An internet data security sharing system based on a blockchain

Abstract

The application relates to an internet data security sharing system based on a blockchain technology, and mainly solves the security hidden dangers and pain points in current internet data sharing. The system comprises a data acquisition module, a data preprocessing module, a blockchain core module, a privacy calculation module, an authority control module, a cross-chain cooperation module, a data sharing interaction module and an audit tracing module. The above modules cooperate with each other, realize the whole life cycle security control of internet data, and ensure the security and compliance of data.

Description

Technical Field

[0001] This invention relates to internet data security sharing technology, and in particular to an internet data security sharing system based on blockchain technology. Background Technology

[0002] In the digital economy era, data has become a key production factor, and the demand for sharing internet data is increasingly urgent. Whether it's multi-departmental data collaboration in public resource transactions or device data interoperability in IoT scenarios, efficient data sharing is essential. However, the current internet data sharing process generally suffers from three major pain points, severely restricting the release of data value and posing significant security risks: First, there is a conflict between data sharing and privacy protection. In traditional centralized data sharing systems, data needs to be aggregated to a central server, which can easily create "data silos." Furthermore, the central server is susceptible to single points of failure and data leakage risks. Once the server is attacked, it can lead to the leakage of a large amount of sensitive data. Even with distributed storage, it is difficult to achieve fine-grained control over data access permissions, making it impossible to balance the convenience of data sharing with privacy and security, and failing to meet the requirement of "data available but not visible."

[0003] Secondly, data ownership is unclear and traceability is difficult. In the existing data sharing model, the entire process of data generation, circulation, and use lacks traceable records. The definition of data ownership and usage rights is vague, which easily leads to problems such as data abuse and tampering. Moreover, after a security incident, it is impossible to accurately identify the responsible party, making it difficult to achieve compliance auditing.

[0004] Third, existing blockchain data sharing solutions have shortcomings. Current blockchain data sharing systems either employ a single-chain structure, resulting in performance bottlenecks and excessive storage redundancy—all nodes need to store complete data, leading to excessive memory burden and a significant decrease in storage and query efficiency as data volume increases; or they lack a robust cross-chain collaboration mechanism, making data exchange between different blockchain systems difficult and creating "chain silos." Furthermore, some solutions have vulnerabilities in their smart contracts and fail to achieve deep integration of privacy computing and blockchain, making it impossible to achieve efficient data sharing and compliant auditing while ensuring privacy.

[0005] For example, while existing technologies employing a hybrid private and consortium blockchain sharing scheme can achieve some cross-chain data exchange, they fail to address issues such as on-chain storage redundancy and difficulties in patching smart contract vulnerabilities. Furthermore, their privacy protection mechanisms are inadequate and cannot meet the secure sharing needs of diverse data types. Traditional blockchain sharing systems, lacking tiered storage and dynamic access control, struggle to balance data security, sharing efficiency, and storage costs. Moreover, existing solutions do not adequately consider compliance requirements in data sharing, failing to meet the data classification and traceability requirements of laws such as the Data Security Law, further limiting their application scope.

[0006] Therefore, in view of the shortcomings of existing technologies such as insufficient data sharing security, unclear ownership, difficulty in traceability, prominent performance bottlenecks, weak cross-chain collaboration capabilities, and insufficient compliance, there is an urgent need for an Internet data security sharing system that can achieve secure data storage, fine-grained access control, full-process traceability, efficient cross-chain collaboration, and take into account both privacy protection and compliance. This is also the core technical problem that this invention aims to solve. Summary of the Invention

[0007] This application discloses a blockchain-based Internet data security sharing system, which aims to achieve secure management and control of Internet data throughout its entire lifecycle.

[0008] The system includes a data acquisition module, a data preprocessing module, a blockchain core module, a privacy computing module, an access control module, a cross-chain collaboration module, a data sharing and interaction module, and an audit and traceability module. These modules work together to ensure secure data sharing.

[0009] Preferably, the data acquisition module adopts a distributed acquisition method to collect various types of data from the Internet, perform preliminary deduplication and noise reduction processing, and record metadata information such as the data generating entity, acquisition time, and data type.

[0010] The data preprocessing module is responsible for cleaning, format standardization, classification and grading, de-identification, and data fragmentation of the collected data to improve data quality.

[0011] The data preprocessing module classifies data into four levels: public data, internal data, sensitive data, and core data. Differentiated security strategies are developed for each level to ensure data security.

[0012] The core blockchain module adopts a hybrid blockchain architecture of "consortium blockchain + private blockchain", which includes consensus unit, blockchain storage unit and smart contract unit.

[0013] The consensus unit adopts the improved PBFT consensus algorithm and introduces a node credit rating mechanism. Based on the node's historical behavior, computing power contribution and compliance performance, the node is rated in credit, and nodes with high credit ratings are given priority to participate in the consensus, thereby improving consensus efficiency and security.

[0014] The blockchain storage unit adopts an on-chain and off-chain collaborative storage mode. On-chain storage includes data metadata, ownership information, transfer records, and access logs, while off-chain storage uses the IPFS distributed file system to store raw data fragments and non-core data. On-chain and off-chain data are associated through hash values ​​to achieve efficient and secure data storage.

[0015] The smart contract unit includes a built-in data ownership registration contract, a data sharing authorization contract, a compliance audit contract, and a vulnerability remediation contract. The vulnerability remediation contract is used to monitor smart contract vulnerabilities in real time, automatically execute temporary remediation measures after a vulnerability is detected, and send warning information to the administrator to ensure the security of the system.

[0016] The privacy computing module employs a hybrid privacy computing technology that combines homomorphic encryption and zero-knowledge proofs, along with federated learning, to achieve data sharing that is "usable but not visible," thus ensuring data privacy.

[0017] The access control module adopts an access control mechanism that combines attribute-based access control (ABAC) with decentralized identity (DID), and combines it with a zero-trust architecture to achieve decentralized identity authentication and fine-grained access control to prevent abuse of permissions.

[0018] The cross-chain collaboration module adopts a parallel HTLC channel and a dynamic time lock mechanism, combined with a multi-party threshold notarization mechanism, to achieve mutual recognition of identities, atomic data exchange and efficient transmission between different blockchain systems, breaking down inter-chain silos and achieving seamless data collaboration.

[0019] The data sharing and interaction module provides a standardized data sharing and interaction interface, supporting operations such as data query, application, authorization, and download. It also provides a real-time data sharing status query function, improving the convenience and security of data sharing.

[0020] The audit traceability module records operation logs throughout the entire data lifecycle, provides audit log query, statistics and analysis functions, realizes full-process data traceability and compliance audit, can generate visual audit reports, meet compliance audit requirements, and can accurately locate the responsible party in the event of a data security incident.

[0021] This application achieves full lifecycle security management of Internet data through the collaborative work of the above modules, ensuring the security and compliance of data sharing.

[0022] Compared with the prior art, the present invention has the following significant advantages: 1. Creatively resolves the core contradiction between data sharing and privacy protection: This invention employs a hybrid privacy computing technology that combines homomorphic encryption, zero-knowledge proofs, and federated learning, along with dynamic desensitization processing, to achieve data that is "usable but not visible." This satisfies the needs of multi-entity data sharing while completely avoiding the leakage of original sensitive data. Compared to existing single privacy protection technologies, it offers more comprehensive privacy protection, adapts to the privacy protection needs of various types of data, and solves the problem of balancing privacy protection and sharing efficiency in existing technologies.

[0023] 2. Clarify data ownership and achieve full-process traceability: Through the ownership registration contract and audit traceability module of the blockchain core module, the flow information and operation logs of the entire data lifecycle are recorded, clarifying data ownership and usage rights, solving the problems of unclear ownership and difficulty in traceability in existing data sharing. Once problems such as data abuse or tampering occur, the responsible party can be accurately located, while meeting compliance audit requirements and adapting to the requirements of laws and regulations such as the Data Security Law.

[0024] 3. Optimize storage architecture and solve performance bottlenecks: Adopt a hybrid chain architecture of "consortium chain + private chain" and an on-chain and off-chain collaborative storage mode. Core metadata and flow records are stored on-chain, while raw data and non-core data are stored off-chain. Combined with IPFS distributed storage, this not only reduces on-chain storage pressure and node memory burden, but also realizes distributed backup and elastic expansion of data. Storage efficiency and query efficiency are significantly improved compared with existing technologies. It solves the defects of excessive redundancy and insufficient performance of existing blockchain storage, and can be adapted to large-scale data sharing scenarios, such as the need for massive data on-chaining and sharing in the field of public resource transactions.

[0025] 4. Achieve refined access control and prevent abuse of permissions: Adopt an access control mechanism that combines ABAC and DID, and combine it with a zero-trust architecture to achieve decentralized authentication of identity and refined access control. Dynamically adjust permissions according to data classification and user attributes to prevent abuse of permissions from the source. Compared with the existing single access control method, access control is more accurate and secure, and adapts to the access management needs of multiple subjects and multiple scenarios.

[0026] 5. Enhance cross-chain collaboration capabilities and break down inter-chain silos: Through the parallel HTLC channel, dynamic time lock, and multi-party threshold notarization mechanism of the cross-chain collaboration module, identity mutual recognition, atomic data exchange, and efficient transmission between different blockchain systems are achieved. This solves the problems of poor interactivity and inability to communicate between existing blockchain systems, realizes multi-chain collaborative sharing, and expands the application scope of the system.

[0027] 6. Enhance system security and reliability: The improved PBFT consensus algorithm introduces a node credit rating mechanism to reduce the risk of malicious nodes and prevent 51% attacks; the smart contract unit has a built-in vulnerability repair contract to realize real-time monitoring and temporary repair of vulnerabilities, solving the problem that existing smart contract vulnerabilities are not easy to repair; the distributed collection and storage architecture avoids single points of failure, further improving the system's stability and anti-attack capabilities.

[0028] In summary, this invention, through a multi-module collaborative design, deeply integrates blockchain technology with privacy computing, hierarchical storage, dynamic access control, and cross-chain collaboration, creatively solving many shortcomings of existing internet data sharing systems. It achieves secure, efficient, reliable, and compliant data sharing, and can be widely applied in public resource transactions, the Internet of Things, finance, government affairs, and other fields, possessing extremely high practicality and promotional value. Attached Figure Description

[0029] To more clearly illustrate the embodiments of this application, the accompanying drawings used in this application will be briefly described below.

[0030] Figure 1 This is a schematic diagram of the module structure of the blockchain-based Internet data security sharing system of the present invention; Detailed Implementation

[0031] The present invention will now be described in further detail with reference to the accompanying drawings.

[0032] like Figure 1 As shown, the blockchain-based Internet data security sharing system of the present invention includes a data acquisition module, a data preprocessing module, a blockchain core module, a privacy computing module, an access control module, a cross-chain collaboration module, a data sharing and interaction module, and an audit and traceability module.

[0033] Data Acquisition Module: The Internet data acquisition module adopts a distributed acquisition method to collect Internet data from different network sources, and performs preliminary deduplication and noise reduction processing. At the same time, it records metadata information such as the data generating entity, acquisition time, and data type.

[0034] The Internet data acquisition module completes the collection, filtering, and integration of basic Internet data (web, server, IoT), and labels metadata such as data source, generation time, data type, quality level, and privacy level, constructs an Internet data resource catalog, and realizes centralized management of data.

[0035] Data Preprocessing Module: The data preprocessing module is used to clean, standardize, extract small datasets and summarize large datasets, perform data anonymization and data fragmentation on the collected data, providing support for various processing required for subsequent secure data sharing.

[0036] Before data processing, data cleaning is necessary. Cleaning is mainly to make the data cleaner and more effective, remove unreasonable or erroneous data, and perform unified format conversion and standardized numbering of the data to facilitate better indexing and retrieval during various calculations and operations, as well as to facilitate data display and use.

[0037] Privacy Computing Module: The privacy computing module employs a hybrid privacy computing technology that combines homomorphic encryption and zero-knowledge proofs to ensure secure data sharing while achieving data sharing that is "usable but not visible".

[0038] By leveraging the verifiable ownership characteristics of blockchain, a privacy computing protocol is constructed, employing a combination of homomorphic encryption and zero-knowledge proofs to ensure the accuracy of computation and the security of information.

[0039] While ensuring data security, users can perform highly secure analysis and mining without exposing the source data through the trusted environment (hardware security and software security) of the privacy computing module.

[0040] Traditional CPU-dependent computing models and cryptographic applications still face many challenges in the computing process: First, the large number of computing tasks performed by the CPU is vulnerable to attacks; second, cryptography used for privacy protection usually requires the use of a third-party CA center to issue and verify certificates. If this center is attacked or maliciously tampered with, it can easily destroy the secure channel established between the communicating parties.

[0041] The inherent characteristics of blockchain ledgers make three-party agreements possible, and decentralization is a key feature of blockchain.

[0042] Therefore, blockchain can be applied to privacy computing.

[0043] To achieve privacy computing in a trusted environment, this invention employs the following two methods: 1. Constructing a privacy computing protocol by utilizing the fair and trustworthy distributed ledger characteristics of blockchain; 2. Utilizing smart contracts to record transaction rules that are immutable and traceable.

[0044] Smart contracts need to be deployed (i.e. published) on the blockchain before they can run, and their subsequent behavior is also displayed by calling the smart contract.

[0045] This enables users to perform efficient privacy-preserving computations without ever seeing the source data.

[0046] Access Control Module: The access control module adopts an access control mechanism that combines attribute-based access control (ABAC) with decentralized identity (DID). It performs fine-grained access matching and control based on data attributes and user attributes, and implements the least privilege RAA role baseline policy and the static attribute-based authentication policy. It can form precise matching control decisions based on different combinations of access control methods.

[0047] In addition, this invention also employs a series of technical methods such as information symmetric encryption, access control, and permission management to ensure the security of the metadata database.

[0048] Symmetric encryption: Plaintext data is encrypted and protected using a symmetric key. Apart from the key itself, the encryption process is transparent to the outside world.

[0049] Commonly used symmetric encryption algorithms include DataGaurd, RC, and HMAC; Access control: When creating a user account, user permissions are set, and user information security is ensured by combining user authentication and permission settings; Permission management: Read and write permissions for different roles (administrators / users / clients, etc.) are set and managed to control access to different resources.

[0050] The cross-chain collaboration module breaks down the barriers between off-chain and on-chain, solving practical application problems between different blockchains (such as cross-chain between BTC and ETH) and interoperability issues between different blockchain sides (such as cross-chain between EOS and EOS DEX).

[0051] To address the pain points in secure data sharing on the Internet, a novel distributed ledger system based on the Web3.0 network architecture is proposed.

[0052] This section mainly designs four key components: Web3.0 network structure, network layer separation architecture, drawer-style modular design, and scripted configuration and management interface.

[0053] The most important of these is the network layer separation architecture, which divides the blockchain network into lower-layer infrastructure components and upper-layer application components. It achieves communication and interaction between components by defining a series of interfaces and protocols, enabling the deployment of various components with heterogeneous platforms and different performance requirements on the same blockchain.

[0054] In addition, a blockchain-enhanced smart contract (BCS) architecture was proposed, which includes a set of basic smart contract services that support stateless states. This transforms stateful smart contracts into stateless smart contracts, enabling smart contracts to support not only stateful business logic but also stateless business logic. Finally, a multi-chain co-governance consensus mechanism was proposed, aiming to solve the construction and maintenance problems of public infrastructure.

[0055] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention.

[0056] Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention shall be included within the scope of protection of this invention.

Claims

1. A blockchain-based internet data security sharing system, characterized in that, It includes a data acquisition module, a data preprocessing module, a blockchain core module, a privacy computing module, an access control module, a cross-chain collaboration module, a data sharing and interaction module, and an audit and traceability module. These modules work together to achieve secure management and control of Internet data throughout its entire lifecycle. The data acquisition module adopts a distributed acquisition method to collect various types of data from the Internet, perform preliminary deduplication and noise reduction processing, and record metadata information such as the data generating entity, acquisition time, and data type. The data preprocessing module is used to clean, standardize, classify, de-identify, and shard the collected data. The blockchain core module adopts a hybrid blockchain architecture of "consortium blockchain + private blockchain," including a consensus unit, a blockchain storage unit, and a smart contract unit. The consensus unit uses an improved PBFT consensus algorithm that incorporates a node credit rating mechanism. The blockchain storage unit adopts an on-chain and off-chain collaborative storage mode. On-chain storage stores data metadata, ownership information, flow records, and access logs, while off-chain storage uses the IPFS distributed file system to store raw data shards and non-core data. On-chain and off-chain data are associated through hash values. The smart contract unit has built-in data ownership registration contracts, data sharing authorization contracts, compliance audit contracts, and vulnerability repair contracts. The privacy computing module uses a hybrid privacy computing technology that combines homomorphic encryption and zero-knowledge proofs, combined with federated learning technology, to achieve data sharing that is "usable but not visible." The access control module employs an access control mechanism combining attribute-based access control (ABAC) and decentralized identity (DID), along with a zero-trust architecture, to achieve decentralized identity authentication and fine-grained access control. The cross-chain collaboration module uses parallel HTLC channels and a dynamic time lock mechanism, combined with a multi-party threshold notarization mechanism, to achieve mutual recognition of identities, atomic data exchange, and efficient transmission between different blockchain systems. The data sharing and interaction module provides a standardized data sharing interaction interface, supporting operations such as data query, application, authorization, and download, and provides real-time data sharing status query functionality. The audit and traceability module records the entire lifecycle of data operation logs, providing audit log query, statistics, and analysis functions to achieve full-process data traceability and compliance auditing.

2. The blockchain-based internet data security sharing system according to claim 1, characterized in that, The data preprocessing module classifies and grades the data into four levels: public data, internal data, sensitive data, and core data, and formulates differentiated security strategies for each level.

3. The blockchain-based internet data security sharing system according to claim 1, characterized in that, The consensus unit's node credit rating mechanism assesses nodes based on their historical behavior, computing power contribution, and compliance performance, prioritizing nodes with high credit ratings for participation in the consensus process.

4. The blockchain-based internet data security sharing system according to claim 1, characterized in that, The vulnerability repair contract of the smart contract unit is used to monitor smart contract vulnerabilities in real time, automatically execute temporary repair measures after a vulnerability is detected, and send warning information to the administrator.

5. The blockchain-based internet data security sharing system according to claim 1, characterized in that, The privacy computing module's dynamic desensitization process hides personal privacy information and core business information for sensitive and core data, preventing the leakage of raw data.

6. The blockchain-based internet data security sharing system according to claim 1, characterized in that, The dynamic permission adjustment of the permission management module adjusts access permissions in real time based on user behavior and data usage needs to prevent permission abuse.

7. The blockchain-based internet data security sharing system according to claim 1, characterized in that, The cross-chain collaboration module enables seamless data collaboration between consortium blockchains and private blockchains, as well as between different consortium blockchains, breaking down blockchain silos.

8. The blockchain-based internet data security sharing system according to claim 1, characterized in that, The audit traceability module can generate visual audit reports to meet compliance audit requirements and accurately identify the responsible party when a data security incident occurs.

Images