standardized data is formed to serve other units. At present, this model has been popularized in the field of business data.

[0003] With the introduction of construction ideas such as the inclusion of data elements and data assets in tables, the existing business data resource system has gradually been unable to meet the needs of subsequent development. To carry out technological upgrades and development on the original basis, it is necessary to continuously invest in data collection, storage, management and use.

[0004] In the existing technology, due to the easy reproducibility and non-exclusivity of data in the business data resource system, there is a risk of data leakage during the circulation process. Therefore, many data providers are unwilling, dare not, find it difficult and unable to open up data circulation, resulting in incomplete data sharing information. Summary of the invention

[0005] The purpose of the present invention is to provide a business data resource operation system to address the deficiencies of the above-mentioned prior art, so as to solve the risk of data leakage in the circulation process in the prior art. Therefore, many data providers are unwilling, dare not, find it difficult and unable to open up data circulation, resulting in the problem that the information shared by the data is not comprehensive.

[0006] The present invention specifically provides the following technical solutions: a business data resource operation system, a data resource center-master node and a data resource center-sub-node:

[0007] The data resource center-master node includes:

[0008] The network gate module is used to perform one-way security protection on the business network data when the business network data is mapped to the Internet for interaction, obtain the data calculation results and data value with privacy protection, and map the required data calculation results and data value to the Internet according to the needs;

[0009] The service module is used to provide the required data sharing and opening services, privacy computing services and blockchain services to the outside world through the data service portal, and output the data computing results and data value with privacy protection on the Internet;

[0010] The data resource center-sub-node includes a platform used by data providers and data developers, which is used to receive data calculation results and data values ​​with privacy protection on the Internet, and upload various data surveyed and managed by data providers and data developers.

[0011] Preferably, the privacy service performs data joint modeling and calculation under the premise of protecting data security and data privacy.

[0012] Preferably, the data resource center-master node also includes:

[0013] Support module, used for data collection, management, analysis and visualization of privacy-protected data calculation results and data value;

[0014] Data resource module, used to store business data, public service data and social data;

[0015] The management module is used to manage the supply and demand of all data, data usage and responsibility division throughout the entire life cycle.

[0016] Preferably, the data resource center-sub-node is also used to confirm ownership, manage the delisting and delisting, and trace the origin of processed data products, where the processed data products include ordinary data products and restricted data products.

[0017] Preferably, the data resource center-sub-node specifically includes:

[0018] The census management module is used to receive the census tasks issued by the data resource center-master node, and automatically or manually associate the data resource directory;

[0019] The directory management module is used to provide on-chain publishing services for data resource directories;

[0020] The link management module is used to provide data source configuration when providing on-chain publishing services, select external data sources, monitor the connection status of connected data sources in real time, and promptly feedback and handle abnormal information;

[0021] The data management module is used to perform online configuration and internal review of data, as well as configuration of the data interface API when receiving census tasks issued by the data resource center-master node.

[0022] Preferably, the on-chain publishing service is used to generate a unique data resource directory HASH value for each data resource directory, which is published through the on-chain restricted data resource directory. After the master node reviews and approves it, the data resource directory is officially released on the chain and displayed in the data service portal for data developers to browse and apply for.

[0023] Preferably, when the data is configured online, the data management module further includes:

[0024] The data source access mode configuration module is used to create a new data product through the data provider, fill in the relevant basic information after selecting the data source, access the data table and perform automatic parsing to form a list of data items, select the data items to be published to generate the data table to be published, and package the associated raw data into a data package to complete the online configuration;

[0025] The data package direct upload mode configuration module is used by data providers to create new data products, fill in relevant basic information and describe data items, generate data tables, upload packaged data packages, and complete online configuration.

[0026] Preferably, the data resource center-sub-node also includes:

[0027] The node management module is used to provide local computing resource sub-node management functions for data providers and create new data products through data providers;

[0028] The data rights confirmation module is used to generate a unique data product HASH value for each newly created data product of the data provider through the blockchain platform, and associate and bind the data product HASH value with the corresponding data resource directory HASH value;

[0029] The authorization management module is used to perform authorization management on the data resource directory and each data after the data confirmation module processes it. The authorization management includes the listing review of data products and the use application submitted by the data user.

[0030] Preferably, the data resource center-sub-node also includes a supply and demand management module, which is used to build a supply and demand docking and demand review framework with the data resource center-main node.

[0031] Compared with the prior art, the present invention has the following significant advantages:

[0032] The present invention sets up a data resource center-main node and a data resource center-sub-node, and performs one-way security protection on the interactive data through the network gate module of the data resource center-main node, obtains data calculation results and data value with privacy protection, and the data resource center-sub-node receives the data calculation results and data value with privacy protection, which can achieve one-way data security protection, realize "data is available but not visible" and "data does not leave the domain", solve the contradiction between data privacy protection and safe circulation and sharing, and enable data providers to provide data with peace of mind. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 It is a block diagram of the integrated data resource system provided by the present invention;

[0034] Figure 2It is the most concise path map for providing the business data provided by the present invention to the outside world;

[0035] Figure 3 It is a business data base circulation block diagram provided by the present invention;

[0036] Figure 4 It is a business data sharing exchange block diagram provided by the present invention;

[0037] Figure 5 It is a data circulation block diagram based on data productization provided by the present invention;

[0038] Figure 6 It is a self-circulating frame diagram based on data resource center tooling provided by the present invention. DETAILED DESCRIPTION

[0039] The following is a clear and complete description of the technical solutions of the embodiments of the present invention in conjunction with the drawings in the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0040] In the field of business data resources, the conventional construction method is to realize the collection, storage, management and use of business data resources by building an integrated data platform and providing data services. This methodology has been very mature after more than ten years of precipitation. With the gradual advancement of government informatization construction, the construction of informatization platforms in provinces and cities has been gradually improved. Based on this background, a new business data framework system is proposed, which aims to build a new data service and operation model between data management agencies and data providers and users.

[0041] The overall architecture of the system is divided into two parts, namely the data resource center-main node and the sub-node. The data resource center-main node is based on the already built data resource center or data middle platform, adding integrated capabilities and privacy computing, blockchain and other technologies. It mainly realizes the full life cycle management capabilities of the data resource system, and provides functions such as resource registration, data directory, supply and demand docking, sharing and opening, and unified data service portal that meet the business data management requirements, as well as supporting capabilities and components such as big data components, data governance systems, and data analysis systems. The data resource center-sub-node mainly provides a node platform based on blockchain and privacy computing, that is, it provides data providers and data developers with tools for data use. Data providers and data provider users can realize data interconnection and authorized operation through sub-nodes, and realize data productization for processed data products, rights confirmation, on-shelf management, and traceability and evidence storage.

[0042] like Figure 1 As shown, an embodiment of the present application provides a business data resource operation system, including: a data resource center-main node and a data resource center-sub-node for exchanging data via the Internet.

[0043] Among them, the data resource center-main node includes: a gateway module and a service module. Among them, the gateway module implements one-way data transmission between the business network and the Internet. It is one of the basic modules. It is used to perform one-way security protection on the business network data when the business network data is mapped to the Internet for interaction, and obtains data calculation results and data value with privacy protection, rather than original data, so that the original data does not leave the domain and cannot be seen. That is, the gateway module is mainly responsible for the governance and security isolation of the business network data, and maps the required data calculation results and data value to the Internet according to needs. The data value of this module has one-way direction and "indicator algorithm"; the business network data is provided by basic equipment (cloud servers, networks, storage devices, computing power equipment, disaster recovery equipment and basic security equipment, etc.). The business network data specifically includes data outside the business area and the Internet area. The data outside the business area includes public data, and the Internet area data includes social data, corporate data and personal data; the service module is Figure 1 The service system in the data service portal provides data sharing services, data open services, data analysis services and privacy computing / blockchain services, that is, it is used to provide the required data sharing and open services, privacy computing services and blockchain services to the outside world through the data service portal, output the data calculation results and data value with privacy protection on the Internet, and provide the indicator algorithms of other public data of non-business networks to enterprises, society and the public. The data resource center-sub-node includes the platform used by data providers and data developers, which is used to receive the data calculation results and data value with privacy protection on the Internet, and upload various data managed by data providers and data developers.

[0044] Privacy computing technology is introduced to support data collaboration tasks, and data joint modeling and computing are carried out under the premise of protecting data security and data privacy, so as to achieve "available but invisible" data and support business applications of data element production and processing. Multi-party secure computing technology is used to build the underlying secure computing protocol, which supports the secure computing of various machine learning algorithms such as logistic regression, tree-based algorithms, deep learning and transfer learning.

[0045] The introduction of blockchain technology provides corresponding interface support for upper-level business applications (such as data rights confirmation, evidence traceability, valuation and pricing), and provides a series of data services based on blockchain technology. It provides data circulation services from the physical world to the blockchain network and then to the entire life cycle, ensuring the authenticity, security, privacy and auditability of data elements in the entire process.

[0046] The data resource center-master node also includes: support module, data resource module and management module. Among them, the support module, namely Figure 1 The support system in the cloud environment includes big data components, data governance systems, big data analysis systems and data visualization systems, which realizes an extensible big data support and guarantee platform in the cloud environment, and is used to collect, govern, analyze and visualize the calculation results and data value of privacy-protected data, providing tools for each link; the data resource module is Figure 1 The resource system in is used to store business data, public service data and social data, and to establish basic libraries and theme libraries, with the ability of "lake and warehouse integration". The data resource module is the guarantee of data and the foundation of this system. The theme library includes industry theme library, indicator theme library, scenario theme library, key field theme library and department data resource library; the management module is Figure 1 The management system includes census management, catalog management, supply and demand management, assessment management and project management, that is, it is used for the full life cycle management of the supply and demand of all data and the management responsibility, that is, it is used for the supply and demand, lineage establishment, data use links and responsibility division of all data in this resource operation system. It realizes the unification, visualization and controllability of data supply and demand and management responsibility.

[0047] The data flow diagram is as follows: Figure 2 , Figure 3 , Figure 4 , Figure 5 and Figure 6 As shown, specifically:

[0048] like Figure 2 As shown in the figure, this part is the simplest path for providing business data to the outside for operation. In the business network data center, it runs on the business external network through multiple business systems. No data resource center node is established. It is just a physical link in the data center aggregation mode. Then the "index system" is loaded through the network gate and transmitted to the Internet data resource center node to obtain Internet data result index data. The "index system" and the non-business public data calculation result module of the Internet area are reused.

[0049] like Figure 3 As shown in the figure, the first stage is to find out the basic data of business data. Through the capabilities of project management and census management at different nodes, the basic data of business data can be found out, and through the information project management capabilities, the basic data of business system can be continuously recorded.

[0050] like Figure 4 As shown in the figure, the second stage is based on the sharing and exchange of data resources. Based on the capabilities of the data resource center, the full life cycle management capabilities of data collection, storage, management and use are realized, and the data circulation is realized through sharing and exchange.

[0051] like Figure 5 As shown in the figure, the third stage: data circulation based on data productization. This stage is a transitional stage. After the framework system runs stably, data providers and data users have initially established data circulation channels. Data products developed based on the existing catalog and data achievements of the data resource center enter the circulation channel, and data providers and data users independently carry out data product development and processes based on the data circulation channel.

[0052] like Figure 6 As shown in the figure, the fourth stage is self-circulation based on the tooling of the data resource center. When the framework matures, the data resource center only needs to assume the responsibility of supervision and no longer provide data service support. Data providers and data users can carry out demand matching, product development, transaction circulation and other work based on the data flow channel.

[0053] Among them, the data management agency is responsible for the overall planning, organization and coordination, and security supervision of the data resource system. The data provider is responsible for data resource management, authority management, and approval management. The data user proposes data requirements and conducts data analysis and data development. The data operator is responsible for the construction of the data resource center, data authorization operation, and subsequent data element circulation.

[0054] The construction project management system, in the whole process of business information project approval, such as project initiation, feasibility study, preliminary design, bidding, construction, and acceptance, the information construction approval department shall clearly specify the basic list of business data of the system or platform provided by the construction unit.

[0055] The data resource center-sub-node is also used to confirm ownership, manage the delisting and delisting, and trace the origin of processed data products, and productize the data. The processed data products include: ordinary data products and restricted data products. Ordinary data products include data interface API and offline data packages, and restricted data products include data application systems, data interface API and offline data packages.

[0056] The data resource center-sub-node specifically includes: census management module, directory management module, link management module and data management module.

[0057] Among them, the census management module is used to receive census tasks issued by the data resource center-master node, and automatically or manually associate the data resource directory; the directory management module is used to provide chain publishing services for the data resource directory; the link management module is used to provide data source configuration when providing chain publishing services, (self-)select the data source provided to the outside, and monitor the connection status of the connected data source in real time, and promptly feedback and process abnormal information; the data management module is used to perform online configuration and internal audit of the data when receiving the census tasks issued by the data resource center-master node, as well as configure the data interface API.

[0058] Based on the blockchain platform, the on-chain publishing service is used to generate a unique data resource directory HASH value for each data resource directory, and realize the association and binding between the off-chain restricted data resource directory and the on-chain evidence restricted data resource directory through the unalterable and unique directory HASH. After the restricted data resource directory on the chain is published and approved by the master node, the official on-chain release of the data resource directory is completed and displayed in the "Data Resource Directory" of the data service portal for data developers to browse and apply.

[0059] When configuring data online, the data management module also includes: a data source access mode configuration module and a data package direct upload mode configuration module. Among them, the data source access mode configuration module is used to create a new data package product through the data provider, fill in the relevant basic information after selecting the data source, access the data table and perform automatic parsing to form a list of data items, select the data items to be published to generate the data table to be published, and package the associated original data into a data package to complete the online configuration; the data package direct upload mode configuration module is used for the data provider to create a new data package product, fill in the relevant basic information and describe the data items, generate a data table, upload the packaged data package, and complete the online configuration.

[0060] Provides online configuration and internal review of data interfaces (APIs). Data providers create new data interface (API) products, fill in relevant basic information, upload data interfaces (APIs), describe request parameters and return data examples, conduct data interface (API) connectivity tests, and complete configuration.

[0061] The data resource center-sub-node also includes: project management module, node management module, data rights confirmation module and authorization management module. Among them, the project management module is used to submit the data base of the system to be built in accordance with the project management specifications as the basis for the project completion acceptance; the data base includes table, field and dictionary information, and serves as the basis for the project completion acceptance; the node management module is used to provide local computing resource sub-node management functions for data providers, and create new data products through data providers; the data rights confirmation module is used to generate a unique data product HASH value for each newly created data product of the data provider through the blockchain platform, and associate the data product HASH value with the corresponding data resource directory HASH value; the authorization management module is used to perform authorization management on the data resource directory and each data after the data rights confirmation module is processed. Authorization management includes the listing review of data products and the use application submitted by the data user.

[0062] The data resource center-sub-node also includes a supply and demand management module, which is used to build a supply and demand docking and demand review framework.

[0063] The node management module is also used to download, install and configure computing resource subnodes on the client for data providers, and to update, deactivate and revoke existing computing resource subnodes. A client can access multiple computing resource subnodes, and each computing resource subnode implements model training and local raw data calculation through the privacy computing engine. It also supports health status monitoring of computing resource subnodes: real-time monitoring of the status of computing resource subnodes, timely feedback of abnormal information and urges them to be processed as soon as possible.

[0064] At present, when various places build data platforms or data resource systems, they are basically led by data management agencies or operating units, data providers cooperate to provide data, and construction manufacturers provide technology and services. This model has problems in data security, data ownership, cooperation and coordination. By providing a data resource center-sub-node tool, the tool is deployed in the network area of ​​the data provider and the data user, which can not only form the interconnection of data and directories, but also ensure data security and data ownership. Only when data is fully circulated and shared can its value be stimulated and released. However, due to the easy duplication and non-exclusivity of data, there is a risk of data leakage in the circulation process. Therefore, many data providers are unwilling, dare not, difficult, and unable to open the circulation of data. In response to this problem, privacy computing is introduced to analyze and calculate the data on the premise of providing privacy protection for the original data, and output the calculation results. In this mode, what is circulated and shared is not the original data, but the data calculation results and value, thereby realizing "data is available but invisible" and solving the contradiction between data privacy protection and safe circulation and sharing.

[0065] Obtain common data and restricted data from the data resource center-main node. Clean, convert and integrate common data to obtain offline data packages (such as .xls, .xml, .csv and .json, etc.), and encapsulate the offline data packages to generate online APIs. Provide the data resource center-sub-node as a client for restricted data, and form data applications that match the scenarios through protocols, privacy computing and models, and combined with data application scenarios; data applications do not circulate original data, but only circulate the calculation results and value of data; do not circulate original data, so that data is available but invisible.

[0066] The present invention can complete the work of sorting, identifying, and registering business data resources through the data census system to form a list of all business data resources. At the same time, in order to ensure that the business data list can be continuously obtained in the future, a project management system is built. In the whole process of business information project establishment, feasibility study, preliminary design, bidding, construction and acceptance, the information construction approval department shall clarify the business data list of the system or platform provided by the construction unit. In this way, the business data situation can be continuously mastered.

[0067] The formation of data in the present invention usually involves multiple subjects. Therefore, in the circulation of data, it is faced with the problem of defining data ownership under multiple data rights subjects. By utilizing the decentralized and tamper-proof characteristics of blockchain technology, combined with smart contracts, data rights are confirmed, data rights under multiple rights subjects are confirmed, and ownership certificates are issued to mobilize the enthusiasm of various subjects to collaborate and participate in data circulation. Create a data resource system with self-circulation of data. With the circulation of data and the improvement of data quality, data management agencies no longer need to continuously invest in data collection, storage, management, and use. Data providers and data users can form a benign self-circulation system based on this framework system.

[0068] The above content is a further detailed description of the present invention in combination with a specific preferred embodiment. For technicians in the technical field to which the present invention belongs, several simple deductions or substitutions can be made without departing from the concept of the present invention, which should be regarded as belonging to the protection scope of the present invention.

Claims

1. A business data resource operation system, characterized in that: Including data resource center-master node and data resource center-sub-node: The data resource center-master node includes: The network gate module is used to perform one-way security protection on the business network data when the business network data is mapped to the Internet for interaction, obtain the data calculation results and data value with privacy protection, and map the required data calculation results and data value to the Internet as required; The service module is used to provide the required data sharing and open services, privacy computing services and blockchain services to the outside world through the data service portal, and output the data computing results and data value with privacy protection on the Internet; The data resource center-subnode includes a platform used by data providers and data developers, which is used to receive the data calculation results and data value with privacy protection on the Internet, and upload various data managed by data providers and data developers; The data resource center-sub-node specifically includes: The census management module is used to receive the census tasks issued by the data resource center-master node, and automatically or manually associate the data resource directory; The directory management module is used to provide on-chain publishing services for data resource directories; The link management module is used to provide data source configuration when providing on-chain publishing services, select external data sources, monitor the connection status of connected data sources in real time, and promptly feedback and process abnormal information; The data management module is used to perform online configuration and internal review of data, as well as configuration of the data interface API when receiving census tasks issued by the data resource center-master node.

2. A business data resource operation system as claimed in claim 1, characterized in that: The privacy computing service performs data joint modeling and calculation under the premise of protecting data security and data privacy.

3. A business data resource operation system as claimed in claim 1, characterized in that: The data resource center-master node also includes: Support module, which is used for data collection, management, analysis and visualization of privacy-protected data calculation results and data value; Data resource module, used to store business data, public service data and social data; The management module is used to manage the supply and demand of all data, data usage and responsibility division throughout the entire life cycle.

4. A business data resource operation system as claimed in claim 1, characterized in that: The data resource center-sub-node is also used to confirm ownership, manage the delisting and listing, and trace the origin of processed data products, where the processed data products include ordinary data products and restricted data products.

5. A business data resource operation system as claimed in claim 1, characterized in that: The on-chain publishing service is used to generate a unique data resource directory HASH value for each data resource directory, publish it through the on-chain restricted data resource directory, and after the master node reviews and approves it, complete the official on-chain release of the data resource directory and display it in the data service portal for data developers to browse and apply for.

6. A business data resource operation system as claimed in claim 1, characterized in that: When configuring data online, the data management module also includes: The data source access mode configuration module is used to create a new data product through the data provider, fill in the relevant basic information after selecting the data source, access the data table and perform automatic parsing to form a list of data items, select the data items to be published to generate the data table to be published, and package the associated raw data into a data package to complete the online configuration; The data package direct upload mode configuration module is used by data providers to create new data products, fill in relevant basic information and describe data items, generate data tables, upload packaged data packages, and complete online configuration.

7. A business data resource operation system as claimed in claim 1, characterized in that: The data resource center-sub-node also includes: The node management module is used to provide local computing resource sub-node management functions for data providers and create new data products through data providers; The data rights confirmation module is used to generate a unique data product HASH value for each newly created data product of the data provider through the blockchain platform, and associate and bind the data product HASH value with the corresponding data resource directory HASH value; The authorization management module is used to perform authorization management on the data resource directory and each data after the data right confirmation module processes it. The authorization management includes the listing review of data products and the use application submitted by the data user.

8. A business data resource operation system as claimed in claim 1, characterized in that: The data resource center-sub-node also includes a supply and demand management module, which is used to build a supply and demand docking and demand review framework with the data resource center-main node.

Images