Data sharing authorization method and system based on block chain

Abstract

The invention relates to the technical field of data sharing, in particular to a block chain-based data sharing authorization method and system, and the method comprises the following steps: carrying out the authorization of a designated department; authorizing according to a scene; authorizing according to the application; data backflow authorization; cross-provincial calling authorization and aggregation distribution authorization are carried out; the block chain-based data sharing authorization method and system provided by the invention have the beneficial effects that the data security is improved, the transparency of data sharing is enhanced, the data control is optimized, the data processing efficiency is improved, the data sharing cost and risk are reduced, the data sharing of a complex scene is supported, the distributed storage and management of the data are realized, and the data sharing authorization method and system based on the block chain have wide application prospects. Automation and standardization of data sharing are provided, cross-department and cross-organization data sharing ability is enhanced, and credibility and non-tampering of data sources are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of data sharing, and in particular to a data sharing authorization method and system based on blockchain. Background Art

[0002] As government data sharing continues to deepen, government services increasingly rely on data sharing and exchange platforms to achieve rapid information circulation and efficient business operations. As the hub of information exchange, the data sharing and exchange platform allows data integration and interaction between different systems and applications, thereby improving the automation level of business processes and the quality of decision-making.

[0003] In the current data sharing field, there are many problems in the data sharing environment, authorization model, and traceability, which seriously restrict the efficiency and security of data sharing. First of all, the problems of the sharing environment are mainly manifested in untrusted identities, tamperable data, and lack of multi-party trust endorsement. In the traditional data sharing environment, the identity authentication of participants often relies on centralized certification agencies. This model is not only inefficient, but also vulnerable to single point failures. At the same time, data is easily tampered with during transmission and storage, and there is a lack of effective data integrity protection mechanism. In addition, due to the lack of a trust system recognized by multiple parties, the authenticity and validity of shared data are difficult to guarantee, which greatly limits the widespread application of data sharing.

[0004] Secondly, the problems of the authorization model are mainly reflected in the single authorization model, low approval efficiency and difficulty in supporting complex scenarios. The traditional authorization model often adopts a static permission allocation strategy, which is difficult to adapt to changing business needs and complex application scenarios. At the same time, the authorization and approval process is cumbersome and the approval efficiency is low, which not only increases management costs but also affects the timeliness of data sharing. In addition, in the face of increasingly complex data sharing needs, the traditional authorization model is difficult to provide flexible and efficient solutions, which to a certain extent limits the flexibility and scalability of data sharing. Summary of the invention

[0005] The purpose of the present invention is to provide a data sharing authorization method and system based on blockchain to solve the problems raised in the above background technology.

[0006] To achieve the above object, the present invention provides the following technical solution: a data sharing authorization method based on blockchain, the method comprising the following steps:

[0007] Authorization from designated departments;

[0008] Authorization based on scenarios;

[0009] Authorization by application;

[0010] Data return authorization;

[0011] Cross-provincial call authorization uses blockchain technology to achieve transparency, security and traceability of cross-provincial data calls. Through the blockchain platform, big data centers or local commissions and bureaus can efficiently and securely call cross-provincial service interfaces to obtain required data. Blockchain technology ensures the compliance and efficiency of cross-provincial data calls and improves the overall quality and efficiency of cross-provincial services.

[0012] Aggregation and distribution authorization realizes distributed storage and management of data through blockchain technology, thus providing a more efficient and secure solution for data aggregation and distribution.

[0013] Preferably, the designated department authorization includes the following steps:

[0014] In the blockchain network, each data department, as a node of the network, has independent private and public keys. The rules and conditions for data access are defined through smart contracts to achieve automated authorization of data.

[0015] When a department needs to access or request data, it sends an authorization request to the department that owns the data; the request is broadcast in the blockchain network and its validity and compliance are automatically verified by the smart contract;

[0016] After verification, the smart contract automatically executes the authorization operation, allowing the requesting department to access or obtain the data, and records all authorized operations on the blockchain to form an unalterable audit log.

[0017] Preferably, the scene-based authorization includes the following steps:

[0018] Build a data sharing business domain centered on a specific business scenario or theme;

[0019] Within the business domain, relevant parties are allowed to share and access data resources according to predefined rules and permissions;

[0020] Blockchain technology provides a decentralized, tamper-proof data storage and transmission platform, ensuring the security and transparency of data sharing;

[0021] Smart contracts automatically execute predefined rules to ensure the compliance and efficiency of data sharing and support dynamic adjustment of data sharing policies and permissions.

[0022] Preferably, the application authorization includes the following steps:

[0023] Build a cross-departmental data sharing platform and use blockchain technology to achieve real-time and secure data sharing; in the process of handling government service matters, such as real estate registration, automatically obtain data support from multiple departments through the blockchain platform; blockchain technology ensures the automation, transparency and security of data sharing, and improves the efficiency and quality of government services.

[0024] Preferably, the data backflow authorization includes the following steps:

[0025] Data is collected and processed through a unified business system, and the processed data is returned to the local big data center; blockchain technology ensures the security, accuracy and traceability of data return; the big data center, as a node in the blockchain network, automatically triggers the data return process through smart contracts, and records the entire process of data return on the blockchain, forming an unalterable audit log.

[0026] A data sharing authorization system based on blockchain, applied to a data sharing authorization method based on blockchain, the system comprising:

[0027] Designated department authorization subsystem, including blockchain network, smart contract module, authorization request processing module, authorization execution module and audit log module;

[0028] The scenario-based authorization subsystem includes a data sharing business domain building module, a blockchain storage and transmission module, and a smart contract execution module;

[0029] Based on the application authorization subsystem, it includes a cross-departmental data sharing platform, a data request and processing module, a permission verification and authorization module, and a data security and privacy protection module;

[0030] Data backflow authorization subsystem, including big data center node, data collection and processing module, smart contract trigger module, data backflow rule definition module and audit log recording module;

[0031] The inter-provincial call authorization subsystem includes an inter-provincial data call interface module, which provides the function of inter-provincial data call; a blockchain transparency, security and traceability guarantee module, which ensures the transparency, security and traceability of inter-provincial data calls; a smart contract execution and verification module, which automatically executes and verifies the rules and conditions of inter-provincial data calls; a data transmission and encryption module, which ensures that the security and privacy of data are protected during the inter-provincial data call process; and a call efficiency and quality improvement module, which improves the efficiency and quality of inter-provincial services through the application of blockchain technology.

[0032] The aggregation and distribution authorization subsystem realizes distributed storage and management of data through blockchain technology, improving the efficiency and security of data aggregation and distribution.

[0033] Preferably, in the designated department authorization subsystem, a blockchain network, wherein each data department acts as a node of the network and is equipped with its own private key and public key;

[0034] Smart contract module, which is used to define the rules and conditions for data access and automatically verify and process data access requests from one department to another;

[0035] The authorization request processing module, when receiving a data access request, sends the request to the blockchain network, and the smart contract module verifies its validity and compliance;

[0036] Authorization execution module, once the request is verified, the module automatically performs the authorization operation, allowing the requesting department to access or obtain data;

[0037] The audit log module is used to record all authorized operations on the blockchain, forming an unalterable audit log for data tracking and supervision.

[0038] Preferably, in the scenario-based authorization subsystem, the data sharing business domain construction module builds a data sharing business domain centered on a specific business scenario or theme;

[0039] The permission management module allows members within the business domain to share and access data resources according to predefined rules and permissions;

[0040] Blockchain storage and transmission module, providing a decentralized, tamper-proof data storage and transmission platform to ensure the security and transparency of data sharing;

[0041] The smart contract execution module automatically executes predefined rules to ensure the compliance and efficiency of data sharing, and supports dynamic adjustment of data sharing policies and permissions.

[0042] Preferably, in the application authorization subsystem, a cross-departmental data sharing platform is used to achieve real-time and secure data sharing through blockchain technology;

[0043] The data request and processing module is used to receive and process data requests from the process of handling government service matters;

[0044] The authority verification and authorization module verifies the authority of the requesting department and performs authorization operations according to the needs of government service items;

[0045] The data security and privacy protection module ensures that data security and privacy are protected during the data sharing process.

[0046] Preferably, in the data return authorization subsystem, the big data center nodes all participate in data sharing as nodes of the blockchain network;

[0047] Data collection and processing module: ministries and commissions collect and process data through unified business systems;

[0048] The smart contract trigger module automatically triggers the data return process after completing data collection and processing;

[0049] The data return rule definition module is used to define the rules and conditions for data return, ensuring that only data that meets the conditions can be returned to the local big data center;

[0050] The audit log recording module automatically records the entire process of data reflow on the blockchain, forming an audit log that cannot be tampered with.

[0051] Compared with the prior art, the present invention has the following beneficial effects:

[0052] The data sharing authorization method and system based on blockchain proposed in the present invention have the following effects:

[0053] (1) Improve data security: The application of blockchain technology ensures the security of data during storage and transmission, preventing data tampering and unauthorized access.

[0054] (2) Enhanced transparency of data sharing: The tamper-proof nature of blockchain allows all participants to view and verify the integrity of the data, thus achieving transparency in data sharing.

[0055] (3) Optimizing data control: Data owners can authorize data through mechanisms such as smart contracts, clearly specify the conditions and permissions for data use, and thus better control the use of data.

[0056] (4) Improve data processing efficiency: The automated authorization process reduces manual intervention, reduces the risk of errors and fraud, and increases the speed of data processing.

[0057] (5) Reduce data sharing costs and risks: The cross-organizational sharing platform established through blockchain automates the execution of data sharing rules and protocols, reducing the costs and risks of data sharing.

[0058] (6) Supporting data sharing in complex scenarios: Various authorization modes based on blockchain cover the complex needs of data sharing and provide flexible and efficient solutions.

[0059] (7) Realize distributed storage and management of data: The aggregation and distribution authorization model realizes distributed storage and management of data through blockchain technology, providing an efficient and secure solution for data aggregation and distribution.

[0060] (8) Provide automation and standardization of data sharing: Smart contracts automatically execute data sharing rules, ensuring the compliance and efficiency of data sharing.

[0061] (9) Enhance cross-departmental and cross-organizational data sharing capabilities: Blockchain technology supports the construction of cross-departmental and cross-organizational data sharing platforms to achieve data interoperability and sharing.

[0062] (10) Ensure the credibility and immutability of data sources: During the process of data aggregation and distribution, blockchain ensures the credibility and immutability of data sources, thereby improving the reliability of data. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] Figure 1 This is a system architecture diagram of the present invention;

[0064] Figure 2 This is a schematic diagram of the authorization model of the present invention. DETAILED DESCRIPTION

[0065] In order to make the purpose and technical solution of the present invention clearly and completely described, and the advantages more clearly understood, the embodiments of the present invention are further described in detail with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are part of the embodiments of the present invention, rather than all of the embodiments, and are only used to explain the embodiments of the present invention, and are not used to limit the embodiments of the present invention. All other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0066] For example, see Figure 1 to Figure 2 The present invention provides a technical solution: a data sharing authorization method based on blockchain, the method comprising the following steps:

[0067] 1. Authorization by designated department:

[0068] For scenarios where data is aggregated or distributed between departments, such as credit platform data collection and distribution, each data department, as a node in the blockchain network, has its own private key and public key. The data authorization process is implemented through smart contracts, which define the rules and conditions for data access. When a department needs to access or request data, it must send an authorization request to the department that owns the data. This request will be sent to the blockchain network, and the validity and compliance of the request will be automatically verified by the smart contract.

[0069] Once the request is verified, the smart contract will automatically perform the authorization operation, allowing the requesting department to access or obtain the data. This process not only reduces manual intervention and reduces the risk of errors and fraud, but also improves the speed and transparency of data processing. All authorization operations will be recorded on the blockchain to form an unalterable audit log, which facilitates data tracking and supervision.

[0070] 2. Authorization based on scenarios

[0071] With scenarios or themes as the center, establish a data sharing business domain to share resources within the domain. With specific business scenarios or themes as the center, build a data sharing business domain. This model allows relevant participants to share and access data resources in a secure and controlled environment in a specific business scenario. In this model, each business scenario or theme is regarded as an independent data sharing domain, and members in the domain share and collaborate on data according to predefined rules and permissions. Blockchain technology provides a decentralized, tamper-proof data storage and transmission platform for this scenario, ensuring the security and transparency of data sharing.

[0072] The core advantage of scenario-based authorization lies in its flexibility and targeting. By limiting data sharing to specific business scenarios, data access rights can be more precisely controlled to meet different business needs. For example, in the field of healthcare, blockchain can be used to build a patient-centric data sharing domain, allowing doctors, hospitals, insurance companies, etc. to share medical records and health data with the authorization of patients.

[0073] In addition, the scenario-based authorization model also supports dynamic data sharing strategies. As business scenarios change, the rules and permissions for data sharing can be adjusted accordingly to adapt to new business needs. Smart contracts play a key role in this process. They automatically execute predefined rules to ensure the compliance and efficiency of data sharing.

[0074] 3. Authorization by application

[0075] This model is particularly suitable for scenarios where cross-departmental data sharing is required in the handling of government service matters. This model uses blockchain technology to achieve automation, transparency and security of data sharing, greatly improving the efficiency and quality of government services.

[0076] In the process of handling government services, such as real estate registration, data support from multiple departments is often required, such as taxation, civil affairs, planning, etc. Traditional data sharing methods have problems such as low efficiency and poor security. The blockchain-based application authorization model realizes real-time and secure data sharing by building a cross-departmental data sharing platform.

[0077] 4. Data return authorization

[0078] The blockchain-based data return authorization model is an innovative mechanism for data sharing between the business systems built by ministries and commissions and local big data centers. In this model, ministries and commissions collect and process data through their business systems, and then return the processed data to local big data centers to support local decision-making and business execution. Blockchain technology plays a core role in this process, ensuring the security, accuracy and traceability of data return.

[0079] In the data return authorization model, ministries and local big data centers are nodes of the blockchain network. When ministries complete data collection and processing, they can automatically trigger the data return process through smart contracts. Smart contracts define the rules and conditions for data return, ensuring that only qualified data can be returned to the local big data center. At the same time, smart contracts can also automatically record the entire process of data return, forming an audit log that cannot be tampered with, which facilitates data supervision and auditing.

[0080] 5. Inter-provincial call authorization

[0081] The cross-provincial call authorization model based on blockchain is an efficient and secure data sharing and call mechanism for big data centers or local committees and bureaus when they need to use cross-provincial service interfaces. In this model, the application of blockchain technology ensures the transparency, security and traceability of cross-provincial data calls, thereby improving the efficiency and quality of cross-provincial services.

[0082] 6. Aggregation and distribution authorization

[0083] Aggregation and distribution authorization is a new authorization model based on blockchain technology, which is particularly suitable for data sharing needs between large data centers or local committees and bureaus. This model realizes distributed storage and management of data through blockchain technology, thus providing a more efficient and secure solution for data aggregation and distribution.

[0084] In specific applications, the aggregation and distribution authorization model can be used in situations where national ministries and commissions collect local data or distribute data to various places. When national ministries and commissions need to collect data from different provinces, they can automatically perform data collection tasks through smart contracts on the blockchain to ensure that the source of the data is credible and cannot be tampered with. Similarly, when data needs to be distributed to various local units, smart contracts can automatically complete the encrypted transmission of data and the allocation of permissions according to preset rules, thereby greatly improving the efficiency and security of data distribution.

[0085] Embodiment 2, based on embodiment 1, proposes a data sharing authorization system based on blockchain, which is applied to the data sharing authorization method based on blockchain. The system includes:

[0086] The designated department authorization subsystem includes a blockchain network, a smart contract module, an authorization request processing module, an authorization execution module and an audit log module; a blockchain network, in which each data department serves as a node of the network and is equipped with its own private key and public key; a smart contract module, which is used to define the rules and conditions for data access and automatically verify and process data access requests sent from one department to another; an authorization request processing module, which sends the request to the blockchain network when a data access request is received, and the smart contract module verifies its validity and compliance; an authorization execution module, which automatically executes the authorization operation once the request is verified, allowing the requesting department to access or obtain the data; an audit log module, which is used to record all authorization operations on the blockchain to form an unalterable audit log for data tracking and supervision.

[0087] The scenario-based authorization subsystem includes a data sharing business domain building module, a blockchain storage and transmission module, and a smart contract execution module; the data sharing business domain building module builds a data sharing business domain centered on a specific business scenario or theme; the permission management module allows members within the business domain to share and access data resources based on predefined rules and permissions; the blockchain storage and transmission module provides a decentralized, tamper-proof data storage and transmission platform to ensure the security and transparency of data sharing; the smart contract execution module automatically executes predefined rules to ensure the compliance and efficiency of data sharing, and supports dynamic adjustment of data sharing strategies and permissions.

[0088] Based on the application authorization subsystem, it includes a cross-departmental data sharing platform, a data request and processing module, a permission verification and authorization module, and a data security and privacy protection module; the cross-departmental data sharing platform realizes real-time and secure sharing of data through blockchain technology; the data request and processing module is used to receive and process data requests from the process of handling government service items; the permission verification and authorization module verifies the permission of the requesting department and performs authorization operations according to the needs of government service items; the data security and privacy protection module ensures that the security and privacy of data are protected during the data sharing process.

[0089] The data return authorization subsystem includes big data center nodes, data collection and processing modules, smart contract trigger modules, data return rule definition modules, and audit log recording modules; big data center nodes all participate in data sharing as nodes of the blockchain network; data collection and processing modules, ministries and commissions collect and process data through unified business systems; smart contract trigger modules, when data collection and processing are completed, automatically trigger the data return process; data return rule definition module, used to define the rules and conditions for data return, to ensure that only qualified data can be returned to the local big data center;

[0090] The audit log recording module automatically records the entire process of data reflow on the blockchain, forming an audit log that cannot be tampered with.

[0091] The inter-provincial call authorization subsystem includes an inter-provincial data call interface module, which provides the function of inter-provincial data call; a blockchain transparency, security and traceability guarantee module, which ensures the transparency, security and traceability of inter-provincial data calls; a smart contract execution and verification module, which automatically executes and verifies the rules and conditions of inter-provincial data calls; a data transmission and encryption module, which ensures that the security and privacy of data are protected during the inter-provincial data call process; and a call efficiency and quality improvement module, which improves the efficiency and quality of inter-provincial services through the application of blockchain technology.

[0092] The aggregation and distribution authorization subsystem realizes distributed storage and management of data through blockchain technology, improving the efficiency and security of data aggregation and distribution.

[0093] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A data sharing authorization method based on blockchain, characterized in that: The method comprises the following steps: Authorization from designated departments; Authorization based on scenarios; Authorization by application; Data return authorization; Cross-provincial call authorization uses blockchain technology to achieve transparency, security and traceability of cross-provincial data calls. Through the blockchain platform, big data centers or local commissions and bureaus can efficiently and securely call cross-provincial service interfaces to obtain required data. Blockchain technology ensures the compliance and efficiency of cross-provincial data calls and improves the overall quality and efficiency of cross-provincial services. Aggregation and distribution authorization realizes distributed storage and management of data through blockchain technology, thus providing a more efficient and secure solution for data aggregation and distribution.

2. According to a blockchain-based data sharing authorization method according to claim 1, it is characterized in that: Authorization by designated departments includes the following steps: In the blockchain network, each data department, as a node of the network, has independent private and public keys. The rules and conditions for data access are defined through smart contracts to achieve automated authorization of data. When a department needs to access or request data, it sends an authorization request to the department that owns the data; the request is broadcast in the blockchain network and its validity and compliance are automatically verified by the smart contract; After verification, the smart contract automatically executes the authorization operation, allowing the requesting department to access or obtain the data, and records all authorized operations on the blockchain to form an unalterable audit log.

3. According to a blockchain-based data sharing authorization method according to claim 1, it is characterized in that: Scenario-based authorization includes the following steps: Build a data sharing business domain centered on a specific business scenario or theme; Within the business domain, relevant parties are allowed to share and access data resources according to predefined rules and permissions; Blockchain technology provides a decentralized, tamper-proof data storage and transmission platform, ensuring the security and transparency of data sharing; Smart contracts automatically execute predefined rules to ensure the compliance and efficiency of data sharing and support dynamic adjustment of data sharing policies and permissions.

4. According to a blockchain-based data sharing authorization method according to claim 1, it is characterized in that: Authorization by application includes the following steps: Build a cross-departmental data sharing platform and use blockchain technology to achieve real-time and secure data sharing; in the process of handling government service matters, such as real estate registration, automatically obtain data support from multiple departments through the blockchain platform; blockchain technology ensures the automation, transparency and security of data sharing, and improves the efficiency and quality of government services.

5. According to a blockchain-based data sharing authorization method according to claim 1, it is characterized in that: Data reflow authorization includes the following steps: Data is collected and processed through a unified business system, and the processed data is returned to the local big data center; blockchain technology ensures the security, accuracy and traceability of data return; the big data center, as a node in the blockchain network, automatically triggers the data return process through smart contracts, and records the entire process of data return on the blockchain, forming an unalterable audit log.

6. A blockchain-based data sharing authorization system, applied to the blockchain-based data sharing authorization method according to any one of claims 1 to 5, characterized in that: The system comprises: Designated department authorization subsystem, including blockchain network, smart contract module, authorization request processing module, authorization execution module and audit log module; The scenario-based authorization subsystem includes a data sharing business domain building module, a blockchain storage and transmission module, and a smart contract execution module; Based on the application authorization subsystem, it includes a cross-departmental data sharing platform, a data request and processing module, a permission verification and authorization module, and a data security and privacy protection module; Data backflow authorization subsystem, including big data center node, data collection and processing module, smart contract trigger module, data backflow rule definition module and audit log recording module; The inter-provincial call authorization subsystem includes an inter-provincial data call interface module, which provides the function of inter-provincial data call; a blockchain transparency, security and traceability guarantee module, which ensures the transparency, security and traceability of inter-provincial data calls; a smart contract execution and verification module, which automatically executes and verifies the rules and conditions of inter-provincial data calls; a data transmission and encryption module, which ensures that the security and privacy of data are protected during the inter-provincial data call process; and a call efficiency and quality improvement module, which improves the efficiency and quality of inter-provincial services through the application of blockchain technology. The aggregation and distribution authorization subsystem realizes distributed storage and management of data through blockchain technology, improving the efficiency and security of data aggregation and distribution.

7. A blockchain-based data sharing authorization system according to claim 6, characterized in that: In the designated department authorization subsystem, the blockchain network, in which each data department acts as a node of the network and is equipped with its own private key and public key; Smart contract module, which is used to define the rules and conditions for data access and automatically verify and process data access requests from one department to another; The authorization request processing module, when receiving a data access request, sends the request to the blockchain network, and the smart contract module verifies its validity and compliance; Authorization execution module, once the request is verified, the module automatically performs the authorization operation, allowing the requesting department to access or obtain data; The audit log module is used to record all authorized operations on the blockchain, forming an unalterable audit log for data tracking and supervision.

8. According to claim 6, a data sharing authorization system based on blockchain is characterized in that: In the scenario-based authorization subsystem, the data sharing business domain building module builds the data sharing business domain centered on a specific business scenario or theme; The permission management module allows members within the business domain to share and access data resources according to predefined rules and permissions; Blockchain storage and transmission module, providing a decentralized, tamper-proof data storage and transmission platform to ensure the security and transparency of data sharing; The smart contract execution module automatically executes predefined rules to ensure the compliance and efficiency of data sharing, and supports dynamic adjustment of data sharing policies and permissions.

9. According to claim 6, a data sharing authorization system based on blockchain is characterized in that: Based on the application authorization subsystem, the cross-departmental data sharing platform realizes real-time and secure data sharing through blockchain technology; The data request and processing module is used to receive and process data requests from the process of handling government service matters; The authority verification and authorization module verifies the authority of the requesting department and performs authorization operations according to the needs of government service items; The data security and privacy protection module ensures that data security and privacy are protected during the data sharing process.

10. A data sharing authorization system based on blockchain according to claim 6, characterized in that: In the data return authorization subsystem, the big data center nodes all participate in data sharing as nodes of the blockchain network; Data collection and processing module: ministries and commissions collect and process data through unified business systems; The smart contract trigger module automatically triggers the data return process after completing data collection and processing; The data return rule definition module is used to define the rules and conditions for data return, ensuring that only data that meets the conditions can be returned to the local big data center; The audit log recording module automatically records the entire process of data reflow on the blockchain, forming an audit log that cannot be tampered with.

Images