Data access authority management method and system based on smart contract

Abstract

The invention provides a data access authority management method and system based on a smart contract. The method comprises the steps of obtaining a data access event of a block chain in a past first time period; wherein the duration of the first time period is the standard duration; based on the data access event, a temporary authority management strategy and temporary authority management duration are decided; based on the temporary authority management strategy, performing corresponding management on the data access authority of the block chain in a second time period in the future; wherein the duration of the second time period is the temporary authority management duration. According to the data access authority management method and system based on the smart contract, the data access authority of the block chain is dynamically and flexibly adjusted according to the access demand of the data, and the applicability of the system is greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of rights management, and in particular to a data access rights management method and system based on smart contracts. Background Art

[0002] Blockchain is a decentralized distributed ledger technology that can store and transmit data between multiple nodes. Smart contracts in blockchain are self-executing contracts whose terms and conditions are written into the contract in the form of code and can be automatically executed when certain conditions are met. The advantages of smart contracts are their automation, transparency and trustlessness, which makes them widely used in various scenarios.

[0003] In blockchain, traditional data access rights management is mostly static, that is, the user's access rights to data are determined by the rules preset in the smart contract.

[0004] However, in actual applications, data access requirements may change with time, environment, user behavior and other factors. Therefore, how to flexibly adjust the data access rights of the blockchain based on this has become a new challenge. Summary of the invention

[0005] One of the purposes of the present invention is to provide a data access permission management method based on a smart contract, which analyzes the data access events recorded in the blockchain in the past first time period, combines the existing permission management strategy in the current smart contract, decides the temporary management strategy of permission and the temporary management duration of permission, and temporarily updates the smart contract in the future second time period based on the temporary management strategy of permission to perform a corresponding first temporary management of the data access permissions of the blockchain, and dynamically and flexibly adjusts the data access permissions of the blockchain according to the access requirements of the data, thereby greatly improving the applicability of the system.

[0006] An embodiment of the present invention provides a data access rights management method based on a smart contract, comprising: Based on the data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain, the temporary authority management strategy and the temporary authority management duration are determined; wherein the duration of the first time period is the first standard duration; Based on the temporary permission management strategy, the smart contract is temporarily updated in a second time period in the future to perform a corresponding first temporary management of the data access rights of the blockchain; wherein the duration of the second time period is the temporary permission management duration.

[0007] Optionally, the data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain, the temporary management strategy for decision-making authority and the temporary management duration of authority include: Performing feature description processing on the data access event to obtain a first feature description vector; Determine mapping knowledge corresponding to the first feature description vector from a mapping knowledge base; Invite data access rights to the blockchain's data access nodes; Obtaining acceptance feedback information of the data access node that accepts the data access permission invitation; Extract the mapping relationship between the received feedback information and the mapping knowledge; Performing feature description processing on the mapping relationship to obtain a second feature description vector; Determining decision knowledge corresponding to the second feature description vector from a decision knowledge base; Compare decision-making knowledge, temporary management strategy of decision-making authority and duration of temporary management of authority.

[0008] Optionally, the data access rights management method based on smart contracts also includes: When multiple users in the same user group jointly access data on the blockchain in the third time period in the future, an access association circle of each user is generated; wherein each user in the same user group is bound in advance, and at least one user in the same user group is related to the temporary permission management policy; the third time period in the future is after the second time period in the future and is adjacent to the second time period in the future, and the duration of the third time period is the second standard duration; Based on the access interaction circle, the temporary management strategy of permissions is modified; Based on the revised temporary permission management strategy, the smart contract is temporarily updated in the third time period in the future to perform a corresponding second temporary management of the data access rights of the blockchain.

[0009] Optionally, generating the access association circle of each user includes: Determine a first target user from among the users; wherein the first target user has the highest frequency of accessing data on the blockchain within a recently preset first time period; Acquire multiple first historical items generated by the first target user accessing data on the blockchain within a third time period in the future; Determine a target history item from each first history item; wherein the history item type of the target history item matches the standard history item type; Get the earliest and latest generation time of the target history item; Determine the interval start time; if the target time of the second time preset before the earliest generation time is earlier than the start time of the third time period in the future, the start time of the third time period in the future is used as the interval start time; otherwise, the target time is used as the interval start time; Determine the interval end time; wherein the interval end time is the latest generated time; Determine the target time interval based on the interval start time and the interval end time; Classify and count the target historical items to obtain category distribution; Determine the historical item conditions corresponding to the category distribution from the historical item condition library; Determine a second target user other than the first target user from among the users; wherein a plurality of second historical items generated by the second target user accessing data on the blockchain within the target time interval meet the historical item condition; A visit association circle is generated based on the first target user and the second target user.

[0010] Optionally, the modifying of the temporary permission management policy based on the access interaction circle includes: Performing feature description processing on the visit interaction circles and the interaction circle relationships between the visit interaction circles to obtain a third feature description vector; Determine the first revised knowledge corresponding to the third feature description vector from the first revised knowledge base; According to the first revision knowledge, revise the temporary management strategy of permissions.

[0011] Optionally, the modifying of the temporary permission management policy based on the access interaction circle includes: Count the number of interaction circles that visit the interaction circle; Determine the appropriate number of interaction circles based on the temporary permission management strategy and the distribution of user groups; When the target difference value of the number of interaction circles less than the expected number of interaction circles exceeds the difference threshold, the target difference value and the policy type of the temporary authority management policy are subjected to feature description processing to obtain a fourth feature description vector; Determining second revised knowledge corresponding to the fourth feature description vector from the second revised knowledge base; According to the second revision knowledge, revise the temporary management strategy of permissions.

[0012] An embodiment of the present invention provides a data access permission management system based on a smart contract, comprising: A decision-making module, used to decide on a temporary authority management strategy and a temporary authority management duration based on data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain; wherein the duration of the first time period is a first standard duration; The first management module is used to temporarily update the smart contract within a second time period in the future based on the temporary permission management strategy, so as to perform a corresponding first temporary management of the data access rights of the blockchain; wherein the duration of the second time period is the temporary permission management duration.

[0013] Optionally, the decision module decides the temporary management strategy for rights and the temporary management duration for rights based on the data access events of the blockchain in the past first time period and the current rights management strategy in the smart contract of the blockchain, including: Performing feature description processing on the data access event to obtain a first feature description vector; Determine mapping knowledge corresponding to the first feature description vector from a mapping knowledge base; Invite data access rights to the blockchain's data access nodes; Obtaining acceptance feedback information of the data access node that accepts the data access permission invitation; Extract the mapping relationship between the received feedback information and the mapping knowledge; Performing feature description processing on the mapping relationship to obtain a second feature description vector; Determining decision knowledge corresponding to the second feature description vector from a decision knowledge base; Compare decision-making knowledge, temporary management strategy of decision-making authority and duration of temporary management of authority.

[0014] Optional, smart contract-based data access rights management system, also includes: A generation module, used for generating an access association circle for each user when multiple users in the same user group jointly access data on the blockchain in a third time period in the future; wherein the users in the same user group are bound in advance, and at least one user in the same user group is related to the temporary permission management policy; the third time period in the future is after the second time period in the future and is adjacent to the second time period in the future, and the duration of the third time period is the second standard duration; A correction module, used to correct the temporary management policy of permissions based on the access interaction circle; The second management module is used to temporarily update the smart contract within a third time period in the future based on the revised temporary permission management strategy to perform corresponding second temporary management of the data access rights of the blockchain.

[0015] Optionally, the generating module generates the access association circle of each user, including: Determine a first target user from among the users; wherein the first target user has the highest frequency of accessing data on the blockchain within a recently preset first time period; Acquire multiple first historical items generated by the first target user accessing data on the blockchain within a third time period in the future; Determine a target history item from each first history item; wherein the history item type of the target history item matches the standard history item type; Get the earliest and latest generation time of the target history item; Determine the interval start time; if the target time of the second time preset before the earliest generation time is earlier than the start time of the third time period in the future, the start time of the third time period in the future is used as the interval start time; otherwise, the target time is used as the interval start time; Determine the interval end time; wherein the interval end time is the latest generated time; Determine the target time interval based on the interval start time and the interval end time; Classify and count the target historical items to obtain category distribution; Determine the historical item conditions corresponding to the category distribution from the historical item condition library; Determine a second target user other than the first target user from among the users; wherein a plurality of second historical items generated by the second target user accessing data on the blockchain within the target time interval meet the historical item condition; A visit association circle is generated based on the first target user and the second target user.

[0016] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description and the accompanying drawings.

[0017] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings: Figure 1 A schematic diagram of a data access rights management method based on a smart contract in an embodiment of the present invention; Figure 2 Schematic diagram of a data access rights management system based on smart contracts in an embodiment of the present invention. DETAILED DESCRIPTION

[0019] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0020] The embodiment of the present invention provides a data access rights management method based on smart contracts, such as Figure 1 As shown, including: S1, based on the data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain, the decision-making authority temporary management strategy and the temporary authority management duration; wherein the duration of the first time period is the first standard duration; In S1, data access events are recorded events of users performing data schemes on the blockchain, which can be any user access behaviors to data, such as query, modification or transaction operations. Data access events will be recorded on the blockchain as the basis for subsequent permission management decisions; the first time period in the past is the time range for analyzing data access events, and its duration is the first standard duration, such as one day; the current permission management strategy is the permission control rules currently defined by the smart contract in the blockchain, such as who can access the data, when the data can be accessed, and the level of access permissions; the temporary permission management strategy is a strategy for adjusting data access permissions based on the analysis of data access events in the first time period in the past, such as: data access events reflect that a user frequently requests access to certain sensitive data, then the temporary permission management strategy is to temporarily increase the access permissions of the sensitive data; the temporary permission management duration is the effective time length of the temporary permission management strategy; S2. Based on the temporary permission management strategy, temporarily update the smart contract in a second time period in the future to perform a corresponding first temporary management of the data access rights of the blockchain; wherein the duration of the second time period is the temporary permission management duration.

[0021] In S2, the second time period in the future is the time period after the temporary permission management policy takes effect, and its duration is the temporary permission management duration; based on the temporary permission management policy, when the smart contract is temporarily updated, the permissions in the smart contract will be adjusted according to the temporary management policy, thereby realizing the corresponding first temporary management of the data access rights of the blockchain.

[0022] This application analyzes the data access events recorded in the blockchain in the first time period in the past, combines the existing permission management strategy, decision-making permission temporary management strategy and permission temporary management duration in the current smart contract, and based on the permission temporary management strategy, temporarily updates the smart contract in the second time period in the future to perform a corresponding first temporary management of the data access rights of the blockchain, and dynamically and flexibly adjusts the data access rights of the blockchain according to the data access needs, thereby greatly improving the applicability of the system.

[0023] In one embodiment, in S1, based on the data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain, the decision-making authority temporary management strategy and the authority temporary management duration include: S11, performing feature description processing on the data access event to obtain a first feature description vector; In S11, when performing the above feature description processing, the features of the data access event are extracted, such as access frequency, access data type, user role, etc., and the extracted features are converted into a digital vector form to obtain a first feature description vector, which represents the feature situation of the data access event; S12, determining mapping knowledge corresponding to the first feature description vector from a mapping knowledge base; In S12, the mapping knowledge base has mapping knowledge corresponding to different first feature description vectors, and the mapping knowledge is the data access permission adjustment measures that need to be taken and the possible data access requirements under the characteristic situation of the data access event represented by the first feature description vector, such as: the characteristic situation of the data access event represented by the first feature description vector is that the user frequently accesses certain private data, then the mapping knowledge is to temporarily enhance the user's authority and the user urgently needs to access other related private data; S13, inviting data access rights to the data access node of the blockchain; In S13, the data access node is a user, administrator or other participant who accesses data in the blockchain; when inviting data access rights, the inviting data access node provides feedback on its own permission adjustment requirements for data access on the blockchain; S14, obtaining acceptance feedback information of the data access node that accepts the invitation for data access permission; In S14, the corresponding received feedback information is permission adjustment requirements, etc.; S15, extracting the mapping relationship between the received feedback information and the mapping knowledge; In S15, the mapping relationship may be that the data access permission adjustment measures to be taken in the mapping knowledge are consistent with the permission adjustment requirements in the received feedback information, etc.; S16, performing feature description processing on the mapping relationship to obtain a second feature description vector; In S16, similarly, when performing the above feature description processing, the features of the mapping relationship are extracted, such as: temporarily improving user permissions, users needing to improve permissions, etc., and the extracted features are converted into a digital vector form to obtain a second feature description vector, which represents the feature situation of the mapping relationship; S17, determining the decision knowledge corresponding to the second feature description vector from the decision knowledge base; In S17, the decision knowledge base contains decision knowledge corresponding to different second feature description vectors. The decision knowledge is the temporary management strategy for decision authority and the measures for temporary management duration of authority that need to be taken under the characteristic situation of the mapping relationship represented by the second feature description vector. For example, if the characteristic situation of the mapping relationship represented by the second feature description vector is that the user authority needs to be temporarily upgraded to meet the user's needs, then it is verified whether malicious access behavior occurred when the user authority was upgraded in the past. If not, the authority will be temporarily extracted as the temporary management strategy for decision authority, and the time required for accessing other related private data will be used as the temporary management duration of authority. S18. Compare decision-making knowledge, temporary management strategy of decision-making authority and duration of temporary management of authority.

[0024] In S18, finally, by referring to the decision-making knowledge, a decision on the temporary management strategy and the duration of temporary management of permissions can be made.

[0025] The embodiment of the present invention introduces mapping knowledge corresponding to the first feature description vector obtained by feature description processing of data access events, performs data access permission invitation on data access nodes, extracts the mapping relationship between the feedback information accepted by the nodes and the mapping knowledge, performs feature description processing on the mapping relationship, obtains a second feature description vector, introduces decision knowledge corresponding to the second feature description vector, and makes decisions on temporary management strategies for permissions and temporary management duration of permissions by comparing the decision knowledge, thereby greatly improving the accuracy, comprehensiveness and efficiency of the temporary management strategies for permissions and temporary management duration of permissions. By temporarily adjusting data access permissions at a specific duration, the system can quickly respond to users' special access needs without affecting overall security, especially when it comes to private data access. This flexible adjustment can ensure a balance between data access efficiency and user needs. Accurate decisions on temporary management duration of permissions can effectively avoid excessive temporary adjustments of permissions, reduce unnecessary resource consumption, and maximize the efficiency of blockchain data access.

[0026] In one embodiment, the data access permission management method based on smart contracts further includes: S3. When multiple users in the same user group jointly access data on the blockchain in the third time period in the future, an access association circle of each user is generated; wherein the users in the same user group are bound in advance, and at least one user in the same user group is related to the temporary permission management policy; the third time period in the future is after the second time period in the future and is adjacent to the second time period in the future, and the duration of the third time period is the second standard duration; In S3, the user is related to the temporary permission management policy, which means that the temporary permission management policy involves the adjustment of the user's data access rights. The user group can be users with similar functions, permissions or business needs, and can be bound in advance by them. The second standard time can be, for example, 1 hour. In the second time period in the future, when at least one user in the user group accesses the data after adjusting its data access rights through the temporary permission management policy, there may be a need to jointly access the blockchain data with other users in the future. For example, in a medical institution, doctor A can access the medical records of a patient after adjusting his data access rights through the temporary permission management policy. Then he wants to jointly access the medical records, treatment plans, etc. of the patient and patients with similar symptoms with nurse B and pharmacist C in the future to make further treatment decisions. At this time, the user can be pre-bound with other users to form a user group. The access association circle is the relationship circle formed when the user group jointly accesses the blockchain data in the third time period in the future. It can indicate the access association between users in the user group, such as access intersection, interactive behavior and access mode. S4. Based on the access interaction circle, modify the temporary permission management strategy; In S4, the access interaction circle indicates the access association between users in the user group. Therefore, the temporary permission management policy can be modified based on it to further adapt and adjust the user group's access rights to the blockchain data; S5. Based on the revised temporary permission management strategy, temporarily update the smart contract in the third time period in the future to perform a corresponding second temporary management of the data access rights of the blockchain.

[0027] In S5, similarly, based on the revised temporary permission management strategy, the smart contract is temporarily updated in the third time period in the future, and the permissions in the smart contract will be adjusted according to the temporary management strategy, thereby achieving a corresponding second temporary management of the data access rights of the blockchain.

[0028] The embodiment of the present invention forms constraints on user groups, accurately determines that at least one user in the user group may have the need to jointly access blockchain data with other users in the future when accessing after the data access rights are adjusted by the temporary permission management policy, and further adapts to adjusting the access rights of the user group to the blockchain data, improves the system's ability to cope with this special situation, and improves the applicability of the system; further adapts to adjusting the access rights of the user group to the blockchain data, and modifies the temporary permission management policy based on the access interaction circle, thereby improving the accuracy, comprehensiveness and efficiency of the modification of the temporary permission management policy.

[0029] In one embodiment, in S3, generating the access association circle of each user includes: S301, determining a first target user from among the users; wherein the first target user has the highest frequency of data access to the blockchain within a recently preset first time period; In S301, the most recently preset first time may be the most recent 10 minutes; the first target user has the highest frequency of data access to the blockchain within the most recently preset first time, indicating that his data access situation has a greater impact on future data access management; S302, obtaining a plurality of first historical items generated by a first target user accessing data on the blockchain within a third time period in the future; In S302, correspondingly, the first history item may be the access operation, timestamp, and specific access data of the first target user; S303, determining a target history item from each first history item; wherein the history item type of the target history item matches the standard history item type; In S303, the standard history item type is a history item type that can indicate the access association between the first target user and other users during the joint access process, such as blockchain transactions, access to data accessed by other users, etc.; S304, obtaining the earliest generation time and the latest generation time of the target history item; In S304, the earliest generation time and the latest generation time refer to the earliest generation time of the target history item and the latest generation time of the target history item by the first target user; S305, determining the interval start time; wherein, if the target time of the second time preset before the earliest generation time is earlier than the start time of the third time period in the future, the start time of the third time period in the future is used as the interval start time; otherwise, the target time is used as the interval start time; In S305, the preset second time may be 2 minutes; before the earliest generation time, the first target user may have access association with other users in the joint access process, but it must be constrained to be within the future third time period. Therefore, if the target time of the second time preset before the earliest generation time is earlier than the start time of the future third time period, the start time of the future third time period is used as the interval start time, otherwise, the target time is used as the interval start time; S306, determining the interval end time; wherein the interval end time is the latest generated time; In S306, after the latest generation time, the possibility of the first target user generating access association with other users in the joint access process is extremely small, so the latest generation time is used as the interval end time; S307, determining a target time interval based on the interval start time and the interval end time; In S307, the first target user may have access association with other users during the joint access process between the interval start time and the interval end time, and therefore, the target time interval is determined based on the two. S308, classify and count the target history items to obtain category distribution; In S308, the category distribution refers to the categories involved in the target history item and the number of corresponding history items; S309, determining the historical item conditions corresponding to the category distribution from the historical item condition library; In S309, the history item condition is used to filter other users due to access associations generated between other users; the first target user indicated by the same type of target history item may have the same access association with other users during the joint access process, therefore, the more target history items of the same type, the greater the possibility of the first target user indicated by the same type of target history item having the same access association with other users during the joint access process, therefore, the history item condition can be determined based on it, such as: the category in the category distribution is blockchain transaction, the corresponding number of history items is 5, the larger the number of corresponding history items, the greater the possibility of the occurrence of the access association, the more relaxed the screening, and the corresponding history item condition is that the history item indicates that the user has any behavior related to the blockchain transaction, and the user meets the history item condition, which means that the user also wants to participate in the blockchain transaction or understand the blockchain transaction or pay attention to the blockchain transaction, etc.; S310, determining a second target user other than the first target user from among the users; wherein a plurality of second historical items generated by the second target user accessing data on the blockchain within the target time interval meet the historical item condition; In S310, the second history item may be the access operation, timestamp, and specific data accessed by the second target user; if multiple second history items generated by the second target user accessing data on the blockchain within the target time interval meet the history item condition, it indicates that the second target user has an access association with the first target user during the joint access process; S311: Generate a visit association circle based on the first target user and the second target user.

[0030] In S311 , finally, a visit association circle is generated based on the first target user and the second target user, that is, the visit association circle indicates the visit association situation between the first target user and the second target user.

[0031] An embodiment of the present invention determines a first target user who has the highest frequency of accessing data on a blockchain within a recently preset first time period, obtains multiple first history items of the first target user, matches the history item type with a target history item that matches the standard history item type, determines an interval start time and an interval end time based on the target history item, and thereby determines a target time interval, so that the system can accurately identify a second target user who has an access association with the first target user during a joint access process within a specific time interval, provides efficient support for the modification of temporary permission management strategies, avoids analyzing irrelevant data in irrelevant time periods, and improves the efficiency of generating access association circles.

[0032] In one embodiment, in S3, based on the access interaction circle, the temporary permission management policy is modified, including: Performing feature description processing on the visit interaction circles and the interaction circle relationships between the visit interaction circles to obtain a third feature description vector; Determine the first revised knowledge corresponding to the third feature description vector from the first revised knowledge base; According to the first revision knowledge, revise the temporary management strategy of permissions.

[0033] The interaction circle relationship is the association relationship between the visit interaction circles, such as the existence of the same users, etc. When performing the above feature description processing, the features of the visit interaction circles and the interaction circle relationships between the visit interaction circles are extracted, such as the number of visit interaction circles, the maximum number of users in the visit interaction circles, the same users in two visit interaction circles, etc. The extracted features are converted into a digital vector form to obtain a third feature description vector, which represents the feature conditions of the visit interaction circles and the interaction circle relationships between the visit interaction circles. The feature conditions of the visit interaction circles and the interaction circle relationships between the visit interaction circles represented by the third feature description vector can indicate how to The temporary permission management strategy is modified, that is, it corresponds to the first correction knowledge, such as: the characteristic situation of the access interaction circle represented by the third feature description vector and the interaction circle relationship between the access interaction circles is that a certain user exists in all access interaction circles at the same time, which means that he is the most active in generating access associations. The temporary permission management strategy can be modified to improve his data access rights. After improving his data access capabilities, he will continue to actively generate access associations, thereby improving the joint access experience of the user group and improving the work efficiency of the user group. The corresponding first correction knowledge is to improve the data access rights of the user; finally, in accordance with the first correction knowledge, the temporary permission management strategy is modified.

[0034] The embodiments of the present invention make data access and user collaboration more efficient and personalized by intelligently and dynamically modifying the permission management strategy, avoiding the limitations brought by static permission settings, fully tapping the potential value of user interaction, and improving the work efficiency of the entire team and the flexibility of the system.

[0035] In one embodiment, in S3, based on the access interaction circle, the temporary permission management policy is modified, including: Count the number of interaction circles that visit the interaction circle; Determine the appropriate number of interaction circles based on the temporary permission management strategy and the distribution of user groups; When the target difference value of the number of interaction circles less than the expected number of interaction circles exceeds the difference threshold, the target difference value and the policy type of the temporary authority management policy are subjected to feature description processing to obtain a fourth feature description vector; Determining second revised knowledge corresponding to the fourth feature description vector from the second revised knowledge base; According to the second revision knowledge, revise the temporary management strategy of permissions.

[0036] The number of interaction circles that should be formed is the number of access interaction circles that should be formed when each user in the user group fully generates access associations; the personnel distribution of the user group is the number of users in the user group that are related to the temporary permission management strategy and the total number of users in the user group; the calculation formula for the number of interaction circles that should be formed can be: , where is the expected number of interaction circles, is the floor function, The preset calculation coefficient corresponding to the permission type level of the permission to be adjusted in the temporary permission management strategy is is the total number of users in the user group, is the number of users in the user group who are related to the temporary permission management strategy; in this formula, the greater the permission type level, the greater the possibility that users in the user group will have access associations under the temporary permission management of the temporary permission management strategy, and the corresponding preset calculation coefficient is greater; the calculation formula for the necessary number of interaction circles fully considers factors such as the permission type level and the number of user groups, ensuring the accuracy of the calculation of the necessary number of interaction circles; secondly, the necessary number of interaction circles can also be pre-set in advance by technical personnel based on actual needs according to the temporary permission management strategy and the personnel distribution of the user group; the difference threshold can be, for example: 3; when the number of interaction circles is less than the target difference of the necessary number of interaction circles and exceeds the difference threshold, it means that the access associations of the users in the user group are insufficient; proceed as above During the feature description processing, the target difference and the policy type are converted into a digital vector to obtain a fourth feature description vector, which represents the insufficiency. The insufficiency represented by the fourth feature description vector can indicate how to modify the temporary management policy for permissions, that is, it corresponds to the second correction knowledge. For example, the insufficiency represented by the fourth feature description vector is that the number of interaction circles is less than the number of interaction circles that should be larger, and the policy type is to enhance the permissions of a certain user. In this case, it is necessary to enhance the permissions of other users in the user group except the user, and enhance their enthusiasm for generating access associations. The corresponding second correction knowledge is to enhance the permissions of other users in the user group except the user. Finally, the temporary management policy for permissions is modified in accordance with the second correction knowledge.

[0037] The embodiment of the present invention can dynamically adjust the temporary permission management strategy by counting the number of interaction circles and comparing it with the expected number of interaction circles, ensuring that the strategy can effectively promote the necessary access associations in the user group, making the permission allocation more reasonable and refined, and greatly improving the applicability of the system.

[0038] The embodiment of the present invention provides a data access rights management system based on smart contracts, such as Figure 2 As shown, including: Decision module 1, used to decide the temporary management strategy of rights and the duration of temporary management of rights based on the data access events of the blockchain in the past first time period and the current rights management strategy in the smart contract of the blockchain; wherein the duration of the first time period is the first standard duration; The first management module 2 is used to temporarily update the smart contract within a second time period in the future based on the temporary permission management strategy, so as to perform a corresponding first temporary management of the data access rights of the blockchain; wherein the duration of the second time period is the temporary permission management duration.

[0039] The decision module decides the temporary management strategy of the authority and the temporary management duration of the authority based on the data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain, including: Performing feature description processing on the data access event to obtain a first feature description vector; Determine mapping knowledge corresponding to the first feature description vector from a mapping knowledge base; Invite data access rights to the blockchain's data access nodes; Obtaining acceptance feedback information of the data access node that accepts the data access permission invitation; Extract the mapping relationship between the received feedback information and the mapping knowledge; Performing feature description processing on the mapping relationship to obtain a second feature description vector; Determining decision knowledge corresponding to the second feature description vector from a decision knowledge base; Compare decision-making knowledge, temporary management strategy of decision-making authority and duration of temporary management of authority.

[0040] The data access rights management system based on smart contracts also includes: A generation module, used for generating an access association circle for each user when multiple users in the same user group jointly access data on the blockchain in a third time period in the future; wherein the users in the same user group are bound in advance, and at least one user in the same user group is related to the temporary permission management policy; the third time period in the future is after the second time period in the future and is adjacent to the second time period in the future, and the duration of the third time period is the second standard duration; A correction module, used to correct the temporary management policy of permissions based on the access interaction circle; The second management module is used to temporarily update the smart contract within a third time period in the future based on the revised temporary permission management strategy to perform corresponding second temporary management of the data access rights of the blockchain.

[0041] The generating module generates the access association circle of each user, including: Determine a first target user from among the users; wherein the first target user has the highest frequency of accessing data on the blockchain within a recently preset first time period; Acquire multiple first historical items generated by the first target user accessing data on the blockchain within a third time period in the future; Determine a target history item from each first history item; wherein the history item type of the target history item matches the standard history item type; Get the earliest and latest generation time of the target history item; Determine the interval start time; if the target time of the second time preset before the earliest generation time is earlier than the start time of the third time period in the future, the start time of the third time period in the future is used as the interval start time; otherwise, the target time is used as the interval start time; Determine the interval end time; wherein the interval end time is the latest generated time; Determine the target time interval based on the interval start time and the interval end time; Classify and count the target historical items to obtain category distribution; Determine the historical item conditions corresponding to the category distribution from the historical item condition library; Determine a second target user other than the first target user from among the users; wherein a plurality of second historical items generated by the second target user accessing data on the blockchain within the target time interval meet the historical item condition; A visit association circle is generated based on the first target user and the second target user.

[0042] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A data access rights management method based on smart contracts, characterized in that: include: Based on the data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain, the temporary management strategy of the decision-making authority and the temporary management duration of the authority; wherein the duration of the first time period is the first standard duration; Based on the temporary permission management strategy, the smart contract is temporarily updated in a second time period in the future to perform a corresponding first temporary management of the data access rights of the blockchain; wherein the duration of the second time period is the temporary permission management duration.

2. The data access rights management method based on smart contracts according to claim 1, characterized in that: The data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain, the temporary management strategy of the decision-making authority and the temporary management duration of the authority include: Performing feature description processing on the data access event to obtain a first feature description vector; Determine mapping knowledge corresponding to the first feature description vector from a mapping knowledge base; Invite data access rights to the blockchain's data access nodes; Obtaining acceptance feedback information of the data access node that accepts the data access permission invitation; Extract the mapping relationship between the received feedback information and the mapping knowledge; Performing feature description processing on the mapping relationship to obtain a second feature description vector; Determining decision knowledge corresponding to the second feature description vector from a decision knowledge base; Compare decision-making knowledge, temporary management strategy of decision-making authority and duration of temporary management of authority.

3. The data access rights management method based on smart contracts according to claim 1, characterized in that: Also includes: When multiple users in the same user group jointly access data on the blockchain in the third time period in the future, an access association circle of each user is generated; wherein the users in the same user group are bound in advance, and at least one user in the same user group is related to the temporary permission management policy; the third time period in the future is after the second time period in the future and is adjacent to the second time period in the future, and the duration of the third time period is the second standard duration; Based on the access interaction circle, the temporary management strategy of permissions is modified; Based on the revised temporary permission management strategy, the smart contract is temporarily updated in the third time period in the future to perform a corresponding second temporary management of the data access rights of the blockchain.

4. The data access rights management method based on smart contracts as claimed in claim 3, characterized in that: The generating of the access association circle of each user includes: Determine a first target user from among the users; wherein the first target user has the highest frequency of accessing data on the blockchain within a recently preset first time period; Acquire multiple first historical items generated by the first target user accessing data on the blockchain within a third time period in the future; Determine a target history item from each first history item; wherein the history item type of the target history item matches the standard history item type; Get the earliest and latest generation time of the target history item; Determine the interval start time; wherein, if the target time of the second time preset before the earliest generation time is earlier than the start time of the third time period in the future, the start time of the third time period in the future is used as the interval start time; otherwise, the target time is used as the interval start time; Determine the interval end time; wherein the interval end time is the latest generated time; Determine the target time interval based on the interval start time and the interval end time; Classify and count the target historical items to obtain category distribution; Determine the historical item conditions corresponding to the category distribution from the historical item condition library; Determine a second target user other than the first target user from among the users; wherein a plurality of second historical items generated by the second target user accessing data on the blockchain within the target time interval meet the historical item condition; A visit association circle is generated based on the first target user and the second target user.

5. The data access rights management method based on smart contracts as claimed in claim 3, characterized in that: The modification of the temporary permission management strategy based on the access interaction circle includes: Performing feature description processing on the visit interaction circles and the interaction circle relationships between the visit interaction circles to obtain a third feature description vector; Determine the first revised knowledge corresponding to the third feature description vector from the first revised knowledge base; According to the first revision knowledge, revise the temporary management strategy of permissions.

6. The data access rights management method based on smart contracts as claimed in claim 3, characterized in that: The modification of the temporary permission management strategy based on the access interaction circle includes: Count the number of interaction circles that visit the interaction circle; Determine the appropriate number of interaction circles based on the temporary permission management strategy and the distribution of user groups; When the target difference value of the number of interaction circles is less than the expected number of interaction circles and exceeds the difference threshold value, the target difference value and the policy type of the temporary authority management policy are subjected to feature description processing to obtain a fourth feature description vector; Determining second revised knowledge corresponding to the fourth feature description vector from the second revised knowledge base; According to the second revision knowledge, revise the temporary management strategy of permissions.

7. A data access rights management system based on smart contracts, characterized in that: include: A decision-making module, used to decide on a temporary authority management strategy and a temporary authority management duration based on data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain; wherein the duration of the first time period is a first standard duration; The first management module is used to temporarily update the smart contract within a second time period in the future based on the temporary permission management strategy, so as to perform a corresponding first temporary management of the data access rights of the blockchain; wherein the duration of the second time period is the temporary permission management duration.

8. The data access rights management system based on smart contracts as claimed in claim 7, characterized in that: The decision module decides the temporary management strategy of the authority and the temporary management duration of the authority based on the data access events of the blockchain in the past first time period and the current authority management strategy in the smart contract of the blockchain, including: Performing feature description processing on the data access event to obtain a first feature description vector; Determine mapping knowledge corresponding to the first feature description vector from a mapping knowledge base; Invite data access rights to the blockchain's data access nodes; Obtaining acceptance feedback information of the data access node that accepts the data access permission invitation; Extract the mapping relationship between the received feedback information and the mapping knowledge; Performing feature description processing on the mapping relationship to obtain a second feature description vector; Determining decision knowledge corresponding to the second feature description vector from a decision knowledge base; Compare decision-making knowledge, temporary management strategy of decision-making authority and duration of temporary management of authority.

9. The data access rights management system based on smart contracts as claimed in claim 7, characterized in that: Also includes: A generation module, used for generating an access association circle for each user when multiple users in the same user group jointly access data on the blockchain in a third time period in the future; wherein the users in the same user group are bound in advance, and at least one user in the same user group is related to the temporary permission management policy; the third time period in the future is after the second time period in the future and is adjacent to the second time period in the future, and the duration of the third time period is the second standard duration; A correction module, used to correct the temporary management policy of permissions based on the access interaction circle; The second management module is used to temporarily update the smart contract within a third time period in the future based on the revised temporary permission management strategy to perform corresponding second temporary management of the data access rights of the blockchain.

10. The data access rights management system based on smart contracts as claimed in claim 9, characterized in that: The generating module generates the access association circle of each user, including: Determine a first target user from among the users; wherein the first target user has the highest frequency of accessing data on the blockchain within a recently preset first time period; Acquire multiple first historical items generated by the first target user accessing data on the blockchain within a third time period in the future; Determine a target history item from each first history item; wherein the history item type of the target history item matches the standard history item type; Get the earliest and latest generation time of the target history item; Determine the interval start time; wherein, if the target time of the second time preset before the earliest generation time is earlier than the start time of the third time period in the future, the start time of the third time period in the future is used as the interval start time; otherwise, the target time is used as the interval start time; Determine the interval end time; wherein the interval end time is the latest generated time; Determine the target time interval based on the interval start time and the interval end time; Classify and count the target historical items to obtain category distribution; Determine the historical item conditions corresponding to the category distribution from the historical item condition library; Determine a second target user other than the first target user from among the users; wherein a plurality of second historical items generated by the second target user accessing data on the blockchain within the target time interval meet the historical item condition; A visit association circle is generated based on the first target user and the second target user.

Images