Outbound data sampling inspection supervision method based on block chain and proxy re-encryption

Abstract

The invention relates to a block chain and proxy re-encryption-based outbound data sampling inspection supervision method. The method comprises the steps of generating a first public and private key pair of a data outbound enterprise and a second public and private key pair of a supervisor according to public parameters; encrypting the plaintext data by using the first public and private key pair; carrying out sampling inspection on the first ciphertext obtained by encryption to obtain a second ciphertext, and sending sampling inspection information obtained according to the second ciphertext to the block chain node; after the re-encryption key passes verification, the block chain node re-encrypts the second ciphertext by using the generated re-encryption key; decrypting the obtained third ciphertext to obtain plaintext data; and checking the plaintext data by using the declaration record, and uploading an obtained spot check result to the block chain node. According to the method, the risk of large-scale privacy disclosure is avoided, the supervision efficiency and the supervision effectiveness and reliability are improved, spot check information can be provided as evidence, the transparency of a supervision process is improved, and the trust between an enterprise and a supervision department is enhanced.

Description

Technical Field

[0001] The present invention relates to the field of data encryption processing, and in particular to a method for random inspection and supervision of outbound data based on blockchain and proxy re-encryption. Background Art

[0002] Before enterprises carry out data outbound business activities, they must report the pre-outbound data to the regulatory authorities in accordance with relevant policies and regulations if it involves important data and personal information. Only after the regulatory authorities have approved it can data outbound business be carried out and the reported data content be transmitted overseas. However, most of the current data transmission methods are encrypted. If enterprises privately transmit important data involving security and social interests that have not been reported to overseas in the form of encrypted traffic, it may cause irreparable privacy leakage, loss of interests and other problems. At the same time, if the regulatory authorities conduct real-time decryption monitoring of all outbound data of enterprises to determine whether there is any illegal outbound behavior, it will consume a lot of manpower and material resources. Therefore, it is possible to consider conducting irregular / regular sampling inspections of its outbound traffic and requiring enterprises to cooperate with the regulatory authorities in compliance supervision.

[0003] When domestic enterprises are exporting data, regulatory authorities need to monitor the compliance of their data transmission in real time. However, the existing analysis and monitoring technology for ciphertext traffic lacks a certain accuracy rate. On the contrary, if regulatory authorities have the power to decrypt all ciphertexts of enterprise data stored and transmitted abroad, it may lead to the risk of enterprise privacy leakage and weaken the credibility of regulatory authorities. In addition, enterprises may upload the data fingerprint of illegal data as the legal data fingerprint for filing, so that the illegal data can be judged as legal data to bypass the compliance monitoring of data export. Although sampling and checking the plain text of enterprise data has become a possible regulatory means, there is still a lack of relevant technical solutions for regulatory authorities to manage the access rights of the plain text of enterprise data export within the scope of random inspection while protecting the privacy of enterprises to a certain extent. In addition, random inspection and supervision work needs to be implemented transparently, impartially and traceably to ensure that each random inspection work is auditable. At present, there is no reasonable technical solution to solve the above problems. Summary of the invention

[0004] In order to solve the above problems existing in the prior art, the present invention provides a method for random inspection and supervision of outbound data based on blockchain and proxy re-encryption.

[0005] According to a first aspect of an embodiment of the present invention, a method for random inspection and supervision of outbound data based on blockchain and proxy re-encryption is provided, the method comprising:

[0006] Generate the first public-private key pair of the data exporting enterprise and the second public-private key pair of the supervisor based on the public parameters;

[0007] Encrypting the plaintext data using the first public-private key pair to obtain a first ciphertext;

[0008] When performing data monitoring, the first ciphertext is sampled to obtain a second ciphertext, and the sampled information obtained according to the second ciphertext is sent to a blockchain node for uploading;

[0009] Generate a re-encryption key according to the first public-private key and the second public-private key pair through the blockchain node;

[0010] When the re-encryption key passes the integrity and non-repudiation verification of the blockchain node, the second ciphertext is re-encrypted using the re-encryption key to obtain a third ciphertext;

[0011] Decrypting the third ciphertext to obtain the plaintext data;

[0012] The plaintext data is checked using the declaration records of the data exporting enterprises, and the sampling results are obtained and uploaded to the blockchain node.

[0013] Optionally, before decrypting the third ciphertext to obtain the plaintext data, the method further includes:

[0014] Updating the sampling inspection information according to the third ciphertext, and returning the updated sampling inspection information to the supervisor;

[0015] The third ciphertext is obtained according to the updated sampling information.

[0016] Optionally, the public parameter is PP=(G1, G2, e, g, g1, H); wherein G1 is a first q-order bilinear group, G2 is a second q-order bilinear group, the bilinear map e: G1×G1→G2, g is a generator of G1, g1 is a group element of G1, and the hash function H: {0,1} * →G1.

[0017] Optionally, the first public-private key pair is (PK i ,SK i ), the second public-private key pair is (PK j ,SK j );in, SK i =x i , SK j =y j , x i is the first randomly selected value, y j is the second randomly selected value, represents a q-order integer group consisting of elements (1, ..., q-1), i represents the data exporting enterprise, and j represents the supervisor.

[0018] Optionally, the first ciphertext is C=(C1, C2, C3); wherein, r i is the third randomly selected value, M is the plaintext data.

[0019] Optionally, the sampling information is {i,j,PK j ,C′,time1}; where C′ is the second ciphertext and time1 represents the sampling timestamp.

[0020] Optionally, the re-encryption key is RK j =(RK1, RK2, RK3), where r j is the fourth randomly selected value,

[0021] Optionally, the third ciphertext is C″=(C1″, C2″, C3″, C4″); wherein C1″=C1′,

[0023] C2″=C2′·e(C1′,RK2), C3″=RK1,

[0024] C4″=H(H(C1″)||H(C1″||C2″)||H(C2″||C3″)), C′=(C1′, C2′, C3′) is the

[0025] Two ciphertexts, C1′ represents C1 obtained by random inspection, C2′ represents C2 obtained by random inspection, and C3′ represents C3 obtained by random inspection.

[0026] Optionally, the checking the plaintext data by using the declaration record of the data export enterprise, obtaining the sampling inspection result and uploading the sampling inspection result to the blockchain node includes:

[0027] Using the declaration record of the data exporting enterprise to check the plaintext data, obtain the sampling inspection result and the signature value corresponding to the sampling inspection result;

[0028] The sampling inspection result and the signature value are uploaded to the blockchain node to perform a secondary update on the updated sampling inspection information.

[0029] The technical solution provided by the present invention may include the following beneficial effects:

[0030] Through the above technical solution, the re-encryption technology is adopted to achieve a one-time decryption authorization for the data within the scope of the spot check by the regulatory department, without the need to decrypt all the enterprise data, thus avoiding the risk of large-scale privacy leakage; at the same time, because the ciphertext can only be decrypted within the specific spot check scope, it ensures that the supervision is only carried out within the necessary scope, greatly improving the enterprise data privacy protection and improving the supervision efficiency of the regulatory department; through the proxy re-encryption technology, the regulatory department is provided with a one-time decryption authority, thereby realizing the management of plaintext access rights within a reasonable range; the re-encryption key is only generated for the spot check data, ensuring that the regulatory department can only decrypt specific data, without the need for the enterprise to provide the original decryption key, avoiding privacy leakage while improving the effectiveness and reliability of compliance inspections; by recording each spot check information on the blockchain node, all data is tamper-proof and traceable, ensuring the openness and fairness of the supervision work, and providing spot check information as evidence in the event of disputes, improving the transparency of the supervision process and enhancing the trust between enterprises and regulatory departments.

[0031] Other features and advantages of the present invention will be described in detail in the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the following specific embodiments, they are used to explain the present invention but do not constitute a limitation of the present invention. In the accompanying drawings:

[0033] Figure 1 It is a flow chart of a method for random inspection and supervision of outbound data based on blockchain and proxy re-encryption according to an exemplary embodiment.

[0034] Figure 2 It is a flowchart of a method for sampling and supervising outbound data based on blockchain and proxy re-encryption according to an exemplary embodiment. DETAILED DESCRIPTION

[0035] Figure 1 is a flow chart of a method for sampling and supervising outbound data based on blockchain and proxy re-encryption according to an exemplary embodiment. Figure 1 As shown, the method comprises the following steps:

[0036] S101. Generate a first public-private key pair of the data export enterprise and a second public-private key pair of the supervisor based on public parameters.

[0037] Optionally, Figure 2 is a flowchart of a method for sampling and supervising outbound data based on blockchain and proxy re-encryption according to an exemplary embodiment, such as Figure 2 As shown, the trusted center gives security parameters 1 through the algorithm λ, the public parameters are PP = (G1, G2, e, g, g1, H); where G1 is the first q-order bilinear group, G2 is the second q-order bilinear group, the bilinear map e: G1 × G1 → G2, g is the generator of G1, g1 is the group element of G1, and the hash function H: {0, 1} * →G1.

[0038] Optionally, the first public-private key pair is (PK i ,SK i ), the second public-private key pair is (PK j ,SK j );in, SK i =x i , SK j =y j , x i is the first randomly selected value, y j is the second randomly selected value, represents a q-order integer group consisting of elements (1,...,q-1), i represents the data exporting enterprise, and j represents the supervisor.

[0039] S102. Encrypt the plaintext data using the first public-private key pair to obtain a first ciphertext.

[0040] S103. When performing data monitoring, the first ciphertext is randomly inspected to obtain the second ciphertext, and the inspection information obtained according to the second ciphertext is sent to the blockchain node for chaining.

[0041] It is understandable that, referring to Figure 2 S102 to S103 are the processes of putting the sampled ciphertext on the chain. At this stage, the data outbound enterprise has completed the declaration of outbound data, and the specific relevant declaration records are filed and preserved by the supervisor responsible for the data outbound business of the data outbound enterprise. The data outbound enterprise uses its first public key to encrypt the declared plaintext data and transmit it abroad. Before or during the transmission, the supervisor can obtain part of the ciphertext (second ciphertext) through sampling inspection, and send the sampled second ciphertext and other related information to the blockchain node, requiring re-encryption processing to conduct compliance inspection of outbound data.

[0042] Optionally, the first ciphertext is C=(C1, C2, C3); wherein, r i is the third randomly selected value, M is the plaintext data.

[0043] Optionally, the sampling information is {i,j,PKj ,C′,time1}; where C′ is the second ciphertext and time1 represents the sampling timestamp.

[0044] It is understandable that during the encryption phase before data is exported, data exporting companies randomly select Encrypt the plaintext data M using the first public key to generate a first ciphertext C = (C1, C2, C3);

[0045] The first ciphertext is decrypted through the following calculation steps:

[0046]

[0047] Among them, C3 is used for ciphertext integrity and non-repudiation verification:

[0048]

[0049] After completing data encryption, the data exporting enterprise can store the first ciphertext in the data center or export the data abroad;

[0050] Assuming that the regulatory authorities have deployed traffic monitoring equipment on the traffic export side of the data exporting enterprise, or the regulatory personnel can directly access the ciphertext information in the data exporting process, the regulatory personnel can carry out regular / irregular ciphertext sampling inspection according to the relevant sampling inspection frequency rules. Under the current system state, the regulatory personnel sample the second ciphertext C′=(C1′,C2′,C3′), and the sampling information {i,j,PK j ,C′,time1} is sent to the blockchain node for random inspection of ciphertext on the chain. Subsequent data exporting enterprises can access the legitimacy of the regulatory record at any time. Since C3 is used for ciphertext integrity and non-repudiation verification, regulators cannot tamper with the ciphertext content.

[0051] S104. Generate a re-encryption key based on the first public-private key and the second public-private key pair through the blockchain node.

[0052] It is understandable that in the re-encryption key generation stage, the blockchain node first sends a re-encryption key generation request to the data exporting enterprise, which mainly contains the second public key PK of the supervisor. j , data export enterprises use their first private key SK i and the second public key PK j Execute the re-encryption key generation algorithm and use the re-encryption key RK j =(RK1, RK2, RK3) is sent to the blockchain node.

[0053] Optionally, the re-encryption key is RK j =(RK1, RK2, RK3), where r j is the fourth randomly selected value,

[0054] S105. After the re-encryption key passes the integrity and non-repudiation verification of the blockchain node, the second ciphertext is re-encrypted using the re-encryption key to obtain a third ciphertext.

[0055] Optionally, the third ciphertext is C″=(C1″, C2″, C3″, C4″); wherein C1″=C1′,

[0057] C2″=C2′·e(C1′,RK2), C3″=RK1,

[0058] C4″=H(H(C1″)||H(C1″||C2″)||H(C2″||C3″)), C′=(C1′,C2′,C3′) is the second key

[0059] In the text, C1′ represents C1 obtained by random inspection, C2′ represents C2 obtained by random inspection, and C3′ represents C3 obtained by random inspection. It is worth mentioning that after the re-encryption key passes the integrity and non-repudiation verification of the blockchain node, the blockchain node uses the re-encryption key generated by the outbound enterprise to re-encrypt the second ciphertext to obtain the third ciphertext.

[0060] S106. Decrypt the third ciphertext to obtain plaintext data.

[0061] Optionally, before S106, the method may further include:

[0062] The sampling inspection information is updated according to the third ciphertext, and the updated sampling inspection information is returned to the supervisor;

[0063] The third ciphertext is obtained according to the updated sampling information.

[0064] It is understandable that at this stage, the blockchain node receives the re-encryption key RK sent by the data outbound enterprise. j =(RK1, RK2, RK3), first use the following formula to verify the integrity and non-repudiation of the re-encryption key: If the verification is successful, the second ciphertext C′=(C1′, C2′, C3′) is re-encrypted to obtain the third ciphertext C″=(C1″, C2″, C3″, C4″).

[0065] The blockchain node uses the third ciphertext to update the sampling information and obtains the updated sampling information {i, j, PK j,C′,C″,time1}, and returns the third ciphertext C″ to the supervisor, who completes the further decryption and plaintext compliance check phases.

[0066] S107. Use the declaration records of the data exporting enterprises to check the plain text data, obtain the sampling results and upload the sampling results to the blockchain node.

[0067] Optionally, S107 may include:

[0068] Use the declaration records of data exporting enterprises to check the plain text data and obtain the sampling results and the signature values ​​corresponding to the sampling results;

[0069] The sampling results and signature values ​​are uploaded to the blockchain node to perform a secondary update on the updated sampling information.

[0070] It is understandable that this stage is performed by the supervisor. After receiving the third ciphertext C″=(C1″,C2″,C3″,C4″) sent by the blockchain node, the supervisor first checks If the integrity of the ciphertext is correct, the second private key SK is used j Decrypt the third ciphertext. The specific decryption algorithm is: After obtaining the plaintext data M, the plaintext data M is checked to determine whether it conforms to the original data export declaration record of the data export enterprise i, and the sampling result result and the signature value corresponding to the sampling result are generated. Among them, Sig is the digital signature algorithm. The supervisor uploads the sampling results and their signature values ​​to the blockchain node, and the blockchain node uses the sampling results and their signature values ​​to perform a secondary update on the sampling information to obtain {i, j, PK j ,C′,C″,time1,result,δ,time2}, where time2 is the timestamp of the sampling result. If the sampling result does not match the declared information, the corresponding violation treatment will be carried out.

[0071] The preferred embodiments of the present invention are described in detail above in conjunction with the accompanying drawings. However, the present invention is not limited to the specific details in the above embodiments. Within the technical concept of the present invention, a variety of simple modifications can be made to the technical solution of the present invention, and these simple modifications all belong to the protection scope of the present invention.

[0072] It should also be noted that the various specific technical features described in the above specific embodiments can be combined in any suitable manner without contradiction. In order to avoid unnecessary repetition, the present invention will not further describe various possible combinations.

[0073] In addition, various embodiments of the present invention may be arbitrarily combined, and as long as they do not violate the concept of the present invention, they should also be regarded as the contents disclosed by the present invention.

Claims

1. A method for sampling and supervising outbound data based on blockchain and proxy re-encryption, characterized in that: The method comprises: Generate the first public-private key pair of the data exporting enterprise and the second public-private key pair of the supervisor based on the public parameters; Encrypting the plaintext data using the first public-private key pair to obtain a first ciphertext; When performing data monitoring, the first ciphertext is sampled to obtain a second ciphertext, and the sampled information obtained according to the second ciphertext is sent to a blockchain node for uploading; Generate a re-encryption key according to the first public-private key and the second public-private key pair through the blockchain node; When the re-encryption key passes the integrity and non-repudiation verification of the blockchain node, the second ciphertext is re-encrypted using the re-encryption key to obtain a third ciphertext; Decrypting the third ciphertext to obtain the plaintext data; The plaintext data is checked using the declaration records of the data exporting enterprises, and the sampling results are obtained and uploaded to the blockchain node.

2. The method for outbound data sampling and supervision based on blockchain and proxy re-encryption according to claim 1 is characterized in that: Before decrypting the third ciphertext to obtain the plaintext data, the method further includes: Updating the sampling inspection information according to the third ciphertext, and returning the updated sampling inspection information to the supervisor; The third ciphertext is obtained according to the updated sampling information.

3. The method for outbound data sampling and supervision based on blockchain and proxy re-encryption according to claim 1 is characterized in that: The public parameters are PP=(G1, G2, e, g, g1, H); where G1 is the first q-order bilinear group, G2 is the second q-order bilinear group, the bilinear map e: G1×G1→G2, g is the generator of G1, g1 is the group element of G1, and the hash function H: {0,1} * →G1.

4. The method for random inspection and supervision of outbound data based on blockchain and proxy re-encryption according to claim 1 is characterized in that: The first public-private key pair is (PK i ,SK i ), the second public-private key pair is (PK j ,SK j );in, SK i =x i , SK j =y j , x i is the first randomly selected value, y j is the second randomly selected value, represents a q-order integer group consisting of elements (1, ..., q-1), i represents the data exporting enterprise, and j represents the supervisor.

5. The method for outbound data sampling and supervision based on blockchain and proxy re-encryption according to claim 4 is characterized in that: The first ciphertext is C=(C1, C2, C3); wherein, r i is the third randomly selected value, M is the plaintext data.

6. The method for random inspection and supervision of outbound data based on blockchain and proxy re-encryption according to claim 4 is characterized in that: The sampling information is {i,j,PK j ,C′,time1}; where C′ is the second ciphertext and time1 represents the sampling timestamp.

7. The method for random inspection and supervision of outbound data based on blockchain and proxy re-encryption according to claim 4 is characterized in that: The re-encryption key is RK j =(RK1, RK2, RK3), where r j is the fourth randomly selected value, 8. The method for random inspection and supervision of outbound data based on blockchain and proxy re-encryption according to claim 6 is characterized in that: The third ciphertext is C″=(C1″, C2″, C3″, C4″); wherein, C1=C1, C2=C2·e(C1,RK2), C3=RK1, C4″=H(H(C1″)||H(C1″||C2″)||H(C2″||C3″)), C′=(C1′, C2′, C3′) is the Two ciphertexts, C1′ represents C1 obtained by random inspection, C2′ represents C2 obtained by random inspection, and C3′ represents C3 obtained by random inspection.

9. The method for outbound data sampling and supervision based on blockchain and proxy re-encryption according to claim 2 is characterized in that: The method of checking the plaintext data by using the declaration record of the data export enterprise, obtaining the sampling inspection result and uploading the sampling inspection result to the blockchain node includes: Using the declaration record of the data exporting enterprise to check the plaintext data, obtain the sampling inspection result and the signature value corresponding to the sampling inspection result; The sampling inspection result and the signature value are uploaded to the blockchain node to perform a secondary update on the updated sampling inspection information.

Images