Data asset credible circulation method and system based on intelligent contract dynamic evaluation

Abstract

The invention discloses a data asset credible circulation method and system based on intelligent contract dynamic assessment, and relates to the technical field of data asset circulation security, and the method comprises the steps: extracting the type, sensitivity and source authentication level of a data asset, calculating a comprehensive risk score based on a security risk assessment model, and dynamically dividing the security level; matching an intelligent contract template according to the grade, setting a circulation authority, and binding an asset fingerprint and a contract address; identity authentication and dynamic reputation management are carried out on the block chain nodes, and the access authority is adjusted in real time; after a circulation request is received, on-chain dynamic verification is performed by integrating node qualification, asset state and purpose matching, compliance score decision circulation permission is calculated, an intelligent contract is called to execute circulation operation, an on-chain circulation track is generated, and a circulation safety state is monitored in real time. The method has better effects in the aspects of safety, flexibility and credibility.

Description

Technical Field

[0001] The present invention relates to the technical field of data asset circulation security, and specifically to a method and system for trusted circulation of data assets based on dynamic evaluation of smart contracts. Background Art

[0002] With the rapid expansion of the scale of data assets and the wide popularization of distributed applications, the rights confirmation, circulation, and use of data have gradually become important issues in the digital economy era. Blockchain technology, with its characteristics of decentralization, immutability, and traceability, provides new infrastructure support for data asset management. In recent years, data rights confirmation, data trading, and data sharing platforms based on blockchain have emerged continuously, initially realizing the value transformation and cross-subject circulation of data assets. The introduction of smart contract technology enables the circulation rules of data assets to be executed automatically on the chain, improving the transparency and controllability of the data exchange process. At the same time, with the improvement of privacy protection and data compliance requirements, the security, compliance, and dynamic controllability of data assets during the circulation process have gradually become the core focus of the industry's development.

[0003] However, the existing blockchain-based data asset circulation technologies still have many deficiencies and are difficult to meet the increasingly complex data security circulation requirements. First, in terms of the security classification management of data assets, most of the existing technologies adopt static preset classification, lacking a real-time risk assessment and level adjustment mechanism based on asset characteristics and dynamic environmental changes, resulting in a mismatch between data protection measures and actual risks and potential security hazards. Second, the existing smart contracts generally rely on a single fixed rule for circulation control and cannot set and dynamically adjust fine-grained circulation permissions according to the diverse security attributes of different data assets, easily leading to problems such as overstepping and abuse of circulation permissions. In addition, during the data circulation process, the existing technologies lack a perfect dynamic management system for node reputation, unable to effectively evaluate and restrict the operation behaviors of low-reputation nodes on sensitive assets, increasing the risks of data leakage and illegal use. At the same time, the real-time monitoring and exception response mechanism during the circulation process is also relatively weak. Existing solutions mostly rely on post-event auditing and lack the instant detection and automatic classification response capabilities based on on-chain dynamic verification, resulting in the inability to quickly handle abnormal behaviors when they occur and damaging the overall security guarantee level of data assets. In summary, the existing technologies cannot achieve a blockchain data asset security circulation system with closed-loop control for data asset security levels, node dynamic reputation, and real-time exception detection, and it is difficult to achieve the intelligent, controlled, and trusted data asset circulation effect proposed by the present invention. Summary of the Invention

[0004] In view of the above existing problems, the present invention is proposed.

[0005] Therefore, the technical problem to be solved by the present invention is that the existing blockchain data asset circulation management method has a static and extensive data asset security classification mechanism, which cannot dynamically match the actual risks, the circulation control granularity is rough, the permission setting does not match the asset characteristics, lacks dynamic management of node reputation and real-time exception response mechanism, has insufficient security protection ability, and how to achieve the controlled circulation of data assets based on dynamic security assessment, smart contracts and on-chain exception closed-loop prevention and control in an open blockchain environment.

[0006] To solve the above technical problems, the present invention provides the following technical solutions: A method for trusted circulation of data assets based on dynamic evaluation of smart contracts, including extracting the basic attributes of multiple received data assets, and extracting data types, sensitivity identifiers, and source node authentication level information. Based on a security risk assessment model, calculate the comprehensive security risk score, and dynamically divide the security level according to the score.

[0007] Match or generate corresponding smart contract templates according to the data asset security level, set circulation permissions and complete the on-chain binding of asset fingerprints and smart contract addresses, authenticate the identities of blockchain nodes and initialize security attributes, record node behaviors and dynamically adjust the node reputation scores according to historical operations, and map node access permissions in real time.

[0008] After receiving a circulation request, perform on-chain dynamic security verification, calculate a compliance score by comprehensively considering the qualification of the requesting node, the current state of the asset, and the matching of the circulation intention, make a decision on the circulation permission, call the smart contract interface to execute the circulation actions step by step and generate an on-chain circulation trajectory record, and detect the circulation situation in real time.

[0009] As a preferred solution of the method for trusted circulation of data assets based on dynamic evaluation of smart contracts according to the present invention, wherein: the extraction of the basic attributes of the data assets includes extracting data types, sensitivity identifiers, source node IDs, and historical circulation risk records, wherein the sensitivity identifier determines whether it involves privacy information based on data content analysis, and the historical circulation risk record obtains abnormal circulation events by querying the on-chain circulation trajectory chain.

[0010] As a preferred solution of the method for trusted circulation of data assets based on dynamic evaluation of smart contracts according to the present invention, wherein: calculating the comprehensive security risk score and dynamically dividing the security level according to the score includes calculating the comprehensive security risk score by a multi-factor weighted fusion method, and dynamically dividing it into four security levels: public data, restricted data, sensitive data, and confidential data according to the score range, and different security levels correspond to different smart contract templates.

[0011] As a preferred solution of the data asset trusted circulation method based on intelligent contract dynamic evaluation according to the present invention, wherein: matching or generating a corresponding intelligent contract template according to the data asset security level includes setting a minimum credit value threshold for the circulation request node, defining a node whitelist access mechanism, defining the scope of circulation use and setting an access time window. At the same time, rules are embedded in the intelligent contract. If the node violates the use restriction or the access time window exceeds the limit during access, the system automatically triggers the circulation freeze logic and writes the violation event into the on-chain audit chain.

[0012] As a preferred solution of the data asset trusted circulation method based on intelligent contract dynamic evaluation according to the present invention, wherein: the node identity authentication and security attribute initialization include the qualification authentication of the institution to which the node belongs, the real-name authentication of the operator and the authentication of the device trusted module. The initial node credit value is scored according to the authentication level. The system dynamically adjusts the node credit value according to the compliance rate, the violation frequency and the circulation anomaly record during the node circulation behavior. When the node credit value drops below the system-set threshold, the access permission is automatically tightened, and only access to low-security-level data is allowed. And the status change is synchronously broadcast to all network nodes.

[0013] As a preferred solution of the data asset trusted circulation method based on intelligent contract dynamic evaluation according to the present invention, wherein: the on-chain dynamic security verification includes the verification of the credit value of the request node, the verification of the status of the target data asset and the verification of the matching between the circulation intention and the asset use policy. The system calculates a comprehensive compliance score according to the verification results and decides on the circulation permission according to the preset permission threshold. At the same time, after the circulation is approved, the intelligent contract interface is called according to the action plan to perform transfer, authorization and archiving operations, and an on-chain circulation track record is generated.

[0014] As a preferred solution of the data asset trusted circulation method based on intelligent contract dynamic evaluation according to the present invention, wherein: the real-time detection of the circulation situation includes out-of-scope access, use violation, frequency-abnormal access and asset fingerprint tampering. The system dynamically adjusts the risk level according to the type and frequency of the anomaly, and executes a hierarchical response strategy for different risk levels. Low-risk events trigger warnings and observations, medium-risk events trigger permission freezes and audits, and high-risk events trigger asset recovery or destruction. At the same time, all abnormal events and processing processes are written into the on-chain abnormal event chain to form an audit chain.

[0015] Another object of the present invention is to provide a data asset trusted circulation system based on intelligent contract dynamic evaluation, which can solve the problems of static solidification of data security classification and inability to dynamically adjust security policies according to real-time risks of assets in the current blockchain data asset circulation management by introducing a dynamic security risk assessment and grading mechanism.

[0016] As a preferred solution of the data asset trusted circulation system based on intelligent contract dynamic evaluation of the present invention, it includes: a data asset security evaluation module, intelligent contract configuration, and a circulation execution monitoring module.

[0017] The data asset security evaluation module is used to extract the basic attributes of multiple received data assets, extract data types, sensitivity identification, and source node authentication level information. Based on a security risk assessment model, calculate a comprehensive security risk score, and dynamically divide the security level according to the score.

[0018] The intelligent contract configuration is used to match or generate corresponding intelligent contract templates according to the data asset security level, set circulation permissions and complete the on-chain binding of asset fingerprints and intelligent contract addresses, authenticate the identities of blockchain nodes and initialize security attributes, record node behaviors and dynamically adjust node reputation scores according to historical operations, and map node access permissions in real time.

[0019] The circulation execution monitoring module is used to perform on-chain dynamic security verification after receiving a circulation request, calculate a compliance score by comprehensively considering the request node's qualifications, the current state of the asset, and the matching situation of the circulation intention, make a decision on circulation permission, call the intelligent contract interface to execute the circulation actions step by step and generate an on-chain circulation trajectory record, and detect the circulation situation in real time.

[0020] A computer device includes a memory and a processor. The memory stores a computer program, and when the processor executes the computer program, it implements the steps of the data asset trusted circulation method based on intelligent contract dynamic evaluation.

[0021] A computer-readable storage medium stores a computer program thereon. When the computer program is executed by a processor, it implements the steps of the data asset trusted circulation method based on intelligent contract dynamic evaluation.

[0022] The beneficial effects of the present invention: The data asset trusted circulation method based on intelligent contract dynamic evaluation provided by the present invention realizes the precise correspondence between the data asset protection strategy and the actual risk status by dynamically evaluating the security risk of data assets and dividing the security level in real time, improving the security and flexibility in the circulation process. By setting fine-grained circulation permissions based on asset level, node reputation, and usage restrictions in the intelligent contract, it ensures that data assets strictly follow customized security policies when circulating between different nodes, preventing permission overstepping and data abuse. By scoring the historical behaviors of blockchain nodes in real time and dynamically adjusting the range of assets they can access, it effectively restricts the access of low-reputation nodes to highly sensitive data and enhances the overall trusted protection ability of the system. The present invention achieves better effects in terms of security, flexibility, and credibility. Description of the Drawings

[0023] To more clearly illustrate the technical solutions of the embodiments of the present invention, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0024] Figure 1 This is the overall flowchart of a data asset trusted circulation method based on dynamic evaluation of smart contracts provided by the first embodiment of the present invention. Specific Embodiments

[0025] To make the above objects, features, and advantages of the present invention more obvious and understandable, the following will provide a detailed description of the specific embodiments of the present invention in conjunction with the drawings of the specification. Obviously, the described embodiments are some embodiments of the present invention, rather than all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the scope of protection of the present invention.

[0026] Embodiment 1, referring to Figure 1 , which is an embodiment of the present invention, provides a data asset trusted circulation method based on dynamic evaluation of smart contracts, including: S1: Extract the basic attributes of multiple received data assets, including data type, sensitivity label, and source node authentication level information. Based on the security risk assessment model, calculate the comprehensive security risk score, and dynamically divide the security level according to the score.

[0027] Furthermore, the extraction of the basic attributes of data assets includes extracting data type, sensitivity label, source node ID, and historical circulation risk records. Among them, the sensitivity label determines whether it involves privacy information based on data content analysis, and the historical circulation risk records obtain abnormal circulation events by querying the on-chain circulation track chain.

[0028] The system receives a set of data assets to be managed , and for each data asset , extract data type, sensitivity label, source node ID, and historical circulation risk records.

[0029] It should be noted that calculating the comprehensive security risk score and dynamically dividing the security level according to the score includes calculating the comprehensive security risk score through a multi-factor weighted fusion method, and dynamically dividing it into four security levels: public data, restricted data, sensitive data, and confidential data according to the score range. Different security levels correspond to different smart contract templates.

[0030] The system calculates the comprehensive security risk score of each data asset based on a preset security risk assessment function and combines the attribute values, expressed as: , which is expressed as:

[0031] Among them, is the comprehensive security risk score of the data asset, is the sensitivity coefficient of the data asset, is the credibility coefficient of the data asset source, is the integrity protection requirement coefficient of the data asset, is the expected circulation frequency factor of the data asset, is the applicable regulation compliance strength factor of the data asset, is the sensitivity item adjustment coefficient, is the credibility item adjustment coefficient, is the integrity item adjustment coefficient, is the circulation frequency adjustment coefficient, is the compliance adjustment coefficient.

[0032] According to the comprehensive security risk score and combined with the preset score range, each data asset is assigned to different security levels, including level-1 public assets, level-2 restricted assets, level-3 sensitive assets, and level-4 confidential assets.

[0033] S2: Match or generate the corresponding smart contract template according to the data asset security level, set the circulation permission and complete the on-chain binding of the asset fingerprint and the smart contract address, authenticate the identity of the blockchain nodes and initialize the security attributes, record the node behaviors and dynamically adjust the node reputation score according to the historical operations, and map the node access permissions in real time.

[0034] Furthermore, matching or generating the corresponding smart contract template according to the data asset security level includes setting a minimum reputation value threshold for the circulation request node, limiting the node whitelist access mechanism, limiting the scope of circulation use and setting the access time window. At the same time, the smart contract embeds rules. If the node violates the use limit or the access time window exceeds the limit during access, the system automatically triggers the circulation freezing logic and writes the violation event into the on-chain audit chain.

[0035] The system sets a basic contract template for each security level according to the level label of the data asset. The template clearly defines the executable circulation action types (such as transfer, authorization, archiving, destruction), the minimum reputation level requirements for the circulation participating nodes, the use limitation rules, and the access time window parameters. Preferably, for level-3 sensitive assets, the system forcibly limits the node whitelist mechanism, only allowing nodes confirmed through specific authentication processes to access, and at the same time limiting its circulation use to the specified purpose and not allowing secondary forwarding or processing and utilization.

[0036] Automatic anomaly detection rules are embedded within the smart contract. When a node violates the usage scope or the access time window is exceeded during actual access, the system immediately triggers the circulation freeze logic, interrupts the current node's access permission to the asset, and simultaneously writes the violation behavior into the on-chain audit chain in the form of an immutable event record to support subsequent liability determination and audit traceability.

[0037] It should be noted that node identity authentication and security attribute initialization include the qualification authentication of the institution to which the node belongs, the real-name authentication of the operator, and the authentication of the trusted module of the device. The initial reputation value of the node is scored according to the authentication level. The system dynamically adjusts the node's reputation value according to the compliance rate, violation frequency, and circulation anomaly records during the node's circulation behavior. When the node's reputation value drops below the system-set threshold, the access permission is automatically tightened, and only access to low-security-level data is allowed. Moreover, the status change is synchronously broadcast to all nodes in the network.

[0038] It should also be noted that the node identity authentication and security attribute initialization module mainly includes three aspects: the qualification authentication of the institution to which the node belongs, the real-name authentication of the node operator, and the authentication of the trusted module of the node's used device. Specifically, when a node accesses the system, it needs to provide organizational qualification certificates, operator identity verification materials, and device-level trusted module authentication. The system comprehensively assigns an initial reputation value to the node based on the above three authentication levels. The initial reputation value is represented by a standardized score with a value range of [0, 1], where the higher the authentication level, the higher the initial reputation value.

[0039] During the subsequent actual circulation behavior of the node, the system dynamically tracks the node's operation behavior, including indicators such as successful compliance circulation records, violation circulation records, and high-frequency abnormal behaviors, and dynamically adjusts the reputation value according to preset rules, which is expressed as:

[0040] Among them, is the reputation value of the node at time , is the reputation value of the node at time [[ID=2X]] the reputation value of the node, is the time the number of new compliance operations of the node, is the time the number of new violation behaviors of the node, is the compliance integral gain coefficient, is the violation penalty amplification coefficient, is the weight of the violation rate impact, ]]is the violation rate sensitivity adjustment coefficient, is the time the cumulative violation rate of the node, is the weight of the activity sine wave fluctuation, is the access frequency period adjustment coefficient, is the access behavior frequency index of the node at time .

[0041] When the node reputation value drops below the system - preset security threshold, the system automatically tightens the node access permission, only allowing it to access low - security - level data assets (level one or level two), and synchronizes the node reputation level change status to all nodes through the on - chain broadcast mechanism to ensure the synchronous execution of the network - wide security policy.

[0042] Preferably, the data asset circulation request and the on - chain dynamic security verification process include the following steps: First, the requesting node needs to submit a standardized circulation request data packet, including the requesting node ID, the target data asset ID, the request operation type, the target using node ID, and the circulation purpose description. After receiving the circulation request, the system sequentially performs the following verification processes: (1) Compare and verify based on the current reputation value of the requesting node with the minimum reputation threshold set for the target asset level.

[0043] (2) Verify whether the target data asset is currently in an in - circulation - prohibited state such as frozen, archived, or to be destroyed.

[0044] (3) Compare whether the requested purpose description conforms to the preset purpose scope and circulation restriction conditions of the data asset smart contract. Further, based on the above verification results, the system comprehensively calculates the security compliance score of this circulation request , expressed as:

[0045] where, is the comprehensive security compliance score of the circulation request, is the standardized value of the current reputation score of the requesting node, is the current status verification score of the target asset, is the purpose matching degree score, is the node reputation adjustment parameter, is the asset status score amplification parameter, is the purpose matching degree amplification parameter, is the node negative reputation regulation intensity parameter, is the historical violation influence index parameter, is the cumulative historical violation times of the requesting node.

[0046] If the score is higher than the system - set circulation approval threshold , the circulation request passes and enters the execution stage. If it is lower than the threshold, the request is rejected and an abnormal audit event is recorded.

[0047] S3: After receiving the circulation request, perform on-chain dynamic security verification, calculate the compliance score by comprehensively considering the qualification of the requesting node, the current status of the asset, and the matching situation of the circulation intention, make a decision on the circulation permission, call the smart contract interface to execute the circulation actions step by step, and generate an on-chain circulation track record, and detect the circulation situation in real time.

[0048] Furthermore, the on-chain dynamic security verification includes the verification of the reputation value of the requesting node, the verification of the status of the target data asset, and the verification of the matching between the circulation intention and the asset usage policy. The system calculates the comprehensive compliance score based on the verification results, decides the circulation permission according to the preset permission threshold. At the same time, after the circulation is approved, the system calls the smart contract interface according to the action plan, executes transfer, authorization, and archiving operations, and generates an on-chain circulation track record.

[0049] After the data asset circulation request is passed, a controlled circulation execution mechanism based on compliance decisions is adopted. Specifically, the system dynamically generates a circulation action plan according to the action type and action parameters defined in the smart contract.

[0050] Preferably, for asset control transfer operations, the system synchronously changes the asset holder identifier on the blockchain and updates the access control list. For authorization-only operations, the system records information such as the authorization scope, usage restrictions, and access time limits in the asset control table without changing the asset ownership relationship. For archiving or destruction operations, the system marks the asset as "archived" or "destruction pending" and prohibits any subsequent access operations. At the same time, after each circulation action is executed, the system generates a circulation event log through a standardized on-chain recording mechanism. The content includes the initiating node ID, the target node ID, the asset hash fingerprint, the circulation action type, the execution timestamp, and the operation confirmation node signature. All events are written into the blockchain circulation track chain in an immutable form to form a complete life cycle track of the asset.

[0051] It should be noted that real-time detection of the circulation situation includes out-of-scope access, usage violations, abnormal frequency of access, and asset fingerprint tampering. The system dynamically adjusts the risk level according to the type and frequency of anomalies, and executes a hierarchical response strategy for different risk levels. Low-risk events trigger warnings and observations, medium-risk events trigger permission freezes and audits, high-risk events trigger asset recovery or destruction. At the same time, all abnormal events and processing procedures are written into the on-chain abnormal event chain to form an audit chain.

[0052] Furthermore, after the asset circulation is completed, the system starts an on-chain real-time status monitoring program to perform continuous access behavior monitoring, usage behavior analysis, and permission change auditing on the circulated data assets.

[0053] It should be noted that real-time status monitoring covers consistency detection between node access behavior and authorized use, comparison of access frequency with the set access frequency upper limit, and data asset fingerprint integrity verification to prevent tampering of asset content.

[0054] Preferably, the system dynamically adjusts the abnormal event recognition threshold based on the set abnormal detection sensitivity parameters to match different security protection requirements at different security levels, which is expressed as:

[0055] in, For the moment The anomaly detection sensitivity, For the moment Sensitivity, For the moment The frequency of abnormal events per unit time, For the moment Quantitative index of sudden abnormal amplitude, For the moment The cumulative risk value of the node group, Adjust the gain coefficient for abnormal frequency, is the sudden abnormal fluctuation response coefficient, is the burst fluctuation period modulation factor, is the parameter that affects the sensitivity suppression by risk accumulation.

[0056] When the system detects abnormal access behavior, such as excessive access, unauthorized use, or data tampering, it handles the abnormal behavior according to its severity. Typical handling levels include: mild (warning and logging), moderate (freezing access rights and triggering an audit process), and severe (revoking asset permissions and forcibly destroying them). After each abnormal event is handled, the system generates an abnormal audit record with details of the abnormal behavior, handling measures, and asset-related information. This record is then written to the on-chain abnormal event log, forming a bidirectional link with the original asset circulation trajectory chain.

[0057] Example 2 is the second embodiment of the present invention, which is different from the previous embodiment in that: If a function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or a part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks, or optical discs.

[0058] The logic and / or steps represented in the flowchart or described in other ways herein, for example, can be considered as a definite sequence list of executable instructions for implementing logical functions. It can be specifically implemented in any computer-readable medium for use by an instruction execution system, apparatus, or device (such as a computer-based system, a system including a processor, or other systems that can fetch instructions from the instruction execution system, apparatus, or device and execute the instructions), or in combination with these instruction execution systems, apparatuses, or devices. For the purposes of this specification, a "computer-readable medium" can be any device that can contain, store, communicate, propagate, or transmit a program for use by or in combination with an instruction execution system, apparatus, or device.

[0059] More specific examples (non-exhaustive list) of computer-readable media include the following: an electrical connection part with one or more wirings (electronic device), a portable computer disk cartridge (magnetic device), random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber device, and portable compact disc read-only memory (CDROM). Additionally, a computer-readable medium can even be paper or other suitable media on which a program can be printed, because the program can be obtained electronically, for example, by optically scanning the paper or other media, then editing, interpreting, or otherwise processing it as appropriate, and then storing it in a computer memory.

[0060] It should be understood that various parts of the present invention can be implemented by hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, any one or a combination of the following techniques well known in the art can be used: discrete logic circuits with logic gate circuits for implementing logic functions on data signals, application specific integrated circuits with appropriate combinational logic gate circuits, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.

[0061] Embodiment 3 is the third embodiment of the present invention. This embodiment provides a system for a trusted circulation method of data assets based on dynamic evaluation of smart contracts, including a data asset security evaluation module, smart contract configuration, and a circulation execution monitoring module

[0062] Among them, the data asset security evaluation module is used to extract the basic attributes of multiple received data assets, extract data types, sensitivity identification, and source node authentication level information. Based on a security risk assessment model, calculate the comprehensive security risk score, and dynamically divide the security level according to the score. The smart contract configuration is used to match or generate corresponding smart contract templates according to the data asset security level, set circulation permissions and complete the on-chain binding of the asset fingerprint and the smart contract address, authenticate the identity of blockchain nodes and initialize security attributes, record node behaviors and dynamically adjust the node reputation score according to historical operations, and map node access permissions in real time. The circulation execution monitoring module is used to perform on-chain dynamic security verification after receiving a circulation request, calculate a compliance score by comprehensively considering the qualification of the requesting node, the current state of the asset, and the matching situation of the circulation intention, make a decision on circulation permission, call the smart contract interface to execute the circulation action step by step and generate an on-chain circulation track record, and detect the circulation situation in real time.

[0063] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit them. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be modified or equivalently replaced without departing from the spirit and scope of the technical solutions of the present invention, and they should all be covered within the scope of the claims of the present invention.

Claims

1. A method for trusted circulation of data assets based on dynamic evaluation of smart contracts, characterized in that, include: Extract basic attributes of multiple received data assets, including data type, sensitivity identifier, and source node authentication level information; Based on the security risk assessment model, the comprehensive security risk score is calculated and the security level is dynamically divided according to the score; Match or generate corresponding smart contract templates based on the data asset security level, set circulation permissions and complete on-chain binding of asset fingerprints and smart contract addresses, authenticate blockchain nodes and initialize security attributes, record node behavior and dynamically adjust node reputation scores based on historical operations, and map node access rights in real time; After receiving the circulation request, dynamic security verification is performed on the chain, and the compliance score is calculated based on the comprehensive request node qualifications, current asset status and circulation intention matching. The circulation permission is decided, and the smart contract interface is called to execute the circulation action step by step and generate on-chain circulation track records to detect the circulation status in real time.

2. The method for trusted circulation of data assets based on dynamic evaluation of smart contracts according to claim 1, characterized in that: The extraction of basic attributes of data assets includes extracting data type, sensitivity identification, source node ID and historical circulation risk records. The sensitivity identification is based on data content analysis to determine whether privacy information is involved, and the historical circulation risk records are obtained by querying the on-chain circulation trajectory chain to obtain abnormal circulation events.

3. The data asset trusted circulation method based on dynamic evaluation of smart contract according to claim 2, wherein: The calculation of the comprehensive security risk score and the dynamic division of security levels according to the score include calculating the comprehensive security risk score through a multi-factor weighted fusion method, and dynamically dividing it into four security levels: public data, restricted data, sensitive data, and confidential data according to the score range. Different security levels correspond to different smart contract templates.

4. The method for trusted circulation of data assets based on dynamic evaluation of smart contracts according to claim 3, wherein: The matching or generation of corresponding smart contract templates based on the data asset security level includes setting a minimum credibility threshold for circulation request nodes, limiting the node whitelist access mechanism, limiting the scope of circulation use and setting an access time window. At the same time, the smart contract has embedded rules. If the node violates the use restriction or exceeds the access time window during access, the system automatically triggers the circulation freeze logic and writes the violation event into the on-chain audit chain.

5. The method for trusted circulation of data assets based on dynamic evaluation of smart contracts according to claim 4, wherein: The node identity authentication and security attribute initialization include the qualification authentication of the node's institution, the real-name authentication of the operator and the authentication of the device's trusted module. The initial node reputation value is assigned according to the authentication level. The system dynamically adjusts the node reputation value according to the compliance rate, violation frequency and circulation abnormality records during the node circulation behavior. When the node reputation value falls below the threshold set by the system, the access rights are automatically tightened, and only low-security level data is allowed to be accessed, and the status change is synchronously broadcast to all nodes in the network.

6. The method for trusted circulation of data assets based on dynamic evaluation of smart contracts according to claim 5, characterized in that: The on-chain dynamic security verification includes verification of the requesting node's reputation value, verification of the target data asset status, and verification of the matching of circulation intention and asset usage strategy. The system calculates the comprehensive compliance score based on the verification results and determines the circulation permission based on the preset permission threshold. At the same time, after the circulation is approved, the smart contract interface is called according to the action plan to perform transfer, authorization, and archiving operations to generate an on-chain circulation track record.

7. The method for trusted circulation of data assets based on dynamic evaluation of smart contracts according to claim 6, characterized in that: The real-time detection of the circulation situation includes out-of-range access, misuse, abnormal frequency of access, and asset fingerprint tampering. The system dynamically adjusts the risk level according to the type and frequency of anomalies, and implements a hierarchical response strategy for different risk levels. Low-risk events trigger warnings and observations, medium-risk events trigger permission freezes and audits, high-risk events trigger asset recovery or destruction. At the same time, all abnormal events and processing procedures are written into the on-chain abnormal event chain to form an audit chain.

8. A system adopting the data asset trusted circulation method based on dynamic evaluation of smart contracts as described in any one of claims 1 to 7, characterized in that: It includes a data asset security assessment module, smart contract configuration, and a circulation execution monitoring module; The data asset security assessment module is used to extract the basic attributes of multiple received data assets, and extract information such as data type, sensitivity identifier, and source node authentication level information; Based on the security risk assessment model, calculate the comprehensive security risk score, and dynamically divide the security level according to the score; The smart contract configuration is used to match or generate corresponding smart contract templates according to the data asset security level, set circulation permissions, complete the on-chain binding of asset fingerprints and smart contract addresses, authenticate the identity of blockchain nodes and initialize security attributes, record node behaviors, and dynamically adjust the node reputation score according to historical operations, and map node access permissions in real time; The circulation execution monitoring module is used to perform on-chain dynamic security verification after receiving a circulation request, calculate the compliance score by comprehensively considering the qualification of the requesting node, the current state of the asset, and the matching situation of the circulation intention, make a decision on circulation permission, call the smart contract interface to execute the circulation action step by step and generate an on-chain circulation track record, and detect the circulation situation in real time.

9. A computer device, comprising a memory and a processor, the memory storing a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method for trusted circulation of data assets based on dynamic evaluation of smart contracts according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the steps of the method for trusted circulation of data assets based on dynamic evaluation of smart contracts according to any one of claims 1 to 7.

Images