Data use method and system

Abstract

The invention discloses a data use method and device, and the method comprises the steps: building a distributed digital identity in a data space after an authentication request is obtained; acquiring a data use request sent by a user, and generating a data calling order corresponding to the user based on the use request; and matching a plurality of target distributed digital identities conforming to the data calling order from the created distributed digital identities, and enabling users of the target distributed digital identities to respond to whether the data calling order is authorized or not. Under the condition that no trusted third party exists, the data can be available and invisible in the operation process that the secure multi-party calculates the data of all parties, so that the data security of all parties is guaranteed, and the data can be safely provided for a user without going out of a domain.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a data use method and system. Background Art

[0002] As a new production factor, the circulation and transaction of data are key driving forces for the development of the digital economy. However, the security of personal information has received increasing attention.

[0003] In related technologies, the circulation and monetization of data make it easier for data to get out of control and lead to illegal abuse. Summary of the invention

[0004] The main purpose of the present invention is to provide a data use method and system to solve the deficiencies existing in the related art.

[0005] In order to achieve the above-mentioned purpose, according to the first aspect of the present invention, a data usage method is provided, which creates a distributed digital identity in the data space after obtaining an authentication request; obtains a data usage request sent by a user, and generates a data call for the user based on the usage request; matches multiple target distributed digital identities that are consistent with the data call for the order from the created distributed digital identities, and allows users of each target distributed digital identity to respond to the data call for authorization or not.

[0006] Optionally, when users of multiple target distributed digital identities authorize the data call order, each user of the target distributed digital identity provides data of different dimensions to the data call order.

[0007] Optionally, matching multiple target distributed digital identities that are consistent with the data call for orders from the created distributed digital identities includes: matching multiple target distributed digital identities that are consistent with the data call for orders from the created distributed digital identities through a smart contract.

[0008] Optionally, matching multiple target distributed digital identities that comply with the data call for orders from the created distributed digital identities through a smart contract includes: determining a data dimension indicated by the data call for orders; and determining multiple target distributed digital identities that can provide data of the data dimension through a smart contract.

[0009] Optionally, after the users of each target distributed digital identity provide data of different dimensions to the data call order, the method includes: generating a data product required by the user based on the data call order and the data of different dimensions.

[0010] Optionally, the processing result of the data product is fed back to the user pointed to by the corresponding data call order.

[0011] According to a second aspect of the present invention, a data usage system is provided, comprising: a distributed digital identity creation unit, used to create a distributed digital identity in a data space after obtaining an authentication request; a data call order generation unit, used to obtain a data usage request sent by a user, and generate a data call order corresponding to the user based on the usage request; a processing unit, used to match multiple target distributed digital identities that are consistent with the data call order from the created distributed digital identities, and for users of each target distributed digital identity to respond to the data call order whether to authorize or not.

[0012] Optionally, after the user of the at least one target distributed digital identity authorizes the data call order, users of different target distributed digital identities provide data of different dimensions to the data call order.

[0013] Optionally, matching multiple target distributed digital identities that are consistent with the data call for orders from the created distributed digital identities includes: matching multiple target distributed digital identities that are consistent with the data call for orders from the created distributed digital identities through a smart contract.

[0014] Optionally, matching multiple target distributed digital identities that comply with the data call for orders from the created distributed digital identities through a smart contract includes: determining a data dimension indicated by the data call for orders; and determining multiple target distributed digital identities that can provide data of the data dimension through a smart contract.

[0015] The data use method and device of this embodiment include creating a distributed digital identity in the data space after obtaining the authentication request; obtaining the data use request sent by the user, and generating a data call for the user based on the use request; matching multiple target distributed digital identities that match the data call for the created distributed digital identity, and providing users of each target distributed digital identity with a response to the data call for authorization or not. In the absence of a trusted third party, the operation process of the data of each party in the secure multi-party computing makes the "data available but invisible", thereby ensuring the data security of all parties, and can safely provide their own data to the user without leaving the domain. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0017] Figure 1is a flow chart of a data use method according to an embodiment of the present invention; DETAILED DESCRIPTION

[0018] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0019] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so as to describe the embodiments of the present invention described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0020] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features in the embodiments can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0021] According to an embodiment of the present invention, a data processing method is provided, and the method is applied to the data space of a blockchain network, such as Figure 1 As shown, it includes the following steps 101 to 103:

[0022] Step 101: After receiving the authentication request, a distributed digital identity is created in the data space.

[0023] In this step, data space refers to the data space of the blockchain network. In the data space of the blockchain network, users with different authenticated identities have their own independent user data space. The data space of the blockchain network can be provided to users in the form of a platform, and users can perform authentication operations, data requests, data authorization operations, etc. in the platform. When using the data space for the first time, users can authenticate in the data space platform. During authentication, the identity can be created, stored and verified through distributed ledger technology such as blockchain, and finally a unique distributed digital identity is created for the platform user. Distributed digital identity does not rely on a single central agency for identity authentication and management. Users have full control over their distributed digital identity and can decide when, where and to whom to disclose their identity information data.

[0024] Step 102: Obtain a data use request sent by a user, and generate a data call for the user based on the request.

[0025] In this step, the data user can request to use the data through the blockchain network data space platform. After the data space platform receives the request, it automatically creates a data call for the data user and obtains the digital identity corresponding to the data call, which can also be a distributed digital identity. The data call contains the virtual digital identity D ID of the user. The user's demand requests are different, that is, the data demand dimensions are not the same, so each data call is a model of a data product. In the blockchain network data space, around the data call, through the LLM model and VLM model as well as privacy computing technology and smart contract technology, the user's data product is formed. Different data calls can form different data products.

[0026] Data call orders from different users can form different data products, and the formation of different data products requires data of different data dimensions. These data may be mastered by one or more users. Through the data call order, data of the dimensions required by the required users can be matched.

[0027] Step 103: Match multiple target distributed digital identities that are consistent with the data call for orders from the created distributed digital identities, and allow users of each target distributed digital identity to respond to the data call for orders to authorize or not.

[0028] In this step, after the data call is generated, the distributed digital identities of multiple data providers that can provide the required data are matched based on the data call, and the data call is broadcast to users who match the multiple distributed identities. These users can respond to the data call with authorization or without authorization.

[0029] As an optional implementation of this embodiment, when users of multiple target distributed digital identities authorize the data call order, the user of each target distributed digital identity provides data of different dimensions to the data call order.

[0030] In this optional implementation, after the target distributed digital identity is matched, the user of the target distributed digital identity provides data of different dimensions on demand to the data call, such as identity A providing data of the first dimension through the data space, identity B providing data of the first and second dimensions through the data space, and so on.

[0031] Through the above method, multiple data right holders can be quickly and jointly authorized to a data call-out order, and the authorization is only for the data dimensions required for the authorization call-out order. It is a precise authorization without excessive authorization of user data dimensions.

[0032] As an optional implementation method of this embodiment, matching multiple target distributed digital identities that are consistent with the data call for orders from the created distributed digital identities includes: matching multiple target distributed digital identities that are consistent with the data call for orders from the created distributed digital identities through smart contracts.

[0033] In this optional implementation, the data dimensions required for each data call are different, and the data dimensions that different providers can provide are also different. Therefore, users who meet the requirements of the data call are automatically matched through the on-chain smart contract.

[0034] This optional implementation method makes the data available but invisible during the operation process of the data of each party in the secure multi-party computation. The data available but invisible here refers to the operation process. For example, the data dimension of whether different identity users have data call orders is executed through smart contracts, so the process is data available but invisible.

[0035] As an optional implementation method of this embodiment, matching multiple target distributed digital identities that comply with the data call for orders from the created distributed digital identities through a smart contract includes: determining the data dimension indicated by the data call for orders; and determining multiple target distributed digital identities that can provide the data dimension data through a smart contract.

[0036] In this optional implementation, different data call orders require different data dimensions as mentioned above. After determining the data dimensions required by the data call order, the dimensions of the required data are matched with the user data space of the authenticated user through the smart contract. If the final matching degree is greater than the set value, such as 80%, it is considered to be a matched user that meets the data call order, and its corresponding identity is the target distributed digital identity. Then, a broadcast can be sent to these users to request authorization of the user data space; when the target distributed identity user authorizes the model, the data call order can use these user data for privacy computing and integrate data products.

[0037] As an optional implementation method of this embodiment, after the users of each target distributed digital identity provide data of different dimensions to the data call order, it includes: generating the data product required by the user based on the data call order and the data of different dimensions.

[0038] In this optional implementation, the data call is formed into a data product with the data dimensions desired by the user through the LLM model and the VLM model as well as privacy computing technology and smart contract technology.

[0039] As an optional implementation method of this embodiment, the processing result of the data product is fed back to the user pointed to by the corresponding data call order.

[0040] In this optional implementation, the authorized user provides data to the data call order, and the calculation results can be obtained after using the data. The final calculation results can be fed back to the user data space corresponding to the identity based on the identity corresponding to different data call orders.

[0041] In this embodiment, the data call-up order is carried out on the blockchain network, and all calculations and authorization behaviors are traceable; users control data and authorization through digital identities D IDs, and the authorization behavior is ensured to be authentic and reliable. The entire behavior is an authorization process for data providers and data users; ultimately, data usage only obtains data models authorized by the data call-up order, which effectively protects users' personal privacy data from abuse, leakage, and infringement of data rights.

[0042] After the results of the model are fed back to the data user, rebates can be provided based on the target distributed identity of the data provider.

[0043] This embodiment realizes many-to-one authorization through data call orders; the entire authorization process is a direct behavior of the data provider and the data user; the data authorization environment is safe and reliable; the data call order and digital identity (D ID) solve the simplicity of authorization; accurate authorization, no excessive authorization of data behavior. Using technologies such as blockchain and privacy computing, the data call order on the blockchain is mainly aimed at the case where there is no trusted third party. The calculation process of the data of each party in the secure multi-party computing makes the "data available but invisible", thereby ensuring the data security of all parties, and can safely provide its own data to the application party without leaving the domain.

[0044] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0045] According to an embodiment of the present invention, a data usage device is also provided, including a distributed digital identity creation unit, which is used to create a distributed digital identity in a data space after obtaining an authentication request; a data call order generation unit, which is used to obtain a data usage request sent by a user, and generate a data call order corresponding to the user based on the usage request; and a processing unit, which is used to match multiple target distributed digital identities that are consistent with the data call order from the created distributed digital identities, and for users of each target distributed digital identity to respond to the data call order to determine whether to authorize or not.

[0046] As an optional implementation manner of this embodiment, after the user of the at least one target distributed digital identity authorizes the data call for orders, users of different target distributed digital identities provide data of different dimensions to the data call for orders.

[0047] As an optional implementation method of this embodiment, matching multiple target distributed digital identities that are consistent with the data call for orders from the created distributed digital identities includes: matching multiple target distributed digital identities that are consistent with the data call for orders from the created distributed digital identities through smart contracts.

[0048] As an optional implementation method of this embodiment, matching multiple target distributed digital identities that comply with the data call for orders from the created distributed digital identities through a smart contract includes: determining the data dimension indicated by the data call for orders; and determining multiple target distributed digital identities that can provide the data dimension data through a smart contract.

[0049] As an optional implementation method of this embodiment, after the users of each target distributed digital identity provide data of different dimensions to the data call order, the method includes: generating the data product required by the user based on the data call order and the data of different dimensions.

[0050] As an optional implementation method of this embodiment, the processing result of the data product is fed back to the user pointed to by the corresponding data call order.

[0051] Although the present invention has been described in detail above by general description and specific embodiments, it is obvious to those skilled in the art that some modifications or improvements can be made to the present invention. Therefore, these modifications or improvements made without departing from the spirit of the present invention all belong to the scope of protection claimed by the present invention.

Claims

1. A data use method, characterized in that: The method is applied to the data space of the blockchain network, including: After receiving the authentication request, a distributed digital identity is created in the data space; Obtaining a data use request sent by a user, and generating a data call for the user based on the use request; Multiple target distributed digital identities that are consistent with the data call are matched from the created distributed digital identities, and users of each target distributed digital identity are provided to respond to the data call to determine whether to authorize or not.

2. The data using method according to claim 1, characterized in that: When users of multiple target distributed digital identities authorize the data call order, each user of the target distributed digital identity provides data of different dimensions to the data call order.

3. The data using method according to claim 1, characterized in that: Matching multiple target distributed digital identities that are consistent with the data call order from the created distributed digital identities includes: A plurality of target distributed digital identities that are consistent with the data call order are matched from the created distributed digital identities through a smart contract.

4. The data using method according to claim 3, characterized in that: Matching multiple target distributed digital identities that are consistent with the data call order from the created distributed digital identities through smart contracts includes: Determining the data dimension indicated by the data call-up order; Multiple target distributed digital identities that can provide the data dimension data are determined through smart contracts.

5. The data using method according to claim 2, characterized in that: After the users of each target distributed digital identity provide data of different dimensions to the data call, it includes: Based on the data call and the data of different dimensions, the data products required by the user are generated.

6. The data using method according to claim 5, characterized in that: Feedback the processing results of the data product to the user indicated by the corresponding data call order.

7. A data use system, characterized in that: include: A distributed digital identity creation unit, used to create a distributed digital identity in the data space after obtaining an authentication request; A data call order generating unit, configured to obtain a data use request sent by a user, and generate a data call order corresponding to the user based on the use request; The processing unit is used to match multiple target distributed digital identities that are consistent with the data call-up order from the created distributed digital identities, and allow users of each target distributed digital identity to respond to the data call-up order to determine whether to authorize or not.

8. The data use system according to claim 7, characterized in that: After the user of the at least one target distributed digital identity authorizes the data call order, users of different target distributed digital identities provide data of different dimensions to the data call order.

9. The data use system according to claim 7, characterized in that: Matching multiple target distributed digital identities that are consistent with the data call order from the created distributed digital identities includes: A plurality of target distributed digital identities that are consistent with the data call order are matched from the created distributed digital identities through a smart contract.

10. The data use system according to claim 9, characterized in that: Matching multiple target distributed digital identities that are consistent with the data call order from the created distributed digital identities through smart contracts includes: Determining the data dimension indicated by the data call-up order; Multiple target distributed digital identities that can provide the data dimension data are determined through smart contracts.

Images