Method and system for trusted circulation of personal data

Abstract

The invention discloses a method for trusted circulation of personal data, which relates to the technical field of data circulation, and comprises the following steps: constructing a trusted digital identity basic platform, and establishing a three-dimensional data space comprising a data dimension, a service dimension and a security dimension; through a data mining and evaluation technology, the quality and reliability of personal data are ensured, and the value of the personal data is evaluated. The invention further provides a personal data trusted circulation oriented system. According to the method and the system for trusted circulation of the personal data, the trusted digital identity basic platform is constructed and the block chain and encryption technology is introduced, so that the storage and transmission security of the personal data is effectively ensured, and the problem that the personal data is easy to leak and abuse in the circulation process is solved; the security and controllability of data circulation are further improved through data classification and labeling and an authority management system, and the privacy protection of the data in the circulation process is realized by utilizing a privacy computing technology.

Description

Technical Field

[0001] The present invention relates to the technical field of data circulation, and in particular to a method and system for trusted circulation of personal data. Background Art

[0002] With the vigorous development of the digital economy, personal data has become a new production factor driving economic and social development. However, in the process of developing and utilizing massive amounts of personal data, privacy leaks and malicious citations frequently occur, posing a serious threat to personal privacy security and even national and social security. According to relevant surveys, global data leaks are showing a significant upward trend, and the number of data leaks has doubled, involving well-known hotel groups, express delivery, telecommunications, Weibo and other fields. The scale of user information leaks is huge. At the same time, the phenomenon of high-frequency collection of personal information is becoming increasingly common.

[0003] The severity of personal data security issues has posed new challenges to my country's construction of a digital economy and regulatory system with data as a new production factor. Under the premise of ensuring personal data privacy and clear property rights, achieving the trusted circulation of personal data has become the key to promoting the healthy development of the digital economy. At present, although existing studies have conducted in-depth discussions on the concept, function, construction goals and practical difficulties of data infrastructure from a qualitative perspective, providing a theoretical basis for building a trusted circulation mechanism for personal data; some studies have also demonstrated from an empirical perspective the positive impact of data infrastructure construction on the transformation and upgrading of industrial structure, improvement of economic efficiency and industrial development; however, practical analysis of the dual dilemma of personal data circulation transactions and benefit distribution is still insufficient, especially the in-depth research on the key links and specific solutions of personal data infrastructure is still lacking. In this regard, we propose a method and system for the trusted circulation of personal data. Summary of the invention

[0004] In order to solve the above technical problems, a method and system for trusted circulation of personal data are provided. This technical solution solves the above problems.

[0005] In order to achieve the above purpose, the technical solution adopted by the present invention is:

[0006] A method for trusted circulation of personal data, comprising:

[0007] Build a trusted digital identity infrastructure platform and establish a three-dimensional data space including data dimension, business dimension and security dimension;

[0008] Ensure the quality and reliability of personal data and assess its value through data mining and evaluation techniques;

[0009] Use privacy computing technology to ensure privacy protection during data circulation and perform privacy protection verification before data transactions;

[0010] Adopt blockchain technology and use smart contract technology in the data circulation and settlement process to ensure data integrity and non-tamperability;

[0011] Based on secure multi-party computing technology, full-process supervision is carried out to ensure the security and compliance of the data flow process;

[0012] During the data circulation process, the data is monitored and audited in real time to ensure that every link of the data circulation can be traced.

[0013] Preferably, building a trusted digital identity infrastructure platform specifically includes:

[0014] Using the five-in-one architecture of “people-intelligence-data-cloud-network-things”, we build a platform that integrates trusted identity authentication, data circulation, privacy protection and regulatory auditing;

[0015] Establish three-dimensional spaces of data, business, and security on the platform, and classify and label data according to different user needs;

[0016] Introducing blockchain and encryption technology to ensure the secure storage and transmission of personal data;

[0017] Provide data transaction functions, use smart contract technology for transaction settlement, and ensure the transparency and immutability of each transaction process;

[0018] Build a permission management system to ensure the secure flow of data through role control and access control mechanisms.

[0019] Preferably, privacy computing technology is used to ensure privacy protection during data circulation, specifically including:

[0020] Through privacy computing technology, data anonymization is provided to complete data circulation without leaking sensitive information;

[0021] In the data interaction process, smart contracts and encryption technology are used to ensure the legitimacy of data access rights and usage scenarios; in the settlement process, blockchain technology is used to record the data transaction process to ensure the immutability and transparency of transaction data; in the process of data use, dynamic audits and compliance checks are carried out to ensure that the data flow process complies with relevant laws, regulations and privacy policies.

[0022] Preferably, ensuring the security and compliance of the data flow process specifically includes:

[0023] In the data preparation stage, data processing technology is used to clean, remove duplication and noise from the data;

[0024] Data access control stage: Based on digital identity authentication technology, ensure that only authorized users or entities can access or operate data;

[0025] During the data circulation process, encryption technology and privacy protection technology are used to ensure the privacy and security of data during transmission;

[0026] In the data settlement phase, smart contracts are used to confirm data rights and transactions, ensuring the legitimacy and immutability of data circulation;

[0027] During the use of data, audit and supervision technology is used to provide full traceability of the data flow process.

[0028] Preferably, real-time monitoring and auditing of data specifically includes:

[0029] During the data collection phase, the legitimacy and credibility of the data source are ensured through reputation assessment of the data source;

[0030] In the data circulation process, privacy computing technology and encryption technology are used to protect data to prevent data from being maliciously tampered with or leaked during transmission;

[0031] In the data transaction settlement process, the transaction records are generated and stored based on blockchain technology to ensure that the transaction information cannot be tampered with;

[0032] Through secure multi-party computing technology, the data rights and interests of all parties in the process of data use are protected while preventing information leakage or abuse;

[0033] A multi-level audit mechanism and real-time monitoring function are adopted to ensure the compliance of each link and the transparency of the entire data flow process.

[0034] Preferably, when establishing a trusted personal data circulation platform, blockchain technology is used to ensure that the platform data cannot be tampered with, and smart contract technology is used to ensure the legitimacy of each data transaction;

[0035] Based on data sandbox technology, it provides a secure isolation environment for personal data to prevent unauthorized data use or leakage;

[0036] Introduce a dynamic access control mechanism to ensure that data is circulated only within the authorized scope through role identification and permission management;

[0037] Introduce a full-process monitoring and auditing mechanism to monitor the entire process of data flow on the platform in real time to ensure the compliance and transparency of platform operations.

[0038] Preferably, a personal data bank is built as a trusted third-party intermediary to create personal data accounts, associate personal data with digital identities, and clarify data ownership;

[0039] Manage the transmission and use of personal data assets through consensus mechanisms and smart contract technology to ensure the compliance of data circulation;

[0040] Provide a data trading platform to achieve trusted data exchange through data evaluation, privacy computing and blockchain technology;

[0041] As an intermediary, the personal data bank ensures the security, privacy protection and transparency of data during circulation and safeguards the interests of data rights holders.

[0042] Preferably, a data quality feedback mechanism is established. After the data is used, the data user provides the data provider with information on the accuracy, completeness and practicality of the data. The data provider optimizes the data collection and preprocessing process based on the feedback to improve the subsequent data quality.

[0043] A data dispute arbitration mechanism is established. When data supply and demand parties have disputes over data quality, transaction terms or privacy compliance, a trusted third party will arbitrate based on preset rules and smart contracts.

[0044] A system for trusted circulation of personal data, used to implement a method for trusted circulation of personal data as claimed in any one of claims 1 to 8, comprising: a data collection module, a data evaluation module, a privacy computing module, a data circulation module, a blockchain module and a secure multi-party computing module;

[0045] The data collection module is used to collect personal data from various sources and store it in the personal data account;

[0046] The data evaluation module is used to evaluate the value of the collected personal data and determine the quality and value level of the data;

[0047] The privacy computing module is used to de-identify data using privacy computing technology to ensure the privacy of data during circulation;

[0048] The data circulation module is used to realize the circulation of data between trusted platforms based on data evaluation and privacy calculation results, and generate smart contracts during the transaction process;

[0049] The blockchain module is used to ensure the immutability and integrity of data circulation through smart contract technology, and to conduct transparent audits of transactions;

[0050] The secure multi-party computing module is used to provide data supervision protection for the entire process and ensure the compliance of data during circulation.

[0051] Preferably, the system's full-process supervision capabilities include:

[0052] During the data collection phase, data quality control and data source authentication technologies are used to ensure the legitimacy and credibility of the data;

[0053] During the data circulation stage, privacy protection technology, data encryption technology and access control mechanisms are used to ensure the security and privacy of data during circulation.

[0054] In the data settlement stage, blockchain smart contract technology is used to ensure the integrity, transparency and immutability of data transactions;

[0055] In the data usage process, secure multi-party computing and real-time auditing technology are used to ensure data usage compliance and protect data privacy.

[0056] Compared with the prior art, the present invention has the following beneficial effects:

[0057] The method and system for trusted circulation of personal data proposed in the present invention effectively ensure the storage and transmission security of personal data by building a trusted digital identity basic platform and introducing blockchain and encryption technology, and solve the problem that personal data is easily leaked and abused during circulation. The security and controllability of data circulation are further improved through data classification and labeling, and permission management system. The privacy protection of data during circulation is realized by using privacy computing technology to ensure that sensitive information is not leaked. The legitimacy of data access rights and usage scenarios, as well as the tamper-proof and transparency of transaction data are ensured through smart contracts, encryption technology and dynamic auditing, thereby effectively safeguarding the interests of data rights holders. The security and privacy of data during circulation are ensured through data quality control, data source authentication, privacy protection, data encryption, and access control. At the same time, full traceability is provided to facilitate auditing and supervision of the data circulation process. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] Figure 1 Flowchart of a method for trusted circulation of personal data. DETAILED DESCRIPTION

[0059] The following description is used to disclose the present invention so that those skilled in the art can implement the present invention. The preferred embodiments described below are only examples, and those skilled in the art may think of other obvious variations.

[0060] Reference Figure 1 As shown, a method for trusted circulation of personal data includes:

[0061] Build a trusted digital identity infrastructure platform. This platform is based on the unique "crowd-intelligence-data-cloud-network-things" five-in-one architecture to build a comprehensive platform that integrates multiple key functions. This platform can not only realize trusted identity authentication, ensure the smoothness and security of data flow, but also perform privacy protection and regulatory auditing.

[0062] On this platform, we carefully build three-dimensional data spaces, namely data dimension, business dimension and security dimension. Based on the diverse needs of different users, we meticulously classify and accurately label massive amounts of personal data to facilitate subsequent management and use.

[0063] Actively introduce blockchain and encryption technology to effectively maintain the security of personal data during storage and transmission, and protect it from malicious attacks and illegal theft from the outside world. In addition, the platform also has a complete data transaction function, using smart contract technology for transaction settlement, so as to ensure that each transaction process is highly transparent and tamper-proof, so that both parties can feel at ease. In addition, a rigorous permission management system is built, with the help of role control and access control mechanisms, only authorized users or entities can pass smoothly, thus ensuring that data circulates on the established security track.

[0064] In terms of data processing, with the help of powerful data mining and evaluation technology, we deeply explore the intrinsic value of personal data, accurately ensure the quality and reliability of personal data, and conduct scientific and reasonable evaluation of its value. Using advanced privacy computing technology, we complete the task of data circulation without leaking any sensitive information. Specifically, in the data interaction link, through the dual protection of smart contracts and encryption technology, we strictly ensure the legitimacy of data access rights and usage scenarios, and eliminate any possibility of illegal access and abuse; in the settlement link, we use blockchain technology to record the entire process of data transactions in detail, just like leaving an indelible mark on the transaction process, ensuring the immutability and transparency of transaction data, so that every transaction is clear and traceable; in the process of data use, we continue to conduct dynamic audits and compliance checks to ensure that the data circulation process always complies with the strict requirements of relevant laws, regulations and privacy policies.

[0065] In order to ensure the security and compliance of the data flow process, professional data processing technology is used to comprehensively clean, deduplicate and remove noise from the data during the data preparation stage, making it purer and more accurate. In the data access control stage, based on reliable digital identity authentication technology, only authorized and authenticated users or entities can obtain the right to access or operate the data, just like holding a special pass to enter a specific area. In the process of data circulation, encryption technology and privacy protection computing are used to escort the data during transmission and ensure its privacy and security. In the data settlement link, smart contracts are used to confirm the rights and transactions of data, just like notarization by a notary public, to ensure the legality and immutability of data circulation, and to provide strong guarantees for the fairness of data transactions. In the process of data use, auditing and supervision technology are used to provide full traceability for the data flow process, which is convenient for viewing and supervision at any time.

[0066] In terms of data monitoring and auditing, during the data collection stage, we carefully identify the legitimacy and credibility of the data source through the reputation assessment of the data source to ensure the purity and reliability of the source data. In the data circulation link, we use privacy computing technology and encryption technology to protect the data in all aspects to prevent the data from being maliciously tampered with or leaked during the transmission process, so that it always remains complete and secure. In the data transaction settlement link, we generate and store transaction records based on blockchain technology, which will be retained forever and clearly traceable.

[0067] Through secure multi-party computing technology, while protecting the data rights and interests of all parties in the process of data use, it is like building a solid firewall for data to prevent information leakage or abuse, and ensure the data security and interests of all parties. The use of multi-level audit mechanism and real-time monitoring function is like setting up layers of checkpoints and full-process monitoring cameras for data circulation to ensure compliance at every link.

[0068] When establishing a trusted personal data circulation platform, we will give full play to the unique advantages of blockchain technology to ensure that the platform data cannot be tampered with, making it a solid foundation for data security. We will also use smart contract technology to ensure the legality of each data transaction and provide legal constraints and guarantees for transaction activities. Based on data sandbox technology, we will create a secure and isolated exclusive environment for personal data to prevent unauthorized data use or leakage and ensure the independence and security of data.

[0069] The dynamic access control mechanism is introduced to ensure that data is only circulated within the authorized scope through precise role identification and authority management, and a strict scope of activity is set for the data. The full-process monitoring and auditing mechanism is introduced to monitor the entire process of data circulation on the platform in real time to ensure the compliance and transparency of platform operations, so that the operation of the platform is always in an orderly and supervised state.

[0070] Build a personal data bank as a trusted third-party intermediary, create a personal data account, closely link personal data with digital identity, and clarify data property rights, just like establishing a clear identity file and property certificate for the data. Carefully manage the transmission and use of personal data assets through consensus mechanisms and smart contract technology to ensure the compliance of data circulation and orderly flow of data on a legal and compliant track. Provide a data trading platform, achieve trusted data exchange through data evaluation, privacy computing and blockchain technology, build a safe and reliable bridge for both parties of data transactions, and promote efficient circulation and value realization of data. As an intermediary, the personal data bank will do its utmost to ensure the security, privacy protection and transparency of data during the circulation process, so that data rights holders do not need to worry about data security and rights issues.

[0071] Establish a data quality feedback mechanism. After the data is used, the data user will promptly provide the data provider with information on the accuracy, completeness and practicality of the data. The data provider will optimize the data collection and preprocessing process based on these valuable feedbacks, just like improving the product based on the user's opinions, thereby continuously improving the quality of subsequent data and making the data more in line with actual needs and application standards. Establish a data dispute arbitration mechanism. When the data supply and demand parties have disputes over data quality, transaction terms or privacy compliance, a trusted third party will conduct fair arbitration based on preset rules and smart contracts, provide fair and just solutions to disputes in data transactions, and maintain a good order of data transactions.

[0072] A system for the trusted circulation of personal data, which is specifically used to implement the above method. The system includes multiple modules. The data collection module widely collects personal data from multiple sources and properly stores it in personal data accounts; the data evaluation module conducts in-depth value evaluation of the collected personal data to accurately determine the quality and value level of the data; the privacy computing module uses privacy computing technology to de-identify the data to ensure the privacy of the data during circulation; the data circulation module realizes the smooth circulation of data between trusted platforms based on data evaluation and privacy computing results, and intelligently generates contracts during transactions; the blockchain module ensures the immutability and integrity of data circulation through smart contract technology, and transparently audits transactions to ensure that each transaction can stand the test; the secure multi-party computing module provides full-process data supervision and ensures the compliance of data during circulation, so that data always operates within a legal and compliant framework.

[0073] The system's full-process supervision capabilities ensure the legitimacy and credibility of data during the data collection phase through data quality control and data source authentication technologies, thereby controlling data quality at the source; during the data circulation phase, privacy protection technology, data encryption technology, and access control mechanisms are used to ensure the security and privacy of data during circulation, protecting data from infringement during circulation; during the data settlement phase, blockchain smart contract technology is used to ensure the integrity, transparency, and immutability of data transactions, making transaction results authentic and reliable; during the data usage phase, secure multi-party computing and real-time auditing technologies are used to ensure compliance with data usage and protect data privacy, ensuring that data is always legal, compliant, and secure during use.

[0074] The usage process of the present invention is: constructing a three-dimensional data space; mining and evaluating the value of data quality; privacy computing to protect data privacy; blockchain to ensure data integrity; full-process supervision of secure multi-party computing; real-time monitoring and auditing of data circulation.

[0075] To sum up, the advantages of the present invention are: by building a trusted digital identity basic platform, introducing blockchain and encryption technology, ensuring the security of data storage and transmission, and solving the problem of leakage and abuse; improving circulation security and controllability through data classification and labeling and authority management; using privacy computing to protect privacy and prevent sensitive information leakage; relying on smart contracts, encryption and dynamic auditing to ensure the legality of data access rights and usage scenarios, and that transaction data cannot be tampered with and is transparent, protecting the interests of data rights holders; relying on data quality control, resource authentication, privacy protection, encryption and access control to ensure circulation security and privacy and traceability throughout the process, facilitating audit supervision.

[0076] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The above embodiments and descriptions only describe the principles of the present invention. The present invention may be subject to various changes and improvements without departing from the spirit and scope of the present invention. These changes and improvements fall within the scope of the present invention. The scope of protection claimed by the present invention is defined by the attached claims and their equivalents.

Claims

1. A method for trusted circulation of personal data, characterized in that: include: Build a trusted digital identity infrastructure platform and establish a three-dimensional data space including data dimension, business dimension and security dimension; Ensure the quality and reliability of personal data and assess its value through data mining and evaluation techniques; Use privacy computing technology to ensure privacy protection during data circulation and perform privacy protection verification before data transactions; Adopt blockchain technology and use smart contract technology in the data circulation and settlement process to ensure data integrity and non-tamperability; Based on secure multi-party computing technology, full-process supervision is carried out to ensure the security and compliance of the data flow process; During the data circulation process, the data is monitored and audited in real time to ensure that every link of the data circulation can be traced.

2. A method for trusted circulation of personal data according to claim 1, characterized in that: Building a trusted digital identity infrastructure platform specifically includes: Using the "crowd-wisdom-data-cloud-network-things" five-in-one architecture, we build a platform that integrates trusted identity authentication, data circulation, privacy protection, and regulatory auditing; Establish three-dimensional spaces of data, business, and security on the platform, and classify and label data according to different user needs; Introducing blockchain and encryption technology to ensure the secure storage and transmission of personal data; Provide data transaction functions, use smart contract technology for transaction settlement, and ensure the transparency and immutability of each transaction process; Build a permission management system to ensure the secure flow of data through role control and access control mechanisms.

3. A method for trusted circulation of personal data according to claim 1, characterized in that: Using privacy computing technology to ensure privacy protection during data circulation includes: Through privacy computing technology, data anonymization is provided to complete data circulation without leaking sensitive information; In the data interaction process, smart contracts and encryption technology are used to ensure the legitimacy of data access rights and usage scenarios; in the settlement process, blockchain technology is used to record the data transaction process to ensure the immutability and transparency of transaction data; in the process of data use, dynamic audits and compliance checks are carried out to ensure that the data flow process complies with relevant laws, regulations and privacy policies.

4. A method for trusted circulation of personal data according to claim 1, characterized in that: Ensuring the security and compliance of data flow specifically includes: In the data preparation stage, data processing technology is used to clean, remove duplication and noise from the data; Data access control stage: Based on digital identity authentication technology, ensure that only authorized users or entities can access or operate data; During the data circulation process, encryption technology and privacy protection technology are used to ensure the privacy and security of data during transmission; In the data settlement phase, smart contracts are used to confirm data rights and transactions, ensuring the legitimacy and immutability of data circulation; During the use of data, audit and supervision technology is used to provide full traceability of the data flow process.

5. A method for trusted circulation of personal data according to claim 1, characterized in that: Real-time monitoring and auditing of data include: During the data collection phase, the legitimacy and credibility of the data source are ensured through reputation assessment of the data source; In the data circulation process, privacy computing technology and encryption technology are used to protect data to prevent data from being maliciously tampered with or leaked during transmission; In the data transaction settlement process, the transaction records are generated and stored based on blockchain technology to ensure that the transaction information cannot be tampered with; Through secure multi-party computing technology, the data rights and interests of all parties in the process of data use are protected while preventing information leakage or abuse; A multi-level audit mechanism and real-time monitoring function are adopted to ensure the compliance of each link and the transparency of the entire data flow process.

6. A method for trusted circulation of personal data according to claim 1, characterized in that: When establishing a trusted personal data circulation platform, blockchain technology is used to ensure that the platform data cannot be tampered with, and smart contract technology is used to ensure the legitimacy of each data transaction; Based on data sandbox technology, it provides a secure isolation environment for personal data to prevent unauthorized data use or leakage; Introduce a dynamic access control mechanism to ensure that data is circulated only within the authorized scope through role identification and permission management; Introduce a full-process monitoring and auditing mechanism to monitor the entire process of data flow on the platform in real time to ensure the compliance and transparency of platform operations.

7. A method for trusted circulation of personal data according to claim 1, characterized in that: Build a personal data bank as a trusted third-party intermediary, create personal data accounts, associate personal data with digital identities, and clarify data ownership; Manage the transmission and use of personal data assets through consensus mechanisms and smart contract technology to ensure the compliance of data circulation; Provide a data trading platform to achieve trusted data exchange through data evaluation, privacy computing and blockchain technology; As an intermediary, the personal data bank ensures the security, privacy protection and transparency of data during circulation and safeguards the interests of data rights holders.

8. A method for trusted circulation of personal data according to claim 1, characterized in that: Establish a data quality feedback mechanism. After the data is used, the data user will provide the data provider with information on the accuracy, completeness and practicality of the data. The data provider will optimize the data collection and preprocessing process based on the feedback to improve the subsequent data quality. A data dispute arbitration mechanism is established. When data supply and demand parties have disputes over data quality, transaction terms or privacy compliance, a trusted third party will arbitrate based on preset rules and smart contracts.

9. A system for trusted circulation of personal data, characterized in that: A method for implementing a trusted circulation of personal data as claimed in any one of claims 1 to 8, comprising: a data collection module, a data evaluation module, a privacy computing module, a data circulation module, a blockchain module and a secure multi-party computing module; The data collection module is used to collect personal data from various sources and store it in the personal data account; The data evaluation module is used to evaluate the value of the collected personal data and determine the quality and value level of the data; The privacy computing module is used to de-identify data using privacy computing technology to ensure the privacy of data during circulation; The data circulation module is used to realize the circulation of data between trusted platforms based on data evaluation and privacy calculation results, and generate smart contracts during the transaction process; The blockchain module is used to ensure the immutability and integrity of data circulation through smart contract technology, and to conduct transparent audits of transactions; The secure multi-party computing module is used to provide data supervision protection for the entire process and ensure the compliance of data during circulation.

10. A system for trusted circulation of personal data according to claim 9, characterized in that: The system's full-process supervision capabilities include: During the data collection phase, data quality control and data source authentication technologies are used to ensure the legitimacy and credibility of the data; During the data circulation stage, privacy protection technology, data encryption technology and access control mechanisms are used to ensure the security and privacy of data during circulation. In the data settlement stage, blockchain smart contract technology is used to ensure the integrity, transparency and immutability of data transactions; In the data usage process, secure multi-party computing and real-time auditing technology are used to ensure data usage compliance and protect data privacy.

Images