Distributed digital identity-based data management system, publishing and subscribing method and device

Abstract

The invention provides a distributed digital identity-based data management system, and a distributed digital identity-based data publishing and subscribing method and device. The system comprises a plurality of data centers and circulation centers, the data centers distribute distributed identifiers for users, upload the distributed identifiers to block chains to establish distributed digital identities, and register storage accounts and request accounts. And the data center uploads metadata of the user data to the block chain, and the circulation center verifies the metadata and releases the metadata to the data directory. And the request account sends a request according to the directory, and forwards the request to the storage account through the circulation center. And the data center corresponding to the storage account generates request result information and a data sharing mode, and the request result information and the data sharing mode are verified by the circulation center and forwarded to the request account. And establishing a connection between the request account and a data center corresponding to the storage account, verifying identity information through a block chain, and obtaining user data according to a data sharing mode. According to the system, the block chain technology, the distributed digital identity and cooperative work are utilized, safe sharing and efficient circulation of data are achieved, and the problems of data islands, sharing difficulty, insufficient safety and the like are solved.

Description

Technical Field

[0001] The present application belongs to the field of data management, and in particular, relates to a data management system, publishing and subscription method and device based on distributed digital identity. Background Art

[0002] With the rapid development of information technology, data has become an important resource in modern society. However, traditional data management systems often face problems such as data silos, difficulty in data sharing, and insufficient data security. Summary of the invention

[0003] The purpose of this application is to overcome the defects in the above-mentioned prior art and provide a data management system, publishing and subscription method and device based on distributed digital identity.

[0004] The present application provides a data management system based on distributed digital identity, including: multiple data centers and circulation centers;

[0005] The data center allocates a distributed identifier according to the digital certificate of the user corresponding to the data center, uploads the distributed identifier to the blockchain, and establishes a distributed digital identity for each user;

[0006] The data center registers an account for the user corresponding to each data center according to the distributed digital identity, and the account includes: a storage account and a request account;

[0007] The data center obtains metadata of user data in the data center corresponding to the storage account, and uploads the metadata to the blockchain;

[0008] The circulation center obtains the metadata and verifies the metadata through the blockchain, and publishes the metadata to the data directory after passing the verification;

[0009] The requesting account sends a request message according to the data directory, and forwards the request message to the storage account through the circulation center;

[0010] The data center corresponding to the storage account generates request result information and data sharing method according to the request information;

[0011] The circulation center obtains and verifies the request result information and the data sharing method through the blockchain, and forwards them to the requesting account after verification;

[0012] The requesting account establishes a connection with the data center corresponding to the storage account according to the request result information. The data center corresponding to the storage account performs blockchain verification on the identity information of the requesting account. After the verification is passed, the requesting account obtains the user data of the data center corresponding to the storage account according to the data sharing method.

[0013] Optionally, the data center includes:

[0014] A distributed digital identity management system is provided for allocating distributed identifiers and uploading the distributed identifiers to a blockchain.

[0015] Optionally, the data center includes:

[0016] A distributed access system, used to register an account for the user corresponding to each data center according to the distributed digital identity; obtain metadata of the user in the data center corresponding to the storage account, and upload the metadata to the blockchain; issue request information according to the data directory; receive the request information sent by the circulation center; receive the request result information and data sharing method forwarded by the circulation center.

[0017] Optionally, the data center includes: a data connector;

[0018] The data connector verifies the information of the requesting account through the blockchain according to the request result information, and obtains the user data stored in the data center corresponding to the storage account according to the data sharing method after the verification is passed.

[0019] Optionally, the metadata includes descriptive information about the data content and a transaction number for verifying the integrity and source of the data.

[0020] Optionally, the request result information includes: the approval result of the storage account on the request information and the transaction information of the storage account uploading the request information to the blockchain.

[0021] Optionally, the plurality of data centers and circulation centers each include: a data circulation layer and a blockchain layer;

[0022] The data circulation layer includes: a distributed identity management system, a distributed access system, and a data connector;

[0023] The blockchain layer includes: a node of the blockchain.

[0024] The present application also provides a data publishing method based on distributed digital identity, including:

[0025] Allocate a distributed identifier based on the digital certificate of the corresponding user in the data center, upload the distributed identifier to the blockchain, and establish a distributed digital identity for each user;

[0026] Registering an account for each of the users according to the distributed digital identity;

[0027] Obtaining metadata of user data in the data center corresponding to the registered account, and uploading the metadata to the blockchain;

[0028] The metadata is verified through the blockchain, and after passing the verification, the metadata is published to the data directory.

[0029] Optionally, the metadata includes description information of the user data and a transaction number for verifying data integrity and source.

[0030] Optionally, the data directory: metadata used for users to publish, retrieve and manage data.

[0031] The present application also provides a data subscription method based on distributed digital identity, including:

[0032] Sending request information based on the data directory;

[0033] Obtaining request result information and data sharing method returned according to the request information;

[0034] The data center is connected according to the request result information, and the data center verifies the requested account information through the blockchain. After the verification is passed, the user data is obtained according to the data sharing method.

[0035] Optionally, the request result information includes: the approval result of the data center corresponding to the storage account on the request information and the transaction information of the storage account uploading the request information to the blockchain.

[0036] The present application also provides a data publishing device based on a distributed digital identity, comprising:

[0037] Memory;

[0038] A processor is used to retrieve from the memory a computer executable program of the above-mentioned data publishing method based on distributed digital identity, and execute: allocating a distributed identifier according to the digital certificate of the user corresponding to the data center, uploading the distributed identifier to the blockchain, and establishing a distributed digital identity for each user; registering an account for each of the users according to the distributed digital identity; obtaining metadata of the user data in the data center corresponding to the registered account, and uploading the metadata to the blockchain; verifying the metadata through the blockchain, and publishing the metadata to the data directory after the verification is passed.

[0039] The present application also provides a data subscription device based on a distributed digital identity, including:

[0040] Memory;

[0041] A processor is used to retrieve from the memory a computer executable program of the above-mentioned data subscription method based on distributed digital identity, and execute: issuing request information according to the data directory; obtaining request result information and data sharing method returned according to the request information; connecting to a data center according to the request result information, the data center verifies the requested account information through the blockchain, and obtains user data according to the data sharing method after the verification is passed.

[0042] The present application also provides a storage medium, comprising: a computer executable program stored therein for executing the steps of the above-mentioned data publishing method based on distributed digital identity.

[0043] The present application also provides a storage medium, comprising: a computer executable program stored therein for executing the steps of the above-mentioned data subscription method based on distributed digital identity.

[0044] The beneficial effects of this application are:

[0045] The present application provides a data management system based on distributed digital identity, including: multiple data centers and a circulation center; the data center allocates a distributed identifier according to the digital certificate of the user corresponding to the data center, uploads the distributed identifier to the blockchain, and establishes a distributed digital identity for each user; the data center registers an account for each user corresponding to the data center according to the distributed digital identity, and the account includes: a storage account and a request account; the data center obtains metadata of user data in the data center corresponding to the storage account, and uploads the metadata to the blockchain; the circulation center obtains the metadata and verifies the metadata through the blockchain, and publishes the metadata to a data directory after the verification is passed; the request account sends a request message according to the data directory, and forwards the request message to the storage account through the circulation center; the data center corresponding to the storage account generates request result information and a data sharing method according to the request information; the circulation center obtains and verifies the request result information and the data sharing method through the blockchain, and forwards it to the request account after the verification is passed; the request account establishes a connection with the data center corresponding to the storage account according to the request result information, and the data center corresponding to the storage account performs blockchain verification on the identity information of the request account, and after the verification is passed, the request account obtains the user data of the data center corresponding to the storage account according to the data sharing method. This application achieves secure sharing and efficient circulation of data by utilizing blockchain technology, distributed digital identity, and the collaborative work of data centers and circulation centers, solving problems such as data silos, data sharing difficulties, and insufficient data security in traditional data management systems. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Figure 1 This is a schematic diagram of the data management system based on distributed digital identity in this application;

[0047] Figure 2 It is a user registration schematic diagram of data management based on distributed digital identity in this application;

[0048] Figure 3 It is a schematic diagram of data subscription based on distributed digital identity in this application;

[0049] Figure 4 It is a schematic diagram of data release based on distributed digital identity in this application;

[0050] Figure 5 It is a schematic diagram of the data publishing process based on distributed digital identity in this application;

[0051] Figure 6 This is a schematic diagram of the data subscription process based on distributed digital identity in this application. DETAILED DESCRIPTION

[0052] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that various forms of implementing the present disclosure should not be limited by the embodiments set forth herein. On the contrary, the embodiments are provided to more thoroughly understand the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0053] Please refer to Figure 1 to Figure 3 As shown, a data management system based on distributed digital identity includes: multiple data centers and circulation centers.

[0054] Specifically, the data management system based on distributed digital identity adopts a two-layer architecture design, namely the blockchain layer and the data circulation layer.

[0055] The blockchain layer is the core, using a self-discovery network for connection, ensuring that each node automatically discovers and establishes a connection. This layer is mainly used for consensus and ledger synchronization of blockchain transactions, ensuring that all transactions are correctly recorded and synchronized to all nodes.

[0056] The data circulation layer is responsible for the whole process of data recording from release to use and data security sharing. It is built on the blockchain layer and uses the trust mechanism provided by the blockchain layer to achieve efficient circulation and secure sharing of data.

[0057] There is only one circulation center, which is responsible for global data circulation and supervision. The circulation center deploys a data circulation center system to store and manage data directories and publish data metadata. In addition, the data circulation center also includes a blockchain node, which participates in the transaction verification process as a witness to ensure the legitimacy and consistency of the transaction.

[0058] There are multiple data centers deployed in enterprises and institutions for local data management and data publishing operations.

[0059] The data center includes:

[0060] 1. Distributed digital identity management system: used for application and management of users’ digital identities, ensuring that each user has a unique and tamper-proof distributed digital identity.

[0061] 2. Distributed access system: used for local data management operations such as data publishing and data authorization, providing a convenient data management interface.

[0062] 3. Data connector: The data connector is used for digital identity authentication of data sharing and provides a secure point-to-point data sharing channel to ensure the security and privacy of data during the sharing process.

[0063] 4. Blockchain nodes: used to provide transaction entry, broadcast, sort, package, verify, execute and reach multi-party consensus. Furthermore, data centers can flexibly choose whether to deploy blockchain nodes based on their own governance needs and resource conditions.

[0064] The data center allocates a distributed identifier (DID) according to the digital certificate of the user corresponding to the data center, uploads the distributed identifier (DID) to the blockchain, and establishes a distributed digital identity for each user.

[0065] Specifically, in a distributed digital identity management system, the user first has a digital certificate. This digital certificate is issued by the government or an official service platform to prove the authenticity of the user's identity information. For example, in some areas, users apply for personal digital certificates through a specific government service platform.

[0066] Once a user has a digital certificate, he or she submits an application to the distributed digital identity management system to obtain a distributed digital identity (distributed identifier (DID)). During the application process, the user submits his or her digital certificate and other necessary identity information for the system to authenticate and review.

[0067] The system will review the user's application and once the user's identity information is confirmed to be authentic and valid, a unique distributed identifier (DID) will be assigned to the user. This distributed identifier (DID) is an identifier consisting of a string that is used to represent the user's digital identity and is globally unique. Through the distributed identifier (DID), users can perform operations such as identity authentication and data sharing in the distributed system.

[0068] After assigning a distributed identifier (DID) to a user, the distributed digital identity management system will record the distributed identifier (DID) information on the blockchain. Blockchain is a decentralized distributed ledger with characteristics such as immutability and transparency. Specifically, the user's distributed identifier (DID), distributed identifier (DID) document (containing key information and verification methods related to distributed identifier (DID) verification) and other related information are recorded together on the blockchain. In this way, when a user performs identity authentication or data sharing, other nodes verify the user's identity and authority by querying the information on the blockchain.

[0069] An account is registered for each of the users according to the distributed digital identity, including a storage account and a request account corresponding to each of the data centers.

[0070] In the distributed digital identity management system, users have successfully applied for and obtained their own distributed digital identity (distributed identifier (DID)) through digital certificates.

[0071] When a user wants to use the distributed access system, he or she uses his or her digital identity to register an account with the system. The user first visits the login or registration page of the distributed access system. On the registration page, the user selects the method of registering using a digital identity. The user enters his or her distributed identifier (DID) on the registration page and provides verification information related to the distributed identifier (DID).

[0072] After the user submits the registration information, the distributed access system will interact with the distributed digital identity management system to verify the authenticity of the distributed identifier (DID) and verification information provided by the user. The system will query the user's distributed identifier (DID) information through the blockchain and check whether the verification information provided by the user is consistent with the record on the blockchain. If the system verification is passed and the user's digital identity is confirmed to be authentic and valid, the distributed access system will create a new account for the user and bind the account information to the user's distributed identifier (DID).

[0073] After completing account registration and activation, the user uses his or her digital identity (distributed identifier (DID)) and password or other verification methods to log in to the distributed access system. For the convenience of description, the following content refers to the account that publishes data as the storage account and the account that subscribes to data as the request account.

[0074] The storage account obtains metadata of user data in the data center corresponding to the storage account, and uploads the metadata to the blockchain.

[0075] Storage accounts play a key role in managing user data stored in data centers and ensuring that the metadata of the data can be uploaded to the blockchain securely and reliably.

[0076] Users first conduct comprehensive management of the data stored in the data center. This includes data classification, organization, backup, and permission settings. Users configure different access permissions and sharing methods for different data sets based on their needs to ensure data security and availability.

[0077] Based on data management, users configure how data is shared. This includes determining which data is shared, with whom, the scope and conditions of sharing, etc. Users achieve this goal by setting data access permissions, data sharing agreements, etc.

[0078] Data metadata is a description of the data content, which includes key information such as the name, type, format, size, creation time, and modification time of the data. Users extract the metadata of data from the data center. These metadata will be used in the subsequent data sharing and supervision process.

[0079] After extracting the data metadata, the user uploads the data metadata to the blockchain using his or her own distributed digital identity (distributed identifier (DID)).

[0080] The user first packages the data metadata into a transaction and attaches his or her own distributed identifier (DID) as the initiator of the transaction. Then, the user sends this transaction to the blockchain network. The nodes in the blockchain network will verify and reach consensus on the transaction to ensure the authenticity and validity of the transaction. Once the transaction is confirmed and written to the blockchain, the user will receive a transaction number as proof of the successful transaction.

[0081] When the user successfully uploads the data metadata to the blockchain, a transaction number is returned. This transaction number is unique and represents the data metadata upload operation performed by the user on the blockchain. The user can query and track the status and changes of his data metadata on the blockchain through this transaction number.

[0082] The circulation center obtains the metadata and verifies the metadata through the blockchain, and publishes the metadata to the data directory after the verification.

[0083] The user pushes the data metadata and the transaction number previously obtained from the blockchain to the data circulation center. Data metadata is a description of the data content, including key information such as the name, type, format, size, and creation time of the data. The transaction number is the only credential obtained by the user when uploading the data metadata to the blockchain, which is used to prove the authenticity and validity of the data metadata.

[0084] Users submit data metadata and transaction numbers to the circulation center through the API interface or web interface provided by the data circulation center.

[0085] After receiving the data metadata and transaction number submitted by the user, the data circulation center will first verify it. The verification process includes two aspects:

[0086] Transaction number verification: The data circulation center will query the blockchain to check whether the transaction number submitted by the user exists and is valid. This ensures that the data metadata submitted by the user has indeed been uploaded to the blockchain and has not been tampered with or deleted.

[0087] User digital identity verification: The data circulation center also verifies the user's digital identity (distributed identifier (DID)). This is achieved by checking whether the distributed identifier (DID) submitted by the user matches the distributed identifier (DID) recorded on the blockchain. This ensures that the user who submits the data metadata is legitimate and has the corresponding authority.

[0088] If the data circulation center verifies the transaction number and user digital identity submitted by the user, it will publish the data metadata submitted by the user to the data directory. The data directory is a platform for centralized storage and management of data metadata, which allows other users or systems to discover and access data through search and browsing.

[0089] The requesting account issues a request message according to the data directory, and sends the request message to the storage account through the circulation center.

[0090] In a distributed data sharing and circulation system, a requesting account (i.e., a user or system that wishes to access data) interacts with a storage account (i.e., the owner or manager of the data) through a data circulation center to obtain the required data.

[0091] The following detailed description takes user A as the requesting account and user B as the storage account.

[0092] As the data requester, user A first obtains the data directory from the data circulation center. The data directory is a platform for centralized storage and management of data metadata, which contains key information such as the name, type, format, storage location, and access rights of the data. User A pulls the data directory through the API interface or web interface provided by the data circulation center.

[0093] When pulling the data catalog, user A provides his or her digital identity (distributed identifier (DID)) or authenticated access credentials to ensure the legitimacy of his or her identity and the security of the data.

[0094] The data circulation center will return the corresponding data directory based on the identity and permissions of user A.

[0095] After obtaining the data directory, user A browses the data metadata and finds the data he is interested in. Then, user A applies for access to the data. The access application usually includes information such as the name, type, format, access rights, etc. of the data, as well as user A's identity proof and access purpose.

[0096] User A submits an access application through the interface or API interface provided by the data circulation center. When submitting an application, User A ensures the accuracy and completeness of the application information so that the data owner can accurately understand his access requirements.

[0097] The access application submitted by user A will be pushed to the data circulation center. As the intermediate circulation platform of data, the data circulation center will be responsible for receiving, processing and forwarding access applications. After receiving the access application, the data circulation center will conduct preliminary verification and screening to ensure that it complies with the rules and conditions of data sharing and circulation.

[0098] After preliminary verification and screening, the data circulation center will forward the access application to the data owner user B.

[0099] The circulation center obtains and verifies through the blockchain the request result information and data sharing method issued by the storage account according to the request information, and forwards it to the request account after verification.

[0100] As the owner or manager of the data, user B has the right to determine the data access rights and conditions. The data circulation center will send the detailed information of the access application to user B so that user B can understand the applicant's identity, access purpose, data requirements and other information.

[0101] After receiving the access request, user B decides whether to agree to the applicant's access request based on his or her own wishes and data access rights. If user B agrees to the access request, the data circulation center will further process the request and grant the corresponding data access rights to the applicant. If user B refuses the access request, the data circulation center will notify the applicant and explain the reason.

[0102] If user B agrees to user A's access request, user B will upload the relevant information of the access request to the chain, that is, record it on the blockchain.

[0103] When uploading the access request to the blockchain, user B will generate a unique transaction number to identify the data access request. User B will return the transaction number to the data circulation center for subsequent verification and tracking.

[0104] The circulation center obtains and verifies the request result information and the data sharing method through the blockchain, and forwards them to the request account after verification.

[0105] Specifically, after user B agrees to the access request and uploads the message to the chain, the distributed access system corresponding to user B will start processing the access request. The distributed access system is a system responsible for data access control, authority management, data transmission and other functions. It will process user A's access request based on the access rights and data sharing methods set by user B.

[0106] During the processing, the distributed access system will check the identity and permissions of user A through blockchain verification to ensure that he meets the access conditions. Then, the distributed access system will generate the processing results of the access request, including key information such as whether the data was successfully accessed, the content of the accessed data, and the time of access. At the same time, the distributed access system will also determine the data sharing method, such as direct download, online viewing, API interface access, etc.

[0107] The distributed access system will return the processing results of the access request and the data sharing method to the data circulation center. As the intermediate circulation platform of data, the data circulation center will be responsible for receiving and processing these result information.

[0108] After receiving the access request processing results and data sharing methods returned by the distributed access system, the Data Circulation Center will verify them. During the verification process, the Data Circulation Center will check the validity of the transaction number to ensure the authenticity and integrity of the access request. At the same time, the Data Circulation Center will also check the compliance of the processing results and data sharing methods to ensure that they comply with the rules and conditions for data sharing and circulation.

[0109] If the verification is successful, the data circulation center will push the processing results of the access request and the data sharing method to the data applicant user A.

[0110] The requesting account establishes a connection with the data center corresponding to the storage account according to the request result information. The data center corresponding to the storage account performs blockchain verification on the identity information of the requesting account. After the verification is passed, the requesting account obtains the user data of the data center corresponding to the storage account according to the data sharing method.

[0111] Specifically, user A receives the request result information through the interface or API interface provided by the data circulation center. This information usually includes key information such as the storage account identification, data access rights, and data sharing methods. Based on this information, user A verifies the authenticity and legitimacy of the storage account through blockchain technology.

[0112] If user A successfully verifies the storage account information, then the user data stored in the corresponding data center of user B will be obtained based on the data access permissions and data sharing methods provided in the request result information.

[0113] The data center corresponding to user B is a platform for centralized data storage and management, which provides data storage, backup, recovery and other functions. User A accesses the data center by connecting to the interface provided by the data connector in the data center corresponding to user B. The data connector in the data center corresponding to user B verifies the identity information of user A through the blockchain, and then user A obtains the required data according to his own authority and needs.

[0114] In the process of obtaining data, user A ensures the integrity and security of the data to prevent data tampering or leakage. At the same time, user A also abides by the rules and conditions of data sharing and circulation to ensure the legality and compliance of the data.

[0115] In addition to directly accessing the data center, user A also uses the interface or API provided by the data circulation center to view and process the request result information. As an intermediate circulation platform for data, the data circulation center provides functions such as receiving, verifying, forwarding and displaying data metadata.

[0116] User A establishes a data connection with the data connector B of the data source for subsequent data transmission and interaction. Data connector B is a tool or system responsible for data connection, transmission and conversion, which can seamlessly connect the data of the data source with the system or application of user A.

[0117] User A provides his digital identity and access credentials to data connector B so that data connector B can verify his identity and permissions. Digital identity is an identity authentication method based on blockchain technology, which can ensure the authenticity and security of user identity.

[0118] After receiving the connection request from user A, data connector B will use blockchain technology to obtain the approval result and verify the digital identity of user A. The approval result usually includes key information such as user A's access rights and data sharing methods.

[0119] If user A's digital identity verification is successful, data connector B will establish a data connection with user A and allow him to access the required data. At the same time, data connector B will also configure the parameters and rules for data transmission and interaction based on user A's permissions and needs.

[0120] If user A's digital identity authentication fails, data connector B rejects the connection request and notifies user A accordingly. User A re-provides the correct digital identity and access credentials, or contacts the administrator of the data source to resolve the authentication issue.

[0121] Please refer to Figure 4 As shown, the present application also provides a data publishing method based on distributed digital identity, which utilizes distributed digital identity (distributed identifier (DID)) technology to achieve secure, efficient and compliant data publishing.

[0122] S101. Allocate a distributed identifier (DID) according to the digital certificate of the corresponding user in the data center, upload the distributed identifier (DID) to the blockchain, and establish a distributed digital identity for each user.

[0123] The data center obtains the user's digital certificate.

[0124] Based on digital certificates, a distributed digital identity (distributed identifier (DID)) is generated for each user. A distributed identifier (DID) is a decentralized identity that is unique, secure, and verifiable. The generated distributed identifier (DID) is uploaded to the blockchain, and the distributed digital identity of each user is established by using the immutability and decentralization of the blockchain.

[0125] S102. Register an account for each of the users according to the distributed digital identity.

[0126] Based on the user's distributed identifier (DID), an account is registered for each user in the data center or related platform. The account is associated with the user's distributed identifier (DID) to ensure the uniqueness and traceability of the user's identity.

[0127] S103: The registered account obtains metadata of user data in the data center corresponding to the registered account, and uploads the metadata to the blockchain.

[0128] After registering an account, the user or data center will obtain the metadata of the user data in the data center corresponding to the registered account. Metadata is data about data, including the description, structure, source, permissions and other information of the data.

[0129] Upload the acquired metadata to the blockchain. This step is to utilize the verification and storage capabilities of the blockchain to ensure the authenticity and integrity of the metadata.

[0130] S104: Verify the metadata through the blockchain, and publish the metadata to the data directory after verification.

[0131] The smart contract or verification mechanism on the blockchain will verify the uploaded metadata, including the integrity, format correctness, permission settings, etc. of the metadata.

[0132] If the metadata passes the verification, that is, it meets the preset verification rules and standards, then the metadata will be considered legal and valid. After passing the verification, the metadata will be published to the data catalog. The data catalog is a platform for centralized display and management of data metadata for authorized users or applications to access and query.

[0133] Furthermore, the metadata includes descriptive information about the data content and a transaction number for verifying the integrity and source of the data.

[0134] Furthermore, the data directory is used for users to publish, retrieve and manage metadata of data.

[0135] Please refer to Figure 5 As shown, the present application also provides a data subscription method based on distributed digital identity, aiming to provide a secure, efficient and distributed digital identity-based data subscription mechanism. Users send data demand requests through the data directory, and then use blockchain technology to verify the returned request result information and storage account information to ensure the authenticity of the data and the reliability of the source. Once the verification is passed, the user can obtain the required data.

[0136] S201. Send request information according to the data directory.

[0137] The user first accesses the data catalog, which is a platform for centrally displaying and managing data metadata, including the description, structure, source, and permissions of various data. According to their needs, the user selects the data set or data item of interest in the data catalog and generates the corresponding request information. The request information usually includes the data identification, the scope of the required data, the format requirements, and the user's identity information.

[0138] S202: Obtain and verify through blockchain the request result information and data sharing method returned according to the request information.

[0139] The user submits the generated request information to the data directory system or the relevant data processing center. After receiving the request, the data directory system or data processing center will generate the request result information according to the permission setting and availability of the data. The request result information contains key information such as whether the user request is met, the specific location of the data, and the access rights.

[0140] The data directory system or data processing center uploads the request result information to the blockchain and verifies the request result information using the blockchain's immutability and decentralization characteristics. Users confirm the authenticity and validity of the request result information through public information on the blockchain or a specific verification interface.

[0141] S203. Connecting to a data center according to the request result information. The data center verifies the requested account information through the blockchain. After the verification is passed, the user data is obtained according to the data sharing method.

[0142] Once the request result information is verified, the user obtains the storage account information to obtain the required data from the storage account. The storage account information usually includes the storage account identification, access rights, data location, etc.

[0143] In order to ensure the authenticity and reliability of the requested account information, the data center corresponding to the storage account uses blockchain technology to verify the requested account information. This is done by querying relevant records on the blockchain or using smart contracts.

[0144] After the requested account information is verified, the user obtains the required data from the storage account based on the data location and access permissions provided in the storage account information. The data acquisition process may involve steps such as data decryption and format conversion to ensure the availability and accuracy of the data.

[0145] Furthermore, the request result information includes: the approval result of the storage account on the request information and the transaction information of the storage account uploading the request information to the blockchain.

[0146] The present application also provides a data publishing device based on a distributed digital identity, comprising:

[0147] Memory;

[0148] A processor is used to retrieve from the memory a computer executable program of the above-mentioned data publishing method based on distributed digital identity, and execute: allocating a distributed identifier according to the digital certificate of the user corresponding to the data center, uploading the distributed identifier to the blockchain, and establishing a distributed digital identity for each user; registering an account for each of the users according to the distributed digital identity; obtaining metadata of the user data in the data center corresponding to the registered account, and uploading the metadata to the blockchain; verifying the metadata through the blockchain, and publishing the metadata to the data directory after the verification is passed.

[0149] The present application also provides a data subscription device based on a distributed digital identity, including:

[0150] Memory;

[0151] A processor is used to retrieve from the memory a computer executable program of the above-mentioned data subscription method based on distributed digital identity, and execute: issuing request information according to the data directory; obtaining request result information and data sharing method returned according to the request information; connecting to a data center according to the request result information, the data center verifies the requested account information through the blockchain, and obtains user data according to the data sharing method after the verification is passed.

[0152] The present application also provides a storage medium, comprising: a computer executable program stored therein for executing the steps of the above-mentioned data publishing method based on distributed digital identity.

[0153] The present application also provides a storage medium, comprising: a computer executable program stored therein for executing the steps of the above-mentioned data subscription method based on distributed digital identity.

[0154] Although the present invention is disclosed as above by the embodiments, it is not intended to limit the protection scope of the present invention. Any changes and modifications made by any technician familiar with the technology without departing from the concept and scope of the present invention should fall within the protection scope of the present invention.

Claims

1. A data management system based on distributed digital identity, characterized in that: include: Multiple data centers and circulation centers; The data center allocates a distributed identifier according to the digital certificate of the user corresponding to the data center, uploads the distributed identifier to the blockchain, and establishes a distributed digital identity for each user; The data center registers an account for the user corresponding to each data center according to the distributed digital identity, and the account includes: a storage account and a request account; The data center obtains metadata of user data in the data center corresponding to the storage account, and uploads the metadata to the blockchain; The circulation center obtains the metadata and verifies the metadata through the blockchain, and publishes the metadata to the data directory after passing the verification; The requesting account sends a request message according to the data directory, and forwards the request message to the storage account through the circulation center; The data center corresponding to the storage account generates request result information and data sharing method according to the request information; The circulation center obtains and verifies the request result information and the data sharing method through the blockchain, and forwards them to the requesting account after verification; The requesting account establishes a connection with the data center corresponding to the storage account according to the request result information. The data center corresponding to the storage account performs blockchain verification on the identity information of the requesting account. After the verification is passed, the requesting account obtains the user data of the data center corresponding to the storage account according to the data sharing method.

2. A data management system based on distributed digital identity according to claim 1, characterized in that: The data center includes: A distributed digital identity management system is provided for allocating distributed identifiers and uploading the distributed identifiers to a blockchain.

3. According to claim 1, a data management system based on distributed digital identity is characterized in that: The data center includes: A distributed access system, used to register an account for the user corresponding to each data center according to the distributed digital identity; obtain metadata of the user in the data center corresponding to the storage account, and upload the metadata to the blockchain; issue request information according to the data directory; receive the request information sent by the circulation center; receive the request result information and data sharing method forwarded by the circulation center.

4. According to claim 1, a data management system based on distributed digital identity is characterized in that: The data center includes: a data connector; The data connector verifies the information of the requesting account through the blockchain according to the request result information, and obtains the user data stored in the data center corresponding to the storage account according to the data sharing method after the verification is passed.

5. According to claim 1, a data management system based on distributed digital identity is characterized in that: The metadata includes descriptive information about the data content and a transaction number used to verify the integrity and source of the data.

6. A data management system based on distributed digital identity according to claim 1, characterized in that: The request result information includes: the approval result of the storage account on the request information and the transaction information of the storage account uploading the request information to the blockchain.

7. The data management system based on distributed digital identity according to claim 1, characterized in that: Multiple data centers and circulation centers include: data circulation layer and blockchain layer; The data circulation layer includes: a distributed identity management system, a distributed access system, and a data connector; The blockchain layer includes: a node of the blockchain.

8. A data publishing method based on distributed digital identity, characterized in that: include: Allocate a distributed identifier based on the digital certificate of the corresponding user in the data center, upload the distributed identifier to the blockchain, and establish a distributed digital identity for each user; Registering an account for each of the users according to the distributed digital identity; Obtaining metadata of user data in the data center corresponding to the registered account, and uploading the metadata to the blockchain; The metadata is verified through the blockchain, and after passing the verification, the metadata is published to the data directory.

9. A method for publishing data based on distributed digital identity according to claim 8, characterized in that: The metadata includes description information of the user data and a transaction number used to verify the integrity and source of the data.

10. The method for publishing data based on distributed digital identity according to claim 8, characterized in that: The data directory: metadata used by users to publish, retrieve and manage data.

11. A data subscription method based on distributed digital identity, characterized in that: include: Sending request information based on the data directory; Obtaining request result information and data sharing method returned according to the request information; The data center is connected according to the request result information, and the data center verifies the requested account information through the blockchain. After the verification is passed, the user data is obtained according to the data sharing method.

12. A data subscription method based on distributed digital identity according to claim 11, characterized in that: The request result information includes: the approval result of the data center corresponding to the storage account on the request information and the transaction information of the storage account uploading the request information to the blockchain.

13. A data publishing device based on distributed digital identity, characterized in that: include: Memory; A processor, configured to retrieve from the memory a computer executable program of a data publishing method based on a distributed digital identity according to any one of claims 8 to 10, and execute: allocating a distributed identifier according to a digital certificate of a user corresponding to a data center, uploading the distributed identifier to a blockchain, and establishing a distributed digital identity for each user; and registering an account for each user according to the distributed digital identity; Obtaining metadata of user data in the data center corresponding to the registered account, and uploading the metadata to the blockchain; The metadata is verified through the blockchain, and after passing the verification, the metadata is published to the data directory.

14. A data subscription device based on distributed digital identity, characterized in that: include: Memory; A processor, used to retrieve from the memory a computer executable program of a data subscription method based on distributed digital identity as described in claim 11 or 12, and execute: issuing request information according to a data directory; obtaining request result information and a data sharing method returned according to the request information; connecting to a data center according to the request result information, the data center verifying the requested account information through the blockchain, and obtaining user data according to the data sharing method after the verification is passed.

15. A storage medium, characterized in that: include: A computer executable program is stored for executing the steps of a data publishing method based on a distributed digital identity as described in any one of claims 8 to 10.

16. A storage medium, characterized in that: include: A computer executable program is stored for executing the steps of a data subscription method based on distributed digital identity as described in claim 11 or 12.

Images