Data element ownership information verification method and system based on characteristic values

Abstract

The invention discloses a data element ownership information verification method and system based on a characteristic value, and relates to the technical field of data security, and the method comprises the steps: carrying out the security verification based on a data element activity request, and generating a digital certificate of a data element; calculating a hash value of the digital certificate, encrypting the digital certificate, generating a digital certificate ciphertext, splitting the digital certificate ciphertext, and storing the split digital certificate ciphertext in a block chain; generating a data element characteristic value based on the split digital certificate ciphertext, and generating a digital watermark based on the data element characteristic value; performing security verification according to the data element verification request, extracting the digital watermark, performing data element feature value reduction, and analyzing the data element feature value; carrying out fragmented ciphertext addressing, and restoring the digital certificate ciphertext; and decrypting the digital certificate ciphertext to obtain the digital certificate with the ownership information, and verifying the ownership information. According to the invention, deep binding of the data elements and the ownership information thereof is realized, and security verification of the ownership information of the data elements is guaranteed.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a method and system for verifying data element ownership information based on characteristic values. Background Art

[0002] With the continuous expansion of the application of data elements in various digital scenarios, how to effectively manage and verify data ownership has become an important technical challenge. In recent years, the introduction of blockchain technology has provided a decentralized solution for data storage and management. It records the ownership and flow information of data through distributed ledger technology, which is difficult to tamper with, transparent and traceable. However, traditional blockchain technology still has certain limitations in dealing with the issue of data element ownership verification.

[0003] Existing technologies usually only store the hash value and summary information of the data on the chain, and cannot directly and effectively associate the ownership information of the data, resulting in a complex and inefficient process of verifying and restoring the original ownership information when a data dispute occurs. At the same time, although the existing feature value-based verification mechanism can verify and track data to a certain extent, it still has deficiencies in the security and integrity of data storage. For example, data is easily tampered with maliciously during storage, and data loss is easily generated during the verification process. Summary of the invention

[0004] In view of the problems existing in the above-mentioned existing method for verifying data element ownership information based on characteristic values, the present invention is proposed.

[0005] Therefore, the problem to be solved by the present invention is that the identification and verification of data elements are difficult when disputes and leaks occur, and the process of verifying and restoring the original ownership information is complicated and inefficient.

[0006] To solve the above technical problems, the present invention provides the following technical solutions: a method for verifying data element ownership information based on characteristic values, which includes: performing security verification based on data element activity requests to generate digital certificates for data elements; calculating the digital certificate hash value, encrypting the digital certificate, generating digital certificate ciphertext, and storing it in the blockchain after splitting; generating data element characteristic values ​​based on the split digital certificate ciphertext, and generating digital watermarks based on the data element characteristic values; performing security verification according to the data element verification request, extracting the digital watermark and restoring the data element characteristic values, and parsing the data element characteristic values; performing shard ciphertext addressing to restore the digital certificate ciphertext; decrypting the digital certificate ciphertext to obtain a digital certificate with ownership information for ownership information verification.

[0007] As a preferred solution of the data element ownership information verification method based on characteristic values ​​of the present invention, wherein: the security verification based on the data element activity request and the generation of the digital certificate of the data element include: Receive data element activity requests and use SSL client authentication mode to perform security verification, including identity legitimacy verification of the request sender, request type verification, and request information verification; If the security verification fails, the feedback system prompts and interrupts the data element activity request; If the security verification is passed, the ownership information related to the data element will be recorded according to the pre-set ownership information items; A digital certificate template is selected and written into the smart contract of the blockchain platform, and the ownership information related to the data elements is sent to the blockchain platform. The corresponding data fields of the ownership information related to the data elements are placed in the corresponding positions of the digital certificate template, and a timestamp is added to the digital certificate to obtain a digital certificate containing the ownership information of the timestamp. The blockchain platform includes a main chain and a branch chain.

[0008] As a preferred solution of the data element ownership information verification method based on characteristic value of the present invention, wherein: the digital certificate hash value is calculated, and the digital certificate is encrypted to generate the digital certificate ciphertext, which is split and stored in the blockchain, including: Based on the generated digital certificate, a hash value H1 of the digital certificate is calculated using a hash algorithm; Use an asymmetric encryption algorithm to encrypt the digital certificate, generate a public key and a private key, store the generated public key and private key in the key management service AWS, and generate a digital certificate ciphertext; The digital certificate ciphertext is numbered, the number value is set to X, the ciphertext of the digital certificate is split using the Shamir threshold algorithm to obtain the fragmented ciphertext, the ciphertext number value X and the number of fragmented ciphertexts m, and the split digital certificate ciphertext is transmitted to the blockchain platform using the TLS protocol; Use the main chain of the blockchain platform to receive the shard ciphertext, the ciphertext number value X and the number of split shard ciphertexts m, randomly select m different branch chain addresses, and store the shard ciphertext in each branch chain according to the branch chain address information.

[0009] As a preferred solution of the data element ownership information verification method based on characteristic values ​​of the present invention, the method of generating data element characteristic values ​​based on the split digital certificate ciphertext and generating digital watermarks based on the data element characteristic values ​​includes: The ciphertext number value X, the digital certificate hash value H1, and the ciphertext split quantity value m are concatenated to obtain the data element characteristic value T, and the element characteristic value T is encrypted using a symmetric encryption algorithm. A key is generated and stored in the key management service AWS to obtain the ciphertext K. Half of the ciphertext K is used as a digital watermark, and the digital watermark is embedded in the data element using DCT technology to obtain the data element with a digital watermark. The other half of the ciphertext is stored in the database.

[0010] As a preferred solution of the data element ownership information verification method based on characteristic values ​​of the present invention, wherein: the security verification is performed according to the data element verification request, the digital watermark is extracted and the data element characteristic value is restored, and the data element characteristic value is parsed, including: Receive data element verification requests and use SSL client authentication mode for security verification; If the security verification fails, feedback will be given and the data element verification request will be terminated; If the security verification is passed, the data element with the digital watermark is received, the digital watermark in the data element is extracted using the DCT technology, and the ciphertext K is restored by combining it with the other half of the ciphertext in the database. The ciphertext is decrypted using the key to generate the data element characteristic value; Parse the data element feature values ​​to obtain the ciphertext number value X, the ciphertext split quantity value m and the hash value H1 of the digital certificate.

[0011] As a preferred solution of the data element ownership information verification method based on characteristic value of the present invention, the method of performing shard ciphertext addressing and restoring the digital certificate ciphertext includes: According to the ciphertext number value X and the ciphertext split number value m, an addressing token is generated and sent to the regional chain platform. The main chain of the regional chain platform receives the information, verifies the legitimacy of the addressing token, records the ciphertext number value X and the ciphertext split number value m, calculates the storage location of the ciphertext in each branch chain, and sends a data call request to the corresponding branch chain; After receiving the data call request, the branch chain retrieves the internal data and feeds the target shard ciphertext back to the main chain to aggregate the shard ciphertext and generate a complete digital certificate ciphertext.

[0012] As a preferred solution of the data element ownership information verification method based on characteristic value of the present invention, wherein: the decryption of the digital certificate ciphertext to obtain the digital certificate with ownership information for ownership information verification includes: Decrypt the complete digital certificate ciphertext using the private key in the key management service AWS to obtain the digital certificate plaintext, and calculate the hash value H2 of the digital certificate plaintext, and compare it with the hash value H1 obtained by parsing; If the hash values ​​are consistent, the ownership information is extracted; If the hash value comparison is inconsistent, an alarm is issued and the ownership information extraction process is stopped; The data element ownership information is verified based on the extracted digital certificate ownership information content.

[0013] Another object of the present invention is to provide a data element ownership information verification system based on characteristic values, which comprises: A security verification module, used to perform security verification based on data element activity requests and generate digital certificates for data elements; The encryption storage module is used to encrypt the digital certificate, generate the digital certificate ciphertext and store it in the regional chain; A feature value generation module, used to generate feature values ​​of data elements including digital watermarks; A feature value restoration module, used to perform security verification according to a data element verification request, restore data element feature values, and perform data element feature value analysis; The digital certificate ciphertext restoration module is used to calculate the ciphertext shard address to generate the complete digital certificate ciphertext; The ownership information verification module is used to verify the ownership information of data elements.

[0014] A computer device comprises: a memory and a processor; the memory stores a computer program, and the processor implements the steps of a method for verifying ownership information of data elements based on characteristic values ​​when executing the computer program.

[0015] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of a method for verifying ownership information of data elements based on characteristic values.

[0016] The beneficial effects of the present invention are as follows: the present invention realizes the deep binding of data elements and their ownership information, so that data elements are also verified when they are transmitted offline, and uses characteristic values ​​to embed data elements to effectively reduce the digital watermark capacity, thereby ensuring that the data elements are not interfered with or destroyed by the digital watermark. The amount of ownership information carried by the data elements is increased. In addition, the sharded storage of the credential information ensures the secure storage of the data element ownership information on the chain. Even if the ownership information on the chain is stolen, it is difficult for the thief to restore the plaintext of the ownership information. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0018] Figure 1The figure is a flowchart of a method for verifying ownership information of data elements based on characteristic values.

[0019] Figure 2 Schematic diagram of the process of generating and restoring characteristic values ​​of data elements.

[0020] Figure 3 The schematic diagram of the structure of the data element ownership information verification system based on characteristic values. DETAILED DESCRIPTION

[0021] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific embodiments of the present invention are described in detail below in conjunction with the accompanying drawings.

[0022] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0023] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor is it a separate or selective embodiment that is mutually exclusive with other embodiments.

[0024] Example 1 Reference Figure 1 and Figure 2 , is the first embodiment of the present invention, which provides a method for verifying ownership information of data elements based on characteristic values, and the method for verifying ownership information of data elements based on characteristic values ​​includes: S1. Perform security verification based on data element activity requests and generate digital credentials for data elements; Furthermore, based on the data element activity request, security verification is performed to generate a digital certificate for the data element, including: Receive data element activity requests and use SSL client authentication mode to perform security verification, including identity legitimacy verification of the request sender, request type verification, and request information verification; If the security verification fails, the feedback system prompts and interrupts the data element activity request; If the security verification is passed, the ownership information related to the data element will be recorded according to the pre-set ownership information items; A digital certificate template is selected and written into the smart contract of the blockchain platform, and the ownership information related to the data elements is sent to the blockchain platform. The corresponding data fields of the ownership information related to the data elements are placed in the corresponding positions of the digital certificate template, and a timestamp is added to the digital certificate to obtain a digital certificate containing the ownership information of the timestamp. The blockchain platform includes a main chain and a branch chain.

[0025] By using the SSL client authentication mode for security verification, the invention ensures that the transmission process of data element activity requests has extremely high encryption protection, thereby preventing data from being intercepted and tampered with during network transmission. The SSL client authentication mode can effectively verify the legitimacy of the identity of the request sender, ensuring that only authorized users or devices can initiate data element activity requests. This security mechanism provides security for the data transmission process through an end-to-end encryption protocol, prevents potential man-in-the-middle attacks, and lays a security foundation for subsequent operations. After the security verification is passed, the system will accurately record the ownership information of the data element according to the preset ownership information items, and The ownership information related to the securely verified data elements is embedded in the smart contract of the blockchain, ensuring that the ownership information of the data elements can be permanently stored on the blockchain. It fully utilizes the decentralized, tamper-proof and open and transparent characteristics of the blockchain, and ensures the credibility and durability of the digital certificate. The use of smart contracts makes the entire process automated and intelligent, reducing the potential risks of human intervention. Finally, a timestamp is stamped on the digital certificate to ensure that each digital certificate can clearly identify the ownership of the data element and its generation time, which not only provides a clear time mark for the ownership information, but also provides a time basis for future traceability and verification, further improving the transparency and credibility of the system.

[0026] S2. Calculate the hash value of the digital certificate, encrypt the digital certificate, generate the digital certificate ciphertext, split it and store it in the blockchain; Furthermore, the hash value of the digital certificate is calculated, and the digital certificate is encrypted to generate the digital certificate ciphertext, which is then split and stored in the blockchain, including: Based on the generated digital certificate, a hash value H1 of the digital certificate is calculated using a hash algorithm; Use an asymmetric encryption algorithm to encrypt the digital certificate, generate a public key and a private key, store the generated public key and private key in the key management service AWS, and generate a digital certificate ciphertext; The digital certificate ciphertext is numbered, the number value is set to X, the ciphertext of the digital certificate is split using the Shamir threshold algorithm to obtain the fragmented ciphertext, the ciphertext number value X and the number of fragmented ciphertexts m, and the split digital certificate ciphertext is transmitted to the blockchain platform using the TLS protocol; Use the main chain of the blockchain platform to receive the shard ciphertext, the ciphertext number value X and the number of split shard ciphertexts m, randomly select m different branch chain addresses, and store the shard ciphertext in each branch chain according to the branch chain address information.

[0027] By using a hash algorithm to calculate the generated digital credential and generate a hash value, the uniqueness and integrity of the digital credential are ensured, and a verifiable identifier is provided. This method can accurately verify the original state of the digital credential, avoid the possibility of tampering and forgery, and lay a security foundation for subsequent encryption and storage processes. In addition, the digital credential is encrypted by a symmetric encryption algorithm, and the generated key and private key are securely stored in the AWS key management service, protecting the content of the digital credential from being stolen or tampered with, and ensuring the secure storage and management of the key to prevent the key from being lost or maliciously obtained. In addition, a number value X is set for the digital credential ciphertext, and the Shamir threshold algorithm is used to split the digital credential ciphertext. The introduction of the Shamir threshold algorithm not only enhances the distributed storage security of the digital credential, but also prevents single-point attacks or failure of a single node from affecting the integrity of the data by setting m different shard numbers. In this way, redundant backup and high-security storage of data are achieved, ensuring that even if some data fragments are lost or damaged, the integrity of the digital certificate can still be restored. Finally, through the main chain of the blockchain platform, the sharded ciphertext and related information are received, and m branch chain addresses are randomly selected to store the sharded ciphertext, so that data storage does not rely on a single node. All sharded ciphertexts are securely stored in different branch chain addresses. This random distribution and multi-node storage method can enhance the disaster recovery and data recovery capabilities of the digital certificate ciphertext, ensuring that even if some nodes are attacked or fail, the data can still be recovered through other nodes. The decentralized nature of the blockchain is used to ensure the distributed and secure storage of sharded ciphertexts on multiple branches, which improves the data's tamper resistance and long-term security.

[0028] S3, generating a data element characteristic value based on the split digital certificate ciphertext, and generating a digital watermark based on the data element characteristic value; Furthermore, based on the split digital certificate ciphertext, a data element characteristic value is generated, and based on the data element characteristic value, a digital watermark is generated, including: The ciphertext number value X, the digital certificate hash value H1, and the ciphertext split quantity value m are concatenated to obtain the data element characteristic value T, and the element characteristic value T is encrypted using a symmetric encryption algorithm. A key is generated and stored in the key management service AWS to obtain the ciphertext K. Half of the ciphertext K is used as a digital watermark, and the digital watermark is embedded in the data element using DCT technology to obtain the data element with a digital watermark. The other half of the ciphertext is stored in the database.

[0029] By concatenating the ciphertext number value X, the digital certificate hash value H1, and the ciphertext split quantity value m, the data element characteristic value T is obtained, and the element characteristic value T is encrypted using a symmetric encryption algorithm to generate a ciphertext K. The key is stored in the key management service AWS, ensuring the unique identification and non-tamperability of each data element, realizing the secure identification of the data element, ensuring that the data will not be tampered with or forged during the circulation or verification process, and improving the security and credibility of the overall system. The use of the symmetric encryption algorithm ensures its security during storage and transmission, avoids the risk of data leakage, and provides efficient key retrieval and protection for future data decryption operations. In addition, half of the ciphertext K is used as a digital watermark and embedded in the data element using the DCT technology, ensuring the close combination of the watermark and the data element. The application of DCT technology makes the watermark embedding process highly concealed, does not affect the original quality of the data element, and increases the robustness of data verification. Watermark embedding enables each data element to perform identity verification by extracting the watermark during the verification process, effectively preventing the data from being tampered with, forged or illegally copied, and ensuring the legitimacy of data ownership.

[0030] S4, perform security verification according to the data element verification request, extract the digital watermark and restore the data element characteristic value, and analyze the data element characteristic value including: Receive data element verification requests and use SSL client authentication mode for security verification; If the security verification fails, feedback will be given and the data element verification request will be terminated; If the security verification is passed, the data element with the digital watermark is received, the digital watermark in the data element is extracted using the DCT technology, and the ciphertext K is restored by combining it with the other half of the ciphertext in the database. The ciphertext is decrypted using the key to generate the data element characteristic value; Parse the data element feature values ​​to obtain the ciphertext number value X, the ciphertext split quantity value m and the hash value H1 of the digital certificate.

[0031] By receiving data element verification requests and using the SSL client authentication mode for security verification, the system extracts digital watermarks and restores ciphertext for verified data element verification requests, generates data element characteristic values, and restores data element characteristic values. The system achieves the security and reliability of data element verification requests and ensures the invariance and non-tamperability of data ownership information during transmission and storage. By using SSL client authentication, DCT technology, shard storage and hash value verification, the system greatly enhances data security and accuracy while improving data processing efficiency. Ultimately, it provides all-round protection for data ownership verification and achieves efficient and secure verification results.

[0032] S5, perform shard ciphertext addressing and restore the digital certificate ciphertext; Furthermore, the sharded ciphertext addressing is performed to restore the digital certificate ciphertext including: According to the ciphertext number value X and the ciphertext split number value m, an addressing token is generated and sent to the regional chain platform. The main chain of the regional chain platform receives the information, verifies the legitimacy of the addressing token, records the ciphertext number value X and the ciphertext split number value m, calculates the storage location of the ciphertext in each branch chain, and sends a data call request to the corresponding branch chain; After receiving the data call request, the branch chain retrieves the internal data and feeds the target shard ciphertext back to the main chain to aggregate the shard ciphertext and generate a complete digital certificate ciphertext.

[0033] By generating an addressing token based on the ciphertext number value X and the ciphertext split quantity value m, it ensures that each call to the corresponding ciphertext fragment is unique and accurate, avoiding data positioning errors caused by duplicate or incorrect numbers, and ensuring that the system can quickly and securely locate each ciphertext fragment in a distributed storage environment, thereby improving the efficiency and accuracy of ciphertext restoration. Secondly, the regional chain platform main chain receives information, verifies the legitimacy of the addressing token, ensures the security of the data call process, and prevents malicious requests from making unauthorized calls and tampering with the system's data fragments. Through this legitimacy verification, the main chain can ensure the privacy and security of the data, and through By recording the ciphertext number value X and the split number value m, a global view of the ciphertext location is formed. Then, the main chain calculates the storage location of the ciphertext in each branch chain and sends a data call request. The main chain can quickly determine the location of each ciphertext fragment, flexibly control the data transmission between the branches, and realize parallel call and processing of data, which greatly improves the speed and response efficiency of data retrieval. After receiving the data call request, the branch chain retrieves and feeds back the sharded ciphertext, avoiding the single point of failure and data leakage risks brought by centralized storage in the data. The independence of each branch chain in the distributed storage system enhances the reliability and anti-attack ability of the data, and further improves the security protection capability of the system.

[0034] S6. Decrypt the ciphertext of the digital certificate to obtain the digital certificate with ownership information for ownership information verification; Furthermore, the digital certificate ciphertext is decrypted to obtain the digital certificate with ownership information for ownership information verification, including: Decrypt the complete digital certificate ciphertext using the private key in the key management service AWS to obtain the digital certificate plaintext, and calculate the hash value H2 of the digital certificate plaintext, and compare it with the hash value H1 obtained by parsing; If the hash values ​​are consistent, the ownership information is extracted; If the hash value comparison is inconsistent, an alarm is issued and the ownership information extraction process is stopped; The data element ownership information is verified based on the extracted digital certificate ownership information content.

[0035] By decrypting the digital certificate ciphertext, a digital certificate with ownership information is obtained, ensuring that subsequent ownership information verification operations can be performed in a safe and reliable environment. Through decryption, the system realizes the restoration of encrypted data into digital certificate plaintext and ensures that the certificate contains complete ownership information, effectively preventing unauthorized access and data leakage, and achieving the first step of data element verification. The security barrier, after obtaining the digital certificate plaintext, the system will recalculate the hash value H2 of the plaintext and compare it with the hash value H1 obtained through the previous parsing step. It can effectively detect whether the digital certificate has been tampered with during transmission or storage, and can implement the integrity check of the digital certificate before the ownership information is verified, ensuring that the ownership information is verified based on the original certificate that has not been tampered with, thereby improving the accuracy and credibility of data verification. Finally, after successfully extracting the ownership information, the system will verify its ownership. This step ensures that the ownership of the data has not been tampered with or forged by comparing the extracted ownership information with the original ownership information of the data elements. Through this series of steps, the system accurately verifies the ownership information of data elements, ensures that the ownership of the data is clear and unambiguous, avoids ownership disputes, and provides a legal and technical basis for data transactions and sharing.

[0036] Example 2 Reference Figure 3 , which is the second embodiment of the present invention, and which is different from the previous embodiment, provides a data element ownership information verification system based on characteristic values, including: A security verification module, used to perform security verification based on data element activity requests and generate digital certificates for data elements; The encryption storage module is used to encrypt the digital certificate, generate the digital certificate ciphertext and store it in the regional chain; A feature value generation module, used to generate feature values ​​of data elements including digital watermarks; A feature value restoration module, used to perform security verification according to a data element verification request, restore data element feature values, and perform data element feature value analysis; The digital certificate ciphertext restoration module is used to calculate the ciphertext shard address to generate the complete digital certificate ciphertext; The ownership information verification module is used to verify the ownership information of data elements.

[0037] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program codes.

[0038] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0039] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0040] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit with a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit with a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0041] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A method for verifying ownership information of data elements based on characteristic values, characterized in that: include, Perform security verification based on data element activity requests and generate digital credentials for data elements; Calculate the hash value of the digital certificate, encrypt the digital certificate, generate the digital certificate ciphertext, split it and store it in the blockchain; Based on the split digital certificate ciphertext, a data element characteristic value is generated, and a digital watermark is generated based on the data element characteristic value; Perform security verification according to the data element verification request, extract the digital watermark and restore the data element characteristic value, and analyze the data element characteristic value; Perform sharded ciphertext addressing and restore digital certificate ciphertext; Decrypt the digital certificate ciphertext to obtain the digital certificate with ownership information for ownership information verification.

2. The method for verifying data element ownership information based on characteristic values ​​according to claim 1, characterized in that: The security verification based on the data element activity request and the generation of the digital certificate of the data element include: Receive data element activity requests and use SSL client authentication mode to perform security verification, including identity legitimacy verification of the request sender, request type verification, and request information verification; If the security verification fails, the feedback system prompts and interrupts the data element activity request; If the security verification is passed, the ownership information related to the data element will be recorded according to the pre-set ownership information items; A digital certificate template is selected and written into the smart contract of the blockchain platform, and the ownership information related to the data elements is sent to the blockchain platform. The corresponding data fields of the ownership information related to the data elements are placed in the corresponding positions of the digital certificate template, and a timestamp is added to the digital certificate to obtain a digital certificate containing the ownership information of the timestamp. The blockchain platform includes a main chain and a branch chain.

3. The data element ownership information verification system based on characteristic value according to claim 2, characterized in that: The digital certificate hash value is calculated, and the digital certificate is encrypted to generate a digital certificate ciphertext, which is then split and stored in the blockchain, including: Based on the generated digital certificate, a hash value H1 of the digital certificate is calculated using a hash algorithm; Use an asymmetric encryption algorithm to encrypt the digital certificate, generate a public key and a private key, store the generated public key and private key in the key management service AWS, and generate a digital certificate ciphertext; The digital certificate ciphertext is numbered, the number value is set to X, the ciphertext of the digital certificate is split using the Shamir threshold algorithm to obtain the fragmented ciphertext, the ciphertext number value X and the number of fragmented ciphertexts m, and the split digital certificate ciphertext is transmitted to the blockchain platform using the TLS protocol; Use the main chain of the blockchain platform to receive the shard ciphertext, the ciphertext number value X and the number of split shard ciphertexts m, randomly select m different branch chain addresses, and store the shard ciphertext in each branch chain according to the branch chain address information.

4. The data element ownership information verification system based on characteristic value according to claim 3, characterized in that: The method of generating a data element characteristic value based on the split digital certificate ciphertext and generating a digital watermark based on the data element characteristic value includes: The ciphertext number value X, the digital certificate hash value H1, and the ciphertext split quantity value m are concatenated to obtain the data element characteristic value T, and the element characteristic value T is encrypted using a symmetric encryption algorithm. A key is generated and stored in the key management service AWS to obtain the ciphertext K. Half of the ciphertext K is used as a digital watermark, and the digital watermark is embedded in the data element using DCT technology to obtain the data element with a digital watermark. The other half of the ciphertext is stored in the database.

5. The data element ownership information verification system based on characteristic value according to claim 4, characterized in that: The security verification is performed according to the data element verification request, the digital watermark is extracted and the data element characteristic value is restored, and the data element characteristic value is analyzed, including: Receive data element verification requests and use SSL client authentication mode for security verification; If the security verification fails, feedback will be given and the data element verification request will be terminated; If the security verification is passed, the data element with the digital watermark is received, the digital watermark in the data element is extracted using the DCT technology, and the ciphertext K is restored by combining it with the other half of the ciphertext in the database. The ciphertext is decrypted using the key to generate the data element characteristic value; Parse the data element feature values ​​to obtain the ciphertext number value X, the ciphertext split quantity value m and the hash value H1 of the digital certificate.

6. The data element ownership information verification system based on characteristic values ​​according to claim 5, characterized in that: The sharded ciphertext addressing and restoration of the digital certificate ciphertext includes: According to the ciphertext number value X and the ciphertext split number value m, an addressing token is generated and sent to the regional chain platform. The main chain of the regional chain platform receives the information, verifies the legitimacy of the addressing token, records the ciphertext number value X and the ciphertext split number value m, calculates the storage location of the ciphertext in each branch chain, and sends a data call request to the corresponding branch chain; After receiving the data call request, the branch chain retrieves the internal data and feeds the target shard ciphertext back to the main chain to aggregate the shard ciphertext and generate a complete digital certificate ciphertext.

7. The data element ownership information verification system based on characteristic values ​​according to claim 6, characterized in that: Decrypting the digital certificate ciphertext to obtain the digital certificate with ownership information for ownership information verification includes: Decrypt the complete digital certificate ciphertext using the private key in the key management service AWS to obtain the digital certificate plaintext, and calculate the hash value H2 of the digital certificate plaintext, and compare it with the hash value H1 obtained by parsing; If the hash values ​​are consistent, the ownership information is extracted; If the hash value comparison is inconsistent, an alarm is issued and the ownership information extraction process is stopped; The data element ownership information is verified based on the extracted digital certificate ownership information content.

8. A data element ownership information verification system based on a feature value based on the data element ownership information verification method based on a feature value according to any one of claims 1 to 7, characterized in that: include, A security verification module, used to perform security verification based on data element activity requests and generate digital certificates for data elements; The encryption storage module is used to encrypt the digital certificate, generate the digital certificate ciphertext and store it in the regional chain; A feature value generation module, used to generate feature values ​​of data elements including digital watermarks; A feature value restoration module, used to perform security verification according to a data element verification request, restore data element feature values, and perform data element feature value analysis; The digital certificate ciphertext restoration module is used to calculate the ciphertext shard address to generate the complete digital certificate ciphertext; The ownership information verification module is used to verify the ownership information of data elements.

9. A computer device comprising: Memory and processor; The memory stores a computer program, characterized in that: when the processor executes the computer program, the steps of the data element ownership information verification method based on characteristic values ​​described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for verifying data element ownership information based on characteristic values ​​described in any one of claims 1 to 7 are implemented.

Images