A mesenchymal stem cell safety inspection method and system based on a blockchain
By using a blockchain-based security verification method, the problems of data tampering and loss in traditional mesenchymal stem cell testing have been solved, achieving data security, integrity, and traceability, and improving processing efficiency and accuracy.
Patent Information
- Application Number
- CN202510997757.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-19
- Publication Date
- 2026-01-02
- Estimated Expiration
- 2045-07-19
AI Technical Summary
Traditional methods for testing the safety of mesenchymal stem cells suffer from problems such as data tampering and loss, low processing efficiency, and difficulty in traceability and sharing.
A blockchain-based security verification method is adopted. By acquiring core detection data and environmental parameters of stem cells, a structured data object is established, the data is formatted and embedded with timestamps and device ID metadata, data status feature evaluation is performed, encryption strategies are configured, encryption is performed using multi-party secure computation and distributed key management, zero-knowledge proofs are generated, and the encrypted information is finally uploaded to the blockchain for security verification through a dedicated perturbation control contract.
This ensures the security, integrity, and traceability of stem cell data, improves the efficiency and accuracy of data processing, and enables secure data storage and sharing.
Smart Images

Figure CN120750600B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of data processing, and in particular to a mesenchymal stem cell safety inspection method and system based on blockchain. BACKGROUND
[0002] With the rapid development of biotechnology, mesenchymal stem cells are increasingly widely used in medical, scientific research and other fields. Mesenchymal stem cells have self-renewal and multi-directional differentiation potential, and can differentiate into various types of cells, providing a new way for disease treatment, tissue repair, etc. However, the safety and effectiveness of mesenchymal stem cells are the key to their application, so it is crucial to conduct strict safety inspection on mesenchymal stem cells.
[0003] The traditional mesenchymal stem cell safety inspection method mainly relies on laboratory testing and manual recording, which has many limitations. Laboratory test data is easy to tamper with or lose, which makes it impossible to guarantee the authenticity and integrity of the data. Secondly, the manual recording method is inefficient and prone to errors, and is not conducive to data tracing and sharing. In addition, with the continuous deepening of mesenchymal stem cell research and application, the amount of data has increased dramatically, and the traditional inspection method has been unable to meet the data processing and security management needs in the big data environment.
[0004] In order to overcome the above limitations and improve the efficiency and accuracy of mesenchymal stem cell safety inspection, it is necessary to introduce advanced technical means. Blockchain technology, as a distributed database technology, has the characteristics of decentralization, tamper resistance, traceability, etc., providing a new solution for data security. Through blockchain technology, mesenchymal stem cell test data can be stored and encrypted in a distributed manner, ensuring the authenticity and integrity of the data. At the same time, the smart contract function of the blockchain can also realize automated data management and access control, improving data processing efficiency. However, directly applying blockchain technology to the field of mesenchymal stem cell safety inspection also faces some challenges. For example, how to effectively realize the formatting and standardization of data, how to ensure the security and privacy of data, how to realize the legal sharing and utilization of data, and how to timely discover and handle potential security risks, etc. SUMMARY
[0005] The present application provides a mesenchymal stem cell safety inspection method and system based on blockchain to solve the technical problems of tampering and loss of mesenchymal stem cell safety inspection data in the prior art, and low processing efficiency, difficulty in tracing and sharing.
[0006] The technical solution of the present application to solve the above technical problems is as follows:
[0007] In a first aspect, the present application provides a mesenchymal stem cell safety inspection method based on a blockchain, which comprises: obtaining core detection data and environmental parameters of stem cells, embedding a timestamp and device ID metadata after data formatting of the core detection data and environmental parameters, and establishing a structured data object; performing data state feature evaluation of the structured data object, and configuring an encryption strategy according to the data state feature evaluation result and a disturbance strategy; encrypting the structured data object based on the encryption strategy by using multi-party secure calculation, and completing the encryption by a distributed key management mechanism; storing encryption key fragments in multiple trust nodes; generating zero-knowledge proof for the encrypted ciphertext and encryption parameters, recording the disturbance strategy and encryption parameters as metadata, and managing them through a special disturbance control contract; and uploading the encrypted ciphertext, zero-knowledge proof and special disturbance control contract to a blockchain according to a preset block data structure for safety inspection management.
[0008] In a second aspect, the present application provides a mesenchymal stem cell safety inspection system based on a blockchain, which comprises: a data acquisition module for obtaining core detection data and environmental parameters of stem cells, embedding a timestamp and device ID metadata after data formatting of the core detection data and environmental parameters, and establishing a structured data object; an encryption configuration module for performing data state feature evaluation of the structured data object, and configuring an encryption strategy according to the data state feature evaluation result and a disturbance strategy; a data encryption module for encrypting the structured data object based on the encryption strategy by using multi-party secure calculation, and completing the encryption by a distributed key management mechanism; an encryption key fragment is stored in multiple trust nodes; a contract management module for generating zero-knowledge proof for the encrypted ciphertext and encryption parameters, recording the disturbance strategy and encryption parameters as metadata, and managing them through a special disturbance control contract; and a safety management module for uploading the encrypted ciphertext, zero-knowledge proof and special disturbance control contract to a blockchain according to a preset block data structure for safety inspection management.
[0009] The present application has the following beneficial effects: by obtaining core detection data and environmental parameters of stem cells, establishing a structured data object, configuring an encryption strategy according to data state feature evaluation and a disturbance strategy, encrypting by using multi-party secure calculation and distributed key management, generating zero-knowledge proof and managing metadata, and finally uploading encrypted information and contracts to a blockchain for safety inspection management, the safety, integrity and traceability of stem cell data are ensured, and the efficiency and accuracy of data processing are improved. BRIEF DESCRIPTION OF DRAWINGS
[0010] Figure 1 A flowchart of a mesenchymal stem cell safety inspection method based on a blockchain provided by the present application is shown.
[0011] Figure 2A structural schematic diagram of a mesenchymal stem cell safety inspection system based on a blockchain provided by the application.
[0012] Explanation of reference signs: data acquisition module 11, encryption configuration module 12, data encryption module 13, contract management module 14, and security management module 15. DETAILED DESCRIPTION
[0013] The technical solutions in the embodiments of the application will be clearly and completely described below with reference to the drawings in the embodiments of the application. Obviously, the described embodiments are only part of the embodiments of the application, rather than all the embodiments of the application. Based on the embodiments in the application, all other embodiments obtained by a person skilled in the art without creative work fall within the protection scope of the application.
[0014] In the description of the application, the terms "first", "second" are used only for the purpose of description, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first", "second" can explicitly or implicitly include one or more of the features. In the description of the application, the meaning of "multiple" is two or more, unless otherwise specifically limited.
[0015] In the description of the application, the term "for example" is used to mean "serving as an example, instance, or illustration". Any embodiment described as "for example" in the application is not necessarily to be construed as more preferred or having greater advantages than other embodiments. The following description is given so that any person skilled in the art can implement and use the application. In the following description, details are listed for the purpose of explanation. It should be understood that a person skilled in the art can realize the application without using these specific details. In other examples, well-known structures and processes will not be described in detail to avoid unnecessary details making the description of the application obscure. Therefore, the application is not intended to be limited to the shown embodiments, but is consistent with the broadest scope of principles and features disclosed.
[0016] Embodiment one:
[0017] As shown in the figure, the embodiment of the application provides a mesenchymal stem cell safety inspection method based on a blockchain, which comprises: Figure 1 S10: Obtain core detection data and environmental parameters of stem cells, embed time stamp and device ID metadata after data formatting of the core detection data and environmental parameters, and establish a structured data object.
[0018]
[0019] Exemplary, core testing data of stem cells and environmental parameters are acquired. The core testing data covers key information such as stem cell viability index, differentiation capacity assessment, gene expression level, etc. Specifically, stem cell viability index is used to assess the survival rate, proliferation capacity and metabolic state of stem cells, and the detection test is as shown in Table 1:
[0020] Table 1: Stem cell viability test table
[0021]
[0022]
[0023]
[0024]
[0025] Differentiation capacity assessment refers to the evaluation of multi-directional differentiation potential through induction differentiation or marker detection, such as mesenchymal stem cells need to evaluate osteogenic, adipogenic, chondrogenic differentiation, and the specific evaluation data is as shown in Table 2:
[0026] Table 2: Differentiation capacity assessment experimental data table
[0027]
[0028]
[0029] Gene expression level quantifies the specific gene expression of stem cells through molecular biology technology, and the detection experimental data is as shown in Table 3:
[0030] Table 3: Gene expression level experimental data table
[0031]
[0032]
[0033] These data directly reflect the intrinsic characteristics and quality status of stem cells; the environmental parameters include culture temperature, humidity, gas composition (such as oxygen and carbon dioxide concentration), etc., which play a crucial role in the growth and maintenance of stem cells. After obtaining these data, data formatting is performed to convert the data uniformly into a specific format, such as JSON or XML format, to ensure data consistency and readability. Then, time stamp and device ID metadata are embedded, with the time stamp recording the specific time of data acquisition and the device ID specifying the data source from which the detection device, which provides an important basis for data tracing and verification. Through these steps, a structured data object is finally established, which contains core detection data, environmental parameters, time stamp and device ID, for example, in a stem cell culture experiment, the activity detection data of a batch of stem cells in a specific incubator (device ID XYZ123) on May 10, 2024, at 14:00 is 85%, the culture environment temperature is 37℃, the oxygen concentration in the gas composition is 20%, and the carbon dioxide concentration is 5%, etc. After formatting these data and embedding the corresponding metadata, a complete structured data object is formed, which facilitates subsequent data storage, analysis and sharing.
[0034] S20: Perform data state feature evaluation of structured data object, and configure encryption strategy with data state feature evaluation result and disturbance strategy.
[0035] Further, in the execution of the data processing flow, data state feature evaluation is carried out for the established structured data object. Data state feature evaluation focuses on the integrity, accuracy, consistency and timeliness of data, etc. The integrity considers whether the data is missing key fields, for example, in a structured data object containing patient medical records, if the key diagnosis result field is missing, its integrity is problematic; the accuracy assesses whether the data value is true and reliable, such as the patient's age data appears obviously unreasonable value, the accuracy is questionable; the consistency checks whether the data remains uniform in different records or different time points, such as the blood type information of the same patient is inconsistent in different records; the timeliness judges whether the data is valid within the specified time range, like some detection data exceeds the specified validity period, the timeliness is insufficient.
[0036] After the data state feature evaluation is completed, an encryption strategy is configured in combination with a perturbation strategy. The perturbation strategy is to add some controllable interference factors to the data to enhance the security of the data, such as slightly adjusting the numerical value or replacing the character of a sensitive data field. Based on the data state feature evaluation result, if the data integrity is good, the accuracy is high, the consistency is strong, and the timeliness meets the requirements, but considering the high sensitivity of the data, a relatively complex encryption strategy can be configured, such as using an advanced encryption standard (AES) algorithm in combination with a long key length; if the data state feature evaluation shows that the data has certain problems, such as slightly insufficient integrity, a relatively simple encryption strategy can be selected in combination with a specific perturbation strategy, such as marking and perturbing part of the missing field before encryption using a symmetric encryption algorithm. For example, in a structured data object of a financial transaction, if the evaluation finds that the overall data quality is high, but sensitive information such as user passwords is involved, an encryption strategy containing multiple encryption steps and random perturbation factor injection is configured to ensure the security of the data during transmission and storage.
[0037] S30: encrypting the structured data object based on the encryption strategy using multi-party secure computation, the encryption being completed through a distributed key management mechanism, and the encryption key fragments being stored in multiple trusted nodes.
[0038] Preferably, when processing sensitive structured data objects, a multi-party secure computation technology is used to perform encryption operations based on a pre-configured encryption strategy. The multi-party secure computation allows multiple participants to jointly complete the computation task on the data without revealing their private data, which is mainly used to implement a secure encryption process. The encryption process uses a distributed key management mechanism to ensure the security of the key. The core of the distributed key management mechanism is to fragment the encryption key, and then store these key fragments in multiple trusted nodes.
[0039] For example, in a scenario involving medical data sharing, multiple medical institutions need to share structured data objects of patients, but also need to ensure data privacy. First, the specific method and parameters of encryption are determined according to the formulated encryption strategy. Then, using multi-party secure computation technology, each participant works together to perform encryption operations on the data through complex algorithms and protocols without exposing their own data. In the encryption process, the distributed key management mechanism plays a role in dividing the encryption key into multiple parts, such as dividing the key into 5 parts. Then, these key fragments are stored in 5 different trusted nodes, which can be secure servers within different medical institutions or professional third-party secure storage institutions. Only when certain conditions are met, such as obtaining authorization of a sufficient number of key fragments, can the complete key be reassembled to decrypt the data, thereby realizing secure data sharing among multiple parties while ensuring secure encryption of the data.
[0040] S40: Generate zero-knowledge proof for the encryption ciphertext and encryption parameters, record the perturbation strategy and encryption parameters as metadata, and manage through a special perturbation control contract.
[0041] After completing the encryption of the structured data object, the next step is to generate zero-knowledge proof and record and manage metadata. Zero-knowledge proof is a cryptographic technique that allows one party (prover) to prove to another party (verifier) that a statement is true without revealing any additional information beyond the fact that the statement is true. Here, zero-knowledge proof is generated for the encryption ciphertext and encryption parameters, meaning that the correctness and compliance of the encryption process can be proven to the relevant parties without revealing the specific content of the encryption ciphertext and encryption parameters. For example, in a financial transaction system, after encrypting the transaction data, generating zero-knowledge proof can prove to the regulatory agency that the transaction data has indeed been encrypted according to the specified encryption parameters, but the regulatory agency cannot obtain the specific content of the transaction data.
[0042] At the same time, the perturbation strategy and encryption parameters are recorded as metadata. The perturbation strategy is a method of disturbing the data before encryption, and the encryption parameters are various parameter settings used in the encryption process. Recording these metadata helps subsequent auditing and tracing of the encryption process. For example, in a medical research project, the patient's genetic data is encrypted, and the perturbation strategy can be to randomly replace part of the genetic sequence, and the encryption parameters include encryption algorithm type, key length, etc. Recording these as metadata facilitates researchers' understanding of the data processing process.
[0043] Finally, the metadata and encryption process are managed through a special perturbation control contract. The special perturbation control contract is a smart contract based on blockchain technology, which specifies the use rules, permission management, etc. of the perturbation strategy and encryption parameters in the form of code. For example, in a supply chain finance scenario involving sensitive data exchange among multiple participants, the special perturbation control contract can specify that only specific authorized parties can access and modify the perturbation strategy, ensuring the security and controllability of the encryption process. When it is necessary to adjust the perturbation strategy or encryption parameters, it must be done according to the contract specified process, thereby ensuring the transparency and standardization of the entire encryption and data management process.
[0044] S50: Upload the encryption ciphertext, zero-knowledge proof, and special perturbation control contract to the blockchain according to the preset block data structure for security verification and management.
[0045] Specifically, after completing the encryption of the structured data object, the generation of zero-knowledge proof, and the formulation of the special perturbation control contract, the data is uploaded to the chain to realize the link of secure inspection management. That is, the encrypted ciphertext, zero-knowledge proof, and special perturbation control contract are uploaded to the blockchain according to the preset block data structure. The block data structure usually includes a block header and a data body. The block header records the metadata information of the block, such as the timestamp, the hash value of the previous block, etc. The data body stores the specific encrypted ciphertext, zero-knowledge proof, and special perturbation control contract, etc. After uploading to the blockchain, the security inspection management is performed on these data by using the tamper-proof and traceable features of the blockchain. For example, in a supply chain management system, the encrypted data of the production, transportation, and sales links of the product, the corresponding zero-knowledge proof, and the special perturbation control contract for controlling the data processing flow are uploaded to the blockchain. Each party can real-time verify the authenticity and integrity of the data to ensure the safety and transparency of the supply chain.
[0046] In a specific embodiment, the data state feature evaluation of the structured data object is performed to configure an encryption strategy based on the data state feature evaluation result and the perturbation strategy, which includes: performing type identification on the structured data object to establish a first state feature; performing data length analysis on the structured data object to establish a second state feature; performing data sensitivity analysis on the structured data object to establish a third state feature; and using the first state feature, the second state feature, and the third state feature as the data state feature evaluation result to construct the encryption strategy.
[0047] Preferably, in the process of performing the data state feature evaluation of the structured data object and configuring the encryption strategy based on the evaluation result and the perturbation strategy, type identification is first performed on the structured data object. In the field of stem cell technology, the structured data object may include various types of data, such as gene sequence data of stem cells (belonging to biological information type data) and temperature and humidity records of the culture environment (belonging to environmental parameter type data). By performing type identification on these data, the essential properties of different data can be determined, and a first state feature can be established. The first state feature reflects the basic category of the data, providing a basis for subsequent processing.
[0048] Subsequently, data length analysis of the structured data object is performed. Taking experimental record data in stem cell research as an example, the data length generated by different experimental batches and different detection projects may differ greatly. For example, a comprehensive stem cell differentiation ability detection may generate a large amount of data records, while a simple cell activity detection has relatively short data length. By analyzing the data length, the size of the data can be understood, and a second state feature can be established, which helps to evaluate the data storage and transmission requirements and the complexity that may be encountered in the encryption process.
[0049] At the same time, the structured data object is subjected to data sensitivity analysis. The genetic information of stem cells belongs to highly sensitive data, and once leaked, it can have a serious impact on the research subject; while the running parameters of the culture equipment are relatively low in sensitivity. By accurately judging the sensitivity of the data, a third state feature is established, which clarifies the requirements of the data in terms of confidentiality and is a key consideration factor for developing encryption strategies.
[0050] Finally, the first state feature (data type), the second state feature (data length), and the third state feature (data sensitivity) are used as data state feature evaluation results to construct encryption strategies. For example, for high-sensitivity, biological information type, and possibly large data length data such as stem cell gene sequences, the Advanced Encryption Standard (AES) algorithm is used with a long key length, combined with multiple encryption techniques to ensure data security; while for low-sensitivity, environmental parameter type, and short data length data such as temperature and humidity records of the culture environment, a relatively simple encryption algorithm can be used to ensure a certain level of security while improving processing efficiency. In this way, according to the data state feature evaluation results and the disturbance strategy in the actual application scenario, the encryption strategy suitable for different structured data objects can be accurately configured.
[0051] In a specific embodiment, the use of the first state feature, the second state feature, and the third state feature as data state feature evaluation results to construct encryption strategies further includes: state sorting of the data state feature to construct a subset space of the disturbance strategy; generating a disturbance strategy after configuring a random factor in the subset space; and configuring an encryption strategy using the disturbance strategy and the data state feature evaluation results.
[0052] Specifically, in the process of constructing encryption strategies, the data state feature needs to be state sorted. Suppose the structured data object obtained contains mesenchymal stem cell cell morphology image data (data type), image data size (data length), and the sensitivity of cell key marker detection results (data sensitivity). When state sorting, data sensitivity may be given priority, as the key marker detection results of mesenchymal stem cells are highly sensitive information related to safety and compliance; second is the data type, the cell morphology image data has specific biological information characteristics, and the processing requirements are different from general text data; and finally is the data length, although the image data size will affect the processing efficiency, but the priority in constructing the encryption strategy is slightly lower than the former two. Through such sorting, the importance of different state features in constructing the strategy is clarified.
[0053] Further, a subset space of the perturbation strategy is constructed based on the state ranking results. The subset space can be understood as a limit boundary for establishing the perturbation selection space. For example, for the detection result data of the key markers of the highly sensitive mesenchymal stem cells, the subset space can be limited to only allow slight numerical perturbation, and the perturbation range is strictly controlled within a certain interval, so as to ensure the accuracy and safety of the data; for the cell morphology image data, the subset space can allow certain regular perturbation on the image pixel value, but cannot change the overall characteristics of the image; and for the general record data with short data length, the subset space can be relatively loose, and multiple perturbation methods can be allowed.
[0054] After the random factor is configured in the subset space, the perturbation strategy is generated. The introduction of the random factor increases the uncertainty of the perturbation and improves the security of the data. For example, in the numerical perturbation of the detection result data of the key markers of the mesenchymal stem cells, the random factor can make the specific numerical value of each perturbation randomly change within a certain range; in the pixel value perturbation of the cell morphology image data, the random factor determines the specific position and amplitude of the pixel value perturbation. In this way, the perturbation strategy that meets the characteristics of different data states is generated. Finally, the encryption strategy is configured by using the generated perturbation strategy and the previous data state characteristic evaluation results. For the highly sensitive data in the mesenchymal stem cell safety inspection, combined with its specific perturbation strategy and higher data sensitivity evaluation results, a high-strength encryption algorithm such as the combination of the advanced encryption standard (AES) and the multiple encryption technology is used to ensure the absolute safety of the data in the transmission and storage process; for general data, a relatively simple encryption algorithm is used, and the corresponding perturbation strategy is combined to improve the processing efficiency on the premise of ensuring the safety of the data. Through such a process, the encryption strategy suitable for different structured data objects in the mesenchymal stem cell safety inspection technology can be accurately constructed.
[0055] In a specific embodiment, after the encrypted ciphertext, the zero-knowledge proof, and the special perturbation control contract are uploaded to the block chain according to the preset block data structure, the method further includes: activating an on-chain state judgment contract, calling the special perturbation control contract by using the on-chain state judgment contract, and reading the recorded metadata; judging whether the perturbation strength of the recorded metadata meets the minimum perturbation entropy requirement of the corresponding data state characteristic evaluation result, establishing a first judgment result; performing data integrity verification by using the preset block data structure, establishing a second judgment result; generating a judgment label according to the first judgment result and the second judgment result, and performing block chain management according to the judgment label.
[0056] Optionally, after uploading the encrypted ciphertext, zero-knowledge proof, and special perturbation control contract to the blockchain according to the preset block data structure, the process of on-chain data verification and management is entered. First, the on-chain state judgment contract is activated, which will automatically call the special perturbation control contract to read the recorded metadata. These metadata include key information such as perturbation method and perturbation range when configuring the perturbation strategy. For example, assuming that the uploaded data is encrypted ciphertext and related information about the differentiation ability of mesenchymal stem cells. After reading the metadata, the on-chain state judgment contract will determine whether the perturbation intensity of the recorded metadata meets the minimum perturbation entropy requirement of the corresponding data state characteristic evaluation result. The perturbation entropy is an indicator to measure the degree of perturbation, and the minimum perturbation entropy requirement is set in advance according to the data state characteristic evaluation result. For example, for data such as the differentiation ability of mesenchymal stem cells, which is highly sensitive and requires high-intensity protection according to the data state characteristic evaluation result, the minimum perturbation entropy requirement will be relatively high. If the perturbation intensity meets the requirement, the first judgment result is "pass"; if it does not meet the requirement, the first judgment result is "fail".
[0057] Subsequently, data integrity verification is performed using the preset block data structure. The preset block data structure specifies the storage format and verification rules of data in the block. In the safety inspection of mesenchymal stem cells, data integrity is crucial, and any loss or tampering of cell detection data may lead to incorrect inspection results. By comparing the data hash value, data length, and other information stored in the block with the original uploaded data, it is determined whether the data has been changed during uploading or storage. If the data is complete and accurate, the second judgment result is "complete"; if there is data loss or damage, the second judgment result is "incomplete".
[0058] Finally, a judgment label is generated according to the first judgment result and the second judgment result. If the first judgment result is "pass" and the second judgment result is "complete", the judgment label may be "qualified"; if either of the judgment results is "fail" or "incomplete", the judgment label is "unqualified". According to this judgment label, the blockchain is managed. For "qualified" data, it is allowed to be normally stored and shared on the blockchain, providing reliable data support for subsequent research and application of mesenchymal stem cell safety inspection; for "unqualified" data, it is marked or further repaired, deleted, or other measures are taken to ensure the quality and safety of data stored on the blockchain. Through such a process, the uploaded data is strictly verified and identified from the perspective of the blockchain, ensuring the credibility and usability of the mesenchymal stem cell safety inspection data.
[0059] In a specific embodiment, after uploading the encrypted ciphertext, zero-knowledge proof, and special-purpose disturbance control contract to the blockchain according to the preset block data structure, the method further comprises: obtaining an information viewing request; performing joint authentication of the requester's identity, purpose, access frequency, and compliance using the information viewing request; if the joint authentication is passed, the blockchain broadcasts a shard request for a one-time request token to all trust nodes; obtaining request response feedback from all trust nodes, and when receiving not less than a threshold number of request response feedback, reconstructing a one-time decryption key; and feeding back the one-time decryption key to the corresponding requester.
[0060] Further, after uploading the encrypted ciphertext, zero-knowledge proof, and special-purpose disturbance control contract to the blockchain according to the preset block data structure, the method further comprises processing the information viewing request. When a user initiates an information viewing request, for example, in a mesenchymal stem cell safety inspection project, a research institution wants to obtain specific mesenchymal stem cell experimental data stored on the blockchain. At this time, the system will use the information viewing request to perform multi-aspect joint authentication of the requester. The joint authentication covers the requester's identity authentication, ensuring that the requester is a legal and authorized institution or individual; purpose authentication, clearly specifying the specific purpose of the requester obtaining the data, such as academic research, drug development, or other compliance purposes; access frequency authentication, preventing the requester from excessively frequent access to data, ensuring the stability of the system and the security of the data; and compliance authentication, checking whether the requester's operation complies with relevant laws, regulations, and industry standards. Taking mesenchymal stem cell safety inspection as an example, the requester may be required to comply with data protection regulations and ethical guidelines for stem cell research.
[0061] If the joint authentication is passed, the blockchain broadcasts a shard request for a one-time request token to all trust nodes. Trust nodes are reliable nodes in the blockchain network that have been strictly screened and authenticated, and they jointly maintain the security and stable operation of the blockchain. For example, in a blockchain network composed of multiple authoritative medical institutions and research institutions, these institutions act as trust nodes and, after receiving the shard request, process it according to their own security policies and rules. The system obtains request response feedback from all trust nodes, and when receiving not less than a threshold number of request response feedback, it reconstructs a one-time decryption key. The threshold number is set in advance according to the security requirements of the blockchain and the distribution of trust nodes, ensuring that only when a sufficient number of trust nodes participate in the response can the decryption key be successfully reconstructed. For example, if the threshold number is set to 7, the one-time decryption key can only be reconstructed when at least 7 trust nodes have fed back valid request responses.
[0062] Finally, the reconstructed one-time decryption key is fed back to the corresponding requester. The requester can use the key to decrypt the encrypted ciphertext, thereby obtaining the required mesenchymal stem cell experimental data. Through such a process, secure access and sharing of encrypted data on the blockchain are realized under the premise of ensuring data security, meeting the data cooperation needs between different institutions in mesenchymal stem cell safety inspection technology.
[0063] In a specific embodiment, after uploading the encrypted ciphertext, zero-knowledge proof, and special-purpose disturbance control contract to the blockchain according to the preset block data structure, the method further comprises: establishing an abnormal isolation partition on the blockchain; calculating a cumulative abnormal score for each block, wherein the evaluation indexes of the cumulative abnormal score include disturbance abnormal indexes and access abnormal indexes; and if the cumulative abnormal score of any block meets a preset abnormal threshold, isolating the corresponding block to the abnormal isolation partition.
[0064] For example, after uploading the encrypted ciphertext, zero-knowledge proof, and special-purpose disturbance control contract to the blockchain according to the preset block data structure, in order to ensure the security and reliability of the data on the blockchain, abnormal monitoring and isolation work will be further carried out. First, an abnormal isolation partition is established on the blockchain, which is used to store blocks that have abnormal conditions to prevent abnormal expansion from affecting the normal operation of the entire blockchain. Then, a cumulative abnormal score is calculated for each block. The cumulative abnormal score is obtained by comprehensive evaluation of multiple evaluation indexes, including disturbance abnormal indexes and access abnormal indexes. The disturbance abnormal index mainly focuses on whether the data has abnormal conditions during the disturbance process. For example, when the stem cell experimental data is disturbed, if the difference between the disturbed data and the original data exceeds the normal range, or the disturbance method does not conform to the preset disturbance strategy, the disturbance abnormal index may be triggered. For example, the original regulation is to perform a slight numerical disturbance on the stem cell gene expression data, but the actual disturbance causes a significant change in the expression amount of the key gene, which is a disturbance abnormality. The access abnormal index focuses on monitoring the access of the block. If the access frequency of a block suddenly increases significantly, or the access source is abnormal, such as from unauthorized institutions or individuals, it may indicate that the block has security risks. For example, in the mesenchymal stem cell safety inspection project, only a few cooperating research institutions normally access the relevant data blocks on a regular basis, but a large number of access requests from unknown sources suddenly appear, which is an access abnormality.
[0065] The cumulative anomaly score of each block is continuously monitored, and once the cumulative anomaly score of any block meets the preset anomaly threshold, it means that the block has a high security risk. At this time, the corresponding block is automatically isolated to the established abnormal isolation partition. For example, when a block storing mesenchymal stem cell clinical trial data is disturbed and abnormal access causes the cumulative anomaly score to reach the preset threshold, it will be quickly isolated to avoid the potential security threat affecting the security and normal use of other data on the entire blockchain. Through such a process, the security of data storage and sharing of the blockchain in the field of mesenchymal stem cell safety inspection technology can be effectively guaranteed.
[0066] In a specific embodiment, the safety inspection management includes: when any requester accesses the blockchain, synchronously establishing access event records on the chain, the access event records including pass records and rejection records; generating access proof hash values of accessed data according to the access event records; and associating and binding the access proof hash values with the hash values of the accessed data for storage.
[0067] Specifically, when performing safety inspection management, when any requester accesses the blockchain, access event records on the chain are synchronously established. The access event records can be understood as access logs on the blockchain, which record the details of each access, including pass records and rejection records. The pass record means that the requester successfully passed the identity verification and permission audit and obtained the permission to access the data. The rejection record means that the requester failed to access the data due to some reasons, such as failed identity authentication, insufficient permissions, etc. For example, assuming that a pharmaceutical company wants to access the mesenchymal stem cell clinical trial data stored on the blockchain. When the pharmaceutical company initiates an access request, the system will immediately establish an access event record. If the pharmaceutical company provides a valid identity proof and its access permission meets the regulations, the system will generate a pass record; otherwise, if the identity of the pharmaceutical company is questionable or it does not have the corresponding access permission, the system will generate a rejection record.
[0068] Then, an access proof hash value of the accessed data is generated according to the access event record. The hash value is a kind of data identification with uniqueness and irreversibility. A unique access proof hash value is generated by processing the access event record by a specific hash algorithm. The hash value is a unique representation of the access event. Finally, the access proof hash value is associated and bound with the hash value of the accessed data and stored. The hash value of the accessed data is also a unique identification obtained by processing the data itself by a hash algorithm. The association and binding storage of the two means that a binding relationship is established between the data and the access event, which facilitates subsequent auditing and tracing. For example, if it is necessary to review the access of the data later, the corresponding access event record can be quickly found through the access proof hash value, and the integrity of the data and whether the data is tampered with can also be verified through the hash value of the accessed data. Through such a process, the security and traceability of data access in the mesenchymal stem cell safety inspection technology field can be effectively guaranteed.
[0069] The mesenchymal stem cell safety inspection method based on the blockchain provided by the embodiment of the application has at least the following technical effects:
[0070] 1. By identifying the type of the structured data object, analyzing the data length, and analyzing the data sensitivity, a multi-dimensional data state feature is established. Based on these features, the state is sorted, a subset space of the perturbation strategy is constructed, and a random factor is introduced to generate a perturbation strategy, and then an encryption strategy is configured. This dynamic and fine-grained encryption strategy construction method can provide targeted protection according to the characteristics of different data. In the mesenchymal stem cell safety inspection, high-intensity encryption is adopted for high-sensitivity key detection data, and relatively simple encryption is adopted for general environmental parameters, which not only guarantees data security, but also improves processing efficiency, effectively balancing data security and performance requirements.
[0071] 2. The structured data object is encrypted based on the encryption strategy by using multi-party secure computing, and the encryption key fragments are stored in multiple trusted nodes, thereby enhancing the security and reliability of the data. At the same time, zero-knowledge proof is generated for the encrypted ciphertext and encryption parameters, which proves the compliance of the encryption process without revealing the specific content of the data. The encrypted ciphertext, zero-knowledge proof, and the like are uploaded to the blockchain, and the security inspection management is performed by means of the non-tamperable and traceable characteristics of the blockchain. This integrated application ensures the security and credibility of the mesenchymal stem cell data in the encryption, storage, and sharing process, and meets the strict requirements for data privacy and security in stem cell research.
[0072] 3. Anomaly isolation partitions are established on the blockchain. Each block is cumulatively scored for anomalies, and anomaly indicators (disturbance and access) are used to determine if a block is abnormal. If a preset threshold is met, the abnormal block is isolated. Simultaneously, an access event record is established when a requester accesses the blockchain, generating an access proof hash value and associating it with the hash value of the accessed data for storage. These mechanisms achieve comprehensive and secure management of mesenchymal stem cell data access and storage on the blockchain, enabling timely detection and handling of anomalies, preventing data leakage and malicious access, ensuring the stable operation of the blockchain system and data security, and providing reliable technical support for the safe testing of mesenchymal stem cells.
[0073] Example 2:
[0074] like Figure 2 As shown, based on the same inventive concept as the blockchain-based mesenchymal stem cell safety testing method provided in Embodiment 1, this embodiment of the invention also provides a blockchain-based mesenchymal stem cell safety testing system, the system comprising:
[0075] The data acquisition module 11 is used to acquire the core detection data and environmental parameters of stem cells, format the core detection data and environmental parameters, embed timestamps and device ID metadata, and establish a structured data object.
[0076] The encryption configuration module 12 is used to perform data state feature evaluation of structured data objects and configure encryption strategies based on the data state feature evaluation results and perturbation strategies.
[0077] The data encryption module 13 is used to encrypt structured data objects based on the encryption strategy using multi-party secure computation. The encryption is accomplished through a distributed key management mechanism, and the encryption key is stored in fragments across multiple trusted nodes.
[0078] Contract management module 14 is used to generate zero-knowledge proofs for encrypted ciphertext and encryption parameters, record perturbation strategies and encryption parameters as metadata, and manage contracts through dedicated perturbation control.
[0079] The security management module 15 is used to upload encrypted ciphertext, zero-knowledge proofs, and dedicated disturbance control contracts to the blockchain according to a preset block data structure for security verification and management.
[0080] Furthermore, the encryption configuration module 12 is also used to perform the following steps:
[0081] The type of data of the structured data object is identified to establish a first state feature; the data length analysis of the structured data object is performed to establish a second state feature; the data sensitivity analysis of the structured data object is performed to establish a third state feature; the first state feature, the second state feature, and the third state feature are used as the data state feature evaluation result to construct the encryption strategy.
[0082] Further, the encryption configuration module 12 is further configured to perform the following steps:
[0083] The data state features are sorted by state to construct a subset space of the perturbation strategy; after the random factor is configured in the subset space, the perturbation strategy is generated; and the encryption strategy is configured by using the perturbation strategy and the data state feature evaluation result.
[0084] Further, the security management module 15 is further configured to perform the following steps:
[0085] The on-chain state judgment contract is activated to call the special perturbation control contract to read the recorded metadata; it is judged whether the perturbation strength of the recorded metadata meets the minimum perturbation entropy requirement of the corresponding data state feature evaluation result to establish a first judgment result; the data integrity is checked by using the preset block data structure to establish a second judgment result; the judgment label is generated according to the first judgment result and the second judgment result, and the block chain is managed according to the judgment label.
[0086] Further, the security management module 15 is further configured to perform the following steps:
[0087] An information viewing request is obtained; the identity, purpose, access frequency, and compliance of the requester are jointly authenticated by using the information viewing request; if the joint authentication is passed, the block chain broadcasts a sharding request of a one-time request token to all trust nodes; the request response feedback of all trust nodes is obtained, and when receiving not less than a threshold number of request response feedbacks, a one-time decryption key is reconstructed; and the one-time decryption key is fed back to the corresponding requester.
[0088] Further, the security management module 15 is further configured to perform the following steps:
[0089] An abnormal isolation partition is established in the block chain; a cumulative abnormal score of each block is calculated, and the evaluation index of the cumulative abnormal score includes a perturbation abnormal index and an access abnormal index; if the cumulative abnormal score of any block meets a preset abnormal threshold, the corresponding block is isolated to the abnormal isolation partition.
[0090] Further, the security management module 15 is further configured to perform the following steps:
[0091] When any requester accesses the blockchain, a synchronous access event record on the chain is established, including a record of passing and a record of rejection; an access proof hash value of the accessed data is generated according to the access event record; and the access proof hash value is stored in association with the hash value of the accessed data.
[0092] The foregoing describes in detail a mesenchymal stem cell safety inspection method based on a blockchain. Those skilled in the art can clearly understand a mesenchymal stem cell safety inspection system based on a blockchain in the embodiment. For the system disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant part can be seen in the method part.
[0093] The above description of disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the application. Therefore, the present application will not be limited to these embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.
Claims
1. A blockchain-based mesenchymal stem cell safety inspection method, characterized in that, The method comprises: Obtaining core detection data and environmental parameters of stem cells, and embedding a time stamp and device ID metadata after data formatting of the core detection data and environmental parameters to establish a structured data object; Performing data state feature evaluation of the structured data object, and configuring an encryption strategy according to the data state feature evaluation result and a disturbance strategy; Encrypting the structured data object based on the encryption strategy by using multi-party secure calculation, and completing the encryption by a distributed key management mechanism, and storing encryption key fragments in multiple trust nodes; Generating zero-knowledge proof for the encrypted ciphertext and encryption parameters, recording the disturbance strategy and encryption parameters as metadata, and managing them through a special disturbance control contract; Uploading the encrypted ciphertext, zero-knowledge proof and special disturbance control contract to a block chain according to a preset block data structure for security inspection management; Performing data state feature evaluation of the structured data object, and configuring an encryption strategy according to the data state feature evaluation result and a disturbance strategy, comprising: Performing type identification on the data of the structured data object to establish a first state feature; Performing data length analysis on the structured data object to establish a second state feature; Performing data sensitivity analysis on the structured data object to establish a third state feature; Using the first state feature, the second state feature and the third state feature as the data state feature evaluation result to construct the encryption strategy; Using the first state feature, the second state feature and the third state feature as the data state feature evaluation result to construct the encryption strategy, further comprising: Performing state sorting on the data state feature to construct a subset space of the disturbance strategy according to the state sorting result; Generating the disturbance strategy after configuring a random factor in the subset space; Configuring the encryption strategy by using the disturbance strategy and the data state feature evaluation result.
2. The method of claim 1, wherein the method is a blockchain-based safety test method for mesenchymal stem cells. After uploading the encrypted ciphertext, zero-knowledge proof and special disturbance control contract to the block chain according to the preset block data structure, comprising: Activating an on-chain state judgment contract, calling the special disturbance control contract by using the on-chain state judgment contract, and reading the recorded metadata; Judging whether the disturbance intensity of the recorded metadata meets the minimum disturbance entropy requirement of the corresponding data state feature evaluation result to establish a first judgment result; Performing data integrity check by using the preset block data structure to establish a second judgment result; Generating a judgment label according to the first judgment result and the second judgment result, and managing the block chain according to the judgment label.
3. The method of claim 1, wherein the method is a blockchain-based safety test method for mesenchymal stem cells, characterized by, After uploading the encrypted ciphertext, zero-knowledge proof and special disturbance control contract to the block chain according to the preset block data structure, further comprising: Obtaining an information viewing request; Performing joint authentication of the identity, purpose, access frequency and compliance of the requester by using the information viewing request; If the joint authentication is passed, the block chain broadcasts a fragment request of a one-time request token to all trust nodes; Obtaining request response feedbacks of all trust nodes, and reconstructing a one-time decryption key when receiving no less than a threshold number of request response feedbacks; Feeding back the one-time decryption key to the corresponding requester.
4. The method of claim 1, wherein the method is a blockchain-based safety test method for mesenchymal stem cells, characterized by, The uploading of the encrypted ciphertext, the zero-knowledge proof, and the special disturbance control contract to the blockchain according to the preset block data structure further includes: establishing an abnormal isolation partition in the blockchain; performing cumulative abnormal scoring on each block, wherein the evaluation index of the cumulative abnormal scoring includes a disturbance abnormal index and an access abnormal index; if the cumulative abnormal score of any block meets a preset abnormal threshold, isolating the corresponding block to the abnormal isolation partition.
5. The blockchain-based mesenchymal stem cell safety inspection method of claim 1, wherein, The security inspection management includes: when any requester accesses the blockchain, synchronously establishing an access event record on the chain, wherein the access event record includes a pass record and a rejection record; generating an access proof hash value of the accessed data according to the access event record; associating and binding the access proof hash value with the hash value of the accessed data for storage. 6.A blockchain-based mesenchymal stem cell safety inspection system, characterized in that, A mesenchymal stem cell security inspection method based on a blockchain, for implementing any one of claims 1-5, the system comprising: a data acquisition module configured to acquire core detection data and environmental parameters of stem cells, format the core detection data and environmental parameters, embed timestamp and device ID metadata, and establish a structured data object; an encryption configuration module configured to perform data state feature evaluation on the structured data object, and configure an encryption strategy based on the data state feature evaluation result and a disturbance strategy; a data encryption module configured to encrypt the structured data object based on the encryption strategy using multi-party secure computation, wherein the encryption is completed through a distributed key management mechanism, and the encryption key is stored in multiple trust nodes in fragments; a contract management module configured to generate a zero-knowledge proof for the encrypted ciphertext and encryption parameters, record the disturbance strategy and encryption parameters as metadata, and manage the special disturbance control contract; a security management module configured to upload the encrypted ciphertext, the zero-knowledge proof, and the special disturbance control contract to the blockchain according to a preset block data structure for security inspection management.
Citation Information
Patent Citations
Blockchain data sharing method, system and device and medium
CN112181922A
Intelligent contract crowdsourcing task method based on block chain
CN118886626A