Resource use control system and method

Abstract

The invention discloses a resource use control system and method. The system comprises a resource use space, a resource platform and a key platform, the resource platform is used for storing, managing and authorizing to provide data resources and tool resources, and supporting encrypted or non-encrypted storage; the key platform is used for storing a key corresponding to the encryption resource and establishing a binding relationship between the key and the encryption resource; the resource use space is used for providing infrastructure resources and safely using data resources and tool resources; the resource use space, the resource platform and the key platform provide evidence storage operation of a digital contract service and a log evidence storage service through respective configured block chain node modules or a shared block chain system; according to actual service needs, the resource user provides a resource use request to the resource owner, and the resource use space, the resource platform and the key platform cooperate with one another to complete a use control process. According to the invention, unified control of resources can be realized, full-process supervision can be realized, and controllability, auditing performance and compliance of resource use are improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the control technology of data resource sharing, in particular to a resource use control system and method. BACKGROUND

[0002] Under the background of continuous promotion of current data sharing system construction and rapid development of artificial intelligence technology, data resources, tool resources and computing resources have become important elements to support core business activities. Around the safe sharing, compliant use and efficient management and control of these resources, the industry has developed various technical paths, mainly including privacy computing, security protection system, blockchain mechanism and cloud computing platform. These technical solutions cover a certain dimension of resource control, and have initially realized the authorization, scheduling, control and auditing capabilities of some links in resource sharing.

[0003] Privacy computing technology mainly focuses on data control in the computing process. Through multi-party secure computing (MPC), federated learning (FL), trusted execution environment (TEE) and other methods, privacy computing ensures that data participates in joint computing without leaving the domain and exposing the data. It controls the risk of data leakage in the execution phase. However, it mainly functions in "process protection" and does not cover pre-management of data authorization (such as purpose, frequency, time limit) and post-disposal of compliance results. It also cannot schedule and constrain the use of computing resources and tool resources.

[0004] Traditional security protection system emphasizes boundary protection and access control of static resources. Through access control, permission system, network isolation and other mechanisms, it ensures that data resources and tool resources are not accessed by unauthorized users before accessing the system and during residence. However, this system lacks fine-grained behavior control of resources in the "dynamic use" process and cannot handle illegal operations and rule violations. It also cannot effectively constrain external computing calls.

[0005] The blockchain mechanism provides resource use authorization, authorization and auditing capabilities through decentralized ledger and smart contract. Its advantage lies in the trusted record and tamper-proof trace of "resource authorization process and use behavior", which is suitable for in-process / post-process responsibility identification. However, the blockchain itself does not have the ability to access, call and execute resources, and cannot directly control the resource processing process under the chain. It mainly plays an auxiliary role in "compliance record and responsibility constraint".

[0006] Cloud computing platform has a significant advantage in the authorization and allocation of computing resources. Through user account system, resource pool scheduling, permission grading and billing strategy, it realizes the flexible supply and use control of computing resources. However, the cloud platform lacks control measures for data resources and tool resources, and usually defaults to full control by the user. Once the authorization is completed, the data use process and tool calling behavior are no longer constrained, making it difficult to meet the compliance requirements.

[0007] Overall, although the current various technical solutions have certain control capabilities in their respective specialized fields, they are mostly single-point control or local closed-loop management, and lack the ability to collaboratively schedule, uniformly manage and trace the whole process of the three types of resources, i.e., data, tools and computing power, in the same system.

[0008] Although the above technical paths have relatively mature capabilities in their respective focused fields, there are still the following deficiencies in realizing a unified resource management system and covering the whole process of use and supervision.

[0009] Scattered control of resource types lacks collaborative linkage: Existing solutions generally focus on the management and control of a single resource type, such as privacy computing controlling data, cloud computing controlling computing power, etc. Due to the lack of a unified resource perspective, it is difficult to achieve consistency in terms of policy configuration, authorization management and behavior review.

[0010] Lack of dynamic control mechanism in the use process: Most technical paths only provide authorization entry in advance or record behavior after the fact, lacking the ability to dynamically perceive and intervene in real time during the use process, making it difficult to discover and block problems that deviate from authorized terms.

[0011] On-chain and off-chain control is fragmented, making it difficult to achieve closed-loop supervision: Although blockchain can record authorization terms and call logs, its control is limited to on-chain contract logic, and it lacks executable control paths for actual resource use processes such as data duplication, misuse of computing power, and replacement of tools.

[0012] Lack of a scenario-centered resource scheduling perspective: Current resource management builds a permission model centered on resources, which cannot schedule appropriate combinations of data, tools and computing power based on specific application scenario requirements, and bind usage behavior to scenario context for constraint and audit.

[0013] In summary, existing technologies have not established a systematic resource control framework that is cross-resource type, cross-use stage and cross-collaborative subject, making it difficult to meet the resource sharing needs under high security, high compliance and high credibility requirements. There is an urgent need for a unified perspective management mechanism to realize the overall authorization, collaborative invocation and traceable use of data, tools and computing power resources. SUMMARY

[0014] The present application proposes a resource use control system and method, which includes a resource use space, a resource platform, a key platform and a blockchain system. The system comprehensively uses technologies such as blockchain, digital contract and secure sandbox to build a whole-process security control mechanism for resources from authorization to use, ensuring that the use of resources strictly complies with the authorization terms in the digital contract, and has good auditability and traceability, meeting the resource sharing needs of multiple spans.

[0015] The technical solution of the present application is as follows: A resource use control system comprises a resource use space, a resource platform, and a key platform.

[0016] The resource platform is a resource management system for storing, managing, and authorizing data resources and tool resources, and supports storage of resources in an encrypted or non-encrypted manner; if the resources are stored in an encrypted manner, the corresponding keys are stored in the key platform to realize separate storage of the ciphertext keys. The use rules of the resource platform are as follows: the resource owner can authorize the resource user account through a digital contract, and the authorized account can enjoy the permission to obtain the resource.

[0017] The key platform is a security management system for storing, managing, and authorizing keys, and is used to store the keys corresponding to the encrypted resources and establish a binding relationship between the keys and the encrypted resources. The use rules of the key platform are as follows: the account storing the key is the key owner by default, and the key owner can authorize the account applying for the key through a digital contract, and the authorized account can enjoy the permission to obtain the key.

[0018] The resource use space is an application space system for securely using data resources and tool resources, and is used to provide infrastructure resources such as CPU, memory, and network, and comprises a control unit and a closed computing cabin.

[0019] The control unit is used to process resource use requests, and the resource use request content can simultaneously contain complete information of the data resources, tool resources, and infrastructure resources requested for use and the corresponding digital contract id, the digital contract content is read from the blockchain system, and it is checked whether the requested resources meet the conditions agreed in the digital contract. After the check is passed, a closed computing cabin is created for the resource user to use the resources in a closed manner, and the use results are temporarily stored after the resources are used, and are provided for the resource user according to the agreement, while the resource key operation log in the closed computing cabin is written into the blockchain for storage, and finally the closed computing cabin resources are recycled.

[0020] The closed computing cabin comprises one or more computing units that can be closed to external data transmission channels, individually / combined (clustered), and the computing units can be containers, virtual machines, physical machines, or other computing devices; the closed computing cabin is used to provide a closed computing environment, and sends a resource request to the resource platform and the key platform, pulls the data resources, tool resources, and corresponding keys in the resource request to the closed computing cabin, and sequentially performs the following key operations: closes the external data transmission channel, decrypts each resource, uses the resources to obtain the use results, destroys the plaintext resources, ciphertext resources, and keys, opens the external data transmission channel, and exports the resource use results. Among them, the key and decryption operations are only required for encrypted resources.

[0021] When there is only one infrastructure resource in the resource usage request of the resource user, the closed computing cabin is implemented by a single computing unit; When there are multiple infrastructure resources in the resource usage request of the resource user, the closed computing cabin is composed of multiple computing units, and each infrastructure resource in the resource usage request is a description of a computing unit (computing unit type, CPU, memory, internal and external network, etc.).

[0022] When the closed computing cabin involves multiple computing units (the closed computing cabin of only one computing unit does not involve), the closed computing cabin realizes internal communication between the computing units through an internal data transmission channel, and exchanges information with the outside of the closed computing cabin through an external data transmission channel.

[0023] The resource usage space, resource platform, and key platform are each configured with a blockchain node module, and a self-built blockchain system is built through the interconnection and intercommunication of the respective blockchain node modules, and the self-built blockchain system is used to provide a digital contract service and a log storage service storage operation; The resource usage space, resource platform, and key platform directly participate in the operation of the built blockchain system in the identity of the respective configured blockchain node, and directly obtain on-chain information.

[0024] Alternatively, the system can also be separately configured with a common blockchain system, which is a storage system for providing a digital contract service and a log storage service.

[0025] The digital contract service refers to the resource owner and user recording the agreed resource authorization terms in the digital contract and signing for confirmation and storing in the blockchain. When using the resource, the digital contract corresponding to the resource will be passed to the resource usage space, resource platform, and key platform as the authorization basis, and the resource usage space, resource platform, and key platform will decide whether to allow the use of the resources managed by themselves according to the authorization terms in the digital contract.

[0026] The log storage service provides storage for resource key operation logs, including resource pulling, resource decryption, resource usage process behavior, resource usage after destruction, resource usage result audit, and resource usage result export. Due to the anti-repudiation and tamper resistance of the blockchain, through the digital contract and resource key operation logs recorded on the blockchain, the whole process of resource authorization, usage, and result export can be traced and audited. Among them, the digital contract records the authorization content, which can be audited whether there is unauthorized authorization; the resource key operation log records the detailed usage process of the resource, which can be audited whether there is a violation of the use behavior.

[0027] The resources include three categories of data resources, tool resources, and infrastructure resources. The data resources refer to structured, semi-structured, and unstructured data, including text, pictures, audio, video, and tables, etc. The tool resources refer to executable programs for processing and using data, including models, algorithms, software, and scripts, etc. The infrastructure resources refer to running environment resources for data processing and use, such as computing power, memory, disk, network, and operating system, etc.

[0028] The resource use control system includes multiple resource use spaces, multiple resource platforms, and multiple key platforms, all of which share one blockchain system. Under the premise of authorization, the resource use space can pull data resources, tool resources, and keys in the resource platform and the key platform to the closed computing cabin of the resource use space for use.

[0029] When multiple resource users share resources: (1) When the resource user and the resource owner have the same set of resource platform, key platform, and resource use space, after signing the authorization agreement, the authorized data resources, tool resources, and keys are directly pulled from the resource platform and the key platform to the resource use space for use, and the resource flow occurs between the same set of resource platform, key platform, and resource use space.

[0030] (2) When the resource user and the resource owner use different resource platforms, different key platforms, and resource use spaces: (1) When the resource user and the resource owner each have their own resource platform, key platform, and resource use space, after signing the authorization agreement, the authorized data resources, tool resources, and keys are pulled from the resource platform and the key platform of the resource owner to the resource use space of the resource user for use, and the resource flow occurs between the resource platform, the key platform, and the resource use space of the resource user and the resource owner; (2) When the resource user needs to use data resources and tool resources from multiple different resource owners, the requested data resources and tool resources can be pulled to the designated resource use space for use. At this time, the resource user needs to jointly sign an authorization agreement with each resource owner through a digital contract regarding each item of data resources, tool resources, and infrastructure resources. After signing the authorization agreement by all parties, the authorized data resources, tool resources, and keys are pulled from the resource platform and the key platform of multiple units to the designated resource use space for use.

[0031] Further, each resource usage space is equipped with a digital identity certificate, which is realized by a CA certificate or a decentralized identifier (DID), and records or is associated with the domain name, IP, number, organization name, deployment region, security level (equal protection, sub-protection), and other optional information (such as various professional qualifications, qualifications, and levels) of the resource usage space; when the resource usage space sends a resource request to the resource platform and the key platform to obtain resources and keys, it needs to provide the digital identity certificate for the resource platform and the key platform to judge whether the resource usage space meets the authorized requirements of the use region and the use security.

[0032] Further, the digital contract refers to the authorization clause, which can be composed of one to multiple authorization clauses, and each authorization clause represents the authorized use of a resource object and the use restriction condition. After all resource owners and resource users (i.e., authorized parties and authorized parties) sign and confirm, the digital contract takes effect.

[0033] When there are multiple authorization clauses in the digital contract, all clauses need to be met at the same time, that is, the relationship between the clauses is "and", which means that when the digital contract is fulfilled, each resource object needs to comply with the restriction condition. Referring to Table 1, the basic diagram of the authorization clause list in the digital contract, each row in the table is an authorization clause, which represents the authorized use of a resource object and the use restriction condition:

[0034] Table 1 Authorization Clause List The authorization clause mainly includes key fields such as authorized resources, authorized parties, authorized parties, resource categories, and restriction condition lists, etc. Among them, the restriction condition list can be composed of 0 to multiple restriction conditions: when the number of restriction conditions is 0, it means that the resource object is authorized to the resource user, and no additional restriction condition is attached; when there is one or more restriction conditions, it means that the resource object is authorized to the resource user, but the use needs to meet all the use restriction conditions of the resource, that is, the relationship between the restriction conditions is "and". In particular, the digital contract can have no infrastructure resource authorization clause, which means that the use of this type of resource object is not limited, mainly used in the scenario of charging by quantity or using self-owned infrastructure resources. The explanation of each field in Table 1 is shown in Table 2, which is the authorization clause field description:

[0035] Table 2 Authorization Clause Field Description The restriction condition is composed of "restriction condition type" and "restriction condition value" in the form of key-value pair.

[0036] When the resource category in Table 1 is "data resource" or "tool resource", the restriction condition type and the restriction condition value are shown in Table 3:

[0037] Table 3 Limitations of data resources and tool resources When the resource category is "infrastructure resource", the authorization clause describes the resource authorization of the computing unit of the closed computing cabin. When there is only one infrastructure resource authorization clause in the digital contract, it means that the resource user can apply for at most one computing unit, i.e., the created closed computing cabin can only be composed of one computing unit, and the computing unit needs to meet all the limitations in the authorization clause; when there are multiple infrastructure resource authorization clauses in the digital contract, it means that the resource user can apply for no more than the number of authorization clauses computing units, i.e., the created closed computing cabin can be composed of multiple computing units, and each computing unit needs to meet all the limitations in the corresponding authorization clause. The limitation condition type and limitation condition value of the infrastructure resource authorization clause are shown in Table 4:

[0038] Table 4 Infrastructure resource limitations When the "data resource" or "tool resource" is a data resource and / or a software resource, the limitation mode can be as follows: I. Usage time: a. The control unit checks the digital contract clause and finds that any data or tool resource of the resource request does not meet the usage time requirement, and then rejects the creation of the closed computing cabin and returns an error message. For the closed computing cabin that has been created, if it is found that any data or tool resource no longer meets the usage time requirement (such as the authorized usage time expires), the closed computing cabin is frozen or even recycled. b. The resource platform checks the digital contract clause and finds that the resource of the resource request does not meet the usage time requirement, and then rejects the resource request. c. The key platform checks the digital contract clause and finds that the resource corresponding to the resource request key does not meet the usage time requirement, and then rejects the acquisition request of the key; non-encrypted resources are not involved.

[0039] II. Usage times: a. The control unit checks the digital contract clause and finds that any data or tool resource of the resource request does not meet the usage times requirement, and then rejects the creation of the closed computing cabin and returns an error message. b. The resource platform checks the digital contract clause and finds that the resource of the resource request does not meet the usage times requirement, and then rejects the resource request. c. The key platform checks the digital contract clause and finds that the resource corresponding to the resource request key does not meet the usage times requirement, and then rejects the acquisition request of the key; non-encrypted resources are not involved.

[0040] Three, frequency of use: a, the control unit checks the digital contract terms to find that any data or tool resources requested by the resource do not meet the frequency of use requirements, and then rejects the creation of the closed computing cabin and returns an error message. b, the resource platform checks the digital contract terms to find that the resources requested by the resource do not meet the frequency of use requirements, and then rejects the resource request. c, the key platform checks the digital contract terms to find that the resources corresponding to the resource request key do not meet the frequency of use requirements, and then rejects the acquisition request of the corresponding key; non-encrypted resources are not involved.

[0041] Four, usage space: a, the control unit checks the digital contract terms to find that the space number, domain name or IP and other unique identifiers provided or associated by the resource usage space digital identity certificate are not in the resource usage space list, and then rejects the creation of the closed computing cabin and returns an error message. b, the resource platform checks the digital contract terms to find that the space number, domain name or IP and other unique identifiers provided or associated by the resource usage space digital identity certificate are not in the resource usage space list, and then rejects the resource request. c, the key platform checks the digital contract terms to find that the space number, domain name or IP and other unique identifiers provided or associated by the resource usage space digital identity certificate are not in the resource usage space list, and then rejects the acquisition request of the corresponding key; non-encrypted resources are not involved.

[0042] Five, usage region: a, the control unit checks the digital contract terms to find that the deployment information provided or associated by the resource usage space digital identity certificate does not meet the usage region requirements, and then rejects the creation of the closed computing cabin and returns an error message. b, the resource platform checks the digital contract terms to find that the deployment information provided or associated by the resource usage space digital identity certificate does not meet the usage region requirements, and then rejects the resource request. c, the key platform checks the digital contract terms to find that the deployment information provided or associated by the resource usage space digital identity certificate does not meet the usage region requirements, and then rejects the acquisition request of the corresponding key; non-encrypted resources are not involved.

[0043] Six, usage security: a, the control unit checks the digital contract terms to find that the equal protection / insurance level provided or associated by the resource usage space digital identity certificate does not meet the usage security requirements, and then rejects the creation of the closed computing cabin and returns an error message. b, the resource platform checks the digital contract terms to find that the equal protection / insurance level provided or associated by the resource usage space digital identity certificate does not meet the usage security requirements, and then rejects the resource request. c, the key platform checks the digital contract terms to find that the equal protection / insurance level provided or associated by the resource usage space digital identity certificate does not meet the usage security requirements, and then rejects the acquisition request of the corresponding key; non-encrypted resources are not involved.

[0044] Seven, purpose of use: each resource owner audits whether the data usage result matches the purpose of use clause in the digital contract, and if the audit is passed, the control unit allows the resource user to export the result, otherwise it does not allow export.

[0045] When the resource category is infrastructure resource, the limiting manner is as follows: (I) Computing unit type: the control unit checks whether the type of each computing unit (infrastructure resource) in the resource use request of the resource user matches the type of each computing unit limited in the authorization clause of the digital contract, and if not, the closed computing cabin is refused to be created and error information is returned.

[0046] (II) CPU: the control unit checks whether the CPU usage of each computing unit in the resource use request of the resource user exceeds the CPU usage of each computing unit limited in the authorization clause of the digital contract, and if so, the closed computing cabin is refused to be created and error information is returned.

[0047] (III) GPU: the control unit checks whether the GPU usage of each computing unit in the resource use request of the resource user exceeds the GPU usage of each computing unit limited in the authorization clause of the digital contract, and if so, the closed computing cabin is refused to be created and error information is returned.

[0048] (IV) Memory: the control unit checks whether the memory usage of each computing unit in the resource use request of the resource user exceeds the memory usage of each computing unit limited in the authorization clause of the digital contract, and if so, the closed computing cabin is refused to be created and error information is returned.

[0049] (V) Disk: the control unit checks whether the disk usage of each computing unit in the resource use request of the resource user exceeds the disk usage of each computing unit limited in the authorization clause of the digital contract, and if so, the closed computing cabin is refused to be created and error information is returned.

[0050] (VI) External network: the control unit checks whether the external network bandwidth size of each computing unit in the resource use request of the resource user exceeds the external network bandwidth size of each computing unit limited in the authorization clause of the digital contract, and if so, the closed computing cabin is refused to be created and error information is returned.

[0051] (VII) Internal network: the control unit checks whether the internal network bandwidth size of each computing unit in the resource use request of the resource user exceeds the internal network bandwidth size of each computing unit limited in the authorization clause of the digital contract, and if so, the closed computing cabin is refused to be created and error information is returned.

[0052] (VIII) Operating system: the control unit checks whether the operating system of each computing unit in the resource use request of the resource user matches the operating system of each computing unit limited in the authorization clause of the digital contract, and if not, the closed computing cabin is refused to be created and error information is returned.

[0053] (IX) Usage time: The control unit checks whether the usage time of each computing unit in the resource usage request of the resource user meets the usage time limit of each computing unit in the authorization clause of the digital contract. If not, the closed computing cabin is refused to be created and error information is returned. For the closed computing cabin that has been created, if it is found that any computing unit no longer meets the usage time requirement (for example, the authorized usage time expires), the closed computing cabin is frozen or even recycled.

[0054] Based on the above resource usage control system, the steps of realizing controlled resource usage are as follows: Step 1: According to the actual business needs, the resource user and the resource owner explicitly need to use each resource, and the id, authorized party id, authorized party id, resource category, usage limit condition and signature of each party of each resource object are organized into the form of authorization clause and recorded into the blockchain system through digital contract.

[0055] Step 2: The resource user sends the resource usage request (the request content can include data resources, tool resources and / or infrastructure resources) and the corresponding digital contract id to the resource usage space expected to be used. The control unit of the resource usage space reads the digital contract content from the blockchain system and checks whether the requested resources meet the conditions agreed in the digital contract. If any check fails, the closed computing cabin is refused to be created and error information is returned. For the closed computing cabin that has been created, if it is found that any limit condition of any resource object no longer meets (for example, the authorized time expires), the closed computing cabin is frozen or even recycled.

[0056] Step 3: The control unit creates a computing unit that meets the requirements according to the infrastructure resource in the resource usage request, and constructs a closed computing cabin composed of this / these computing units, and informs the data resources, tool resources and corresponding digital contract id that the closed computing cabin needs to obtain.

[0057] Step 4: The closed computing cabin passes the resource request, digital contract id, resource user information and resource usage space digital identity certificate to the resource platform and key platform, and applies for obtaining each data resource, tool resource and corresponding key in the request; the key only encrypts the resources required.

[0058] Step 5: The resource platform and the key platform obtain the digital contract content from the blockchain system and check whether the requested data resources and tool resources meet the authorization conditions. If any check fails, the application is refused and error information is returned.

[0059] Step 6, the obtained data resources, tool resources, and corresponding keys are pulled into the closed computing cabin, and the following actions are performed in sequence: close the external data transmission channel, decrypt each resource, derive the use result using the resource, destroy the plaintext resource, ciphertext resource, and key, open the external data transmission channel, and return the resource use result and resource key operation log to the control unit for temporary storage; the key and decryption operation are only required for encrypted resources.

[0060] Step 7, the temporary storage resource use result is audited by the resource owner and exported by the resource user, and the resource key operation log is written into the blockchain for auditing and supervision by the resource owner, third-party supervisory department, and other stakeholders, and then the control unit destroys and recycles the closed computing cabin.

[0061] Here, "destroy and recycle the closed computing cabin" means: for a container-implemented computing unit, erase memory and disk data, delete the container, and recycle system resources; for a virtual machine-implemented computing unit, erase memory and disk data, delete the virtual machine, and recycle system resources; for a physical machine or other computing device-implemented computing unit, erase memory and disk data, perform system restore processing, and mark the physical machine or computing device as idle; for a closed computing cabin implemented by a combination (cluster) of multiple computing units, each computing unit is processed according to the above standards.

[0062] Step 8, the resource owner or the delegated party checks whether the resource use result meets the expected target, including: checking whether the use result and the authorized use purpose match; checking whether the use result contains the original resource; checking whether the use result poses a risk of reverse-engineering the original resource; checking whether the use result contains inappropriate information (such as sensitive information); etc. If the resource owner's check fails, the resource use result cannot be exported, and the resource user may be required to rectify and resubmit the result for review, or the authorization may be terminated directly to deny the resource user from using the resource again.

[0063] Step 9, after the check by the resource owner or its delegated party, the resource user can export the resource use result, and the resource sharing use process ends.

[0064] Step 10, the digital contract and resource key operation log are permanently retained on the blockchain for auditing and supervision by the resource owner, third-party supervisory department, and other stakeholders. The main content of auditing and supervision includes checking whether the resource owner has made improper authorization by viewing the digital contract content, and checking whether the resource user has violated the use behavior by viewing the resource key operation log.

[0065] The control use of resources is realized through the system of the present application, and the following beneficial effects can be realized: the present application supports unified authorization and use control of multiple types of resources such as data resources, tool resources and infrastructure resources, and breaks through the management boundaries of collaborative use of various resources. The present application realizes the whole-process supervision of resources in the key links of authorization, use, result export, etc., and improves the controllability, auditability and compliance of resource use. The present application provides a standardized and unified resource sharing and use mechanism, significantly reduces the resource docking cost across industries and systems, and enhances the flexibility and efficiency of resource circulation. The present application has good business adaptability and is suitable for various typical scenes such as model training, algorithm development, data reprocessing, data mining and intelligent reasoning tasks, and meets diversified computing and service needs. In the present application, the infrastructure resource allocation mode is flexible, and both self-owned resources deployed locally and external rented computing and storage resources can be accessed and scheduled as needed. The present application has low overall use cost, compared with the privacy computing scheme relying on complex cryptography algorithm or high-cost hardware, it does not need to consume a large amount of computing power to process encryption protocols, and does not rely on trusted execution environment (TEE) type hardware, and has higher cost performance. BRIEF DESCRIPTION OF DRAWINGS

[0066] Figure 1 The system architecture diagram of the present application is shown in the figure. DETAILED DESCRIPTION

[0067] Embodiment 1 The present application provides a resource use control system, which includes a resource use space, a resource platform, a key platform and a blockchain system, as shown in Figure 1The system comprehensively uses technologies such as blockchain, digital contract and secure sandbox to build a whole-process security control mechanism from authorization to use of resources, ensures that the use of resources strictly complies with the authorization terms in the digital contract, and has good auditability and traceability, and can meet the resource sharing needs of multiple spans. The resources include data resources, tool resources and infrastructure resources. The resource platform is a resource management system for storing, managing and authorizing to provide data resources and tool resources, and supports resources to be stored in an encrypted or non-encrypted manner; if the resources are stored in an encrypted manner, the corresponding keys are stored in the key platform to realize separate storage of ciphertext keys. The key platform is a security management system for storing, managing and authorizing to provide keys, for storing the keys corresponding to the encrypted resources, and establishing a binding relationship between the keys and the encrypted resources. The resource use space is an application space system for securely using data resources and tool resources, for providing infrastructure resources such as CPU, memory and network, including a control unit and a closed computing cabin. The control unit processes resource use requests, reads the digital contract content from the blockchain system and checks whether the requested resources meet the conditions agreed in the digital contract, creates a closed computing cabin for the resource user to use the resources after the check is passed, temporarily stores the use results after the resources are used, provides the use results for the resource user according to the agreement, writes the resource key operation log in the closed computing cabin into the blockchain for storage, and finally recycles the closed computing cabin. The closed computing cabin provides a closed computing environment, and after pulling the data resources, tool resources and corresponding keys in the resource request to the closed computing cabin, it sequentially performs the following operations: closing the external data transmission channel, decrypting each resource, using the resources to obtain the use results, destroying the plaintext resources, ciphertext resources and keys, opening the external data transmission channel, and exporting the resource use results and resource key operation log. Among them, the key and decryption operation are only required for encrypted resources.

[0068] The blockchain system is a storage system for providing digital contract services and log storage services. The digital contract service refers to that the resource owner and the user record the agreed resource authorization terms in the digital contract and sign to confirm and store in the blockchain. The log storage service provides storage for resource key operation logs, and the key operations include resource pulling, resource decryption, resource use process behavior, resource destruction after use, resource use result auditing and resource use result exporting.

[0069] A typical application scenario of resource sharing and use is that multiple units realize data security sharing and use through the system, and the implementation method is that each unit independently deploys a set of resource use space, resource platform and key platform, and all are connected with the common blockchain system; the data resources, tool resources and corresponding keys to be shared by each unit are uploaded and stored in the resource platform and key platform of the unit by each business department of the unit, and are bound with the account of each unit.

[0070] When the resource sharing is carried out within a unit, the resource using department and the resource owning department of the same unit sign an authorization agreement through a blockchain digital contract. The authorized data resources, tool resources and keys are pulled from the resource platform and the key platform of the unit to the resource using space of the unit for use, and the resource flow is completed within the unit.

[0071] When the resource sharing is carried out across units, the resource using department and the resource owning department of different units sign an authorization agreement through a blockchain digital contract. The authorized data resources, tool resources and keys are pulled from the resource platform and the key platform of one unit to the resource using space of another unit for use, and the resource flow occurs between units.

[0072] In a complex business scenario, the resource using department may need to use data resources and tool resources from different departments of multiple units, and due to the insufficient computing power, security level and other conditions of the resource using space of the unit, the data resources and tool resources need to be pulled to the resource using space of a professional unit (such as a supercomputing center) for use. At this time, the resource user can jointly sign an authorization agreement on each item of data resources, tool resources and infrastructure resources through a digital contract and each resource owner. In this scenario, the authorized data resources, tool resources and keys are pulled from the resource platform and the key platform of multiple units to the resource using space of a professional unit for use.

[0073] Each resource using space is equipped with a digital identity certificate, which is realized by a CA certificate or a decentralized identifier (DID), records or associates the domain name, IP, number, organization name, deployment region, security level (equal protection, sub-protection) and other optional information (such as professional qualification, qualification and level) of the resource using space; when the resource using space sends a resource request to the resource platform and the key platform to obtain resources and keys (such as steps 6 and 8 in Figure 1 , the digital identity certificate needs to be provided to the resource platform and the key platform to determine whether the resource using space meets the authorization requirements of the use region and the use security.

[0074] The digital contract refers to the authorization clause, which can be one to multiple authorization clauses. Each authorization clause represents the authorized use of a resource object and the limitation condition of the use. After all resource owners and resource users (i.e. authorized parties and authorized parties) sign and confirm, the digital contract comes into effect. When there are multiple authorization clauses in the digital contract, all clauses need to be met at the same time, i.e. the clauses are in an "and" relationship, indicating that each resource object needs to be subject to the limitation condition when the digital contract is performed.

[0075] The authorization clause mainly includes key fields such as authorized resources, authorized party, authorized party, resource category and restriction condition list and the like. The restriction condition list can be composed of 0 to multiple restriction conditions: when the number of restriction conditions is 0, it represents that the resource object is authorized to the resource user, and no additional restriction condition is attached; when there is one or more restriction conditions, it represents that the resource object is authorized to the resource user, but the use needs to meet all the use restriction conditions of the resource, that is, the relationship between the restriction conditions is "and". In particular, there can be no infrastructure resource authorization clause in the digital contract, indicating that the use of this type of resource object is not limited, mainly used in the metering charging scene or the scene of using self-owned infrastructure resources. The restriction condition is composed of "restriction condition type" and "restriction condition value" in the form of key-value pair.

[0076] When the resource category is "infrastructure resource", the authorization clause describes the resource authorization of the computing unit of the closed computing cabin. When there is only one infrastructure resource authorization clause in the digital contract, it means that the resource user can apply for at most one computing unit, that is, the created closed computing cabin can only be composed of one computing unit, and the computing unit needs to meet all the restriction conditions in the authorization clause; when there are multiple infrastructure resource authorization clauses in the digital contract, it means that the resource user can apply for not more than the number of authorization clauses of computing units, that is, the created closed computing cabin can be composed of multiple computing units, and each computing unit needs to meet all the restriction conditions in the authorization clause.

[0077] For different types of resources, the restriction mode is also different.

[0078] Each product in the system can also be designed with a blockchain node module, and the blockchain node modules of each product can interconnect and communicate to form a blockchain system, which can save the device cost of building an additional blockchain system and the human cost of maintaining the blockchain system, and can be used for some special networks without ready-made blockchain systems. In the public network and other networks with ready-made blockchain systems, the trusted space all-in-one machine and the trusted space platform can choose not to install the blockchain node module, and directly connect to the existing blockchain system. However, the supervision all-in-one machine needs to install the blockchain node module in both the case of forming a blockchain system by itself and the case of using an existing blockchain system, so as to directly participate in the system operation of the blockchain system as a blockchain node, and directly obtain the on-chain information, so that the supervision result is more reliable.

[0079] The system of the application is composed of a trusted space all-in-one machine, a trusted space platform and a supervision all-in-one machine in a hybrid network, specifically as follows: The trusted space all-in-one machine is realized in a single server in the form of a logical module Figure 1The system comprises a resource utilization space, a resource platform, a key platform, and blockchain nodes. The closed computing module only supports container and virtual machine implementations. The blockchain nodes, along with other blockchain nodes within the system, collectively form the blockchain system. This product is characterized by its low price and plug-and-play functionality, but its computing and storage capabilities are limited by single-machine performance. It is suitable for organizations with relatively low computing and storage demands, such as small businesses.

[0080] Trusted space platform, implemented in cluster form Figure 1 The system comprises a resource usage space, a resource platform, a key platform, and blockchain nodes. The resource usage space is primarily implemented by a computing cluster consisting of computing servers and other dedicated computing devices. The resource platform is mainly implemented by a storage cluster consisting of storage servers and dedicated storage devices. The key platform is mainly implemented by a cluster consisting of storage servers and security devices such as cryptographic machines. One or more blockchain nodes can be implemented, each consisting of a dedicated blockchain server. These nodes, along with other blockchain nodes in the system, together form the blockchain system. This product is characterized by strong computing power, storage capacity, and system reliability, and its computing and storage capabilities can be elastically expanded as needed. It is suitable for medium to large-sized business organizations and professional institutions, such as large enterprises and supercomputing centers.

[0081] The integrated monitoring machine is mainly composed of Figure 1 The system consists of a blockchain node module and an additional statistical analysis module. The blockchain node module allows the monitoring device to connect to the blockchain system as a blockchain node; the statistical analysis module collects and analyzes data such as digital contracts and key operation logs on the blockchain to monitor the behavior of resource owners and users within the system. This product is primarily provided to authoritative departments such as regulatory authorities and industry associations to exercise regulatory power.

[0082] The blockchain node components of the above three types of products together constitute... Figure 1 The blockchain system within the platform allows data resources, tools, and keys stored in any trusted space appliance / platform to be retrieved and used in any resource usage space, provided that authorization requirements are met. Authoritative bodies can then use the monitoring appliance to oversee the entire data flow process.

[0083] Based on the above resource usage control system, the steps to achieve controlled resource usage are as follows: Step 1: Based on actual business needs, the resource user and the resource owner specify the resources they need to use, and organize the information such as the ID of each resource object, the authorizing party ID, the authorized party ID, the resource category, the usage restrictions, and the signatures of all parties into the form of authorization terms, and record them in the blockchain system through digital contracts.

[0084] Step 2, the resource user sends the resource usage request (the request content can include data resources, tool resources and infrastructure resources) and the corresponding digital contract id to the resource usage space expected to be used, and the control unit of the resource usage space reads the digital contract content from the blockchain system and checks whether the requested resources meet the conditions agreed in the digital contract. If any check fails, the creation of the closed computing cabin is rejected and an error message is returned; for the closed computing cabin that has been created, continuous checking is performed. If it is found that any limit condition of any resource object no longer meets (such as the expiration of the authorization time), the closed computing cabin is frozen or even recycled.

[0085] Step 3, the control unit creates a computing unit that meets the requirements according to the infrastructure resource in the resource usage request, and constructs a closed computing cabin composed of this / these computing units, and informs the closed computing cabin of the data resources, tool resources and corresponding digital contract id that need to be pulled.

[0086] Step 4, the closed computing cabin delivers the data and tool resource request, the digital contract id, the resource user information and the resource usage space digital identity certificate to the resource platform and the key platform, and applies for obtaining each item of data resource, tool resource and corresponding key in the request; the key only encrypts the resource.

[0087] Step 5, the resource platform and the key platform obtain the digital contract content from the blockchain system and check whether the requested data resources and tool resources are authorized to the resource user in the contract and whether all the usage limit conditions have been met. If any check fails, the application is rejected and an error message is returned.

[0088] Step 6, the closed computing cabin pulls the obtained data resources, tool resources and corresponding keys into the closed computing cabin, and sequentially performs the following actions: close the external data transmission channel, decrypt each resource, use the resource to obtain the usage result, destroy the plaintext resource, the ciphertext resource and the key, open the external data transmission channel, and return the resource usage result and the resource key operation log to the control unit for temporary storage; the key only encrypts the resource.

[0089] Step 7, the control unit stores the resource usage result for the resource owner to audit and the resource user to export, and writes the resource key operation log into the blockchain for the resource owner, third-party supervisory department and other stakeholders to audit and supervise, and then the control unit destroys and recycles the closed computing cabin.

[0090] Step 8, each resource owner checks whether the resource usage result meets the expected target, mainly including checking whether the usage result matches the authorized usage purpose; checking whether the usage result contains the original resource; checking whether the usage result poses a risk of reverse deduction of the original resource; checking whether there is inappropriate information (such as sensitive information) in the usage result, etc. If the resource owner's check fails, the resource usage result is not allowed to be exported, and the resource user may be required to rectify and resubmit the result for review, or the authorization is directly terminated to refuse the resource user to use the resource again.

[0091] Step 9, after the check of each resource owner, the resource user can export the resource usage result, and the resource sharing usage process ends.

[0092] Step 10, the digital contract and resource key operation log are permanently retained on the blockchain for audit and supervision by various stakeholders including resource owners, third-party authorities, etc. The main content of audit and supervision includes checking whether the resource owner has made improper authorization by viewing the digital contract content, and checking whether the resource user has violated the usage rules by viewing the resource key operation log.

[0093] Through the above system and method, effective control can be achieved at each node of resource sharing: 1. The resource user and the resource owner reach an agreement on resource authorization usage through a digital contract, which stipulates the rights and obligations of each party and regulates the behavior of each party during resource usage.

[0094] 2. The anti-repudiation and tamper-proof features of the digital contract enable the supervisory department to review whether the resource owner has made improper authorization by viewing the authorization terms of the digital contract.

[0095] 3. The control unit of the resource usage space checks whether the resource user is the authorized party for each resource and whether the authorization terms of each resource (time, space, security requirements, etc.) are met before creating a closed computing cabin, and rejects the creation of a closed computing cabin for resource usage if any check fails.

[0096] 4. The control unit of the resource usage space continuously checks the closed computing cabin, and freezes or recycles the closed computing cabin if the currently used resource no longer meets the authorized limitation conditions (such as the expiration of the authorized usage time).

[0097] 5. The resource platform and the key platform check whether the resource user is the authorized party for data resources and tool resources, and whether the authorization terms of each resource (time, space, security requirements, etc.) are met, and reject the resource usage request if any check fails.

[0098] 6. After retrieving data and tool resources, the closed computing module immediately shuts down the external data transmission channel. The entire resource usage process takes place in a closed environment. The external data transmission channel is only opened after the resources are used up and the encrypted resources, keys, and plaintext resources are destroyed, allowing the export of resource usage results and critical operation logs. This closed-loop resource usage method effectively prevents the unauthorized theft and secondary dissemination of original resources.

[0099] 7. The method of binding data resources and tool resources in a closed computing module can limit the ability to use data resources, allowing only applications within the scope of tool capabilities, and preventing resource users from engaging in unexpected usage behaviors.

[0100] 8. Before exporting the resource usage results, the resource owner must manually review them to check whether the resource usage results match the usage purpose agreed in the digital contract. This can prevent the resource user from engaging in improper resource usage behavior, such as using the resource for other purposes or including the original resource in the usage results.

[0101] 9. Key operation logs for resources will be stored on the blockchain, allowing all stakeholders, including resource owners and regulatory authorities, to review the operational behavior during resource use and prevent resource users from engaging in illegal operations.

[0102] 10. The blockchain stores digital contracts and key resource operation logs, enabling full-process recording from resource authorization to the end of use, which can support full-process auditing by all stakeholders.

[0103] Example 2 Based on Example 1, the present invention is applied to the time-limited use of authorized resources, as follows.

[0104] The safety production supervision department of the municipal emergency management bureau is responsible for the safety production supervision of key enterprises in the jurisdiction; the material management department is responsible for the management, distribution, scheduling and other work of emergency materials in the jurisdiction; the IT management department is responsible for the research and development and management of IT facilities in the unit; the data of each department is stored in the form of encrypted data resources and keys in the resource platform and key platform of the trusted space all-in-one machine of the unit, and is bound with the department account. The IT management department needs to obtain the key enterprise data of the safety production supervision department and the material management data of the material management department, according to the type of key enterprise, enterprise location, emergency material storage point, type and quantity of emergency materials stored in each point, etc., combined with the AI algorithm provided by the algorithm team of a university in the city (stored in the form of encrypted tool resources and keys in the university trusted space platform), train an AI model to assist the material management department in re-planning the emergency material distribution plan when there are new key enterprises, including whether to add emergency material storage points, how to adjust the type and quantity of emergency materials stored in the existing points, etc. This work starts from June 1, 2024, and is required to be completed within one month. The relationship between departments and resources is shown in Table 5:

[0105] Table 5 Department and resource relationship table Main implementation steps: a. The IT management department applies for the data to be used on the trusted space all-in-one machine of the unit, including key enterprise data and material management data; the IT management department applies for AI algorithm to the algorithm team of the university through the form of message transfer from the trusted space all-in-one machine of the unit to the university trusted space platform; the application time of data and algorithm is from June 1, 2024 to June 30, 2024, and the purpose of application is to train the model for intelligent distribution of emergency materials. After the application is submitted, the trusted space all-in-one machine creates a digital contract on the blockchain, and generates the authorization clause list shown in Table 6 in the contract.

[0106]

[0107] Table 6 Digital contract authorization clause list b. After the creation of the digital contract, each business related party (safety production supervision department, material management department, IT management department, university algorithm team) checks the authorization clauses on the trusted space all-in-one machine / platform of their respective units, confirms that there is no error, and signs the contract through digital signature. After each party completes the signing, the digital contract takes effect.

[0108] c、IT management department operates the unit's trusted space integrated machine, tells the control unit the data resources (the unit's key enterprise data, material management data) and tool resources (university algorithm team's AI algorithm) and infrastructure resources (number and specifications of computing units) it needs to use, as well as the corresponding digital contract id. The control unit reads the contract content from the blockchain, first checks whether the contract authorizes these data resources and tool resources for the IT management department to use, and then checks whether the current time is between June 1, 2024 and June 30, 2024 according to the authorized restriction conditions. After passing the check, the control unit creates a closed computing cabin composed of the applied computing units, and tells the closed computing cabin the resource user information (IT management department), the data resources to be pulled, the tool resources, and the corresponding digital contract id.

[0109] d、After the closed computing cabin starts, it applies to the resource platform and key platform in the unit's trusted space integrated machine for key enterprise data and material management data and corresponding keys, and transmits the digital identity certificate, contract id and resource user (IT management department) information of the resource use space; applies to the resource platform and key platform in the university trusted space platform for AI algorithm and corresponding keys, and transmits the digital identity certificate, contract id and resource user (IT management department) information of the resource use space. The resource platforms and key platforms of the two parties first obtain the contract content from the blockchain system, check whether the applied data and tool resources have been authorized to the IT management department in the contract, and then check whether the current time is between June 1, 2024 and June 30, 2024 according to the authorized clause restriction conditions. After passing the check, the closed computing cabin is allowed to pull the applied data, tool resources and corresponding keys into the cabin, and then the closed computing cabin disconnects the external data transmission channel, decrypts the resources and carries out model training work.

[0110] e、After the training work is completed, the closed computing cabin deletes the encrypted data and tool resources, keys, plaintext data and tool resources in the cabin, and then restores the external data transmission channel, and returns the trained model file, model performance evaluation report and key operation log to the execution unit. The execution unit temporarily stores the former two as work results for auditing and exporting; the key operation log is transmitted to the blockchain system for notarization for the benefit parties such as regulatory agencies to audit. Finally, the control unit destroys and recycles the closed computing cabin.

[0111] f、The safety production supervision department and the material management department log in the unit trusted space all-in-one machine to audit the temporarily stored work results; the university algorithm team logs in the university trusted data space platform to audit the work results temporarily stored in the all-in-one machine in the form of mutual forwarding of messages to the emergency management bureau all-in-one machine. The contents of the audit mainly include checking whether the work results and the authorized use purposes match, whether the work results carry the original resources provided by the unit, whether the work results have the risk of reversing the original resources, whether there is inappropriate information (such as sensitive information) in the work results, and the like.

[0112] g、After the audit of each resource provider, the IT management department exports the work results, and the resource sharing and use process ends.

[0113] h、The digital contract and the resource key operation log are permanently retained on the blockchain, and the supervisory department and other stakeholders can audit the whole process of data sharing and use. The audit contents include checking whether the authorization of the safety production supervision department, the material management department and the university algorithm team to the key enterprise data, the material management data and the AI algorithm is inappropriate by checking the content of the digital contract, and checking whether there is a violation of the use of the above data resources and tool resources by the IT management department by checking the resource key operation log.

[0114] In the embodiment, there is no authorization clause for infrastructure resources in the digital contract, which means that the control unit of the resource use space will not limit the infrastructure resource application of the resource user, and the resource user can apply to create a closed computing cabin composed of any type, quantity and specification of computing units. Mainly to meet the scene of using self-owned resource use space that does not need to limit the use amount of infrastructure resources, or the scene that the resource user cannot determine the use amount of infrastructure resources in advance and needs to dynamically adjust during use, at this time, the infrastructure resource provider can charge according to the actual use amount.

[0115] Embodiment 3 On the basis of embodiment 1, the application is applied to the authorized resource in the specified space, and the application is as follows.

[0116] A large lake spans two prefecture-level cities, and the environmental protection management of the lake is jointly responsible by the environmental protection bureaus (A and B) of the two cities, each responsible for water quality monitoring, pollution control, ecological restoration, etc. in the city's jurisdiction. The work data of the two bureaus over the years are stored in the form of encrypted data sets and keys in the resource platform and key platform of the trusted space all-in-one machine of the unit, including: water quality monitoring department's monitoring point data, water quality sampling data over the years; pollution control department's pollution source data, patrol data over the years; ecological restoration department's restoration measures data, restoration results data over the years. Both parties now have the demand to converge both parties' work data over the years to train an AI model, which learns the management measures of both parties over the years and the water quality changes of the lake. The trained model can give suggestions for the overall work plan of the lake environmental protection management next year according to the water quality, monitoring points, pollution source information, patrol information, restoration measures information, etc. of the current year, including monitoring point layout adjustment, patrol time and route, key pollution source list, etc., and then the two units complete their respective jurisdiction part. Both parties now agree that the model training task will be undertaken by an artificial intelligence team of a certain university, with a construction period of three months from March 1, 2025 to May 31, 2025, and the training work can only be carried out in the university's trusted space platform (space number: 4A6C8E0D2F1B3E5D). The AI algorithm required for training is owned by the university's artificial intelligence team and is also stored in the form of encrypted tool resources and keys in the resource platform and key platform of the university's trusted space platform. The relationship between departments and resources is shown in Table 7:

[0117] Table 7 Department and resource relationship table The main implementation steps are: a. The university's artificial intelligence team applies for the use of data through the university's trusted space platform to the AB two bureau trusted space all-in-one machine, including the monitoring point data and water quality sampling data, pollution source data and patrol data, restoration measures data and restoration results data of the two bureaus; the university's artificial intelligence team applies for the use of AI algorithm on the university's trusted space platform. The application time of data and algorithm is from March 1, 2025 to May 31, 2025, the application space is the resource use space of the university's trusted space platform, and the application purpose is to train the model for intelligent management of lake environmental protection. After the application is submitted, the university's trusted space platform creates a digital contract on the blockchain, and the contract generates a list of clauses as shown in Table 8.

[0118]

[0119] Table 8 Digital contract authorization clause list b、After the digital contract is created, the business-related parties (water quality monitoring departments, pollution control departments, ecological restoration departments of the two bureaus, and the artificial intelligence team of the university) check the authorization terms on the trusted space all-in-one machine / platform of their respective units, confirm that there are no errors, and sign the contract through digital signature. After all parties complete the signing, the digital contract takes effect.

[0120] c、The university artificial intelligence team operates the university trusted space platform, and informs the control unit of the data resources (monitoring point data and water quality sampling data of the two bureaus, pollution source data and patrol data, restoration measure data and restoration result data) that need to be used, tool resources (AI algorithms of the university artificial intelligence team), infrastructure resources (number and specifications of computing units), and the corresponding digital contract id. The control unit reads the contract content from the blockchain, first checks whether the data and tool resources are authorized for use by the university artificial intelligence team in the contract, and then checks whether the current time is between March 1, 2025 and May 31, 2025 according to the authorized restriction conditions, and checks whether the space number recorded in the digital identity certificate of the resource use space matches the space number (4A6C8E0D2F1B3E5D) required in the digital contract. After the check is passed, the control unit creates a closed computing cabin composed of the applied computing units, and informs the closed computing cabin of the resource user information (the university artificial intelligence team), the data resources to be pulled, the tool resources, and the corresponding digital contract id.

[0121] d、After the closed computing cabin is started, it applies to the resource platform and key platform in the trusted space all-in-one machine of the two bureaus to obtain the monitoring point data and water quality sampling data, pollution source data and patrol data, restoration measure data and restoration result data of the two bureaus, and the corresponding keys of the above resources, and transmits the digital identity certificate of the resource use space, the contract id, and the resource user (the university artificial intelligence team) information; applies to the resource platform and key platform in the trusted space platform of the university to obtain the AI algorithm and the corresponding key, and transmits the digital identity certificate of the resource use space, the contract id, and the resource user (the university artificial intelligence team) information. The resource platforms and key platforms of bureaus A and B and the university first obtain the contract content from the blockchain system, check whether the applied data and tool resources are authorized to the university artificial intelligence team in the contract, and then check whether the current time is between March 1, 2025 and May 31, 2025 according to the authorization term restriction conditions, and check whether the resource use space number (transmitted through the digital identity certificate) where the closed computing cabin is located matches the space number (4A6C8E0D2F1B3E5D) required in the digital contract. After the check is passed, the closed computing cabin is allowed to pull the applied data, tool resources, and corresponding keys into the cabin, and then the closed computing cabin disconnects the external data transmission channel, decrypts the resources, and carries out model training work.

[0122] e. Same as step e in Example 2.

[0123] f. The water quality monitoring, pollution control, and ecological restoration departments of Bureaus A and B log in to their respective Trusted Space all-in-one machines to review the work results temporarily stored on the platform by forwarding messages to each other's Trusted Space platforms. The university's artificial intelligence team logs in to the university's Trusted Data Space platform to review the work results temporarily stored on the platform. The review mainly includes checking whether the work results match the authorized use purpose, whether the work results contain original resources provided by the party, whether the work results pose a risk of inferring original resources, and whether the work results contain inappropriate information (such as sensitive information).

[0124] g. After the resource providers have reviewed and approved the results, the university's artificial intelligence team will export the results, and the resource sharing process will end.

[0125] h. Digital contracts and key resource operation logs are permanently stored on the blockchain, allowing relevant authorities and other stakeholders to audit the entire data sharing and usage process. The audit primarily includes reviewing digital contract content to check for any improper authorization of data and tool resources by resource owners, and examining key resource operation logs to check for any unauthorized use of authorized resources by resource users.

[0126] In this embodiment, the university's artificial intelligence team is both the owner and the user of the AI ​​algorithm. In this case, it is still necessary to include authorization terms in the digital contract. On the one hand, it is to make a commitment to other resource owners that their data resources will only be used by this tool; on the other hand, it is necessary to allow regulators to audit whether the university's artificial intelligence team's authorization of the tool is compliant.

[0127] Example 4 Based on Example 1, the present invention is applied to the restriction of infrastructure resources as follows.

[0128] In Example 2, if model training cannot be conducted on the university's trusted space platform due to objective reasons such as insufficient computing power, the infrastructure resources of third-party professional institutions such as supercomputing centers can be utilized. For example, an application can be made to the trusted space platform (space number: 9C8B7A6D5E4F3C2D) of the provincial supercomputing center to create a closed computing chamber consisting of two computing units (id: 5E7D9F1A3C2E4B6D, 8B9A0C1D2E3F4A5B), specifying the specifications of these two computing units. After obtaining authorization from the supercomputing center's operations department (department id: B0A1C2D3E4F5A6B7), the university's artificial intelligence team can create the closed computing chamber for model training. The relationships between departments and resources are shown in Table 9.

[0129] Table 9 Department and resource relationship table The main implementation steps are: a. The university artificial intelligence team applies for the use of data in the form of forwarding messages to the AB two bureau trusted space integrated machines through the university trusted space platform, including the AB two bureau's monitoring point data and water quality sampling data, pollution source data and patrol data, repair measure data and repair result data; the university artificial intelligence team applies for the use of AI algorithms on the university trusted space platform; the university artificial intelligence team applies for the use of infrastructure resources in the form of forwarding messages to the provincial supercomputing center trusted space platform through the university trusted space platform, that is, a closed computing cabin composed of two computing units and the specific specifications of the two computing units; the application time of data, algorithms and infrastructure resources is from March 1, 2025 to May 31, 2025, the application space is the resource use space of the provincial supercomputing center trusted space platform, and the application purpose is to train models for intelligent governance of lakes and environmental protection. After the application is submitted, the university trusted space platform creates a digital contract on the blockchain, and generates a list of authorization clauses as shown in Table 10 in the contract.

[0130]

[0131] Table 10 Digital contract authorization clause list b. After the digital contract is created, each business related party (the water quality monitoring department, pollution control department, ecological restoration department of the AB two bureaus, the university artificial intelligence team and the supercomputing center operation department) checks the authorization clauses on the trusted space integrated machine / platform of their respective units, confirms that there is no error, and signs the contract through digital signature. After each party completes the signing, the digital contract takes effect.

[0132] c. The university artificial intelligence team informs the control unit of the data resources (monitoring point data and water sampling data of AB two stations, pollution source data and patrol data, repair measure data and repair result data), tool resources (AI algorithm of the university artificial intelligence team), infrastructure resources (closed computing cabin composed of two computing units and the specifications of the two computing units), and the corresponding digital contract id by forwarding messages from the university trusted space platform to the supercomputing center trusted space platform. The control unit reads the contract content from the blockchain, first checks whether the data, tool resources and infrastructure resources are authorized for use by the university artificial intelligence team in the contract, and then checks whether the current time is between March 1, 2025 and May 31, 2025 according to the authorized restriction conditions; checks whether the space number recorded in the digital identity certificate of the resource use space matches the space number (9C8B7A6D5E4F3C2D) required in the digital contract; checks whether the number and specifications of the computing units applied for exceed the specification limit in the digital contract. After the check is passed, the control unit creates a closed computing cabin composed of the computing units applied for, and informs the closed computing cabin of the resource user information (university artificial intelligence team), the data resources to be pulled, the tool resources, and the corresponding digital contract id.

[0133] d. After the closed computing cabin is started, it applies to the resource platforms and key platforms in the AB two-station trusted space integrated machines for obtaining the monitoring point data and water sampling data of the two stations, the pollution source data and patrol data, the repair measure data and repair result data, and the corresponding keys of the above resources, and transmits the digital identity certificate of the resource use space, the contract id and the resource user (university artificial intelligence team) information; applies to the resource platforms and key platforms in the university trusted space platform for obtaining the AI algorithm and the corresponding key, and transmits the digital identity certificate of the resource use space, the contract id and the resource user (university artificial intelligence team) information. The resource platforms and key platforms of A station, B station and the university first obtain the contract content from the blockchain system, check whether the data and tool resources applied for are authorized to the university artificial intelligence team in the contract, and then check whether the current time is between March 1, 2025 and May 31, 2025 according to the authorized terms and conditions, and check whether the resource use space number (transmitted through the digital identity certificate) of the closed computing cabin matches the space number (9C8B7A6D5E4F3C2D) required in the digital contract. After the check is passed, the closed computing cabin is allowed to pull the applied data, tool resources and corresponding keys into the cabin, and then the closed computing cabin disconnects the external data transmission channel, decrypts the resources and carries out model training work.

[0134] e. The same as step e of embodiment 2.

[0135] f、AB two local water quality monitoring departments, pollution control departments, ecological restoration department, space, through the supercomputing center trusted space platform to each other forward message form on the temporary in the supercomputing center platform on the work results of the audit; university artificial intelligence team login university trusted data space platform, through and supercomputing center trusted space platform to each other forward message form on the temporary in the supercomputing center platform on the work results of the audit. The content of the audit mainly includes checking the work results and authorized use purposes, whether the work results contain the original resources provided by the party, whether the work results exist the risk of anti-pushing original resources, whether there are inappropriate information (such as sensitive information) in the work results, etc.

[0136] g、After the audit of each party, the university artificial intelligence team exports the work results, and the resource sharing use process ends.

[0137] h、Digital contract and resource key operation log are permanently retained on the blockchain, and the supervisory department and other stakeholders can audit the whole process of data sharing and use. The main contents of the audit include checking whether there are inappropriate places in the authorization of data resources, tool resources and infrastructure resources by the parties to the contract by viewing the contents of the digital contract, and checking whether there are illegal use behaviors of authorized resources by the resource users through the resource key operation log.

[0138] In this embodiment, the authorization clause for infrastructure resources appears, which is mainly used in the quantitative pricing scene. The resource user first explicitly specifies the resource quantity (number and specification of computing units) and use time with the resource provider, and writes these information into the digital contract. When the resource user applies to create a closed computing cabin, the number and specification of computing units applied for can be successfully applied as long as they do not exceed the number and specification in the contract, but in most cases, the number and specification applied for will be exactly the same as the number and specification in the contract. Because the resource provider wants to ensure that the resource supply to the resource user can be met, the resource quantity agreed in the contract will be reserved for the resource user, and the resource user will be charged even if he does not use it.

[0139] In addition, in this embodiment, the computing unit may not know its id before it is created by the resource user space, so the id of the authorized resource in the digital contract authorization clause cannot be filled in advance. There are two ways to deal with this situation: one is to leave the id of the authorized resource in this clause blank, and then fill it back by the control unit after the computing unit is really created; the other is to generate a random id in this clause first, and assign the id to the computing unit when the control unit creates the computing unit.

[0140] Embodiment 5 On the basis of embodiment 1, the application is applied to limit the use of safety and region, and the specific implementation is as follows.

[0141] In embodiment 2, if each resource owner requires that the data and tool resources can only be used in the resource use space within China and meet the second-level requirements of the network security protection, the university artificial intelligence team can apply for infrastructure resources to any resource use space within China that meets the second-level requirements of the network security protection. The relationship between each department and resource is shown in Table 11:

[0142] Table 11 Department and resource relationship table The main implementation steps are: a. The university artificial intelligence team applies to use data resources in the form of forwarding messages to the AB two bureau trusted space all-in-one machine through the university trusted space platform, including the monitoring point data and water quality sampling data, pollution source data and patrol data, repair measure data and repair result data of the AB two bureau; the university artificial intelligence team applies to use AI algorithms on the university trusted space platform; the application and use time of the data and tool resources are from March 1, 2025 to May 31, 2025, and the application and use purpose is to train the model for the intelligent governance of lakes and environmental protection. After the application is submitted, each resource owner considers that the resources applied for have certain sensitivity and can only be used in the resource use space within China that meets the second-level requirements of the network security protection, so the requirements for the use of regions and the use of safety are supplemented, and finally a digital contract containing the list of clauses shown in Table 12 is formed on the blockchain.

[0143]

[0144] Table 12 Digital contract authorization clause list b. After the digital contract is created, each business related party (the water quality monitoring department, pollution control department, ecological restoration department of the AB two bureau, and the university artificial intelligence team) checks the authorization clauses on the trusted space all-in-one machine / platform of each unit, confirms that there is no error, and signs the contract through digital signature. After each party completes the signing, the digital contract takes effect.

[0145] c、The university artificial intelligence team sends a message to any trusted space integrated machine / platform in China that meets the second level of network security protection requirements and can lease infrastructure resources, informing the control unit of the data resources (AB bureau monitoring point data and water sampling data, pollution source data and patrol data, repair measures data and repair result data), tool resources (university artificial intelligence team AI algorithm), infrastructure resources (number and specifications of computing units), and the corresponding digital contract id that need to be used. The control unit reads the contract content from the blockchain, first checks whether the data resources and tool resources are authorized for use by the university artificial intelligence team in the contract, and then checks whether the current time is between March 1, 2025 and May 31, 2025 according to the authorized limit conditions; checks whether the security level recorded in the digital identity certificate of the resource use space is not lower than the use security requirement (second level of network security protection) in the digital contract; checks whether the deployment region recorded in the digital identity certificate of the resource use space meets the use region requirement (CN, i.e. China) in the digital contract. After the check is passed, the control unit creates a closed computing cabin composed of the applied computing units, and informs the closed computing cabin of the resource user information (university artificial intelligence team), the data resources to be pulled, the tool resources, and the corresponding digital contract id.

[0146] d、After the closed computing cabin is started, it applies to the resource platforms and key platforms in the AB bureau trusted space integrated machine for obtaining the bureau's monitoring point data and water sampling data, pollution source data and patrol data, repair measures data and repair result data, and the keys corresponding to the above resources, and transmits the digital identity certificate of the resource use space, the contract id and the resource user (university artificial intelligence team) information; applies to the resource platforms and key platforms in the university trusted space platform for obtaining the AI algorithm and the corresponding key, and transmits the digital identity certificate of the resource use space, the contract id and the resource user (university artificial intelligence team) information. The resource platforms and key platforms of A bureau, B bureau and university first obtain the contract content from the blockchain system, check whether the applied data and tool resources are authorized to the university artificial intelligence team in the contract, then check whether the current time is between March 1, 2025 and May 31, 2025 according to the authorized clause limit conditions, check whether the security level (already transmitted through the digital identity certificate) of the resource use space where the closed computing cabin is located meets the use security requirement (second level of network security protection) in the digital contract, and check whether the deployment region (already transmitted through the digital identity certificate) of the resource use space where the closed computing cabin is located meets the use region requirement (CN, i.e. China) in the digital contract. After the check is passed, the closed computing cabin is allowed to pull the applied data and tool resources into the cabin, and then the closed computing cabin disconnects the external data transmission channel, decrypts the resources and carries out model training work.

[0147] e. Same as step e in Example 2.

[0148] The water quality monitoring, pollution control, and ecological restoration departments of Bureaus g and A log in to their respective Trusted Data Space all-in-one machines. They review the work results temporarily stored on these machines / platforms by forwarding messages to each other. Similarly, the university's artificial intelligence team logs in to the university's Trusted Data Space platform and reviews the work results temporarily stored on it by forwarding messages to each other. The review primarily checks whether the work results match the authorized usage purpose, whether the work results include original resources provided by the organization, whether there is a risk of inferring original resources from the work results, and whether the work results contain inappropriate information (such as sensitive information).

[0149] h. After all parties have reviewed and approved the work, the university's artificial intelligence team exports the results, and the resource sharing process ends.

[0150] g. Digital contracts and key resource operation logs are permanently stored on the blockchain, allowing relevant authorities and other stakeholders to audit the entire data sharing and usage process. The audit includes reviewing digital contract content to check for any improper authorization of data and tool resources by resource owners, and reviewing key resource operation logs to check for any unauthorized use of authorized resources by resource users.

[0151] In this embodiment, the authorization terms only specify the security and geographical scope of data and tool resources, without restricting their use to a specific space by designating a space number, domain name, or IP address. Therefore, university AI teams can apply for infrastructure resources from any trusted space appliance / platform within China that meets Level 2 security protection requirements and can lease infrastructure resources, such as commercial supercomputing centers. Furthermore, the digital contract does not include authorization clauses for infrastructure resources; that is, the control unit of the resource usage space does not restrict the user's infrastructure resource application. The user can apply to create any type, quantity, and specification of computing units to form a closed computing module. During resource usage, the infrastructure resources can be flexibly expanded or reduced according to business needs, and the infrastructure resource provider will charge based on actual usage.

Claims

1. A resource utilization control system, characterized in that: This includes resource usage space, resource platform, and key platform; The resource platform is used to store, manage, and authorize the provision of data resources and tool resources, and supports the storage of resources in an encrypted or unencrypted manner. If the resource is stored in an encrypted manner, the corresponding key is stored in the key platform to achieve separate storage of the ciphertext key. The usage rules of the resource platform are as follows: the resource owner authorizes the resource user account according to the digital contract, and the authorized account has the right to access the resource. The key platform is used to store the keys corresponding to the encrypted resources and to establish a binding relationship between the keys and the encrypted resources. The usage rules of the key platform are as follows: the key owner authorizes the account applying for the key according to the digital contract, and the authorized account has the right to obtain the key. The resource usage space is used to provide infrastructure resources and secure data and tool resources. The resource usage space includes a control unit and a closed computing module. The control unit processes resource usage requests, reads the digital contract content from the blockchain system, checks whether the requested resources meet the conditions stipulated in the digital contract, creates a closed computing module for resource users to use in a closed manner, temporarily stores the usage results after resource use, and makes them available to resource users as agreed. Simultaneously, it writes the key operation logs of the resources within the closed computing module to the blockchain for evidence storage and is finally responsible for reclaiming the closed computing module resources. The closed computing module provides a closed computing environment, submits resource requests, and after pulling the data resources, tool resources, and corresponding keys from the resource requests into the closed computing module, it performs the following key operations in sequence: closes the external data transmission channel, decrypts each resource, uses the resources to obtain usage results, destroys plaintext resources, ciphertext resources, and keys, opens the external data transmission channel, and exports the resource usage results. The key and decryption operations are only needed for encrypting resources; The resource usage space, resource platform, and key platform are each configured with a blockchain node module. Through the interconnection of their respective blockchain node modules, they form their own blockchain system. The self-constructed blockchain system is used to provide digital contract services and log storage services. The resource usage space, resource platform, and key platform directly participate in the operation of the constructed blockchain system as their respective configured blockchain nodes and directly obtain on-chain information. Alternatively, the resource usage control system may be configured with a separate shared blockchain system, which provides digital contract services and log storage services for evidence preservation. The digital contract service refers to the resource owner and user recording the agreed-upon resource authorization terms in a digital contract, signing and confirming it, and then storing it on the blockchain. When using a resource, the corresponding digital contract is transmitted to the resource usage space, resource platform, and key platform as authorization. The resource usage space, resource platform, and key platform each decide whether to allow the use of the resources they manage based on the authorization terms in the digital contract. The log storage service provides evidence preservation for key resource operation logs, including but not limited to resource retrieval, resource decryption, resource usage process behavior, resource destruction after use, resource usage result review, and resource usage result export. The resources include three main categories: data resources, tool resources, and infrastructure resources.

2. The resource utilization control system according to claim 1, characterized in that: The resource usage request processed by the control unit includes the requested resource information and the corresponding digital contract ID.

3. A resource utilization control system according to claim 1, characterized in that: The closed computing module includes individual computing units or combined computing units with external data transmission channels that can be shut down. When a resource user's resource usage request contains only one infrastructure resource, the closed computing module is implemented by a single computing unit. When a resource user's resource usage request contains multiple infrastructure resources, the closed computing module consists of multiple computing units, with each infrastructure resource in the resource usage request describing a computing unit. When the closed computing module involves multiple computing units, it achieves internal communication between the computing units through an internal data transmission channel and exchanges information with the outside world through an external data transmission channel.

4. A resource utilization control system according to claim 1, characterized in that: The authorization content recorded in the digital contract is used to audit whether there is any improper authorization; the resource key operation log records the detailed usage process of the resource, which is used to audit whether there is any illegal use.

5. A resource utilization control system according to claim 1, characterized in that: When the system includes multiple resource usage spaces, multiple resource platforms, and multiple key platforms, with authorization, each resource usage space has the permission to pull data resources, tool resources, and keys from any resource platform and key platform to its own closed computing module for use.

6. A resource utilization control system according to claim 1, characterized in that: Each resource usage space is equipped with a digital identity certificate, which is implemented by a CA certificate or a decentralized identity identifier (DID). The certificate records or associates at least one or more pieces of information about the resource usage space: domain name, IP address, ID number, organization name, deployment region, security level and / or professional qualifications, certifications, and grade information. When a resource usage space sends a resource request to the resource platform and key platform to obtain resources and keys, it needs to provide this digital identity certificate so that the resource platform and key platform can determine whether the resource usage space meets the authorization requirements.

7. A resource utilization control system according to claim 1, characterized in that: The digital contract refers to one or more authorization clauses, each representing the authorized use of a resource object and the restrictions on its use. The digital contract becomes effective after all resource owners and users sign and confirm it. When there are multiple authorization clauses in a digital contract, all clauses must be satisfied simultaneously, meaning that the performance of the digital contract requires compliance with the restrictions of each resource object. The authorization clauses include at least one or more of the following: authorized resource, authorizing party, authorized party, resource category, and restrictions. The restrictions are composed of restriction type and restriction value in the form of key-value pairs.

8. A resource utilization control system according to claim 7, characterized in that: When the resource category is data resource or tool resource, the restriction type must include at least one or more of the following: usage time, number of uses, usage frequency, usage space, usage region, usage security, and usage purpose; when the resource category is infrastructure resource, the restriction type must include at least one or more of the following: computing unit type, CPU, GPU, memory, disk, internal network, external network, operating system, and usage time.

9. A resource use control method based on the resource use control system according to any one of claims 1-8, characterized in that, The steps for controlled use of resources are as follows: Step 1: Based on actual business needs, the resource user and the resource owner specify the resources they need to use, and organize the information such as the ID of each resource object, the authorizing party ID, the authorized party ID, the resource category, the usage restrictions, and the signatures of all parties into the form of authorization terms, and record them in the blockchain system through digital contracts; Step 2: The resource user sends the resource usage request and the corresponding digital contract ID to the resource usage space to be used. The control unit of the resource usage space reads the content of the digital contract from the blockchain system and checks whether the various resources requested meet the conditions agreed in the digital contract. If any check fails, the creation of the closed computing module is refused and an error message is returned. For the closed computing module that has been created, it is continuously checked. If any restriction condition of any resource object is no longer met, the closed computing module is frozen or even reclaimed. Step 3: The control unit creates computing units that meet the requirements based on the infrastructure resources in the resource usage request, and constructs a closed computing cabin composed of the computing units that meet the requirements. It also informs the closed computing cabin of the data resources, tool resources and corresponding digital contract IDs that need to be acquired. Step 4: The closed computing module transmits the resource request, digital contract ID, resource user information, and resource usage space digital identity certificate to the resource platform and key platform to request the various data resources, tool resources, and corresponding keys in the request. The key is only needed to encrypt the resource; Step 5: The resource platform and key platform retrieve the digital contract content from the blockchain system and check whether the requested data resources and tool resources meet the authorization conditions. If any check fails, the application is rejected and an error message is returned. Step 6: Pull the acquired data resources, tool resources and corresponding keys into the closed computing chamber, and perform the following actions in sequence: close the external data transmission channel, decrypt each resource, use the resources to obtain the usage results, destroy plaintext resources, ciphertext resources and keys, open the external data transmission channel, and send back the resource usage results and resource key operation logs to the control unit for temporary storage. The key is only needed to encrypt the resource; Step 7: Temporarily store the resource usage results for review by resource owners and export by resource users, and write the key resource operation logs to the blockchain for auditing and supervision by all stakeholders. Then, control the destruction and recycling of the closed computing module. Step 8: Each resource owner or their agent checks whether the resource usage results meet the expected goals. If the check fails, the resource usage results are not allowed to be exported, and the resource user is required to rectify and resubmit the results for review, or the authorization is terminated and the resource user is refused further use of the resources. The check to ensure the resource usage results meet the expected goals includes at least one or more of the following: checking whether the usage results match the authorized purpose; checking whether the usage results contain any original resources; checking whether the usage results pose a risk of inferring the original resources; and checking whether there is any inappropriate information in the usage results. Step 9: After each resource owner or their authorized party has checked and approved the resource usage, the resource user exports the resource usage results, and the resource sharing and usage process ends. Step 10: Digital contracts and key resource operation logs are stored on the blockchain for auditing and oversight by all stakeholders. The auditing and oversight includes, but is not limited to: checking whether the resource owner has authorized the use of the resource by reviewing the digital contract content, and checking whether the resource user has engaged in any illegal use by reviewing the key resource operation logs. The blockchain system in the above steps is constructed by the blockchain node modules configured in the resource usage space, resource platform, and key platform respectively; or, the blockchain system in the above steps is a separate shared blockchain system that provides digital contract services and log storage services for the resource usage space, resource platform, and key platform.

Images