Data circulation method and system for large-scale block chain trusted data Internet

Abstract

The invention belongs to the technical field of block chains, and provides a data circulation method and system for a large-scale block chain trusted data internet, and the technical scheme is that a core chain network and an access chain network of the block chain trusted data internet are constructed; wherein an operator constructs a global digital identity chain of a core chain network of the data chain network, and each main body participating in data circulation respectively constructs a localized digital asset chain of the corresponding core chain network; an access chain network is constructed, one end of each main body terminal, one end of an adapter and one end of a gateway constructed by an operator are connected to a corresponding global digital identity chain or a local digital asset chain, the other end of each main body terminal, one end of each adapter and one end of the gateway are connected with a real entity, and a digital space and a real space are bidirectionally and synchronously mapped; constructing an end-to-end asset credible delivery channel based on the block chain credible data internet; and performing data circulation based on the constructed end-to-end asset credible delivery channel. The method is suitable for large-scale and extensible block chain data circulation.

Description

Technical Field

[0001] The present invention belongs to the field of blockchain technology, and in particular relates to a data circulation method and system for a large-scale blockchain trusted data Internet. Background Art

[0002] The statements in this section merely provide background information related to the present invention and do not necessarily constitute prior art.

[0003] Due to the characteristics of data such as reproducibility and non-exclusivity, the current circulation of data elements has problems such as trust, security and compliance. Data resource holders have concerns when providing valuable data to the outside world, resulting in data barriers in data supply and poor data circulation. In order to solve the problem of data barriers, a data circulation method based on blockchain technology is proposed. The existing data circulation method is based on the networking and data circulation application of a single blockchain, which is not suitable for large-scale blockchain data circulation applications. On the other hand, considering that the large-scale application of blockchain can realize the cross-chain use of multiple blockchains, the current closed ecology between blockchains is not conducive to the unified management of blockchains and related access applications and the construction of blockchain data circulation application ecology. Summary of the invention

[0004] In order to solve at least one technical problem existing in the above-mentioned background technology, the present invention provides a data circulation method and system for a large-scale blockchain trusted data Internet, which constructs a trusted data Internet architecture suitable for large-scale blockchain data circulation, can solve trust problems, allow user participation, and autonomously control valuable data.

[0005] In order to achieve the above object, the present invention adopts the following technical solution:

[0006] The first aspect of the present invention provides a large-scale blockchain data Internet networking method, comprising the following steps:

[0007] Construct the core chain network and access chain network of the blockchain trusted data Internet; among them, the operator builds the global digital identity chain of the digital chain network core chain network, and each entity involved in data circulation builds the localized digital asset chain of the corresponding core chain network;

[0008] Build an access chain network, connect one end of each subject terminal, adapter and gateway built by the operator to the corresponding global digital identity chain or localized digital asset chain, and the other end to the real entity, so as to achieve bidirectional synchronous mapping between digital space and real space;

[0009] Build an end-to-end trusted asset delivery channel based on blockchain trusted data internet;

[0010] Data circulation is based on the built end-to-end asset trusted delivery channel.

[0011] Furthermore, each localized digital asset chain is registered in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, so as to allow the localized digital asset chain to enter the global digital identity chain.

[0012] Furthermore, the said connecting one end of each main terminal, adapter and gateway constructed by the operator to the corresponding global digital identity chain or localized digital asset chain, and the other end to the real entity, includes:

[0013] Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways;

[0014] The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate;

[0015] The digital identity adapter is connected to the global digital identity chain of the core chain network, connected with the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject;

[0016] After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system;

[0017] After access, the cross-chain gateway is connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

[0018] Furthermore, the end-to-end trusted asset delivery channel is constructed based on the blockchain trusted data internet, including:

[0019] Each subject imports a digital certificate based on the corresponding terminal, activates the digital identity, and completes the access to each terminal;

[0020] Data resource holders use the data issuing terminal to register data source information, access data resources, process raw data resources, output valuable data, and issue digital assets on the chain according to the ownership of the data subject;

[0021] The digital asset carrier uses the data carrier to collect the digital assets issued by the data resource holder and authorizes the digital asset user to use the digital assets as needed;

[0022] Digital asset users use data consumers to obtain digital assets for use in their business based on authorization, while also managing all authorized digital assets.

[0023] Furthermore, the data circulation based on the constructed end-to-end asset trusted delivery channel includes the following steps:

[0024] The data carrier activates the data carrier and opens an encrypted digital asset account on the DataChain Network;

[0025] Identity information of the management entity of the Digital Chain Network operating unit;

[0026] The data carrier uses the data carrier terminal to actively obtain the data it needs;

[0027] The data issuing end receives the data collection application and, based on the pre-written data asset contract, issues the data collected by the data carrier to the encrypted digital asset account of the data carrier on the DataChain Network.

[0028] The data carrier manages and views the data in the encrypted digital asset account through the data carrier terminal. If there is erroneous data, the data issuer can submit a data correction application to the data issuer. The data issuer can receive the correction message through the data issuer terminal and verify and process the erroneous data.

[0029] Data users can initiate data use applications to data carriers through data consumption terminals;

[0030] The data carrier receives the data use application through the data carrier terminal and decides whether to authorize the data user to obtain and use its own data;

[0031] If the data carrier agrees to authorize the data user to use its own data, the data user obtains the on-chain data through the data consumer for use, thereby achieving compliant and orderly flow of data between the data issuer, data carrier, and data user.

[0032] Furthermore, the method also includes executing a corresponding management method in the blockchain trusted data Internet according to the request type of the real terminal, including:

[0033] According to the access request information, the data to be uploaded is uploaded to the chain;

[0034] According to the data usage request information, the data on the chain is used on the chain;

[0035] According to the request information for joining the Digital Chain Network, join the corresponding localized digital asset chain and manage the newly added transaction nodes and storage nodes.

[0036] Further, uplinking the data to be uplinked according to the access request information includes:

[0037] Receive access request information from the real end to the blockchain trusted data Internet, and identify the data to be uploaded to the chain;

[0038] Review the identity information of the data requester, and connect to the blockchain trusted data Internet after passing the review;

[0039] Issue application connection tokens to data requesters connected to the DataChain Network and enable data distribution services for data requesters;

[0040] Configure the global digital identity chain node of the data chain network connected to the data consumption end of the data request end mapping access;

[0041] According to the needs of the data requester, access the issuable data asset types and write data asset contracts and data on-chain plug-ins;

[0042] The local data system of the accessed data request end accesses the API docking data issuing end through the application docking token;

[0043] Data is uploaded to the chain through the data issuing end.

[0044] A second aspect of the present invention provides a data circulation system for a large-scale blockchain trusted data Internet, comprising:

[0045] The Digital Chain Network construction module is used to build the core chain network and access chain network of the blockchain trusted data Internet; among them, the operator builds the global digital identity chain of the Digital Chain Network core chain network, and each entity involved in data circulation builds the localized digital asset chain of the corresponding core chain network;

[0046] The access module is used to build an access chain network, connect one end of each subject terminal, adapter and gateway built by the operator to the corresponding global digital identity chain or localized digital asset chain, and the other end to the real entity, so as to achieve bidirectional synchronous mapping between digital space and real space;

[0047] Delivery channel construction module, used to build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet;

[0048] The data circulation module is used for data circulation based on the constructed end-to-end asset trusted delivery channel.

[0049] Furthermore, in the access module, each localized digital asset chain is registered in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, so as to allow the localized digital asset chain to access the global digital identity chain.

[0050] Furthermore, in the digital chain network construction module, the terminals, adapters and gateways built by the operator are connected to the corresponding global digital identity chain or localized digital asset chain at one end, and the other end is connected to the real entity, including:

[0051] Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways;

[0052] The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate;

[0053] The digital identity adapter is connected to the global digital identity chain of the core chain network, connected with the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject;

[0054] After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system;

[0055] After access, the cross-chain gateway is connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

[0056] Compared with the prior art, the present invention has the following beneficial effects:

[0057] 1. The blockchain trusted data Internet constructed by the present invention based on the global digital identity chain and multiple localized digital asset chains realizes the interconnection and dynamic expansion capabilities between large-scale blockchains, making the blockchain not only a trusted evidence of business transactions, but also a more effective trusted transmission of valuable data, supporting large-scale data circulation applications.

[0058] 2. In order to solve the trust problem in the circulation of data elements, the present invention constructs an end-to-end decentralized trusted delivery channel for value data. The closed and bounded data network based on access control built at the network transmission layer is suitable for B2B data dedicated line services, and does not consider the problem of independent control of personal data by the C-end.

[0059] 3. The security trust layer constructed by the present invention on top of the traditional data infrastructure provides a blockchain-based technical implementation method specifically for the trust requirements of anti-tampering, anti-repudiation, anti-leakage, anti-loss, and traceability of data element circulation.

[0060] 4. The business operation support system of the Digital Chain Network provided by the present invention is different from other blockchains that only have a technical-level blockchain browser for observing the operation of the blockchain. The Digital Chain Network BOSS system has all the business management and services for carrying out data operation business, especially valuable data packaging, trusted delivery and compliant use, and can provide data operators with full-network business operation support similar to that of communication operators.

[0061] Advantages of additional aspects of the present invention will be given in part in the following description, and in part will become obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] The accompanying drawings in the specification, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0063] Figure 1 This is an overall schematic diagram of data circulation in a large-scale blockchain trusted data Internet provided by an embodiment of the present invention;

[0064] Figure 2 This is a schematic diagram of the overall structure of a large-scale blockchain trusted data Internet provided by an embodiment of the present invention;

[0065] Figure 3 is a schematic diagram of a global digital identity chain provided by an embodiment of the present invention;

[0066] Figure 4 is a schematic diagram of a localized digital asset chain provided by an embodiment of the present invention;

[0067] Figure 5 The digital chain network terminal system structure and access relationship provided by the embodiment of the present invention;

[0068] Figure 6 It is a schematic diagram of the digital chain network business operation support system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0069] The present invention will be further described below in conjunction with the accompanying drawings and embodiments.

[0070] It should be noted that the following detailed descriptions are all illustrative and intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used herein have the same meanings as those commonly understood by those skilled in the art to which the present invention belongs.

[0071] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit exemplary embodiments according to the present invention. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should be understood that when the terms "comprising" and / or "including" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.

[0072] Embodiment 1

[0073] like Figure 1 and Figure 2 As shown, this embodiment provides a data circulation method for a large-scale blockchain trusted data Internet, including the following steps:

[0074] Step 1: Build the core chain network and access chain network of the blockchain trusted data Internet;

[0075] In order to simplify the description, the blockchain trusted data Internet is referred to as the Digital Chain Network in this embodiment. The constructed Digital Chain Network is a trusted data network with a homogeneous / heterogeneous multi-chain architecture built based on the Internet using alliance blockchain technology. It connects the data supply end, data carrying end and data usage end, provides a trusted data delivery channel between multiple ends, and allows data subjects of valuable data to independently control their own data.

[0076] The specific steps include:

[0077] Step 101: Build the core chain network of the blockchain trusted data Internet;

[0078] Specifically include:

[0079] Step 1011: The operator builds the global digital identity chain of the Digital Chain Network core chain network;

[0080] The global digital identity chain in this embodiment is as follows Figure 3 As shown, the digital identity of each subject participating in data circulation in the digital chain network is managed uniformly, the global object digital asset index, isomorphic multi-chain expansion, and cross-chain routing of other chain networks are realized;

[0081] Among them, the subject management manages the digital identity of the Digital Chain Network, establishes the Digital Chain Network digital identity by issuing asymmetric key pairs to the subjects, connects with the existing CA / RA identity authentication system or identity authentication system through the digital identity adapter, realizes the subject identity authentication, establishes the correspondence between the real identity and the digital identity, and ensures the global identity of each subject in the Digital Chain Network.

[0082] The object index supports the registration of digital assets of all localized digital asset chains and other chain networks, forming a digital asset directory index, including asset ID, type, localized digital asset chain ID, cross-chain ID, ownership subject ID, etc.

[0083] Multi-chain routing provides management of homogeneous localized digital asset chains in the core chain network and supports the registration of localized digital asset chains, including registration of localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, localized digital asset chain object status index and other information, to achieve access to localized digital asset chains in the core chain network.

[0084] The cross-chain gateway deployed by cross-chain routing follows the agreed cross-chain protocol to achieve the same digital identity of entities between different chain networks and provide registration capabilities for other chain networks, including registration of other chain network IDs, names, entry addresses, object status indexes and other information.

[0085] Step 1012: Each entity involved in data circulation builds a corresponding localized digital asset chain;

[0086] The localized digital asset chain is equivalent to the subnet of the network system. The purpose of dividing the network system into subnets is to facilitate routing management, limit the network broadcast domain, and improve network communication efficiency. The purpose of dividing the localized digital asset chain in the digital chain network is to facilitate the horizontal expansion of the digital chain network, limit the consensus domain of the blockchain to improve consensus efficiency and localized distributed storage of digital assets. Figure 4 As shown, the localized digital asset chain includes:

[0087] Transaction Automation Smart Contract: Orchestrate and automate the execution of transactions received and allowed by the Transaction Service Gateway.

[0088] Consensus service: The transaction execution process is recorded in the distributed public ledger after consensus.

[0089] Public ledger: records global transaction information of the localized digital asset chain.

[0090] Subject mapping: Map the subjects managed in the alliance blockchain to the localized digital asset chain to facilitate frequent transactions between subjects and objects and anchor the ownership of subjects and objects.

[0091] Digital asset smart contract: used to register the types of digital assets that can be issued by the localized digital asset chain before the digital assets are issued. The registered digital asset smart contract is used for packaging when the digital assets are issued and put on the chain.

[0092] Software trusted environment: Symmetrically encrypt the digital assets on the chain and sign them with the issuer's private key to generate a symmetric encryption key to generate a unique ID for the digital asset. If the digital asset has an identifiable data subject, use the data subject's public key to asymmetrically encrypt the data asset ID to anchor the ownership of the data subject and the digital asset. Team-building trusted environments can also seamlessly utilize the cryptographic security computing capabilities provided by external cryptographic systems.

[0093] The transaction service gateway receives transaction requests from the outside, including digital asset retrieval, query, authorization, off-chain and other transaction requests from the global digital identity chain, digital asset smart contract registration, value data on-chain issuance and other transaction requests from the data issuing end, etc.

[0094] The digital asset status index updates the status of digital assets on the chain in real time, including the digital asset ID, digital asset smart contract ID, issuing signatory entity ID, data subject ID, issuance update time, effective status, etc.

[0095] Step 1013: Register each localized digital asset chain in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index, digital identity mapping, etc., to achieve access to the localized digital asset chain.

[0096] Step 102: Build an access chain network, connect the main terminals, adapters and gateways built by the operator to the corresponding global digital identity chain or localized digital asset chain at one end according to the business connection relationship, and connect to the real entity at the other end to achieve two-way synchronization between the digital space and the real space.

[0097] Specifically include:

[0098] Step 1021: The operator builds the data carrying terminal, data consumption terminal, data issuing terminal and other digital chain network terminal systems as well as digital identity adapters, password adapters, multi-terminal collaboration centers, and cross-chain gateways;

[0099] The digital identity adapter supports docking with existing CA / RA systems and identity authentication systems. Through the CA / RA identity authentication system, the real identity and its key are issued and registered through digital certificates. The digital certificate is carried through UKey or IC card to establish its digital identity in the digital space. Each node and each entity in the digital chain network will have a registered digital certificate.

[0100] The national cryptographic adapter supports docking with the cryptographic system. By docking with the cryptographic system, the cryptographic trusted environment TE of the digital chain network is formed, providing key generation, encryption and decryption, and signature verification capabilities for digital assets, generating a unique ID and symmetric key for each object, and using the subject's key to encrypt and sign the object key and content. All encryption and signing processes are completed through the trusted environment. The trusted environment TE supports hardware TE such as encryption machines, and can also use software TE built into the localized digital asset chain.

[0101] The cross-chain gateway enables interconnection with other homogeneous / heterogeneous blockchain networks.

[0102] The business operation side of the Digital Chain Network provides capabilities such as subject access, localized digital asset chain access, application system access, other chain network access, digital identity management, data asset registration, terminal access, transaction measurement, operation monitoring, and operation and maintenance technical support to provide business operation support for the Digital Chain Network.

[0103] Step 1022: The data carrier and the data user access the global digital identity chain of the core chain network after the access certificate is issued by the business operation support system of the digital chain network; the data issuer accesses the local digital asset chain of the digital asset issuer after the access is granted by the business operation support system of the digital chain network;

[0104] like Figure 5As shown, the data carrying end is connected to the global digital identity chain, providing individuals or enterprises with the ability to build digital identities on demand and manage digital assets autonomously, including terminal activation, digital asset collection, digital identity presentation, digital asset use authorization, digital asset use tracing, data error correction application, message writing, and embedded docking. Among them, terminal activation refers to the terminal activation operation when used for the first time, that is, importing one's own digital certificate and private key, and setting one's own encrypted private key access password. Digital asset collection refers to an individual or legal person collecting his or her own digital assets through the issued digital asset catalog. Digital identity presentation refers to building and presenting one's own dynamic digital identity based on one's own data. Digital asset use authorization refers to authorizing the data user to use his or her own digital assets based on the application of the data user, and defining the scope of application. Digital asset use tracing refers to tracing the use records of digital assets. Data error correction application refers to submitting an error correction application for digital assets that do not conform to the actual situation and participating in data governance. Message collaboration refers to connecting to multi-terminal collaboration centers through message collaboration, subscribing to or sending collaboration messages. Embedded docking means that the terminal provides an H5 interface, which is embedded in the local service channel system, and utilizes the identity authentication and service capabilities of the existing service channels to achieve an organic integration of data services and business services.

[0105] The data consumption end is connected to the global digital identity chain, providing social organizations with digital identity verification, digital asset authorization, use and management capabilities. Terminal access refers to obtaining the terminal access digital certificate of the data user unit from the operation support system; business system access refers to obtaining the application system docking token to control the business system to use the API to dock with the terminal; user access refers to setting user permissions to achieve access control for business users of the data user unit; digital asset use application refers to digital identity verification and digital asset use request based on business matters, and qualification verification based on the digital identity presented by the data carrier; digital asset reception and use refers to business processing based on the digital assets authorized by the data carrier and the data user's request for authorization; digital asset management means that the data user can manage the authorized digital assets, use its own private key to decrypt and export digital assets to the business system for use, and can also conduct metering and reconciliation with the digital asset issuer; data demand application means that the data user can put forward new data requirements to the digital asset issuer; through message collaboration, connect to the multi-terminal collaboration center, subscribe or send collaboration messages, and realize multi-terminal interaction with the digital asset issuer and carrier.

[0106] The data issuing end is connected to the local digital asset chain, providing data resource holders with the ability to issue and manage valuable data digital assets, including terminal access, data system access, user access, data product development, digital asset contract writing, data processing, digital asset chain issuance, digital asset authorized use, demand collection, data error correction processing, digital asset management, digital asset usage measurement, and message collaboration. Terminal access refers to obtaining the digital certificate of the data holder from the business operation support system of the Digital Chain Network, importing it into the terminal system, and realizing the access of the terminal to the local digital asset chain. Data system access refers to using the application docking token obtained from the business operation support system of the Digital Chain Network to realize the access control of the data system to the API. User access refers to setting the user rights of the terminal through the business operation support system of the Digital Chain Network to realize user access. Data product development refers to the development of data products based on the supply and use needs of data resources. Digital asset contract writing refers to writing digital asset smart contracts based on the developed data products and registering them in the local digital asset chain. Data processing refers to processing data resources based on digital asset contracts to form digital assets. Issuance of digital assets on the chain refers to issuing processed digital assets on the chain. For digital assets involving personal information, they are issued to the encrypted data asset account of the data subject. For digital assets that do not involve personal information, the service interface is opened for the authenticated data user to call. Authorized use of digital assets refers to authorizing the data user to use digital assets that do not involve personal information and digital assets authorized by individuals based on the digital asset transaction order of the data user. Demand collection refers to collecting data requirements from data users to develop new data products. Data error correction processing refers to collecting data error correction applications from individuals / enterprises, starting the data error correction processing process, and notifying the data issuer to govern the data. Digital asset management refers to the D-side being able to manage the digital assets that it has issued and authorized the data user to use, and provide digital asset use traceability and evidence collection capabilities. Digital asset usage measurement refers to measuring the number of times the digital asset is used by the data user, and can be reconciled with the digital asset user. Message collaboration supports connecting with multi-terminal collaboration centers, sending and subscribing to end-to-end collaboration messages.

[0107] Step 1023: After the digital identity adapter is registered in the business operation support system of the digital chain network, it is allowed to access the global digital identity chain of the core chain network, connect with the external CA\RA and identity authentication system, import the subject digital certificate, establish a digital identity for each subject, open an encrypted digital asset account, and complete the subject access;

[0108] Step 1024: After the cryptographic adapter is registered in the business operation support system of the digital chain network, it is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system to use the external cryptographic security computing capabilities;

[0109] Step 1025: The cross-chain gateway is deployed through the business operation support system of the Digital Chain Network. After being admitted by the business operation support system of the Digital Chain Network, it is connected to the global digital identity chain of the core chain network, supports the registration of IDs, names, access addresses, etc. of other chain networks, and realizes cross-chain docking of heterogeneous blockchains.

[0110] In this embodiment, Figure 6 As shown in the figure, the Digital Chain Network business operation support system is similar to the Digital Chain Network business operation support system of the communication operator, providing system support for the Digital Chain Network operator to carry out related business. Its users are the Digital Chain Network operating units, and its composition includes:

[0111] Among them, digital identity management refers to the management of encrypted digital asset accounts on the digital chain network, providing digital asset issuers, digital asset carriers and digital asset users with encrypted digital asset account opening, key import or issuance, key self-management and custody, unlocking password management, subject identity information management and other service functions; digital asset catalog management provides unified digital asset type registration and catalog management for the entire network; localized digital asset chain extension management provides localized digital asset chain registration, access control and other functions; cross-chain management provides cross-chain gateway deployment, other blockchain registration, access control and other functions; alliance member management provides a global digital identity chain alliance The Digital Chain Network provides functions such as authentication, access, and consensus node deployment for members; the Digital Chain Network node management provides access management for global digital identity chain consensus nodes, transaction nodes, secret key trusted storage nodes, localized digital asset chain transaction nodes, localized digital asset chain consensus nodes, and localized digital asset chain storage nodes; the Digital Chain Network service management provides unified management of interfaces for digital asset issuance services and usage services, including access, authentication, control, evidence storage, and measurement management functions; the data issuing end and data using end management provide access management based on device digital certificates. Only terminal devices with digital certificates issued by the Digital Chain Network can access the Digital Chain Network; the data carrying end management provides access management based on The activation and opening management of the main account controls the localized digital asset chain and cross-chain digital assets that the digital safe can access, as well as the reset of the digital safe unlock password and other functions; the digital chain network operation monitoring provides monitoring content such as the nodes of the global digital identity chain, the nodes of the localized digital asset chain, the block height, the storage capacity, the network bandwidth, the number of transactions, the number of accounts opened, the number of digital asset types, the number of digital assets issued, the number of collections, the number of uses, the number of service interface visits, the collaborative messages, and the deployment and operation of the cross-chain gateway, so as to control the operation and use of the entire network in real time in an intuitive and visual way; the digital asset tracing and evidence collection function provides tracing and evidence collection support when digital asset circulation disputes occur. The traceability records of designated digital assets signed by the Digital Chain Network can be exported as a compliance basis for dispute resolution; the digital asset metering and billing function provides usage statistics for the circulation of digital assets, including the number of requests, authorizations, uses, and off-chain exports, etc., to provide a basis for formulating billing packages and circulation settlements; message collaboration management is used for the establishment and permission control of message queues and subscription topics in the message collaboration center; password adaptation management registers and deploys password adapters; digital identity adapter management is used to register and connect to digital identity adapters of external CA systems and identity authentication systems; in addition, it also has the ability to upgrade, maintain, and provide technical support for the Digital Chain Network system.

[0112] Step 2: Build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet;

[0113] The specific steps include:

[0114] Step 201: Each subject imports the subject digital certificate based on the corresponding terminal, activates the digital identity, and completes the access of each terminal;

[0115] Step 202: The data resource holder uses the data issuing terminal to register the data source information, access the data resources, process the original data resources, output the valuable data, and issue the digital assets on the chain according to the ownership of the data subject;

[0116] Step 203: Digital asset carriers such as individuals and enterprises use the data carrier to receive digital assets issued by the data resource holder, and authorize digital asset users such as social organizations to use the digital assets as needed;

[0117] Step 204: The digital asset user uses the data consumer to obtain digital assets for use in business according to the authorization status, and manages all authorized digital assets.

[0118] Step 3: According to the request type of the real terminal, the corresponding management method is executed in the blockchain trusted data Internet;

[0119] The specific steps include:

[0120] Step 301: Uploading the data to be uploaded to the chain according to the access request information, including:

[0121] Step 3011: Receive access request information from the real end to the blockchain trusted data Internet, and identify the data to be uploaded to the chain;

[0122] Step 3012: Review the identity information of the data requesting end, and access the blockchain trusted data Internet after passing the review;

[0123] Step 3013: Issue an application connection token to the data requester connected to the DataChain Network, and enable data distribution service for the data requester;

[0124] Step 3014: configure the global digital identity chain node of the digital chain network to which the data consumption end connected to the data request end mapping is connected;

[0125] Step 3015: According to the needs of the data requester, access the issuable data asset types, and write the data asset contract and data on-chain plug-in;

[0126] Step 3016: The local data system of the accessed data requesting end accesses the API docking data issuing end through the application docking token;

[0127] Step 3017: upload data to the chain through the data issuing end.

[0128] Step 302: according to the data use request information, the data after being uploaded to the chain is used in the offline chain, including:

[0129] Step 3021: Receive usage request information from the real end to the data chain network operator and specify the data to be used;

[0130] Step 3022: After the approval of the Digital Chain Network operator, the Digital Chain Network encrypted digital asset account will be opened for the access institution, and account access will be set up; an application docking token will be issued for the access institution to access the local business system of the Digital Chain Network, and data usage services will be opened for the institution;

[0131] Step 3023, the Digital Chain Network operator configures the Digital Chain Network node connected to the data consumption end of the access institution through the Digital Chain Network operation support system;

[0132] Step 3024: The local business system of the access institution accesses the API to connect to the data consumer end through the application connection token, or provides a data consumer end UI for it;

[0133] Step 3025: If the data that the access institution needs to use involves personal information or corporate secrets, the access institution needs to connect to and use the data carrying terminal, i.e., the digital safe; if it does not involve personal information or corporate secrets, the access institution can directly use the downlink data;

[0134] Step 3026: If the access institution needs to combine the data carrier with its own existing service channels, the data carrier can be embedded in the access institution's own service channels in the form of H5. If not, the data carrier provided by DataChain can be used directly.

[0135] Step 3027: If the access institution needs to connect the data carrier with an external CA system or identity authentication system on the premise of combining it with its own existing service channels, the Digital Chain Network operating unit completes the connection through the digital identity adapter and manages the connected external CA or identity authentication system through the digital identity adapter management of the Digital Chain Network operation support system;

[0136] Step 3028: Individuals, enterprises and other entities shall authenticate their identities through the identity authentication service provided by the DataChain Network before using the data carrier; individuals and enterprises shall activate the data carrier account and authorize the data involving personal information and enterprise secrets;

[0137] Step 3029: The access institution uses the data through the data consumption end.

[0138] Step 303: Join the corresponding localized digital asset chain according to the request information of joining the digital chain network, including:

[0139] Step 3031: The access institution applies to join the Digital Chain Network as an alliance member and specifies which localized digital asset chain to join;

[0140] Step 3032: The Digital Chain Network operator reviews the access application. If the application is approved, the Digital Chain Network operator will deploy transaction nodes and storage nodes locally for the access institution.

[0141] Step 3033: The Digital Chain Network operating unit conducts admission and management of alliance members, and manages newly added transaction nodes and storage nodes through the Digital Chain Network node management module.

[0142] Step 4: Data circulation based on the established end-to-end asset trusted delivery channel;

[0143] The specific steps include:

[0144] Step 401: The data carrier activates the data carrier terminal and opens an encrypted digital asset account on the DataChain Network;

[0145] Step 402: The Digital Chain Network operator manages the subject identity information through the Digital Chain Network business operation support system;

[0146] Step 403: The data carrier uses the data carrier terminal to actively obtain the data it needs;

[0147] Step 404: The data issuing end receives the data collection application and, according to the pre-written data asset contract, issues the data collected by the data carrier to the encrypted digital asset account of the data carrier on the DataChain Network;

[0148] Step 405: The data carrier can manage and view the data in the encrypted digital asset account through the data carrier terminal. If there is erroneous data, the data carrier can submit a data correction application to the data issuer. The data issuer can receive the correction message through the data issuer terminal and verify and process the erroneous data.

[0149] Step 406: The data user may initiate a data use application to the data carrier through the data consumption terminal;

[0150] Step 407: The data carrier receives the data use application through the data carrier terminal and decides whether to authorize the data user to obtain and use its own data.

[0151] Step 408: If the data carrier agrees to authorize the data user to use its own data, the data user can obtain the on-chain data through the data consumer end for use, thereby achieving compliant and orderly flow of data among the data issuer, data carrier, and data user.

[0152] Embodiment 2

[0153] This embodiment provides a data circulation system for a large-scale blockchain trusted data Internet, including:

[0154] The Digital Chain Network construction module is used to build the core chain network and access chain network of the blockchain trusted data Internet; among them, the operator builds the global digital identity chain of the Digital Chain Network core chain network, and each entity involved in data circulation builds the localized digital asset chain of the corresponding core chain network;

[0155] The access module is used to build an access chain network, connect one end of each subject terminal, adapter and gateway built by the operator to the corresponding global digital identity chain or localized digital asset chain, and the other end to the real entity, so as to achieve bidirectional synchronous mapping between digital space and real space;

[0156] Delivery channel construction module, used to build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet;

[0157] The data circulation module is used for data circulation based on the constructed end-to-end asset trusted delivery channel.

[0158] Furthermore, in the access module, each localized digital asset chain is registered in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, so as to allow the localized digital asset chain to access the global digital identity chain.

[0159] Furthermore, in the digital chain network construction module, the terminals, adapters and gateways built by the operator are connected to the corresponding global digital identity chain or localized digital asset chain at one end, and the other end is connected to the real entity, including:

[0160] Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways;

[0161] The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate;

[0162] The digital identity adapter is connected to the global digital identity chain of the core chain network, connected with the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject;

[0163] After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system;

[0164] After access, the cross-chain gateway is connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

[0165] The specific implementation process of the remaining modules is consistent with the content of the first embodiment, please refer to the first embodiment for details.

[0166] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A data circulation method for a large-scale blockchain trusted data Internet, characterized in that: The steps include: Construct the core chain network and access chain network of the blockchain trusted data Internet; among them, the operator builds the global digital identity chain of the digital chain network core chain network, and each entity involved in data circulation builds the corresponding localized digital asset chain of the core chain network; Build an access chain network, connect one end of each terminal, adapter and gateway built by the operator to the corresponding global digital identity chain or localized digital asset chain, and the other end to the real entity, so as to achieve bidirectional synchronous mapping between digital space and real space; Build an end-to-end trusted asset delivery channel based on blockchain trusted data internet; Data circulation is based on the built end-to-end asset trusted delivery channel.

2. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 1, characterized in that: Register each localized digital asset chain in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, and allow the localized digital asset chain to access the global digital identity chain.

3. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 1, characterized in that: The method of connecting one end of each subject terminal, adapter and gateway built by the operator to the corresponding global digital identity chain or localized digital asset chain, and the other end to the real entity, includes: Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways; The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate; The digital identity adapter is connected to the global digital identity chain of the core chain network, connected with the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject; After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system; After access, the cross-chain gateway is connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

4. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 3, characterized in that: The end-to-end trusted asset delivery channel based on the blockchain trusted data internet is constructed, including: Each subject imports a digital certificate based on the corresponding terminal, activates the digital identity, and completes the access to each terminal; Data resource holders use the data issuing terminal to register data source information, access data resources, process raw data resources, output valuable data, and issue digital assets on the chain according to the ownership of the data subject; The digital asset carrier uses the data carrier to collect the digital assets issued by the data resource holder and authorizes the digital asset user to use the digital assets as needed; Digital asset users use data consumers to obtain digital assets for use in their business based on authorization, while also managing all authorized digital assets.

5. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 1, characterized in that: The data circulation based on the constructed end-to-end asset trusted delivery channel includes the following steps: The data carrier activates the data carrier and opens an encrypted digital asset account on the DataChain Network; Identity information of the management entity of the Digital Chain Network operating unit; The data carrier uses the data carrier terminal to actively obtain the data it needs; The data issuing end receives the data collection application and, based on the pre-written data asset contract, issues the data collected by the data carrier to the encrypted digital asset account of the data carrier on the DataChain Network. The data carrier manages and views the data in the encrypted digital asset account through the data carrier terminal. If there is erroneous data, the data issuer can submit a data correction application to the data issuer. The data issuer can receive the correction message through the data issuer terminal and verify and process the erroneous data. Data users can initiate data use applications to data carriers through data consumption terminals; The data carrier receives the data use application through the data carrier terminal and decides whether to authorize the data user to obtain and use its own data; If the data carrier agrees to authorize the data user to use its own data, the data user obtains the on-chain data through the data consumer for use, thereby achieving compliant and orderly flow of data between the data issuer, data carrier, and data user.

6. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 1, characterized in that: The method also includes executing a corresponding management method in the blockchain trusted data Internet according to the request type of the real terminal, including: According to the access request information, the data to be uploaded is uploaded to the chain; According to the data usage request information, the data on the chain is used on the chain; According to the request information for joining the Digital Chain Network, join the corresponding localized digital asset chain and manage the newly added transaction nodes and storage nodes.

7. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 6, characterized in that: The step of uploading the data to be uploaded to the link according to the access request information includes: Receive access request information from the real end to the blockchain trusted data Internet, and identify the data to be uploaded to the chain; Review the identity information of the data requester, and connect to the blockchain trusted data Internet after passing the review; Issue application connection tokens to data requesters connected to the DataChain Network and enable data distribution services for data requesters; Configure the global digital identity chain node of the data chain network connected to the data consumption end of the data request end mapping access; According to the needs of the data requester, access the issuable data asset types and write data asset contracts and data on-chain plug-ins; The local data system of the accessed data request end accesses the API docking data issuing end through the application docking token; Data is uploaded to the chain through the data issuing end.

8. A data circulation system for a large-scale blockchain trusted data Internet, characterized in that: include: The Digital Chain Network construction module is used to build the core chain network and access chain network of the blockchain trusted data Internet; among them, the operator builds the global digital identity chain of the Digital Chain Network core chain network, and each entity involved in data circulation builds the localized digital asset chain of the corresponding core chain network; The access module is used to build an access chain network, connect one end of each subject terminal, adapter and gateway built by the operator to the corresponding global digital identity chain or localized digital asset chain, and the other end to the real entity, so as to achieve bidirectional synchronous mapping between digital space and real space; Delivery channel construction module, used to build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet; The data circulation module is used for data circulation based on the constructed end-to-end asset trusted delivery channel.

9. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 8, characterized in that: In the access module, each localized digital asset chain is registered in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, so as to allow the localized digital asset chain to access the global digital identity chain.

10. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 8, characterized in that: In the digital chain network construction module, the terminals, adapters and gateways built by the operator are connected to the corresponding global digital identity chain or localized digital asset chain at one end, and connected to the real entity at the other end, including: Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways; The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate; The digital identity adapter is connected to the global digital identity chain of the core chain network, connected with the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject; After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system; After access, the cross-chain gateway will be connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

Images