Block chain cross-chain data penetration type supervision method and system based on attribute encryption

Abstract

The invention discloses a block chain cross-chain data penetration type supervision method based on attribute encryption, and the method comprises the following steps: monitoring a data access request in a cross-chain environment, and transmitting the received request to a collaborative encryption module; the data verification module receives the attribute vector, calls a verification mark stored on the chain for comparison, and ensures that the user meets an access condition; a zero-knowledge proving technology is adopted to further verify the user permission; encrypting and decrypting under-chain data; the decrypted data is transmitted to the user side through the secure transmission channel, so that the security of the data in the transmission process is ensured; and dynamically adjusting the authority strategy. According to the method, the OC-ABE is combined, the system efficiency is improved, the flexibility of authority management, the data privacy and the compliance transparency are improved, and the method is an ideal choice for realizing efficient and safe cross-chain data supervision in a multi-chain environment.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a blockchain cross-chain data penetration supervision method and system based on attribute encryption. Background Art

[0002] The cross-chain data penetration supervision technology of blockchain aims to achieve data sharing between different blockchains and ensure the security, compliance and privacy protection of data flow. With the increase in blockchain applications, data is often distributed on different chains, and the penetration supervision technology helps regulators achieve comprehensive control of data flow in a multi-chain environment by integrating a variety of innovative means. Among these means, attribute-based encryption (ABE) provides a key access control mechanism to ensure the security and compliance of data sharing.

[0003] Attribute encryption is a public key encryption method that binds user attribute information to access permission policies so that data can only be decrypted by users who meet specific attribute conditions. The cross-chain data supervision solution based on attribute encryption provides fine-grained permission management between multiple blockchain systems to ensure that data access meets regulatory requirements. For example, in sensitive industries such as finance and healthcare, regulators on different chains can define data access permissions based on user roles, departments and other attribute conditions, thereby achieving controlled cross-chain data circulation.

[0004] In order to achieve secure cross-chain data sharing, common attribute encryption technology usually performs permission management and attribute verification on the chain. That is, when the blockchain receives a data access request, it verifies the requester's permissions according to the attribute policy set when the data is encrypted. In this way, through decentralized verification on the chain, common attribute encryption can avoid dependence on centralized trust institutions and ensure that data is only accessed when it meets the permissions. This mechanism not only maintains the distributed architecture advantages of the blockchain, but also realizes compliant access control in a multi-chain environment.

[0005] In a cross-chain environment, the on-chain verification method of attribute encryption provides a basic guarantee for access control of data on different chains. By defining the access conditions of cross-chain data through attribute encryption, the system can achieve refined control and sharing of data based on user attributes. For example, regulators can define different encryption strategies for different types of users or organizations on the blockchain according to regulatory needs to ensure that cross-chain data transmission meets security and compliance requirements.

[0006] Attribute encryption has the ability to protect privacy in blockchain data sharing. Since the data encryption process embeds access conditions, only qualified users can decrypt the data, and unauthorized parties cannot view the data content, which adds a layer of security to cross-chain data circulation. In multi-chain collaboration, attribute encryption allows data owners to control data access rights on the chain, realizing the integration of data privacy protection and permission control. This feature ensures the isolation and controlled access of sensitive information when cross-chain data circulates, providing basic support for the penetrating supervision of blockchain.

[0007] By combining the immutable nature of blockchain, attribute encryption also achieves auditing and transparency of cross-chain data access. The chain records each data access and permission verification process, and regulators can view data access records on each chain to ensure that all access behaviors comply with the preset permission policy. This mechanism can provide compliance support for cross-chain data supervision, allowing regulators to effectively track and manage data flows in a multi-chain environment.

[0008] The application of attribute encryption in blockchain cross-chain data penetration supervision provides a basic guarantee for fine-grained control of data access and privacy protection. Through on-chain permission management and attribute verification, regulators can effectively control the flow and access of data in a multi-chain environment, ensuring that cross-chain data sharing is safe and circulated in compliance with permission requirements. This background technology has broad potential in the cross-chain data supervision application of blockchain.

[0009] In the cross-chain data penetration supervision of blockchain, attribute encryption (ABE) technology does provide basic support for fine-grained access control of data. However, ordinary attribute encryption has certain shortcomings in performance, privacy protection and flexibility, which are mainly manifested in the following aspects:

[0010] First, the computing and storage pressure on the chain is high. Ordinary attribute encryption performs encryption, decryption or permission verification on the chain, requiring blockchain nodes to handle a large number of computing and storage tasks. As the amount of cross-chain data increases, the consumption of on-chain resources increases significantly. Especially in scenarios with frequent access, the on-chain load may cause system performance to decline, increase latency and on-chain congestion. This model is difficult to adapt to the high-frequency data access needs in a multi-chain environment.

[0011] Second, there is a lack of dynamic permission management capabilities. Ordinary attribute encryption usually adopts a static permission strategy. Once the data is encrypted, the access conditions are fixed. In cross-chain regulatory scenarios, regulatory requirements may change at any time, and static permission strategies are difficult to respond to changes in requirements in a timely manner. For example, when user permissions change or regulatory rules are updated, it is difficult for traditional attribute encryption to adjust permission management in real time, which may lead to access that does not meet current conditions or hinder compliant data sharing.

[0012] Third, privacy protection is limited. In ordinary attribute encryption, part of the attribute verification and encryption process is completed on the chain, and sensitive information may be exposed on the blockchain, which increases the risk of privacy leakage. In cross-chain data sharing involving multiple parties, once the permission attributes of users or nodes are exposed, it may bring security risks to sensitive data.

[0013] Fourth, the limitations of audit tracing and complex computing support. Ordinary attribute encryption has limitations in audit tracing and complex computing support in cross-chain data supervision. On-chain resources are limited, and the recording capacity of ordinary attribute encryption is limited, which cannot meet the regulator's needs for detailed operation logs and comprehensive tracking. In addition, ordinary attribute encryption only supports basic permission control, and it is difficult to complete complex calculations and multi-party collaborative data processing in a multi-chain environment. In scenarios such as finance or big data, regulators may need cross-chain joint computing and data analysis, and ordinary attribute encryption cannot meet these high computing requirements.

[0014] Therefore, the existing cross-chain data supervision technology has deficiencies in terms of computing burden, dynamic permission management, privacy protection, and audit traceability, and it is difficult to meet the scenarios of frequent access, compliance requirements, and high computing requirements in a multi-chain environment. The current technology urgently needs an optimization solution that can flexibly adjust permission strategies, achieve efficient collaborative computing on and off the chain, and improve privacy protection and audit transparency to better support the secure sharing and efficient supervision of cross-chain data. Summary of the invention

[0015] In view of the deficiencies in cross-chain data supervision pointed out in the above background technology, the purpose of the present invention is to propose a blockchain cross-chain data penetration supervision method and system based on attribute encryption, by combining the attribute encryption method OC-ABE (Off-chain Collaborative Attribute-Based Encryption) of the off-chain collaborative encryption module, to achieve data security, privacy protection and dynamic permission management in the blockchain multi-chain environment. The scheme of the present invention covers off-chain encryption and decryption, permission management, data verification and audit tracing, realizes the controlled circulation and secure sharing of data in a multi-chain environment, and ensures that all data remains authentic and untampered during the supervision process.

[0016] To achieve the above purpose, the technical solution provided by the present invention is as follows:

[0017] First aspect

[0018] The present invention provides a blockchain cross-chain data penetration supervision method based on attribute encryption, comprising the following steps:

[0019] Step 1: Listen to data access requests in the cross-chain environment and pass the received requests to the off-chain collaborative encryption module of OC-ABE; the collaborative encryption module parses the user attribute information and converts it into the attribute vector A i =(a1, a2, ...a n ), and compare it with the preset permission rules according to its attributes;

[0020] Step 2: The data validation module receives the attribute vector A i , call the verification mark stored on the chain for comparison to ensure that the user meets the access conditions;

[0021] Step 3: OC-ABE uses zero-knowledge proof technology to further verify user permissions in OC-ABE;

[0022] Step 4: Off-chain data encryption and decryption;

[0023] Step 5: The decrypted data is transmitted to the user end through a secure transmission channel to ensure the security of the data during transmission; after the transmission is completed, the system automatically clears the decrypted data in the temporary storage off-chain to prevent data leakage or unauthorized repeated access;

[0024] Step 6: Dynamic adjustment of permission strategy;

[0025] Step 7: The system records detailed information of each data access and encryption and decryption operation in the off-chain log management module. All log files are managed in the off-chain distributed storage to ensure the integrity and immutability of the records and facilitate auditing;

[0026] Step 8: Generate a log snapshot and lock it;

[0027] Step 9: The system uploads the encrypted log snapshot to the blockchain to store evidence on the chain and ensure that the log cannot be tampered with; the evidence information is recorded on the chain for compliance inspection:

[0028] Step 10: After each review, a snapshot of the audit records is generated and uploaded to the blockchain to ensure that the data access process is transparent and compliant.

[0029] Second aspect

[0030] The present invention provides a blockchain cross-chain data penetration supervision system based on attribute encryption, and the system executes the above method.

[0031] Compared with the prior art, the present invention has the following beneficial effects:

[0032] In the cross-chain data penetration supervision of blockchain, the attribute encryption scheme combined with OC-ABE shows significant advantages compared with the traditional attribute encryption scheme, which corresponds to the aforementioned shortcomings one by one and effectively solves the shortcomings of the traditional scheme.

[0033] First: It significantly reduces the computing and storage pressure on the chain and improves system performance. Traditional attribute encryption schemes require encryption, decryption or permission verification operations on the chain, which places high demands on the computing and storage resources of the nodes on the chain. Especially in a cross-chain environment, frequent data access will cause a surge in on-chain resource consumption, affecting system performance. After combining with OC-ABE, high-computational-demand tasks of attribute encryption can be performed off-chain, and only verification marks or lightweight attribute condition information need to be stored on the chain, which greatly reduces the burden on the chain. By moving these computationally intensive operations off-chain, the system reduces latency and congestion problems on the chain, which is especially suitable for the needs of frequent data interaction in a cross-chain environment. This simplified on-chain verification process makes the system respond faster, can easily cope with large-scale, multi-chain data flows, and achieve more efficient resource utilization and operating efficiency.

[0034] Second: Dynamic permission management is realized to flexibly respond to changing regulatory needs. Traditional attribute encryption schemes usually adopt static strategies for permission management. Once data encryption is completed, the access conditions are fixed, which makes it difficult to adapt to the dynamic changes in regulatory needs. However, in a multi-chain cross-chain regulatory environment, user permissions and regulatory rules on different chains may change frequently, and static permission strategies are difficult to respond to these needs in a timely manner. After combining with OC-ABE, permission management is no longer limited to static settings. The off-chain module can quickly verify and adjust permission conditions according to real-time regulatory needs, thereby ensuring that the permission requirements of different blockchains can flexibly respond to changes. The system can manage permissions more intelligently and respond to complex and changing scenario requirements in cross-chain data sharing in a timely manner. This dynamic permission management mechanism is particularly suitable for multi-party collaboration and multi-chain environments, providing regulators with a high degree of adaptability and flexibility, and significantly improving the scalability and management efficiency of the system.

[0035] Third: Improve the level of data privacy protection and prevent sensitive information leakage. When traditional attribute encryption schemes perform partial encryption and permission verification on the chain, sensitive information may be exposed on the blockchain, thereby increasing the risk of data leakage. Especially in cross-chain data sharing involving multiple parties, once the user's permission attributes are exposed on the chain, the privacy of the data may be threatened. After combining with OC-ABE, the encryption and decryption operations of sensitive data are completely performed off-chain, and only lightweight verification information or zero-knowledge proofs are stored on the chain, avoiding direct exposure of data. This design effectively improves the privacy of the data, better prevents the risk of sensitive information leakage in multi-chain data sharing scenarios, and ensures that cross-chain data can be safely circulated between different regulators. At the same time, with the help of privacy protection mechanisms such as zero-knowledge proofs, the chain can verify the requester's permissions without exposing specific attributes, further improving the level of data privacy protection.

[0036] Fourth: Support complex calculations and comprehensive audit traceability to meet compliance requirements. Ordinary attribute encryption has limitations in auditing and tracing in cross-chain data supervision, and it also has shortcomings in complex data processing and multi-party collaborative computing. Combined with the OC-ABE solution, it not only supports basic encryption and decryption operations, but also can handle various complex computing tasks, such as data sharding, statistical analysis, and multi-party collaboration. The chain only needs to verify the off-chain processing results, thereby reducing the excessive consumption of on-chain resources and meeting the high computing requirements for cross-chain data in financial and big data scenarios. In addition, OC-ABE can record each data access and operation log in detail, and upload snapshots of the verification results to the chain regularly to achieve comprehensive auditing and tracing. Through distributed log management and on-chain evidence storage mechanism, regulators can track each access and use record of data to ensure system compliance and operational transparency, which is particularly suitable for scenarios such as finance and medical care that require strict audits.

[0037] This application combines attribute encryption with OC-ABE, which provides significant advantages in four key aspects: on-chain resource utilization, dynamic permission management, privacy protection, and audit traceability, and solves the shortcomings of traditional attribute encryption in cross-chain supervision. Combined with OC-ABE, it not only improves system efficiency, but also enhances the flexibility of permission management, data privacy, and compliance transparency. It is an ideal choice for efficient and secure cross-chain data supervision in a multi-chain environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 A schematic diagram of a method flow chart of an embodiment of the present invention;

[0039] Figure 2 A user query graph in an embodiment of the present invention;

[0040] Figure 3 A flowchart of data usage in an embodiment of the present invention;

[0041] Figure 4 This is a diagram of the computing environment structure of an embodiment of the present invention. DETAILED DESCRIPTION

[0042] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0043] See also Figure 1-Figure 4 As shown, a blockchain cross-chain data penetration supervision method based on attribute encryption includes the following steps:

[0044] Step 1: The system monitors data access requests in the cross-chain environment and passes the received requests to the off-chain collaborative encryption module of OC-ABE. The collaborative encryption module parses the user attribute information and converts it into the attribute vector A i =(a1, a2, ...a n ) and compares its attributes with the preset permission rules.

[0045] Step 2: The data validation module receives the attribute vector A i , calling the verification mark stored on the chain for comparison to ensure that the user meets the access conditions.

[0046] The verification token determines permissions based on the following formula:

[0047]

[0048] Among them, w j is the weight of each attribute, and T is the minimum verification threshold. When the conditions are met, the preliminary verification results are recorded. The results are recorded in the off-chain log system for further review.

[0049] It should be noted that the collaborative encryption module and data verification module are located in a virtualized isolation environment off-chain to ensure the security protection of user privacy and compliance of the verification process.

[0050] Step 3: To protect user privacy, OC-ABE uses zero-knowledge proof technology to further verify user permissions in OC-ABE. During the verification process, the system generates a hash value H(A i ), and determine whether it belongs to the valid hash set V. It is judged to pass when the following conditions are met: H(A i)∈V. If the verification fails, the system returns insufficient authority; if the verification passes, the verification result is recorded and the data processing phase begins.

[0051] The details are as follows:

[0052] Step 3.1 The permission verification module initiates zero-knowledge proof to further verify user permissions and ensure that access conditions are met.

[0053] During the verification process in step 3.2, the module protects the privacy of user attributes through on-chain marking to ensure that sensitive information is not exposed on the chain.

[0054] If the verification in step 3.3 is successful, the verification result is recorded in the log; if it fails, access is denied and the process returns to step 1.

[0055] Step 4: Off-chain data encryption and decryption

[0056] Step 4.1: Based on the verification result, the system performs data encryption or decryption off-chain.

[0057] Step 4.2: If it is an encryption operation, the system uses symmetric encryption to generate the ciphertext: C = E key (D);

[0058] Among them, D is the original data, E key It is a symmetric encryption operation, and the encrypted data is stored off-chain, and only the verification mark is stored on the chain.

[0059] Step 4.3: If it is a decryption operation, the decrypted data is temporarily stored off-chain and prepared for transmission.

[0060] Among them, for requests that have passed verification, the encryption and decryption submodule performs encryption or decryption operations on the data according to the permission policy. If the data requested by the user has been encrypted, the decryption module will decrypt it and temporarily store it under the OC-ABE chain. The decrypted data can only be transmitted to the user under the chain. If the user requests new data, the encryption module generates an encryption key and stores the encrypted data under the chain, and only saves the verification mark on the chain.

[0061] Step 5: The decrypted data is transmitted to the user end through a secure transmission channel to ensure the security of the data during transmission. After the transmission is completed, the system automatically clears the decrypted data in the temporary storage off-chain to prevent data leakage or unauthorized repeated access.

[0062] Step 6: Dynamically adjust the permission policy

[0063] Step 6.1: In the system permission management module, monitor the changes of the permission policy on the chain in real time. If the permission conditions change, the permission management module updates the verification rules of OC-ABE according to the new policy.

[0064] Step 6.2: The updated permission policy is applied to all subsequent data access requests to ensure that each verification meets the latest compliance requirements.

[0065] It should be noted that the permission management module also runs in a virtualized isolation environment to adjust the permission policy in real time, and all permission update records are stored in the off-chain data storage system;

[0066] Step 7: The system records detailed information of each data access and encryption and decryption operation in the off-chain log management module. All log files are managed in the off-chain distributed storage to ensure the integrity and immutability of the records and facilitate auditing.

[0067] It should be noted that the log management module is deployed in the distributed log file system under the chain, and regularly generated log snapshots are uploaded to the blockchain to form on-chain evidence to ensure the security and compliance of operation records and facilitate subsequent audits.

[0068] Step 8: Generate a log snapshot and lock it;

[0069] Step 8.1: The audit module periodically generates snapshots of the logs and performs hash locks on the snapshots to ensure the integrity of the log contents.

[0070] Step 8.2: The hashed log snapshot is stored off-chain and is prepared to be uploaded to the blockchain regularly for evidence storage.

[0071] Step 9: The system uploads the encrypted log snapshot to the blockchain to store evidence on the chain, ensuring that the log cannot be tampered with. The evidence information is recorded on the chain for compliance inspection.

[0072] Step 10: After each review, a snapshot of the audit records is generated and uploaded to the blockchain to ensure that the data access process is transparent and compliant.

[0073] Before a user requests data access, OC-ABE extracts the hash value of the data from the blockchain for integrity verification and verifies it with the data stored off-chain. If the verification result shows that the data has not been tampered with, the off-chain module authorizes the user to use the decryption key to access the requested data and perform data processing or analysis in the specified off-chain environment to generate the required model or results. If the verification fails, the data access request will be rejected to ensure the security and reliability of data use.

[0074] Through these specific implementation steps, a cross-chain data penetration supervision solution with on-chain and off-chain collaboration is realized in the OC-ABE system, which can ensure the security, compliance and privacy protection of cross-chain data in each process node.

[0075] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited by the above embodiments. The above embodiments and descriptions are only preferred examples of the present invention and are not intended to limit the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. A blockchain cross-chain data penetration supervision method based on attribute encryption, characterized in that: The following steps are involved: Step 1: Listen to data access requests in the cross-chain environment and pass the received requests to the off-chain collaborative encryption module of OC-ABE; the collaborative encryption module parses the user attribute information and converts it into the attribute vector A i =(a1,a2,...a n ), and compare it with the preset permission rules according to its attributes; Step 2: The data validation module receives the attribute vector A i , call the verification mark stored on the chain for comparison to ensure that the user meets the access conditions; Step 3: OC-ABE uses zero-knowledge proof technology to further verify user permissions in OC-ABE; Step 4: Off-chain data encryption and decryption; Step 5: The decrypted data is transmitted to the user end through a secure transmission channel to ensure the security of the data during transmission; after the transmission is completed, the system automatically clears the decrypted data in the temporary storage off-chain to prevent data leakage or unauthorized repeated access; Step 6: Dynamic adjustment of permission strategy; Step 7: The system records detailed information of each data access and encryption and decryption operation in the off-chain log management module. All log files are managed in the off-chain distributed storage to ensure the integrity and immutability of the records and facilitate auditing; Step 8: Generate a log snapshot and lock it; Step 9: The system uploads the encrypted log snapshot to the blockchain to store evidence on the chain and ensure that the log cannot be tampered with; the evidence information is recorded on the chain for compliance inspection: Step 10: After each review, a snapshot of the audit records is generated and uploaded to the blockchain to ensure that the data access process is transparent and compliant.

2. According to a blockchain cross-chain data penetration supervision method based on attribute encryption according to claim 1, it is characterized in that: In step 2, the verification token determines the permissions based on the following formula: Among them, w j is the weight of each attribute, T is the minimum verification threshold, and when the conditions are met, the preliminary verification results are recorded; the results are recorded in the off-chain log system for further review.

3. According to a blockchain cross-chain data penetration supervision method based on attribute encryption according to claim 2, it is characterized in that: In step 3, during the verification process, the system generates a hash value H(A i ), and determine whether it belongs to the valid hash set V. It is judged to pass when the following conditions are met: H(A i )∈V; if the verification fails, the authority is insufficient; if the verification passes, the verification result is recorded and the data processing phase begins.

4. According to a blockchain cross-chain data penetration supervision method based on attribute encryption according to claim 3, it is characterized in that: Step 4 includes the following: Step 4.1: Based on the verification result, the system performs data encryption or decryption off-chain; Step 4.2: If it is an encryption operation, the system uses symmetric encryption to generate the ciphertext: C = E key (D); Among them, D is the original data, E key It is a symmetric encryption operation, and the encrypted data is stored off-chain, and only the verification mark is stored on the chain; Step 4.3: If it is a decryption operation, the decrypted data is temporarily stored off-chain and prepared for transmission.

5. According to claim 4, a blockchain cross-chain data penetration supervision method based on attribute encryption is characterized in that: Step 6 includes the following: Step 6.1: In the system authority management module, monitor the changes of the on-chain authority policy in real time. If the authority conditions change, the authority management module updates the verification rules of OC-ABE according to the new policy; Step 6.2: The updated permission policy is applied to all subsequent data access requests to ensure that each verification meets the latest compliance requirements.

6. According to claim 5, a blockchain cross-chain data penetration supervision method based on attribute encryption is characterized in that: Step 8 includes the following: Step 8.1: The audit module regularly generates snapshots of the logs and hashes the snapshots to ensure the integrity of the log content. Step 8.2: The hashed log snapshot is stored off-chain and is prepared to be uploaded to the blockchain regularly for evidence storage.

7. A blockchain cross-chain data penetration supervision system based on attribute encryption, characterized in that: The system executes the method according to any one of claims 1 to 6.

Images