A data circulation method and system for a large-scale blockchain trusted data internet

Abstract

This invention belongs to the field of blockchain technology and provides a data circulation method and system for a large-scale blockchain trusted data internet. Its technical solution involves building a core chain network and access chain network for the blockchain trusted data internet. Operators construct a global digital identity chain for the core chain network, and each entity involved in data circulation constructs a localized digital asset chain for the corresponding core chain network. The access chain network is constructed by connecting each entity's terminals, adapters, and gateways constructed by the operator to the corresponding global digital identity chain or localized digital asset chain on one end and to physical entities on the other end, achieving a bidirectional and synchronous mapping of digital space and physical space. An end-to-end trusted asset delivery channel is constructed based on the blockchain trusted data internet, and data circulation is carried out based on this constructed end-to-end trusted asset delivery channel. This method is suitable for large-scale and scalable blockchain data circulation.

Description

Technical Field

[0001] The present invention belongs to the field of blockchain technology, and in particular relates to a data circulation method and system for a large-scale blockchain trusted data Internet. Background Art

[0002] The statements in this section merely provide background information related to the present invention and do not necessarily constitute prior art.

[0003] Due to the reproducibility and non-exclusivity of data, the current circulation of data elements faces issues such as trust, security, and compliance. Data resource holders have concerns when providing valuable data to the outside world, resulting in data barriers in data supply and poor data circulation. To address the data barrier problem, a data circulation method based on blockchain technology has been proposed. Existing data circulation methods are based on the networking and data circulation applications of a single blockchain and are not suitable for large-scale blockchain data circulation applications. On the other hand, considering that the large-scale application of blockchain can achieve cross-chain use of multiple blockchains, the current closed ecosystem between blockchains is not conducive to the unified management of blockchains and related access applications and the construction of a blockchain data circulation application ecosystem. Summary of the Invention

[0004] In order to solve at least one technical problem existing in the above-mentioned background technology, the present invention provides a data circulation method and system for a large-scale blockchain trusted data Internet, which constructs a trusted data Internet architecture suitable for large-scale blockchain data circulation, can solve trust issues, allow user-side participation, and independently control valuable data.

[0005] In order to achieve the above object, the present invention adopts the following technical solutions:

[0006] A first aspect of the present invention provides a large-scale blockchain data Internet networking method, comprising the following steps:

[0007] Build the core chain network and access chain network of the blockchain trusted data internet; among them, operators build the global digital identity chain of the core chain network of the digital chain network, and each entity involved in data circulation builds the localized digital asset chain of the corresponding core chain network;

[0008] Build an access chain network, connect the terminals, adapters and gateways built by operators to the corresponding global digital identity chain or localized digital asset chain on one end, and connect the other end to the real entity, so as to achieve a two-way synchronous mapping between digital space and real space;

[0009] Build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet;

[0010] Data circulation is based on the established end-to-end asset trusted delivery channel.

[0011] Furthermore, each localized digital asset chain will be registered in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, so that the localized digital asset chain can be admitted to the global digital identity chain.

[0012] Furthermore, the operator's terminals, adapters, and gateways are connected to the corresponding global digital identity chain or localized digital asset chain at one end, and connected to the real entity at the other end, including:

[0013] Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways;

[0014] The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate;

[0015] The digital identity adapter is connected to the global digital identity chain of the core chain network, connected to the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject;

[0016] After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system;

[0017] After access, the cross-chain gateway is connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

[0018] Furthermore, the end-to-end trusted asset delivery channel built on the blockchain trusted data internet includes:

[0019] Each entity imports a digital certificate based on the corresponding terminal, activates the digital identity, and completes the access to each terminal;

[0020] Data resource holders use the data issuing terminal to register data source information, access data resources, process raw data resources, output valuable data, and issue digital assets on the chain according to the ownership of the data subject;

[0021] The digital asset carrier uses the data carrier to collect the digital assets issued by the data resource holder and authorizes the digital asset user to use the digital assets as needed;

[0022] Digital asset users use data consumers to obtain digital assets for business use based on authorization, while also managing all authorized digital assets.

[0023] Furthermore, the data circulation based on the constructed end-to-end asset trusted delivery channel includes the following steps:

[0024] The data carrier activates the data carrier terminal and opens an encrypted digital asset account on the Digital Chain Network;

[0025] Identity information of the management entity of the Digital Chain Network operating unit;

[0026] The data carrier uses the data carrier terminal to actively obtain the data it needs;

[0027] The data issuing end receives the data claim application and, based on the pre-written data asset contract, issues the data received by the data carrier to the encrypted digital asset account of the data carrier on the DataChain Network.

[0028] The data carrier uses the data carrier terminal to manage and view the data in the encrypted digital asset account. If there is erroneous data, the data carrier can submit a data correction request to the data issuer. The data issuer can receive the correction message through the data issuer terminal and verify and process the erroneous data.

[0029] Data users can initiate data use applications to data carriers through data consumption terminals;

[0030] The data carrier receives the data use application through the data carrier terminal and decides whether to authorize the data user to obtain and use its own data;

[0031] If the data carrier agrees to authorize the data user to use its own data, the data user obtains the on-chain data through the data consumer end for use, thereby realizing the compliant and orderly flow of data between the data issuer, data carrier, and data user.

[0032] Furthermore, the method also includes executing a corresponding management method on the blockchain trusted data internet according to the request type of the real terminal, including:

[0033] According to the access request information, the data to be uploaded is uploaded to the chain;

[0034] According to the data usage request information, the data on the chain is used off-chain;

[0035] According to the request information for joining the Digital Chain Network, join the corresponding localized digital asset chain and manage the newly added transaction nodes and storage nodes.

[0036] Furthermore, uploading the data to be uploaded to the link according to the access request information includes:

[0037] Receive access request information from the real end to the blockchain trusted data Internet and identify the data to be uploaded to the chain;

[0038] Review the identity information of the data requester, and connect to the blockchain trusted data Internet after passing the review;

[0039] Issue application connection tokens to data requesters connected to the DataChain Network and enable data distribution services for them;

[0040] Configure the global digital identity chain node of the Digital Chain Network to which the data consumer end is connected by mapping the data request end to the access;

[0041] According to the needs of the data requester, access the issuable data asset types and write data asset contracts and data chain plug-ins;

[0042] The local data system of the data requesting end accesses the API docking data issuing end through the application docking token;

[0043] Data is uploaded to the chain through the data issuing end.

[0044] A second aspect of the present invention provides a data circulation system for a large-scale blockchain trusted data internet, comprising:

[0045] The Digital Chain Network construction module is used to build the core chain network and access chain network of the blockchain trusted data Internet. Among them, operators build the global digital identity chain of the Digital Chain Network core chain network, and each entity involved in data circulation builds a localized digital asset chain corresponding to the core chain network;

[0046] The access module is used to build an access chain network, connecting the terminals, adapters, and gateways built by the operator to the corresponding global digital identity chain or localized digital asset chain on one end, and connecting the other end to the real entity, thus achieving a two-way synchronous mapping between the digital space and the real space;

[0047] Delivery channel construction module, used to build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet;

[0048] The data circulation module is used for data circulation based on the established end-to-end asset trusted delivery channel.

[0049] Furthermore, in the access module, each localized digital asset chain is registered in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, so as to allow the localized digital asset chain to enter the global digital identity chain.

[0050] Furthermore, in the digital chain network construction module, the terminals, adapters, and gateways built by the operator are connected to the corresponding global digital identity chain or localized digital asset chain at one end, and connected to the real entity at the other end, including:

[0051] Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways;

[0052] The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate;

[0053] The digital identity adapter is connected to the global digital identity chain of the core chain network, connected to the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject;

[0054] After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system;

[0055] After access, the cross-chain gateway is connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

[0056] Compared with the prior art, the present invention has the following beneficial effects:

[0057] 1. The blockchain trusted data internet constructed based on the global digital identity chain and multiple localized digital asset chains realizes the interconnection and dynamic expansion capabilities between large-scale blockchains, making blockchain not only a trusted evidence of business transactions, but also a more important role in the trusted transmission of valuable data, supporting large-scale data circulation applications.

[0058] 2. In order to solve the trust problem in the circulation of data elements, the present invention constructs an end-to-end decentralized trusted delivery channel for value data. The closed and bounded data network based on access control built at the network transmission layer is suitable for B2B data dedicated line services and does not consider the issue of independent control of personal data by the C-end.

[0059] 3. The present invention builds a security trust layer on top of the traditional data infrastructure, and provides a blockchain-based technical implementation method specifically for the trust requirements of anti-tampering, anti-repudiation, anti-leakage, anti-loss, and traceability of data element circulation.

[0060] 4. The business operation support system of the Digital Chain Network provided by the present invention is different from other blockchains that only have a technical blockchain browser for observing the operation of the blockchain. The Digital Chain Network BOSS system has all the business management and services for carrying out data operation business, especially the packaging, trusted delivery and compliant use of valuable data. It can provide data operators with full network business operation support similar to that of communication operators.

[0061] Advantages of additional aspects of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] The accompanying drawings, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0063] Figure 1 This is an overall schematic diagram of data circulation in a large-scale blockchain trusted data internet provided by an embodiment of the present invention;

[0064] Figure 2 This is a schematic diagram of the overall structure of a large-scale blockchain trusted data Internet provided by an embodiment of the present invention;

[0065] Figure 3 This is a schematic diagram of a global digital identity chain provided by an embodiment of the present invention;

[0066] Figure 4 This is a schematic diagram of a localized digital asset chain provided by an embodiment of the present invention;

[0067] Figure 5 This is the structure and access relationship of the Digital Chain Network terminal system provided by the embodiment of the present invention;

[0068] Figure 6 This is a schematic diagram of the digital chain network business operation support system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0069] The present invention will be further described below with reference to the accompanying drawings and embodiments.

[0070] It should be noted that the following detailed descriptions are illustrative and intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the art to which the present invention belongs.

[0071] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present invention. As used herein, unless the context clearly indicates otherwise, the singular form is intended to include the plural form. In addition, it should be understood that when the terms "comprise" and / or "include" are used in this specification, they indicate the presence of features, steps, operations, devices, components and / or combinations thereof.

[0072] Example 1

[0073] like Figure 1 and Figure 2 As shown, this embodiment provides a data circulation method for a large-scale blockchain trusted data Internet, including the following steps:

[0074] Step 1: Build the core chain network and access chain network of the blockchain trusted data Internet;

[0075] To simplify the description, the blockchain trusted data internet is referred to as the Digital Chain Network in this embodiment. The Digital Chain Network is a trusted data network with a homogeneous / heterogeneous multi-chain architecture built on the Internet using alliance blockchain technology. It connects the data supply end, data carrying end, and data use end, provides a trusted data delivery channel between multiple ends, and allows the data subjects of valuable data to independently control their own data.

[0076] The specific steps include:

[0077] Step 101: Build the core chain network of the blockchain trusted data Internet;

[0078] Specifically include:

[0079] Step 1011: The operator builds the global digital identity chain of the Digital Chain Network core chain network;

[0080] The global digital identity chain in this embodiment is as follows Figure 3 As shown, it realizes the unified management of digital identities of all entities participating in data circulation in the digital chain network, global object digital asset indexing, homogeneous multi-chain expansion, and cross-chain routing of other chain networks;

[0081] Among them, the subject management manages the digital identity of the Digital Chain Network, establishes the Digital Chain Network digital identity by issuing asymmetric key pairs to the subject, connects with the existing CA / RA identity authentication system or identity authentication system through the digital identity adapter, realizes the subject identity authentication, establishes the correspondence between the real identity and the digital identity, and ensures the global identity identity of each subject in the Digital Chain Network.

[0082] The object index supports the registration of digital assets of all localized digital asset chains and other chain networks, forming a digital asset directory index, including asset ID, type, localized digital asset chain ID, cross-chain ID, ownership subject ID, etc.

[0083] Multi-chain routing provides management of homogeneous localized digital asset chains in the core chain network and supports the registration of localized digital asset chains, including registration of localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, localized digital asset chain object status index and other information, to achieve access of localized digital asset chains in the core chain network.

[0084] The cross-chain gateway deployed by cross-chain routing follows the agreed cross-chain protocol to achieve the same digital identity of entities between different chain networks and provide registration capabilities for other chain networks, including registration of information such as other chain network IDs, names, entry addresses, and object status indexes.

[0085] Step 1012: Each entity involved in data circulation builds a corresponding localized digital asset chain;

[0086] The localized digital asset chain is equivalent to the subnet of the network system. The purpose of dividing the network system into subnets is to facilitate routing management, limit the network broadcast domain, and improve network communication efficiency. The purpose of dividing the localized digital asset chain in the digital chain network is to facilitate the horizontal expansion of the digital chain network, limit the consensus domain of the blockchain to improve consensus efficiency and localized distributed storage of digital assets. Figure 4 As shown, the localized digital asset chain includes:

[0087] Transaction Automation Smart Contract: orchestrates and automatically executes transactions received and permitted by the Transaction Service Gateway.

[0088] Consensus service: The transaction execution process is recorded in the distributed public ledger after consensus.

[0089] Public ledger: records global transaction information of the localized digital asset chain.

[0090] Subject mapping: Mapping the subjects managed in the alliance blockchain to the localized digital asset chain to facilitate frequent transactions between subjects and objects and anchoring the ownership of subjects and objects.

[0091] Digital asset smart contract: used to register the types of digital assets that can be issued by the localized digital asset chain before the digital assets are issued. The registered digital asset smart contract is used for packaging when the digital assets are issued and put on the chain.

[0092] Software Trusted Environment: Symmetrically encrypt the on-chain digital assets and sign them with the issuer's private key to generate a symmetric encryption key that creates a unique ID for the digital asset. If the digital asset has an identifiable data subject, the data asset ID is asymmetrically encrypted using the data subject's public key to anchor the ownership of the data subject and the digital asset. Team-building trusted environments can also seamlessly leverage the cryptographically secure computing capabilities provided by external cryptographic systems.

[0093] The transaction service gateway receives transaction requests from the outside, including digital asset retrieval, query, authorization, off-chain and other transaction requests from the global digital identity chain, and digital asset smart contract registration, value data on-chain issuance and other transaction requests from the data issuance end.

[0094] The digital asset status index updates the status of digital assets on the chain in real time, including the digital asset ID, digital asset smart contract ID, issuing signatory entity ID, data subject ID, issuance update time, effective status, etc.

[0095] Step 1013: Register each localized digital asset chain in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index, digital identity mapping, etc., to achieve localized digital asset chain access.

[0096] Step 102: Build an access chain network. Connect each terminal, adapter, and gateway built by the operator to the corresponding global digital identity chain or localized digital asset chain at one end according to the business connection relationship, and connect the other end to the real entity to achieve two-way synchronization between the digital space and the real space.

[0097] Specifically include:

[0098] Step 1021: Operators build digital chain network terminal systems such as data carrying terminals, data consumption terminals, and data issuance terminals, as well as digital identity adapters, password adapters, multi-terminal collaboration centers, and cross-chain gateways.

[0099] The digital identity adapter supports docking with existing CA / RA systems and identity authentication systems. Through the CA / RA identity authentication system, the real identity and its key are issued and registered through digital certificates. Digital certificates are carried through UKey or IC cards to establish their digital identity in the digital space. Each node and each entity in the digital chain network will have a registered digital certificate.

[0100] The National Cryptography Adapter supports integration with cryptographic systems. This integration forms the Digital Chain Network's trusted cryptographic environment (TE), providing key generation, encryption, decryption, and signature verification capabilities for digital assets. It generates a unique ID and symmetric key for each object, and uses the subject's key to encrypt and sign the object's key and content. All encryption and signing processes are completed within the trusted environment. The trusted environment TE supports hardware TEs such as encryption machines, as well as software TEs built into localized digital asset chains.

[0101] The cross-chain gateway enables interconnection with other homogeneous / heterogeneous blockchain networks.

[0102] The business operation side of the Digital Chain Network provides capabilities such as subject access, localized digital asset chain access, application system access, other chain network access, digital identity management, data asset registration, terminal access, transaction measurement, operation monitoring, and operation and maintenance technical support, providing business operation support for the Digital Chain Network.

[0103] Step 1022: The data carrier and data user access the global digital identity chain of the core chain network after receiving access certificates from the Digital Chain Network business operation support system; the data issuer accesses the local digital asset chain of the digital asset issuer after receiving access from the Digital Chain Network business operation support system.

[0104] like Figure 5As shown, the data carrier is connected to the global digital identity chain, providing individuals or businesses with on-demand digital identity construction and autonomous digital asset management capabilities. This includes terminal activation, digital asset collection, digital identity presentation, digital asset use authorization, digital asset usage traceability, data correction application, message writing, and embedded integration. Terminal activation refers to the initial terminal activation process, which involves importing a user's digital certificate and private key and setting their own encrypted private key access password. Digital asset collection refers to an individual or legal entity claiming their digital assets from a catalog of issued digital assets. Digital identity presentation refers to the construction and presentation of a dynamic digital identity based on their own data. Digital asset use authorization refers to authorizing a data user to use their digital assets upon their application, with the scope of application defined. Digital asset usage traceability refers to the tracing of digital asset usage records. Data correction application refers to submitting correction requests for digital assets that do not conform to actual circumstances, thereby participating in data governance. Message collaboration refers to connecting to multi-terminal collaboration centers through message collaboration to subscribe to or send collaborative messages. Embedded docking means that the terminal provides an H5 interface, which is embedded in the local service channel system, and utilizes the identity authentication and service capabilities of the existing service channels to achieve the organic integration of data services and business services.

[0105] The data consumption end is connected to the global digital identity chain, providing social organizations with digital identity verification, digital asset authorization, and management capabilities. Terminal access refers to obtaining the terminal access digital certificate of the data user from the operation support system; business system access refers to obtaining the application system docking token to control the business system's use of APIs to connect with the terminal; user access refers to setting user permissions to implement access control for business users of the data user unit; digital asset use application refers to digital identity verification and digital asset use request based on business matters, and qualification verification is based on the digital identity presented by the data carrier; digital asset reception and use refers to business processing based on the digital assets authorized by the data carrier and the data user's request for authorization; digital asset management refers to the ability of data users to manage authorized digital assets, use their own private keys to decrypt and export digital assets for use in business systems, and conduct metering and reconciliation with digital asset issuers; data demand application refers to the ability of data users to submit new data requirements to digital asset issuers; through message collaboration, multi-terminal collaboration centers are connected, and collaboration messages are subscribed or sent to achieve multi-terminal interaction with digital asset issuers and carriers.

[0106] The data distribution end connects to a localized digital asset chain, providing data resource holders with the ability to issue and manage valuable data-related digital assets. This includes terminal access, data system access, user access, data product development, digital asset contract writing, data processing, digital asset on-chain issuance, authorized use of digital assets, demand collection, data error correction, digital asset management, digital asset usage metering, and message collaboration. Terminal access refers to obtaining the data holder's digital certificate from the DataChain Network's business operation support system and importing it into the terminal system, enabling terminal access to the localized digital asset chain. Data system access refers to using the application integration token obtained from the DataChain Network's business operation support system to control data system access to APIs. User access refers to setting user permissions for terminals through the DataChain Network's business operation support system to achieve user access. Data product development refers to developing data products based on data resource supply and usage requirements. Digital asset contract writing refers to writing digital asset smart contracts based on developed data products and registering them on the localized digital asset chain. Data processing refers to processing data resources to form digital assets based on digital asset contracts. Digital asset on-chain issuance refers to the issuance of processed digital assets onto the blockchain. Digital assets involving personal information are issued to the data subject's encrypted data asset account. For digital assets not involving personal information, service interfaces are open for authentication by data users. Authorized use of digital assets refers to the authorization of data users to use digital assets that do not involve personal information and digital assets authorized by individuals, based on their digital asset transaction orders. Demand collection refers to the collection of data requirements from data users to develop new data products. Data correction processing refers to the collection of data correction requests from individuals / enterprises, the initiation of the data correction process, and the notification of data issuers to data governance. Digital asset management allows end-users to manage digital assets they have issued and authorized for use by data users, providing traceability and forensics capabilities for digital asset usage. Digital asset usage metering refers to the measurement of digital asset usage by data users and the ability to reconcile accounts with them. Message collaboration supports connecting to multi-terminal collaboration centers to send and subscribe to end-to-end collaboration messages.

[0107] Step 1023: After registering in the Digital Chain Network business operation support system, the digital identity adapter is granted access to the global digital identity chain of the core chain network, connected to the external CA\RA and identity authentication system, and imported the subject digital certificate to establish a digital identity for each subject, open an encrypted digital asset account, and complete the subject access;

[0108] Step 1024: After registering in the Digital Chain Network business operation support system, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system to use the external cryptographic security computing capabilities;

[0109] Step 1025: The cross-chain gateway is deployed through the Digital Chain Network business operation support system. After being admitted by the Digital Chain Network business operation support system, it is connected to the global digital identity chain of the core chain network, and supports the registration of IDs, names, access addresses, etc. of other chain networks to achieve cross-chain docking of heterogeneous blockchains.

[0110] In this embodiment, Figure 6 As shown in the figure, the Digital Chain Network business operation support system is similar to the Digital Chain Network business operation support system of telecommunications operators. It provides system support for Digital Chain Network operators to carry out related businesses. Its users are Digital Chain Network operating units and its composition includes:

[0111] Among them, digital identity management is the management of encrypted digital asset accounts on the digital chain network, providing digital asset issuers, digital asset carriers and digital asset users with encrypted digital asset account opening, key import or issuance, key self-management and custody, unlocking password management, subject identity information management and other service functions; digital asset catalog management provides unified digital asset type registration and catalog management for the entire network; localized digital asset chain extension management provides localized digital asset chain registration, access control and other functions; cross-chain management provides cross-chain gateway deployment, other blockchain registration, access control and other functions; alliance member management provides global digital identity chain alliance The Digital Chain Network provides authentication, access, consensus node deployment and other functions for members; the Digital Chain Network node management provides access management for global digital identity chain consensus nodes, transaction nodes, secret key trusted storage nodes, localized digital asset chain transaction nodes, localized digital asset chain consensus nodes, and localized digital asset chain storage nodes; the Digital Chain Network service management provides unified management of digital asset issuance services and usage service interfaces, including access, authentication, control, evidence storage, measurement and other management functions; the data issuing end and data using end management provide access management based on device digital certificates. Only terminal devices with digital certificates issued by the Digital Chain Network can access the Digital Chain Network; the data carrying end management provides access management based on The activation and opening management of the main account controls the localized digital asset chains and cross-chain digital assets that the digital safe can access, as well as the functions of resetting the unlocking password of the digital safe; the digital chain network operation monitoring provides monitoring content such as each node of the global digital identity chain, each localized digital asset chain node, block height, storage capacity, network bandwidth, number of transactions, number of account openings, number of digital asset types, number of digital asset issuances, number of withdrawals, number of uses, number of service interface visits, collaborative messages, and cross-chain gateway deployment and operation, so as to control the operation and use of the entire network in a real-time and intuitive way; the digital asset tracing and evidence collection function provides tracing and evidence collection support when digital asset circulation disputes occur. The traceability records of designated digital assets signed by the Digital Chain Network can be exported as a compliance basis for dispute resolution; the digital asset metering and billing function provides usage statistics for the circulation of digital assets, including the number of requests, authorizations, uses, and off-chain exports, providing a basis for formulating billing packages and circulation settlements; message collaboration management is used for the establishment and permission control of message queues and subscription topics in the message collaboration center; password adaptation management registers and deploys password adapters; digital identity adapter management is used to register and connect to digital identity adapters of external CA systems and identity authentication systems; in addition, it also has the ability to upgrade, maintain and provide technical support for the Digital Chain Network system.

[0112] Step 2: Build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet;

[0113] The specific steps include:

[0114] Step 201: Each subject imports the subject digital certificate based on the corresponding terminal, activates the digital identity, and completes the terminal access;

[0115] Step 202: The data resource holder uses the data issuing terminal to register the data source information, access the data resources, process the original data resources, output the valuable data, and issue digital assets on the chain according to the ownership of the data subject;

[0116] Step 203: Digital asset carriers, such as individuals and enterprises, use the data carrier to receive digital assets issued by the data resource holder and authorize digital asset users, such as social organizations, to use the digital assets as needed.

[0117] Step 204: The digital asset user uses the data consumer to obtain digital assets for use in business according to the authorization status, and manages all authorized digital assets.

[0118] Step 3: Based on the request type of the real terminal, execute the corresponding management method in the blockchain trusted data Internet;

[0119] The specific steps include:

[0120] Step 301: Uploading the data to be uploaded to the chain according to the access request information, including:

[0121] Step 3011: Receive access request information from the real end to the blockchain trusted data Internet and identify the data to be uploaded to the blockchain;

[0122] Step 3012: Review the identity information of the data requesting end, and access the blockchain trusted data internet after passing the review;

[0123] Step 3013: Issue an application connection token to the data requester connected to the DataChain Network and enable data distribution services for the data requester.

[0124] Step 3014: Configure the global digital identity chain node of the Digital Chain Network to which the data consumption end connected to the data request end is mapped;

[0125] Step 3015: Based on the needs of the data requester, access the issuable data asset types and write the data asset contract and data on-chain plug-in;

[0126] Step 3016: The local data system of the data requesting end accesses the API docking data issuing end through the application docking token;

[0127] Step 3017: upload data to the chain through the data issuing terminal.

[0128] Step 302: Based on the data usage request information, the data uploaded to the chain is used offline, including:

[0129] Step 3021: Receive usage request information from the real end to the data chain network operator and specify the data to be used;

[0130] Step 3022: After the Digital Chain Network operator has reviewed and approved the application, it will open a Digital Chain Network encrypted digital asset account for the access institution and set up account access. It will also issue an application docking token for the access institution to access the local business system of the Digital Chain Network and enable data usage services for the institution.

[0131] Step 3023: The Digital Chain Network operator configures the Digital Chain Network node connected to the data consumption end of the access institution through the Digital Chain Network operation support system;

[0132] Step 3024: The local business system of the access institution accesses the API to connect to the data consumer end through the application connection token, or provides a data consumer end UI for it;

[0133] Step 3025: If the data the access institution needs to use involves personal information or corporate secrets, the access institution must connect to and use the data carrier, i.e., the digital safe. If the data does not involve personal information or corporate secrets, the access institution can directly use the off-chain data.

[0134] Step 3026: If the access institution needs to integrate the data carrier with its own existing service channels, it can embed the data carrier into its own service channels in the form of H5. If not, it can directly use the data carrier provided by the DataChain Network.

[0135] Step 3027: If the access institution needs to connect the data carrier to an external CA system or identity authentication system, based on the premise of integrating the data carrier with its own existing service channels, the Digital Chain Network operator will complete the connection through the digital identity adapter and manage the connected external CA or identity authentication system through the digital identity adapter management of the Digital Chain Network operation support system;

[0136] Step 3028: Before using the data carrier, individuals, enterprises, and other entities authenticate themselves through the identity authentication service provided by the DataChain Network. Individuals and enterprises activate their data carrier accounts and authorize the use of data involving personal information and corporate secrets.

[0137] Step 3029: The access institution uses the data through the data consumption end.

[0138] Step 303: Join the corresponding localized digital asset chain according to the request information of joining the digital chain network, including:

[0139] Step 3031: The access institution applies to join the Digital Chain Network as an alliance member and specifies which localized digital asset chain to join;

[0140] Step 3032: The Digital Chain Network operator reviews the access application. If the application is approved, the Digital Chain Network operator will deploy transaction nodes and storage nodes locally for the access institution.

[0141] Step 3033: The Shulian Network operating unit conducts admission and management of alliance members, and manages newly added transaction nodes and storage nodes through the Shulian Network node management module.

[0142] Step 4: Data circulation based on the established end-to-end asset trusted delivery channel;

[0143] The specific steps include:

[0144] Step 401: The data carrier activates the data carrier terminal and opens an encrypted digital asset account on the Digital Chain Network.

[0145] Step 402: The Digital Chain Network operator manages the subject identity information through the Digital Chain Network business operation support system;

[0146] Step 403: The data carrier uses the data carrier terminal to actively retrieve the data it needs.

[0147] Step 404: The data issuing end receives the data claim application and, based on the pre-written data asset contract, issues the data received by the data carrier to the encrypted digital asset account of the data carrier on the DataChain Network.

[0148] Step 405: The data carrier can manage and view the data in the encrypted digital asset account through the data carrier terminal. If there is any erroneous data, the data carrier can submit a data correction request to the data issuer. The data issuer can receive the correction message through the data issuer terminal and verify and process the erroneous data.

[0149] Step 406: The data user may initiate a data use application to the data carrier through the data consumption terminal;

[0150] Step 407: The data carrier receives the data use application through the data carrier terminal and decides whether to authorize the data user to obtain and use its data.

[0151] Step 408: If the data carrier agrees to authorize the data user to use its own data, the data user can obtain the on-chain data through the data consumption end for use, thereby realizing the compliant and orderly flow of data among the data issuer, data carrier, and data user.

[0152] Example 2

[0153] This embodiment provides a data circulation system for a large-scale blockchain trusted data internet, including:

[0154] The Digital Chain Network construction module is used to build the core chain network and access chain network of the blockchain trusted data Internet. Among them, operators build the global digital identity chain of the Digital Chain Network core chain network, and each entity involved in data circulation builds a localized digital asset chain corresponding to the core chain network;

[0155] The access module is used to build an access chain network, connecting the terminals, adapters, and gateways built by the operator to the corresponding global digital identity chain or localized digital asset chain on one end, and connecting the other end to the real entity, thus achieving a two-way synchronous mapping between the digital space and the real space;

[0156] Delivery channel construction module, used to build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet;

[0157] The data circulation module is used for data circulation based on the established end-to-end asset trusted delivery channel.

[0158] Furthermore, in the access module, each localized digital asset chain is registered in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, so as to allow the localized digital asset chain to enter the global digital identity chain.

[0159] Furthermore, in the digital chain network construction module, the terminals, adapters, and gateways built by the operator are connected to the corresponding global digital identity chain or localized digital asset chain at one end, and connected to the real entity at the other end, including:

[0160] Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways;

[0161] The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate;

[0162] The digital identity adapter is connected to the global digital identity chain of the core chain network, connected to the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject;

[0163] After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system;

[0164] After access, the cross-chain gateway is connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

[0165] The specific implementation process of the remaining modules is consistent with that of Example 1, and please refer to Example 1 for details.

[0166] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that various modifications and variations of the present invention are possible. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention are intended to be within the scope of protection of the present invention.

Claims

1. A data circulation method for a large-scale blockchain trusted data Internet, characterized in that: The steps include: Build the core chain network and access chain network of the blockchain trusted data internet; among them, operators build the global digital identity chain of the core chain network of the digital chain network, and each entity involved in data circulation builds the localized digital asset chain of the corresponding core chain network; Build an access chain network, connect the terminals, adapters and gateways built by operators to the corresponding global digital identity chain or localized digital asset chain on one end, and connect the other end to the real entity, so as to achieve a two-way synchronous mapping between digital space and real space; Build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet; Data circulation is based on the established end-to-end asset trusted delivery channel.

2. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 1, characterized in that: Register each localized digital asset chain in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, and allow the localized digital asset chain to access the global digital identity chain.

3. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 1, characterized in that: The operator's terminals, adapters, and gateways are connected to the corresponding global digital identity chain or localized digital asset chain at one end, and connected to the real entity at the other end, including: Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways; The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate; The digital identity adapter is connected to the global digital identity chain of the core chain network, connected to the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject; After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system; After access, the cross-chain gateway is connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

4. A data circulation method for a large-scale blockchain trusted data Internet as described in claim 3, characterized in that: The end-to-end trusted asset delivery channel built on the blockchain trusted data internet includes: Each entity imports a digital certificate based on the corresponding terminal, activates the digital identity, and completes the access to each terminal; Data resource holders use the data issuing terminal to register data source information, access data resources, process raw data resources, output valuable data, and issue digital assets on the chain according to the ownership of the data subject; The digital asset carrier uses the data carrier to collect the digital assets issued by the data resource holder and authorizes the digital asset user to use the digital assets as needed; Digital asset users use data consumers to obtain digital assets for business use based on authorization, while also managing all authorized digital assets.

5. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 1, characterized in that: The data circulation based on the constructed end-to-end asset trusted delivery channel includes the following steps: The data carrier activates the data carrier terminal and opens an encrypted digital asset account on the Digital Chain Network; Identity information of the management entity of the Digital Chain Network operating unit; The data carrier uses the data carrier terminal to actively obtain the data it needs; The data issuing end receives the data claim application and, based on the pre-written data asset contract, issues the data received by the data carrier to the encrypted digital asset account of the data carrier on the DataChain Network. The data carrier uses the data carrier terminal to manage and view the data in the encrypted digital asset account. If there is erroneous data, the data carrier can submit a data correction request to the data issuer. The data issuer can receive the correction message through the data issuer terminal and verify and process the erroneous data. Data users can initiate data use applications to data carriers through data consumption terminals; The data carrier receives the data use application through the data carrier terminal and decides whether to authorize the data user to obtain and use its own data; If the data carrier agrees to authorize the data user to use its own data, the data user obtains the on-chain data through the data consumer end for use, thereby realizing the compliant and orderly flow of data between the data issuer, data carrier, and data user.

6. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 1, characterized in that: The method further includes executing a corresponding management method on the blockchain trusted data internet according to the request type of the real terminal, including: According to the access request information, the data to be uploaded is uploaded to the chain; According to the data usage request information, the data on the chain is used off-chain; According to the request information for joining the Digital Chain Network, join the corresponding localized digital asset chain and manage the newly added transaction nodes and storage nodes.

7. A data circulation method for a large-scale blockchain trusted data Internet as claimed in claim 6, characterized in that: The step of uploading the data to be uploaded to the chain according to the access request information includes: Receive access request information from the real end to the blockchain trusted data Internet and identify the data to be uploaded to the chain; Review the identity information of the data requester, and connect to the blockchain trusted data Internet after passing the review; Issue application connection tokens to data requesters connected to the DataChain Network and enable data distribution services for them; Configure the global digital identity chain node of the Digital Chain Network to which the data consumer end is connected by mapping the data request end to the access; According to the needs of the data requester, access the issuable data asset types and write data asset contracts and data chain plug-ins; The local data system of the data requesting end accesses the API docking data issuing end through the application docking token; Data is uploaded to the chain through the data issuing end.

8. A data circulation system for a large-scale blockchain trusted data internet, characterized by: include: The Digital Chain Network construction module is used to build the core chain network and access chain network of the blockchain trusted data Internet. Among them, operators build the global digital identity chain of the Digital Chain Network core chain network, and each entity involved in data circulation builds a localized digital asset chain corresponding to the core chain network; The access module is used to build an access chain network, connecting the terminals, adapters, and gateways built by the operator to the corresponding global digital identity chain or localized digital asset chain on one end, and connecting the other end to the real entity, thus achieving a two-way synchronous mapping between the digital space and the real space; Delivery channel construction module, used to build an end-to-end trusted asset delivery channel based on the blockchain trusted data internet; The data circulation module is used for data circulation based on the established end-to-end asset trusted delivery channel.

9. A data circulation system for a large-scale blockchain trusted data internet as claimed in claim 8, characterized in that: In the access module, each localized digital asset chain is registered in the global digital identity chain, including registering the localized digital asset chain ID, localized digital asset chain name, transaction service gateway entry address, digital asset index and digital identity mapping, so as to allow the localized digital asset chain to be accessed into the global digital identity chain.

10. A data circulation system for a large-scale blockchain trusted data internet as claimed in claim 8, characterized in that: In the Digital Chain Network construction module, the terminals, adapters, and gateways built by the operator are connected to the corresponding global digital identity chain or localized digital asset chain on one end, and connected to the real entity on the other end, including: Operators build data carrying terminals, data consumption terminals, data issuing terminals, as well as digital identity adapters, password adapters and cross-chain gateways; The data carrier and data consumer access the global digital identity chain of the core chain network based on the issued access certificate, and the data issuer accesses the corresponding localized digital asset chain based on the issued access certificate; The digital identity adapter is connected to the global digital identity chain of the core chain network, connected to the external CA\RA and identity authentication system, imports the subject digital certificate, and establishes a digital identity for each subject; After registration, the cryptographic adapter is connected to the localized digital asset chain of the core chain network and connected to the external cryptographic system; After access, the cross-chain gateway is connected to the global digital identity chain of the core chain network to achieve cross-chain docking of heterogeneous blockchains.

Images