Data infringement detection and ownership tracing method and system

Abstract

The invention provides a data infringement detection and ownership tracing method and system, and the scheme supports the efficient data infringement judgment outside a chain, achieves the release of data description and the registration of data ownership through a block chain, and employs an on-chain and off-chain cooperation mode. Data infringement judgment operation is carried out in a trusted execution environment based on SGX, a judgment result is returned to an intelligent contract, data ownership tracing is carried out by the intelligent contract, and an infringement judgment result is securely stored in an uplink mode, and the scheme is suitable for scenes of data transaction and infringement judgment under a user. According to the method, infringement judgment on personal transaction data by a data owner can be completed, and the data ownership and the data control right of a user can be maintained while the security and privacy of the transaction data are ensured.

Description

Technical Field

[0001] The present invention belongs to the technical field of data security and privacy protection, and in particular, relates to a method and system for data infringement detection and ownership tracing. Background Art

[0002] The statements in this section merely provide background information related to the present invention and do not necessarily constitute prior art.

[0003] In order to solve the problem of data infringement, users will register and trade data through third-party trading platforms. Third-party platforms not only have high security and can protect data security, but also can clearly determine the source and authenticity of data by building a unified data registration platform, thereby effectively preventing data infringement from occurring at the source. While third-party platforms bring certain conveniences to users, they also bring risks such as data leakage, data monopoly, and single point failures. At the same time, they deprive users of control over data and cause unclear data ownership. In order to ensure data security, users usually encrypt data before registering and trading. Without the decryption key, third-party platforms cannot calculate the similarity of data, and thus cannot determine whether the registered data is infringing.

[0004] In order to solve the problem of single point failure, the decentralized data transaction process can be realized by combining with blockchain. Users can decide whether to sell data and to whom to sell data according to their own wishes, thereby realizing their own control over the data.

[0005] However, the inventors found that although the distributed storage and immutability of blockchain ensure the transparency of data transactions and the integrity of records, it is difficult to determine whether there is infringement because the transaction data is in an encrypted state and the encryption algorithms and keys are different. In order to solve the problem of infringement judgment, although it is possible to extract features from the data and register the extracted plaintext features, dishonest users may evade detection by registering false features. Summary of the invention

[0006] The embodiments of the present invention provide a data infringement detection and ownership tracing method and system to solve the problem in the prior art that it is difficult to determine whether there is infringement because the transaction data is in an encrypted state and the encryption algorithms and keys are different, and although features can be extracted from the data and the extracted plaintext features are registered, dishonest users may circumvent detection by registering false features.

[0007] According to a first aspect of an embodiment of the present invention, a data infringement detection and ownership tracing method is provided, which is applied to SGX and includes:

[0008] In response to an infringement reporting request from a smart contract, based on the data description identifiers corresponding to the person being reported and the reporter in the infringement reporting request, the storage information of both parties is obtained; wherein the infringement reporting request includes the hash value of the plaintext data of the reporter and the person being reported, the hash value of the ciphertext data, the hash value of the copyright information, the ring signature verification public key set, the address, and the data description identifier;

[0009] Based on the addresses of both parties and the ciphertext data storage addresses in the storage information of both parties, the ciphertext data of both parties are downloaded in a non-secure environment, and the data integrity, key correctness and data-copyright association are verified based on the ciphertext data of both parties;

[0010] After the verification is passed, the plaintext data of both parties are converted into image data, and feature extraction is performed on the image data to obtain feature representations corresponding to the plaintext data of both parties; similarity scores are calculated based on the feature representations of both parties, and whether the data of both parties are similar is determined based on the similarity scores;

[0011] If there is similarity, the ring signatures of the data copyright information of both parties will be verified. If the verification is successful, the data copyright information holders of both parties will be verified. If the verification fails, it proves that there is infringement. The infringement-related information is sent to the smart contract, and the smart contract queries the real owner of the data and the data transaction record in the data ownership registry and transaction table based on the infringement-related information, so as to realize data infringement detection and ownership traceability.

[0012] Furthermore, the generation of the infringement reporting request of the smart contract is specifically as follows: when the data owner discovers data infringement, the reporter's address, data description identifier and the reported person's address and data description identifier are sent to the smart contract for reporting; the smart contract obtains the hash value of the plaintext data of both parties, the hash value of the ciphertext data, the hash value of the copyright information and the ring signature verification public key set from the blockchain, and generates an infringement reporting request in combination with the addresses of both parties and the data description identifiers.

[0013] Furthermore, the data integrity verification is specifically as follows: the hash values ​​of the ciphertext data and copyright information of both parties are calculated respectively; the calculated hash values ​​of the ciphertext data and copyright information of both parties are compared with the corresponding hash values ​​in the infringement reporting request respectively. If they are equal, it proves that the data is complete.

[0014] Furthermore, the key correctness and data and copyright association verification are specifically: decrypting the obtained ciphertext data of both parties, calculating the hash value of the plaintext data of both parties, and comparing them with the hash value of the plaintext data in the copyright information of both parties' data and the plaintext data in the infringement reporting request. If they are equal, the decryption key is correct and the data is associated with the copyright.

[0015] Furthermore, the determination of whether the data of both parties are similar is specifically as follows:

[0016] Convert the plaintext data of the reporter and the reported person into a first image and a second image respectively;

[0017] Performing SIFT feature extraction on the first image and the second image to obtain feature representations of the first image and the second image, wherein the feature representations include key points and descriptors;

[0018] Based on the key points and descriptors of the first image and the second image, matching the key points is performed to obtain an optimal matching result of the key points;

[0019] Based on the matching results of the key points of the first image and the second image, the average of the distances between the matching key points is used as the similarity score. If the similarity score is not less than a preset threshold, the data of both parties are similar.

[0020] Furthermore, the verification of the data copyright information holders of both parties is specifically as follows:

[0021] The addresses of the copyright holders in the reporter and the reported are obtained respectively, and compared with the addresses of the reporter and the reported to determine the information of the holder; if the address of the reported person is different from the address of the holder in the corresponding copyright information, it is determined that there is infringement; if the addresses are the same, there is no infringement.

[0022] According to a second aspect of an embodiment of the present invention, a method for detecting data infringement and tracing ownership is provided, which is applied to a data owner and includes:

[0023] When data infringement is discovered, the reporter's address, data description identifier, and the reported person's address and data description identifier are sent to the smart contract for reporting; the smart contract obtains the hash value of both parties' plaintext data, the hash value of the ciphertext data, the hash value of the copyright information, and the ring signature verification public key set from the blockchain, and combines the addresses of both parties and the data description identifier to generate an infringement reporting request and send it to SGX;

[0024] Among them, the SGX specifically performs the following processing procedures: based on the data description identifiers corresponding to the person being reported and the reporter in the infringement reporting request, the storage information of both parties is obtained; based on the addresses of both parties and the ciphertext data storage addresses in the storage information of both parties, the ciphertext data of both parties are downloaded in a non-secure environment, and the data integrity, key correctness and data and copyright association are verified based on the ciphertext data of both parties; after the verification is passed, the obtained plaintext data of both parties are converted into image data, and the image data are respectively feature extracted to obtain the feature representation corresponding to the plaintext data of both parties; based on the feature representation of both parties, the similarity score is calculated, and based on the similarity score, it is determined whether the data of both parties are similar; if there is similarity, the ring signature of the copyright information of the data of both parties is verified, and if the verification is successful, the holders of the copyright information of the data of both parties are verified, and if the verification fails, it proves that there is infringement; the infringement related information is sent to the smart contract;

[0025] Through smart contracts, the real owner of the data and the data transaction records are queried in the data ownership registry and transaction table based on the infringement-related information, thereby realizing data infringement detection and ownership tracing.

[0026] Furthermore, the determination of whether the data of both parties are similar is specifically as follows:

[0027] Convert the plaintext data of the reporter and the reported person into a first image and a second image respectively;

[0028] Performing SIFT feature extraction on the first image and the second image to obtain feature representations of the first image and the second image, wherein the feature representations include key points and descriptors;

[0029] Based on the key points and descriptors of the first image and the second image, matching the key points is performed to obtain an optimal matching result of the key points;

[0030] Based on the matching results of the key points of the first image and the second image, the average of the distances between the matching key points is used as the similarity score. If the similarity score is not less than a preset threshold, the data of both parties are similar.

[0031] According to a third aspect of an embodiment of the present invention, a method for detecting data infringement and tracing ownership is provided, comprising:

[0032] When data infringement is discovered, the data owner sends the reporter's address, data description identifier, and the reported person's address and data description identifier to the smart contract for reporting;

[0033] The smart contract obtains the hash value of the plaintext data of both parties, the hash value of the ciphertext data, the hash value of the copyright information and the ring signature verification public key set from the blockchain, and generates an infringement reporting request based on the addresses of both parties and the data description identifier, and sends it to SGX;

[0034] The SGX obtains the storage information of both parties based on the data description identifiers corresponding to the person being reported and the reporter in the infringement reporting request; downloads the ciphertext data of both parties in a non-secure environment based on the addresses of both parties and the ciphertext data storage addresses in the storage information of both parties, and verifies the data integrity, key correctness, and data-copyright association based on the ciphertext data of both parties; after the verification, converts the obtained plaintext data of both parties into image data, extracts features of the image data respectively, and obtains the feature representation corresponding to the plaintext data of both parties; calculates the similarity score based on the feature representation of both parties, and determines whether the data of both parties are similar based on the similarity score; if there is similarity, verifies the ring signature of the copyright information of the data of both parties, and if the verification is successful, verifies the holders of the copyright information of the data of both parties, and if the verification fails, it proves that there is infringement; sends the infringement-related information to the smart contract;

[0035] Through smart contracts, the real owner of the data and the data transaction records are queried in the data ownership registry and transaction table based on the infringement-related information, thereby realizing data infringement detection and ownership tracing.

[0036] According to a fourth aspect of an embodiment of the present invention, a data infringement detection and ownership tracing system is provided, comprising at least a data owner, an SGX, a smart contract and a blockchain, wherein the SGX executes the above-mentioned data infringement detection and ownership tracing method, and the data owner executes the above-mentioned data infringement detection and ownership tracing method.

[0037] One or more of the above technical solutions have the following beneficial effects:

[0038] (1) The present invention provides a method and system for data infringement detection and ownership tracing. Compared with the prior art, the present invention converts numerical data into images and then performs feature extraction, thereby extracting robust features and avoiding the situation where completely different features are extracted after the same data is transformed. The present invention uses SGX to perform infringement judgment on data in plain text in a trusted execution environment, which neither leaks any relevant information of the plain text nor solves the problem that the similarity of ciphertext generated by data encrypted with different keys cannot be compared. The dual methods of data similarity comparison and copyright information verification are used to avoid misjudgment, improve the accuracy and fairness of infringement judgment, and maximize the protection of the rights and interests of data owners. The judgment result is returned to the smart contract, and the smart contract realizes fair and efficient data ownership tracing.

[0039] (2) Compared with the prior art that does not use blockchain, the present invention implements on-chain data description release, data ownership registration, data transaction, data transaction record storage and data ownership traceability based on blockchain, and utilizes on-chain and off-chain collaboration to realize transaction data information storage, numerical data to image conversion, data infringement judgment, and infringement judgment results through on-chain storage, thereby ensuring the feasibility and traceability of infringement judgment.

[0040] (3) Compared with the existing technology using blockchain, this method uses SGX to complete the infringement judgment of plaintext data. Compared with the existing solution of using a trusted third party to make infringement judgment, it avoids the possibility of plaintext data leakage, while improving the efficiency of data processing and avoiding the disadvantages of centralized data processing; compared with the existing solution of extracting features from data, it can extract robust features, which can eliminate the problem of completely inconsistent feature values ​​caused by operations such as data deletion and addition to a certain extent, and increase the reliability and correctness of infringement judgment; compared with the existing solution of using watermark technology, it can perform secure infringement judgment after the data is re-encrypted, improve the accuracy of infringement judgment, and ensure the data owner's initiative over the data.

[0041] Advantages of additional aspects of the present invention will be given in part in the following description, and in part will become obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] The accompanying drawings in the specification, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0043] Figure 1 A schematic diagram of the interactive process of a data infringement detection and ownership tracing method described in an embodiment of the present invention;

[0044] Figure 2 A schematic diagram of the system structure of a data infringement detection and ownership tracing method described in an embodiment of the present invention;

[0045] Figure 3 This is a flow chart of a data infringement detection and ownership tracing method described in an embodiment of the present invention. DETAILED DESCRIPTION

[0046] It should be noted that the following detailed descriptions are exemplary and are intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used herein have the same meanings as those commonly understood by those skilled in the art to which the present invention belongs.

[0047] It should be noted that the terms used herein are for describing specific embodiments only and are not intended to be limiting of exemplary embodiments according to the present invention.

[0048] In the absence of conflict, the embodiments of the present invention and the features of the embodiments may be combined with each other.

[0049] Terminology explanation:

[0050] SGX, software guard extensions, is a security technology provided by Intel to enhance the isolation environment inside the processor and protect sensitive data and code from malware and unauthorized access. SGX allows applications to run in a protected area called "privacy-enhanced memory (Enclave)" through hardware support, ensuring the confidentiality and integrity of data during the computing process.

[0051] IPFS, inter planetary file system, is a decentralized distributed file system designed to make storing and sharing files more efficient, robust and secure. By using content addressing and peer-to-peer networks, IPFS allows users to store, share and access files globally without relying on a single server, thereby improving data availability and censorship resistance.

[0052] Delay embedding is a method for converting time series data into a high-dimensional phase space. By sampling data at different time points and creating an embedding vector, the original one-dimensional time series is displayed in a multi-dimensional space, thereby revealing the dynamic characteristics and potential structure of the system.

[0053] SIFT, scale-invariant feature transform, is an algorithm for image processing that can detect and describe local features in images at different scales and rotations. SIFT detects key points and generates feature vectors, so that image features can still be accurately matched and recognized under different viewing angles, scaling and lighting conditions, and is robust.

[0054] For ease of understanding, the following describes the solution described in this embodiment in detail with reference to a specific example (i.e., data infringement detection and ownership tracing in a medical data transaction scenario). First, Figure 3 , the transaction process of medical data is explained in detail:

[0055] Obtaining medical data: After the data owner requests the data from the hospital, the hospital first uses a symmetric encryption algorithm and a symmetric key K h Encrypt the data owner's medical data Data and get And generate the hash value H1=hash(C h ); Generate copyright information CI for data Data, and use the key ring PK A And your own private key SK h Generate a ring signature for copyright information The copyright information includes the hash value of the plaintext data, the address of the holder, etc. Then the public key PK of the data owner is used o For CI, r1 and K h Encrypt, get The hash value is H2 = hash(C CI );Use your own private key SK h C h , C CI , H1 and H2 signatures, generated Finally, Tx h ={C h ||H1||C CI ||H2||r h ||PK} is sent to the data owner, where PK = {PK1, PK2, ..., PK i-1 , PK h , PK i+1 , PK n}, is the public key set of all hospitals involved in the ring signature.

[0056] Medical data storage: Data owner receives Tx h After that, first use the hospital's public key PK h Verify h Determine whether the data is sent by the hospital; calculate the ciphertext hash value H′1 of the data and the ciphertext hash value H′2 of information such as copyright, and compare them with H1 and H2 respectively. If they are equal, the data integrity is successfully verified; use your own private key SK o Decryption C CI , using PK verification The correctness of the signature r1 in the middle, if verified, will CI and C h Store them in IPFS respectively and return the storage address Add CI and Otherwise, the verification fails and you need to execute step 1 again.

[0057] Data ownership registration: The data owner publishes the data description in the smart contract and obtains the data description identifier (ID DS); the data owner converts the data into a two-dimensional array, and converts the data into an image through delayed embedding with a delay step of 1 and a dimension of 3; the image is subjected to SIFT feature extraction to obtain the image's features FE, i.e., key points and eigenvalues, and hashes them to obtain hash FE = hash(FE); the data owner calculates the hash value of the plaintext data and obtains hash po ; Finally, Send to the smart contract to apply for ownership registration; the smart contract verifies whether the public keys in PK are all registered as hospitals. If so, Tx r Sent to the smart contract to register the data for the data owner; otherwise, return False to the data owner.

[0058] In a specific implementation, the delayed embedding is a method of embedding time series data into a high-dimensional space. Here, we regard each inspection data of the data owner as time series data, and multiple inspection data form a two-dimensional array.

[0059] The delay step (also known as the delay time) and the dimension (referring to the embedding dimension) are two parameters of the delay embedding method. The delay step is to select the interval of data points in the time series to construct the embedding vector in the high-dimensional space. The delay dimension is the number of dimensions used to embed the time series data into the high-dimensional space during the delay embedding process. For example: for a one-dimensional array [1, 3, 5, 7, 9, 11], when the delay time is 3 and the delay dimension is 2, it is specifically expressed as: embedding the data into a 2-dimensional space, and the embedded vectors are x(0) = [1, 7], x(1) = [3, 9], x(2) = [5, 11].

[0060] Identity authentication and parameter transfer: The data owner establishes remote authentication with SGX and establishes a secure channel to transmit information; SGX verifies and stores parameters such as the decryption key passed by the data owner; SGX verifies whether the decryption key of the data is stored, and if so, returns the storage address of the ciphertext data.

[0061] (1) The data owner and SGX use the remote authentication mechanism to complete identity authentication, determine the authenticity of the corresponding SGX identity, and establish a secure channel with SGX.

[0062] (2) The data owner uses the SGX public key PK SGX Encrypt the passed parameters and get Calculate C S The hash value H3 = hash(C S ), using your own private key SK o C S , H3 signature, get (r2, C S , H3) is sent to SGX, where K h Is the decryption key for transaction data, ID DS is a data description identifier, Is the storage address of the ciphertext data, Add CI is the storage address of copyright information, r is a random number;

[0063] (3) After receiving the data, SGX generates a ciphertext hash value H′3 and compares it with H3. If they are equal, the verification is successful. The data owner’s public key PK is used to o Verify the correctness of the signature r2. If correct, use the private key SK SGX Decryption C S , and calculate hash(ID DS ||Add o )) is used as the unique identifier of the record and stored in the storage hash list. The above data and the address of the data owner are encrypted through seal() and stored in a non-secure environment for sealing; otherwise, the verification fails and False is returned to the data owner.

[0064] Request to purchase data: Data buyers can find the data they want by viewing the data description, and check the copyright information according to the registration record to verify the authenticity and reliability of the data; di , Publisher's addressAdd o 、Add your own address b and public key PK b Send to the smart contract to request purchase data.

[0065] Request data: The smart contract will send ID di , PK b Sent to the data owner and the record is stored in the blockchain.

[0066] Transaction data: The data owner will decrypt the key K h Use PK b Encrypt, get And calculate its hash value to get H4; use SGX's public key PK SGX Encrypt the random number r and get Use your own private key SK o right C r , H4, ID di Sign and get r o , and (ID di , C r , H4, r o) to the smart contract; the smart contract remotely authenticates with SGX and establishes a secure channel, r , Add o , ID di and PK b Sent to SGX; after SGX receives it, it uses hash(ID di ||Add o ) determines whether the data exists. If not, it returns False to the smart contract, and the smart contract rejects the transaction. If it is stored, it decrypts the corresponding ciphertext through unseal() to get r. Use the private key SK SGX Decryption C r , get r', determine whether r' is equal to r, if they are equal, get the data description ID di The storage address of the corresponding ciphertext data, and the public key PK of the data buyer b Encrypt, get Use your own private key SK SGX C D Sign, get r D , will (r D , ID di , C D ) is sent to the smart contract; otherwise, False is returned to the smart contract, and the smart contract rejects the transaction; after receiving it, the smart contract will D , r o , ID di ) is sent to the data buyer. After verifying that the data is correct, the data buyer sends (ID di , True) and the corresponding transaction amount, the smart contract will Sent to the data buyer, the transaction amount is sent to all data accounts, and the transaction information is stored in the transaction table.

[0067] Based on the above scenario, the solution described in this embodiment is described in detail below:

[0068] like Figure 1 As shown, the interactive process of the data infringement detection and ownership tracing method is shown. Based on the above scenario, an embodiment of the present invention provides a data infringement detection and ownership tracing method, which is applied to SGX, including:

[0069] In response to an infringement reporting request from a smart contract, based on the data description identifiers corresponding to the person being reported and the reporter in the infringement reporting request, the storage information of both parties is obtained; wherein the infringement reporting request includes the hash value of the plaintext data of the reporter and the person being reported, the hash value of the ciphertext data, the hash value of the copyright information, the ring signature verification public key set, the address, and the data description identifier;

[0070] Based on the addresses of both parties and the ciphertext data storage addresses in the storage information of both parties, the ciphertext data of both parties are downloaded in a non-secure environment, and the data integrity, key correctness and data-copyright association are verified based on the ciphertext data of both parties;

[0071] After the verification is passed, the plaintext data of both parties are converted into image data, and feature extraction is performed on the image data to obtain feature representations corresponding to the plaintext data of both parties; similarity scores are calculated based on the feature representations of both parties, and whether the data of both parties are similar is determined based on the similarity scores;

[0072] If there is similarity, the ring signatures of the data copyright information of both parties will be verified. If the verification is successful, the data copyright information holders of both parties will be verified. If the verification fails, it proves that there is infringement. The infringement-related information is sent to the smart contract, and the smart contract queries the real owner of the data and the data transaction record in the data ownership registry and transaction table based on the infringement-related information, so as to realize data infringement detection and ownership traceability.

[0073] In the specific implementation, the generation of the infringement reporting request of the smart contract is specifically as follows: when the data owner discovers data infringement, the reporter's address, data description identifier and the reported person's address and data description identifier are sent to the smart contract for reporting; the smart contract obtains the hash value of the plaintext data of both parties, the hash value of the ciphertext data, the hash value of the copyright information and the ring signature verification public key set from the blockchain, and generates an infringement reporting request in combination with the addresses of both parties and the data description identifiers.

[0074] In a specific implementation, the data integrity verification is specifically as follows: the hash values ​​of the ciphertext data and copyright information of both parties are calculated respectively; the calculated hash values ​​of the ciphertext data and copyright information of both parties are compared with the corresponding hash values ​​in the infringement reporting request respectively. If they are equal, it proves that the data is complete.

[0075] In the specific implementation, the key correctness and data and copyright association verification are specifically: decrypting the obtained ciphertext data of both parties, calculating the hash value of the plaintext data of both parties, and comparing them with the hash value of the plaintext data in the copyright information of both parties' data and the plaintext data in the infringement reporting request. If they are equal, the decryption key is correct and the data is associated with the copyright.

[0076] In a specific implementation, the determination of whether the data of both parties are similar is specifically as follows:

[0077] Convert the plaintext data of the reporter and the reported person into a first image and a second image respectively;

[0078] Performing SIFT feature extraction on the first image and the second image to obtain feature representations of the first image and the second image, wherein the feature representations include key points and descriptors;

[0079] Based on the key points and descriptors of the first image and the second image, matching the key points is performed to obtain an optimal matching result of the key points;

[0080] Based on the matching results of the key points of the first image and the second image, the average of the distances between the matching key points is used as the similarity score. If the similarity score is not less than a preset threshold, the data of both parties are similar.

[0081] Specifically, Figure 3 As shown, the data owner can check the data description to make a preliminary judgment on whether his data has been infringed; if there is infringement, (Add I , Add h , ID dI , ID dh ) is sent to the smart contract, where Add I , ID dI The address of the person being reported and the corresponding data description identifier, Add h , ID dh They are the reporter's address and the corresponding data description identifier.

[0082] After receiving the report, the smart contract obtains the hash value of the plaintext data (hashpH, hashpI) and the hash value of the ciphertext data (hash HH , hash HI ), the hash value of the copyright information CIH , hash CII ), ring signature verification public key set (PK SH , PK SI ) and (Add I , Add h , ID dI , ID dh ) are sent to SGX together.

[0083] SGX according to ID dI , ID dhObtain the storage information of both parties, and use their respective keys to decrypt the ciphertext of the data downloaded from IPFS to obtain the plaintext; verify the correlation between the plaintext data and the copyright information, calculate the similarity of the data, verify the correctness of the ring signature in the copyright information, and verify the holder of the copyright information. Specifically:

[0084] (1)SGX based on ID dI , ID dh The two parameters find the corresponding decryption key (K h , K I ) and the storage address of the ciphertext data (Add CIH , Add CII ) and other information, and decrypt the data through unseal();

[0085] (2) The enclave created in SGX uses the OCALL() mechanism to add h , Add I , Add CIH , Add CII ) is sent to the non-secure environment; the non-secure environment downloads the file from IPFS according to the address and returns the file to the enclave through the ECALL() mechanism.

[0086] (3) Calculate the hash values ​​of the ciphertext data and copyright information respectively, and compare them with the hash HH , hash HI , hash CIH , hash CII Compare and if they are equal, it proves that they are complete.

[0087] (4) Through the decryption key K h , K I Decrypt the ciphertext data and get and Calculate the hash value of the two and get hash(Data′ h ) and hash(Data′ I ), respectively with the hash (Data h ) and hash(Data I ) and the hash in the registry pH , hash pI By comparison, if they are all equal, it means that the decryption key is correct and the data is associated with the copyright; otherwise, the corresponding data description identifier, address and INO are returned to the smart contract, where IN0 contains relevant error information, namely copyright information error or decryption key error.

[0088] (5) If the smart contract receives information indicating an error, it sends the information to the user and requires him to resend the correct information within the specified time; if SGX does not receive it, it sets status = 0 and executes step (6); if SGX receives it, it re-executes step (4) and re-judges the relevance of the data to the copyright and the correctness of the key.

[0089] (6) SGX uses a delayed embedding algorithm to convert the medical data converted into a two-dimensional array into an image, and performs SIFT feature extraction on the image to obtain key points and descriptors, namely FE h , FE I ; Use the brute force search method to find the best match between the two key points, calculate the average of the matching distances and convert them into a similarity score to obtain Simil; if Simil reaches the threshold, the two data are judged to be similar, and continue to step (7); otherwise, the two data are not similar.

[0090] (7) Using the public key dataset PK SH , PK SI Verify the correctness of the signatures in the two copyright information separately; if the signature verification of the person being reported fails, it is determined that there is infringement; if both verifications are successful, execute step (8).

[0091] (8) Obtain the address of the holder in the copyright information respectively Add′ h and Add′ I , respectively with Add h , Add I Compare and determine the information of the holder; if the information of the reported person is different, it is determined that there is infringement; if the verification is successful, it means that there is no infringement.

[0092] Specifically, the addresses of the reporter and the reported person are Add h , Add I ; The data they sell has copyright information, and each copyright information contains the address of the data holderAdd′ h and Add′ I , here we compare the address of the reporterAdd h The address of the copyright holder in the copyright information corresponding to the data he sells Add′ h Are they the same?Add the address of the person being reported I The address Add' in the copyright information corresponding to the data he sells IAre they the same? If the address of the person being reported is different from the address in the corresponding copyright information, it means that he is not the real owner of the corresponding data in the copyright information. However, it has been verified that the copyright information is associated with the verified data, and the verified data is similar to the reporter's data, then it means that the person being reported is not the real owner of the verified data and there is infringement.

[0093] (9) If there is infringement, SGX sends (Add I , Add h , ID dI , ID dh , True, Add p ,Simil, ), otherwise, send (Add I , Add h , ID dI , ID dh ,False,Simil, ), where True / False indicates whether there is infringement, Add p Indicate the address of the possible infringer.

[0094] Furthermore, the data ownership traceability is as follows: if there is an infringement, the smart contract In the data ownership registry and transaction table, the real owner of the data and the destination of the data can be found respectively.

[0095] (1) Smart contract based on The corresponding registration information is found in the data ownership registry with the data description identifier, and the real owner of the data is found according to the registered timestamp; if the real owner of the data is one of the two, the penalty function is triggered to punish the dishonest user; otherwise, it is broadcasted in the blockchain.

[0096] (2) In the transaction table, find the next buyer of the data based on the address of the punished party and the data description identifier, and punish him or her.

[0097] In the specific implementation, the smart contract will (Add I , Add h , ID dI , ID dh ,True / False,Simil, Add p ) is stored in the blockchain, where Add p It is the address of the punisher.

[0098] In one or more implementations, corresponding to the above embodiments, an embodiment of the present invention provides a data infringement detection and ownership tracing method, which is applied to a data owner, including:

[0099] When data infringement is discovered, the reporter's address, data description identifier, and the reported person's address and data description identifier are sent to the smart contract for reporting; the smart contract obtains the hash value of both parties' plaintext data, the hash value of the ciphertext data, the hash value of the copyright information, and the ring signature verification public key set from the blockchain, and combines the addresses of both parties and the data description identifier to generate an infringement reporting request and send it to SGX;

[0100] Among them, the SGX specifically performs the following processing procedures: based on the data description identifiers corresponding to the person being reported and the reporter in the infringement reporting request, the storage information of both parties is obtained; based on the addresses of both parties and the ciphertext data storage addresses in the storage information of both parties, the ciphertext data of both parties are downloaded in a non-secure environment, and the data integrity, key correctness and data and copyright association are verified based on the ciphertext data of both parties; after the verification is passed, the obtained plaintext data of both parties are converted into image data, and the image data are respectively feature extracted to obtain the feature representation corresponding to the plaintext data of both parties; based on the feature representation of both parties, the similarity score is calculated, and based on the similarity score, it is determined whether the data of both parties are similar; if there is similarity, the ring signature of the copyright information of the data of both parties is verified, and if the verification is successful, the holders of the copyright information of the data of both parties are verified, and if the verification fails, it proves that there is infringement; the infringement related information is sent to the smart contract;

[0101] Through smart contracts, the real owner of the data and the data transaction records are queried in the data ownership registry and transaction table based on the infringement-related information, thereby realizing data infringement detection and ownership tracing.

[0102] In a specific implementation, the determination of whether the data of both parties are similar is specifically as follows:

[0103] Convert the plaintext data of the reporter and the reported person into a first image and a second image respectively;

[0104] Performing SIFT feature extraction on the first image and the second image to obtain feature representations of the first image and the second image, wherein the feature representations include key points and descriptors;

[0105] Based on the key points and descriptors of the first image and the second image, matching the key points is performed to obtain an optimal matching result of the key points;

[0106] Based on the matching results of the key points of the first image and the second image, the average of the distances between the matching key points is used as the similarity score. If the similarity score is not less than a preset threshold, the data of both parties are similar.

[0107] In one or more implementations, corresponding to the method described in the above embodiment, a data infringement detection and ownership tracing method is provided, including:

[0108] When data infringement is discovered, the data owner sends the reporter's address, data description identifier, and the reported person's address and data description identifier to the smart contract for reporting;

[0109] The smart contract obtains the hash value of the plaintext data of both parties, the hash value of the ciphertext data, the hash value of the copyright information and the ring signature verification public key set from the blockchain, and generates an infringement reporting request based on the addresses of both parties and the data description identifier, and sends it to SGX;

[0110] The SGX obtains the storage information of both parties based on the data description identifiers corresponding to the person being reported and the reporter in the infringement reporting request; downloads the ciphertext data of both parties in a non-secure environment based on the addresses of both parties and the ciphertext data storage addresses in the storage information of both parties, and verifies the data integrity, key correctness, and data-copyright association based on the ciphertext data of both parties; after the verification, converts the obtained plaintext data of both parties into image data, extracts features of the image data respectively, and obtains the feature representation corresponding to the plaintext data of both parties; calculates the similarity score based on the feature representation of both parties, and determines whether the data of both parties are similar based on the similarity score; if there is similarity, verifies the ring signature of the copyright information of the data of both parties, and if the verification is successful, verifies the holders of the copyright information of the data of both parties, and if the verification fails, it proves that there is infringement; sends the infringement-related information to the smart contract;

[0111] Through smart contracts, the real owner of the data and the data transaction records are queried in the data ownership registry and transaction table based on the infringement-related information, thereby realizing data infringement detection and ownership tracing.

[0112] In one or more embodiments, corresponding to the method described in the above embodiment, a data infringement detection and ownership tracing system is provided, which includes at least a data owner, an SGX, a smart contract and a blockchain, wherein the SGX executes the above-mentioned data infringement detection and ownership tracing method, and the data owner executes the above-mentioned data infringement detection and ownership tracing method.

[0113] In the specific implementation, Figure 2 As shown, the data infringement detection and ownership tracing system mainly includes five parts: data preparation part, data registration part, transaction part, reporting part, infringement judgment and tracing part; the following is a detailed description from the perspective of specific implementation:

[0114] (I) Data preparation part: Data owners obtain data and copyright information through the data preparation part.

[0115] (1) User registration: Both the hospital and the data owner register users in the blockchain with different identities using their own public keys, and the registration is carried out after the identity of the registrant is verified.

[0116] (2) Generate medical data ciphertext: After receiving the data acquisition request from the data owner, the hospital uses a symmetric encryption algorithm and a symmetric key K h Encrypt the data owner's medical data to generate And generate the hash value of the ciphertext

[0117] (3) Generate copyright data ciphertext: Generate copyright information CI for the data according to the specified copyright information generation format, which includes the hash value of the plaintext data, the holder's address and other information; the hospital uses the key ring PK A = {PK1, PK2, ..., PK i-1 , PK i+1 ,…PK n} and your own private key SK h Generate a ring signature for copyright information The hospital uses the data owner's public key PK o CI, and K h Encryption Generation And generate a hash value hash(C CI ).

[0118] (4) Sending data: The hospital uses its own private key SK h right hash(C CI ), C CI and Signature, Generate Finally Sent to the data owner, where PK = {PK1, PK2, ..., PK i-1 , PK h , PK i+1 , ..., PK n}.

[0119] (5) Data storage: After the data owner receives the data, he first uses the hospital's public key PK h Verify the correctness of the hospital's signature Verify that the data is sent by the hospital; calculate and hash(C′ CI ) respectively with and hash(C CI ) to compare whether they are equal and determine whether the data has been modified; use your own private key SK o Decryption C CI , use the public key set PK to verify the correctness of the ring signature If all are correct, CI and C h Store them in IPFS respectively and obtain their storage addresses respectivelyAdd CI and Otherwise, re-execute (1)-(4) and obtain data from the hospital again.

[0120] (ii) Data registration part: The data owner can publish data description, convert data to image, extract SIFT features of image, and register data ownership through the data registration part.

[0121] (1) The data owner publishes a data description in the smart contract, describing the data size, disease type, data price and other information, and obtains the data description identifier ID DS .

[0122] (2) Data ownership registration: The data owner uses the decryption key K h Decrypt the medical data and get Calculate the hash value of the plaintext data po ); the data owner converts the data into a two-dimensional array, and converts the data into an image through delayed embedding with a delay step of 1 and a dimension of 3; the image is subjected to SIFT feature extraction to obtain the image's features FE, i.e., key points and eigenvalues, and hashes them to obtain hash FE = hash(FE); Sent to the smart contract; the smart contract can verify whether the public keys in PK are all registered as hospitals. If so, the registration information is sent to the blockchain to register the data for the data owner; otherwise, False is returned to the data owner.

[0123] (III) Transaction part: remote authentication between the data buyer and the enclave in SGX, establishment of a secure channel, and passing parameters to SGX; the data buyer can view and verify the data and apply to purchase the data through the transaction part; the data buyer and the data owner can complete the transaction through smart contracts.

[0124] (1) Authentication: The data owner remotely authenticates the enclave in SGX and establishes a secure channel; the public key PK of SGX is used SGX The decryption key K h , Data Description ID DS1 , the storage address of the ciphertext data Copyright information storage addressAdd CI And the random number r is encrypted to get And calculate its hash value H3 = hash (C SGX ), using the private key SK o C SGX Generate a signature with H3 Will Send to SGX; after SGX receives it, it calculates hash(C′ SGX ) is compared with H3 to determine whether the data has been modified; the public key PK of the data owner is used o Verify the signature The correctness of the data is determined to determine whether the data is sent by the data owner; if all verifications are successful, SGX uses its own private key SK SGX Decryption C SGX ,get SGX computes storage identifier hash (ID DS1 ||Add o ), check whether the hash value already exists in the stored hash value list. If not, store the identifier in the hash list and add the decrypted information to the address of the data owner. o Encrypted by seal() and stored in a non-secure environment; if it exists, it is not stored; if the verification fails, False is returned to the data owner, and the data owner resends the correct information.

[0125] (2) Apply for transaction: The data buyer searches for the data he wants to purchase in the smart contract and obtains the identifier ID of the corresponding data description. DS1 ; Send data description identifier ID to the smart contract DS1 、Add the address of the data owner o 、Add your own address b and public key PK b , requesting data transactions with data owners.

[0126] (3) Request data: The smart contract will (ID DS1 , PK b ) is sent to the data owner to request the data and store the record in the blockchain.

[0127] (4) Send data: The data owner will decrypt the key K h Use the public key PK of the data buyer b Encrypted And generate a hash value Use SGX's public key PK SGX Encrypt the random number r and get Use your own private key SK o right ID DS1 Sign, get and will Send to the smart contract; the smart contract remotely authenticates with SGX and establishes a secure channel. Add o , ID DS1 and PK b Send to SGX.

[0128] (5) Verification: SGX calculates hash (ID DS1 ||Add o ), check whether the hash value already exists in the stored hash value list. If so, get the ciphertext data, decrypt the corresponding ciphertext through unseal(), and get r; SGX uses the private key SK SGX Decryption Get r'; if r = r', it means that the decryption key of the data corresponding to the data has been stored, and the transaction has been agreed by the data owner, using the buyer's public key PK b The storage address of the encrypted ciphertext data is obtained Use your own private key SK SGX right Sign, get Will Send to the smart contract; otherwise, return False to the smart contract, and the smart contract rejects the transaction.

[0129] (6) Transaction data: After receiving the transaction data, the smart contract will The data buyer verifies the data and sends it to the smart contract (ID DS1 , True) and the corresponding transaction amount, the smart contract will Sent to the data buyer, the transaction amount is sent to the data owner's account, and the transaction information is stored in the transaction table.

[0130] (IV) Reporting stage: including reporting of data infringement, smart contracts obtaining information from the blockchain, and interacting with SGX to initiate infringement detection.

[0131] (1) Infringement reporting: The data owner makes a preliminary judgment on whether his data may infringe the copyright based on the data description in the smart contract. If so, the address of the person being reported is added. I and the corresponding data description identifier ID dI、Add the address of the reporter h and the corresponding data description identifier ID dh Send to the smart contract.

[0132] (2) The smart contract obtains the hash value of the plaintext data of both parties from the blockchain. pH , hash pI ), the hash value of the ciphertext data (hash HH , hash HI ), the hash value of the copyright information CIH , hash CII ), ring signature verification public key set (PK SH , PK SI ) and (Add I , Add h , ID dI , ID dh ) are sent to SGX for infringement detection.

[0133] (V) Infringement judgment and tracing: This includes the SGX function of implementing infringement judgment and transmitting the judgment results to the smart contract, which then implements the data ownership tracing and punishment functions.

[0134] (1) Download data: SGX calculates hash (ID di ||Add i )(where i = I, h), find the storage address of the data, decrypt the data through unseal(); the enclave created in SGX uses the OCALL() mechanism to (Add CIi , Add CDi )(where i=I, h) is sent to a non-secure environment; the non-secure environment downloads the file from IPFS according to the address, and obtains (where i=I, h) and copyright information, and returns the file to the enclave through the ECALL() mechanism.

[0135] (2) Calculate the hash values ​​of the ciphertext data and copyright information respectively, and compare them with the hash HH , hash HI , hash CIH , hash CII Compare and if they are equal, it proves that they are complete.

[0136] (3) SGX uses the decryption key K h , K I Decrypt the ciphertext data respectively and get and Calculate the hash value of the two and get hash(Data′h ) and hash(Data′ I ), respectively with the hash (Data h ) and hash(Data I ) and the hash in the registry pH , hash pI If they are equal, it means the decryption key is correct and the data is associated with the copyright; otherwise, the corresponding data description identifier, address and INO are returned to the smart contract, where INO contains relevant error information, i.e., copyright information error or decryption key error. dI , T1) is sent to the user, requiring the user to resend the correct information within T1; if SGX does not receive it, set status = 0 and execute step (4); if SGX receives it, re-execute this step.

[0137] (4) Similarity calculation: SGX uses a delayed embedding algorithm to convert the medical data converted into a two-dimensional array into an image, and performs SIFT feature extraction on the image to obtain key points and descriptors, namely FE. h , FE I ; Use a brute force search method to find the best match between two key points, calculate the average value of the matching distance and convert it into a similarity score to obtain Simil; if Simil reaches the threshold, the two data are judged to be similar. If status = 0, it means that there is infringement; otherwise, continue to step (5); if Simil does not reach the threshold, the two data are not similar.

[0138] (5) Verify the signature: Use the public key dataset PK SH , PK SI Verify the correctness of the signatures in the two copyright information separately; if the signature verification of the person being reported fails, it is determined that there is infringement; if both verifications are successful, execute step (6).

[0139] (6) Verify the holder: Get the address Add′ of the holder in the copyright information respectively h and Add′ I , respectively with Add h , Add I Compare and determine the information of the holder; if the information of the reported person is different, it is determined that there is infringement; if the verification is successful, it means that there is no infringement.

[0140] (7) If there is infringement, SGX sends (Add I , Add h , ID dI , ID dh, True, Add p ,Simil, ), otherwise, send (Add I , Add h , ID dI , ID dh ,False,Simil, ), where True / False indicates whether there is infringement, Add p Indicate the address of the possible infringer.

[0141] (8) Data ownership traceability: If there is infringement, the smart contract will The smart contract will use the address of the person being punished and the data description identifier to find the next buyer of the data and punish him. I , Add h , ID dI , ID dh ,True / False,Simil, Add p ) is stored in the blockchain, where Add p It is the address of the punisher.

[0142] Those skilled in the art will appreciate that the units, i.e., algorithm steps, of the various examples described in the present embodiment can be implemented in electronic hardware or in a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0143] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A data infringement detection and ownership tracing method, which is applied to SGX, characterized in that: include: In response to an infringement reporting request from a smart contract, based on the data description identifiers corresponding to the person being reported and the reporter in the infringement reporting request, the storage information of both parties is obtained; wherein the infringement reporting request includes the hash value of the plaintext data of the reporter and the person being reported, the hash value of the ciphertext data, the hash value of the copyright information, the ring signature verification public key set, the address, and the data description identifier; Based on the addresses of both parties and the ciphertext data storage addresses in the storage information of both parties, the ciphertext data of both parties are downloaded in a non-secure environment, and the data integrity, key correctness and data-copyright association are verified based on the ciphertext data of both parties; After the verification is passed, the plaintext data of both parties are converted into image data, and feature extraction is performed on the image data to obtain feature representations corresponding to the plaintext data of both parties; similarity scores are calculated based on the feature representations of both parties, and whether the data of both parties are similar is determined based on the similarity scores; If there is similarity, the ring signatures of the data copyright information of both parties will be verified. If the verification is successful, the data copyright information holders of both parties will be verified. If the verification fails, it proves that there is infringement. The infringement-related information is sent to the smart contract, and the smart contract queries the real owner of the data and the data transaction record in the data ownership registry and transaction table based on the infringement-related information, so as to realize data infringement detection and ownership traceability.

2. A data infringement detection and ownership tracing method as claimed in claim 1, characterized in that: The generation of the infringement reporting request of the smart contract is specifically as follows: when the data owner discovers data infringement, the reporter's address, data description identifier and the reported person's address and data description identifier are sent to the smart contract for reporting; The smart contract obtains the hash value of the plaintext data of both parties, the hash value of the ciphertext data, the hash value of the copyright information and the ring signature verification public key set from the blockchain, and generates an infringement reporting request based on the addresses of both parties and the data description identifier.

3. A data infringement detection and ownership tracing method as claimed in claim 1, characterized in that: The data integrity verification is specifically as follows: the hash values ​​of the ciphertext data and copyright information of both parties are calculated respectively; the calculated hash values ​​of the ciphertext data and copyright information of both parties are compared with the corresponding hash values ​​in the infringement reporting request respectively. If they are equal, it proves that the data is complete.

4. A data infringement detection and ownership tracing method as claimed in claim 1, characterized in that: The key correctness and data and copyright association verification are specifically: decrypting the obtained ciphertext data of both parties, calculating the hash value of the plaintext data of both parties, and comparing them with the hash value of the plaintext data in the copyright information of both parties' data and the plaintext data in the infringement reporting request. If they are equal, the decryption key is correct and the data is associated with the copyright.

5. A data infringement detection and ownership tracing method as claimed in claim 1, characterized in that: The judgment of whether the data of both parties are similar is specifically as follows: Convert the plaintext data of the reporter and the reported person into a first image and a second image respectively; Performing SIFT feature extraction on the first image and the second image to obtain feature representations of the first image and the second image, wherein the feature representations include key points and descriptors; Based on the key points and descriptors of the first image and the second image, matching the key points is performed to obtain an optimal matching result of the key points; Based on the matching results of the key points of the first image and the second image, the average of the distances between the matching key points is used as the similarity score. If the similarity score is not less than a preset threshold, the data of both parties are similar.

6. A data infringement detection and ownership tracing method as claimed in claim 1, characterized in that: The verification of the data copyright information holders of both parties is specifically as follows: respectively obtaining the addresses of the holders in the copyright information of the reporter and the reported person, and comparing them with the addresses of the reporter and the reported person to determine the information of the holders; If the address of the person being reported is different from the address of the holder in the corresponding copyright information, it is deemed that there is infringement; If the addresses are the same, there is no infringement.

7. A data infringement detection and ownership tracing method, applied to data owners, characterized in that: include: When data infringement is discovered, the reporter's address, data description identifier, and the reported person's address and data description identifier are sent to the smart contract for reporting; The smart contract obtains the hash value of the plaintext data of both parties, the hash value of the ciphertext data, the hash value of the copyright information and the ring signature verification public key set from the blockchain, and generates an infringement reporting request based on the addresses of both parties and the data description identifier, and sends it to SGX; Among them, the SGX specifically performs the following processing procedures: based on the data description identifiers corresponding to the person being reported and the reporter in the infringement reporting request, the storage information of both parties is obtained; based on the addresses of both parties and the ciphertext data storage addresses in the storage information of both parties, the ciphertext data of both parties are downloaded in a non-secure environment, and the data integrity, key correctness and data and copyright association are verified based on the ciphertext data of both parties; after the verification is passed, the obtained plaintext data of both parties are converted into image data, and the image data are respectively feature extracted to obtain the feature representation corresponding to the plaintext data of both parties; based on the feature representation of both parties, the similarity score is calculated, and based on the similarity score, it is determined whether the data of both parties are similar; if there is similarity, the ring signature of the copyright information of the data of both parties is verified, and if the verification is successful, the holders of the copyright information of the data of both parties are verified, and if the verification fails, it proves that there is infringement; the infringement related information is sent to the smart contract; Through smart contracts, the real owner of the data and the data transaction records are queried in the data ownership registry and transaction table based on the infringement-related information, thereby realizing data infringement detection and ownership tracing.

8. A data infringement detection and ownership tracing method as claimed in claim 7, characterized in that: The judgment of whether the data of both parties are similar is specifically as follows: Convert the plaintext data of the reporter and the reported person into a first image and a second image respectively; Performing SIFT feature extraction on the first image and the second image to obtain feature representations of the first image and the second image, wherein the feature representations include key points and descriptors; Based on the key points and descriptors of the first image and the second image, matching the key points is performed to obtain an optimal matching result of the key points; Based on the matching results of the key points of the first image and the second image, the average of the distances between the matching key points is used as the similarity score. If the similarity score is not less than a preset threshold, the data of both parties are similar.

9. A data infringement detection and ownership tracing method, characterized in that: include: When data infringement is discovered, the data owner sends the reporter's address, data description identifier, and the reported person's address and data description identifier to the smart contract for reporting; The smart contract obtains the hash value of the plaintext data of both parties, the hash value of the ciphertext data, the hash value of the copyright information and the ring signature verification public key set from the blockchain, and generates an infringement reporting request based on the addresses of both parties and the data description identifier, and sends it to SGX; The SGX obtains the storage information of both parties based on the data description identifiers corresponding to the person being reported and the reporter in the infringement reporting request; Based on the addresses of both parties and the ciphertext data storage addresses in the storage information of both parties, the ciphertext data of both parties are downloaded in a non-secure environment, and the data integrity, key correctness and data-copyright association are verified based on the ciphertext data of both parties; After the verification is passed, the plaintext data of both parties are converted into image data, and the features of the image data are extracted to obtain the feature representations corresponding to the plaintext data of both parties; the similarity scores are calculated based on the feature representations of both parties, and whether the data of both parties are similar is determined based on the similarity scores; if they are similar, the ring signatures of the copyright information of the data of both parties are verified. If the verification is successful, the holders of the copyright information of the data of both parties are verified. If the verification fails, it proves that there is infringement; the infringement-related information is sent to the smart contract; Through smart contracts, the real owner of the data and the data transaction records are queried in the data ownership registry and transaction table based on the infringement-related information, thereby realizing data infringement detection and ownership tracing.

10. A data infringement detection and ownership tracing system, characterized in that: At least includes a data owner, SGX, a smart contract and a blockchain, wherein the SGX executes a data infringement detection and ownership tracing method as described in any one of claims 1-6, and the data owner executes a data infringement detection and ownership tracing method as described in any one of claims 7-8.

Images