Data delivery circulation system and circulation method based on unified nano-management service

Abstract

The invention relates to a data delivery circulation system based on a unified nano-management service. The system comprises a delivery management system and a unified nano-management service. The data transaction shopping mall system generates a transaction order and issues the transaction order to the delivery management system, the delivery management system provides order information for the unified management service, and the unified management service is in butt joint with a plurality of technical platforms to complete delivery of data products. The unified nano-management service is in butt joint with an API gateway, a data sandbox, multi-party security computing and federated learning, a trusted execution environment, a trusted data space and a data element technology platform through a standard access protocol, and four common processes and eight common interfaces of the six different technology platforms are determined. And performing nanotube control and operation on the six different technical platforms through the nanotube standard interface according to the generality process and the generality interface. The system is in butt joint with various different technical platforms through the unified management service, universal data product delivery is achieved, and delivery of invisible data products is supported.

Description

Technical Field

[0001] The present invention belongs to the technical field of data delivery methods, and in particular, relates to a data delivery circulation system, a readable storage medium and a circulation method based on a unified management service. Background Art

[0002] At present, privacy computing technology is the core technology for the trusted integration and circulation of multi-party data across networks and domains under the premise of protecting data privacy. It can achieve "data is available but not visible, data is available but not obtainable, and usage is controllable and measurable". On the basis of protecting data holding rights, it releases data management rights and data usage rights, and realizes the separation of the three rights of data rights, thereby promoting the large-scale, safe and orderly trading, circulation and integrated utilization of data from the whole society through data trading platforms, greatly reducing the risks and costs of data circulation, fully releasing the value of data, and promoting the development and growth of the data factor trading market.

[0003] However, due to the different technical implementation ideas of privacy computing platforms of various manufacturers and the different technical architectures adopted, the implementation of each platform is extremely different. In order to access as many data resources distributed across networks and domains as possible, the data trading platform needs to integrate the privacy computing platform that adapts to the connection of these data resources, so that data resources can be circulated and delivered on the trading platform through the privacy computing platform, and the entire process of data circulation and delivery realized by the privacy computing platform is uniformly managed and monitored, so as to achieve unified non-intervention management and control, and help implement end-to-end data circulation supervision.

[0004] 1. Mainstream technology routes for privacy computing From the perspective of technical mechanisms, privacy computing is mainly divided into three technical routes. The first is secure multi-party computing, differential privacy, homomorphic encryption and other technologies based on cryptography; the second is federated learning and confidential computing technologies that integrate artificial intelligence technologies; and the third is the research on trusted execution environment based on trusted hardware.

[0005] 2. Key issues that privacy computing platforms need to solve in data transaction scenarios (1) It is necessary to solve the problem of unified integration and management of privacy computing platforms from different manufacturers. The unified integration and management of the privacy computing platform requires the design of unified industry-level interaction standards and interface specifications, which must take into account the demands of all parties, and take into account the commercial diversity, application feasibility, and data interaction controllability. First, meet the security and controllability requirements of the entire process of data circulation and delivery; second, do the minimum necessary, do not restrict product freedom too much, and leave room for the optimization of special functions and features; third, reduce the implementation cost and operation and maintenance cost of the transaction platform as much as possible, as well as the cost of each manufacturer to transform according to the unified interaction standards and interface specifications.

[0006] (2) Modeling capabilities that support diverse and complex application scenarios are required Data transactions will face diverse data product demands from multiple industries and application fields. Therefore, the privacy computing platform should have the ability to jointly model data across networks and domains for diverse and complex application scenarios, and support diverse application industries and fields, diverse data forms, diverse modeling methods, and diverse modeling objects. It is necessary to develop, debug, and run joint modeling algorithms while ensuring the secure integration of cross-network and cross-domain data.

[0007] (3) Good scalability and flexibility are required Since data transaction participants have diverse data product needs, differentiated IT infrastructure and security requirements, the privacy computing platform needs to have good scalability and flexibility. The platform architecture should be able to support the increase and expansion of ciphertext computing protocols, algorithms and functions, and application models, support end-to-end and proxy computing deployment modes, support a variety of mainstream and trust-created operating systems, hardware, distributed computing and distributed storage software, databases, and support national commercial encryption protocols. Summary of the invention

[0008] Although customized transformation of various technical routes such as API, data sandbox, trusted data space, etc. can realize the respective data delivery flow, it is impossible to form a unified technical standard, and the scalability is poor and cannot support business development (as the business develops, new demands may arise in business processes, measurement, delivery certificates, and subject authorization, which cannot be met).

[0009] In order to solve the above-mentioned problems existing in the privacy computing platform, the present invention provides a new data delivery and circulation system and circulation method based on unified management services. This system connects to a variety of different technology platforms through a set of universal unified management technology architecture, realizes data transactions and completes the corresponding data delivery. In addition to supporting traditional APIs, files, and data sets, this system also adds support for invisible data flow technology routes (such as data sandboxes, multi-party secure computing, federated learning, trusted execution environments, trusted data spaces, etc.), and refines their commonalities and carries out universal design and implementation.

[0010] In summary, the present invention includes the following designs: 1. Abstract the common processes and interfaces for data product delivery For different technical routes, after investigation and summary, we abstracted and refined 4 common processes and 8 common interfaces, which can cover the main business processes of multiple technical routes.

[0011] 2. Define a universal metering and billing method for the delivery of data products with different technical routes Based on the survey of typical manufacturers of various technical routes and the demand for delivery and circulation management, according to six different technical routes, three types of measurement are abstracted: by number of times, by duration, and by the number of queries. The billing method is set by the data trading platform on demand. This solves the problem of inconsistent metering and billing methods for various privacy computing products on the market.

[0012] 3. Define common delivery vouchers for the delivery of data products with different technical routes The API generates and verifies credentials in token form. The data sandbox is integrated in the trading mall for centralized deployment and used through unified authentication. Others (privacy computing, trusted data space, trusted execution environment) open a reporting interface through unified data permissions to record delivery credentials for subsequent reference.

[0013] 4. Improved security and privacy protection The invisible data flow connected in the present invention adopts technologies such as data sandbox, multi-party secure computing, federated learning, trusted execution environment, trusted data space, etc. to protect the security and privacy of user data and prevent data leakage and abuse.

[0014] 5. Improved scalability In the face of subsequent business and technical expansion needs, the technical architecture of the present invention can respond quickly and meet them through revised standard implementation methods.

[0015] Specifically, the present invention provides a data delivery and circulation system based on a unified management service, the data delivery and circulation system comprising: a delivery management system and a unified management service; The data buyer and seller sign a data purchase contract in the data transaction mall system. The data transaction mall system generates a transaction order and sends it to the delivery management system. The delivery management system provides the order information to the unified management service, which then connects to multiple technical platforms to complete the delivery of data products. in: The delivery management system provides delivery management services, usage metering services, delivery supervision services, and data product delivery services; The unified management service connects to six different technology platforms through standard access protocols, identifies four common processes and eight common interfaces of the six different technology platforms, and manages, controls and operates the six different technology platforms through the management standard interface based on the common processes and common interfaces; The six different technology platforms are API gateway, data sandbox, multi-party secure computing and federated learning (MPC / FL, i.e. privacy computing), trusted execution environment (TEE), trusted data space, and data element; The four common processes are delivery project creation, delivery environment preparation, product delivery execution, and delivery project closing; The eight common interfaces are node access, project information distribution, delivery environment confirmation, authentication / mutual trust, log reporting, project management and control, usage detection, and metering information reporting.

[0016] Furthermore, in the delivery management system in the data delivery circulation system based on the unified management service of the present invention, Delivery management services include: delivery project management, supplier management, delivery system management, and delivery environment management; Usage metering services include: metering execution, metering control, data commodity metering, and computing resource metering; Delivery supervision services include: log management, monitoring and early warning, delivery and use analysis, and delivery and use supervision; Data product delivery services include: data access management, data quality assessment, data audit management, transaction data security, data authorization, credential management, and data destruction.

[0017] Furthermore, the delivery information generated by the data commodity in the data delivery circulation system based on the unified management service of the present invention during delivery includes but is not limited to: delivery measurement information, process management information, log information, and delivery process evidence information; The management, control and operation of different technical platforms include but are not limited to: project information issuance, process control, and log information acquisition.

[0018] Furthermore, the delivery management system in the data delivery circulation system based on the unified management service of the present invention is connected to the application support system to realize unified approval, unified user login, provision of product technical specifications, data product query, metering data reporting, and delivery process evidence storage; the application support system includes but is not limited to: configuration center, user center, product center, billing center, log center, approval center, blockchain sub-platform; The delivery management system is connected to the data transaction mall system to implement the issuance of transaction orders and reporting of delivery status; the data transaction mall system includes but is not limited to: a delivery management center and operation statistics management.

[0019] Furthermore, the mapping relationship between the four common processes and the eight common interfaces in the data delivery and circulation system based on the unified management service of the present invention is as follows: Deliver projects to create mapping node access and issue project information; Delivery environment preparation mapping delivery environment confirmation, authentication / mutual trust; Product delivery execution mapping log reporting, project management and control, usage detection, and metering information reporting; Deliver project completion mapping project control; The mapping relationship between the eight common interfaces and the six different technology platform interfaces is as follows: API Gateway: Node access mapping API registration interface; Project information issuance mapping API subscription; Delivery environment confirmation mapping API interface registration; Authentication / mutual trust mapping authorization authentication interface; Log reporting mapping API log reporting; Project management mapping API subscription cancellation, suspension, and resumption, issuance of API dynamic current limiting strategy, and API delivery project end; Usage detection mapping log reporting; Metering information reporting mapping log reporting; Data sandbox: node access mapping initializes sandbox; project information is issued and mapped to report sandbox project information; delivery environment confirms mapping and reporting availability; log reporting maps metering / log information; project management mapping pauses, resumes, and completes project tasks; usage detection maps metering / log information; metering information reporting maps metering / log information; Multi-party secure computing and federated learning: node access mapping networking information reporting, node connectivity testing; project information issuance mapping receiving project delivery information, reporting task creation; delivery environment confirmation mapping data product permission activation; authentication / mutual trust mapping generating call credentials; log reporting mapping log reporting; project management and control mapping canceling data product permission activation and terminating project delivery; usage detection mapping metering information reporting; metering information reporting mapping metering information reporting; Trusted execution environment: node access mapping creates partners and device information query; project information issuance mapping delivery order information reception; delivery environment confirmation mapping reception negotiation application / confirmation event; authentication / mutual trust mapping receiving device to establish mutual trust time; log reporting mapping operation log reporting; project management mapping order information freezing and unfreezing; usage detection mapping execution record / metering report; metering information reporting mapping execution record / metering report; Trusted data space: node access mapping creates partners and device information query; project information issuance mapping delivery order information reception; delivery environment confirmation mapping reception negotiation application / confirmation event; authentication / mutual trust mapping receiving device to establish mutual trust time; log reporting mapping operation log reporting; project management mapping order information freezing and unfreezing; usage detection mapping execution record / metering report; metering information reporting mapping execution record / metering report; Data elements: Node access mapping creates partners and queries equipment information; Project information issuance maps delivery order information reception; Delivery environment confirmation maps reception of negotiation application / confirmation events; Authentication / mutual trust maps reception of equipment to establish mutual trust time; Log reporting maps operation log reporting; Project management maps order information freezing and unfreezing; Usage detection maps execution records / metering reports; Metering information reporting maps execution records / metering reports.

[0020] Furthermore, the present invention defines a universal metering and billing method for the delivery of data products of six different technical platforms based on the data delivery and circulation system of unified management services. The metering method includes three categories: by number of times, by duration, and by the number of queries. The billing method is set by the data trading platform on demand.

[0021] Furthermore, the data delivery and circulation system of the present invention, based on the unified management service, sets corresponding subject authorization methods for six different technical platforms. The API gateway realizes universal subject authorization by connecting with the data transaction mall system or the blockchain system; the data sandbox, multi-party secure computing and federated learning, trusted execution environment, trusted data space, and data elements complete subject authorization offline.

[0022] Furthermore, the data delivery and circulation system of the present invention, based on the unified management service, defines universal delivery credentials for the delivery of data products of six different technical platforms. The API gateway generates and verifies credentials in a token manner; the data sandbox is integrated in the trading mall for centralized deployment and used through unified authentication; multi-party secure computing and federated learning, trusted execution environment, trusted data space, and data elements record the delivery credentials through the data permission reporting interface of the unified management service for subsequent reference.

[0023] Furthermore, in the data delivery and circulation system based on the unified management service of the present invention, the unified management service is connected to six different technical platforms, and Kafka middleware is used for message transmission between each technical platform and the unified management service. Kafka stores data in Topics, producers send data to the message system, and consumers read data from the message system.

[0024] On the other hand, the present invention also provides a data delivery and circulation method based on a unified management service, and the data delivery and circulation method is implemented based on the above-mentioned data delivery and circulation system based on a unified management service.

[0025] In summary, the data delivery and circulation system and circulation method based on the unified management service of the present invention have the following advantages: (1) Through a delivery and circulation system, data products with different technical routes can be delivered in a standardized manner: support the delivery of data products with various technical routes such as API, data sandbox, multi-party secure computing and federated learning, trusted data space, trusted execution environment, data components, etc. with unified standards (process standards, technical standards).

[0026] (2) A common data delivery process is defined for the delivery of data products with different technical routes: A common data delivery process is defined for data products with various technical routes, such as API, data sandbox, multi-party secure computing and federated learning, trusted data space, trusted execution environment, and data elements, abstracting four common processes and eight common interfaces.

[0027] (3) Defined general implementation standards for the metering and billing of data products: Defined general metering and billing standards for data products based on various technical routes, such as API, data sandbox, multi-party secure computing and federated learning, trusted data space, trusted execution environment, data elements, etc., to implement universal metering and billing based on the number of times, duration, and number of queries.

[0028] (4) Defines general implementation standards for the delivery credentials of data products: Defines general implementation methods for delivery credentials for data products with various technical routes, such as API, data sandbox, multi-party secure computing and federated learning, trusted data space, trusted execution environment, data elements, etc., and implements general implementation for the seller to authorize the buyer to use data.

[0029] (5) Better scalability: The data delivery and circulation system of the present invention is connected to various technical routes in a universal way. In the future, when the business side has new requirements for business processes, measurement, delivery certificates, and subject authorization, it can quickly expand and respond.

[0030] (6) The data delivery and circulation system of the present invention supports docking with upper-layer data transaction services in a universal manner, and in the future it can meet cross-data exchanges and cross-platform data transactions.

[0031] To summarize, the present invention realizes universal data product delivery through a unified management technology architecture for delivery flow. On top of the traditional visible data product delivery technology, it introduces a variety of methods of invisible data delivery (such as data sandbox, multi-party secure computing, federated learning, trusted execution environment, trusted data space, etc.), and realizes universal delivery, abstracts common interfaces and common processes, which can better support data product delivery. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments of the present invention. Obviously, the following drawings are only some embodiments recorded in the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0033] Figure 1 A schematic diagram of the overall architecture of a data delivery and circulation system according to an embodiment of the present invention.

[0034] Figure 2 A schematic diagram of the integrated architecture of a data delivery and circulation system according to an embodiment of the present invention.

[0035] Figure 3 A schematic diagram of the deployment architecture of a data delivery and circulation system according to an embodiment of the present invention.

[0036] Figure 4 This is a schematic diagram of the overall concept of unified management of delivery and circulation of the data delivery and circulation system according to an embodiment of the present invention.

[0037] Figure 5 It is a schematic diagram of abstract mapping of common processes and common interfaces (data product delivery process of data delivery circulation system) in an embodiment of the present invention.

[0038] Figure 6 It is a schematic diagram of the mapping relationship between the common interface and the interfaces of different technical routes in the embodiments of the present invention.

[0039] Figure 7 This is the delivery and metering method of the key data products (multi-party secure computing and federated learning data products use metering design) in the embodiments of the present invention.

[0040] Figure 8 Schematic diagram of a unified management interface implementation scheme in an embodiment of the present invention. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with specific embodiments and corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. The present invention can also be implemented or applied through other different specific implementation methods. The details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention.

[0042] At the same time, it should be understood that the protection scope of the present invention is not limited to the specific embodiments described below; it should also be understood that the terms used in the embodiments of the present invention are for describing specific embodiments rather than for limiting the protection scope of the present invention.

[0043] Embodiment: A data delivery and circulation system and circulation method based on unified management service 1. Technical architecture of data delivery and circulation system Figure 1 The figure shows the overall architecture of the data delivery and circulation system of the present invention, which provides general data delivery capabilities for visible data (files, APIs, data sets, etc.) and invisible data (data sandboxes, privacy computing, trusted data spaces, etc.) that need to be circulated after data transactions.

[0044] In the data delivery and circulation system of the present invention, the unified management service serves as the underlying support of the delivery management system, and performs downward access through a standard access protocol, thereby supporting the upper-level circulation control process.

[0045] In the data delivery and circulation system of the present invention, the standard access protocol corresponds to six technical routes, which are respectively connected to API gateway management, privacy computing management (multi-party secure computing and federated learning), data sandbox, trusted data space, trusted execution environment and data elements.

[0046] The unified management service converts specific order information into project information and distributes it. At the same time, the delivery information generated by the relevant data products provided by the data vendor during delivery is provided to the delivery management system through the interfaces of various technical platforms. In specific applications, the delivery information includes delivery measurement information, process management information, log information, delivery process evidence information, etc.

[0047] Figure 2 The figure shows the integrated architecture of the data delivery and circulation system of the present invention, with the delivery and circulation system (including unified management services) in the middle. After the transaction mall generates an order through data transaction, the data delivery is completed through the data delivery and circulation system. The data delivery and circulation system also relies on the general capability support of the application support systems such as the user center, product center, billing center, blockchain, etc. provided by the mall.

[0048] In this invention, data delivery and circulation rely on unified management services to control project delivery status and measurement. The left part presents the objects to be managed in this period. The middle unified management service part, as the underlying support for delivery and circulation, will implement management control on delivery objects through standard interfaces in accordance with the overall idea of ​​unified management. Management control includes project information distribution, process control, and log information acquisition (dependency object upload).

[0049] Figure 3 The figure shows the deployment architecture of the data delivery and circulation system of the present invention. The system is deployed as a whole on the public network of the cloud platform (enterprise exclusive area), and the left side is connected with the data service providers of various technical routes through firewalls and switching equipment. The data delivery and circulation system is deployed internally using cloud native, microservice and other technical architectures.

[0050] 2. Unified management service technical architecture In this invention, in order to realize unified management service, we have conducted a comprehensive investigation on six technical routes, including API, data sandbox, privacy computing (multi-party secure computing and federated learning), trusted execution environment, trusted data space, and data elements. Based on the investigation results, we summarized and concluded the common processes and common interfaces as the basis for the unified management service technical architecture. Figure 4 The figure shows the process of constructing the technical architecture of the unified management service in the present invention.

[0051] 3. Abstract common process In this invention, according to the delivery management process and different delivery flow technical standard processes, the following four common processes are abstracted: Table 1 Common processes

[0052] 4. Mapping relationship between common processes and common interfaces like Figure 5 As shown, in the present invention, the unified management service serves as the underlying support of the delivery management system. After the order contract is signed, the management links the delivery management system and the management object. The common process includes four main links: delivery project creation, delivery environment preparation, product delivery execution, and delivery project completion. The management specifications are used to normalize the interfaces of the scenarios connected to the management and make the processes monitorable to ensure that the scenario delivery is controllable and manageable.

[0053] The mapping relationship between the four common processes and the eight common (abstract) interfaces is as follows: Table 2 Mapping relationship between common processes and common (abstract) interfaces

[0054] 5. Mapping relationship between common interfaces and interfaces implemented by different technical routes like Figure 6 As shown, in the present invention, according to the survey of typical manufacturers of various technical routes and the requirements for delivery and transfer management, according to six different technical routes, a total of 8 common interface descriptions are abstracted, and the standard design idea of ​​classification first and then abstraction is adopted to gradually complete the docking according to different scenarios. The specific classification description is as follows: Table 3 Mapping relationship between common interfaces and interfaces implemented by different technical routes

[0055] (VI) General design of metering and billing In this invention, based on the survey of typical manufacturers of various technical routes and the demand for delivery and circulation management, six different technical routes are abstracted into three types of measurement: by number, by duration, and by the number of items found. The billing method is set by the data trading platform on demand. Unified management is designed according to this, and the specific description is as follows: Table 4 Metering and billing design

[0056] like Figure 7 As shown in the figure, key data products (multi-party secure computing and federated learning data products) have been sorted out, and the data delivery and circulation system can support delivery and measurement.

[0057] (VII) General design of subject authorization In this invention, based on the survey of typical manufacturers of various technical routes and the demand for delivery and transfer management, according to six different technical routes, API involves online scenarios of subject authorization, and realizes general subject authorization through the docking of trading malls, API gateways, blockchain and other systems. Others (data sandbox / privacy computing, trusted data space, trusted execution environment) complete subject authorization through offline methods. The unified management service is designed according to this, and the specific description is as follows: Table 5 General design of subject authorization

[0058] (VIII) General design of delivery certificate In this invention, according to the survey of typical manufacturers of various technical routes and the demand for delivery and transfer management, according to six different technical routes, the API generates and verifies credentials in a token manner, the data sandbox is integrated in the transaction mall for centralized deployment and use through unified authentication, and others (privacy computing, trusted data space, trusted execution environment) record the delivery credentials through the unified management data permission opening reporting interface for subsequent reference. The unified management service is designed according to this, and the specific description is as follows: Table 6 General design of delivery certificate

[0059] (IX) Unified management interface message transmission specifications like Figure 8 As shown, in the present invention, according to the business scenario evaluation, the message channel for connecting each technical platform and the delivery flow system adopts Kafka middleware for message transmission, the producer sends data to the message system, and the consumer reads data from the system. Kafka stores data in Topic, so that the message reporting and reading efficiency will have a unified pipeline, which improves the availability of the system and enables the system to be horizontally expanded to cope with larger data volumes.

[0060] The above description is only a preferred embodiment of the present invention and does not limit the present invention in any form. Any technician familiar with the profession can make some changes or modifications to the technical contents disclosed above without departing from the scope of the technical solution of the present invention to obtain equivalent embodiments of equivalent changes. However, any simple modification, equivalent changes and modifications made to the above embodiments based on the technical essence of the present invention without departing from the content of the technical solution of the present invention should be included in the scope of protection of the claims of the present invention.

Claims

1. A data delivery and circulation system based on unified management services, characterized in that: The data delivery and circulation system includes: a delivery management system and a unified management service; The data buyer and seller sign a data purchase contract in the data transaction mall system. The data transaction mall system generates a transaction order and sends it to the delivery management system. The delivery management system provides the order information to the unified management service, which then connects to multiple technical platforms to complete the delivery of data products. in: The delivery management system provides delivery management services, usage metering services, delivery supervision services, and data product delivery services; The unified management service connects to six different technology platforms through standard access protocols, identifies four common processes and eight common interfaces of the six different technology platforms, and manages, controls and operates the six different technology platforms through the management standard interface based on the common processes and common interfaces; The six different technology platforms are API gateway, data sandbox, multi-party secure computing and federated learning, trusted execution environment, trusted data space, and data element; The four common processes are delivery project creation, delivery environment preparation, product delivery execution, and delivery project closing; The eight common interfaces are node access, project information distribution, delivery environment confirmation, authentication / mutual trust, log reporting, project management and control, usage detection, and metering information reporting.

2. The data delivery and circulation system based on unified management service according to claim 1 is characterized in that: In the delivery management system, Delivery management services include: delivery project management, supplier management, delivery system management, and delivery environment management; Usage metering services include: metering execution, metering control, data commodity metering, and computing resource metering; Delivery supervision services include: log management, monitoring and early warning, delivery and use analysis, and delivery and use supervision; Data product delivery services include: data access management, data quality assessment, data audit management, transaction data security, data authorization, credential management, and data destruction.

3. The data delivery and circulation system based on unified management service according to claim 1 is characterized in that: The delivery information generated during the delivery of the data commodity includes: delivery measurement information, process management information, log information, and delivery process evidence information; The management, control and operation of different technical platforms include: project information issuance, process control, and log information acquisition.

4. The data delivery and circulation system based on unified management service according to claim 1 is characterized in that: The delivery management system is connected to the application support system to achieve unified approval, unified user login, product technical specification provision, data product query, metering data reporting, and delivery process evidence storage; the application support system includes: configuration center, user center, product center, billing center, log center, approval center, and blockchain sub-platform; The delivery management system is connected to the data transaction mall system to implement the issuance of transaction orders and reporting of delivery status; the data transaction mall system includes: a delivery management center and operation statistics management.

5. The data delivery and circulation system based on unified management service according to claim 1 is characterized in that: The mapping relationship between the 4 common processes and the 8 common interfaces is as follows: Deliver projects to create mapping node access and issue project information; Delivery environment preparation mapping delivery environment confirmation, authentication / mutual trust; Product delivery execution mapping log reporting, project management and control, usage detection, and metering information reporting; Deliver project completion mapping project control; The mapping relationship between the eight common interfaces and the six different technology platform interfaces is as follows: API Gateway: Node access mapping API registration interface; Project information issuance mapping API subscription; Delivery environment confirmation mapping API interface registration; Authentication / mutual trust mapping authorization authentication interface; Log reporting mapping API log reporting; Project management and control mapping API subscription cancellation, suspension, and resumption, issuing API dynamic flow control strategy, and API delivery project completion; usage detection mapping log reporting; metering information reporting mapping log reporting; Data sandbox: node access mapping initializes sandbox; project information is sent and mapped to report sandbox project information; delivery environment confirms mapping report availability; log reports map metering / log information; Project management and control maps pause, resume, and complete project tasks; usage detection maps metering / log information; Metering information reporting maps metering / log information; Multi-party secure computing and federated learning: node access mapping networking information reporting, node connectivity testing; Project information is issued and mapped to receive project delivery information and report task creation; the delivery environment confirms the mapping of data product permissions; authentication / mutual trust mapping generates call credentials; Log reporting maps log reporting; project management maps the cancellation of data product permissions and termination of project delivery; usage detection maps metering information reporting; Metering information reporting maps metering information reporting; Trusted execution environment: node access mapping creates partners and device information query; project information is issued, mapping is delivered, order information is received; delivery environment confirmation mapping receives negotiation application / confirmation event; authentication / mutual trust mapping receiving device establishes mutual trust time; Log reporting maps to operation log reporting; project management maps to order information freezing and unfreezing; Usage detection mapping execution record / metering report; Metering information reporting mapping execution record / metering reporting; Trusted data space: node access mapping creates partners and device information query; project information issuance mapping delivery order information reception; delivery environment confirmation mapping reception negotiation application / confirmation event; authentication / mutual trust mapping receiving device to establish mutual trust time; Log reporting maps to operation log reporting; project management maps to order information freezing and unfreezing; usage detection maps to execution records / measurement reporting; Metering information reporting mapping execution record / metering reporting; Data components: node access mapping creates partners and device information query; project information issuance maps delivery order information reception; delivery environment confirmation maps reception negotiation application / confirmation event; authentication / mutual trust maps reception device mutual trust establishment time; log reporting maps operation log reporting; project management maps order information freezing and unfreezing; Usage detection mapping execution record / metering report; Metering information reporting maps execution records / metering reporting.

6. The data delivery and circulation system based on unified management service according to claim 1 is characterized in that: The data delivery and circulation system defines a universal metering and billing method for the delivery of data products from six different technical platforms. The metering methods include three categories: by number of times, by duration, and by the number of queries. The billing method is set by the data trading platform on demand.

7. The data delivery and circulation system based on unified management service according to claim 1 is characterized in that: The data delivery and circulation system sets corresponding subject authorization methods for six different technical platforms. The API gateway realizes universal subject authorization by connecting with the data transaction mall system or the blockchain system; the data sandbox, multi-party secure computing and federated learning, trusted execution environment, trusted data space, and data elements complete subject authorization offline.

8. The data delivery and circulation system based on unified management service according to claim 1 is characterized in that: The data delivery circulation system defines universal delivery credentials for the delivery of data products of six different technical platforms. The API gateway generates and verifies credentials in a token manner; the data sandbox is integrated in the trading mall for centralized deployment and used through unified authentication; multi-party secure computing and federated learning, trusted execution environment, trusted data space, and data elements use the data permission reporting interface of the unified management service to record the delivery credentials for subsequent reference.

9. The data delivery and circulation system based on unified management service according to claim 1 is characterized in that: The unified management service in the data delivery and circulation system is connected to six different technical platforms. Kafka middleware is used for message transmission between each technical platform and the unified management service. Kafka stores data in Topics. Producers send data to the message system, and consumers read data from the message system.

10. A data delivery and circulation method based on unified management service, characterized in that: The data delivery and circulation method is implemented based on the data delivery and circulation system based on unified management services as described in any one of claims 1-9.

Images