Shared circulation method and mechanism based on hydroelectric data elements

Abstract

The invention discloses a sharing circulation method and mechanism based on hydroelectric data elements. The method comprises the following steps: step 1, setting parameters; 2, user authorization: the key management server authorizes each participant of the system through key distribution, and records related information in the block chain platform; step 3, data flow authorization: the data user generates a proxy file, sets an access structure, and sends part of proxy signature key components to another user; step 4, encrypting and uploading hydroelectric data elements: encrypting a hydroelectric data file by a hydroelectric data owner, generating a ciphertext index, uploading the ciphertext index to a block chain platform, and storing the ciphertext index to a hydroelectric data cloud platform; 5, trap door generation; step 6, searching and accessing data; step 7, verifying and decrypting; and 8, performing compliance examination and user permission deprivation. The mechanism comprises the steps of hydroelectric data recycling; hydroelectric data element processing; and hydroelectric data productization. According to the invention, sharing and circulation of hydroelectric data on the premise of safety, high efficiency and compliance are realized.

Description

Technical Field

[0001] The present invention relates to the technical field of hydropower data sharing, and in particular to a sharing and circulation method and mechanism based on hydropower data elements. Background Art

[0002] Against the backdrop of the accelerated transformation of the global energy structure and the rapid development of smart grid technology, hydropower, as an important pillar of renewable energy, has become an important driving force for the transformation and development of the power industry through the sharing and circulation of its data elements. Hydropower data, including but not limited to real-time data on the operation of hydropower stations, calculation parameters of water resources, and key equipment status monitoring information, is not only a key indicator for measuring the operational efficiency and safety of hydropower stations, but also an indispensable basic data for achieving precise regulation of energy supply and demand and optimizing resource allocation.

[0003] However, the current sharing and circulation of hydropower data elements faces a series of technical bottlenecks and severe challenges, which are specifically reflected in the following aspects:

[0004] 1. Data complexity and sensitivity coexist: Hydropower data is highly complex and sensitive, involving multi-dimensional and multi-type data, and requires extremely high real-time performance. These data often contain the core business secrets of hydropower stations and user privacy information. How to effectively prevent data leakage and abuse while ensuring efficient data circulation has become a problem that needs to be solved urgently.

[0005] 2. The sharing mechanism is limited: The existing hydropower data sharing mechanism is generally limited to the power system, lacking cross-industry and cross-platform data interaction and sharing channels. This closed data circulation model limits the full release of data value, makes it difficult to meet the needs of collaborative operations and common development between the power industry and other industries, and hinders the maximum utilization of data resources.

[0006] 3. Security sharing solutions are not yet mature: Although advanced technologies such as big data, cloud computing, and blockchain have made remarkable achievements in the field of data security and privacy protection, security sharing solutions for the unique characteristics of hydropower data are still in the exploration and improvement stage. How to combine the specific characteristics of hydropower data to design a mechanism that can both ensure data security transmission and promote efficient data sharing is an important issue facing current technology research and development. Summary of the invention

[0007] In view of this, the present invention proposes a sharing and circulation method and mechanism based on hydropower data elements to solve the problems existing in the prior art that hydropower data sharing is subject to security and circulation restrictions and lacks mature sharing solutions.

[0008] The specific technical solutions of the present invention are as follows:

[0009] A shared circulation method based on hydropower data elements, including:

[0010] Step 1: The key management server defines mathematical parameters, bilinear mapping and hash functions to generate the system master key and public parameters;

[0011] Step 2: The key management server authorizes each system participant through key distribution and records relevant information on the blockchain platform;

[0012] Step 3: The data user generates a proxy file, sets up an access structure, and sends a portion of the proxy signature key component to another user to allow the user to access or operate data on his or her behalf;

[0013] Step 4: The hydropower data owner encrypts the hydropower data file, generates a ciphertext index, and uploads it to the blockchain platform, which is then further stored on the hydropower data cloud platform.

[0014] Step 5: The data user generates a trapdoor and submits an access request to the hydropower data cloud platform;

[0015] Step 6: Data users search and access through the blockchain platform and the hydropower data cloud platform, verify the trapdoor and obtain the ciphertext or pre-decrypted ciphertext;

[0016] Step 7: The data user verifies the ciphertext signature and decrypts it to confirm the ciphertext source and restore the hydropower data file for access;

[0017] Step 8: The blockchain platform reviews the authenticity of the data. If false data is found, it calculates a revocation request and notifies the hydropower data cloud platform. The hydropower data cloud platform sets the relevant outsourced keys to invalid to deprive the user of their rights.

[0018] Furthermore, in step 2, when the key management server authorizes the user, it also includes calculating and verifying the user's public key, private key, search key and decryption key, and sending the user's decryption key through a secure channel. At the same time, the outsourced key and the corresponding user attribute set are sent to the hydropower data cloud platform, and the user identity is sent together with the search key to the blockchain platform for record, so as to achieve data security protection by means of key distribution.

[0019] Furthermore, step three also includes: the data user generates a proxy file and sets an access structure, calculates part of the proxy signature key components through the LSSS matrix and mapping function, and sends the proxy file, the access structure and the part of the key to another user, and the receiver verifies a specific equation and calculates the complete proxy signature key component to generate a complete proxy signature key, thereby realizing a dynamic data circulation strategy through user proxy.

[0020] Furthermore, in step four, when the hydropower data owner encrypts the hydropower data file, it also includes constructing ciphertext intermediate values, ciphertext components and ciphertext indexes, and signing the ciphertext to ensure the confidentiality and integrity of the data, the traceability of data circulation and the standardization of data processing, and then uploading the ciphertext and ciphertext index to the blockchain platform and the hydropower data cloud platform.

[0021] Furthermore, in step 4, the hydropower data owner performs encryption operations, defines the access structure through the LSSS matrix and mapping function, calculates the secret value and ciphertext components, constructs random matrices and polynomials to generate ciphertext intermediate values ​​and ciphertext indexes, signs the ciphertext with the identity private key and proxy signature key, and generates a keyword ciphertext index. Finally, the ciphertext and index are uploaded to the blockchain platform, which stores the data tuples and transmits the ciphertext to the hydropower data cloud platform to achieve traceability of data circulation.

[0022] Furthermore, in step five, when generating and submitting an access request, the data user uses a verification key to construct a trapdoor component to facilitate efficient search and access on the blockchain platform and the hydropower data cloud platform, thereby achieving secure data transmission and circulation.

[0023] Furthermore, the search in step six includes two modes: search mode one verifies and pre-decrypts the ciphertext through the blockchain platform and the hydropower data cloud platform, and search mode two directly returns the search results through the blockchain platform to adapt to different access requirements and data sensitivity.

[0024] Furthermore, the search mode 1 in step 6 allows the data user to send the trapdoor to the blockchain platform. The blockchain node performs equation operations through smart contracts to filter the ciphertext. The hydropower data cloud platform constructs the pre-decrypted ciphertext according to the satisfaction of the user attribute set, and sends it to the data user together with the ciphertext to realize data sharing and access control.

[0025] Furthermore, the search mode 2 in step 6 includes: the data user sends a trapdoor to the blockchain platform, and the blockchain node executes the equation operation through the smart contract. If the equation is established, the search result is directly returned to the data user, thereby realizing the traceability of data circulation.

[0026] A sharing and circulation mechanism based on hydropower data elements, including:

[0027] Hydropower data resourceization includes: collecting raw data related to hydropower through sensors, log systems, and user input; preliminarily organizing the collected raw data; identifying and correcting errors, outliers, and missing values ​​in the data; aggregating, classifying, and sorting the data according to business needs, and converting it into data resources with a specific structure and format; storing the processed data resources in the data storage system to ensure the accessibility and persistence of the data;

[0028] Componentization of hydropower data includes: protecting sensitive information to prevent data leakage; selecting relevant fields and forming data features through modeling according to market and application scenario requirements; organizing the processed data into data sets according to a certain structure to form data components with specific structures and functions as intermediate states in data circulation transactions;

[0029] The productization of hydropower data includes: data cost measurement, which comprehensively measures direct costs such as data collection and purchase costs and indirect costs such as data cleaning, analysis, storage, and maintenance. Data cost measurement is an important basis for data pricing. Clarify the product user groups, the problems to be solved, and the value brought, and conduct data resource evaluation and technical feasibility evaluation; among them, data resource evaluation is to fully understand and evaluate the hydropower-related data owned, including data integrity, accuracy, and update frequency, and output data resource catalogs and quality evaluation reports; based on the evaluation results and customer needs, package hydropower data components into data products, and circulate them using a shared circulation method based on hydropower data elements.

[0030] The beneficial effects of the present invention are:

[0031] 1. Secure data circulation and access control: This invention innovatively integrates attribute encryption and identity encryption technology to provide double security protection for hydropower data. This method not only ensures the security of data during transmission and sharing, but also realizes refined access control, effectively solves the problem of secure circulation and access of hydropower data elements, lays a solid foundation for secure data sharing, and realizes data secure transmission, security protection, data secure circulation, data sharing and access control.

[0032] 2. Flexible and efficient security sharing mechanism: By utilizing the immutability and distributed characteristics of blockchain technology, the present invention realizes the full authentication and traceability of hydropower data during circulation, sharing and access. This mechanism not only improves the efficiency of data sharing, but also enhances the transparency and credibility of the system, ensures the flexible and efficient operation of the security sharing mechanism, and realizes the traceability of data circulation, data access control and standardization of data processing.

[0033] 3. Optimize the flexibility of ciphertext access: In response to the flexibility requirements of data ciphertext access, the present invention designs two efficient ciphertext data search methods. One method reduces the communication volume and improves the data transmission efficiency by optimizing the algorithm; the other method significantly reduces the computing burden of data users, making data access more convenient and faster, further improving the user experience and data utilization efficiency, and realizing a dynamic data circulation strategy.

[0034] 4. Strengthen data compliance review: To ensure the compliance of hydropower data, the present invention also introduces a strict data compliance review method. This method can automatically identify and process non-compliant data, and implement rights deprivation measures for data owners who provide non-compliant data. This measure effectively ensures the legality and standardization of data circulation, realizes data quality monitoring and evaluation, and data compliance management, and provides a solid legal guarantee for the digital transformation and sustainable development of the power industry. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0036] Figure 1 It is a flow chart of the shared circulation mechanism based on hydropower data elements of the present invention;

[0037] Figure 2 It is a flow chart of the shared circulation method based on hydropower data elements of the present invention;

[0038] Figure 3 It is a schematic diagram of the framework of the shared circulation method based on hydropower data elements of the present invention. DETAILED DESCRIPTION

[0039] In order to make the technical problems, technical solutions and beneficial effects to be solved by the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0040] The present invention proposes a sharing and circulation mechanism based on hydropower data elements, such as Figure 1 As shown:

[0041] Raw data, as a direct record of information, comes in various forms, including structured (such as numbers and text in databases), semi-structured (such as data in XML or JSON format), and unstructured (such as video, audio, and image) data. These data contain rich information but have not yet been transformed into directly usable resources.

[0042] The resourceization of hydropower data is to process the raw data of the data source to form data resources.

[0043] The first step in the data resourceization process is data collection: collecting raw data through various technical means (such as sensors, log systems, user input, etc.). The second step is data organization: preliminary organization of the collected raw data, including data cleaning, deduplication, format conversion, etc. Remove invalid or erroneous data to improve data quality. The third step is data cleaning: identifying and correcting errors, outliers and missing values ​​in the data through algorithms and manual means. Ensure the accuracy and reliability of the data to provide strong support for subsequent data analysis. The fourth step is data processing: aggregate, classify, sort and process the data according to business needs. Convert raw data into data resources with a specific structure and format to facilitate subsequent data storage and analysis. The fifth step is data storage: store the processed data resources in appropriate data storage systems (such as databases, data warehouses, etc.). Ensure the accessibility and persistence of data to provide support for subsequent data analysis and application.

[0044] The componentization of hydropower data refers to the process of converting data into data units with specific structures and functions, namely data components, through a series of processes. Data componentization converts raw data into data components with specific structures and functions through a series of processes, providing strong support for the compliant circulation and transaction of data. Data components are data sets formed by several related fields after data desensitization, according to market needs and application scenario needs, or data features formed by modeling of associated fields of data. It is an "intermediate state" in data circulation transactions, which realizes the decoupling between raw data and data applications.

[0045] The first step of data componentization is data desensitization: protecting sensitive information and preventing data leakage. The second step is field selection and modeling: selecting relevant fields according to market and application scenario requirements and forming data features through modeling. The third step is data component formation: organizing the processed data into a data set according to a certain structure.

[0046] The productization of hydropower data is a process of converting data into value. It involves effectively using data analysis to mine valuable information for users from massive amounts of data, and providing business support and services for user decision-making in an intuitive and effective form.

[0047] The first step in data productization is product planning: that is, clarifying product goals, including user groups, problems to be solved, and the value to be brought. Conduct data resource assessment and technical feasibility assessment to understand the data resources owned by the enterprise and their quality, and evaluate the capabilities of the data processing platform. The second step is data resource assessment: understand the data owned, including product data, customer data, transaction data, and financial and equipment-related data. Evaluate the quality of data, such as completeness, accuracy, and update frequency. Output a data resource catalog and a data quality assessment report. The third step is product incubation and circulation: packaging data components for customers and turning them into data products for circulation, with the focus on the security and compliance of the data product circulation method.

[0048] The focus of this invention is to design a sharing and circulation method based on hydropower data elements, aiming at the key technical issues such as security, authorization and access control faced by hydropower data in the sharing and circulation process. Figure 2-3 As shown in FIG, it includes step 1, parameter setting: the key management server defines security parameters; step 2, user authorization: the key management server authorizes each system participant through key distribution to achieve data security protection and record relevant information on the blockchain platform; step 3, data flow authorization: the data user generates a proxy file, sets the access structure, and sends part of the proxy signature key component to another user to achieve a dynamic data circulation strategy; step 4, hydropower data element encryption upload: the hydropower data owner encrypts the hydropower data file, generates a ciphertext index, and uploads it to the blockchain platform for storage in the hydropower data cloud platform to achieve data circulation traceability and data processing standardization; step 5, trapdoor generation: the data user generates a trapdoor and submits an access request; step 6, data search and access, to achieve data security transmission and secure circulation; step 7, verification and decryption, to achieve data sharing and access control; step 8, compliance review and user authority deprivation, to achieve data quality monitoring and evaluation and data compliance management. This shared circulation distribution can ensure that hydropower data, as an important production factor, is safe during the circulation process.

[0049] This method aims to achieve safe, efficient and controllable sharing and circulation of hydropower data by building a system in which five entities work together, including a key management server, hydropower data owners, a blockchain platform, a hydropower data cloud platform and data users.

[0050] In the specific implementation, the key management server plays a vital role. It is not only responsible for generating and managing various encryption keys (such as symmetric encryption keys, asymmetric encryption keys, etc.) and the allocation of user access rights, but also ensures the secure storage and distribution of keys, providing a solid guarantee for the encryption and decryption of data. The hydropower data owner uses these keys to encrypt sensitive hydropower data, and uploads the encrypted data and its access control policy through the blockchain platform and the hydropower data cloud platform, ensuring the security and integrity of the data during transmission and storage.

[0051] As the core trust layer, the blockchain platform uses its decentralized and tamper-proof characteristics to record key information such as metadata, access control policies, and user permissions of hydropower data, providing strong support for data authenticity, traceability, and verification of access requests. At the same time, through the automatic execution of smart contracts, the blockchain platform can efficiently process data access requests, realize rapid verification and authorization of permissions, and greatly improve the response speed and automation of the system.

[0052] As a hub for data storage and access, the hydropower data cloud platform is responsible for storing encrypted hydropower data and its index information, and providing corresponding data access services to data users based on the authorization results of the blockchain platform. After submitting access requests to the cloud platform and being verified by the blockchain platform, data users can securely obtain and decrypt the required hydropower data, thus achieving on-demand access and efficient use of data.

[0053] Through close collaboration and data interaction among five types of entities, the present invention constructs a safe, reliable and efficient hydropower data sharing and circulation ecosystem, effectively solves key technical problems in the sharing and circulation of hydropower data, and provides strong technical support for the digital transformation and intelligent upgrading of the hydropower industry.

[0054] The method of the present invention specifically comprises the following steps:

[0055] Step 1 (Parameter Setting): This step is performed by the key management server and defines Define bilinear mappings as two prime p-factorial cyclic groups respectively. Indicates that two groups can be The elements in are mapped to a group The elements in .

[0056] Define g as a group A generator in . For the p-order integer group, define five hash functions Respectively represent mapping a bit string of arbitrary length to the group On an element of The elements in and a bit string of arbitrary length are mapped to the group On an element of An element in is mapped to a bit string of arbitrary length, and a bit string of arbitrary length is mapped to the group On an element of , a bit string of arbitrary length is mapped to a bit string of constant length l H The bit string.

[0057] Draw a set of random numbers On this basis, the common parameter middleware g is calculated α , g β , g c and e(g, g) γ On this basis, the system master key MSK=(α, β, g γ , c) and system common parameters

[0058] Step 2 (user authorization): This step is performed by the key management server, which grants access or operation permissions to each participant of the system based on the shared circulation method of hydropower data elements by issuing keys.

[0059] First, for the identity identifier GID of any entity in the system x , calculate the identity public key IPK x =H1(GID x ) and identity private key ISK x =(IPK x ) α .

[0060] Then the search key and decryption key are calculated for the data user. Assume that S is the attribute set of the data user, and the key management server extracts a random number. Calculate the partial attribute key component AKP1 = g t and Among them Att i is the i-th attribute. Composition attribute key AKP = (AKP1, {AKP i}) and send it to the data user.

[0061] The identity is GID x The data user draws a random number And suppose the verification private key component is VSK1=z. The outsourcing key is Calculate the outsourced key components ODK1 and ODK i , where ODK1 = VSK2 = (AKP1) z , The user verification public key is VPK=(VPK1, VPK2), and the user verification public key components VPK1 and VPK2 are calculated, where VPK1=g z , The user verification private key is VSK=(VSK1, VSK2), and the user verification private key components VSK1 and VSK2 are calculated.

[0062] Data User GID x Outsourcing Keys The user verification public key VPK=(VPK1, VPK2) is sent to the key management server, and the user verification private key VSK=(VSK1, VSK2) is secretly stored locally.

[0063] The key management server calculates the verification factor t′=H4(VPK1||GID x ||ODK1||{ODK i}) and verify the following equation:

[0064] e(g,VPK2)=e(g α , H1(GID x ) t′ )·e(g α , VPK1)

[0065] If the above equation holds, then the user decryption key DK is calculated as: γ (VPK1) c·t , and the user search key And calculate the user's second search key Finally, the key management server sends the user decryption key DK to the data user through a secure channel, sends the outsourced key ODK and the corresponding user attribute set S to the hydropower data cloud platform, and sends the user identity GID x Together with the user search key SK and the user second search key SK′, it is sent to the blockchain platform, and then the blockchain node records them in the distributed ledger.

[0066] Step 3 (Data transfer authorization): This step is performed by the data user GID a Execute, assuming that PxFile is the data user GID a The generated proxy file sets the access structure to in is a LSSS matrix, and ρ is a mapping function.

[0067] Then, a random number is drawn And calculate the partial proxy signature key component PK1 = g v , Data User GID aPxFile, Sent to another user GID together with the partial proxy signature key PK=(PK1, PK2) p .

[0068] User GID p First verify the following equation:

[0069]

[0070] If the above formula is true, the user GID p Calculate the complete proxy signature key component PxK1=PK1, On this basis, a complete proxy signature key PxK=(PxK1, PxK2) is generated.

[0071] Step 4 (encrypted upload of hydropower data elements): This step is performed by the hydropower data owner. Suppose a hydropower data file is File = {0, 1} * , the access structure is in is an LSSS matrix with r rows and l columns, and ρ is a mapping function that can transform the matrix The i-th row Mapped to an attribute.

[0072] Then, the hydropower data owner draws a random number And calculate the secret value s = H2(SyK.File), and calculate the ciphertext component based on this:

[0073]

[0074] The hydropower data owner constructs a random matrix For subscript i∈[1, r], calculate the intermediate value of the ciphertext Then draw a random number And calculate the ciphertext components:

[0075]

[0076] Assuming the current timestamp is T, the owner of the hydropower data uses his identity private key ISK p And the complete proxy signature key PxK signs the ciphertext: σ1=H2(e(g,ISK p ) s , C0||C1||C2||T),

[0077] The owner of the hydropower data generates a set of keywords KW for File = {kw1, ..., kw n}, then draw a random number And construct the polynomial f(x)=a(x-H4(kw1))(x-H4(kw2))...(x-H4(kw n ))+b=a n x n +a n-1 x n -1 +…+a1x+a0.

[0078] On this basis, the ciphertext index Ix1=g is calculated s ·g b , Ix2=g βs ,

[0079] The owner of the hydropower data generates a ciphertext CT = (S, C0, C1, C2, {C i , C′ i} i∈[1，r] , σ1, σ2, T and ciphertext index Ix = (Ix1, Ix2, {Ix i} i∈[0，n] ) and upload them to the blockchain platform. Subsequently, the blockchain platform stores the data tuple [Ix1|H5(σ1,σ2)] and uploads the ciphertext CT to the hydropower data cloud platform.

[0080] Step 5 (Access Request): Assume data user GID x The set of keywords of interest is KW′=(kw′1, ..., kw′ m ) Use the verification key to construct the following trapdoor component:

[0081]

[0082] Data user generates trapdoor TD = (td1, {td j} j∈[0，n] ) and submit an access request Req = (GID x , TD).

[0083] Step 6 (data search and access): Data users search and access data in the following two access modes.

[0084] Search mode 1: The data user first sends the trapdoor TD to the blockchain platform, and then the blockchain node executes the following equation through the smart contract:

[0085]

[0086] If the above formula holds, the ciphertext will be added to the search result set Rst sThen, the hydropower data cloud platform detects whether the user's attribute set S satisfies the access structure If it does not meet the requirement, the data user’s access request is directly rejected. Otherwise, the hydropower data cloud platform defines I as the set of all rows i that satisfy ρ(i)∈S. Subsequently, the hydropower data cloud platform constructs a constant set So that∑ i∈I w i λ i =s, where λ i is a fragment of the secret value s. The hydropower data cloud platform then performs the following calculation to generate the pre-decrypted ciphertext:

[0087]

[0088] Finally, the hydropower data cloud platform sends the pre-decrypted ciphertext PreCT together with the ciphertext CT to the data user.

[0089] Search mode 2: The data user first sends the trapdoor TD to the blockchain platform, and then the blockchain node

[0090] The contract can perform the following equation:

[0091]

[0092] If the equation holds true, the search result, namely the ciphertext CT, is directly returned to the data user.

[0093] Step 7 (Verification and decryption): The data user first verifies whether the signature in the ciphertext is issued by the owner of the hydropower data, that is, first calculates the following signature verification intermediate value:

[0094]

[0095] Then verify whether the following equation holds:

[0096] σ1=H2(Rst v , C0||C1||C2||T)

[0097] If the above formula is not true, the user refuses to receive the ciphertext, otherwise continue to execute the following procedures.

[0098] The data user recovers the random number SyK, the hydropower data file File, and the secret value s based on the pre-decrypted ciphertext PreCT according to the following formula, and then accesses the hydropower data file:

[0099]

[0100] s=H2(SyK,File)

[0101] Step 8 (Compliance Review and User Rights Deprivation): The blockchain platform can It is used as input to determine whether the owner of hydropower data has released false data. If confirmed, the blockchain platform calculates the revocation request H1 (GID p ) and sent to the hydropower data cloud platform. Then the hydropower data cloud platform will send all the data related to H1 (GID p ) is set to "invalid" for the associated outsourced key.

[0102] The beneficial effects of the present invention are:

[0103] 1. Realize the safe circulation and efficient sharing of hydropower data: This invention effectively solves the security problem of hydropower data in the sharing process by comprehensively using data encryption technology (including the integration method of attribute encryption and identity encryption), ensures the confidentiality, integrity and availability of data, and realizes the safe communication, sharing and refined access control of hydropower data. This innovative solution greatly enhances the security of data circulation and lays a solid foundation for cross-domain and cross-platform data sharing.

[0104] 2. Improve the flexibility and efficiency of the sharing mechanism: With the introduction of blockchain technology, the present invention not only realizes the authentication and traceability of hydropower data in the entire process of circulation, sharing and access, but also automatically executes data exchange rules through mechanisms such as smart contracts, significantly improving the flexibility and efficiency of data sharing. The decentralized nature of blockchain eliminates the risk of a single point of trust, making data sharing more reliable and easier to manage.

[0105] 3. Optimize the access experience of confidential data: In view of the complexity and inefficiency of confidential data access, this invention innovatively proposes two confidential data search methods. One method effectively reduces the communication volume and speeds up data retrieval by optimizing the algorithm design; the other method focuses on reducing the computing burden on the data user side, significantly improving the convenience and efficiency of users accessing confidential data. This improvement directly promotes the optimal configuration and efficient utilization of hydropower data resources.

[0106] 4. Strengthen data compliance review and supervision: The present invention also designs a complete data compliance review mechanism, which can automatically conduct compliance review on data sources, content, formats, etc., to ensure that shared hydropower data complies with relevant laws, regulations and industry standards. For data owners who provide non-compliant data, the system will automatically deprive them of their permissions, effectively curbing the circulation of non-compliant data and maintaining the health and order of the data ecosystem. The implementation of this mechanism provides a solid compliance guarantee for the digital transformation and sustainable development of the power industry.

[0107] To sum up, the sharing and circulation mechanism and method based on hydropower data elements proposed in the present invention, through a series of innovative technical means, realizes the extensive sharing and circulation of hydropower data under the premise of safety, efficiency and compliance, injecting strong impetus into the digital transformation and sustainable development of the power industry.

[0108] The above are only preferred embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A shared circulation method based on hydropower data elements, characterized in that: include: Step 1: The key management server defines mathematical parameters, bilinear mapping and hash functions to generate the system master key and public parameters; Step 2: The key management server authorizes each system participant through key distribution and records relevant information on the blockchain platform; Step 3: The data user generates a proxy file, sets up an access structure, and sends a portion of the proxy signature key component to another user to allow the user to access or operate data on his or her behalf; Step 4: The hydropower data owner encrypts the hydropower data file, generates a ciphertext index, and uploads it to the blockchain platform, which is then further stored on the hydropower data cloud platform. Step 5: The data user generates a trapdoor and submits an access request to the hydropower data cloud platform; Step 6: Data users search and access through the blockchain platform and the hydropower data cloud platform, verify the trapdoor and obtain the ciphertext or pre-decrypted ciphertext; Step 7: The data user verifies the ciphertext signature and decrypts it to confirm the ciphertext source and restore the hydropower data file for access; Step 8: The blockchain platform reviews the authenticity of the data. If false data is found, it calculates a revocation request and notifies the hydropower data cloud platform. The hydropower data cloud platform sets the relevant outsourced keys to invalid to deprive the user of their rights.

2. The method for sharing and circulating water and electricity data elements according to claim 1, characterized in that: In the step 2, when the key management server authorizes the user, it also includes calculating and verifying the user's public key, private key, search key and decryption key, and sending the user's decryption key through a secure channel. At the same time, the outsourced key and the corresponding user attribute set are sent to the hydropower data cloud platform, and the user identity is sent together with the search key to the blockchain platform for record, so as to achieve data security protection by means of key distribution.

3. The method for sharing and circulating water and electricity data elements according to claim 1, characterized in that: The step three also includes: the data user generates a proxy file and sets an access structure, calculates part of the proxy signature key components through the LSSS matrix and mapping function, and sends the proxy file, the access structure and the part of the key to another user. After the receiver verifies the specific equation, it calculates the complete proxy signature key component to generate a complete proxy signature key, thereby realizing a dynamic data circulation strategy through user proxy.

4. The method for sharing and circulating water and electricity data elements according to claim 1, characterized in that: In the step 4, when the hydropower data owner encrypts the hydropower data file, it also includes constructing ciphertext intermediate values, ciphertext components and ciphertext indexes, and signing the ciphertext to ensure the confidentiality and integrity of the data, the traceability of data circulation and the standardization of data processing, and then uploading the ciphertext and ciphertext index to the blockchain platform and the hydropower data cloud platform.

5. The method for sharing and circulating water and electricity data elements according to claim 4, characterized in that: In the step 4, the hydropower data owner performs encryption operations, defines the access structure through the LSSS matrix and mapping function, calculates the secret value and ciphertext components, constructs random matrices and polynomials to generate ciphertext intermediate values ​​and ciphertext indexes, signs the ciphertext with the identity private key and the proxy signature key, and generates a keyword ciphertext index. Finally, the ciphertext and index are uploaded to the blockchain platform, which stores the data tuples and transmits the ciphertext to the hydropower data cloud platform to achieve traceability of data circulation.

6. The method for sharing and circulating water and electricity data elements according to claim 1, characterized in that: In step five, when generating and submitting an access request, the data user uses the verification key to construct a trapdoor component to facilitate efficient search and access on the blockchain platform and the hydropower data cloud platform, thereby achieving secure data transmission and circulation.

7. The method for sharing and circulating water and electricity data elements according to claim 1, characterized in that: The search in step six includes two modes. Search mode one verifies and pre-decrypts the ciphertext through the blockchain platform and the hydropower data cloud platform, and search mode two directly returns the search results through the blockchain platform to adapt to different access requirements and data sensitivity.

8. The method for sharing and circulating water and electricity data elements according to claim 7, characterized in that: The search mode 1 in step 6 allows the data user to send the trapdoor to the blockchain platform. The blockchain node performs equation operations through smart contracts to filter the ciphertext. The hydropower data cloud platform constructs a pre-decrypted ciphertext according to the satisfaction of the user attribute set, and sends it together with the ciphertext to the data user to realize data sharing and access control.

9. The method for sharing and circulating water and electricity data elements according to claim 7, characterized in that: The search mode 2 in step 6 includes: the data user sends a trapdoor to the blockchain platform, and the blockchain node executes an equation operation through a smart contract. If the equation is established, the search result is directly returned to the data user, thereby achieving traceability of data circulation.

10. A shared circulation mechanism based on hydropower data elements, using the shared circulation method based on hydropower data elements as claimed in claim 1, characterized in that: include: Hydropower data resourceization includes: collecting raw data related to hydropower through sensors, log systems, and user input; preliminarily organizing the collected raw data; identifying and correcting errors, outliers, and missing values ​​in the data; aggregating, classifying, and sorting the data according to business needs, and converting it into data resources with a specific structure and format; storing the processed data resources in the data storage system to ensure the accessibility and persistence of the data; Componentization of hydropower data includes: protecting sensitive information to prevent data leakage; selecting relevant fields and forming data features through modeling according to market and application scenario requirements; organizing the processed data into data sets according to a certain structure to form data components with specific structures and functions as intermediate states in data circulation transactions; The productization of hydropower data includes: clarifying the product user groups, the problems to be solved and the value brought, and conducting data resource evaluation and technical feasibility evaluation; among which, the data resource evaluation is to fully understand and evaluate the hydropower-related data owned, including data integrity, accuracy, and update frequency, and output a data resource directory and quality evaluation report; based on the evaluation results and in line with customer needs, the hydropower data elements are packaged into data products, and circulated using the shared circulation method based on hydropower data elements.

Images