Data affiliation marking system and method and data affiliation verification system and method

Abstract

The invention relates to a data attribution marking method and system. The data affiliation marking method comprises the following steps: an acquisition step: acquiring affiliation information of data, the affiliation information being an IP address of a data generation end generating the data; an embedding step: generating an affiliation identifier based on the affiliation information and embedding the affiliation identifier into the data; and a data transmission step: transmitting the data containing the attribution identifier through a communication protocol supporting the transmission of the attribution information. When a data object is created, at a data generation end, a data affiliation marking system directly embeds an affiliation identifier (such as an IPv6 address or an identifier similar to an IPv6 format after an IPv4 address is processed) into a data body or metadata thereof, and legality of the affiliation identifier of the received data is carried out at a data receiving end, so that the data object is created, and the data object is created. The security and traceability of data can be enhanced.

Description

Technical Field

[0001] This invention relates to data processing technology, and more specifically to a data ownership marking system, a data ownership marking method, a data ownership verification system, and a data ownership verification method. Background Technology

[0002] Currently, there is a general lack of effective "ownership identification mechanism" when data is transferred across platforms. This problem makes data ownership unclear, and when data is leaked or misused, it is difficult to accurately trace the responsible party, resulting in numerous difficulties in accountability.

[0003] To address the issues of data ownership identification and tracking, the industry currently employs methods such as data tagging, hash values ​​and access control policies, and data watermarking. Data tagging is a common approach, typically using metadata-based data management mechanisms. By adding tags to data, its attributes and characteristics are identified, thus achieving a certain degree of data classification and management. When using hash values ​​to manage data, the hash value is used to identify the uniqueness of the data (the hash value is calculated using a specific algorithm) to ensure data integrity and uniqueness. Furthermore, data watermarking is another common technology. It embeds implicit identity information into multimedia data such as images and text, giving the data a unique "mark" without affecting its usability, enabling data tracking and origination.

[0004] However, these existing technologies all have certain drawbacks and problems. For example, although hash values ​​can guarantee the uniqueness of data, they cannot be bound to specific network entities. This means that it is difficult to determine which specific network node or entity the data originally came from during the data flow process. For another example, data watermarking schemes are mainly designed for multimedia data and are less suitable for structured data. Structured data occupies an important position in enterprise business systems, which greatly limits the application scope of watermarking schemes.

[0005] More importantly, the existing solutions have weak versatility and cross-domain application capabilities. The data identification and tracking standards are not uniform across different organizations and systems, which is not conducive to cross-organizational supervision and data auditing, and makes it difficult to meet the increasingly complex data flow scenarios and strict compliance requirements.

[0006] In summary, there is a need for a data ownership mechanism that is inherent, persistent, universally applicable to various data types, and supports interoperability across organizational boundaries. Summary of the Invention

[0007] To address the problems in the prior art, the present invention provides a data ownership marking system, a data ownership marking method, a data ownership verification system, and a data ownership verification method.

[0008] The data attribution marking method of one aspect of the present invention includes:

[0009] The acquisition step involves acquiring the data ownership information, wherein the ownership information is the IP address of the data generation terminal that generated the data;

[0010] The embedding step involves generating an attribution identifier based on the attribution information and embedding the attribution identifier into the data; and

[0011] The data transmission step involves transmitting data containing the home identifier using a communication protocol that supports the transmission of the home information.

[0012] Optionally, the attribution information is the IPv6 address of the data generating end that generates the data.

[0013] Optionally, the attribution information is the IPv4 address of the data generating end that generates the data.

[0014] Optionally, in the embedding step, the attribution identifier is generated based on the organization identifier and device number of the data generating end of the generated data.

[0015] Optionally, in the embedding step, the organization identifier and device number of the data generating end of the generated data are encrypted and combined with a string used to simulate the prefix of the IPv6 address to form the home identifier.

[0016] Optionally, in the embedding step, the attribution identifier is embedded into the data using any of the following methods:

[0017] For structured data, add a dedicated field or attribute that includes IPv6 addresses;

[0018] For file-type data, write the IPv6 address in the file header or metadata section;

[0019] For unstructured data, encapsulate IPv6 addresses using steganography or additional tags; and

[0020] For temporary streaming data, the IPv6 address is encapsulated within the communication protocol itself.

[0021] Optionally, in the embedding step, the attribution identifier and the data are hashed together and signed.

[0022] Optionally, in the embedding step, the ownership identifier is further registered on the blockchain.

[0023] Optionally, in the embedding step, the attribution identifier is encrypted in the TEE and the encrypted attribution identifier is embedded into the data.

[0024] Optionally,

[0025] In the embedding step, an attribution identifier is generated based on the attribution information and metadata-related information.

[0026] The metadata-related information includes any one or more of the following:

[0027] User ID, application ID, timestamp.

[0028] The data attribution verification method of this invention includes:

[0029] The data parsing step involves parsing the attribution identifier contained in the received data to obtain attribution information, wherein the attribution information is the IP address of the data generating endpoint; and

[0030] The data ownership verification step verifies the legality of the data ownership information.

[0031] Optionally, the attribution information is an IPv6 address.

[0032] Optionally, in the data ownership verification step, the ownership information is verified for legality in any of the following ways:

[0033] Determine whether the syntax of the attribution information conforms to the format of an IPv6 address;

[0034] The known source is obtained based on IPv6 address mapping, and its legitimacy is verified based on the known source; and

[0035] Query whether an IP address is trustworthy based on its IPv6 address.

[0036] Optionally, it further includes:

[0037] The security audit process involves recording and managing every data operation that includes an IPv6 address.

[0038] The data attribution marking system of one aspect of the present invention includes:

[0039] The acquisition module is used to acquire the ownership information of the data, wherein the ownership information is the IP address of the data generation terminal that generates the data;

[0040] An embedding module is configured to generate an attribution identifier based on the attribution information and embed the attribution identifier into the data; and

[0041] A data transmission protocol adapter is used to transmit data containing the home identifier via a communication protocol that supports the transmission of the home information.

[0042] Optionally, the attribution information is the IPv6 address of the data generating end that generates the data.

[0043] Optionally, the attribution information is an IPv4 address.

[0044] Optionally, the embedding module generates the attribution identifier based on the organization identifier and device number of the data generating end.

[0045] Optionally, the embedding module encrypts the organization identifier and device number of the data generating end and combines them with a string used to simulate the prefix of the IPv6 address to form the home identifier.

[0046] Optionally, the embedding module may embed the attribution identifier into the data using any of the following methods:

[0047] For structured data, add a dedicated field or attribute that includes IPv6 addresses;

[0048] For file-type data, write the IPv6 address in the file header or metadata section;

[0049] For unstructured data, IPv6 addresses are encapsulated using steganography or additional tags;

[0050] For temporary streaming data, the IPv6 address is encapsulated within the communication protocol itself.

[0051] Optionally, the embedding module performs a hash signature operation on the attribution identifier and the data together.

[0052] Optionally, the embedding module further registers the ownership identifier on the blockchain.

[0053] Optionally, the embedding module encrypts the attribution identifier in the TEE and embeds the encrypted attribution identifier into the data.

[0054] Optionally, the embedding module generates an attribution identifier based on the attribution information and metadata-related information.

[0055] The metadata-related information includes any one or more of the following:

[0056] User ID, application ID, timestamp.

[0057] The data attribution verification system of one aspect of the present invention includes:

[0058] The data parsing module is used to parse the attribution identifier contained in the received data and obtain attribution information, wherein the attribution information is the IP address of the data generating terminal; and

[0059] The data ownership verification module is used to perform legality verification based on the ownership information.

[0060] Optionally, the attribution information is an IPv6 address.

[0061] Optionally, the data ownership verification module verifies the legality of the ownership information in any of the following ways:

[0062] Determine whether the syntax of the attribution information conforms to the format of an IPv6 address;

[0063] The known source is obtained based on IPv6 address mapping, and its legitimacy is verified based on the known source; and

[0064] Query whether an IP address is trustworthy based on its IPv6 address.

[0065] Optionally, it further includes:

[0066] The security audit module is used to record and manage every data operation that includes an IPv6 address.

[0067] A computer-readable medium of the present invention stores a computer program thereon, which, when executed by a processor, implements the data ownership verification method or the data ownership verification method described herein.

[0068] A computer device according to one aspect of the present invention includes a storage module, a processor, and a computer program stored on the storage module and executable on the processor. When the processor executes the computer program, it implements the data ownership verification method or the data ownership verification method.

[0069] A computer program product according to one aspect of the present invention includes a computer program that, when executed by a processor, implements the data ownership verification method or the data ownership verification method described above. Attached Figure Description

[0070] Figure 1 This is a structural block diagram of a data ownership marking system and a data ownership verification system according to an embodiment of the present invention.

[0071] Figure 2 This is a flowchart illustrating a data ownership marking method and a data ownership verification method according to an embodiment of the present invention.

[0072] The described and other objects and advantages of the invention will become more fully clear from the following detailed description taken in conjunction with the accompanying drawings, wherein like or similar elements are denoted by the same reference numerals. Detailed Implementation

[0073] The following are some embodiments of the present invention, intended to provide a basic understanding of the invention. They are not intended to identify key or decisive elements of the invention or to limit the scope of protection sought.

[0074] For purposes of brevity and illustrativeness, the principles of the invention are described herein primarily with reference to exemplary embodiments thereof. However, those skilled in the art will readily recognize that the same principles are equivalently applicable to all types of data attribution marking systems and methods of the present invention, and data attribution verification systems and methods of the present invention, and that these same principles can be implemented therein, and that any such variations do not depart from the true spirit and scope of the invention.

[0075] Furthermore, reference is made in the following description to the accompanying drawings, which illustrate specific exemplary embodiments. Electrical, mechanical, logical, and structural modifications may be made to these embodiments without departing from the spirit and scope of the invention. Moreover, while features of the invention are disclosed in conjunction with only one of several embodiments, this feature may be combined with one or more other features of other embodiments if desired and / or advantageous for any given or identifiable function. Therefore, the following description should not be considered limiting in any sense, and the scope of the invention is defined by the appended claims and their equivalents.

[0076] Terms such as “possessing” and “comprising” indicate that, in addition to having units (modules) and steps that are directly and explicitly stated in the specification and claims, the technical solution of the present invention does not exclude the presence of other units (modules) and steps that are not directly or explicitly stated.

[0077] The main technical concept of the data ownership marking system and method and the data ownership verification system and method of the present invention is that, when a data object is created, the data ownership marking system of the present invention directly embeds an ownership identifier (e.g., an IPv6 address, or an IPv4 address processed to resemble an IPv6 format identifier) ​​into the data at the data generation end, thereby using the ownership identifier as the so-called "digital ownership tag" or "data identity fingerprint" of the data. On the other hand, at the data receiving end, the data ownership verification system of the present invention parses the received data to obtain the ownership identifier and verifies the legality of the ownership identifier, thereby realizing the legality verification of the data ownership.

[0078] First, let me briefly introduce IPv6 addresses.

[0079] IPv6 addresses are unique addresses used to identify network devices in Internet Protocol Version 6 (IPv6). They are a new generation of IP address designed to replace IPv4. IPv6 addresses are 128 bits long, which is a significant expansion of the address space compared to IPv4's 32 bits. IPv6 addresses have the following main characteristics.

[0080] (1) Uniqueness

[0081] Each IPv6 address is unique globally.

[0082] (2) Hierarchy

[0083] IPv6 addresses have a hierarchical structure, which makes address allocation and management more flexible and efficient. For example, addresses can be allocated hierarchically based on factors such as geographical location and organizational structure, facilitating network management and route aggregation, and improving network performance and scalability.

[0084] (3) Resolvability

[0085] IPv6 addresses can be better integrated with the Domain Name System (DNS) to achieve faster and more accurate address resolution.

[0086] First, the data ownership marking method and data ownership verification method according to one embodiment of the present invention will be described.

[0087] A data attribution tagging method according to an embodiment of the present invention includes the following steps:

[0088] The acquisition step involves acquiring the data ownership information, wherein the ownership information is the IP address of the data generation terminal that generated the data;

[0089] The embedding step involves generating an attribution identifier based on the attribution information and embedding the attribution identifier into the data; and

[0090] The data transmission step involves transmitting data containing the home identifier using a communication protocol that supports the transmission of the home information.

[0091] As an example, the attribution information is an IPv6 address. In the acquisition step, the local IPv6 address is automatically obtained from the data generation end (such as various data acquisition devices, application systems, service terminals, etc.) as the data's attribution information. In this way, by directly embedding the IPv6 address into the data, native data attribution is achieved, improving the accuracy and immutability of data attribution identification. Furthermore, it enhances data compliance and regulatory capabilities, such as supporting consistent identification across platforms and organizations, facilitating data compliance supervision and auditing, and further ensuring that attribution information is not lost during data circulation, thus improving the controllability of data flow.

[0092] Using the IPv6 address of the data generator directly as the data ownership information can leverage the uniqueness of IPv6 addresses and the mapping capability of network nodes to ensure the accuracy and traceability of data ownership.

[0093] The attribution information can also be an IPv4 address. By simulating the IPv4 address into IPv6 format, the attribution identification can be approximated to ensure compatibility with environments that do not support IPv6. Thus, it is possible to achieve a data attribution identification function similar to IPv6 in an IPv4 environment, thereby expanding the application scope of the present invention and providing a flexible solution in different network environments.

[0094] In the embedding step, the attribution identifier is generated based on the organization identifier and device number of the data generating end. In the IPv4 scenario, the attribution identifier is generated by combining the organization identifier and device number of the data generating end, which can ensure the uniqueness and traceability of the identifier and facilitate the tracking of the source and flow path of the data.

[0095] In the embedding step, the organization identifier and device number of the data generating end are encrypted and then combined with a string used to simulate the prefix of the IPv6 address to form the home identifier. Thus, by encrypting the organization identifier and device number and combining them with the prefix string of the simulated IPv6 address, a secure and reliable home identifier can be formed, preventing the home identifier from being tampered with or forged.

[0096] In the embedding step, the attribution identifier is embedded into the data using any of the following methods: for structured data, a dedicated field or attribute containing the IPv6 address is added; for file-type data, the IPv6 address is written in the file header or metadata; for unstructured data, the IPv6 address is encapsulated using steganography or additional tags; for temporary streaming data, the IPv6 address is encapsulated within the communication protocol itself. In this way, by employing the most suitable embedding method based on the characteristics of different data types, the validity and immutability of the attribution identifier can be ensured, and the invention can also be applied to various types of data (e.g., including structured data, file-type data, unstructured data, and temporary streaming data).

[0097] In the embedding step, the ownership identifier and the data are hashed together. By signing the ownership identifier and the data as a whole through the hash signing operation, the integrity of the data and the immutability of the ownership identifier can be ensured, because any tampering with the data or ownership identifier will result in a change in the hash value.

[0098] Furthermore, by registering the ownership identifier on the blockchain, the immutability and decentralization of blockchain technology can enhance the credibility and traceability of data ownership. Moreover, the records on the blockchain facilitate subsequent tracing and auditing of the use and flow of data.

[0099] In the embedding step, the attribution identifier is encrypted in a TEE (Trusted Execution Environment) and the encrypted attribution identifier is embedded into the data. In this way, using a TEE to encrypt the attribution identifier can ensure the security and isolation of the encryption process and prevent the attribution identifier from being leaked or tampered with during the encryption process.

[0100] In the embedding step, an attribution identifier is generated based on the attribution information and metadata-related information. The metadata-related information includes any one or more of the following: user identifier, application identifier, and timestamp. By combining metadata-related information (such as user identifier, application identifier, and timestamp), a richer attribution identifier can be generated, making the attribution identifier more detailed and specific, improving the granularity of data attribution, and enhancing data traceability.

[0101] One embodiment of the data ownership verification method of the present invention includes: a data parsing step, parsing the ownership identifier contained in the received data to obtain ownership information; and a data ownership verification step, performing legality verification based on the ownership information. Therefore, by parsing and verifying the ownership identifier, the accuracy and reliability of data ownership verification can be ensured, which helps to detect illegal data and unauthorized use, and improves data compliance.

[0102] The attribution information is an IPv6 address. By directly using the IPv6 address as the attribution information for legitimacy verification, the uniqueness and resolvability of the IPv6 address can ensure the accuracy and efficiency of the verification.

[0103] In the data attribution verification step, the attribution information is validated for legitimacy using any of the following methods: determining whether the syntax of the attribution information conforms to the format of an IPv6 address; obtaining a known source based on the IPv6 address mapping and validating the legitimacy based on the known source; and querying whether the IP address is trustworthy based on the IPv6 address. Thus, this invention provides multiple legitimacy verification methods, including format verification, source mapping verification, and trustworthy query verification, thereby ensuring the comprehensiveness and accuracy of the verification.

[0104] One embodiment of the data ownership verification method of the present invention further includes a security audit step, which records and manages each data operation behavior containing an IPv6 address. By adding a security audit step, each data operation behavior containing an IPv6 address can be recorded and managed in detail, facilitating subsequent traceability and compliance auditing.

[0105] Next, a data ownership marking system and a data ownership verification system according to one embodiment of the present invention will be described.

[0106] Figure 1 This is a structural block diagram of a data ownership marking system and a data ownership verification system according to an embodiment of the present invention.

[0107] like Figure 1 As shown, the data attribution tagging system 100 of the present invention includes:

[0108] The acquisition module 110 is used to acquire the IPv6 address of the data generation terminal as the data ownership information;

[0109] Embedding module 120 generates an attribution identifier based on the attribution information and adds the attribution identifier to the data (i.e., embeds the attribution identifier into the data); and

[0110] The data transmission protocol adapter 130 is used to transmit data containing the home identifier via a communication protocol that supports IPv6 (such as HTTP / 2, gRPC, etc.).

[0111] Here, the data generation end can include, but is not limited to, various data acquisition devices, application systems, service terminals, etc.

[0112] The embedding module 120 embeds the attribution identifier into the data in ways including, but not limited to, the following:

[0113] For structured data, such as JSON or XML, the embedding module 120 will add a new dedicated field or attribute containing the IPv6 address. For example, a JSON object will be modified to contain a key-value pair, such as {"source_ipv6":"2001:db8:85a3::8a2e:370:7334"}.

[0114] For file-type data, the IPv6 address is written in the file header. For example, for binary or container file formats that support extensible metadata, such as PDF, ZIP, or office documents, the embedding module 120 writes the IPv6 address in a custom field in the file header or metadata section.

[0115] For unstructured data, the IPv6 address is encapsulated by steganography or by appending tags. For example, for plain text files, the embedding module 120 can use steganography to append a specially formatted paragraph containing the IPv6 address to the end of the text.

[0116] For transport header encapsulation, for example for temporary streaming data, the embedding module 120 encapsulates the IPv6 address within the transport protocol itself, for example, by inserting it into a custom HTTP header (such as X-Source-IPv6:...) or as an attribute of a message queue (i.e., MQ) protocol message.

[0117] The data attribution marking system 100 of the present invention can be configured as a standalone system and called by the data generation end to mark attribution identifiers and send data. Of course, the data attribution marking system 100 of the present invention can also be configured as part of the data generation end.

[0118] The data attribution verification system 200 of the present invention includes:

[0119] Data parsing module 210 is used to parse the home identifier contained in the received data and obtain home information (e.g., obtain the IPv6 address); and

[0120] The data ownership verification module 220 is used to perform legality verification based on the ownership information.

[0121] Similarly, the data ownership verification system 200 of the present invention can be configured as a standalone system and called by the data receiving end to verify the legality of data reception and ownership identification. Of course, the data ownership verification system 200 of the present invention can also be configured as part of the data receiving end.

[0122] The IPv6 address legitimacy verification performed by the data attribution verification module 220 may include, but is not limited to, the following methods:

[0123] (1) Syntax validation: Determine whether the extracted IPv6 address string conforms to the standard IPv6 address format;

[0124] (2) Registration information query: Check the IPv6 address or its prefix against public or private registries to map it to a known organization, geographic location or network provider, thereby confirming whether the source is from the expected entity;

[0125] (3) Reputation Check: Querying IP reputation services can determine whether the source address is associated with malicious activity; and

[0126] (4) Cross-referencing: Associate IPv6 addresses with other available metadata (such as user ID, application signature, timestamp, etc.), thereby enabling more robust multi-factor verification of data sources.

[0127] As an optional approach, the data ownership verification system 200 of the present invention may further include: a security audit module (not shown), which is used to record each data operation behavior containing an IPv6 address and to perform statistics, traceability and risk alarm for sensitive data usage behavior.

[0128] As an alternative, the data ownership verification module 220 can be configured to further cooperate with mechanisms such as CA certificates, blockchain registry, and smart contracts for legitimacy verification, thereby achieving stronger data source trust verification.

[0129] For example, as an example of using a CA certificate, at the data generation end, the data ownership marking system 100 submits a certificate signing request to the certificate authority. The certificate signing request includes the IPv6 address, public key, and organization information of the data generation end. The certificate authority verifies whether the data generation end has the legal right to use the IPv6 address. After successful verification, the certificate authority issues a CA certificate. The data ownership marking system 100 embeds the IPv6 address into the field of the CA certificate and attaches the CA certificate when transmitting data. At the data receiving end, the data ownership verification system 200 parses the received data and verifies the validity of the certificate signature using the public key of the CA certificate, and checks whether the IPv6 address in the CA certificate is consistent with the IPv6 address marked by the ownership marking system 100.

[0130] For example, as an example of using a blockchain registry, at the data generation end, the data ownership marking system 100 records IPv6 addresses and their ownership on the blockchain platform. At the data receiving end, the data ownership verification system 200 queries the blockchain to obtain the IPv6 addresses and their ownership records, and compares the IPv6 addresses with the ownership records to confirm ownership consistency.

[0131] Next, some variations of the present invention will be described.

[0132] (1) IPv4 compatible embedding

[0133] In the current network environment, although the adoption rate of IPv6 is gradually increasing, there are still many scenarios using IPv4. To ensure that the data ownership marking system and data ownership verification system of this invention can operate effectively in IPv4 environments, an IPv4-compatible embedding scheme is proposed. Specifically, this IPv4-compatible embedding scheme creates an ownership identifier that approximates an IPv6 address in an IPv4 environment by simulating the format of an IPv6 address. Specifically, the organization identifier and device number can be encrypted and combined into a string similar to an IPv6 address, and then embedded into the data.

[0134] Here's an example to illustrate: Suppose a company's organization identifier is "ORG123" and its device number is "DEV456". First, the data ownership marking system of this invention encrypts these two pieces of information, obtaining the encrypted strings "ENC_ORG123" and "ENC_DEV456". Then, these two encrypted strings are combined with a simulated IPv6 prefix string (such as "::ffff:") to form an approximate IPv6 address such as "::ffff:ENC_ORG123:ENC_DEV456". Finally, the data ownership marking system of this invention embeds this simulated IPv6 address into the data as the data ownership identifier.

[0135] (2) Diverse embedding forms

[0136] The data ownership marking system of the present invention can support dynamic selection of embedded fields or content locations, thereby more effectively preventing information from being tampered with.

[0137] (3) Combining encryption and signature mechanisms

[0138] The data ownership marking system of the present invention further performs hash signing on the IPv6 address and data together when constructing the ownership mark, so as to further enhance the anti-tampering capability.

[0139] For example, the data ownership marking system of the present invention marks the data content with an ownership identifier by combining the data content and the IPv6 address to form a new string, performing a hash signature on the string to obtain a hash value, transmitting the hash value along with the original data during data transmission, and recalculating the hash value of the data after the data ownership verification system receives the original data and comparing it with the transmitted hash value to confirm whether the data has been tampered with.

[0140] (4) Integration with blockchain / trusted computing

[0141] To further enhance the credibility and security of data ownership marking, the data ownership marking system and data ownership verification system of the present invention can be further integrated with blockchain or trusted computing environments (such as TEE, Trusted Execution Environment).

[0142] For example, when combined with blockchain, the data ownership marking system of the present invention can register the data ownership mark on the blockchain, and use the immutability and decentralization of the blockchain to ensure the permanence and credibility of the data ownership mark.

[0143] For example, when combined with a TEE (Tracking Equipment), the data ownership marking system and data ownership verification system of this invention can utilize the isolated execution environment provided by the TEE to securely encapsulate and verify the data ownership identifier. For instance, the data ownership marking system encrypts the data ownership identifier within the TEE and stores the encrypted identifier in the TEE's secure storage area. During the data verification phase, the data ownership verification system of this invention decrypts the ownership identifier within the TEE and compares it with the received data for verification. Because the TEE provides an isolated execution environment, even if other parts of the system are attacked, attackers cannot obtain or tamper with the ownership identifier information within the TEE.

[0144] Figure 2 This is a flowchart illustrating a data ownership marking method and a data ownership verification method according to an embodiment of the present invention.

[0145] like Figure 2 As shown, the data attribution tagging system method of the present invention performs the following steps on the data generation end side:

[0146] In step S1, obtain the IPv6 address (or an IPv4 address in a similar format to an IPv6 address) of the data generating end as the data's ownership information;

[0147] Embedding step S2 involves generating an attribution identifier based on the attribution information and attaching the attribution identifier to the data (i.e., embedding the attribution identifier into the data); and

[0148] In data transmission step S3, the data containing the home identifier is transmitted using a communication protocol that supports IPv6.

[0149] On the other hand, a data attribution verification method according to an embodiment of the present invention performs the following steps on the data receiving end side:

[0150] Data parsing step S4 involves parsing the received data to extract the attribution identifier and obtain the attribution information; and

[0151] Data ownership verification step S5 involves verifying the legality of the ownership information.

[0152] As described above, the data ownership marking method and data ownership verification method of the present invention identify data ownership by embedding the ownership identifier of the IPv6 address (or IPv4 address with a similar format to IPv6 address) into the data. By utilizing the uniqueness, hierarchy, and resolvability of IP addresses, the producer / owner IP address of the data is mapped and embedded in the data field, encapsulation header, or extended information, enabling native binding of data ownership. During data circulation, the embedded ownership identifier can be used to quickly parse the data source and verify the owner, thereby providing consistent identification capabilities across platforms and organizations. According to the present invention, the problems of traditional data tags being forged and detached from the data itself can be overcome, providing stronger nativeness and reliable traceability capabilities.

[0153] The above are merely specific embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Those skilled in the art can conceive of other feasible variations or substitutions based on the technical scope disclosed in the present invention, and such variations or substitutions are all covered within the scope of protection of the present invention. Where there is no conflict, the embodiments of the present invention and the features thereof can also be combined with each other. The scope of protection of the present invention is determined by the claims.

Claims

1. A data home marking method, characterized by, The method comprises: an acquisition step of acquiring attribution information of data, wherein the attribution information is an IP address of a data generation end generating the data; an embedding step of generating an attribution mark based on the attribution information and embedding the attribution mark into the data; and a data transmission step of transmitting the data containing the attribution mark through a communication protocol supporting transmission of the attribution information.

2. The data attribution marking method according to claim 1, wherein the attribution information is an IPv6 address of the data generation end generating the data.

3. The data attribution marking method according to claim 1, wherein the attribution information is an IPv4 address of the data generation end generating the data.

4. The data attribution marking method according to claim 3, wherein in the embedding step, the attribution mark is generated based on an organization mark and a device number of the data generation end generating the data.

5. The data attribution marking method according to claim 4, wherein in the embedding step, the attribution mark is constituted by combining an organization mark and a device number of the data generation end generating the data after encryption with a string used to simulate a prefix of an IPv6 address.

6. The data attribution marking method according to claim 2, wherein in the embedding step, the attribution mark is embedded into the data in any one of the following ways: for structured data, a special field or attribute containing the IPv6 address is added; for file type data, the IPv6 address is written in a file header or a metadata part; for unstructured data, the IPv6 address is encapsulated in steganography or a tag; and for temporary streaming data, the IPv6 address is encapsulated in a communication protocol itself.

7. The data attribution marking method according to claim 1, wherein in the embedding step, the attribution mark and the data are subjected to a hash signature operation together.

8. The data attribution marking method according to claim 1, wherein in the embedding step, the attribution mark is further registered on a block chain.

9. The data attribution marking method according to claim 1, wherein in the embedding step, the attribution mark is encrypted in a TEE and embedded into the data.

10. The data attribution marking method according to claim 1, wherein in the embedding step, the attribution mark is generated based on the attribution information and metadata related information, wherein the metadata related information includes any one or more of the following: a user mark, an application mark, and a time stamp. The method comprises: a data analysis step of analyzing an attribution mark contained in received data and obtaining attribution information, wherein the attribution information is an IP address of a data generation end generating the data; and a data attribution verification step of performing legality verification based on the attribution information.

12. The data attribution verification method according to claim 11, wherein the attribution information is an IPv6 address.

13. The data attribution verification method according to claim 12, wherein ​ ​ ​ 11. A data home verification method, characterized by, ​ ​ ​ ​ ​ ​ ​ In the data provenance verification step, the provenance information is verified in any of the following ways: determining whether the syntax of the provenance information conforms to the format of an IPv6 address; verifying the legitimacy based on a known source mapped from the IPv6 address; and querying whether the IP address is trustworthy based on the IPv6 address.

14. The data home verification method of claim 12, wherein, Further comprising: a security audit step, recording and managing each data operation behavior containing an IPv6 address.

15. A data home marking system characterized by, Comprising: an acquisition module, configured to acquire provenance information of data, wherein the provenance information is the IP address of a data generating end generating the data; an embedding module, configured to generate a provenance identifier based on the provenance information and embed the provenance identifier into the data; and a data transmission protocol adapter, configured to transmit the data containing the provenance identifier through a communication protocol supporting transmission of the provenance information.

16. The data provenance marking system of claim 15, wherein: the provenance information is an IPv6 address of a data generating end generating the data.

17. The data provenance marking system of claim 15, wherein: the provenance information is an IPv4 address.

18. The data provenance marking system of claim 17, wherein: the embedding module generates the provenance identifier based on an organization identifier and a device number of the data generating end generating the data.

19. The data provenance marking system of claim 18, wherein: the embedding module combines the organization identifier and the device number of the data generating end generating the data with a string simulating a prefix of an IPv6 address to form the provenance identifier after encryption.

20. The data provenance marking system of claim 16, wherein: the embedding module embeds the provenance identifier into the data in any of the following ways: for structured data, adding a special field or attribute containing an IPv6 address; for file type data, writing an IPv6 address in a file header or metadata part; for unstructured data, encapsulating an IPv6 address in steganography or additional label; for temporary streaming data, encapsulating an IPv6 address in a communication protocol itself.

21. The data provenance marking system of claim 16, wherein: the embedding module performs a hash signature operation on the provenance identifier and the data together.

22. The data provenance marking system of claim 16, wherein: the embedding module further registers the provenance identifier on a blockchain.

23. The data provenance marking system of claim 16, wherein: the embedding module encrypts the provenance identifier in a TEE and embeds the encrypted provenance identifier into the data.

24. The data provenance marking system of claim 16, wherein: the embedding module generates a provenance identifier based on the provenance information and metadata related information, wherein the metadata related information includes any one or more of the following: a user identifier, an application identifier, a timestamp.

25. A data home verification system, comprising: Comprising: a data parsing module, configured to parse a home identity contained in the received data and obtain home information, wherein the home information is an IP address of a data generation end generating the data; and a data home verification module, configured to perform legality verification based on the home information.

26. The data home verification system of claim 25, wherein the home information is an IPv6 address.

27. The data home verification system of claim 26, wherein the data home verification module performs legality verification on the home information in any one of the following manners: judging whether a syntax of the home information conforms to a format of an IPv6 address; performing legality verification based on a known source obtained based on an IPv6 address mapping; and querying whether the IP address is trustworthy based on the IPv6 address.

28. The data home verification system of claim 26, wherein, further comprising: a security audit module, configured to record and manage each data operation behavior containing an IPv6 address.

29. A computer readable medium, having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the data home verification method or the data home verification method of any one of claims 1-10.

30. A computer device, comprising a storage module, a processor, and a computer program stored on the storage module and executable on the processor, wherein the processor, when executing the computer program, implements the data home verification method or the data home verification method of any one of claims 1-10.

31. A computer program product, comprising a computer program, wherein the computer program, when executed by a processor, implements the data home verification method or the data home verification method of any one of claims 1-10.

Images