Data circulation method and system based on sandbox technology

Abstract

The invention relates to the technical field of application software development, in particular to a sandbox technology-based data circulation method and system, and the method comprises the steps: constructing a data circulation system comprising a data transaction platform and a client sandbox; wherein the cloud end is provided with a plurality of data transaction platforms for transacting published data; the client sandbox is divided into a data provider mode and a data purchaser mode, the data provider securely uploads data to the transaction platform through the client sandbox, and the data purchaser acquires required data from the transaction platform through the client sandbox; the method has the beneficial effects that technologies such as sandboxes and block chains are combined with data circulation services, so that on the premise of ensuring data availability, the supervision requirement of'manageability, controllability and traceability 'is met, the worry about'data leakage' of potential data transaction users is eliminated, free flow of data is promoted, and the user experience is improved. And furthermore, a data security circulation infrastructure which meets the requirements of the new era is constructed.

Description

Technical Field

[0001] This invention relates to the field of application software development technology, specifically to a data flow method and system based on sandbox technology. Background Technology

[0002] With the rapid development of the digital economy, the global data circulation market continues to expand, but this is accompanied by a surge in data breaches. Traditional data sharing models face the dilemma of "secure transmission, uncontrolled use"—although encryption technologies such as SSL / TLS can ensure the security of the transmission process, once the data is decrypted and delivered, the recipient can cause the data to spread uncontrollably through methods such as screenshots, unauthorized exports, and secondary API forwarding. This "static encryption + full authorization" model has become the biggest obstacle to data collaboration in fields such as healthcare and finance.

[0003] The existing technical solutions have the following three major drawbacks:

[0004] (1) The All-or-Nothing Permission Dilemma: Current mainstream RBAC (Role-Based Access Control) mechanisms suffer from the problem of "over-authorization." For example, when hospitals share anonymized medical records with third-party research institutions, the recipient has complete control over the data after obtaining it and can reconstruct the original data through OCR recognition, database export, and other methods. A data breach incident involving a medical AI company in 2024 showed that 83% of the breaches originated from secondary dissemination by authorized personnel.

[0005] (2) Protection failure when out of context: Static data anonymization techniques (such as field replacement and generalization) cannot adapt to dynamic usage needs. When financial institutions share anti-fraud data, traditional solutions can only provide fixed levels of anonymized data, leading to business personnel misjudging risks due to insufficient information, or technical personnel being unable to model due to excessive data anonymization. This binary opposition of "either unusable or insecure" forces institutions to make a difficult trade-off between risk and utility.

[0006] (3) The inability of post-event auditing to reverse the situation: Existing log auditing systems suffer from the "after-the-fact" flaw. A 2024 audit report of a bank showed that although the data leakage path could be traced, the average response time was 72 hours, during which time the leaked data had been transferred 3-4 times. More seriously, current technology cannot prevent authorized users from maliciously taking screenshots, photos, and other physical-layer leakage behaviors. Summary of the Invention

[0007] The purpose of this invention is to provide a data circulation method and system based on sandbox technology to solve the problems mentioned in the background.

[0008] To achieve the above objectives, the present invention provides the following technical solution: a data circulation method based on sandbox technology, comprising: constructing a data circulation system including a data trading platform and a client sandbox;

[0009] Among them, multiple data trading platforms are set up in the cloud for trading published data;

[0010] The client-side sandbox is divided into a data provider mode and a data buyer mode. Data providers securely upload data to the trading platform through the client-side sandbox, while data buyers obtain the required data from the trading platform through the client-side sandbox. Both data upload and download use dynamic routing and fragmented data transmission, and different lines from different operators are used to prevent data leakage.

[0011] Preferably, the data provider securely uploads data to the trading platform through a client-side sandbox. The specific steps are as follows:

[0012] Data preparation: Data provider users import the data to be traded into the client sandbox. The client sandbox automatically extracts information such as the data type and sensitivity level of the fields and generates metadata description files, which are then displayed on the sandbox page.

[0013] Data anonymization: The data provider selects the data to be statically anonymized and the anonymization algorithm based on the sandbox page display, and the client-side sandbox performs static anonymization.

[0014] Data release preparation: Data provider users browse statically anonymized data and are allowed to publish it to the data trading platform. The client sandbox generates and saves the data's hash value.

[0015] Data Upload and Storage: The client sandbox uploads data to the data trading platform, and at the same time uploads the hash value of the data to all data trading platforms. Each data trading platform independently stores the hash value of the data.

[0016] Preferably, this also includes the trading platform reviewing the data submitted by the data provider, with the specific steps as follows:

[0017] Data listing approval: The client submits data to the data trading platform to apply for listing and sale, and the data trading platform conducts approval;

[0018] Generate composite hash value: The data trading platform uses the hash value of the original data and the audit log as input to generate a composite hash value, ensuring the uniqueness, integrity and traceability of the data during the flow process;

[0019] Blockchain Evidence Storage: Client-side sandboxes and other data trading platforms act as nodes on the blockchain, using an incremental evidence storage mechanism to transmit newly generated composite hash values ​​to all nodes on the blockchain for incremental storage.

[0020] Preferably, the data buyer obtains the required data from the trading platform through a client-side sandbox. The specific steps are as follows:

[0021] Data purchase: Data buyers select the required data from the data trading platform through the client sandbox. The data trading platform returns the data of successful transactions, saves the transaction records, and performs the on-chain operation of the transaction records.

[0022] Data Processing: The buyer processes data within the client-side sandbox, employing role-based dynamic anonymization to ensure minimal data manipulation. The client-side sandbox, combined with a multimodal AI behavior monitoring system, automatically suspends data access upon detecting abnormal behavior, logs the abnormal behavior, and performs incremental on-chain evidence storage. For operations necessary but potentially affecting data ownership or integrity, the data buyer applies to the client-side sandbox administrator. Upon administrator approval, data export is permitted, and the sandbox logs the application and approval process, performing incremental evidence storage. The data buyer's client-side sandbox periodically synchronizes the original log files to the data provider. The data provider calculates a composite hash value between the original data and the original log files, compares it to the composite hash value stored on the blockchain, and verifies that the original log files have not been tampered with, thus reviewing the data buyer's compliance.

[0023] Preferably, it also includes managing and verifying the hash value of the data during the data circulation process, as follows:

[0024] When a data provider publishes data, the client sandbox generates and saves the hash value of the data, uploads it to all data trading platforms, and each data trading platform saves it independently.

[0025] When reviewing data on the trading platform, the hash value of the original data is combined with the review log to generate a composite hash value, which is then stored on the blockchain.

[0026] When the data buyer performs an operation that is necessary but may affect data ownership or integrity, the client sandbox generates a new composite hash value based on the original hash value and puts it back on the chain.

[0027] The data provider calculates a composite hash value of the original data and the original log file, compares it with the composite hash value stored on the blockchain, and verifies that the original log file has not been tampered with, thus ensuring the traceability of data changes.

[0028] A data circulation system based on sandbox technology, comprising a data trading platform and a client sandbox;

[0029] The data trading platforms are located in the cloud and there are multiple platforms, used for trading published data;

[0030] The client sandbox is divided into a data provider mode and a data buyer mode to ensure the security and isolation of data transactions. Data providers securely upload data to the trading platform through the client sandbox of the corresponding mode, while data buyers obtain the required data from the trading platform through the client sandbox of the corresponding mode. Both data upload and download adopt dynamic routing and fragmented transmission, and data is transmitted through different lines of different operators to prevent data leakage.

[0031] Preferably, the data provider securely uploads data to the trading platform through a client-side sandbox. The specific steps are as follows:

[0032] Data provider users import data to be traded into the client sandbox. The client sandbox automatically extracts information such as data type and sensitivity level of fields and generates metadata description files, which are displayed on the sandbox page. Based on the sandbox page display, the data provider selects the data to be statically anonymized and the anonymization algorithm, which is then statically anonymized by the client sandbox. Data provider users browse the statically anonymized data and allow it to be published to the data trading platform. The client sandbox generates and saves the hash value of the data. The client sandbox uploads the data to the data trading platform and simultaneously uploads the hash value of the data to all data trading platforms. Each data trading platform independently saves the hash value of the data.

[0033] Preferably, this also includes the trading platform reviewing the data submitted by the data provider, with the specific steps as follows:

[0034] The client submits data to the data trading platform to apply for listing and sale, and the data trading platform approves it. The data trading platform uses the hash value of the original data and the audit log as input to generate a composite hash value to ensure the uniqueness, integrity and traceability of the data in the process of circulation. The client sandbox and other data trading platforms, as nodes on the blockchain, use an incremental evidence storage mechanism to pass the newly generated composite hash value to all nodes on the blockchain for incremental storage.

[0035] Preferably, the data buyer obtains the required data from the trading platform through a client-side sandbox. The specific steps are as follows:

[0036] Data buyers select the required data from a data trading platform through a client-side sandbox. The data trading platform returns the successfully traded data, saves the transaction record, and performs on-chain operations. Within the client-side sandbox, the buyer processes the data, employing role-based dynamic anonymization to ensure minimal data manipulation. The client-side sandbox, combined with a multimodal AI behavior monitoring system, automatically suspends data access upon detecting abnormal behavior, logs the abnormal behavior, and performs incremental on-chain evidence storage. For operations necessary but potentially affecting data ownership or integrity, the data buyer applies to the client-side sandbox administrator. Upon approval, the administrator allows data export, and the sandbox records the application and approval process, performing incremental evidence storage. The data buyer's client-side sandbox periodically synchronizes the original log files to the data provider. The data provider calculates a composite hash value between the original data and the original log files, compares it with the composite hash value stored on the blockchain, and verifies that the original log files have not been tampered with, thus reviewing the data buyer's compliance.

[0037] Preferably, it also includes managing and verifying the hash value of the data during the data circulation process, as follows:

[0038] When a data provider publishes data, the client-side sandbox generates and saves the data's hash value, uploading it to all data trading platforms, where each platform stores it independently. When a trading platform reviews the data, it combines the original data's hash value with the review logs to generate a composite hash value, which is then stored on the blockchain. When a data buyer performs necessary operations that may affect data ownership or integrity, the client-side sandbox generates a new composite hash value based on the original hash value and uploads it to the blockchain again. The data provider calculates the composite hash value of the original data and the original log file, compares it with the composite hash value stored on the blockchain, and verifies that the original log file has not been tampered with, ensuring the traceability of data changes.

[0039] Compared with the prior art, the beneficial effects of the present invention are:

[0040] The data circulation method and system based on sandbox technology proposed in this invention combine sandbox, blockchain and other technologies with data circulation business. Under the premise of ensuring data availability, it meets the regulatory requirements of "manageability, controllability and traceability", dispels the concerns of potential data trading users about "data leakage", promotes the free flow of data, and thus builds a data security circulation infrastructure that meets the needs of the new era. Attached Figure Description

[0041] Figure 1 This is a flowchart of the method of the present invention;

[0042] Figure 2 This is a timeline diagram showing the data provider of this invention publishing data to the trading platform;

[0043] Figure 3 This is a timeline diagram of the data audited by the trading platform of this invention;

[0044] Figure 4 This is a timeline diagram showing how the data buyer in this invention purchases data from the trading platform and uses it. Detailed Implementation

[0045] To make the objectives, technical solutions, and advantages of the present invention clear and complete, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are only some, not all, embodiments of the present invention, and are merely illustrative of the embodiments of the present invention. They are not intended to limit the embodiments of the present invention. All other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0046] This invention provides a technical solution: a data circulation method based on sandbox technology, specifically including:

[0047] like Figure 1 As shown in the system architecture diagram, the data circulation system includes the following core components:

[0048] (1) Data trading platform: Multiple data trading platforms are set up in the cloud for trading published data.

[0049] (2) Client Sandbox: Divided into data provider mode and data buyer mode, to ensure the security and isolation of data transactions.

[0050] Data providers securely upload data to the trading platform through their respective client sandboxes. Data buyers, in turn, retrieve the required data from the trading platform through their corresponding client sandboxes. Both data upload and download utilize dynamic routing and fragmented data transmission, employing different lines from various carriers to ensure data security during transmission.

[0051] Data providers publish data to trading platforms:

[0052] (1) Data preparation

[0053] Data provider users import data to be traded into the client sandbox (data provider mode). The client sandbox (data provider mode) automatically extracts information such as the data type (structured / unstructured) and sensitivity level (PII / PHI / financial data) of the fields, and generates metadata description files, such as which columns the data contains, their column names and descriptions, and displays them on the sandbox page.

[0054] (2) Data desensitization

[0055] Based on the information displayed on the client-side sandbox (data provider mode) page, the data provider selects which data needs to be statically anonymized and chooses the static anonymization algorithm to use. After all selections are complete, the client-side sandbox performs the static anonymization.

[0056] (3) Data release preparation

[0057] Data provider users can browse statically anonymized data and are allowed to publish the data to the data trading platform. The client sandbox (data provider mode) then generates and saves the hash value of the data, a step that ensures the uniqueness and integrity of the data.

[0058] (4) Data upload and storage

[0059] The client-side sandbox (data provider mode) uploads data to the data trading platform. In addition, the client-side sandbox uploads the data's hash value to all data trading platforms. Each data trading platform will independently store the data's hash value for subsequent data verification and management.

[0060] Trading platform audit data:

[0061] (1) Data upload approval

[0062] The client submits data to the data trading platform, applying to list it for sale. The data trading platform then reviews and approves the application.

[0063] (2) Generate composite hash value

[0064] The data trading platform will combine the hash value of the raw data with relevant audit logs (fields are shown in the table below).

[0065]

[0066] These data points are used as input to generate a composite hash value. Since the composite hash value is obtained based on the hash value of the original data from the previous step, any tampering with any part of the data or audit logs will cause a cascading change in the hash value. Therefore, this ensures the uniqueness, integrity, and traceability of the data throughout the data flow process.

[0067] (3) Blockchain-based evidence storage

[0068] Client-side sandboxes and other data trading platforms are all nodes on the blockchain. Through an incremental storage mechanism, newly generated composite hash values ​​are transmitted to all nodes on the blockchain for incremental storage, ensuring the continuous integrity and security of the data.

[0069] Data buyers purchase data from trading platforms:

[0070] (1) Data purchase

[0071] Data buyers select the required data from the data trading platform through a client-side sandbox (data buyer mode). The data trading platform returns the successfully traded data and saves the transaction record (fields are shown in the table below).

[0072]

[0073] Furthermore, the transaction records are recorded on the blockchain to ensure the transparency and security of data transactions.

[0074] (2) Data processing

[0075] The buyer performs a series of data processing operations within a client-side sandbox to meet business needs. This process employs role-based dynamic anonymization, such as in hospitals sharing medical records where doctors can analyze disease patterns but cannot see patient names and addresses; or in banking fraud prevention where multiple banks share suspicious account characteristics without disclosing specific customer information. This ensures minimal data manipulation.

[0076] Meanwhile, the client-side sandbox (data buyer mode) is integrated with a multimodal AI behavior monitoring system. If abnormal behavior such as taking photos with a mobile phone occurs, data access will be automatically suspended, and an abnormal behavior log will be recorded. The abnormal behavior log format is shown below, and the client-side sandbox (data buyer mode) will automatically perform incremental on-chain evidence storage.

[0077]

[0078] For operations that are necessary but may affect data ownership or integrity (such as data export), the data buyer's executor of the "data export operation" needs to apply to the administrator of the client sandbox (data buyer mode). Only after the data buyer administrator approves the application will the client sandbox (data buyer mode) allow data export. The sandbox automatically logs both the application and approval processes performed by the data buyer, with the log format shown below:

[0079]

[0080] The client-side sandbox (data buyer mode) will perform incremental notarization on the exported data records, that is, generate a new composite hash value based on the original hash value and put it on the chain again.

[0081] The client-side sandbox (data buyer mode) periodically synchronizes the original log files to the data provider. The data provider recalculates the hash value of the original log files and compares it with the hash value stored on the blockchain. If they match, the original log files have been verified as tamper-proof. At this point, the data provider can use the original log files to review whether the data buyer is operating in compliance with regulations (e.g., whether they are using data beyond the authorized scope), thereby ensuring the traceability of data changes.

[0082] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A data flow method based on sandbox technology, characterized in that: Comprise: A data circulation system comprising a data transaction platform and a client sandbox; Wherein, the cloud end is provided with a plurality of data transaction platforms for trading published data; The client sandbox is divided into a data provider mode and a data purchaser mode, the data provider uploads data to the transaction platform through the client sandbox, and the data purchaser obtains the required data from the transaction platform through the client sandbox, and the uploading and downloading of data uses dynamic routing fragmentation to transmit data, and different lines of different operators are used to realize anti-leakage transmission.

2. The data flow communication method based on the sandbox technology according to claim 1, characterized in that: The data provider uploads data to the transaction platform through the client sandbox, and the specific steps are as follows: Data preparation: the data provider user imports the data to be traded into the client sandbox, the client sandbox automatically extracts the data type, sensitive level and other information of the field, and generates a metadata description file, which is displayed on the sandbox page; Data desensitization: the data provider selects the data to be statically desensitized and the desensitization algorithm according to the sandbox page display, and the client sandbox performs static desensitization; Data publishing preparation: the data provider user browses the statically desensitized data and allows to publish to the data transaction platform, and the client sandbox generates and saves the hash value of the data; Data uploading and saving: the client sandbox uploads the data to the data transaction platform, and uploads the hash value of the data to all data transaction platforms, and each data transaction platform independently saves the hash value of the data.

3. The data flow communication method based on the sandbox technology according to claim 2, characterized in that: The data submitted by the data provider is audited by the transaction platform, and the specific steps are as follows: Data listing approval: the client submits the data to the data transaction platform for listing and selling, and the data transaction platform performs approval; Generating a composite hash value: the data transaction platform takes the hash value of the original data and the audit log as input to generate a composite hash value, ensuring the uniqueness, integrity and traceability of the data in the circulation process; Blockchain storage: the client sandbox and other data transaction platforms as nodes on the blockchain transmit the newly generated composite hash value to all nodes on the blockchain for incremental storage through the incremental storage mechanism.

4. The data flow communication method based on the sandbox technology according to claim 3, characterized in that: The data purchaser obtains the required data from the transaction platform through the client sandbox, and the specific steps are as follows: Data purchase: the data purchaser selects and purchases the required data from the data transaction platform through the client sandbox, the data transaction platform returns the data of the successful transaction, saves the transaction record and performs the on-chain operation of the transaction record; Data Processing: The buyer processes data within the client-side sandbox, employing role-based dynamic anonymization to ensure minimal data manipulation. The client-side sandbox integrates with a multimodal AI behavior monitoring system, automatically suspending data access upon detecting abnormal behavior, logging the abnormal behavior, and performing incremental on-chain evidence storage. For operations necessary but potentially affecting data ownership or integrity, the data buyer applies to the client-side sandbox administrator. Upon administrator approval, data export is permitted, and the sandbox records the application and approval process, performing incremental evidence storage. The data buyer's client-side sandbox periodically synchronizes the original log files to the data provider. The data provider calculates a composite hash value between the original data and the original log files, comparing it with the composite hash value stored on the blockchain. The hash value is compared to verify that the original log file has not been tampered with, and to check whether the data purchaser's operation is compliant. The operation is as follows: The data provider has the original data; the data provider has the data purchaser's application and approval logs; the data provider independently calculates a composite hash value using the original data and the data purchaser's application and approval logs; the data provider compares its independently calculated composite hash value with the composite hash value on the blockchain; if the two hash values ​​match, it means that the original application and approval logs provided by the data purchaser have not been tampered with and are trustworthy; at this point, the data provider can confidently read the data purchaser's application and approval logs to check whether the data purchaser has performed any illegal operations that affect data ownership and integrity.

5. The data flow communication method based on the sandbox technology according to claim 4, characterized in that: This also includes managing and verifying the hash value of data during data circulation, as detailed below: When a data provider publishes data, the client sandbox generates and saves the hash value of the data, uploads it to all data trading platforms, and each data trading platform saves it independently. When reviewing data on the trading platform, the hash value of the original data is combined with the review log to generate a composite hash value, which is then stored on the blockchain. When the data buyer performs an operation that is necessary but may affect data ownership or integrity, the client sandbox generates a new composite hash value based on the original hash value and puts it back on the chain. The data provider calculates a composite hash value of the original data and the original log file, compares it with the composite hash value stored on the blockchain, and verifies that the original log file has not been tampered with, thus ensuring the traceability of data changes.

6. A data flow system based on sandbox technology, applying the method of claim 5, characterized in that: Includes a data trading platform and a client-side sandbox; The data trading platforms are located in the cloud and there are multiple platforms, used for trading published data; The client sandbox is divided into a data provider mode and a data buyer mode to ensure the security and isolation of data transactions. Data providers securely upload data to the trading platform through the client sandbox of the corresponding mode, while data buyers obtain the required data from the trading platform through the client sandbox of the corresponding mode. Both data upload and download adopt dynamic routing and fragmented transmission, and data is transmitted through different lines of different operators to prevent data leakage.

7. The data flow system based on sandbox technology according to claim 6, characterized in that: The data provider securely uploads data to the transaction platform through the client sandbox, and the specific steps are as follows: The data provider user imports the data to be traded into the client sandbox, and the client sandbox automatically extracts the data type, sensitivity level, and other information of the field, and generates a metadata description file, which is displayed on the sandbox page. The data provider selects the data that needs to be statically desensitized and the desensitization algorithm according to the sandbox page display, and the client sandbox performs static desensitization. The data provider user browses the data after static desensitization and allows it to be published to the data transaction platform, and the client sandbox generates and saves the hash value of the data; the client sandbox uploads the data to the data transaction platform, and uploads the hash value of the data to all data transaction platforms, and each data transaction platform independently saves the hash value of the data.

8. The data flow system based on sandbox technology according to claim 7, characterized in that: The transaction platform also includes auditing the data submitted by the data provider, and the specific steps are as follows: The client submits the data to the data transaction platform for application and sale, and the data transaction platform performs approval; the data transaction platform generates a composite hash value by inputting the hash value of the original data and the audit log together, to ensure the uniqueness, integrity and traceability of the data in the circulation process; the client sandbox and other data transaction platforms act as nodes on the blockchain, and through the incremental storage mechanism, the newly generated composite hash value is transmitted to all nodes on the blockchain for incremental storage.

9. The sandbox technology-based data flow system according to claim 8, wherein: The data buyer acquires the required data from the transaction platform through the client sandbox, and the specific steps are as follows: The data buyer selects the required data from the data transaction platform through the client sandbox, and the data transaction platform returns the data of the successful transaction, saves the transaction record and performs the on-chain operation of the transaction record; the buyer processes the data in the client sandbox, and uses role-based dynamic desensitization operation to ensure minimal operation of the data; the client sandbox combines the multi-modal AI behavior monitoring system, and automatically suspends data access when abnormal behavior occurs, records abnormal behavior logs and performs incremental storage; for operations that are necessary to execute but may affect data ownership or integrity, the data buyer executor applies to the client sandbox administrator, and the administrator approves to allow the data to be exported after approval, and the sandbox records the application and approval operation logs and performs incremental storage; The client sandbox of the data buyer synchronizes the original log file to the data provider regularly, and the data provider compares the composite hash value of the original data and the original log file with the composite hash value saved on the blockchain, to verify that the original log file has not been tampered with, and to review whether the data buyer has operated in compliance.

10. The sandbox technology-based data flow system according to claim 9, wherein: It also includes managing and verifying the hash value of the data in the data flow process, as follows: When the data provider publishes the data, the client sandbox generates and saves the hash value of the data, and uploads it to all data transaction platforms, and each data transaction platform independently saves it; when the transaction platform audits the data, it generates a composite hash value by inputting the hash value of the original data and the audit log together, and performs blockchain storage; When the data buyer performs an operation necessary for execution but may affect the data ownership or integrity, the client sandbox generates a new composite hash value based on the original hash value and chains it again; The data provider verifies that the original log file has not been tampered with by comparing the composite hash value of the original data and the original log file with the composite hash value saved on the blockchain, ensuring the traceability of data changes.

Images