Data privacy sharing method, system and device based on proxy re-encryption and block chain, and medium

Abstract

The invention is suitable for the technical field of data processing, and provides a data privacy sharing method, system and device based on proxy re-encryption and a block chain and a medium, and the method comprises the steps: generating a data sharing request based on target power grid data searched by a user, and sending the data sharing request to a target electric power company; the target electric power company uploads the second-level ciphertext corresponding to the target power grid data to a second cloud server; the second cloud server converts the second-level ciphertext into a first-level ciphertext encrypted by the public key of the first cloud server, and performs ciphertext calculation; converting a calculation result of the first-level ciphertext encrypted by the public key of the first cloud server into a second-level ciphertext encrypted by the public key of the first cloud server based on a set SCT ciphertext conversion protocol; and the second cloud server performs proxy re-encryption to obtain a first-level ciphertext corresponding to the target power grid data, so that a user performs decryption according to the first-level ciphertext to generate a shared data vector. According to the invention, the data processing efficiency is improved while the security of the data in transmission and processing is ensured.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a data privacy sharing method, system, device and medium based on proxy re-encryption and blockchain. Background Art

[0002] Smart grids generate massive amounts of data during operation, which contain a large amount of sensitive information about individuals and organizations, and are often stored on third-party cloud servers. In addition, technologies such as machine learning, deep learning, and data mining need to use these private data as raw materials to portray more accurate portraits of people, in order to accelerate the construction of smart cities, smart energy, multi-station integration, and other projects. The outsourced storage, sharing, and transmission of private power data pose more challenges to data security, privacy, and immutability. At present, traditional data sharing solutions have problems such as the inability to trace the authenticity of the data source, and the easy leakage or tampering of data, which makes it extremely difficult to share power grid data and the phenomenon of "information islands" of power data, which is not conducive to optimizing the operation of the power grid and tapping the potential value of data.

[0003] In the prior art, in order to prevent the leakage of power grid data during the sharing process, some studies have proposed an identity-based private data sharing scheme for online social networks of big data, using attribute-based conditional proxy re-encryption to ensure that only data disseminators whose attributes meet the access policy can disseminate data to their own social space. Some have proposed a scheme to provide privacy protection in identity-based broadcast proxy re-encryption, using Lagrange interpolation polynomials to provide privacy for the identity of the receiving group of the broadcast re-encrypted ciphertext. Some studies have proposed a privacy-preserving proxy re-encryption scheme for public cloud access control, providing proxy re-encryption of attribute-based encrypted data and protecting the privacy of the receiver. A new proxy re-encryption data sharing method has also been proposed, which implements the binding of public keys and user identities by introducing identity hashes in the key generation phase, thereby enhancing the security of data sharing. A regulated blockchain-based data sharing system has also been proposed to fully protect the privacy of transaction data and determine data access rights by controlling proxy re-encryption key parameters. Although blockchain technology and proxy re-encryption schemes have been widely used in the field of data sharing, there is still a lack of solutions that efficiently combine the two in smart grid application scenarios.

[0004] In view of this, a data privacy sharing method, system, device and medium based on proxy re-encryption and blockchain are proposed. Summary of the invention

[0005] The embodiments of the present application provide a data privacy sharing method, system, device and medium based on proxy re-encryption and blockchain, which are used to solve the problem that the security of data privacy sharing is not high enough.

[0006] The first aspect of the embodiment of the present application provides a data privacy sharing method based on proxy re-encryption and blockchain, including:

[0007] Generate a data sharing request based on the target power grid data searched by the user, and send the data sharing request to the target power company;

[0008] The target power company uploads the secondary ciphertext corresponding to the target power grid data to the second cloud server, and the second cloud server includes the proxy re-encryption keys of all power companies and the first cloud server;

[0009] The second cloud server converts the second-level ciphertext into a first-level ciphertext encrypted by the public key of the first cloud server, and performs ciphertext calculation on the first-level ciphertext encrypted by the public key of the first cloud server;

[0010] Based on the set SCT ciphertext conversion protocol, convert the calculation result of the first-level ciphertext encrypted by the first cloud server public key into the second-level ciphertext encrypted by the first cloud server public key;

[0011] The second cloud server performs proxy re-encryption on the secondary ciphertext encrypted by the public key of the first cloud server to obtain the primary ciphertext corresponding to the target power grid data, so that the user generates a shared data vector after decrypting the primary ciphertext.

[0012] Furthermore, the step of generating a data sharing request based on the target power grid data searched by the user and sending the data sharing request to the target power company includes:

[0013] The target power grid data is determined based on the search data input by the user, the search data is a keyword of the search table set in the power alliance chain, and the keyword is a keyword extracted from the first-level ciphertext corresponding to the target power grid data.

[0014] Furthermore, before the target power company uploads the secondary ciphertext corresponding to the target power grid data to the second cloud server, the method further includes:

[0015] The target power company determines whether the identity information of the user meets a preset condition. If so, the target power company extracts the ciphertext data corresponding to the target power grid data locally.

[0016] Furthermore, the target power company uploads the secondary ciphertext corresponding to the target power grid data to the second cloud server, and the second cloud server includes the proxy re-encryption keys of all power companies and the first cloud server, including:

[0017] The target power company decrypts the ciphertext data corresponding to the target power grid data to obtain plaintext data;

[0018] The plaintext data is secondarily encrypted to obtain the second-level ciphertext encrypted by the public key of the target power company, and the second-level ciphertext encrypted by the public key of the target power company is uploaded to the second cloud server.

[0019] Furthermore, the second cloud server converts the second-level ciphertext into a first-level ciphertext encrypted by the public key of the first cloud server, and performs ciphertext calculation on the first-level ciphertext encrypted by the public key of the first cloud server, including:

[0020] The second cloud server performs proxy re-encryption on the secondary ciphertext to generate a proxy key;

[0021] The second cloud server takes the second-level ciphertext and the proxy key as input, and converts the second-level ciphertext into the first-level ciphertext encrypted by the public key of the first cloud server through the RKG algorithm;

[0022] Perform ciphertext calculation on the first-level ciphertext encrypted by the first cloud server public key based on the ciphertext algorithm set by the user.

[0023] Furthermore, the conversion of the calculation result of the first-level ciphertext encrypted by the first cloud server public key into the second-level ciphertext encrypted by the first cloud server public key based on the set SCT ciphertext conversion protocol includes:

[0024] The expression of the SCT ciphertext conversion protocol is as follows:

[0025]

[0026] in: The secondary ciphertext encrypted by the first cloud server public key. The first-level ciphertext encrypted by the public key of the first cloud server (pk A ,sk A ) is the key pair of the first cloud server.

[0027] Furthermore, after the second cloud server performs proxy re-encryption on the second-level ciphertext encrypted by the public key of the first cloud server to obtain the first-level ciphertext corresponding to the target power grid data, so that the user generates a shared data vector after decrypting the first-level ciphertext, the method further includes:

[0028] When the user has an objection to the shared data vector, receiving ciphertext data corresponding to the shared data vector;

[0029] The ciphertext data is compared with the ciphertext data in the power alliance chain, and whether there is an error in the shared data vector is determined according to the comparison result.

[0030] The second aspect of the embodiment of the present application provides a data privacy sharing system based on proxy re-encryption and blockchain, including:

[0031] A data sharing request sending unit, configured to generate a data sharing request based on the target power grid data searched by the user, and send the data sharing request to a target power company;

[0032] A ciphertext uploading unit, used for the target power company to upload the secondary ciphertext corresponding to the target power grid data to a second cloud server, wherein the second cloud server includes the proxy re-encryption keys of all power companies and the first cloud server;

[0033] A ciphertext conversion unit, configured for the second cloud server to convert the second-level ciphertext into a first-level ciphertext encrypted by the public key of the first cloud server, and to perform ciphertext calculation on the first-level ciphertext encrypted by the public key of the first cloud server;

[0034] a ciphertext calculation result conversion unit, configured to convert the calculation result of the first-level ciphertext encrypted by the first cloud server public key into the second-level ciphertext encrypted by the first cloud server public key based on a set SCT ciphertext conversion protocol;

[0035] The shared data vector generating unit is used for the second cloud server to perform proxy re-encryption on the second-level ciphertext encrypted by the public key of the first cloud server to obtain the first-level ciphertext corresponding to the target power grid data, so that the user generates a shared data vector after decrypting the first-level ciphertext.

[0036] A third aspect of the embodiments of the present application provides a computer device, including:

[0037] memories, transceivers, processors, and bus systems;

[0038] Wherein, the memory is used to store programs;

[0039] The processor is used to execute the program in the memory, including executing the data privacy sharing method based on proxy re-encryption and blockchain as described above;

[0040] The bus system is used to connect the memory and the processor so that the memory and the processor can communicate with each other.

[0041] A fourth aspect of an embodiment of the present application provides a readable storage medium, including instructions, which, when executed on a computer, enables the computer to execute the data privacy sharing method based on proxy re-encryption and blockchain as described above.

[0042] It can be seen from the above technical solutions that the embodiments of the present application have the following advantages:

[0043] In the present invention, the user generates a sharing request based on the searched target power grid data and sends it to the target power company. The target power company uploads the secondary ciphertext of the target power grid data to the second cloud server that has the proxy re-encryption key of each relevant party. The second cloud server converts the secondary ciphertext into the primary ciphertext encrypted by the public key of the first cloud server and performs ciphertext calculation. Then, according to the SCT ciphertext conversion protocol, the calculation result is converted into the secondary ciphertext encrypted by the public key of the first cloud server. Finally, the second cloud server re-encrypts its proxy to obtain the primary ciphertext corresponding to the target power grid data, so that the user can decrypt and generate a shared data vector accordingly. The present invention not only ensures the security of data in transmission and processing, prevents data leakage, but also improves the efficiency of data processing.

[0044] Other advantages, objectives, and features of the present invention will be set forth in part in the following description, and in part will be apparent to those skilled in the art based on an examination of the following or may be taught from the practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 This is a flow chart of an embodiment of a data privacy sharing method based on proxy re-encryption and blockchain in the present invention;

[0046] Figure 2 This is a model architecture diagram of a data privacy sharing method based on proxy re-encryption and blockchain in the present invention;

[0047] Figure 3 This is a comparison chart of data encryption time in the present invention;

[0048] Figure 4 This is a comparison chart of data aggregation time in the present invention;

[0049] Figure 5 This is a comparison chart of data decryption time in the present invention. DETAILED DESCRIPTION

[0050] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein, for example. In addition, the terms "including" and "corresponding to" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0051] Embodiment 1

[0052] See also Figure 1 to Figure 2 , an embodiment of a data privacy sharing method based on proxy re-encryption and blockchain in the present invention comprises the following steps:

[0053] S11. Generate a data sharing request based on the target power grid data found by the user, and send the data sharing request to the target power company;

[0054] In this embodiment, step S11 includes:

[0055] The target power grid data is determined based on the search data input by the user. The search data is the keywords of the search table in the set power alliance chain, and the keywords are the keywords extracted from the first-level ciphertext corresponding to the target power grid data.

[0056] After step S11, the method further includes:

[0057] The target power company determines whether the user's identity information meets the preset conditions. If so, the target power company extracts the ciphertext data corresponding to the target power grid data locally.

[0058] Specifically, when all power companies upload power data, the plaintext power data is encrypted to obtain the ciphertext. Let the ciphertext be Extract keywords to build a search table and upload it to the power alliance chain. At the same time, generate a data keyword search table and broadcast it so that users can search for data using keywords. In this way, when users query the required power grid data, they can select the power grid data to be shared according to the search table. The system will generate a data sharing request based on the target power grid data that the user is looking for, and send the data sharing request to the target power company, where the target power company is the corresponding power company. In addition, the power company also needs to verify whether the user's identity information meets the preset conditions, where the preset conditions are the preset validity, to decide whether to provide data to the user. When the user's identity authentication is passed, the corresponding power company EPC i Search for encrypted data from the consortium chain based on keywords and extract it locally.

[0059] S12. The target power company uploads the secondary ciphertext corresponding to the target power grid data to the second cloud server, and the second cloud server includes the proxy re-encryption keys of all power companies and the first cloud server;

[0060] In this embodiment, step S12 includes:

[0061] 1. The target power company decrypts the ciphertext data corresponding to the target power grid data to obtain the plaintext data;

[0062] 2. Perform secondary encryption on the plaintext data to obtain the secondary ciphertext encrypted by the target power company's public key, and upload the secondary ciphertext encrypted by the target power company's public key to the second cloud server.

[0063] Specifically, after the target power company extracts the ciphertext data to the local computer, it decrypts the ciphertext data to obtain the plaintext data that the user wants to share, and performs secondary encryption on the plaintext data, that is, the secondary ciphertext is in Finally, the secondary ciphertext Upload to the second cloud server, assuming that the second cloud server is S1.

[0064] It should be noted that the second cloud server S1 includes the proxy re-encryption keys of all power companies and the first cloud server, assuming that the first cloud server is S0. In the system initialization phase, each power company entity contains data X i , where i∈[1,n] represents the identity of the power company. In addition, each entity has a key pair (pk i ,sk i ) and upload it to the power alliance chain in the form of a contract. The power company calculates the proxy re-encryption key And send it to the second cloud server S1. The first cloud server S0 has a key pair (pk A ,sk A), calculate the proxy re-encryption key And send it to the second cloud server S1. Assume that there are m users in the system, each user u j Have your own key pair Where j∈[1,m] is the user identity.

[0065] S13. The second cloud server converts the secondary ciphertext into the primary ciphertext encrypted by the public key of the first cloud server, and performs ciphertext calculation on the primary ciphertext encrypted by the public key of the first cloud server;

[0066] In this embodiment, step S13 includes:

[0067] 1. The second cloud server performs proxy re-encryption on the secondary ciphertext to generate a proxy key;

[0068] 2. The second cloud server takes the secondary ciphertext and the proxy key as input, and converts the secondary ciphertext into the primary ciphertext encrypted by the public key of the first cloud server through the RKG algorithm;

[0069] 3. Perform ciphertext calculation on the first-level ciphertext encrypted by the first cloud server public key based on the ciphertext algorithm set by the user.

[0070] Specifically, when the second cloud server S1 receives the second-level ciphertext, the data ciphertext corresponding to the second-level ciphertext is set Where t represents the number of users requesting sharing, pk t represents [X′ t ]The public key of the corresponding power company.

[0071] Perform proxy re-encryption to generate a proxy key Then and As algorithm input, the RKG algorithm Converted to the first-level ciphertext encrypted by the public key of the first cloud server During the whole process, there is no interaction between the second cloud server S1 and the first cloud server S0.

[0072] After the ciphertext conversion is completed, the second cloud server S1 performs ciphertext calculations on the first-level ciphertext encrypted by the public key of the first cloud server based on the ciphertext algorithm set by the user, such as ciphertext addition operations, ciphertext multiplication operations, etc., to obtain the calculation results. The calculation results are

[0073] S14. Based on the set SCT ciphertext conversion protocol, the calculation result of the first-level ciphertext encrypted by the first cloud server public key is converted into the second-level ciphertext encrypted by the first cloud server public key;

[0074] Specifically, since the calculation result is a first-level ciphertext encrypted with the public key of the first cloud server S0, the user cannot directly decrypt it after receiving it. Therefore, the second cloud server S1 needs to cooperate with the first cloud server S0 to execute the SCT ciphertext conversion protocol to convert the first-level ciphertext encrypted with the public key of the first cloud server S0 to Converted into the secondary ciphertext encrypted by the public key of the first cloud server S0 The expression of SCT ciphertext conversion protocol is:

[0075] S15. The second cloud server performs proxy re-encryption on the secondary ciphertext encrypted by the public key of the first cloud server to obtain the primary ciphertext corresponding to the target power grid data, so that the user can generate a shared data vector after decrypting the primary ciphertext.

[0076] In this embodiment, after step S15, the following steps are further included:

[0077] When the user has objections to the shared data vector, the ciphertext data corresponding to the shared data vector is received;

[0078] The encrypted data is compared with the encrypted data in the power alliance chain, and whether there is an error in the shared data vector is determined based on the comparison results.

[0079] Specifically, the second cloud server S1 uses the RKG algorithm to Perform proxy re-encryption to obtain the first-level ciphertext encrypted based on the public key of the shared user based on different requests These ciphertexts are distributed to the corresponding users and uploaded to the power alliance chain for user verification. j Received Then, use your own private key Perform decryption operation Get the calculated shared data vector X ret .

[0080] If the user has objections to the decryption result, he can apply for verification to the power chain. First, the user uploads the ciphertext corresponding to the objectionable result to the corresponding alliance chain node. When the corresponding node in the power alliance chain receives the ciphertext data sent by the user, it searches for the ciphertext in the power chain and compares the two to see if they are the same. If they are the same, there is no problem with the calculation result; otherwise, the second cloud server S1 is punished.

[0081] See also Figure 3-Figure 5The figures are respectively a comparison diagram of data encryption, aggregation and decryption time after using the method of this embodiment. According to the experimental comparison diagram, the scheme proposed in this embodiment not only realizes the user power data sharing in a multi-key scenario, but also can achieve a computational overhead very close to that of the BFV homomorphic encryption algorithm.

[0082] The above embodiment encrypts the data of the power company to the power alliance chain for storage, ensuring the security, privacy, non-tamperability and verifiability of the power grid data. By adopting the proxy re-encryption technology and the secure ciphertext conversion protocol, the homomorphic operation of the ciphertext is completed according to the user's needs while ensuring the privacy of the power data.

[0083] Embodiment 2

[0084] An embodiment of a data privacy sharing system based on proxy re-encryption and blockchain in the present invention includes the following steps:

[0085] A data sharing request sending unit, used to generate a data sharing request based on the target power grid data searched by the user, and send the data sharing request to the target power company;

[0086] A ciphertext uploading unit, used for the target power company to upload the secondary ciphertext corresponding to the target power grid data to the second cloud server, the second cloud server including the proxy re-encryption keys of all power companies and the first cloud server;

[0087] A ciphertext conversion unit, configured for the second cloud server to convert the second-level ciphertext into the first-level ciphertext encrypted by the public key of the first cloud server, and to perform ciphertext calculation on the first-level ciphertext encrypted by the public key of the first cloud server;

[0088] A ciphertext calculation result conversion unit, configured to convert a calculation result of the first-level ciphertext encrypted by the first cloud server public key into a second-level ciphertext encrypted by the first cloud server public key based on a set SCT ciphertext conversion protocol;

[0089] The shared data vector generation unit is used for the second cloud server to perform proxy re-encryption on the second-level ciphertext encrypted by the public key of the first cloud server to obtain the first-level ciphertext corresponding to the target power grid data, so that the user can generate a shared data vector after decrypting the first-level ciphertext.

[0090] For the specific definition of the system, please refer to the definition of the method above, which will not be repeated here. Each module in the above system can be implemented in whole or in part by software, hardware and a combination thereof. The above modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0091] Embodiment 3

[0092] The present invention provides a computer device, comprising a memory, a processor, and computer-readable instructions stored in the memory and executable on the processor. When the processor executes the computer-readable instructions, the steps of the above method are implemented.

[0093] Those of ordinary skill in the art will appreciate that the units of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition of each example has been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0094] In the embodiments provided by the present invention, it should be understood that the division of units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units can be combined into one unit, one unit can be split into multiple units, or some features can be ignored. In addition, each functional unit in each embodiment of the present invention can be integrated into a processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units.

[0095] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-0nlyMemory), random access memory (RAM, RandomAccessMemory), mobile hard disk, magnetic disk or optical disk, etc., which can store program code.

[0096] It can be understood that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the above embodiments, or replace some or all of the technical features therein by equivalents. These modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present invention, and they should all be included in the scope of the claims and specification of the present invention.

Claims

1. A data privacy sharing method based on proxy re-encryption and blockchain, characterized in that: include: Generate a data sharing request based on the target power grid data searched by the user, and send the data sharing request to the target power company; The target power company uploads the secondary ciphertext corresponding to the target power grid data to the second cloud server, and the second cloud server includes the proxy re-encryption keys of all power companies and the first cloud server; The second cloud server converts the second-level ciphertext into a first-level ciphertext encrypted by the public key of the first cloud server, and performs ciphertext calculation on the first-level ciphertext encrypted by the public key of the first cloud server; Based on the set SCT ciphertext conversion protocol, convert the calculation result of the first-level ciphertext encrypted by the first cloud server public key into the second-level ciphertext encrypted by the first cloud server public key; The second cloud server performs proxy re-encryption on the secondary ciphertext encrypted by the public key of the first cloud server to obtain the primary ciphertext corresponding to the target power grid data, so that the user generates a shared data vector after decrypting the primary ciphertext.

2. The data privacy sharing method based on proxy re-encryption and blockchain according to claim 1 is characterized in that: The step of generating a data sharing request based on the target power grid data searched by the user, and sending the data sharing request to the target power company, comprises: The target power grid data is determined based on the search data input by the user, the search data is a keyword of the search table set in the power alliance chain, and the keyword is a keyword extracted from the first-level ciphertext corresponding to the target power grid data.

3. The data privacy sharing method based on proxy re-encryption and blockchain according to claim 1 is characterized in that: Before the target power company uploads the secondary ciphertext corresponding to the target power grid data to the second cloud server, the method further includes: The target power company determines whether the identity information of the user meets a preset condition. If so, the target power company extracts the ciphertext data corresponding to the target power grid data locally.

4. The data privacy sharing method based on proxy re-encryption and blockchain according to claim 3 is characterized in that: The target power company uploads the secondary ciphertext corresponding to the target power grid data to the second cloud server, and the second cloud server includes the proxy re-encryption keys of all power companies and the first cloud server, including: The target power company decrypts the ciphertext data corresponding to the target power grid data to obtain plaintext data; The plaintext data is secondarily encrypted to obtain the second-level ciphertext encrypted by the public key of the target power company, and the second-level ciphertext encrypted by the public key of the target power company is uploaded to the second cloud server.

5. The data privacy sharing method based on proxy re-encryption and blockchain according to claim 1 is characterized in that: The second cloud server converts the second-level ciphertext into a first-level ciphertext encrypted by the public key of the first cloud server, and performs ciphertext calculation on the first-level ciphertext encrypted by the public key of the first cloud server, including: The second cloud server performs proxy re-encryption on the secondary ciphertext to generate a proxy key; The second cloud server takes the second-level ciphertext and the proxy key as input, and converts the second-level ciphertext into the first-level ciphertext encrypted by the public key of the first cloud server through the RKG algorithm; Perform ciphertext calculation on the first-level ciphertext encrypted by the first cloud server public key based on the ciphertext algorithm set by the user.

6. The data privacy sharing method based on proxy re-encryption and blockchain according to claim 1 is characterized in that: The method of converting the calculation result of the first-level ciphertext encrypted by the first cloud server public key into the second-level ciphertext encrypted by the first cloud server public key based on the set SCT ciphertext conversion protocol includes: The expression of the SCT ciphertext conversion protocol is as follows: in: The secondary ciphertext encrypted by the first cloud server public key. The first-level ciphertext encrypted by the public key of the first cloud server (pk A ,sk A ) is the key pair of the first cloud server.

7. The data privacy sharing method based on proxy re-encryption and blockchain according to claim 2 is characterized in that: After the second cloud server performs proxy re-encryption on the second-level ciphertext encrypted by the public key of the first cloud server to obtain the first-level ciphertext corresponding to the target power grid data, so that the user generates a shared data vector after decrypting the first-level ciphertext, the method further includes: When the user has an objection to the shared data vector, receiving ciphertext data corresponding to the shared data vector; The ciphertext data is compared with the ciphertext data in the power alliance chain, and whether there is an error in the shared data vector is determined according to the comparison result.

8. A data privacy sharing system based on proxy re-encryption and blockchain, characterized in that: include: A data sharing request sending unit, configured to generate a data sharing request based on the target power grid data searched by the user, and send the data sharing request to a target power company; A ciphertext uploading unit, used for the target power company to upload the secondary ciphertext corresponding to the target power grid data to a second cloud server, wherein the second cloud server includes the proxy re-encryption keys of all power companies and the first cloud server; A ciphertext conversion unit, configured for the second cloud server to convert the second-level ciphertext into a first-level ciphertext encrypted by the public key of the first cloud server, and to perform ciphertext calculation on the first-level ciphertext encrypted by the public key of the first cloud server; a ciphertext calculation result conversion unit, configured to convert the calculation result of the first-level ciphertext encrypted by the first cloud server public key into the second-level ciphertext encrypted by the first cloud server public key based on a set SCT ciphertext conversion protocol; The shared data vector generating unit is used for the second cloud server to perform proxy re-encryption on the second-level ciphertext encrypted by the public key of the first cloud server to obtain the first-level ciphertext corresponding to the target power grid data, so that the user generates a shared data vector after decrypting the first-level ciphertext.

9. A computer device, characterized in that: include: memories, transceivers, processors, and bus systems; Wherein, the memory is used to store programs; The processor is used to execute the program in the memory, including executing the data privacy sharing method based on proxy re-encryption and blockchain according to any one of claims 1 to 7; The bus system is used to connect the memory and the processor so that the memory and the processor can communicate with each other.

10. A readable storage medium, characterized in that: The method comprises instructions which, when executed on a computer, enable the computer to execute the data privacy sharing method based on proxy re-encryption and blockchain as described in any one of claims 1 to 7.

Images