Delivery method, system and medium supporting transaction rollback and ownership synchronization update

Abstract

The application discloses a delivery method and system supporting transaction rollback and ownership synchronous update and a medium, and belongs to the technical field of data security. The transaction house is composed of a storage management server, an ownership management server and a key management server. The storage management server stores data ciphertext for a long time; the key management server provides key use services for legal users in a trusted execution environment with the assistance of the ownership management server, and trustingly deletes the use permission of the buyer when the use period expires, so that the cross-domain extended access control of the data seller to the data is realized. The core functions such as key management, data encryption and decryption and data use are carried out in an isolated safe environment, the buyer needs to use the key and data according to the strategy legally and regularly, and the key and data cache are immediately cleared after the data use is completed, so that the data is avoided from being illegally held, used or even resold, and the risk of data leakage and abuse is obviously reduced.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data security, and particularly relates to a delivery method and system supporting transaction rollback and ownership synchronous updating and a medium. BACKGROUND

[0002] The orderly circulation of data elements is the basis for the high-quality development of digital economy. The data field transaction promoted by the data transaction platform is one of the important ways to realize the orderly circulation of data elements. At present, China's data transaction platform is still in the initial stage of construction and still has many deficiencies. Specifically, in actual data field transactions, especially for data transactions of data sets, the platform usually adopts an off-platform delivery method, lacks a platform delivery function, resulting in low delivery efficiency, complicated operation, lack of unified standards, and difficulty in ensuring the authenticity, reliability of data and the supervision of transactions. Secondly, in actual data field transactions, data transaction rollback is not supported. Simply using the traditional e-commerce transaction rollback method will make it impossible to return the data ownership synchronously when the data transaction is rolled back, and lack of data verifiable deletion function, resulting in unclear data ownership, and the buyer can claim that he has deleted the purchased data after transaction rollback, but privately retains a copy of the data, making it difficult for the data seller to maintain his legitimate rights and interests.

[0003] The present application designs a data field reliable delivery method supporting transaction rollback and ownership synchronous updating, realizes the orderly circulation of data elements, and ensures that the rights and interests of data delivery parties are not infringed. SUMMARY

[0004] The present application aims to overcome the deficiencies of the prior art and provide a delivery method, system and medium supporting transaction rollback and ownership synchronous updating.

[0005] The purpose of the present application is achieved by the following technical solutions: the present application provides a delivery method supporting transaction rollback and ownership synchronous updating in a first aspect, which includes a storage management server, an ownership management server and a key management server; specifically comprising the following steps:

[0006] S1: generating system public parameters according to security parameters;

[0007] S2: the user registers in the exchange;

[0008] S3: the seller encrypts the data and uploads the ciphertext to the exchange, which saves it in the storage management server, uploads the key to the key management server of the exchange, and the key management server uses the trusted execution environment long-term trusted storage key and the corresponding key usage policy;

[0009] S4: the seller submits a request for modifying the ownership to the exchange, and the exchange modifies the ownership at the ownership management server;

[0010] S5: The seller accesses the key management server and modifies the key usage policy, granting the buyer the right to use the key within the usage period;

[0011] S6: When using data, the buyer obtains a key from the key management server and uses the data within a trusted execution environment and under policy restrictions;

[0012] S7: If the buyer cancels the transaction, the data is reliably deleted based on the trusted execution environment and strategy.

[0013] Preferably, the system common parameters are:

[0014] ;

[0015] in p It is a prime number of the finite field defined by the elliptic curve. G Let represent the additive cyclic group of order 𝑛 formed by points on the elliptic curve, where 𝑔 is a generator of 𝐺 and 𝑛 is the order of generator 𝑔. H ( ) is a hash function from G Mapped to Z p , Enc ( )and Dec ( ) is a pair of public-key encryption algorithms. E ( )and D ( ) is a pair of symmetric encryption algorithms. Sig ( )and Ver ( ) is a pair of digital signature algorithms;

[0016] Exchange ownership management server RM Create a table of rights and interests l And publicly available, this table is used to record the owner and user corresponding to each piece of data; exchange DE and key management server KM Generate a first key pair for encryption and decryption, each bound to the identity. and a second key pair used for signature verification and the public key used for encryption epk DE , epk KM and used for verification spk DE , spk KM Public; in the key manager KM The system uses Intel's SGX technology to generate a secure zone locally. enclave KM This ensures the long-term trusted storage of keys and allows users to... uFollow the correct strategy policy KM Obtain the key; in the user u The system uses Intel's SGX technology to generate a secure zone locally. enclave u Ensure that keys are discarded after use and according to the policy. policy u Use data; in the key manager KM and users u There are still places Quoting Enclave , Quoting Enclave It is a special trustee enclave It is used to apply enclave Provided to prove enclave The report on the correct instantiation of code and data is transformed into a structure that can be externally verified, called... Quote .

[0017] Preferably, the specific steps of S2 are as follows:

[0018] 1) Each user u Register at the exchange to obtain a user identity. ID ;

[0019] 2) Each user u Generate your own first key pair for encryption and decryption. and a second key pair used for signature verification The public key used for encryption epk u and used for verification spk u Uploaded to the exchange, the exchange will epk u and spk u With the corresponding user identity ID The data is bound and stored on the storage management server and made publicly available.

[0020] Preferably, step S3 is as follows:

[0021] 1) The seller randomly generates a symmetric encryption key locally. ek Using a symmetric encryption key ek Data data Encryption yields ciphertext C 1= E ( ek , data ), and the ciphertext C 1. Obtain the encrypted signature by signing. Then the ciphertext C 1 and encrypted signature It is uploaded to the exchange, which then stores it on its storage management server;

[0022] 2) The seller locally generates a private key for the Diffie-Hellman (DH) key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 1. Use a key manager KM public key of encryption epk KM ,right ppk s and tag 1. Encrypt to obtain ciphertext C 2= Using your own signing public key ssk s For ciphertext C 2. Obtain a signature. to the key manager KM Request service, send encrypted text C 2 and signature Send to KM and towards KM Issue a challenge to verify enclave KM Correct instantiation;

[0023] 3) KM Upon receiving the request, first use Verify signature Calculate after verification get ppk s and tag 1, tag 1. Access the Ownership Manager after successful verification RM Check if the seller is the owner of the modified data; if so, accept the challenge. enclave KM Internally generate a random private key for the DH key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 2. Use the seller's public key to pair with the public key. ppk KM timestamp tag 2. Calculate the ciphertext ,right C 3. Obtain a signature by signing with your own private key. ,calculate Obtain the session key ck 1. Generate a report report Contains encrypted text C 3. Signature ,enclave KM Identity and status information;

[0024] 4) KM Will report Send to Quoting Enclave Internal authentication and use of hardware-specific features ECDSA Sign it with the private key to generate Quote ;

[0025] 5) The generated Quote Remote certification service sent to Intel IAS , IAS right Quote Perform verification and generate and return a verification report. KM Send the verification report to the seller;

[0026] 6) The seller receives and examines the verification report to confirm its validity. KM On enclave After confirming that the initialization is correct and the running state is safe, first use... Verify signature Calculate after verification get ppk KM and tag 2, tag 2. Calculate after verification Obtain the session key ck 1. Key generation strategy policy ek Using session keys ck 1 pair of symmetric encryption keys ek Key usage strategy policy ek Encryption yields ciphertext Then use your own signing public key ssk s For ciphertext C 4. Obtain a signature. , ciphertext C 4 and signature Send to KM ;

[0027] 7) KM First use Verify signature After verification enclave Using session keys ck 1. Calculation Obtain the symmetric encryption key ek Key usage strategy policy ek ,exist enclaveMedium- to long-term trusted storage of symmetric encryption keys ek and corresponding key usage policies policy ek .

[0028] Preferably, step S4 is as follows:

[0029] 1) The seller generates a timestamp for the current time. tag 3. Use the exchange DE public key of encryption epk DE Request to change the buyer to the user of the purchased data request and timestamp tag 3. Encrypt to obtain ciphertext Using your own signing public key ssk s For ciphertext C 5. Obtain a signature. to the exchange DE Request service, send encrypted text C 5 and signature Send to DE ;

[0030] 2) DE Upon receiving the request, first query the ownership management server. RM Verify that the seller is the owner of the data being modified. Once verification is successful, use... Verify signature Calculate after verification Received modification request request and tag 3, tag 3. After successful verification, on the ownership management server RM According to the modification request request Modify the data ownership of the corresponding data, and generate a timestamp for the current time after the modification is complete. tag 4. Regarding the message of successful modification response The ciphertext is obtained by encrypting with the seller's public key. ,right C 6. Obtain a signature using the private key. , ciphertext C 6 and signature Send to the seller;

[0031] 3) After receiving the reply message, the seller first uses... Verify signature Calculate after verification Received a reply response and tag 4, tag 4. View the reply after verification. responseThe ownership modification result was obtained.

[0032] Preferably, step S5 is as follows:

[0033] 1) The seller generates a timestamp for the current time. tag 5. Use a key manager KM public key of encryption epk KM Modify the key usage policy for which the buyer has the authority to use the key. policy ek and timestamp tag 5. Encrypt to obtain ciphertext Using your own signing public key ssk s For ciphertext C 7. Obtain a signature. , ciphertext C 7 and signature Send to KM ;

[0034] 2) KM Upon receiving the request, first use Verify signature Calculate after verification get policy ek and tag 5, tag 5. Access the Ownership Manager after successful verification. RM Check if the seller is the owner of the data key usage policy to be modified; if so, then... enclave KM Internal update key usage policy policy ek After modification, generate a timestamp for the current time. tag 6. Regarding the modification results res The ciphertext is obtained by encrypting with the seller's public key. ,right C 8. Obtain a signature using the private key. , ciphertext C 8 and signature Send to the seller;

[0035] 3) After receiving the reply message, the seller first uses... Verify signature Calculate after verification Results res and tag 6, tag 6. View the results after verification. res The key usage policy update result is obtained.

[0036] Preferably, step S6 is as follows:

[0037] 1) The buyer downloads data from the storage management server. data Corresponding ciphertext C 1 and digital signatures Calculate using the seller's signature public key Verify signature After successful verification, a timestamp for the current time will be generated. tag 7. Use a key manager KM public key of encryption epk KM For the use of data encryption keys ek Request request ek and timestamp tag 7. Encrypt to obtain ciphertext Using your own signing public key ssk b For ciphertext C 9. Obtain a signature. , ciphertext C 9 and signature Send to KM ;

[0038] 2) KM Upon receiving the request, first use Verify signature Calculate after verification get request ek and tag 7, tag 7. Access the Ownership Manager after successful verification. RM Check if the buyer is the legitimate user requesting the use of the data key; if so, then... enclave KM Internal key usage policy policy ek Determine the buyer's key usage rights, and then randomly generate a private key for the DH key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 8. Use the buyer's public key to encrypt the ciphertext. ,right C 10 Obtain a signature using the private key. , ciphertext C 10 and signature Send to the buyer and issue a challenge to the buyer to verify. enclave b Correct instantiation;

[0039] 3) After receiving the request, the buyer first uses... Verify signature Calculate after verification get rpk KM and tag 8, tag 8. After passing the verification, accept the challenge. enclave b Internally generate a random private key for the DH key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 9. Use your own public key to pair with the public key rpk b timestamp tag 9. Calculate the ciphertext ,right C 11 Obtain a signature using the private key. ,calculate Obtain the session key ck 2. Generate a report report Contains encrypted text C 11 ,sign , enclave b Identity and status information;

[0040] 4) The buyer will report Send to Quoting Enclave Internal authentication and use ECDSA Sign it with the private key to generate Quote ;

[0041] 5) The generated Quote Remote certification service sent to Intel IAS , IAS right Quote The verification is performed and a verification report is generated and returned. The buyer then sends the verification report to... KM ;

[0042] 6) KM Receive and inspect the verification report to confirm the buyer's... enclave After confirming that the initialization is correct and the running state is safe, first use... Verify signature Calculate after verification get rpk b and tag 9, tag 9. Calculate after verification Obtain the session key ck2. Use session key ck 2 pairs of symmetric encryption keys ek Key usage strategy policy ek Encryption yields ciphertext Then use your own private key ssk KM For ciphertext C 12 Obtain a signature by signing. , ciphertext C 12 and signature Send to the buyer;

[0043] 7) The buyer first uses Verify signature After verification enclave Using session keys ck 2 Calculation Obtain the symmetric encryption key ek Key usage strategy policy ek ,exist enclave According to the key usage policy policy ek Trustworthy use of symmetric encryption keys ek .

[0044] Preferably, step S7 is as follows:

[0045] 1) After the buyer's application is approved, the exchange will manage the ownership on the ownership management server. RM Modify the data ownership of the corresponding data, revoke the buyer's usage rights, and generate a timestamp for the current time after the modification is completed. tag 10 For the cancellation certificate proof 1. Use the seller's public key to encrypt the ciphertext. ,right C 13 Obtain a signature using the private key. , ciphertext C 13 and signature Send to the seller;

[0046] 2) After receiving the message, the seller first uses... Verify signature Calculate after verification Obtain the cancellation certificate proof 1 and tag 10 , tag 10 After successful verification, keep the cancellation certificate safe. proof 1;

[0047] 3) The seller generates a timestamp for the current time. tag 11 Using a key manager KM public key of encryption epk KM Request to revoke the buyer's right to use the key rev and timestamp tag 11 Encryption yields ciphertext Using your own signing public key ssk s For ciphertext C 14 Obtain a signature by signing. , ciphertext C 14 and signature Send to KM ;

[0048] 4) KM Upon receiving the request, first use Verify signature Calculate after verification get rev and tag 11 , tag 11 Access to the Ownership Manager after successful verification RM Check if the seller is the data owner and if the buyer's usage rights have been revoked. If so, then... enclave KM Internal update key usage policy policy ek After modification, generate a timestamp for the current time. tag 12 For the cancellation certificate proof 2. Use the seller's public key to encrypt the ciphertext. ,right C 15 Obtain a signature using the private key. , ciphertext C 15 and signature Send to the seller;

[0049] 5) After receiving the reply message, the seller first uses... Verify signature Calculate after verification Obtain the cancellation certificate proof 2 and tag 12 , tag 12 After successful verification, keep the cancellation certificate safe. proof2. Buyer's data key ek In a trusted execution environment and based on policy policy Use it so that the data key is used after each use. ek The decrypted data will be discarded and strictly restricted from leaving the domain in plaintext. Therefore, the buyer must re-access the key manager each time they use the data. KM Request data key ek By modifying the ownership and key usage policy on the key manager, the buyer is prevented from obtaining the data key. ek This enables reliable deletion of data after the buyer cancels the transaction.

[0050] A second aspect of the present invention provides: a delivery system supporting transaction rollback and ownership synchronization update, for implementing any of the above-mentioned delivery methods supporting transaction rollback and ownership synchronization update, comprising:

[0051] The parameter generation module is used to generate common system parameters based on security parameters.

[0052] The registration module is used for registering with the exchange.

[0053] The encryption module is used to encrypt data and upload the ciphertext to the exchange. The exchange stores it on the storage management server and uploads the key to the exchange's key management server. The key management server uses a trusted execution environment to store the key and the corresponding key usage policy in a long-term trusted storage.

[0054] The ownership modification module is used to submit a request to the exchange to modify ownership, and the exchange modifies ownership at the ownership management server;

[0055] The key permission modification module is used to access the key management server and modify the key usage policy, so that the buyer has the right to use the key within the usage period;

[0056] The key acquisition module is used to obtain a key from the key management server when using data, and to use data in a trusted execution environment and under policy restrictions.

[0057] The trusted deletion module is used to achieve trusted deletion of data based on a trusted execution environment and strategy when the buyer cancels the transaction;

[0058] The exchange includes a storage management server, an ownership management server, and a key management server.

[0059] A third aspect of the present invention provides: a computer-readable storage medium storing computer-executable instructions, wherein when the computer-executable instructions are loaded and executed by a processor, any of the above-mentioned delivery methods supporting transaction rollback and ownership synchronization update are implemented.

[0060] The beneficial effects of this invention are:

[0061] 1) Using Intel Software Guard Extensions (SGX) provides hardware-level isolation protection for data. Core functions such as data encryption and decryption, key management, etc. are performed in an isolated secure environment. Keys and data are used legally and compliantly according to policies. Keys and data caches are cleared immediately after data use to prevent data from being illegally held, used, or even resold. This significantly reduces the risk of data leakage and abuse. Furthermore, using SGX reduces the trust cost for data owners to the key management server, enabling secure storage of data keys even in untrusted environments. The trust model can be reduced to semi-trust, while ensuring that exchanges cannot illegally obtain user data keys and thus obtain user data for profit.

[0062] 2) Data ownership information is updated synchronously at each stage of data delivery to ensure that data ownership is consistent with the actual transaction status, improve transaction transparency, provide reliable evidence for disputes, and reduce legal disputes arising from data delivery. Attached Figure Description

[0063] Figure 1 This is a flowchart of one embodiment of the data delivery method in this invention. Detailed Implementation

[0064] The technical solution of the present invention will be clearly and completely described below with reference to the embodiments. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0065] See Figure 1 The present invention provides a technical solution: The first aspect of the present invention provides a delivery method supporting transaction rollback and ownership synchronization updates, wherein the exchange comprises three parts: a storage management server, an ownership management server, and a key management server; specifically including the following steps:

[0066] S1: Generate system common parameters based on safety parameters;

[0067] S2: Users register on the exchange;

[0068] S3: The seller encrypts the data and uploads the ciphertext to the exchange. The exchange stores it on its storage management server and uploads the key to its key management server. The key management server uses a trusted execution environment to store the key and the corresponding key usage policy in a long-term trusted storage.

[0069] S4: The seller submits a request to the exchange to modify the ownership, and the exchange modifies the ownership at the ownership management server;

[0070] S5: The seller accesses the key management server and modifies the key usage policy, granting the buyer the right to use the key within the usage period;

[0071] S6: When using data, the buyer obtains a key from the key management server and uses the data within a trusted execution environment and under policy restrictions;

[0072] S7: If the buyer cancels the transaction, the data is reliably deleted based on the trusted execution environment and strategy.

[0073] In some embodiments, the system common parameters are:

[0074] ;

[0075] in p It is a prime number of the finite field defined by the elliptic curve. G Let represent the additive cyclic group of order 𝑛 formed by points on the elliptic curve, where 𝑔 is a generator of 𝐺 and 𝑛 is the order of generator 𝑔. H ( ) is a hash function from G Mapped to Z p , Enc ( )and Dec ( ) is a pair of public-key encryption algorithms. E ( )and D ( ) is a pair of symmetric encryption algorithms. Sig ( )and Ver ( ) is a pair of digital signature algorithms;

[0076] Exchange ownership management server RM Create a table of rights and interests l And publicly available, this table is used to record the owner and user corresponding to each piece of data; exchange DE and key management server KM Generate a first key pair for encryption and decryption, each bound to the identity. and a second key pair used for signature verification and the public key used for encryption epk DE , epk KM and used for verification spk DE , spk KM Public; in the key manager KM The system uses Intel's SGX technology to generate a secure zone locally. enclaveKM This ensures the long-term trusted storage of keys and allows users to... u Follow the correct strategy policy KM Obtain the key; in the user u The system uses Intel's SGX technology to generate a secure zone locally. enclave u Ensure that keys are discarded after use and according to the policy. policy u Use data; in the key manager KM and users u There are still places Quoting Enclave , Quoting Enclave It is a special trustee enclave It is used to apply enclave Provided to prove enclave The report on the correct instantiation of code and data is transformed into a structure that can be externally verified, called... Quote .

[0077] In some embodiments, step S2 specifically includes the following steps:

[0078] 1) Each user u Register at the exchange to obtain a user identity. ID ;

[0079] 2) Each user u Generate your own first key pair for encryption and decryption. and a second key pair used for signature verification The public key used for encryption epk u and used for verification spk u Uploaded to the exchange, the exchange will epk u and spk u With the corresponding user identity ID The data is bound and stored on the storage management server and made publicly available.

[0080] In some embodiments, step S3 specifically includes the following steps:

[0081] 1) The seller randomly generates a symmetric encryption key locally. ek Using a symmetric encryption key ek Data data Encryption yields ciphertext C 1= E ( ek , data ), and the ciphertext C 1. Obtain the encrypted signature by signing. Then the ciphertext C 1 and encrypted signature It is uploaded to the exchange, which then stores it on its storage management server;

[0082] 2) The seller locally generates a private key for the Diffie-Hellman (DH) key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 1. Use a key manager KM public key of encryption epk KM ,right ppk s and tag 1. Encrypt to obtain ciphertext C 2= Using your own signing public key ssk s For ciphertext C 2. Obtain a signature. to the key manager KM Request service, send encrypted text C 2 and signature Send to KM and towards KM Issue a challenge to verify enclave KM Correct instantiation;

[0083] 3) KM Upon receiving the request, first use Verify signature Calculate after verification get ppk s and tag 1, tag 1. Access the Ownership Manager after successful verification RM Check if the seller is the owner of the modified data; if so, accept the challenge. enclave KM Internally generate a random private key for the DH key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 2. Use the seller's public key to pair with the public key. ppk KM timestamp tag 2. Calculate the ciphertext ,right C 3. Obtain a signature by signing with your own private key. ,calculate Obtain the session key ck 1. Generate a reportreport Contains encrypted text C 3. Signature , enclave KM Identity and status information;

[0084] 4) KM Will report Send to Quoting Enclave Internal authentication and use of hardware-specific features ECDSA Sign it with the private key to generate Quote ;

[0085] 5) The generated Quote Remote certification service sent to Intel IAS , IAS right Quote Perform verification and generate and return a verification report. KM Send the verification report to the seller;

[0086] 6) The seller receives and examines the verification report to confirm its validity. KM On enclave After confirming that the initialization is correct and the running state is safe, first use... Verify signature Calculate after verification get ppk KM and tag 2, tag 2. Calculate after verification Obtain the session key ck 1. Key generation strategy policy ek Using session keys ck 1 pair of symmetric encryption keys ek Key usage strategy policy ek Encryption yields ciphertext Then use your own signing public key ssk s For ciphertext C 4. Obtain a signature. , ciphertext C 4 and signature Send to KM ;

[0087] 7) KM First use Verify signature After verification enclave Using session keys ck 1. Calculation Obtain the symmetric encryption key ekKey usage strategy policy ek ,exist enclave Medium- to long-term trusted storage of symmetric encryption keys ek and corresponding key usage policies policy ek .

[0088] In some embodiments, step S4 specifically includes the following steps:

[0089] 1) The seller generates a timestamp for the current time. tag 3. Use the exchange DE public key of encryption epk DE Request to change the buyer to the user of the purchased data request and timestamp tag 3. Encrypt to obtain ciphertext Using your own signing public key ssk s For ciphertext C 5. Obtain a signature. to the exchange DE Request service, send encrypted text C 5 and signature Send to DE ;

[0090] 2) DE Upon receiving the request, first query the ownership management server. RM Verify that the seller is the owner of the data being modified. Once verification is successful, use... Verify signature Calculate after verification Received modification request request and tag 3, tag 3. After successful verification, on the ownership management server RM According to the modification request request Modify the data ownership of the corresponding data, and generate a timestamp for the current time after the modification is complete. tag 4. Regarding the message of successful modification response The ciphertext is obtained by encrypting with the seller's public key. ,right C 6. Obtain a signature using the private key. , ciphertext C 6 and signature Send to the seller;

[0091] 3) After receiving the reply message, the seller first uses... Verify signature Calculate after verification Received a reply response andtag 4, tag 4. View the reply after verification. response The ownership modification result was obtained.

[0092] In some embodiments, step S5 specifically includes the following steps:

[0093] 1) The seller generates a timestamp for the current time. tag 5. Use a key manager KM public key of encryption epk KM Modify the key usage policy for which the buyer has the authority to use the key. policy ek and timestamp tag 5. Encrypt to obtain ciphertext Using your own signing public key ssk s For ciphertext C 7. Obtain a signature. , ciphertext C 7 and signature Send to KM ;

[0094] 2) KM Upon receiving the request, first use Verify signature Calculate after verification get policy ek and tag 5, tag 5. Access the Ownership Manager after successful verification. RM Check if the seller is the owner of the data key usage policy to be modified; if so, then... enclave KM Internal update key usage policy policy ek After modification, generate a timestamp for the current time. tag 6. Regarding the modification results res The ciphertext is obtained by encrypting with the seller's public key. ,right C 8. Obtain a signature using the private key. , ciphertext C 8 and signature Send to the seller;

[0095] 3) After receiving the reply message, the seller first uses... Verify signature Calculate after verification Results res and tag 6, tag 6. View the results after verification.res The key usage policy update result is obtained.

[0096] In some embodiments, step S6 specifically includes the following steps:

[0097] 1) The buyer downloads data from the storage management server. data Corresponding ciphertext C 1 and digital signatures Calculate using the seller's signature public key Verify signature After successful verification, a timestamp for the current time will be generated. tag 7. Use a key manager KM public key of encryption epk KM For the use of data encryption keys ek Request request ek and timestamp tag 7. Encrypt to obtain ciphertext Using your own signing public key ssk b For ciphertext C 9. Obtain a signature. , ciphertext C 9 and signature Send to KM ;

[0098] 2) KM Upon receiving the request, first use Verify signature Calculate after verification get request ek and tag 7, tag 7. Access the Ownership Manager after successful verification. RM Check if the buyer is the legitimate user requesting the use of the data key; if so, then... enclave KM Internal key usage policy policy ek Determine the buyer's key usage rights, and then randomly generate a private key for the DH key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 8. Use the buyer's public key to encrypt the ciphertext. ,right C 10 Obtain a signature using the private key. , ciphertext C 10 and signature Send to the buyer and issue a challenge to the buyer to verify. enclave b Correct instantiation;

[0099] 3) After receiving the request, the buyer first uses... Verify signature Calculate after verification get rpk KM and tag 8, tag 8. After passing the verification, accept the challenge. enclave b Internally generate a random private key for the DH key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 9. Use your own public key to pair with the public key rpk b timestamp tag 9. Calculate the ciphertext ,right C 11 Obtain a signature using the private key. ,calculate Obtain the session key ck 2. Generate a report report Contains encrypted text C 11 ,sign , enclave b Identity and status information;

[0100] 4) The buyer will report Send to Quoting Enclave Internal authentication and use ECDSA Sign it with the private key to generate Quote ;

[0101] 5) The generated Quote Remote certification service sent to Intel IAS , IAS right Quote The verification is performed and a verification report is generated and returned. The buyer then sends the verification report to... KM ;

[0102] 6) KM Receive and inspect the verification report to confirm the buyer's... enclave After confirming that the initialization is correct and the running state is safe, first use... Verify signature Calculate after verification get rpk b andtag 9, tag 9. Calculate after verification Obtain the session key ck 2. Use session key ck 2 pairs of symmetric encryption keys ek Key usage strategy policy ek Encryption yields ciphertext Then use your own private key ssk KM For ciphertext C 12 Obtain a signature by signing. , ciphertext C 12 and signature Send to the buyer;

[0103] 7) The buyer first uses Verify signature After verification enclave Using session keys ck 2 Calculation Obtain the symmetric encryption key ek Key usage strategy policy ek ,exist enclave According to the key usage policy policy ek Trustworthy use of symmetric encryption keys ek .

[0104] In some embodiments, step S7 specifically includes the following steps:

[0105] 1) After the buyer's application is approved, the exchange will manage the ownership on the ownership management server. RM Modify the data ownership of the corresponding data, revoke the buyer's usage rights, and generate a timestamp for the current time after the modification is completed. tag 10 For the cancellation certificate proof 1. Use the seller's public key to encrypt the ciphertext. ,right C 13 Obtain a signature using the private key. , ciphertext C 13 and signature Send to the seller;

[0106] 2) After receiving the message, the seller first uses... Verify signature Calculate after verification Obtain the cancellation certificate proof 1 and tag 10 ,tag 10 After successful verification, keep the cancellation certificate safe. proof 1;

[0107] 3) The seller generates a timestamp for the current time. tag 11 Using a key manager KM public key of encryption epk KM Request to revoke the buyer's right to use the key rev and timestamp tag 11 Encryption yields ciphertext Using your own signing public key ssk s For ciphertext C 14 Obtain a signature by signing. , ciphertext C 14 and signature Send to KM ;

[0108] 4) KM Upon receiving the request, first use Verify signature Calculate after verification get rev and tag 11 , tag 11 Access to the Ownership Manager after successful verification RM Check if the seller is the data owner and if the buyer's usage rights have been revoked. If so, then... enclave KM Internal update key usage policy policy ek After modification, generate a timestamp for the current time. tag 12 For the cancellation certificate proof 2. Use the seller's public key to encrypt the ciphertext. ,right C 15 Obtain a signature using the private key. , ciphertext C 15 and signature Send to the seller;

[0109] 5) After receiving the reply message, the seller first uses... Verify signature Calculate after verification Obtain the cancellation certificate proof 2 and tag12 , tag 12 After successful verification, keep the cancellation certificate safe. proof 2. Buyer's data key ek In a trusted execution environment and based on policy policy Use it so that the data key is used after each use. ek The decrypted data will be discarded and strictly restricted from leaving the domain in plaintext. Therefore, the buyer must re-access the key manager each time they use the data. KM Request data key ek By modifying the ownership and key usage policy on the key manager, the buyer is prevented from obtaining the data key. ek This enables reliable deletion of data after the buyer cancels the transaction.

[0110] A second aspect of the present invention provides: a delivery system supporting transaction rollback and ownership synchronization update, for implementing any of the above-mentioned delivery methods supporting transaction rollback and ownership synchronization update, comprising:

[0111] The parameter generation module is used to generate common system parameters based on security parameters.

[0112] The registration module is used for registering with the exchange.

[0113] The encryption module is used to encrypt data and upload the ciphertext to the exchange. The exchange stores it on the storage management server and uploads the key to the exchange's key management server. The key management server uses a trusted execution environment to store the key and the corresponding key usage policy in a long-term trusted storage.

[0114] The ownership modification module is used to submit a request to the exchange to modify ownership, and the exchange modifies ownership at the ownership management server;

[0115] The key permission modification module is used to access the key management server and modify the key usage policy, so that the buyer has the right to use the key within the usage period;

[0116] The key acquisition module is used to obtain a key from the key management server when using data, and to use data in a trusted execution environment and under policy restrictions.

[0117] The trusted deletion module is used to achieve trusted deletion of data based on a trusted execution environment and strategy when the buyer cancels the transaction;

[0118] The exchange includes a storage management server, an ownership management server, and a key management server.

[0119] A third aspect of the present invention provides: a computer-readable storage medium storing computer-executable instructions, wherein when the computer-executable instructions are loaded and executed by a processor, any of the above-mentioned delivery methods supporting transaction rollback and ownership synchronization update are implemented.

[0120] The above description is merely a preferred embodiment of the present invention. It should be understood that the present invention is not limited to the forms disclosed herein and should not be construed as excluding other embodiments. It can be used in various other combinations, modifications, and environments, and can be altered within the scope of the concept described herein through the above teachings or related technologies or knowledge. Modifications and variations made by those skilled in the art that do not depart from the spirit and scope of the present invention should be within the protection scope of the appended claims.

Claims

1. A delivery method supporting transaction rollback and ownership synchronization update, characterized in that: The exchange consists of three parts: a storage management server, an ownership management server, and a key management server; specifically, it includes the following steps: S1: Generate system common parameters based on safety parameters; S2: Users register on the exchange; S3: The seller encrypts the data and uploads the ciphertext to the exchange. The exchange stores it on its storage management server and uploads the key to its key management server. The key management server uses a trusted execution environment to store the key and the corresponding key usage policy in a long-term trusted storage. S4: The seller submits a request to the exchange to modify the ownership, and the exchange modifies the ownership at the ownership management server; S5: The seller accesses the key management server and modifies the key usage policy, granting the buyer the right to use the key within the usage period; S6: When using data, the buyer obtains a key from the key management server and uses the data within a trusted execution environment and under policy restrictions; S7: If the buyer cancels the transaction, the data is reliably deleted based on the trusted execution environment and strategy; The specific steps of S2 are as follows: 1) Each user u Register at the exchange to obtain a user identity. ID ; 2) Each user u Generate your own first key pair for encryption and decryption. and a second key pair used for signature verification The public key used for encryption epk u and used for verification spk u Uploaded to the exchange, the exchange will epk u and spk u With the corresponding user identity ID The data is bound and stored on the storage management server and made publicly available.

2. The delivery method supporting transaction rollback and ownership synchronization update according to claim 1, characterized in that: The system's common parameters are: ； in p It is a prime number of the finite field defined by the elliptic curve. G Let represent the additive cyclic group of order 𝑛 formed by points on the elliptic curve, where 𝑔 is a generator of 𝐺 and 𝑛 is the order of generator 𝑔. H ( ) is a hash function from G Mapped to Z p , Enc ( )and Dec ( ) is a pair of public-key encryption algorithms. E ( )and D ( ) is a pair of symmetric encryption algorithms. Sig ( )and Ver ( ) is a pair of digital signature algorithms; Exchange ownership management server RM Create a table of rights and interests l The table is publicly available and is used to record the owner and user of each piece of data. Exchange DE and key management server KM Generate a first key pair for encryption and decryption, each bound to the identity. and a second key pair used for signature verification and the public key used for encryption epk DE , epk KM and used for verification spk DE , spk KM Public; in the key manager KM The system uses Intel's SGX technology to generate a secure zone locally. enclave KM This ensures the long-term trusted storage of keys and allows users to... u Follow the correct strategy policy KM Obtain the key; in the user u The system uses Intel's SGX technology to generate a secure zone locally. enclave u Ensure that keys are discarded after use and according to the policy. policy u Use data; in the key manager KM and users u There are still places Quoting Enclave , Quoting Enclave It is a special trustee enclave It is used to apply enclave Provided to prove enclave The report on the correct instantiation of code and data is transformed into a structure that can be externally verified, called... Quote .

3. The delivery method supporting transaction rollback and ownership synchronization update according to claim 2, characterized in that: The specific steps of S3 are as follows: 1) The seller randomly generates a symmetric encryption key locally. ek Using a symmetric encryption key ek Data data Encryption yields ciphertext C 1= E ( ek , data ), and the ciphertext C 1. Obtain the encrypted signature by signing. Then the ciphertext C 1 and encrypted signature It is uploaded to the exchange, which then stores it on its storage management server; 2) The seller locally generates a private key for the Diffie-Hellman (DH) key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 1. Use a key manager KM public key of encryption epk KM ,right ppk s and tag 1. Encrypt to obtain ciphertext C 2= Using your own signing public key ssk s For ciphertext C 2. Obtain a signature. to the key manager KM Request service, send encrypted text C 2 and signature Send to KM and towards KM Issue a challenge to verify enclave KM Correct instantiation; 3) KM Upon receiving the request, first use Verify signature Calculate after verification get ppk s and tag 1, tag 1. Access the Ownership Manager after successful verification RM Check if the seller is the owner of the modified data; if so, accept the challenge. enclave KM Internally generate a random private key for the DH key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 2. Use the seller's public key to pair with the public key. ppk KM timestamp tag 2. Calculate the ciphertext ,right C 3. Obtain a signature by signing with your own private key. ,calculate Obtain the session key ck 1. Generate a report report Contains encrypted text C 3. Signature , enclave KM Identity and status information; 4) KM Will report Send to Quoting Enclave Internal authentication and use of hardware-specific features ECDSA Sign it with the private key to generate Quote ; 5) The generated Quote Remote certification service sent to Intel IAS , IAS right Quote Perform verification and generate and return a verification report. KM Send the verification report to the seller; 6) The seller receives and examines the verification report to confirm its validity. KM On enclave After confirming that the initialization is correct and the running state is safe, first use... Verify signature Calculate after verification get ppk KM and tag 2, tag 2. Calculate after verification Obtain the session key ck 1. Key generation strategy policy ek Using session keys ck 1 pair of symmetric encryption keys ek Key usage strategy policy ek Encryption yields ciphertext Then use your own signing public key ssk s For ciphertext C 4. Obtain a signature. , ciphertext C 4 and signature Send to KM ; 7) KM First use Verify signature After verification enclave Using session keys ck 1. Calculation Obtain the symmetric encryption key ek Key usage strategy policy ek ,exist enclave Medium- to long-term trusted storage of symmetric encryption keys ek and corresponding key usage policies policy ek .

4. The delivery method supporting transaction rollback and ownership synchronization update according to claim 3, characterized in that: The specific steps of S4 are as follows: 1) The seller generates a timestamp for the current time. tag 3. Use the exchange DE public key of encryption epk DE Request to change the buyer to the user of the purchased data request and timestamp tag 3. Encrypt to obtain ciphertext Using your own signing public key ssk s For ciphertext C 5. Obtain a signature. to the exchange DE Request service, send encrypted text C 5 and signature Send to DE ; 2) DE Upon receiving the request, first query the ownership management server. RM Verify that the seller is the owner of the data being modified. Once verification is successful, use... Verify signature Calculate after verification Received modification request request and tag 3, tag 3. After successful verification, on the ownership management server RM Based on the modification request request Modify the data ownership of the corresponding data, and generate a timestamp for the current time after the modification is complete. tag 4. Regarding the message of successful modification response The ciphertext is obtained by encrypting with the seller's public key. ,right C 6. Obtain a signature using the private key. , ciphertext C 6 and signature Send to the seller; 3) After receiving the reply message, the seller first uses... Verify signature Calculate after verification Received a reply response and tag 4, tag 4. View the reply after verification. response The ownership modification result was obtained.

5. The delivery method supporting transaction rollback and ownership synchronization update according to claim 4, characterized in that: The specific steps of S5 are as follows: 1) The seller generates a timestamp for the current time. tag 5. Use a key manager KM public key of encryption epk KM Modify the key usage policy for which the buyer has the authority to use the key. policy ek and timestamp tag 5. Encrypt to obtain ciphertext Using your own signing public key ssk s For ciphertext C 7. Obtain a signature. , ciphertext C 7 and signature Send to KM ; 2) KM Upon receiving the request, first use Verify signature Calculate after verification get policy ek and tag 5, tag 5. Access the Ownership Manager after successful verification. RM Check if the seller is the owner of the data key usage policy to be modified; if so, then... enclave KM Internal update key usage policy policy ek After modification, generate a timestamp for the current time. tag 6. Regarding the modification results res The ciphertext is obtained by encrypting with the seller's public key. ,right C 8. Obtain a signature by signing with the private key. , ciphertext C 8 and signature Send to the seller; 3) After receiving the reply message, the seller first uses... Verify signature Calculate after verification Results res and tag 6, tag 6. View the results after verification. res The key usage policy update result is obtained.

6. The delivery method supporting transaction rollback and ownership synchronization update according to claim 5, characterized in that: The specific steps of S6 are as follows: 1) The buyer downloads data from the storage management server. data Corresponding ciphertext C 1 and digital signatures Calculate using the seller's signature public key Verify signature After successful verification, a timestamp for the current time will be generated. tag 7. Use a key manager KM public key of encryption epk KM For the use of data encryption keys ek Request request ek and timestamp tag 7. Encrypt to obtain ciphertext Using your own signing public key ssk b For ciphertext C 9. Obtain a signature. , ciphertext C 9 and signature Send to KM ; 2) KM Upon receiving the request, first use Verify signature Calculate after verification get request ek and tag 7, tag 7. Access the Ownership Manager after successful verification. RM Check if the buyer is the legitimate user requesting the use of the data key; if so, then... enclave KM Internal key usage policy policy ek Determine the buyer's key usage rights, and then randomly generate a private key for the DH key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 8. Use the buyer's public key to encrypt the ciphertext. ,right C 10 Obtain the signature using the private key. , ciphertext C 10 and signature Send to the buyer and issue a challenge to the buyer to verify. enclave b Correct instantiation; 3) After receiving the request, the buyer first uses... Verify signature Calculate after verification get rpk KM and tag 8, tag 8. After passing the verification, accept the challenge. enclave b Internally generate a random private key for the DH key exchange protocol. Then calculate the public key. Generate a timestamp for the current time. tag 9. Use your own public key to pair with your public key. rpk b timestamp tag 9. Calculate the ciphertext ,right C 11 Obtain the signature using the private key. ,calculate Obtain the session key ck 2. Generate a report report Contains encrypted text C 11 ,sign , enclave b Identity and status information; 4) The buyer will report Send to Quoting Enclave Internal authentication and use ECDSA Sign it with the private key to generate Quote ; 5) The generated Quote Remote certification service sent to Intel IAS , IAS right Quote The verification is performed and a verification report is generated and returned. The buyer then sends the verification report to... KM ; 6) KM Receive and inspect the verification report to confirm the buyer's... enclave After confirming that the initialization is correct and the running state is safe, first use... Verify signature Calculate after verification get rpk b and tag 9, tag 9. Calculate after verification Obtain the session key ck 2. Use session key ck 2 pairs of symmetric encryption keys ek Key usage strategy policy ek Encryption yields ciphertext Then use your own private key ssk KM For ciphertext C 12 Obtain a signature by signing. , ciphertext C 12 and signature Send to the buyer; 7) The buyer first uses Verify signature After verification enclave Using session keys ck 2 Calculation Obtain the symmetric encryption key ek Key usage strategy policy ek ,exist enclave According to the key usage policy policy ek Trustworthy use of symmetric encryption keys ek .

7. The delivery method supporting transaction rollback and ownership synchronization update according to claim 6, characterized in that: The specific steps of S7 are as follows: 1) After the buyer's application is approved, the exchange will manage the ownership on the ownership management server. RM Modify the data ownership of the corresponding data, revoke the buyer's usage rights, and generate a timestamp for the current time after the modification is completed. tag 10 For the cancellation certificate proof 1. Use the seller's public key to encrypt the ciphertext. ,right C 13 Obtain the signature using the private key. , ciphertext C 13 and signature Send to the seller; 2) After receiving the message, the seller first uses... Verify signature Calculate after verification Obtain the cancellation certificate proof 1 and tag 10 , tag 10 After successful verification, keep the cancellation certificate safe. proof 1; 3) The seller generates a timestamp for the current time. tag 11 Using a key manager KM public key of encryption epk KM Request to revoke the buyer's right to use the key rev and timestamp tag 11 Encryption yields ciphertext Using your own signing public key ssk s For ciphertext C 14 Obtain a signature by signing. , ciphertext C 14 and signature Send to KM ; 4) KM Upon receiving the request, first use Verify signature Calculate after verification get rev and tag 11 , tag 11 Access to the Ownership Manager after successful verification RM Check if the seller is the data owner and if the buyer's usage rights have been revoked. If so, then... enclave KM Internal update key usage policy policy ek After modification, generate a timestamp for the current time. tag 12 For the cancellation certificate proof 2. Use the seller's public key to encrypt the ciphertext. ,right C 15 Obtain the signature using the private key. , ciphertext C 15 and signature Send to the seller; 5) After receiving the reply message, the seller first uses... Verify signature Calculate after verification Obtain the cancellation certificate proof 2 and tag 12 , tag 12 After successful verification, keep the cancellation certificate safe. proof 2. Buyer's data key ek In a trusted execution environment and based on policy policy Use it so that the data key is used after each use. ek The decrypted data will be discarded and strictly restricted from leaving the domain in plaintext. Therefore, the buyer must re-access the key manager each time they use the data. KM Request data key ek By modifying the ownership and key usage policy on the key manager, the buyer is prevented from obtaining the data key. ek This enables reliable deletion of data after the buyer cancels the transaction.

8. A delivery system that supports transaction rollback and ownership synchronization updates, characterized in that: A delivery method for implementing the method for supporting transaction rollback and ownership synchronization update as described in any one of claims 1-7, comprising: The parameter generation module is used to generate common system parameters based on security parameters. The registration module is used for registering with the exchange. The encryption module is used to encrypt data and upload the ciphertext to the exchange. The exchange stores it on the storage management server and uploads the key to the exchange's key management server. The key management server uses a trusted execution environment to store the key and the corresponding key usage policy in a long-term trusted storage. The ownership modification module is used to submit a request to the exchange to modify ownership, and the exchange modifies ownership at the ownership management server; The key permission modification module is used to access the key management server and modify the key usage policy, so that the buyer has the right to use the key within the usage period; The key acquisition module is used to obtain a key from the key management server when using data, and to use data in a trusted execution environment and under policy restrictions. The trusted deletion module is used to achieve trusted deletion of data based on a trusted execution environment and strategy when the buyer cancels the transaction; The exchange includes a storage management server, an ownership management server, and a key management server.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which, when loaded and executed by a processor, implement the delivery method supporting transaction rollback and ownership synchronization update as described in any one of claims 1-7.

Images