Data privacy protection method based on block chain

Abstract

The invention discloses a block chain-based data privacy protection method. The method comprises the following steps of 1, collecting factory equipment data, and uploading and encrypting the factory equipment data; 2, performing multi-layer encryption on the data uploaded to the block chain; step 3, fragmenting and storing the multi-layer encrypted data; 4, the authorized user checks privacy data through the smart contract, and the data encryption and fragmentation module is used for protecting data privacy and security and realizing uniform storage of the data in the distributed network at the same time; the data access control and identity verification module is used for finely controlling the data access authority and ensuring that only authorized personnel can decrypt and access specific data fragments; the data verification and storage module is used for ensuring data integrity, redundant storage and safe recombination so as to increase data reliability and resist attacks; the method has the advantages of being good in privacy data protection and high in safety.

Description

Technical Field

[0001] This invention relates to the field of privacy data protection technology, specifically a data privacy protection method based on blockchain. Background Technology

[0002] In today's digital age, the generation, transmission, and storage of data have become increasingly widespread and prevalent. However, with the increase in data, issues of data privacy and security have also become increasingly prominent. Especially in areas involving sensitive information, trade secrets, or personal privacy, such as industrial manufacturing, healthcare, and finance, protecting data from the risks of unauthorized access, tampering, and leakage has become crucial.

[0003] Traditional data storage and transmission methods face challenges such as insufficient security, vulnerability of centralized storage to attacks, and man-in-the-middle risks. To address these challenges, blockchain technology has gradually emerged, offering a new solution for data privacy protection with its decentralized, immutable, and transparent characteristics. However, while blockchain can ensure data immutability, effectively managing and protecting private data on the blockchain remains a critical issue. Therefore, designing blockchain-based data privacy protection methods that offer both strong privacy protection and high security is essential. Summary of the Invention

[0004] The purpose of this invention is to provide a blockchain-based data privacy protection method to solve the problems mentioned in the background section.

[0005] To address the aforementioned technical problems, this invention provides the following technical solution: a blockchain-based data privacy protection system, the operation of which includes the following steps: Step 1: Collect, upload, and encrypt factory equipment data; Step 2: Perform multi-layered encryption on the data uploaded to the blockchain; Step 3: Fragment and store the multi-layered encrypted data; Step 4: Authorize users to view private data through smart contracts.

[0006] According to the above technical solution, the steps of collecting, uploading, and encrypting factory equipment data include: The system collects real-time operational data, including parameters such as temperature, humidity, pressure, and speed, through sensors or interfaces on factory equipment. This data is then encrypted and uploaded. The collected data is categorized and identified into different types, such as environmental data, equipment status data, and production data, with each category assigned a unique identifier. These unique identifiers distinguish different data types within the blockchain network. Asymmetric encryption is then used to encrypt the data. In the system-generated key pair, the public key is used for data encryption, while the private key is stored in the key management module. Finally, the encrypted data and related information are packaged into a data packet, including the encrypted data, data category identifier, encryption algorithm information, and a timestamp. This data packet is uploaded to the blockchain network, ensuring the data's immutability and traceability.

[0007] According to the above technical solution, the step of performing multi-layer encryption on the data uploaded to the blockchain includes: The data is divided into different levels based on its sensitivity. Design multiple layers of encryption for each data level.

[0008] According to the above technical solution, the step of dividing the data into different levels based on sensitivity includes: Based on the privacy requirements of the data, it is divided into different levels. For example, environmental data is classified as low-level, device status data as medium-level, and production data as high-level. Then, a multi-layered encryption scheme is designed for each data level. The data at each level will be protected by a series of encryption layers, each using a different encryption algorithm and key, which increases the difficulty for attackers to crack. When decrypting the data, it is necessary to decrypt layer by layer in reverse order, starting from the outermost layer until the original form of the data is reached. Attackers must first crack the innermost encryption layers before they can access more sensitive data.

[0009] According to the above technical solution, the step of designing multi-layer encryption for each data level includes: For low-level data, firstly, the environmental sensor data is encrypted using the AES algorithm and key K1, and then the data encrypted using the DES algorithm and key K2 is encrypted again. For medium-level data, the device status data is encrypted for the first time using the RSA algorithm and public key PK1, and then the data encrypted using the AES algorithm and key K3 is encrypted again. For high-level data: First layer encryption: The production process data is encrypted using the RSA algorithm and public key PK2; Second layer encryption: The data encrypted using the Triple DES algorithm and key K4 is encrypted again.

[0010] According to the above technical solution, the step of fragmenting and storing multi-layer encrypted data includes: Use a random selection algorithm for data sharding and distributed storage; Data restructuring and verification.

[0011] According to the above technical solution, the step of using a random selection algorithm for data sharding and distributed storage includes: The encrypted data is divided into multiple fragments, the size of which can be set according to requirements. This fragmentation can be performed according to a specific algorithm or a random method to ensure a uniform distribution of the data. For example, a hash function can be used to fragment the data, allocating fragments based on the hash value of the data content. This ensures that fragments of different data are more evenly distributed throughout the distributed storage system. These data fragments are then stored on multiple different nodes in the blockchain network. Distributed storage disperses data fragments across different parts of the network, reducing the impact of a single node failure on data availability and integrity. Before storing data fragments on different nodes in the blockchain network, a random selection algorithm assigns the data fragments to random nodes. This ensures that data fragments of the same type are not always stored in the same location, making it difficult for attackers to predict the storage location of the data.

[0012] According to the above technical solution, the steps for authorized users to view privacy data through smart contracts include: Design privacy-preserving smart contracts to manage data access permissions and decrypt data fragments; Authorization definitions enable fine-grained control over data access; Smart contracts verify the identities of participants through identity verification mechanisms; Smart contracts record data access logs, including participants, data fragments, access time and conditions; Access logs are used for auditing and monitoring data access to ensure data security and compliance.

[0013] According to the above technical solution, the system includes: The data encryption and sharding module is used to protect data privacy and security, while also enabling uniform storage of data in a distributed network. The data access control and authentication module is used to finely control data access permissions, ensuring that only authorized personnel can decrypt and access specific data fragments; The data verification and storage module is used to ensure data integrity, redundant storage, and secure reassembly to increase data reliability and resist attacks.

[0014] According to the above technical solution, the data encryption and sharding module includes: The data encryption module is used to encrypt the operating data of factory equipment to ensure the confidentiality of the data; The multi-layer encryption module is used to classify data according to its level of privacy and encrypt each level of data multiple times using different encryption algorithms and keys. The data sharding and storage module is used to store encrypted data shards on multiple nodes of the blockchain network, ensuring data integrity and resisting attacks through distributed storage.

[0015] Compared with existing technologies, the beneficial effects achieved by this invention are as follows: This invention ensures the privacy, integrity, and security of data through multiple technical means. First, data is divided into different levels through a multi-layered encryption scheme. Then, each level of data is encrypted in multiple layers. The encrypted data is fragmented and stored on multiple nodes of the blockchain network. Privacy smart contracts are used for fine-grained data access control. Participants must be authenticated and authorized before they can decrypt and access specific data fragments. Access log recording and data verification ensure data security and compliance. Multi-node replication and data reassembly ensure data integrity. This method has the characteristics of good privacy and security protection. Attached Figure Description

[0016] The accompanying drawings are provided to further illustrate the invention and form part of the specification. They are used in conjunction with embodiments of the invention to explain the invention and do not constitute a limitation thereof. In the drawings: Figure 1 A flowchart of a blockchain-based data privacy protection method provided in Embodiment 1 of the present invention; Figure 2 This is a schematic diagram of the module composition of the blockchain-based data privacy protection system provided in Embodiment 2 of the present invention. Detailed Implementation

[0017] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0018] Example 1: Figure 1 This is a flowchart of a blockchain-based data privacy protection method provided in Embodiment 1 of the present invention. This embodiment can be applied to privacy data protection scenarios. This method can be executed by the blockchain-based data privacy protection system provided in this embodiment, such as... Figure 1 As shown, the method specifically includes the following steps: Step 1: Collect, upload, and encrypt factory equipment data; In this embodiment of the invention, operating data including parameters such as temperature, humidity, pressure, and speed are collected in real time through sensors or interfaces of factory equipment, and then the collected data is encrypted and uploaded. For example, the collected data is classified and identified into different categories, such as environmental data, equipment status data, and production data, and a unique identifier is assigned to each category. By using the unique identifier, different data types can be distinguished in the blockchain network. Subsequently, asymmetric encryption is used to encrypt the data. In the key pair generated by the system, the public key is used for data encryption, while the private key is stored in the key management module. Finally, the encrypted data and related information are packaged into a data packet, which includes encrypted data, data category identifiers, encryption algorithm information, and timestamps. The data packet is uploaded to the blockchain network to ensure the immutability and traceability of the data.

[0019] Step 2: Perform multi-layered encryption on the data uploaded to the blockchain; In this embodiment of the invention, the data is first divided into privacy levels. Based on the sensitivity of the data, it is divided into different levels. Each level represents a confidentiality level of the data. The more sensitive the data, the higher the level it will be assigned to. For example, data can be divided into different levels based on its privacy requirements. For instance, environmental data can be classified as low-level, device status data as medium-level, and production data as high-level. Then, a multi-layered encryption scheme can be designed for each data level. Data at each level will be protected by a series of encryption layers, each using a different encryption algorithm and key. This increases the difficulty for attackers to crack the encryption. When decrypting data, it is necessary to decrypt layer by layer in reverse order, starting from the outermost layer and decrypting layer by layer until the original form of the data is reached. Attackers must first crack the innermost encryption layers before they can access more sensitive data. For example, the specific implementation method of multi-layer encryption is as follows: For low-level data, firstly, the environmental sensor data is encrypted using the AES algorithm and key K1, and then the data encrypted using the DES algorithm and key K2 is encrypted again; For medium-level data, the device status data is encrypted for the first time using the RSA algorithm and public key PK1, and then the data encrypted using the AES algorithm and key K3 is encrypted again; For high-level data: First layer encryption: the production process data is encrypted using the RSA algorithm and public key PK2, and second layer encryption: the data encrypted using the Triple DES algorithm and key K4 is encrypted again. For example, when data needs to be accessed, the decryption order is the reverse of the encryption order: high-level data: first decrypt the data using K4, then decrypt using PK2; medium-level data: first decrypt the data using K3, then decrypt using PK1; low-level data: first decrypt the data using K2, then decrypt using K1. By introducing a multi-layered encryption scheme, the difficulty for attackers to obtain data is greatly increased, effectively improving the confidentiality and privacy of the data.

[0020] Step 3: Fragment and store the multi-layered encrypted data; In this embodiment of the invention, after the data is encrypted in multiple layers, the encrypted data is fragmented and distributed for storage to enhance data integrity and resist attacks. For example, encrypted data can be divided into multiple fragments, the size of which can be set as needed. This fragmentation can be performed according to a specific algorithm or a random method to ensure a uniform distribution of data. For instance, a hash function can be used to fragment the data, allocating fragments based on the hash value of the data content. This ensures that fragments of different data are more evenly distributed throughout the distributed storage system. These data fragments are then stored on multiple different nodes of the blockchain network. Distributed storage disperses data fragments across different parts of the network, reducing the impact of a single node failure on data availability and integrity. Before storing data fragments on different nodes of the blockchain network, a random selection algorithm is used to assign data fragments to random nodes. This ensures that data fragments of the same type are not always stored in the same location, making it difficult for attackers to predict the storage location of the data. For example, each storage node verifies the integrity and correctness of the received data fragments. To further increase data reliability, data fragments can be replicated across multiple nodes to ensure redundant storage. Simultaneously, each data fragment is assigned a unique identifier, hash value, or other identifying information, which is stored in the blockchain to ensure consistency and accuracy. When data needs to be accessed, the system retrieves the corresponding data fragments from multiple storage nodes and reassembles them to restore the original data. During this process, the integrity of each data fragment is verified again to ensure that the data has not been damaged or tampered with during reassembly. By storing encrypted data fragments across multiple nodes in the blockchain network, not only is data integrity and security improved, but attacks can also be mitigated because even if some nodes are attacked, other nodes can still provide data backup and recovery capabilities.

[0021] Step 4: Authorize users to view private data through smart contracts.

[0022] In this embodiment of the invention, the privacy smart contract allows users to define data access permissions, clearly specifying which participants have the right to decrypt and access specific data fragments, ensuring that only authorized personnel can access the data; For example, a privacy smart contract is designed to manage data access permissions and the decryption of data fragments. The smart contract stores the identifier of the data fragment, access permission rules, and the identity information of the participants. Users can define data access permissions on the blockchain by interacting with the smart contract. Users can specify which participants or identities are authorized to access which data fragments, as well as the time limits and conditions for access. Such authorization definitions ensure fine-grained control over data access. When a participant attempts to access data, the smart contract verifies its identity through an authentication mechanism. When the participant meets the access permission requirements, the smart contract provides the corresponding key or decryption service, enabling the participant to decrypt and access the authorized data fragments. This ensures the privacy and confidentiality of the data. Furthermore, the smart contract records data access logs, including which participants accessed which data fragments, as well as the time and conditions of access. Such access logs can be used for data access auditing and monitoring, ensuring data security and compliance. For example, a supplier might want to access a specific batch of supply chain data to optimize their production plan. The supplier uses their digital identity credentials to send a request to a smart contract. The smart contract first verifies their identity, confirming they are an authorized supplier. Then, the smart contract determines whether they have the right to access the specific supply chain data segment based on access permission rules. Once access permission verification is successful, the smart contract provides a decryption key, which the supplier can use to decrypt the data segment and obtain the required information. By introducing privacy-preserving smart contracts, the system achieves a high degree of control and management over data access. Users can define precise access permission rules to ensure that only authorized parties can access specific data segments. The design and authentication mechanism of the smart contract guarantee data security and privacy protection.

[0023] Example 2: Example 2 of the present invention provides a data privacy protection system based on blockchain. Figure 2 This is a schematic diagram of the module composition of the blockchain-based data privacy protection system provided in Embodiment 2 of the present invention, as shown below. Figure 2 As shown, the system includes: The data encryption and sharding module is used to protect data privacy and security, while also enabling uniform storage of data in a distributed network. The data access control and authentication module is used to finely control data access permissions, ensuring that only authorized personnel can decrypt and access specific data fragments; The data verification and storage module is used to ensure data integrity, redundant storage, and secure reassembly, thereby increasing data reliability and resisting attacks. In some embodiments of the present invention, the data encryption and sharding module includes: The data encryption module is used to encrypt the operating data of factory equipment to ensure the confidentiality of the data; The multi-layer encryption module is used to classify data according to its level of privacy and encrypt each level of data multiple times using different encryption algorithms and keys. The data sharding and storage module is used to store encrypted data shards on multiple nodes of the blockchain network, ensuring data integrity and resisting attacks through distributed storage. In some embodiments of the present invention, the data access control and authentication module includes: The privacy smart contract module is used to ensure that only authorized personnel can access the data; The access permission definition module is used to specify which participants or identities are authorized to access which data fragments, as well as the time limits and conditions for access. The authentication mechanism module is used by smart contracts to require participants to provide authentication credentials when they attempt to access data. In some embodiments of the present invention, the data verification and storage module includes: The data integrity verification module is used to calculate the hash value of data fragments or use other integrity verification methods to ensure that the data has not been tampered with or damaged during transmission. The data redundancy storage module is used to store the same data fragments on multiple different storage nodes, increasing data reliability and redundancy; The data reconstruction and verification module is used to retrieve corresponding data fragments from multiple storage nodes and reassemble them to restore the original data when data needs to be accessed.

[0024] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus.

[0025] Finally, it should be noted that the above descriptions are merely preferred embodiments of the present invention and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing embodiments or make equivalent substitutions for some of the technical features. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A data privacy protection method based on blockchain, the method comprising the following steps: Step 1: Collect factory equipment data for uploading and encryption; Step 2: Perform multi-layer encryption on the data uploaded to the blockchain; Step 3: Shard and store multi-layer encrypted data; Step 4: Authorize users to view private data through smart contracts.

2. The data privacy protection method based on blockchain according to claim 1 is characterized in that: The steps of collecting factory equipment data for uploading and encryption include: Through the sensors or interfaces of factory equipment, operating data including temperature, humidity, pressure, and speed parameters are collected in real time, and then the collected data is encrypted and uploaded; the collected data is classified and identified, and the data is divided into different categories, such as environmental data, equipment status data, and production data, and a unique identifier is assigned to each category. By using a unique identifier, different data types can be distinguished in the blockchain network. Subsequently, the data is encrypted using asymmetric encryption. In the key pair generated by the system, the public key is used for data encryption, and the private key is kept in the key management module. Finally, the encrypted data and related information are encapsulated into a data packet, which includes encrypted data, data classification identification, encryption algorithm information, and timestamp. The data packet will be uploaded to the blockchain network to ensure the data is tamper-proof and traceable.

3. The data privacy protection method based on blockchain according to claim 1 is characterized in that: The steps of performing multi-layer encryption on the data uploaded to the blockchain include: Classify data into different levels according to sensitivity; Design multiple layers of encryption for each data level.

4. The data privacy protection method based on blockchain according to claim 3 is characterized in that: The step of classifying data into different levels according to sensitivity includes: According to the privacy level of the data, the data is divided into different levels, such as environmental data is divided into a low level, equipment status data is divided into a medium level, and production data is divided into a high level. Then, a multi-layer encryption scheme is designed for each data level. Each level of data will be protected by a series of encryption layers. Each layer uses a different encryption algorithm and key, which increases the difficulty for attackers to crack. When decrypting data, it is necessary to decrypt layer by layer in reverse order, starting from the outermost layer until the original form of the data is reached. Attackers must first crack the inner layer of encryption before they can access more sensitive data.

5. The data privacy protection method based on blockchain according to claim 4 is characterized in that: The steps of designing multi-layer encryption for each data level include: For low-level data, first, use the AES algorithm and key K1 to perform the first layer of encryption on the environmental sensor data, and then use the DES algorithm and key K2 to encrypt the first layer of encrypted data again; for medium-level data, use the RSA algorithm and public key PK1 to encrypt the device status data for the first time, and use the AES algorithm and key K3 to encrypt the first layer of encrypted data again; high-level data: the first layer of encryption: use the RSA algorithm and public key PK2 to encrypt the production process data, the second layer of encryption: use the Triple DES algorithm and key K4 to encrypt the first layer of encrypted data again.

6. The data privacy protection method based on blockchain according to claim 1 is characterized in that: The step of slicing and storing the multi-layer encrypted data includes: Use random selection algorithm for data sharding and distributed storage; Data reorganization and verification.

7. The data privacy protection method based on blockchain according to claim 6 is characterized in that: The step of using a random selection algorithm to perform data sharding and distributed storage includes: The encrypted data is divided into multiple fragments, and the size of each fragment can be set according to the needs. This fragmentation can be performed according to a specific algorithm or in a random manner to ensure the uniform distribution of data. For example, a hash function can be used to fragment the data and the fragments can be allocated according to the hash value of the data content. This ensures that fragments of different data are more evenly distributed throughout the distributed storage system. These data fragments are then stored on multiple different nodes of the blockchain network. The distributed storage method disperses the data fragments to different parts of the network, reducing the impact of a single node failure on data availability and integrity. Before storing the data fragments on different nodes of the blockchain network, the data fragments are assigned to random nodes through a random selection algorithm. This ensures that the same type of data fragments are not always stored in the same location, making it difficult for attackers to predict the storage location of the data.

8. The data privacy protection method based on blockchain according to claim 1 is characterized in that: The steps of authorizing the user to view private data through the smart contract include: Design privacy-preserving smart contracts to manage data access permissions and data fragment decryption; Authorization definition enables refined control over data access; Smart contracts verify the identities of participants through identity authentication mechanisms; Smart contracts record data access logs, including participants, data fragments, access times and conditions; Access logs are used to audit and monitor data access to ensure data security and compliance.

9. The data privacy protection system based on blockchain is characterized by: The system comprises: Data encryption and sharding modules are used to protect data privacy and security while achieving uniform storage of data in a distributed network; Data access control and authentication module, which is used to fine-tune the control of data access rights and ensure that only authorized personnel can decrypt and access specific data fragments; Data verification and storage module, used to ensure data integrity, redundant storage and secure reorganization to increase data reliability and resist attacks.

10. The data privacy protection system based on blockchain according to claim 9 is characterized in that: The data encryption and fragmentation module includes: Data encryption module, used to encrypt factory equipment operation data to ensure data confidentiality; A multi-layer encryption scheme module is used to classify data according to the degree of privacy and encrypt each level of data multiple times using different encryption algorithms and keys; The data sharding and storage module is used to store encrypted data shards on multiple nodes of the blockchain network, ensuring data integrity and resisting attacks through distributed storage.

Images