Cross-chain data penetrating sandbox supervision method and system based on ideal grid attribute encryption on blockchain

Through the cross-chain data penetration sandbox supervision method with ideal grid attribute encryption on the blockchain, the problems of poor response timeliness and easy cracking of encryption algorithms in cross-chain data supervision are solved, and secure access control and compliance detection of cross-chain data are realized, ensuring data security and compliance.

CN119577034BActive Publication Date: 2025-10-03TIANJIN UNIVERSITY OF TECHNOLOGY
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202411720432.X
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-11-28
Publication Date
2025-10-03
Estimated Expiration
2044-11-28

AI Technical Summary

Technical Problem

Existing blockchain technology has poor response timeliness in cross-chain data supervision, making it difficult to achieve real-time detection and reporting, and unable to effectively prevent data leakage. In addition, encryption algorithms face the threat of quantum computing, compliance is difficult to guarantee, and the regulatory system lacks real-time monitoring and anomaly detection capabilities.

Method used

A cross-chain data penetration sandbox supervision method based on ideal lattice attribute encryption on the blockchain is adopted. A supervision sandbox is built through a third-party platform. Public and private keys are generated using the ideal lattice encryption algorithm to build a decentralized network. Data encryption, compliance detection, permission control and anomaly detection are achieved to ensure data security and compliance.

Benefits of technology

It provides secure access control for cross-chain data, resists quantum computing attacks, ensures data privacy and integrity, promotes cross-chain data compliance operations, reduces regulatory burdens, enables real-time supervision and compliance assessment, and prevents data abuse and leakage.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119577034B_ABST
    Figure CN119577034B_ABST
Patent Text Reader

Abstract

The present invention discloses a cross-chain data penetrating sandbox supervision method and system with ideal lattice attribute encryption on a blockchain. The method includes the following steps: a third-party platform selects and builds a blockchain, configures each node on the consortium chain, and forms a regulatory sandbox; the third-party platform initializes the sandbox, i.e., generates a public key and a master private key according to the ideal lattice encryption algorithm; the data provider, data user, and regulatory agency each register their identities on the blockchain; the data provider organizes the cross-chain data to be shared and defines its access policy; the data user initiates an access request for the data and submits an access application; after obtaining access authorization, the data user uses its attribute private key and decryption ciphertext to decrypt the data; the regulatory agency monitors the data flow and access status in real time through the blockchain within the regulatory sandbox, and identifies abnormal access patterns through the integrated anomaly detection mechanism of the smart contract. This application ensures the privacy and integrity of cross-chain data.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a cross-chain data penetrating sandbox supervision method and system with ideal grid attribute encryption on a blockchain. Background Art

[0002] With the vigorous development of blockchain technology, a large amount of transaction data from different fields is stored on the blockchain and exchanged with each other through various cross-domain technologies. If abnormal situations cannot be regulated in a timely manner, resulting in cross-chain data leakage, there will be irreversible and instantaneous risks that spread globally.

[0003] From the perspective of the current data supervision system, the existing supervision system has poor response timeliness, some links require manual intervention, and cannot achieve real-time detection and reporting of abnormal situations in the supervision process. In addition, due to the complexity and diversity of nodes involved in interactive operations such as cross-chain data exchange and sharing, the current system often finds it difficult to quickly locate problem nodes after a data leakage incident occurs, making it difficult to effectively prevent the abuse and improper use of cross-chain data.

[0004] From the perspective of cross-chain data security, the rapid development of quantum computing technology poses unprecedented security threats to existing encryption algorithms, potentially making currently widely used encryption techniques theoretically easy to crack. This is particularly true during cross-chain data exchange, where chain data can be exposed to users on any chain, making it difficult to strictly control access to data. Once encryption measures are cracked, attackers can easily obtain sensitive information or tamper with data, significantly increasing the risk of data attack and abuse, identity theft, or the leakage of trade secrets, potentially damaging the commercial competitiveness of participating parties.

[0005] From the perspective of the entire cross-chain data exchange and supervision process, existing mechanisms cannot simultaneously meet compliance and regulatory requirements. It is difficult to ensure that data uploads comply with various compliance regulations. In particular, data transmitted between different chains may not undergo strict compliance review, and it is impossible to ensure that it complies with relevant laws and regulations, leading to an increase in the potential risk of compliance issues. At the same time, the regulatory system lacks effective real-time monitoring and anomaly detection capabilities, delaying responses to potential violations or non-compliant behaviors. This makes it difficult for participants to take preventative measures or adjust regulatory strategies in a timely manner, increasing the regulatory blind spot of the cross-chain data flow process.

[0006] In order to solve the above problems, it is necessary to develop a method of penetrating supervision based on blockchain technology and ideal lattice attribute-based encryption using a regulatory sandbox mechanism. Summary of the Invention

[0007] In response to the technical problems pointed out in the above background technology, the purpose of the present invention is to provide a cross-chain data penetration sandbox supervision method and system with ideal grid attribute encryption on the blockchain.

[0008] To achieve the purpose of the present invention, the technical solution provided by the present invention is as follows:

[0009] First aspect

[0010] The present invention provides a cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on a blockchain, comprising the following steps:

[0011] Step 1: The third-party platform selects and builds a blockchain, configures each node on the consortium chain, forms a regulatory sandbox, identifies participating data providers, data users, and regulatory agencies, and all participants jointly formulate sandbox rules to clarify the specifications for data uploading, shared access, and supervision;

[0012] Step 2: The third-party platform initializes the sandbox, generating the public key IPK and master private key MPK based on the ideal lattice encryption algorithm, and deploying smart contracts based on the different identity requirements of data providers, data users, and regulators to build a decentralized network in the regulatory sandbox;

[0013] Step 3: Data providers, data users, and regulators each register their identities on the blockchain, providing identity type and data source information. The smart contract generates a unique identifier OID based on the rules and records it on the blockchain. The third-party platform assigns a specific attribute vector set A based on the user's role and the permissions granted in the sandbox rules, and generates the corresponding private key ISK_i for the user distribution.

[0014] Step 4: The data provider organizes the cross-chain data M to be shared and defines its access policy S. The data M is then encrypted into ciphertext C and uploaded to the blockchain via a smart contract. The blockchain also records the relevant metadata, upload timestamp, and hash value. The smart contract automatically performs compliance checks on the uploaded data to ensure that it complies with the regulatory rules established by the regulatory sandbox. Based on this, the data provider's identity and permissions are verified to ensure the legitimacy of the cross-domain data.

[0015] Step 5: The data user initiates a data access request and submits an access application. The smart contract checks the user's identity OID and attribute vector set A to determine whether it complies with the provider's data access policy S. If it does, a visitor-specific authorization token is generated; otherwise, access is denied. The access request and results are recorded in the blockchain to achieve transparent supervision and timely traceability.

[0016] Step 6: After the data user obtains access authorization, it uses its attribute private key ISK_i and decrypted ciphertext C_i to decrypt the data. After the data user's attributes meet the data provider's access policy S, the data is successfully decrypted to obtain the plaintext data Mi_i;

[0017] Step 7: The regulator uses blockchain monitoring within the regulatory sandbox to monitor data flows and access in real time, identifies abnormal access patterns through the smart contract’s integrated anomaly detection mechanism, and sends alerts to all participants.

[0018] Step 8: All participants can provide feedback on the operation logs over a period of time to evaluate the effectiveness of the current blockchain regulatory sandbox and make optimizations and adjustments.

[0019] Second aspect

[0020] The present invention provides a cross-chain data penetration sandbox supervision system with ideal grid attribute encryption on the blockchain, which executes the above method.

[0021] Compared with the prior art, the present invention has the following beneficial effects:

[0022] 1. This invention provides an effective cross-chain data security access control mechanism by effectively combining an attribute-based encryption algorithm on an ideal lattice with the decentralized and tamper-proof nature of blockchain. By publishing reasonable attribute allocation and access policies on the blockchain, diverse users can securely upload, access, and decrypt trusted cross-chain data. Data users must first apply for cross-chain data operations. Only after the regulatory sandbox determines that they meet the access identity permissions and access policies provided by the data provider can they view and perform other operations on the cross-chain data. The sandbox also records their operation logs, thus ensuring the privacy and integrity of cross-chain data. Furthermore, the attribute-based encryption algorithm scheme on the ideal lattice is resistant to quantum computing attacks, ensuring that even attackers with powerful computational capabilities cannot decipher ciphertext. Security is enhanced by the use of hash functions and random numbers, preventing replay attacks and ciphertext analysis.

[0023] 2. This invention enables participants from different industries and fields to conduct cross-chain data operations within the regulatory sandbox with a lower regulatory burden, while maintaining ongoing oversight from regulators. This not only promotes collaboration and data sharing among participants, but also ensures the compliance and legality of cross-chain data flows. The regulatory sandbox also provides a flexible environment for observing and assessing the security of cross-chain data, ensuring early review and intervention of unusual operations to prevent potential compliance issues or market manipulation. The regulatory sandbox also establishes a participant feedback channel to gather input from multiple parties, regularly evaluate the effectiveness of the regulatory sandbox, and adjust compliance review standards and data sharing rules. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 A diagram of the system architecture provided by an embodiment of the present invention;

[0025] Figure 2 A schematic diagram of the general workflow of the regulatory sandbox system provided in an embodiment of the present invention;

[0026] Figure 3 This is a workflow diagram for uploading, encrypting, and decrypting cross-chain data in an embodiment of the present invention. DETAILED DESCRIPTION

[0027] The following is a clear and complete description of the technical solutions in the embodiments of the present invention, in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts are within the scope of protection of the present invention.

[0028] In response to the technical problems pointed out in the background technology, an expected method to solve data leakage and cross-chain data penetration supervision is: to form a sandbox supervision mechanism, in which cross-chain data is allowed to be uploaded to the blockchain for sharing or exchange before being encrypted using encryption technology, and it is stipulated that only participants who meet the set identity authority conditions can view the data, so as to reduce the leakage of cross-domain data on the blockchain and shorten the time to find the leaker; set the regulator's blockchain to record the data upload, viewing and other operations of different participants in real time, report and trace abnormal situations in time, reduce the losses to multiple participants after cross-chain data leakage, and form a supervision method with regulators, regulated and professional service providers as the main participants, forming a flat supervision method that reduces compliance costs and improves supervision efficiency, to combat data leakage caused by possible quantum attacks, and meet the new supervision requirements of full time and space, full life cycle, automation, intelligence, security and trustworthiness.

[0029] like Figure 1 As shown, the overall architecture of the embodiment of this application consists of four participants: a third-party platform, a data provider, a data user, and a regulatory agency. The four participants work independently and collaborate with each other, as follows:

[0030] (1) Third-party platforms

[0031] The third-party platform is primarily responsible for selecting and building a blockchain, configuring the nodes within the consortium chain, and forming a regulatory sandbox. It also helps all participants jointly develop sandbox rules, clarifying the specifications for data upload, shared access, and oversight. The platform then initializes the sandbox, generating the public key (IPK) and master private key (MPK) based on a given ideal lattice attribute-based encryption algorithm. It then deploys smart contracts for the diverse identity requirements of data providers, data users, and regulators, distributing parameters such as unique identifiers and user vector attributes, ultimately building a decentralized network within the regulatory sandbox.

[0032] (2) Data provider

[0033] Data providers (DPs) upload data to the blockchain according to the rules jointly established within the sandbox, providing metadata such as data type, upload time, and encrypted access policy. After encrypting the data using Attribute-Based Encryption (ABE) on the ideal lattice, they receive an encryption key from the blockchain for storage. Data providers must ensure that data is encrypted and stored on the blockchain in a JSON format that complies with the platform's requirements; plaintext data cannot be stored directly.

[0034] (3) Data users

[0035] When submitting a data access request, a data user (DU) must provide the smart contract with its data identifier (OID), user ID, and user attribute vector set (A_DU). Data users can access data only after passing user verification and satisfying access policy S. If a data user receives an access authorization token, they can access the data and use their private key to decrypt the target ciphertext data. However, if the decryption token is used beyond a certain range or time, it will become invalid, prohibiting the data user from forwarding or illegally sharing it.

[0036] (4) Regulatory agencies

[0037] The Regulatory Authority (RI) is responsible for monitoring all data uploads, access, and decryption operations to ensure data content compliance. It has access to all access logs and can intervene as needed. It also regularly reviews data uploads, access patterns, and user behavior to ensure there is no misuse. Regulators can also use smart contracts to automate the audit process, identifying potentially anomalous access patterns. When anomalies are detected, alerts are automatically issued and recorded on the blockchain for further investigation.

[0038] like Figure 2-3As shown, the method provided in this embodiment mainly involves four types of participants: data providers, data users, regulators, and third-party platforms. It achieves effective supervision of encrypted upload, permission access, and data flow of cross-domain blockchain data, ensuring the compliance and security of cross-chain data throughout the entire process, while promoting data sharing between different domains. Specifically, it includes the following steps:

[0039] Step 1: The third-party platform selects and builds a blockchain, configures each node on the consortium chain, forms a regulatory sandbox, and identifies participating data providers, data users, and regulatory agencies. All participants jointly formulate sandbox rules to clarify the specifications for data uploading, shared access, and supervision.

[0040] Step 2: The third-party platform initializes the sandbox, that is, generates the public key IPK and the master private key MPK according to the ideal lattice encryption algorithm, and deploys smart contracts according to the different identity requirements of data providers, data users and regulators to build a decentralized network in the regulatory sandbox.

[0041] Step 3: Data providers, data users, and regulators each register their identities on the blockchain, providing information such as identity type and data source. The smart contract generates a unique identifier (OID) based on the rules and records it on the blockchain. Based on the user's role and the permissions granted in the sandbox rules, the third-party platform assigns a specific attribute vector set A and generates a corresponding private key (ISK_i) for each user.

[0042] Step 4: The data provider uploads and organizes the cross-chain data M to be shared and defines its access policy S. The data M is then encrypted into ciphertext C and uploaded to the blockchain via a smart contract. The blockchain also records the relevant metadata, upload timestamp, and hash value. The smart contract automatically performs compliance checks on the uploaded data to ensure compliance with the regulatory rules established by the regulatory sandbox. Based on this, the data provider's identity and permissions are verified to ensure the legitimacy of the cross-domain data.

[0043] Step 5: The data user initiates a data access request and submits an access application. The smart contract checks the user's identity OID and attribute vector set A to determine whether it complies with the provider's data access policy S. If so, a dedicated authorization token is generated for the user; otherwise, access is denied. The access request and results are recorded on the blockchain, enabling transparent supervision and timely traceability.

[0044] Step 6: After the data user obtains access authorization, it uses its attribute private key ISK_i and decrypted ciphertext C_i to decrypt the data. After the data user's attributes meet the data provider's access policy S, the data is successfully decrypted to obtain the plaintext data M_i.

[0045] Step 7: Regulators monitor the flow and access of data in real time through blockchain monitoring within the regulatory sandbox, identify abnormal access patterns through the integrated anomaly detection mechanism of smart contracts, and send early warnings to all participants.

[0046] Step 8: All participants can provide feedback on the operation logs over a period of time to evaluate the effectiveness of the current blockchain regulatory sandbox and make optimizations and adjustments.

[0047] Preferably, the data rules in the regulatory sandbox in step 1 are: all operations of different participants in the sandbox must comply with GDPR rules. The details are as follows:

[0048] 1.1: The Data Provider (DP) is responsible for uploading data to the blockchain and encrypting it using Attribute-Based Encryption (ABE) on the ideal lattice. The Data Provider must provide metadata about the data, including data type, upload time, and encrypted access policy. Data must be encrypted and stored on the blockchain in a JSON format that complies with the platform's specifications. Plaintext data must not be stored.

[0049] 1.2: A data user (DU) submits a data access request, providing the smart contract with the data identifier OID, user ID, and user attribute vector set A_DU. Once the data user passes user verification and satisfies access policy S, they are granted access to the data. If the request is compliant, the blockchain returns an access authorization token, which decrypts the encrypted data using their private key. The decryption token obtained by the data user is limited to specific use and is prohibited from being forwarded or illegally shared.

[0050] 1.3: The Regulatory Authority (RI) is responsible for monitoring all data uploads, access, and decryption operations to ensure compliance. They have access to all access logs and can intervene as needed. They are required to regularly review data uploads, access patterns, and user behavior to ensure there is no abuse. All actions by participating parties generate audit logs on the blockchain for the RI to query and analyze. Smart contracts are used to automate the audit process, identifying potentially anomalous access patterns. When anomalies are detected, alerts are automatically issued and recorded on the blockchain for further investigation by the RI.

[0051] Preferably, the sandbox initialization in step 2 is as follows: formulate a secure hash function H on the blockchain. Input a large prime number p and select an ideal lattice G generator g to generate a public key IPK and a master private key MPK. The generation formula is IPK=g α modp, where α is chosen randomly.

[0052] Preferably, the specific implementation method of step 3 is: the user provides his identity type, unique identity number and other information, obtains the unique identifier OID generated by the smart contract according to the rules, and is recorded on the blockchain. The third-party platform generates a unique identifier OID based on each user U i The identity type and the permissions granted in the sandbox rules are assigned to the user-specific attribute vector A, which consists of l bit strings of length n, that is, A={A1,A2,…An}. For user U i Each attribute A j ∈A generates the corresponding private key ISK = {e1, e2, …en}.

[0053] Preferably, the specific implementation method of step 4 is as follows: the data provider defines an access policy S for the cross-chain data M, where S = (a1, a2, ..., an), and the threshold value is k, indicating that at least k attribute values ​​of the data user attribute vector and the encrypted public key vector must be the same before the user can decrypt the data; then the data provider identity attribute set A_DP is provided, and the data M is regarded as a ring polynomial with coefficients {0, 1} and encrypted into a ciphertext C, where C = E(M, S, PK) = (c0, c i The blockchain also records relevant metadata, upload timestamps, and hash values, automatically performing compliance checks and verifying the identity and permissions of data providers to ensure compliance with the rules set by the regulatory sandbox.

[0054] Preferably, the specific implementation method of step 5 is: the data user U i A decryption request is made, and its attribute set A_DU is provided. When its attributes comply with the access policy S, the smart contract continues to execute, generates an access authorization token, and executes step 6; if it does not comply with the access policy S, the access fails.

[0055] Preferably, step 6 comprises the following steps:

[0056] Step 6.1: After the data user meets the viewing permission and obtains a temporary access authorization token, he uses the user private key ISK_DU and decryption ciphertext C_DU to decrypt the target data M.

[0057] Step 6.2: When decrypting, the data user will first obtain the shared key K=H(c1,A i ), and obtain the private key to restore the plaintext, the formula is

[0058] Step 6.3: After successfully decrypting the data using the private key to obtain the plaintext data Mi, the data user can view, download, share, and generate a record log.

[0059] Preferably, the specific implementation method of step 7 is: the regulatory agency RI monitors the flow and access of data in real time through the operations recorded by the blockchain in the regulatory sandbox, identifies abnormal access patterns through the integrated anomaly detection mechanism of the smart contract, and sends early warnings to each participant to track the source of the abnormal data user.

[0060] Preferably, the specific implementation method of step 8 is: after the data in the sandbox is uploaded and viewed a certain number of times, all participants can provide feedback on the operation logs during this period, evaluate the effectiveness of the current blockchain regulatory sandbox, and make optimizations and adjustments.

[0061] In addition, this embodiment also provides a cross-chain data penetration sandbox supervision system with ideal grid attribute encryption on the blockchain, which executes the above method.

[0062] Finally, it should be noted that the above embodiments are merely examples and illustrations of the present invention and are not intended to limit the present invention to the described embodiments. Furthermore, those skilled in the art will appreciate that the present invention is not limited to the above embodiments and that various variations and modifications may be made based on the teachings of the present invention, all of which fall within the scope of the present invention.

Claims

1. A cross-chain data penetrating sandbox supervision method based on ideal grid attribute encryption on blockchain, characterized in that: The following steps are involved: Step 1: The third-party platform selects and builds a blockchain, configures each node on the consortium chain, forms a regulatory sandbox, identifies participating data providers, data users, and regulatory agencies, and all participants jointly formulate sandbox rules to clarify the specifications for data uploading, shared access, and supervision; Step 2: The third-party platform initializes the sandbox, generating the public key IPK and master private key MPK based on the ideal lattice encryption algorithm, and deploying smart contracts based on the different identity requirements of data providers, data users, and regulators to build a decentralized network in the regulatory sandbox; Step 3: Data providers, data users, and regulators register their identities on the blockchain, providing identity type and data source information. The smart contract generates a unique identifier (OID) based on the rules and records it on the blockchain. The third-party platform assigns a specific attribute vector set A based on the user's role and the permissions granted in the sandbox rules, and generates the corresponding private key ISK_i for the user distribution; Step 4: The data provider organizes the cross-chain data M to be shared and defines its access policy S. The data M is then encrypted into ciphertext C and uploaded to the blockchain via a smart contract. The blockchain also records the relevant metadata, upload timestamp, and hash value. The smart contract automatically performs compliance checks on the uploaded data to ensure that it complies with the regulatory rules established by the regulatory sandbox. Based on this, the data provider's identity and permissions are verified to ensure the legitimacy of the cross-domain data. Step 5: The data user initiates a data access request and submits an access application. The smart contract checks the user's identity OID and attribute vector set A to determine whether it complies with the provider's data access policy S. If it does, a visitor-specific authorization token is generated; otherwise, access is denied. The access request and results are recorded in the blockchain to achieve transparent supervision and timely traceability. Step 6: After the data user obtains access authorization, it uses its attribute private key ISK_i and decrypted ciphertext C_i to decrypt the data. After the data user's attributes meet the data provider's access policy S, the data is successfully decrypted to obtain the plaintext data Mi_i; Step 7: The regulator uses blockchain monitoring within the regulatory sandbox to monitor data flows and access in real time, identifies abnormal access patterns through the smart contract’s integrated anomaly detection mechanism, and sends alerts to all participants. Step 8: All participants can provide feedback on the operation logs over a period of time to evaluate the effectiveness of the current blockchain regulatory sandbox and make optimizations and adjustments.

2. The cross-chain data penetrating sandbox supervision method for ideal grid attribute encryption on the blockchain according to claim 1 is characterized in that: The data rules in the regulatory sandbox in step 1 are as follows: all operations of different participants in the sandbox must comply with GDPR rules, as follows: 1.1: The data provider (DP) is responsible for uploading data to the blockchain and encrypting the data using attribute-based encryption (ABE) on the ideal lattice. The data provider must provide metadata for the data, including data type, upload time, and encrypted access policy. The data must be encrypted in the JSON format specified by the platform and stored on the blockchain. Plaintext data cannot be stored. 1.2: The data user DU submits a data access request and provides the smart contract with the data identifier OID, user ID, and user attribute vector set A_DU; After the data user passes the verification and satisfies the access policy S, the user can access the data. If the user requests compliance, the blockchain will return an access authorization token. At this time, the user will use the private key to decrypt the encrypted data. The decryption token obtained by the data user is limited to use within a specific scope and is prohibited from being forwarded or illegally shared. 1.3: The regulatory agency (RI) is responsible for monitoring all data upload, access, and decryption operations to ensure compliance. It has the authority to view all access logs and can intervene as needed. It is also required to regularly review data uploads, access patterns, and user behavior to ensure there is no abuse. All operations of the participants will generate audit logs on the blockchain for the regulatory agency to query and analyze. At the same time, smart contracts are used to automate the audit process and identify potential abnormal access patterns. When anomalies are detected, an alarm will be automatically issued and recorded in the blockchain for further investigation by the regulatory agency.

3. The cross-chain data penetration sandbox supervision method based on ideal grid attribute encryption on the blockchain according to claim 2 is characterized in that: The sandbox initialization in step 2: formulate a secure hash function H on the blockchain, input a large prime number p and select an ideal lattice G generator g, generate the public key IPK and the master private key MPK, and the generation formula is IPK = g α modp, where α is chosen randomly.

4. The cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on the blockchain according to claim 3 is characterized in that: The specific implementation method of step 3 is as follows: the user provides his / her identity type and unique identity number information, obtains the unique identifier OID generated by the smart contract according to the rules, and is recorded on the blockchain; the third-party platform generates a unique identifier OID based on each user’s UID. i The identity type and the permissions granted in the sandbox rules are assigned to the user-specific attribute vector A, which consists of l bit strings of length n, that is, A={A1,A2,…An}. For user U i Each attribute A j ∈A generates the corresponding private key ISK = {e1, e2, …en}.

5. The cross-chain data penetrating sandbox supervision method for ideal grid attribute encryption on the blockchain according to claim 4 is characterized in that: The specific implementation method of step 4 is as follows: the data provider defines an access policy S for the cross-chain data M, where S = (a1, a2, ..., an), and the threshold value is k, indicating that at least k attribute values ​​in the data user attribute vector and the encrypted public key vector must be the same before the user can decrypt the data; then the data provider identity attribute set A_DP is provided, and the data M is regarded as a ring polynomial with coefficients {0, 1} and encrypted into a ciphertext C, where C = E(M, S, PK) = (c0, c i ), i∈l; The blockchain simultaneously records relevant metadata, upload timestamps, and hash values, automatically performs compliance testing, and verifies the identity and authority of data providers to ensure compliance with the rules set by the regulatory sandbox.

6. The cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on the blockchain according to claim 5 is characterized in that: The specific implementation method of step 5 is as follows: the data user U i A decryption request is made, and its attribute set A_DU is provided. When its attributes comply with the access policy S, the smart contract continues to execute, generates an access authorization token, and executes step 6; if it does not comply with the access policy S, the access fails.

7. The cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on the blockchain according to claim 6 is characterized in that: The step 6 comprises the following steps: Step 6.1: After the data user meets the viewing permission and obtains a temporary access authorization token, he / she uses the user private key ISK_DU and the decrypted ciphertext C_DU to decrypt the target data M; Step 6.2: When decrypting, the data user will first obtain the shared key K=H(c1,A i ), and obtain the private key to restore the plaintext, the formula is Step 6.3: After successfully decrypting the data using the private key to obtain the plaintext data Mi, the data user can view, download, share, and generate a record log.

8. The cross-chain data penetrating sandbox supervision method for ideal grid attribute encryption on the blockchain according to claim 7 is characterized in that: The specific implementation method of step 7 is as follows: the regulatory agency RI monitors the flow and access of data in real time through the operations recorded on the blockchain in the regulatory sandbox, identifies abnormal access patterns through the integrated anomaly detection mechanism of the smart contract, sends warnings to each participant, and tracks the source of the abnormal data users.

9. The cross-chain data penetration sandbox supervision method for ideal grid attribute encryption on the blockchain according to claim 8 is characterized in that: The specific implementation method of step 8 is as follows: after the data in the sandbox has been uploaded and viewed a certain number of times, all participants can provide feedback on the operation logs during this period, evaluate the effectiveness of the current blockchain regulatory sandbox, and make optimizations and adjustments.

10. A cross-chain data penetrating sandbox supervision system with ideal grid attribute encryption on the blockchain, characterized by: The system executes the method according to any one of claims 1 to 9.

Citation Information

Patent Citations

  • Digital collection issuing supervision method and device based on block chain, and storage medium

    CN115310056A

  • Heterogeneous multi-chain data cross-domain access control method based on threshold homomorphic encryption

    CN118337359A