File data circulation security system based on block chain technology

Abstract

The invention discloses a file data circulation security system based on a block chain technology, and the system deploys block chain nodes based on the block chain technology, and constructs a block chain network system. An upper-layer application is established on the basis of digital identity authentication, a security policy smart contract, process management and control and uplink log auditing, and the upper-layer application comprises a block chain background management module, a file storage cloud service module and a component core capability module; in a business application level, a data owning party and a data using party can realize safe circulation of data through encryption authorization and authorization decryption services provided by the platform. According to the method, data privacy can be protected, data traceability and non-tampering performance are achieved, and meanwhile efficient data circulation and cross-platform interoperability can be achieved.

Description

Technical Field

[0001] The present invention relates to the field of blockchain data encryption. Background Art

[0002] With the rapid development of information technology, the circulation of file data has become an indispensable part of all walks of life. However, the traditional way of file data circulation often relies on centralized servers or cloud platforms, which has many security risks. With the explosive growth of data volume and the increasing complexity of data relationships, how to ensure the security, integrity and privacy protection of file data during circulation has become an urgent problem to be solved.

[0003] As a distributed ledger technology, blockchain technology has unique advantages such as decentralization, immutability, transparency and traceability. These characteristics make blockchain technology show great potential in the field of data security protection. Through blockchain technology, decentralized storage and management of file data can be achieved, and the data's anti-attack ability can be improved; at the same time, the immutability of blockchain can ensure the authenticity and integrity of file data during the circulation process; in addition, the transparent traceability of blockchain also provides strong support for data auditing and supervision.

[0004] Blockchain technology stores file data through distributed nodes, avoiding the single point failure risk in traditional centralized storage methods. At present, there are many decentralized storage solutions based on blockchain, which can provide efficient and reliable data transmission and storage services. Blockchain technology uses advanced encryption algorithms to encrypt file data to ensure the security of data during transmission and storage. At the same time, through the encryption and decryption mechanism of public and private keys, only authorized users can access and operate encrypted file data.

[0005] In the existing technology, file data transfer mainly relies on centralized servers or cloud platforms, which has some technical defects. The details are as follows:

[0006] (1) Single point failure

[0007] In the original data processing, storage or transmission process, due to the failure of a key component or node, the entire data system cannot operate normally or data is lost. This failure may have serious consequences for businesses that rely on data, including business interruption, data inconsistency, data loss, etc.

[0008] (2) Data leakage

[0009] Any security incident in which unauthorized organizations or individuals access sensitive data or confidential information, which may include personal data, corporate data, or government data.

[0010] (3) Traditional encryption risks

[0011] In the traditional encryption technology environment, there are some risks that may affect or cause losses to data security, including but not limited to: algorithm security risks, implementation and operation risks, management and maintenance risks, legal and compliance risks, etc.

[0012] (4) Data tampering

[0013] During the transmission process, data may be modified by unauthorized third parties. For example, a user's transaction record may be tampered with during transmission, resulting in incorrect transaction results. If a verification mechanism such as a hash function is not used, the receiver cannot effectively determine whether the data has been modified during transmission. This may lead to incorrect decisions or actions.

[0014] (5) Audit and traceability difficulties

[0015] Traditional systems often lack transparent records of the data transmission process, making it difficult to trace the source and changes of data, reducing trust. Many industries are subject to data protection regulations (such as GDPR), and the lack of an effective audit mechanism may lead to legal risks and fines.

[0016] (6) User operation risks

[0017] Users may cause problems during data transfer due to human errors, such as incorrectly entering data or selecting the wrong file. Such human errors not only affect the transfer results, but may also cause confusion in subsequent processing, increasing the cost and time of correcting the errors. Summary of the invention

[0018] The technical problem to be solved by the present invention is: how to ensure the security and credibility of data and carry out efficient data flow, so that data privacy can be protected, data traceability and non-tamperability can be achieved, and efficient data flow and cross-platform interoperability can also be achieved.

[0019] To achieve the above object, the present invention adopts the following technical solutions:

[0020] A file data flow security system based on blockchain technology, including: deploying blockchain nodes based on blockchain technology to build a blockchain network system; building upper-level applications based on digital identity authentication, security policy smart contracts, process control and chain log auditing, and the upper-level applications include three modules: blockchain background management, file storage cloud services and component core capabilities; at the business application level, data owners and users can achieve secure data flow through encryption authorization and authorization decryption services provided by the platform.

[0021] The steps to upload files in the system are:

[0022] ① First check whether the file hash value is on the chain. If it is, complete the upload. If not, jump to step ②;

[0023] ②Use the encryption key to encrypt the original file and upload the encrypted file to the server;

[0024] ③ The file encryption information (including file encryption key, file URL and file name, etc.) is encrypted by AESKey to obtain the file encrypted text;

[0025] ④Upload the encrypted text of the file to the chain, and upload the log to the chain at the same time, and the process ends.

[0026] The steps for file authorization in the system are:

[0027] ①The user generates a public key and a private key by submitting authorization information;

[0028] ②Use the private key to encrypt AESKey and obtain the AESKey encrypted text;

[0029] ③The AESKey encrypted text, public key and authorization information are uploaded to the chain, and the process ends.

[0030] The steps to download files in the system are:

[0031] ①The user queries the AESKey encrypted text and public key through the file Hash and file user ID;

[0032] ②Use the public key to decrypt the AESKey encrypted text and obtain AESKey;

[0033] ③Query the encrypted text of the file based on AESKey;

[0034] ④Decrypt the encrypted text of the file through AESKey to obtain the encrypted information of the file;

[0035] ⑤Upload the query log to the chain and download the file through the file encryption information;

[0036] ⑥Upload the download log to the chain;

[0037] ⑦ Use the file encryption key to decrypt the file and upload the decryption log to the chain, and the process ends.

[0038] Beneficial effects of the present invention:

[0039] By encrypting and storing files, and based on the blockchain smart contract file access authorization mechanism, we can achieve cross-regional and cross-system file data sharing, so that file providers can rest assured and file data users can be careful, truly promoting the value flow of file data and realizing trusted control of file data resource sharing, forming an unalterable file flow record, and providing effective support for file ownership and traceability services. The details are as follows:

[0040] (1) Enhanced data security and credibility: Through the distributed ledger and tamper-proof characteristics of blockchain, the device can ensure the security and credibility of file data during the circulation process. Even if data is transmitted between multiple nodes, any unauthorized modification will be detected and rejected by the system, thus effectively preventing data from being tampered with or forged.

[0041] (2) Improve data privacy protection. The system uses advanced encryption technology to ensure that only authorized users can access and modify file data. This enhanced privacy protection measure can enhance users’ confidence in data security and promote the circulation of data under the premise of legality and compliance.

[0042] (3) Data traceability and auditing: The distributed ledger of blockchain records every transfer and change of file data, making the source and flow of data traceable. This not only helps to ensure the authenticity and integrity of data, but also provides strong support for data auditing, helping enterprises comply with relevant laws and policies.

[0043] (4) Improve data flow efficiency. Smart contract technology based on blockchain can realize the automated processing of file data flow, reduce manual intervention and intermediate links, and thus improve flow efficiency. At the same time, the decentralized nature of blockchain helps eliminate single points of failure and data bottlenecks, further improving the stability and reliability of the system.

[0044] (5) Promote cross-platform interoperability. The device may support multiple blockchain standards and protocols, allowing file data to flow seamlessly between different platforms. This helps break down information silos, promote data sharing and collaboration, and create greater value for users.

[0045] (6) Enhanced compliance and legal protection: The built-in compliance check mechanism can ensure that the file data flow complies with relevant laws, regulations and system requirements, reducing the risks faced by users due to illegal operations. At the same time, the tamper-proof nature of blockchain also provides strong evidence support for legal disputes. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Figure 1 : Schematic diagram of the system composition architecture of the present invention.

[0047] Figure 2: Logical diagram of the three processes of file upload, authorization and download.

[0048] Figure 3 : Screenshot of authentication before using the SDK in the embodiment. DETAILED DESCRIPTION

[0049] The present invention is mainly used in scenarios where data is transferred between multiple parties, typically in data exchange and sharing platforms on public clouds, industry data sharing centered on government departments, and data transfer within group companies. The present invention is a file data transfer security device based on blockchain technology. By encrypting files and uploading them to a distributed storage platform, file access is controlled by smart contracts to authorize users, ensuring data access security. At the same time, data access, authorization, operation and other logs are recorded on the chain throughout the entire process to ensure that the data transfer process is auditable and traceable.

[0050] The encrypted file information is uploaded to the chain and the smart contract management strategy ensures the high risk of leakage in the data flow process. The file provider sends the authorization information to the blockchain, and the file user needs to apply for permission from the blockchain network. The smart contract verifies the application information from various dimensions such as user information and timeliness to ensure safe and reliable access to files.

[0051] The present invention currently provides SDKs for Java, NodeJs, and Python, which are convenient for users to quickly access. Users only need to build relevant parameters according to the process of the SDK document, without the need to perform a large amount of encryption and decryption process coding.

[0052] The specific implementation of the present invention is described in detail below with reference to the accompanying drawings.

[0053] Figure 1 This is a technical architecture demonstration of a file data transfer security device based on blockchain technology, which mainly consists of four parts:

[0054] First, deploy multiple blockchain nodes based on blockchain technology to build a blockchain network system.

[0055] Second, through technologies such as digital identity authentication, security policy smart contracts, process control and chain log auditing, a relevant technical foundation is built for upper-level applications.

[0056] Third, relying on the blockchain component background management, file storage cloud services and component core capabilities, it provides applications with services such as user management, application management, file encryption, file download and access control.

[0057] Fourth, at the business application level, data owners and users can achieve secure data flow through encryption authorization, authorization decryption and other services provided by the platform.

[0058] Figure 2 This is a specific process logic diagram for using this system to upload, authorize and download files. (1) File upload:

[0059] ① First, check whether the file hash value is on the chain. If so, complete the upload; if not, jump to the next step.

[0060] ② Use the encryption key to encrypt the original file and upload the encrypted file to the HDFS server.

[0061] ③ Encrypt the file encryption information (including file encryption key, file URL and file name, etc.) through AESKey to obtain the file encrypted text.

[0062] ④Upload the encrypted text of the file to the chain, and upload the log to the chain at the same time, and the process ends.

[0063] (2) Document Authorization:

[0064] ①The user generates a public key and a private key by submitting authorization information.

[0065] ②Use the private key to encrypt AESKey and obtain the AESKey encrypted text.

[0066] ③The AESKey encrypted text, public key and authorization information are uploaded to the chain, and the process ends.

[0067] (3) File download:

[0068] ①The user queries the AESKey encrypted text and public key through the file Hash and file user ID.

[0069] ② Use the public key to decrypt the AESKey encrypted text and obtain AESKey.

[0070] ③Query the encrypted text of the file based on AESKey.

[0071] ④Decrypt the encrypted text of the file through AESKey to obtain the file encryption information.

[0072] ⑤Upload the query log to the chain and download the file through the file encryption information.

[0073] ⑥Upload the download log to the chain.

[0074] ⑦ Use the file encryption key to decrypt the file and upload the decryption log to the chain, and the process ends.

[0075] The present invention provides the following embodiments:

[0076] 1. Preparation

[0077] (1) Register an account and create an application, obtain UserId and AppId, and go to Register>>;

[0078] (2) Download the latest version of FileEncryptionSDK.jar.

[0079] 2. Add dependencies

[0080] (1) Create a lib folder in the project root directory;

[0081] (2)Put FileEncryptionSDK.jar into the lib folder;

[0082] (3) Right-click the FileEncryptionSDK.jar package and select "Add as Library..." to successfully add the dependency, as shown in Figure 1.

[0083] 3. Use

[0084] (1) Before using the SDK, you must first authenticate as follows:

[0085]

[0086] (2) After successful authentication, initialization settings must be performed as follows:

[0087]

[0088]

[0089] (3) Upload the file as follows:

[0090]

[0091]

[0092] (5) Document authorization, as follows:

[0093]

[0094]

[0095]

[0096] (6) The callback example is as follows:

[0097]

[0098]

[0099] The above disclosures are only several specific embodiments of the present invention; however, the present invention is not limited thereto, and any changes that can be conceived by those skilled in the art should fall within the protection scope of the present invention.

Claims

1. A file data transfer security system based on blockchain technology, characterized by include: Deploy blockchain nodes based on blockchain technology and build a blockchain network system; The upper layer application is built on the basis of digital identity authentication, security policy smart contract, process control and on-chain log audit. The upper layer application includes three modules: blockchain background management, file storage cloud service and component core capabilities; At the business application level, data owners and users can achieve secure data flow through the encryption authorization and authorization decryption services provided by the platform.

2. According to the file data transfer security system based on blockchain technology according to claim 1, it is characterized by The steps to upload files in the system are: ① First check whether the file hash value is on the chain. If it is, complete the upload. If not, jump to step ②; ②Use the encryption key to encrypt the original file and upload the encrypted file to the server; ③ The file encryption information (including file encryption key, file URL and file name, etc.) is encrypted by AESKey to obtain the file encrypted text; ④Upload the encrypted text of the file to the chain, and upload the log to the chain at the same time, and the process ends.

3. According to the file data transfer security system based on blockchain technology according to claim 2, it is characterized by The steps for file authorization in the system are: ①The user generates a public key and a private key by submitting authorization information; ②Use the private key to encrypt AESKey and obtain the AESKey encrypted text; ③The AESKey encrypted text, public key and authorization information are uploaded to the chain, and the process ends.

4. According to the file data transfer security system based on blockchain technology according to claim 3, it is characterized by The steps to download files in the system are: ①The user queries the AESKey encrypted text and public key through the file Hash and file user ID; ②Use the public key to decrypt the AESKey encrypted text and obtain AESKey; ③Query the encrypted text of the file based on AESKey; ④Decrypt the encrypted text of the file through AESKey to obtain the encrypted information of the file; ⑤Upload the query log to the chain and download the file through the file encryption information; ⑥Upload the download log to the chain; ⑦ Use the file encryption key to decrypt the file and upload the decryption log to the chain, and the process ends.

Images