Data asset transaction control method and device, decentralized PUF network and storage medium

Abstract

The invention relates to a data asset transaction control method and device based on physical property driving, a decentralized PUF network and a readable storage medium. The method comprises the following steps: receiving transaction information sent by a transfer-out party of target data asset ownership; the transaction information is sent to a verification node, the verification node is any one PUF device in the decentralized PUF network, and the verification node is driven by the physical characteristics of the PUF device of the verification node and verifies the transaction signatures of the transfer-out party of the ownership and the receiving party of the ownership according to the approval encryption information and the transaction initiation identifier in the transaction information; verifying the validity of the target data assets in a mode of communicating with the ownership transfer-out party after the verification is passed, and generating verification confirmation information when the target data assets are confirmed to be valid; and when verification confirmation information of the verification node is received, transferring the ownership of the target data asset to a receiver of the ownership. According to the method, decentralized data asset transaction control can be realized.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a data asset transaction control method and device driven by physical properties, a decentralized PUF network, and a readable storage medium. Background Art

[0002] At present, with the rapid development of Internet technology and information society, data assets have gradually become one of the core resources of individuals, enterprises and even countries. Data assets include but are not limited to cryptocurrencies, digital files, electronic contracts, digital identity authentication, etc. These assets are stored and traded in a virtual environment, and their security is crucial to the stability of economic activities and information protection. Although the widespread application of data assets has brought convenience, its security still faces many challenges. The storage and trading of data assets mainly rely on the network environment and are vulnerable to threats such as hacker attacks and data tampering. Many data asset transactions rely on centralized platforms, which not only have single point failure problems, but may also cause user asset losses due to poor internal management or attacks. At the same time, insufficient privacy protection and the lack of protection against physical attacks by existing security mechanisms make it difficult for data assets to protect user privacy and respond to hardware-level attacks.

[0003] PUF technology, with its unique physical properties and security, provides a strong guarantee for the secure storage and transmission of data assets. The Physical Unclonable Function (PUF) feature relies on the chip characteristics and random differences in the manufacturing process, such as the working environment, production process, etc., which generate important information. These random differences make PUF unclonable and unpredictable, and cannot be simulated or copied, providing security for low-cost and high-security identity authentication mechanisms. Summary of the invention

[0004] Based on this, it is necessary to provide a data asset transaction control method, device, decentralized PUF network and readable storage medium driven by physical properties to address the above technical problems. This method can be driven by the physical properties of each PUF device in the decentralized PUF network to achieve decentralized data asset transaction control. The PUF is unclonable and unpredictable, and cannot be simulated or copied, providing security for low-cost and high-security ownership protection and secure transfer of ownership.

[0005] A data asset transaction control method based on physical property drive is applied to a decentralized PUF network, comprising: receiving transaction information sent by a transferor of target data asset ownership, the transaction information including the target data asset, the transaction signature of the transferor, the transaction signature of the recipient of the target data asset ownership, approval encryption information and a transaction initiation identifier, the transferor and the recipient are both PUF devices and the transaction signatures of both recipients use the physical property drive of their own PUF devices to digitally sign the approval encryption information and the transaction initiation identifier, the approval encryption information is generated based on the transaction initiation identifier, and the transaction initiation identifier is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive; sending the transaction information to a verification node, which is any PUF device in the decentralized PUF network, the verification node uses the physical property drive of its own PUF device and verifies the transaction signature of the transferor and the transaction signature of the recipient according to the approval encryption information and the transaction initiation identifier, and after the verification is passed, verifies the validity of the target data asset by point-to-point communication with the transferor and generates verification confirmation information when it is confirmed to be valid; when receiving the verification confirmation information from the verification node, transfers the ownership of the target data asset to the recipient.

[0006] In one of the embodiments, the recipient uses the transaction identifier generated by the transferor as an incentive to generate a response, and sends the generated response as a transaction initiation identifier to the transferor; the transferor uses the transaction initiation identifier as an incentive to generate a response as a first key, and uses the first key as an incentive to generate a response as a second key, generates approval encryption information based on the first key and the transaction initiation identifier, uses its own PUF device to digitally sign the approval encryption information and the transaction initiation identifier to generate the transferor's transaction signature, and sends the second key and the approval encryption information to the transferor; the recipient verifies the approval encryption information based on the second key, and when it is verified that the approval encryption information contains the transaction initiation identifier, uses its own PUF device to digitally sign the approval encryption information and the transaction initiation identifier to generate the recipient's transaction signature.

[0007] In one of the embodiments, the verification node conducts point-to-point communication with the transferor, requests a public key from the transferor of ownership, decrypts the target data asset using the public key, and compares the decrypted target data asset with the plain text corresponding to the locally pre-stored target data asset. If the comparison is consistent, the target data asset is confirmed to be valid; wherein, the target data asset is encrypted by the transferor using the private key corresponding to the public key.

[0008] In one of the embodiments, the verification node generates a transaction signature field through a hash summary of the transaction information and using its own PUF device, and the verification confirmation information includes the generated transaction signature field.

[0009] In one of the embodiments, there are multiple verification nodes, and when verification confirmation information from the verification node is received, the ownership of the target data asset is transferred to the recipient, including: when verification confirmation information from verification nodes exceeding a preset number is received, the ownership of the target data asset is transferred to the recipient.

[0010] In one of the embodiments, the plurality of verification nodes are screened based on preset conditions, where the preset conditions include any one or more of the geographical location, historical reliability, historical response time, and historical load capacity of the PUF device.

[0011] In one of the embodiments, the target data asset includes descriptive information of the target data, an ownership identifier of the target data asset, additional attribute information of the target data asset, and historical transaction information of the target data asset.

[0012] A data asset transaction control device based on physical property drive is applied to a decentralized PUF network, including a receiving module for receiving transaction information sent by a transferor of target data asset ownership, wherein the transaction information includes the target data asset, the transaction signature of the transferor, the transaction signature of the recipient of the target data asset ownership, approval encryption information, and a transaction initiation identifier. Both the transferor and the recipient are PUF devices, and the transaction signatures of both parties use the physical property drive of their own PUF devices to digitally sign the approval encryption information and the transaction initiation identifier. The approval encryption information is generated based on the transaction initiation identifier, and the transaction initiation identifier is a digital signature generated by the recipient with The transaction identifier generated by the transferor is a response to the incentive generation; the verification module is used to send the transaction information to the verification node. The verification node is any PUF device in the decentralized PUF network. The verification node uses the physical characteristics of its own PUF device to drive and verify the transaction signature of the transferor and the transaction signature of the recipient based on the approved encryption information and the transaction initiation identifier. After the verification is passed, the validity of the target data asset is verified through point-to-point communication with the transferor and verification confirmation information is generated when it is confirmed to be valid; the transaction transfer module is used to transfer the ownership of the target data asset to the recipient when receiving the verification confirmation information from the verification node.

[0013] A decentralized PUF network includes multiple PUF devices, including a transferor of target data asset ownership, a recipient of target data asset ownership, and one or more verification nodes and a control node; the control node receives transaction information sent by the transferor, the transaction information includes the target data asset, the transaction signature of the transferor, the transaction signature of the recipient, approval encryption information and a transaction initiation identifier, the transaction signature of the transferor and the transaction signature of the recipient both use the physical characteristics of their own PUF devices to drive the approval encryption information and the transaction initiation identifier to generate digital signatures, the approval encryption information is generated based on the transaction initiation identifier, and the transaction initiation identifier is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive; the control node sends the transaction information to the verification node, the verification node uses the physical characteristics of its own PUF device to drive and verify the transaction signature of the transferor and the transaction signature of the recipient according to the approval encryption information and the transaction initiation identifier, and after the verification is passed, verifies the validity of the target data asset through point-to-point communication with the transferor and generates verification confirmation information when it is confirmed to be valid; when receiving the verification confirmation information from the verification node, the control node transfers the ownership of the target data asset to the recipient.

[0014] A readable storage medium stores an embedded program, which implements the steps of any method in the above embodiments when executed by a processor.

[0015] The above-mentioned data asset transaction control method, device, decentralized PUF network and readable storage medium based on physical property drive receive transaction information sent by the transferor of the target data asset ownership, the transaction information includes the target data asset, the transaction signature of the transferor, the transaction signature of the recipient of the target data asset ownership, approval encryption information and transaction initiation identification, the transferor and the recipient are both PUF devices and the transaction signatures of both use the physical properties of their own PUF devices to drive the approval encryption information and the transaction initiation identification to generate digital signatures, the approval encryption information is generated based on the transaction initiation identification, and the transaction initiation identification is a response generated by the recipient using the transaction identification generated by the transferor as an incentive; the transaction information is sent to the verification node, which is any PUF device in the decentralized PUF network, and the verification node uses the physical properties of its own PUF device to drive and verify the transaction signature of the transferor and the transaction signature of the recipient according to the approval encryption information and the transaction initiation identification, and after the verification is passed, the validity of the target data asset is verified by point-to-point communication with the transferor and generates verification confirmation information when it is confirmed to be valid; when the verification confirmation information of the verification node is received, the ownership of the target data asset is transferred to the recipient. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1A schematic diagram of an application scenario of a data asset transaction control method driven by physical characteristics in one embodiment; Figure 2 It is a flowchart of a data asset transaction control method driven by physical characteristics in one embodiment; Figure 3 A schematic diagram of an interaction initiated based on a data asset transaction driven by physical characteristics in one embodiment; Figure 4 A schematic diagram of a process of a data asset ownership transfer mechanism driven by physical characteristics in one embodiment; Figure 5 A schematic diagram of a process of verifying ownership of data assets based on physical characteristics in one embodiment; Figure 6 A schematic diagram for describing a data asset driven by physical characteristics in one embodiment; Figure 7 The structure block diagram of a data asset transaction control device driven by physical characteristics in one embodiment. DETAILED DESCRIPTION

[0017] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0018] The present application provides a data asset transaction control method based on physical property drive. In one embodiment, a data asset transaction control method based on physical property drive is applied to Figure 1 In the application environment shown. Figure 1As shown, the recipient of the target data asset ownership sends a transaction initiation identifier to the transferor, and the transaction initiation identifier is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive. The transferor sends approval encryption information to the recipient, and the approval encryption information is generated based on the transaction initiation identifier. Furthermore, the transaction signature of the transferor and the recipient both use the physical characteristics of their own PUF devices to drive the digital signature of the approval encryption information and the transaction initiation identifier to generate their own transaction signatures. The transferor broadcasts the transaction information to the decentralized PUF network, and the transaction information contains the target data asset, the transaction signature of the transferor, the transaction signature of the recipient of the target data asset, the approval encryption information, and the transaction initiation identifier. The control node broadcasts the transaction information to the verification node. The verification node is any PUF device in the decentralized PUF network. The verification node uses the physical characteristics of its own PUF device to drive and verify the transaction signature of the transferor and the transaction signature of the recipient according to the approved encryption information and the transaction initiation identifier. After the verification is passed, the validity of the target data asset is verified by point-to-point communication with the transferor, and verification confirmation information is generated when the target data asset is confirmed to be valid. When the control node receives the verification confirmation information from the verification node, Figure 1 As shown, the ownership transfer mechanism is executed to transfer the ownership of the target data asset to the recipient. Specifically, Figure 1 As shown, when the target data asset is metadata 1, metadata 1 is modified, such as modifying the ownership of metadata 1 to obtain metadata 2, and the ownership of metadata 2 is transferred to the recipient.

[0019] In one embodiment, the present application provides a data asset transaction control method based on physical property drive, which is applied to Figure 1 The decentralized PUF network shown in FIG. Specifically, Figure 2 As shown, a data asset transaction control method based on physical property drive includes the following steps: S202, receiving the transaction information sent by the transferor of the target data asset ownership, the transaction information includes the target data asset, the transaction signature of the transferor, the transaction signature of the recipient of the target data asset ownership, the approval encryption information and the transaction initiation identifier, the transferor and the recipient are both PUF devices, and the transaction signature of the transferor and the transaction signature of the recipient both use the physical characteristics of their own PUF devices to drive the digital signature generation of the approval encryption information and the transaction initiation identifier, the approval encryption information is generated based on the transaction initiation identifier, and the transaction initiation identifier is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive.

[0020] In one example, the recipient generates a response using the transaction identifier generated by the transferor as an incentive, and sends the generated response as a transaction initiation identifier to the transferor; the transferor uses the transaction initiation identifier as the first key to generate the response incentivized by the transferor, and uses the first key as the second key to generate the response incentivized by the transferor, generates approval encryption information based on the first key and the transaction initiation identifier, uses its own PUF device to digitally sign the approval encryption information and the transaction initiation identifier to generate the transferor's transaction signature, and sends the second key and the approval encryption information to the transferor; the recipient verifies the approval encryption information based on the second key, and when it is verified that the approval encryption information contains the transaction initiation identifier, uses its own PUF device to digitally sign the approval encryption information and the transaction initiation identifier to generate the recipient's transaction signature.

[0021] Specifically, both the transferor and the recipient are PUF (Physical Unclonable Function) devices. PUF technology, with its unique physical properties and security, provides a strong guarantee for the secure storage and transmission of data assets. The physical unclonable function characteristics rely on the chip characteristics and random differences in the manufacturing process, such as the working environment, production process, etc., which generate important information. These random differences make PUF devices unclonable and unpredictable, and cannot be simulated and copied, providing security for low-cost and high-security identity authentication mechanisms. Among them, the generation process of the transferor's transaction signature and the recipient's transaction signature, approval encryption information, etc. is as follows: like Figure 3 As shown, the transferor submits an application for the sale of data assets, stating the asset attributes and transaction conditions, and the trading platform generates a unique transaction identifier and associates the application. After the recipient confirms the purchase, it uses its PUF device to generate a unique verifiable identifier based on the transaction identifier, namely the transaction initiation identifier, and sends it to the transferor.

[0022] After receiving the transaction initiation identifier, the transferor generates the first key, second key and approval encryption information of the transaction through its PUF device. The approval encryption information is encrypted with the first key of the transaction to prove that the transferor has accepted the order of the recipient.

[0023] The recipient receives the approval encrypted information and verifies the transaction initiation identifier in the decryption result of the approval encrypted information. After confirmation, the two parties transfer the ownership of the data assets. To ensure the verifiability and non-tamperability of the transaction, the two parties use PUF devices to digitally sign the transaction initiation identifier and the approval encrypted information as proof of ownership change.

[0024] When the recipient and the transferor confirm the transaction, the transferor initiates and generates a transaction message, which contains key information of the data asset transaction, such as the identities of the two parties to the transaction, the asset content of the transaction, and other attributes. This process ensures that the generation of the transaction information is credible and confirmed by both parties.

[0025] S204, sending the transaction information to the verification node, which is any PUF device in the decentralized PUF network. The verification node uses the physical characteristics of its own PUF device to drive the verification of the transferor's transaction signature and the recipient's transaction signature according to the approved encryption information and the transaction initiation identifier, and after the verification is passed, verifies the validity of the target data asset through point-to-point communication with the transferor, and generates verification confirmation information when confirming that the target data asset is valid.

[0026] In one example, there are multiple verification nodes, and the multiple verification nodes are screened based on preset conditions, and the preset conditions include any one or more of the geographical location of the PUF device, historical reliability, historical response time, and historical load capacity. The verification node generates a transaction signature field through the hash summary of the transaction information and uses its own PUF device, and the verification confirmation information includes the generated transaction signature field. Wherein, when the verification confirmation information of the verification node is received, the ownership of the target data asset is transferred to the recipient, including: when the verification confirmation information of the verification node exceeding the preset number is received, the ownership of the target data asset is transferred to the recipient.

[0027] Specifically, Figure 4 As shown, the selection of verification nodes selects several nodes from the PUF node pool of the decentralized PUF network according to preset conditions. The preset conditions may include factors such as the geographical location, historical reliability, response time, and load capacity of the verification nodes, thereby ensuring that the selected verification nodes have sufficient credibility and decentralization during the transaction verification process.

[0028] like Figure 4 As shown in the figure, once the verification node is selected, the transaction information broadcast module configured in the decentralized PUF network broadcasts the transaction information to these selected verification nodes. Among them, the nodes in the decentralized PUF network communicate in a point-to-point manner. The distribution of broadcast transaction information is not completed by a single node, but is achieved through the collaboration of all nodes. After receiving the transaction information, these verification nodes use the hash summary of the transaction information and its internal physical properties as a challenge to generate a transaction signature field. The generation process of this transaction signature field depends on the uniqueness of the PUF device of the verification node, ensuring that the transaction signature field generated by each verification node is unique and cannot be forged.

[0029] Next, the signature verification module in the decentralized PUF network verifies the generated transaction signature field through the threshold mechanism. The signature verification module is one or more PUF devices selected from the decentralized PUF network, which provide signature verification services for this transaction. The core of the threshold mechanism is that the transaction can only be considered legal if at least more than a preset number of verification nodes successfully verify the transaction signature. To achieve this function, the signature verification module is used to count the number of successfully verified verification nodes and compare this number with the preset threshold through the threshold comparison module. If the number of verified verification nodes reaches or exceeds the threshold, the transaction is considered legal.

[0030] In addition, the transaction information broadcast module in this implementation also supports the selective broadcast function, that is, the transaction information is only sent to specific pre-selected verification nodes, avoiding invalid or redundant broadcasts and improving system efficiency. Finally, each transaction signature field generated by the signature generation module contains a unique tag generated by the verification node, which makes each signature unique and further enhances the immutability of the transaction.

[0031] Therefore, it can effectively ensure that the ownership transfer process of data assets is completed in a trusted and decentralized environment, and each transaction step is independently verified by different PUF nodes, greatly enhancing the security, transparency and reliability of the entire transaction system.

[0032] In one example, the verification node conducts point-to-point communication with the transferor, requests a public key from the transferor of ownership, decrypts the target data asset using the public key, and compares the decrypted target data asset with the plaintext corresponding to the locally pre-stored target data asset. If the comparison is consistent, the target data asset is confirmed to be valid; wherein, the target data asset is encrypted by the transferor using the private key corresponding to the public key.

[0033] Specifically, see Figure 5 As shown, when verifying the digital assets of the target data asset owner, the verification node will receive a transaction signature jointly generated by the previous owner and the current owner of the target data asset. This signature is not only the identity of the two owners, but also a guarantee of the validity of the transaction. The verification node needs to verify the identity of the previous owner, which is achieved through communication with the previous owner. The verification node uses the transaction initiation identifier as a challenge and initiates a verification request to its PUF device, expecting to obtain a response identical to the transaction confirmer. Specifically, the items that need to be verified include the transaction signature and the address information of previous owners, which are all stored in plain text in the metadata of the digital asset.

[0034] Next, the verification node will verify the ownership identification of the current owner. Among them, the current owner this time refers to the transferor in this application. The identification is a public ciphertext encrypted by the private key generated by the current owner's PUF device. In order to complete this verification, the verification node needs to ask the current owner for his public key. After receiving the public key, the verification node will use the public key to decrypt the obtained ciphertext, obtain the decrypted information, and compare it with the plaintext corresponding to the target digital asset stored by the verification node. If the two are consistent, it means that the current owner has valid ownership of the target digital asset. Specifically, the transferor uses the PUF response generated by its own PUF device as the encryption key. The PUF response is generated by inputting the specific identification obtained in the transaction as a challenge into the PUF device, ensuring the uniqueness and security of the key.

[0035] Once all the above verification processes are successful, the verification node will provide the current owner with the service corresponding to the target data asset. That is, the data asset transaction service in this application. This mechanism not only enhances the security of the target data asset transaction, but also provides the owner with a reliable way to manage their assets, ensuring the authenticity of the identities of all parties and the clarity of ownership throughout the process. Through this rigorous verification process, the effective confirmation of the ownership of the target data asset and the delivery of services are finally achieved.

[0036] S206, upon receiving the verification confirmation information from the verification node, the ownership of the target data asset is transferred to the recipient.

[0037] In one example, the target data asset includes descriptive information of the target data, an ownership identifier of the target data asset, additional attribute information of the target data asset, and historical transaction information of the target data asset.

[0038] Specifically, Figure 6 As shown, the target data asset includes descriptive information of the target data, ownership identification of the target data asset, additional attribute information of the target data asset, and historical transaction information of the target data asset. Generate basic information of target data assets and descriptive data of each target data asset, including: Token_ID: a unique identifier generated for the target data asset; asset category: indicates the type of the target data asset, such as pictures, text files, videos, etc.; image, author and other information: based on the specific type of the target data asset, record the corresponding detailed information, such as the name of the image file and the name of the creator.

[0039] Use PUF devices to generate ownership identification for each target data asset. PUF devices use the unclonable characteristics of physical structures to generate unique and unpredictable encryption keys, which are used to authenticate and confirm ownership of target data assets, including: Owner identification information: Assign relevant information of the owner to the target data asset, including the user name and homepage address; Ownership consensus signature: Generate a consensus signature to ensure the uniqueness and legitimacy of ownership, and record ownership changes for each asset transaction; Owner PUF signature: Use the owner's PUF device to generate an encrypted signature to ensure that the ownership of the target data asset throughout its life cycle is verifiable and cannot be tampered with.

[0040] The current status information is set for each target data asset, indicating whether it is available for sale, unavailable for sale, or destroyed in the trading market. The status information is updated in real time through the system to ensure that the trading status of the asset can be queried at any time, including: On sale status: the target data asset is being traded and is available for purchase by buyers; Off sale status: the data asset is in a holding state and has not yet entered the trading market; Destroyed status: the data asset has been destroyed and cannot be traded again.

[0041] When the target data assets are generated, different additional attributes are added to the target data assets of different categories, including: API: represents the interface address for interacting with the target data asset; URL: represents the link address for storing the target data asset or its related resources.

[0042] The transaction history and ownership changes of each target data asset are recorded, and historical ownership information is generated for each transaction to ensure the transparency of ownership tracking. After each target data asset is transferred, the signature of the new owner will be added to the historical record, including: Historical owner information: After each transaction, the system will record the owner’s PUF signature to form an unalterable transaction history chain, ensuring the historical traceability of each target data asset.

[0043] In summary, the target data asset includes but is not limited to fields such as descriptive data, ownership identification, ownership history, and current attribute signature, which can effectively indicate the characteristics of the digital asset and its current state. Among them, the initialization process of the fields such as descriptive data, ownership identification, ownership history, and current attribute signature is set by the producer of the target data asset when the target data asset is first generated, and is encrypted or labeled by the PUF device of the producer of the target data asset or the recipient asset owner.

[0044] When the verification confirmation information is received from the verification node, the ownership of the target data asset is transferred to the recipient. Figure 1 As shown in Figure 1, after verification, the ownership transfer mechanism is triggered to confirm the transaction of the target data asset and generate the corresponding signature. The target data asset is modified based on the corresponding signature and its ownership is transferred to the recipient. Figure 1 As shown, metadata 1 is the original target data asset, metadata 1 is modified based on the signature, and the ownership attribute of metadata 1 is modified to obtain metadata 2. The ownership of metadata 2 is transferred to the recipient.

[0045] The above-mentioned data asset transaction control method based on physical characteristics driving receives transaction information sent by the transferor of the target data asset ownership, the transaction information includes the target data asset, the transaction signature of the transferor, the transaction signature of the recipient of the target data asset ownership, the approval encryption information and the transaction initiation identifier, the transferor and the recipient are both PUF devices, the transaction signature of the transferor and the transaction signature of the recipient both use the physical characteristics of their own PUF devices to drive the approval encryption information and the transaction initiation identifier to generate digital signatures, the approval encryption information is generated based on the transaction initiation identifier, and the transaction initiation identifier is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive; the transaction information is sent to the verification node, which is any PUF device in the decentralized PUF network, and the verification node uses the physical characteristics of its own PUF device to drive the verification of the transferor's transaction signature and the recipient's transaction signature according to the approval encryption information and the transaction initiation identifier, and after the verification is passed, the validity of the target data asset is verified by point-to-point communication with the transferor, and verification confirmation information is generated when the target data asset is confirmed to be valid; when the verification confirmation information from the verification node is received, the ownership of the target data asset is transferred to the recipient.

[0046] Regarding the above-mentioned data asset transaction control method driven by physical characteristics, the following is a description of the data asset transaction initiation process, the data asset ownership verification process, and the data asset ownership transfer mechanism: The embodiment of the present application provides a data asset transaction initiation process using physical characteristics, which ensures the security, uniqueness and verifiability of the transaction. The transferor and recipient in the transaction process use PUF devices to generate unique verifiable identifiers and keys to ensure the security and non-tamperability of the transaction process. Specifically, it includes: The transferor submits an application for the sale of data assets, which describes in detail the properties and transaction conditions of the data assets to be sold. The provider of digital assets needs to define the access rules, prices and usage conditions of the data. After receiving the transferor's application, the decentralized PUF network generates a unique and non-repeatable transaction identifier and associates it with the transferor's transaction application as the unique identifier for subsequent transaction processes.

[0047] After confirming the purchase intention, the recipient uses its PUF device to generate a unique verifiable identifier, namely the transaction initiation identifier. This identifier is generated by passing the transaction identifier as an input parameter to the recipient's PUF device, and the response generated by the unique physical characteristics inside the device is used to generate the transaction initiation identifier. This unique verifiable transaction initiation identifier is sent to the transferor.

[0048] After receiving the transaction initiation identifier sent by the recipient, the transferor starts its PUF device to generate the first key of the transaction. The process includes passing the unique transaction initiation identifier as input to the PUF device of the transferor, and the PUF device outputs a unique private key value, namely the first key, based on its inherent physical properties. At the same time, the transferor also generates the corresponding second key and approval encryption information of the transaction through the PUF device. The approval encryption information is generated by encrypting the unique transaction initiation identifier using the first key of the transaction. The approval encryption information is used to prove that the transferor has formally received and approved the purchase request of the recipient.

[0049] After receiving the approval encrypted information and the second key sent by the transferor, the recipient uses its PUF device to perform a decryption operation to verify whether the original unique transaction initiation identifier can be restored from the approval encrypted information. If the decryption operation is successful and the decrypted identifier is completely consistent with the original unique transaction initiation identifier, it means that the recipient confirms that the transferor has known and accepted the purchase request.

[0050] To ensure that the transaction process is subsequently verifiable and cannot be tampered with, the transferor and recipient use their own PUF devices to digitally sign the transaction initiation identification and approval encryption information respectively.

[0051] The embodiment of the present application provides a data asset ownership transfer mechanism that utilizes physical properties and uses physical unclonable function (PUF) technology to ensure transaction security and transparency of ownership. This mechanism is designed to ensure the integrity and authenticity of data asset transactions and can effectively verify the legitimacy of transactions in a multi-node environment: When the recipient and the transferor confirm the transaction, the control node starts and generates a transaction message, which contains key information of the data asset transaction, such as the identities of the two parties to the transaction, the asset content of the transaction, and other attributes. This process ensures that the generation of the transaction information is credible and confirmed by both parties.

[0052] Subsequently, the control node selects several nodes from the PUF node pool for identification generation according to preset conditions. The preset conditions may include factors such as the node’s geographical location, historical reliability, response time, and load capacity, thereby ensuring that the selected nodes have sufficient credibility and decentralization during the transaction verification process.

[0053] Once the nodes are selected, the transaction information broadcast module broadcasts the transaction information and its hash summary to these selected PUF nodes. After receiving the hash summary of the transaction information, these PUF nodes generate the transaction signature field based on the transaction information and using their internal physical characteristics as a challenge. This signature process relies on the uniqueness of the PUF device to ensure that the transaction signature field generated by each node is unique and cannot be forged.

[0054] Next, the signature verification module verifies the generated transaction signature field through the threshold mechanism. The core of the threshold mechanism is that the transaction can only be considered legal if at least more than a preset number of PUF nodes successfully verify the transaction signature. To achieve this function, the signature verification module is used to count the number of successfully verified PUF nodes and compare this number with the preset threshold through the threshold comparison module. If the number of nodes that pass the verification reaches or exceeds the threshold, the transaction is considered legal.

[0055] In addition, the transaction information broadcast module in this implementation also supports the selective broadcast function, that is, the transaction information is only sent to specific pre-selected PUF nodes, avoiding invalid or redundant broadcasts and improving system efficiency. Finally, each transaction signature field generated by the signature generation module contains a unique tag generated by the PUF node, which makes each signature unique and further enhances the immutability of the transaction.

[0056] Through this implementation plan, the ownership transfer process of data assets can be effectively ensured to be completed in a trusted and decentralized environment. Each transaction step is independently verified by different PUF nodes, greatly enhancing the security, transparency and reliability of the entire transaction system.

[0057] The data asset ownership transfer method provided in the embodiment of the present application is applied to an encryption device, and the method includes: When verifying the data assets of the asset owner, the verification node will receive the transaction signature jointly generated by the previous owner and the current owner. This signature is not only the identity of the two owners, but also a guarantee of the validity of the transaction. The verification node needs to verify the identity of the previous owner, which is achieved through communication with the previous owner. The verification node uses the transaction initiation identifier as a challenge and initiates a verification request to its PUF device, expecting to obtain a response identical to the transaction confirmer.

[0058] Next, the verification node will verify the ownership identifier of the current owner. The identifier is a public ciphertext encrypted by the private key generated by the current owner's PUF device. In order to complete this verification, the verification node needs to ask the current owner for his public key. After receiving the public key, the verification node will use the public key to decrypt the obtained ciphertext, obtain the decrypted information, and compare it with the plaintext corresponding to the data asset stored by the verification node. If the two are consistent, it means that the current owner has valid ownership of the data asset.

[0059] Once all the above verification processes are successful, the verification node will provide the current owner with services corresponding to the data asset. This mechanism not only enhances the security of data asset transactions, but also provides owners with a reliable way to manage their assets, ensuring the authenticity of the identities of all parties and the clarity of ownership throughout the process. Through this rigorous verification process, effective confirmation of data asset ownership and service delivery are ultimately achieved.

[0060] It should be understood that, although the steps in the flowchart are shown in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these sub-steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0061] The present application also provides a decentralized PUF network, which includes multiple PUF devices, including a transferor of the target data asset ownership, a recipient of the target data asset ownership, and one or more verification nodes and a control node; the control node receives the transaction information sent by the transferor, and the transaction information includes the target data asset, the transaction signature of the transferor, the transaction signature of the recipient, the approval encryption information, and the transaction initiation identifier, wherein the transaction signature of the transferor and the transaction signature of the recipient both use the physical characteristics of their own PUF devices to drive the digital signature generation of the approval encryption information and the transaction initiation identifier, and the approval The encrypted information is generated based on the transaction initiation identifier, which is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive. The control node sends the transaction information to the verification node, which uses the physical characteristics of its own PUF device to drive the verification of the transferor's transaction signature and the recipient's transaction signature based on the approved encrypted information and the transaction initiation identifier. After the verification is passed, the validity of the target data asset is verified through point-to-point communication with the transferor, and verification confirmation information is generated when the target data asset is confirmed to be valid. When the control node receives the verification confirmation information from the verification node, it transfers the ownership of the target data asset to the recipient.

[0062] Specifically, the decentralized PUF network is Figure 1 The specific operations of the transferor of the target data asset, the recipient of the target data asset, and one or more verification nodes, control nodes, etc. can be found in the relevant description of a data asset transaction control method based on physical characteristics drive in each of the above embodiments, which will not be described in detail here.

[0063] The present application also provides a data asset transaction control device driven by physical characteristics, which is applied to a decentralized PUF network. Figure 7As shown, a data asset transaction control device driven by physical characteristics includes a receiving module 702, a verification module 704 and a transaction transfer module 706. The receiving module 702 is used to receive the transaction information sent by the transferor of the target data asset ownership. The transaction information includes the target data asset, the transaction signature of the transferor, the transaction signature of the recipient of the target data asset ownership, the approval encryption information and the transaction initiation identifier. The transferor and the recipient are both PUF devices and the transaction signatures of both parties use the physical characteristics of their own PUF devices to drive the digital signature generation of the approval encryption information and the transaction initiation identifier. The approval encryption information is generated based on the transaction initiation identifier. The transaction initiation identifier is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive; the verification module 704 is used to send the transaction information to the verification node. The verification node is any PUF device in the decentralized PUF network. The verification node uses the physical characteristics of its own PUF device to drive and verify the transaction signature of the transferor and the transaction signature of the recipient based on the approval encryption information and the transaction initiation identifier. After the verification is passed, the validity of the target data asset is verified by point-to-point communication with the transferor and generates verification confirmation information when it is confirmed to be valid; the transaction transfer module 706 is used to transfer the ownership of the target data asset to the recipient when the verification confirmation information of the verification node is received.

[0064] In one of the embodiments, the recipient uses the transaction identifier generated by the transferor as an incentive to generate a response, and sends the generated response as a transaction initiation identifier to the transferor; the transferor uses the response generated by the transaction initiation identifier as an incentive as a first key, and uses the response generated by the first key as an incentive as a second key, generates approval encryption information based on the first key and the transaction initiation identifier, uses its own PUF device to digitally sign the approval encryption information and the transaction initiation identifier to generate the transferor's transaction signature, and sends the second key and the approval encryption information to the transferor; the recipient verifies the approval encryption information based on the second key, and when it is verified that the approval encryption information contains the transaction initiation identifier, uses its own PUF device to digitally sign the approval encryption information and the transaction initiation identifier to generate the recipient's transaction signature.

[0065] In one of the embodiments, the verification node conducts point-to-point communication with the transferor, requests a public key from the transferor of ownership, decrypts the target data asset using the public key, and compares the decrypted target data asset with the plain text corresponding to the locally pre-stored target data asset. If the comparison is consistent, the target data asset is confirmed to be valid; wherein, the target data asset is encrypted by the transferor using the private key corresponding to the public key.

[0066] In one of the embodiments, the verification node generates a transaction signature field through a hash summary of the transaction information and using its own PUF device, and the verification confirmation information includes the generated transaction signature field.

[0067] In one of the embodiments, there are multiple verification nodes, and when verification confirmation information from the verification node is received, the ownership of the target data asset is transferred to the recipient, including: when verification confirmation information from verification nodes exceeding a preset number is received, the ownership of the target data asset is transferred to the recipient.

[0068] In one of the embodiments, the plurality of verification nodes are screened based on preset conditions, where the preset conditions include any one or more of the geographical location, historical reliability, historical response time, and historical load capacity of the PUF device.

[0069] In one of the embodiments, the target data asset includes descriptive information of the target data, an ownership identifier of the target data asset, additional attribute information of the target data asset, and historical transaction information of the target data asset.

[0070] For the specific definition of a data asset transaction control device driven by physical characteristics, please refer to the definition of a data asset transaction control method driven by physical characteristics above, which will not be repeated here. Each module in the above-mentioned data asset transaction control device driven by physical characteristics can be implemented in whole or in part through software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0071] In one embodiment, a readable storage medium is provided, on which an embedded program is stored. When the embedded program is executed by a processor, a data asset transaction control method based on physical property drive described in any of the above embodiments is implemented.

[0072] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing related hardware through an embedded program, and the embedded program can be stored in a non-volatile computer-readable storage medium. When the embedded program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0073] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0074] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims

1. A data asset transaction control method based on physical property drive, characterized in that: Applied to a decentralized PUF network, the method comprises: Receive transaction information sent by the transferor of the target data asset ownership, the transaction information includes the target data asset, the transaction signature of the transferor, the transaction signature of the recipient of the target data asset ownership, approval encryption information and a transaction initiation identifier, the transferor and the recipient are both PUF devices and the transaction signatures of both use the physical characteristics of their own PUF devices to drive the digital signature generation of the approval encryption information and the transaction initiation identifier, the approval encryption information is generated based on the transaction initiation identifier, and the transaction initiation identifier is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive; The transaction information is sent to a verification node, which is any PUF device in the decentralized PUF network. The verification node uses the physical characteristics of its own PUF device to drive and verify the transaction signature of the transferor and the transaction signature of the recipient according to the approval encryption information and the transaction initiation identifier, and after the verification is passed, verifies the validity of the target data asset through point-to-point communication with the transferor and generates verification confirmation information when it is confirmed to be valid; Upon receiving the verification confirmation information from the verification node, the ownership of the target data asset is transferred to the recipient.

2. The method according to claim 1, characterized in that The receiving party generates a response using the transaction identifier generated by the transferor as an incentive, and sends the generated response to the transferor as the transaction initiation identifier; The transferor uses the transaction initiation identifier as a response generated by the incentive as a first key, uses the first key as a response generated by the incentive as a second key, generates the approval encryption information according to the first key and the transaction initiation identifier, uses its own PUF device to digitally sign the approval encryption information and the transaction initiation identifier to generate the transaction signature of the transferor, and sends the second key and the approval encryption information to the transferor; The recipient verifies the approval encryption information based on the second key, and when it is verified that the approval encryption information contains the transaction initiation identifier, uses its own PUF device to digitally sign the approval encryption information and the transaction initiation identifier to generate the recipient's transaction signature.

3. The method according to claim 1, characterized in that The verification node communicates with the transferor point-to-point, requests a public key from the transferor, decrypts the target data asset using the public key, and compares the decrypted target data asset with the plain text corresponding to the locally pre-stored target data asset. If the comparison is consistent, the target data asset is confirmed to be valid; The target data asset is encrypted by the transferor using the private key corresponding to the public key.

4. The method according to claim 1, characterized in that: The verification node generates a transaction signature field through the hash summary of the transaction information and using its own PUF device, and the verification confirmation information includes the generated transaction signature field.

5. The method according to claim 1, characterized in that There are multiple verification nodes, and upon receiving the verification confirmation information from the verification node, transferring the ownership of the target data asset to the recipient, includes: When verification confirmation information is received from more than a preset number of verification nodes, the ownership of the target data asset is transferred to the recipient.

6. The method according to claim 5, characterized in that The plurality of verification nodes are screened based on preset conditions, where the preset conditions include any one or more of the geographical location, historical reliability, historical response time, and historical load capacity of the PUF device.

7. The method according to claim 1, characterized in that The target data asset includes descriptive information of the target data, an ownership identifier of the target data asset, additional attribute information of the target data asset, and historical transaction information of the target data asset.

8. A data asset transaction control device driven by physical characteristics, characterized in that: Applied to a decentralized PUF network, the device comprises: A receiving module, used to receive transaction information sent by a transferor of target data asset ownership, wherein the transaction information includes the target data asset, a transaction signature of the transferor, a transaction signature of a recipient of target data asset ownership, approval encryption information, and a transaction initiation identifier, wherein both the transferor and the recipient are PUF device recipients and both transaction signatures utilize the physical characteristics of their own PUF devices to drive the digital signature generation of the approval encryption information and the transaction initiation identifier, the approval encryption information is generated based on the transaction initiation identifier, and the transaction initiation identifier is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive; A verification module, used to send the transaction information to a verification node, wherein the verification node is any PUF device in the decentralized PUF network, and the verification node uses the physical characteristics of its own PUF device to drive and verify the transaction signature of the transferor and the transaction signature of the recipient according to the approval encryption information and the transaction initiation identifier, and after the verification is passed, the validity of the target data asset is verified by point-to-point communication with the transferor and verification confirmation information is generated when the verification is confirmed to be valid; The transaction transfer module is used to transfer the ownership of the target data asset to the recipient when receiving the verification confirmation information from the verification node.

9. A decentralized PUF network, characterized in that: The decentralized PUF network includes multiple PUF devices, including a transferor of the target data asset ownership, a recipient of the target data asset ownership, and one or more verification nodes and control nodes; The control node receives the transaction information sent by the transferor, wherein the transaction information includes the target data asset, the transaction signature of the transferor, the transaction signature of the recipient, the approval encryption information and the transaction initiation identifier. The transaction signature of the transferor and the transaction signature of the recipient both use the physical characteristics of their own PUF devices to drive the digital signature generation of the approval encryption information and the transaction initiation identifier. The approval encryption information is generated based on the transaction initiation identifier, and the transaction initiation identifier is a response generated by the recipient using the transaction identifier generated by the transferor as an incentive; The control node sends the transaction information to the verification node, and the verification node uses the physical characteristics of its own PUF device to drive and verify the transaction signature of the transferor and the transaction signature of the recipient according to the approval encryption information and the transaction initiation identifier, and after the verification is passed, verifies the validity of the target data asset through point-to-point communication with the transferor and generates verification confirmation information when it is confirmed to be valid; When the control node receives the verification confirmation information from the verification node, the control node transfers the ownership of the target data asset to the recipient.

10. A readable storage medium having an embedded program stored thereon, characterized in that: When the embedded program is executed by a processor, the steps of the method described in any one of claims 1 to 7 are implemented.

Images