Active trusted uplink management method and system for trusted fusion of under-chain multi-source data

Abstract

The invention discloses an active trusted uplink management method and system for trusted fusion of under-chain multi-source data, and relates to the technical field of secret communication, and the method comprises the steps: selecting a fusion function, and coding the fusion function into a corresponding digital circuit; selecting a zero-knowledge proving scheme, and generating a common reference string for the digital circuit; uploading the parameters including the public reference string to the block chain; generating a public key and a private key of each under-chain data source node according to the parameters; acquiring to-be-uplink data acquired by the plurality of under-link data source nodes; calculating a hash abstract and a digital signature of the to-be-linked data; and the oracle machine fuses the to-be-chained data to obtain fused data and a fusion proof, and uploads the fused data, the fusion proof, the hash abstract and the digital signature to the block chain. According to the application, an on-chain and off-chain fusion mode is adopted, so that high storage and processing cost caused by directly uploading a large amount of off-chain data can be effectively avoided, the transaction cost can be reduced, and the risk of privacy disclosure can be reduced.

Description

Technical Field

[0001] The present application relates to the field of confidential communication technology, and in particular to an active trusted on-chain management method and system for trusted fusion of off-chain multi-source data. Background Art

[0002] In the agricultural field, the demand for multi-source data integration is very prominent, mainly reflected in the following aspects: Agricultural production involves multiple data sources, including soil monitoring data, meteorological data, crop growth data, and pesticide application data. These data come from different sensors, monitoring equipment, and agricultural information systems, and are diverse and heterogeneous. For example, farmers may use a variety of soil and meteorological monitoring equipment to collect information such as humidity, temperature, and rainfall, but these data are often stored in independent systems, which are difficult to integrate and analyze, forming "data islands."

[0003] In the agricultural field, the application of blockchain technology is becoming increasingly widespread. However, in the process of uploading data to the chain, there are still many challenges, especially in terms of high storage and processing costs, high transaction fees, and privacy and security risks. Specifically, the cost of data fusion on the blockchain is mainly reflected in the following aspects: First, the characteristics of the blockchain require that each node must save complete blockchain data, and the data must be verified by the consensus algorithm before it can be written to the chain. This feature brings significant storage and processing costs. Secondly, each transaction on the chain requires a certain fee, and as the transaction volume increases, the fee shows a gradual upward trend, which greatly increases the cost of data fusion. In addition, although the openness and transparency of the blockchain improves trust, it may also lead to the leakage of private information and security risks. If there are errors in the off-chain data or contain sensitive information, once it is uploaded to the chain, it will have a serious impact on the privacy and security of users. Summary of the invention

[0004] The embodiments of the present application provide an active trusted chain management method and system for trusted fusion of off-chain multi-source data, so as to solve the problems of cost, expense and security in the prior art of agricultural data chain uploading.

[0005] On the one hand, the embodiment of the present application provides an active and trusted on-chain management method for trusted fusion of off-chain multi-source data, including: Selecting a fusion function, and encoding the fusion function into a corresponding digital circuit; Selecting a zero-knowledge proof scheme, and using the zero-knowledge proof scheme to generate a public reference string for the digital circuit; Upload the parameters including the public reference string to the blockchain; Generate the public key and private key of each off-chain data source node according to the parameters, and upload the public key to the blockchain; Obtain the data to be uploaded to the chain collected by multiple off-chain data source nodes; Use the private key to calculate the hash summary and digital signature of the data to be uploaded to the chain; The oracle uses the fusion function to fuse the data on the chain, obtains the corresponding fusion data and fusion proof, and uploads the fusion data, fusion proof, hash summary and digital signature to the blockchain.

[0006] In one possible implementation, the zero-knowledge proof scheme ZKP for ZKP ={ Setup , Prove , Verify},in, Setup , Prove and Verify Represent zero-knowledge proof schemes ZKP The setup function, proof function and verification function in the call setup function Setup (1 λ , C ) represents a digital circuit C Generate public reference string crs ,in λ Indicates security parameters.

[0007] In a possible implementation, the method for generating the public key and the private key is: Z p Select a number α , will i Public key of off-chain data source node pk i Set to pk i = g α , private key sk i Set to sk i = α ,in, g express p Factorial cyclic group G The generators of p Factorial cyclic group G and G T Satisfies bilinear mapping e : G × G → G T , finite field Z p The elements in are {0,1,…, p -1}.

[0008] In one possible implementation, the method for calculating the hash summary is: selecting a collision-resistant hash function H :{0,1}→ Z p , get the i The data to be uploaded to the chain is m i , the hash summary is represented as H ( m i ).

[0009] In one possible implementation, the data to be uploaded to the chain m i Digital signature Expressed as .

[0010] In one possible implementation, the oracle receives the data to be uploaded, the hash summary, and the digital signature. Finally, verify the correctness of the digital signature: After the digital signature is verified, the data to be uploaded to the chain will be integrated. n Indicates the number of off-chain data source nodes.

[0011] In one possible implementation, after the fusion data, fusion proof, hash summary and digital signature are uploaded to the blockchain, the correctness of the digital signature is verified by the smart contract: , and the correctness of the fused data: If the verification is successful, the fusion data will be stored on the blockchain. Verify Represents a zero-knowledge proof scheme ZKP The verification function in crs represents a public reference string, res represents fused data, aux H represents the auxiliary public parameters of the hash function, π Indicates fusion proof.

[0012] On the other hand, the embodiment of the present application also provides an active trusted on-chain management system for trusted fusion of off-chain multi-source data, including: A digital circuit encoding module, used for selecting a fusion function and encoding the fusion function into a corresponding digital circuit; A public reference string generation module, used for selecting a zero-knowledge proof scheme and using the zero-knowledge proof scheme to generate a public reference string for a digital circuit; The parameter upload module is used to upload the parameters including the public reference string to the blockchain; The key generation module is used to generate the public key and private key of each off-chain data source node according to the parameters, and upload the public key to the blockchain; The data acquisition module is used to obtain the data to be uploaded to the chain collected by multiple off-chain data source nodes; The signature module is used to calculate the hash summary and digital signature of the data to be uploaded to the chain using the private key; The fusion module is used by the oracle to fuse the on-chain data using the fusion function, obtain the corresponding fusion data and fusion proof, and upload the fusion data, fusion proof, hash summary and digital signature to the blockchain.

[0013] The active trusted on-chain management method and system for trusted fusion of off-chain multi-source data in this application has the following advantages: The adoption of the on-chain and off-chain integration method can not only effectively avoid the high storage and processing costs brought by directly uploading a large amount of off-chain data to the chain, but also reduce transaction fees and reduce the risk of privacy leakage. It realizes the precise management of the agricultural field. By integrating soil, meteorological, crop growth and other data, it realizes the comprehensive monitoring of the farmland environment, provides scientific production suggestions for farmers, and improves agricultural production efficiency and resource utilization. Through the integration of on-chain and off-chain, the immutability of blockchain and the high efficiency of off-chain data processing are organically combined. This method not only realizes the efficient use and deep mining of off-chain data, but also ensures the privacy and security of data, providing a more optimized practical path for the implementation of blockchain technology in the agricultural field. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0015] Figure 1 A flowchart of an active trusted on-chain management method for trusted fusion of off-chain multi-source data provided in an embodiment of the present application. DETAILED DESCRIPTION

[0016] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0017] Figure 1 Flow chart of the active and trusted on-chain management method for trusted fusion of multi-source data off-chain provided by the embodiment of the present application. The embodiment of the present application provides an active and trusted on-chain management method for trusted fusion of multi-source data off-chain, including: S100, selecting a fusion function, and encoding the fusion function into a corresponding digital circuit.

[0018] For example, the fusion function f The characteristics of the data can be calculated by using methods such as weighted average, expectation, standard deviation, etc., or predictive analysis can be performed using methods such as linear regression, logistic regression, and decision tree based on the data.

[0019] S110, selecting a zero-knowledge proof scheme, and using the zero-knowledge proof scheme to generate a public reference string for the digital circuit.

[0020] Exemplarily, the zero-knowledge proof scheme ZKP for ZKP ={ Setup , Prove , Verify},in, Setup , Prove and Verify Represent zero-knowledge proof schemes ZKP The setup function, proof function and verification function in the call setup function Setup (1 λ , C ) represents a digital circuit C Generate public reference string crs ,in λ Indicates security parameters.

[0021] S120, uploading the parameters including the public reference string to the blockchain.

[0022] S130, generate the public key and private key of each off-chain data source node according to the parameters, and upload the public key to the blockchain.

[0023] Exemplarily, the method of generating the public key and the private key is: Z p Select a number α , will i Public key of off-chain data source node pk i Set to pk i = g α , private key sk i Set to sk i = α ,in, g express p Factorial cyclic group G The generators of p Factorial cyclic group G andG T Satisfies bilinear mapping e : G × G → G T , finite field Z p The elements in are {0,1,…, p -1}.

[0024] After obtaining the public key and private key, the parameters can be expressed as params ={ p , G , G T , e , H , crs , g}, the parameter will be uploaded to the blockchain, and the i Off-chain data source nodes node i Identifier ID i Also uploaded to the blockchain.

[0025] S140, obtaining the data to be uploaded to the chain collected by multiple off-chain data source nodes.

[0026] Exemplarily, the off-chain data source node can be a data acquisition device commonly used in agricultural monitoring, such as a temperature sensor and a humidity sensor. Accordingly, the data to be uploaded to the chain can be the same or different types of data collected by a variety of different data acquisition devices.

[0027] S150, using the private key to calculate the hash summary and digital signature of the data to be uploaded to the chain.

[0028] Exemplarily, the method for calculating the hash summary is: selecting a collision-resistant hash function H :{0,1}→ Z p , get the i The data to be uploaded to the chain is m i , the hash summary is represented as H ( m i ).

[0029] Data to be uploaded m i Digital signature Expressed as After obtaining the hash summary and digital signature, the data to be uploaded to the chain, the hash summary and the digital signature are uploaded to the oracle.

[0030] S160, the oracle uses the fusion function to fuse the on-chain data, obtains the corresponding fusion data and fusion proof, and uploads the fusion data, fusion proof, hash summary and digital signature to the blockchain.

[0031] For example, after the oracle receives the data to be uploaded, the hash summary and the digital signature, the following steps will be performed: 1. For each , verify the correctness of the digital signature: , after verification, proceed to the next step, where n Indicates the number of off-chain data source nodes.

[0032] 2. Oracle computing fusion data and converging evidence , where the public input is the fused data res , Hash digest H ( m i ) and auxiliary information , private input is data ,in Represents auxiliary public parameters of the hash function.

[0033] 3. The oracle will fuse data, fuse evidence and hash summary Wind up.

[0034] 4. The smart contract on the blockchain performs the following steps to verify the correctness of the fused data. First, for each , verify the correctness of the digital signature: ; Secondly, verify the correctness of the fused data: If both verifications pass, the fused data will be stored on the chain.

[0035] The embodiment of the present application also provides an active trusted on-chain management system for trusted fusion of off-chain multi-source data, the system comprising: A digital circuit encoding module, used for selecting a fusion function and encoding the fusion function into a corresponding digital circuit; A public reference string generation module, used for selecting a zero-knowledge proof scheme and using the zero-knowledge proof scheme to generate a public reference string for a digital circuit; The parameter upload module is used to upload the parameters including the public reference string to the blockchain; The key generation module is used to generate the public key and private key of each off-chain data source node according to the parameters, and upload the public key to the blockchain; The data acquisition module is used to obtain the data to be uploaded to the chain collected by multiple off-chain data source nodes; The signature module is used to calculate the hash summary and digital signature of the data to be uploaded to the chain using the private key; The fusion module is used by the oracle to fuse the on-chain data using the fusion function, obtain the corresponding fusion data and fusion proof, and upload the fusion data, fusion proof, hash summary and digital signature to the blockchain.

[0036] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0037] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. An active and trusted on-chain management method for trusted fusion of off-chain multi-source data, characterized in that: include: Selecting a fusion function, and encoding the fusion function into a corresponding digital circuit; Selecting a zero-knowledge proof scheme, and using the zero-knowledge proof scheme to generate a public reference string for the digital circuit; Uploading the parameters including the public reference string to the blockchain; Generate the public key and private key of each off-chain data source node according to the parameters, and upload the public key to the blockchain; Obtaining the data to be uploaded to the chain collected by the multiple off-chain data source nodes; Calculate the hash summary and digital signature of the data to be uploaded using the private key; The oracle uses the fusion function to fuse the data to be uploaded to the chain, obtains corresponding fusion data and fusion proof, and uploads the fusion data, the fusion proof, the hash summary and the digital signature to the blockchain.

2. The active trusted on-chain management method for trusted fusion of off-chain multi-source data according to claim 1 is characterized in that: The zero-knowledge proof scheme ZKP for ZKP ={ Setup , Prove , Verify },in, Setup , Prove and Verify Respectively represent the zero-knowledge proof scheme ZKP The setup function, proof function and verification function in the above example call the setup function Setup (1 λ , C ) represents the digital circuit C Generate the public reference string crs ,in λ Indicates security parameters.

3. The active trusted on-chain management method for trusted fusion of off-chain multi-source data according to claim 1 is characterized in that: The method for generating the public key and the private key is: Z p Select a number α , will i The public key of the off-chain data source node pk i Set to pk i = g α , the private key sk i Set to sk i = α ,in, g express p Factorial cyclic group G The generators of p Factorial cyclic group G and G T Satisfies bilinear mapping e : G × G → G T , finite field Z p The elements in are {0,1,…, p -1}.

4. The active trusted on-chain management method for trusted fusion of off-chain multi-source data according to claim 3 is characterized in that: The method for calculating the hash summary is: select a collision-resistant hash function H :{0,1}→ Z p , get the i The data to be uploaded to the chain is m i , the hash summary is expressed as H ( m i ).

5. The active trusted on-chain management method for trusted fusion of off-chain multi-source data according to claim 4 is characterized in that: The data to be uploaded m i The digital signature Expressed as .

6. The active trusted on-chain management method for trusted fusion of off-chain multi-source data according to claim 5 is characterized in that: The oracle receives the data to be uploaded, the hash summary and the digital signature After that, verify the correctness of the digital signature: After the digital signature is verified, the data to be uploaded is merged. n Indicates the number of off-chain data source nodes.

7. The active trusted on-chain management method for trusted fusion of off-chain multi-source data according to claim 6 is characterized in that: After uploading the fusion data, the fusion proof, the hash summary and the digital signature to the blockchain, the correctness of the digital signature is verified by the smart contract: , and the correctness of the fused data: If the verification is successful, the fusion data is stored on the blockchain, where Verify Represents the zero-knowledge proof scheme ZKP The verification function in crs represents the public reference string, res represents the fused data, aux H represents the auxiliary public parameters of the hash function, π Represents the fusion proof.

8. A system using the active trusted on-chain management method for trusted fusion of off-chain multi-source data as described in any one of claims 1 to 7, characterized in that: include: A digital circuit encoding module, used for selecting a fusion function and encoding the fusion function into a corresponding digital circuit; A public reference string generation module, used for selecting a zero-knowledge proof scheme and using the zero-knowledge proof scheme to generate a public reference string for the digital circuit; A parameter uploading module, used to upload the parameters including the public reference string to the blockchain; A key generation module, used to generate a public key and a private key of each off-chain data source node according to the parameters, and upload the public key to the blockchain; A data acquisition module, used to acquire the data to be uploaded to the chain collected by multiple off-chain data source nodes; A signature module, used to calculate the hash summary and digital signature of the data to be uploaded to the chain using the private key; A fusion module is used for the oracle to fuse the data to be uploaded to the chain using the fusion function to obtain corresponding fusion data and fusion proof, and upload the fusion data, the fusion proof, the hash summary and the digital signature to the blockchain.

Images