Method and device for sharing structured agricultural data, electronic equipment and storage medium

Abstract

This invention provides a method, apparatus, electronic device, and storage medium for sharing structured agricultural data, belonging to the field of trusted data sharing technology. The method for sharing structured agricultural data includes: displaying a data resource catalog, which includes target structured agricultural data; responding to a first data sharing request for the target structured agricultural data sent by a first blockchain-privacy computing node, receiving the cloud data warehouse address of the target structured agricultural data from the consortium blockchain network; sending an encrypted computing task to a second blockchain-privacy computing node providing the target structured agricultural data; and controlling the second blockchain-privacy computing node to send the encrypted computing result to the first blockchain-privacy computing node. This application achieves the goal of data remaining within its domain and its value being transferable, fundamentally eliminating the risk of leakage of sensitive structured agricultural data during cross-domain sharing, and successfully resolving the core contradiction between data sharing and privacy protection.

Description

Technical Field

[0001] This invention relates to the field of trusted data sharing technology, and in particular to a method, apparatus, electronic device, and storage medium for sharing structured agricultural data. Background Technology

[0002] With the advancement of digital rural construction and agricultural e-government, cross-departmental structured agricultural data sharing has become crucial for improving agricultural governance efficiency and optimizing agricultural services.

[0003] Structured agricultural data contains sensitive information such as farmers' ID numbers, bank accounts, and subsidy details. Cross-domain transmission of raw data can easily lead to privacy leaks, while local storage alone cannot meet the needs of cross-departmental collaborative computing.

[0004] How to achieve the sharing of structured agricultural data while ensuring its security is an urgent problem to be solved. Summary of the Invention

[0005] This invention provides a method, apparatus, electronic device, and storage medium for sharing structured agricultural data, which addresses the shortcomings of existing technologies where cross-domain transmission of structured agricultural data can easily lead to privacy leaks, while simple local storage cannot meet the needs of cross-departmental collaborative computing. This invention achieves the sharing of structured agricultural data while ensuring the security of the structured agricultural data.

[0006] This invention provides a method for sharing structured agricultural data, comprising the following steps.

[0007] Display a data resource catalog, which includes target structured agricultural data; In response to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, the cloud data warehouse address of the target structured agricultural data is received from the consortium blockchain network. Send an encrypted computing task to the second blockchain-privacy computing node that provides the target structured agricultural data. The encrypted computing task includes the cloud data warehouse address of the target structured agricultural data, the encrypted structured query instruction and authorization credential in the first data sharing request. Control the second blockchain-privacy computing node to send encrypted computing results to the first blockchain-privacy computing node; The consortium blockchain network consists of multiple blockchain-privacy computing nodes that communicate with each other, including at least the first blockchain-privacy computing node and the second blockchain-privacy computing node. Each of the multiple blockchain-privacy computing nodes corresponds one-to-one with multiple agricultural government departments. The encrypted computing result is obtained by the second blockchain-privacy computing node executing the encrypted structured query instruction on the target structured agricultural data read from the cloud data warehouse address based on the target structured agricultural data, provided that the authorization credential is valid.

[0008] According to a method for sharing structured agricultural data provided by the present invention, the first data sharing request further includes a department identifier and a user identifier. The method of receiving the cloud data warehouse address of the target structured agricultural data from the consortium blockchain network in response to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node further includes: The department identifier and user identifier are sent to the consortium blockchain network for verification. If the department identifier and user identifier are verified and the authorization credential is valid, the cloud data warehouse address of the target structured agricultural data will be received from the consortium blockchain network.

[0009] According to a method for sharing structured agricultural data provided by the present invention, the method further includes: The second blockchain-privacy computing node is controlled to send the authorization credential to the consortium blockchain network for verification. If the authorization credential is valid, the second blockchain-privacy computing node is controlled to invoke the structured data adapter and read the target structured agricultural data based on the cloud data warehouse address of the target structured agricultural data; and The second blockchain-privacy computing node is controlled to call the encrypted query engine and query the target structured agricultural data based on the encrypted structured query instruction to obtain the encrypted computing result.

[0010] According to a method for sharing structured agricultural data provided by the present invention, the step of controlling the second blockchain-privacy computing node to send encrypted computing results to the first blockchain-privacy computing node further includes: Control the first blockchain-privacy computing node to perform compliance verification on the encrypted computing results using local budget data; and If the compliance verification passes, the encrypted calculation result is output.

[0011] According to a method for sharing structured agricultural data provided by the present invention, the method further includes: Obtain process operation logs; The process operation log and the encrypted calculation result are written into the blockchain ledger.

[0012] According to a method for sharing structured agricultural data provided by the present invention, before receiving the cloud data warehouse address of the target structured agricultural data from the consortium blockchain network in response to a first data sharing request for the target structured agricultural data sent by a first blockchain-privacy computing node, the method further includes: Receive permission request sent by the first blockchain-privacy computing node. The permission request includes an agricultural data table in the data resource directory, a request authorization field in the agricultural data table, and an operation type. The operation type includes the encrypted structured query instruction, and the request authorization field includes the target structured agricultural data. In response to the permission request, an approval request is sent to the second blockchain-privacy computing node; Upon receiving the indication that the second blockchain-privacy computing node has approved the request, the authorization credential is generated based on the request authorization field and the operation type.

[0013] According to a method for sharing structured agricultural data provided by the present invention, before receiving the permission request sent by the first blockchain-privacy computing node, the method for sharing structured agricultural data further includes: Deploy a blockchain-privacy computing node for each of the aforementioned agricultural government departments to build the consortium blockchain network; Generate a unique department identifier for each agricultural government department, a unique user identifier for each employee position in each agricultural government department, and a unique data identifier for the structured agricultural data stored in the cloud data warehouse associated with each agricultural government department. Construct a corresponding cloud data warehouse address for each of the aforementioned unique data identifiers.

[0014] The present invention also provides a structured agricultural data sharing device, comprising the following modules: The output module is used to display the data resource catalog, which includes the target structured agricultural data; The response module is used to respond to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, and to receive the cloud data warehouse address of the target structured agricultural data fed back by the consortium blockchain network. The first sending module is used to send an encrypted computing task to the second blockchain-privacy computing node that provides the target structured agricultural data. The encrypted computing task includes the cloud data warehouse address of the target structured agricultural data, the encrypted structured query instruction and authorization credential in the first data sharing request. The second sending module is used to control the second blockchain-privacy computing node to send encrypted computing results to the first blockchain-privacy computing node; The consortium blockchain network consists of multiple blockchain-privacy computing nodes that communicate with each other, including at least the first blockchain-privacy computing node and the second blockchain-privacy computing node. Each of the multiple blockchain-privacy computing nodes corresponds one-to-one with multiple agricultural government departments. The encrypted computing result is obtained by the second blockchain-privacy computing node executing the encrypted structured query instruction on the target structured agricultural data read from the cloud data warehouse address based on the target structured agricultural data, provided that the authorization credential is valid.

[0015] The present invention also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the method for sharing structured agricultural data as described above.

[0016] The present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements a method for sharing structured agricultural data as described above.

[0017] The present invention also provides a computer program product, including a computer program that, when executed by a processor, implements the method for sharing structured agricultural data as described above.

[0018] This invention provides a method, apparatus, electronic device, and storage medium for sharing structured agricultural data. Utilizing a consortium blockchain network as a trusted rule center and address book, upon receiving a data sharing request carrying authorization credentials, the system verifies the credentials to confirm the legitimacy of the operation and securely provides the data's addressing information. Subsequently, a task package containing this addressing information and encrypted instructions is sent to the data provider node for local computation. This series of operations ensures that each computation task strictly adheres to the permissions pre-granted by the data owner (the second blockchain – the privacy computing node). By restricting computation to the local data location and returning the encrypted results to the data requester, this solution achieves the goal of data remaining within its domain while allowing for value transfer, fundamentally eliminating the risk of leakage of sensitive structured agricultural data during cross-domain sharing and successfully resolving the core contradiction between data sharing and privacy protection. Attached Figure Description

[0019] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0020] Figure 1 This is one of the flowcharts illustrating the structured agricultural data sharing method provided by this invention.

[0021] Figure 2 This is the second flowchart illustrating the structured agricultural data sharing method provided by this invention.

[0022] Figure 3 This is the third flowchart of the structured agricultural data sharing method provided by the present invention.

[0023] Figure 4 This is the fourth flowchart illustrating the structured agricultural data sharing method provided by this invention.

[0024] Figure 5 This is the fifth flowchart illustrating the structured agricultural data sharing method provided by this invention.

[0025] Figure 6 This is a schematic diagram of the consortium blockchain network provided by the present invention.

[0026] Figure 7 This is the sixth flowchart illustrating the structured agricultural data sharing method provided by this invention.

[0027] Figure 8 This is a schematic diagram of the distributed architecture of the structured agricultural data sharing method provided by the present invention.

[0028] Figure 9 This is a schematic diagram of the structure of the structured agricultural data sharing device provided by the present invention.

[0029] Figure 10 This is a schematic diagram of the structure of the electronic device provided by the present invention.

[0030] Figure label: 901: Output module; 902: Response module; 903: First transmitting module; 904: Second transmitting module; 1010: Processor; 1020: Communication interface; 1030: Memory; 1040: Communication bus. Detailed Implementation

[0031] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.

[0032] This invention provides a method for sharing structured agricultural data, the execution entity of which can be a centralized server, a server cluster, or a computer device serving as a unified data processing platform. In this embodiment, the execution entity can specifically be a unified agricultural data privacy computing platform, which is responsible for coordinating and scheduling secure data collaboration among various agricultural government departments.

[0033] The unified agricultural data privacy computing platform deploys a data resource catalog. This catalog is categorized by agricultural business domains (subsidy disbursement, agricultural machinery management, agricultural product production and sales, farmer credit). Each catalog item includes: table name, field description, data classification (public / internal / sensitive), authorization scope, update frequency, and department. It supports multi-dimensional searching by department, business type, and field name.

[0034] Specifically, the unified agricultural data privacy computing platform includes the following modules: Permission application and approval module: Visual configuration table - fields - operation permissions. The application process automatically triggers the consortium blockchain permission contract. The approval node includes the business manager of the data provider and the compliance specialist of the agricultural authority. Approval records are uploaded to the blockchain in real time.

[0035] Task scheduling module: Receives cross-department structured query requests (i.e., the first data sharing request below), breaks them down into local encrypted query tasks (i.e., encrypted computing tasks below), obtains the target node address (i.e., the cloud data warehouse address below) through the consortium blockchain address mapping contract, and issues SM4-encrypted Structured Query Language (SQL) logic and authorization credentials.

[0036] Results Management Module: Aggregates encrypted intermediate results from each node, supports result format conversion (JSON / Excel / Parquet), and can only be decrypted by authorized parties using the SM2 private key. It retains the hash association between the query results and the original data (result hash = SM3 (original data hash + query logic hash)) to facilitate traceability and verification.

[0037] The following is combined Figures 1 to 10 The present invention describes a method, apparatus, electronic device, and storage medium for sharing structured agricultural data.

[0038] Figure 1 This is one of the flowcharts illustrating the structured agricultural data sharing method provided by this invention, such as... Figure 1 As shown, the method includes the following: Step 101: Display the data resource catalog, which includes the target structured agricultural data.

[0039] Step 102: In response to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, receive the cloud data warehouse address of the target structured agricultural data fed back by the consortium blockchain network.

[0040] In this step, when the first blockchain-privacy computing node (such as the finance bureau node) needs to process data from the second blockchain-privacy computing node (such as the agriculture and rural affairs bureau node), it first initiates a first data sharing request through the executing entity (such as the unified agricultural data privacy computing platform). This request clarifies its intent, namely, to share a specific target of structured agricultural data (such as part of the data in the "2024 Q2 Farmer Subsidy Distribution Table").

[0041] In some embodiments, an address mapping contract is deployed on the consortium blockchain network.

[0042] Specifically, the address mapping contract stores an encrypted mapping relationship between DataID and cloud data warehouse address. DataID is the data identifier corresponding to the target structured agricultural data, i.e., a unique data identifier. The cloud data warehouse address format is cloud vendor identifier + data warehouse type + table path + field index, for example: ali-clickhouse: / / nongye-department / subsidy_tablefields=id:1,amount:5,time:8, where the field index corresponds to the field position in the data warehouse table).

[0043] Among them, ali-clickhouse refers to the connection and storage type, such as data stored in Alibaba Cloud's ClickHouse data warehouse. It can also be other types such as Hadoop, MySQL, and GaussDB, offering good scalability.

[0044] nongye-department / subsidy_table, which is the data table path, specifies the database or schema name and the specific table name.

[0045] The fields=id:1,amount:5,time:8 means that the authorized field index precisely specifies that the fields authorized for access in this operation are the 1st, 5th, and 8th columns in the physical storage of the data table.

[0046] In some embodiments, the address mapping contract is encrypted and stored using the SM4 algorithm, and only authorized nodes can obtain it by decrypting the contract.

[0047] Step 103: Send an encrypted computing task to the second blockchain-privacy computing node that provides the target structured agricultural data. The encrypted computing task includes the cloud data warehouse address of the target structured agricultural data, the encrypted structured query instruction in the first data sharing request, and the authorization credential.

[0048] Step 104: Control the second blockchain-privacy computing node to send the encrypted computing result to the first blockchain-privacy computing node.

[0049] Upon receiving the encrypted computation task, the second blockchain-privacy computing node first verifies the authorization credentials in the task to confirm that the task indeed originates from a legitimate request authorized by it. After confirming the permissions are correct, it parses the cloud data warehouse address and calls its local data reading module to strictly read the target structured agricultural data from its local cloud data warehouse according to the field indices specified in the address (such as columns 1, 5, and 8). Subsequently, in its local privacy computing environment, it executes encrypted structured query instructions on the read data to obtain an encrypted computation result. For example, it performs a cryptographic summation on the values ​​of all subsidy amount fields to obtain an encrypted sum value.

[0050] During this process, the entire computation is completed in the local environment of the second blockchain-privacy computing node, and the raw data never leaves its control domain.

[0051] After the calculation is complete, the executing entity coordinates with the second blockchain-privacy computing node to send the encrypted calculation result to the first blockchain-privacy computing node. Because the result itself is encrypted, even if intercepted during transmission, no valuable business information can be leaked. Upon receiving the encrypted result, the first blockchain-privacy computing node can decrypt it using its locally stored key, thereby obtaining the final calculation answer (such as the total subsidy amount).

[0052] The consortium blockchain network consists of multiple blockchain-privacy computing nodes that communicate with each other, including at least a first blockchain-privacy computing node and a second blockchain-privacy computing node. Each blockchain-privacy computing node corresponds one-to-one with multiple agricultural government departments. The encrypted computing result is obtained by the second blockchain-privacy computing node executing an encrypted structured query instruction on the target structured agricultural data read from the cloud data warehouse address based on the target structured agricultural data, provided that the authorization certificate is valid.

[0053] In this embodiment, a consortium blockchain network is used as a trusted rule center and address book. Upon receiving a data processing request carrying authorization credentials, the legitimacy of the operation is confirmed by verifying the credentials, and the data addressing information is securely provided. Subsequently, a task package containing the addressing information and encrypted instructions is sent to the data provider node for local computation. This series of operations ensures that each computation task strictly adheres to the permissions pre-granted by the data owner (the second blockchain - privacy computing node). By restricting computation to the local data location and returning the encrypted results to the data requester, this solution achieves the goal of data remaining within its domain while allowing value transfer, fundamentally eliminating the risk of leakage of structured agricultural sensitive data during cross-domain sharing, and successfully resolving the core contradiction between data sharing and privacy protection.

[0054] In some embodiments, the first data sharing request may also include a department identifier and a user identifier, such as Figure 2 As shown, in response to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, the cloud data warehouse address for the target structured agricultural data fed back by the consortium blockchain network also includes: Step 201: Send the department identifier and user identifier to the consortium blockchain network for verification.

[0055] The department identifier is a unique on-chain identity code generated for each participating agricultural government department during the system initialization phase through an identity contract on the consortium blockchain network. For example, the Finance Bureau's OrgID is generated for the Finance Bureau. This identifier is used to confirm which legitimate organization the request originates from.

[0056] Similarly, a UserId is a unique on-chain identity code associated with the job authority of an employee within a specific department; that is, a unique user identifier. For example, a specialist in the Finance Bureau responsible for subsidy auditing will be assigned a specific UserId. This identifier is used to trace and audit the specific person in charge, achieving dual identity identification from the organization to the individual.

[0057] In this step, after receiving the first data sharing request containing department and user identifiers from the first blockchain-privacy computing node, the unified agricultural data privacy computing platform extracts this pair of identity information and sends it to the consortium blockchain network to request identity legitimacy verification. The identity contract in the consortium blockchain network checks whether the received department and user identifiers exist in its registered identity ledger and verifies whether there is a legitimate association between the two (i.e., the user does indeed belong to the department).

[0058] While performing the aforementioned identity verification, the consortium blockchain network also verifies the validity of the authorization credentials attached to the request. The process will only continue when both identity and authorization verification conditions are met—that is, when the consortium blockchain network confirms that the requester is a legitimate, registered department or user, and that the authorization credentials attached to the request are authentic and valid.

[0059] Step 202: If the department identifier and user identifier are verified and the authorization certificate is valid, receive the cloud data warehouse address of the target structured agricultural data fed back by the consortium blockchain network.

[0060] Once the dual authentication is successful, the consortium blockchain network will proceed with subsequent actions, namely, retrieving and reporting the cloud data warehouse address corresponding to the target structured agricultural data from its stored encrypted mapping relationships to the executing entity. If either the identity verification or the authorization credential verification fails, the consortium blockchain network will reject the request, and the process will be suspended, thereby preventing any unauthorized or unauthorized data access attempts.

[0061] In this embodiment, department and user identifiers are introduced, and a mandatory identity verification step is added at the initial stage of request processing. This design not only effectively prevents potential security risks such as theft of authorization credentials or impersonation, but also greatly enhances the traceability of the entire data collaboration process, ensuring that each data processing request can be accurately attributed to a specific department and individual. This provides a solid technical foundation for subsequent auditing and compliance supervision, further improving the security and credibility of the entire cross-departmental data sharing system.

[0062] In some embodiments, such as Figure 3 As shown, methods for sharing structured agricultural data also include: Step 301: Control the second blockchain - privacy computing node to send the authorization certificate to the consortium blockchain network for verification.

[0063] In this step, upon receiving the cryptographic computation task, the second blockchain-privacy computation node does not immediately execute the computation. Instead, it performs a crucial local authorization self-check. It extracts the authorization credential from the task package and resends it to the consortium blockchain network for validity verification.

[0064] This step ensures that even if the source of the encrypted computation task is trustworthy, the second blockchain-privacy computing node still needs to undergo final and authoritative verification of its own issued authorization through an immutable consortium blockchain before using its local data. This eliminates the risk of data misuse due to forged, altered, or expired authorization credentials.

[0065] Step 302: If the authorization certificate is valid, control the second blockchain-privacy computing node to call the structured data adapter and read the target structured agricultural data based on the cloud data warehouse address of the target structured agricultural data.

[0066] After the consortium blockchain network confirms the validity of the authorization certificate, the second blockchain-privacy computing node will enter the data reading phase. The core of this phase is to invoke a specialized component—the structured data adapter. This adapter is a standardized interface module.

[0067] The second blockchain-based privacy computing node will pass the cloud data warehouse address (e.g., ali-clickhouse: / / nongye-department / subsidy_tablefields=id:1,amount:5,time:8) from the encrypted computing task to the adapter. The adapter will then resolve this address. Based on the ali-clickhouse: / / part, call the pre-built driver (such as JDBC / ODBC driver) that is compatible with Alibaba Cloud ClickHouse data warehouse.

[0068] Based on the / nongye-department / subsidy_table section, connect to the cloud data warehouse instance within the local area network and locate the "Farmer Subsidy Distribution Table".

[0069] Strictly adhering to the fields=id:1,amount:5,time:8 part, only read data from the data table in columns 1, 5, and 8.

[0070] In this way, the adapter not only solves the compatibility issues with mainstream cloud data warehouses (such as Hadoop, MySQL, GaussDB, etc.) and their storage formats (such as CSV, Parquet, ORC), but more importantly, it enforces physical filtering of field-level permissions granted by on-chain contracts at the source of data reading. The target structured agricultural data read into memory is already a minimal subset of data containing only the authorized fields.

[0071] Step 303: Control the second blockchain-privacy computing node to call the encrypted query engine and query the target structured agricultural data based on the encrypted structured query command to obtain the encrypted computing result.

[0072] Specifically, after the data is accurately read into memory, the second blockchain-privacy computing node invokes its core computing component—the secure query engine. In some embodiments of this invention, this engine may be an SCQL (Secure SQL) secure query engine that supports native SQL syntax.

[0073] The engine receives two inputs: first, the filtered target structured agricultural data read by the adapter in the previous step; and second, the encrypted structured query instructions from the task package. Based on a secure multi-party computation protocol (such as ABY3), the engine executes the logic described by the query instructions on the data in memory. For example, it performs a SUM (subsidy amount) operation. The entire calculation process is performed in an encrypted state; intermediate results and original detailed data do not appear in plaintext form in memory or during the calculation process, thus generating the final encrypted calculation result (such as a ciphertext value of the total subsidy amount).

[0074] In this embodiment, the absolute legitimacy of the computation task is ensured by introducing a local authorization self-check step; efficient compatibility with heterogeneous data sources is achieved by introducing a structured data adapter, and precise field-level access control is enforced; and the privacy and security of the core computation process itself are guaranteed by introducing a cryptographic query engine. These three links are interconnected and work together, making local computation without data leaving the domain not only possible, but also providing extremely high security and accuracy at the operational level, thus providing solid technical support for the reliable implementation of the entire solution.

[0075] In some embodiments, controlling the second blockchain-privacy computing node to send the encrypted computing result to the first blockchain-privacy computing node further includes: Controlling the first blockchain-privacy computing node to perform compliance verification of encrypted computation results using local budget data; and If the compliance verification passes, the encrypted calculation result will be output.

[0076] Specifically, after the first blockchain-privacy computing node receives the encrypted computation result from the second blockchain-privacy computing node, it first uses its locally held key to decrypt the result, obtaining a plaintext computation result. For example, in a scenario of cross-departmental agricultural subsidy distribution compliance verification, this decrypted result might be that the total amount of farmer subsidies in Q2 2024 was 50 million yuan.

[0077] The First Blockchain-Privacy Computing Node does not directly adopt or display this result. Instead, it initiates an internal compliance verification process. The core of this process is to use the business data stored locally by the First Blockchain-Privacy Computing Node to compare and verify the received computation result. In this example, the Finance Bureau node will retrieve the pre-set total budget for agricultural subsidies in Q2 2024 (e.g., 60 million yuan) from its local budget management system. This is what is known as local budget data.

[0078] The first blockchain-privacy computing node will compare the total subsidy amount (50 million yuan) calculated from the second blockchain-privacy computing node with the local total budget (60 million yuan). This comparison constitutes a compliance verification. The verification logic can be set according to specific business scenarios, for example: Verify whether the calculation result is within a preset threshold or range (e.g., total subsidy amount <= total budget amount); or verify whether the calculation result is logically consistent with other related local data.

[0079] If the compliance verification passes (for example, 50 million yuan ≤ 60 million yuan), it indicates that the total amount of subsidies issued by the Agriculture and Rural Affairs Bureau is within the budget control range of the Finance Bureau, and is compliant in terms of business logic.

[0080] If the compliance verification fails (for example, the calculated total subsidy amount is 70 million yuan, exceeding the budget of 60 million yuan), the first blockchain-privacy computing node will trigger a preset abnormal handling or risk warning mechanism, such as sending an alarm notification to the relevant person in charge, generating pending review tasks, etc., instead of directly adopting the calculation result.

[0081] In this embodiment, a local compliance verification step is introduced on the first blockchain-privacy computing node side, deeply integrating cross-departmental data collaboration with the data requester's own business processes. It goes beyond simply acquiring data results from external sources; it places those results within its own business rules and logical framework for verification, achieving closed-loop verification of data value. This step enables the results of data collaboration to directly serve business decisions and risk management. For example, in this case, it directly helped the finance bureau monitor the budget for subsidy disbursements. This design significantly enhances the practicality and business value of the entire data sharing solution, truly empowering specific government management scenarios with technology.

[0082] In some embodiments, such as Figure 4 As shown, the methods for sharing structured agricultural data also include: Step 401: Obtain the process operation log.

[0083] The process operation log includes the requester's OrgID / UserId, DataID (table name + field set), operation type, query logic hash, calculation result hash, approval node, and timestamp, and supports sorting by farmer ID, subsidy batch, and time range.

[0084] Step 402: Write the process operation log and encrypted calculation results into the blockchain ledger.

[0085] Specifically, after obtaining the complete process operation log, it will be packaged into a transaction and submitted to the consortium blockchain network to request that it be written into the blockchain ledger.

[0086] In some embodiments of the present invention, the hash of the calculation result generated in the aforementioned log is written as part of the log. This satisfies the need for proof of the result, greatly reduces the burden of on-chain storage by storing only the hash value, and further enhances privacy protection.

[0087] Once the consensus nodes of the consortium blockchain network receive this transaction containing the process operation log, they will verify and sort it through the consensus mechanism, and finally package it into a new block. Once this block is appended to the end of the blockchain ledger, this operation log will possess the characteristics of immutability, non-repudiation, and transparency (towards consortium members) brought by blockchain technology.

[0088] In this embodiment, by storing logs containing key information such as the requester, data assets, operation content, approver, and operation result on the blockchain, it is ensured that every data sharing activity is traceable and accountable. This design not only provides a clear basis for adjudicating potential disputes but also provides strong technical support for meeting the compliance and regulatory requirements of agricultural government data. It transforms the entire data collaboration process from a black-box operation to a white-box operation witnessed by all alliance members, thereby establishing deep technical trust among the participating agricultural departments and achieving data traceability.

[0089] In some embodiments, such as Figure 5 As shown, in response to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, before receiving the cloud data warehouse address of the target structured agricultural data fed back by the consortium blockchain network, the following steps are also included: Step 501: Receive the permission request sent by the first blockchain-privacy computing node. The permission request includes the agricultural data table in the data resource catalog, the request authorization field in the agricultural data table, and the operation type. The operation type includes the encrypted structured query instruction, and the request authorization field includes the target structured agricultural data.

[0090] In some embodiments, structured agricultural data is classified into different control levels, namely: Public level: Agricultural product production and sales statistics (such as the total corn production in a certain region).

[0091] Internal level: Agricultural machinery registration information (such as agricultural machinery model and registration time).

[0092] Sensitive Level: Farmer credit data, subsidy details data.

[0093] Different levels of control require different types of operations in permission requests to ensure data security.

[0094] For example, access permissions for sensitive data can be automatically restricted, such as allowing only aggregate calculations and prohibiting individual queries; and granting approval only to department heads.

[0095] Step 502: In response to the permission request, send an approval request to the second blockchain-privacy computing node.

[0096] Step 503: Upon receiving the instruction information that the second blockchain-privacy computing node has approved the request, generate an authorization credential based on the request authorization field and operation type.

[0097] In this step, once the approver of the second blockchain-privacy computing node reviews and approves the permission request, it will send an approval notification to the executing entity. Upon receiving this positive feedback, the authorization credential generation process will then commence.

[0098] The authorization credential is precisely constructed based on the approved authorization fields and operation types in this application. Specifically, the executing entity (or the consortium blockchain smart contract it triggers) will bind and cryptographically sign the following information to form a unique and tamper-proof authorization credential: Identification of the authorizing party (second blockchain - privacy computing node) and the authorized party (first blockchain - privacy computing node).

[0099] The authorized data asset identifier (DataID) can be generated by hashing the table identifier and the set of fields requested for authorization, thereby embedding field-level permissions in the credential.

[0100] In some embodiments, the authorization credential may also include a list of authorized operation types and the validity period of the authorization credential.

[0101] The generated authorization certificate will be recorded on the ledger of the consortium blockchain and distributed to the first blockchain - privacy computing node, for use when it initiates actual data processing requests in the future.

[0102] In this embodiment, the traditional, vague, and inefficient manual authorization process is transformed into a standardized, systematic, and traceable online governance process. By mandating fine-grained field-level authorization before data access, and requiring direct approval from the data owner, this solution ensures that data sovereignty is fully respected from the outset. The resulting on-chain authorization credential provides a trusted and non-repudiable pass for all subsequent data processing activities, thereby ensuring data security.

[0103] In some embodiments, before receiving a permission request sent by the first blockchain-privacy computing node, the method for sharing structured agricultural data further includes: Deploy a blockchain-privacy computing node for each agricultural government department to build a consortium blockchain network.

[0104] In some embodiments, such as Figure 6 As shown, a blockchain-privacy computing node can be understood as a pair of privacy computing node 1 and blockchain node 1, privacy computing node 2 and blockchain node 2, privacy computing node 3 and blockchain node 3... privacy computing node n and blockchain node n.

[0105] In the above embodiments, privacy computing nodes and block nodes deployed in pairs form a blockchain-privacy computing node. The privacy computing node performs off-chain local computation and is adapted to structured queries. Specifically, the privacy computing node is deployed in the same area as each data warehouse and communicates with the local area network through the blockchain node, with a data read latency of ≤300ms.

[0106] Each privacy computing node is equipped with the following core computing engines: SCQL Closed-State Query Engine: Developed based on MPC (ABY3 protocol), it supports closed-state execution of SQL native syntax for structured data and is compatible with high-frequency agricultural operations such as SELECT, WHERE, GROUP BY, SUM, COUNT, and JOIN.

[0107] Field-level filtering: Only reads fields authorized by the permission contract; sensitive fields are automatically blocked.

[0108] Encrypted aggregation: Aggregation calculations (SUM / COUNT) are performed in an encrypted state, and intermediate results do not reveal details.

[0109] Agricultural data privacy protection: Supports partial masking of sensitive fields such as ID card number and bank account (e.g., only the first 6 digits of the ID card number are retained).

[0110] The Private Set Intersection (PSI) data alignment engine is based on an unintentional transmission protocol. It is designed for cross-departmental structured data association scenarios (such as aligning farmer subsidy data with bank account data). It achieves privacy alignment of primary keys (such as farmer IDs), outputs only the intersection primary keys, and does not disclose non-intersection data.

[0111] Federated Aggregation Engine: Supports structured data modeling for horizontal / vertical federated learning (such as farmer credit scoring models), with local encryption processing of feature data, transmitting only model parameter gradients to ensure feature privacy.

[0112] Structured data adapter: Develop standardized interfaces (JDBC / ODBC / Spark SQL) to adapt to the structured storage of mainstream cloud data warehouses, such as Hadoop, MySQL, GaussDB, TDSQL, AWS Aurora, etc., and support high-speed reading (≥80MB / s) of structured formats such as CSV, Parquet, and ORC. No modification to the existing data warehouse table structure is required, and it is compatible with the existing data storage system of agricultural departments.

[0113] Generate a unique department identifier for each agricultural government department, a unique user identifier for each employee position within each agricultural government department, and a unique data identifier for the structured agricultural data stored in the cloud data warehouse associated with each agricultural government department.

[0114] In some embodiments, the department identifier (OrgID), also known as the unique department identifier, is bound to the functional label of the agricultural department.

[0115] User ID (UserId), also known as a unique user identifier, is associated with the job permissions of employees in the department.

[0116] Data ID, also known as unique data identifier, is in the format TableID_FieldSetID, where TableID is the unique identifier of the structured table and FieldSetID is the SM3 hash value of the set of shared fields (e.g., "Farmer Subsidy Table_Hash (Farmer ID + Subsidy Amount + Issuance Time)").

[0117] In some embodiments, the field-level permission contract defines the permission rule data structure as {Requester OrgID:{TableID: {FieldList:[],OperationList:[],ValidPeriod:[]}}}.

[0118] Example: { "Finance Bureau-OrgID": { "Farmer Subsidy Table-TableID": { "FieldList": ["Farmer ID", "Subsidy Amount", "Disbursement Time"], "OperationList": ["SUM", "COUNT", "GROUP BY"], "ValidPeriod": "2024-01-01 to 2025-01-01" } } } Build a corresponding cloud data warehouse address for each unique data identifier.

[0119] In this embodiment, a distributed network is deployed at the physical layer, a three-in-one identification system of department, user, and data is constructed at the digital identity layer, and a secure address mapping is established between the logical and physical layers. This provides an indispensable infrastructure and governance framework for the secure, orderly, and efficient operation of all subsequent data processing requests, enabling data sharing that ensures data remains within its domain and privacy is protected.

[0120] In some embodiments, the sharing method of structured agricultural data is illustrated using the scenario of cross-departmental agricultural subsidy distribution compliance verification.

[0121] Specifically, the Finance Bureau needs to query the Agriculture and Rural Affairs Bureau's "2024 Q2 Farmer Subsidy Distribution Table" to verify whether the subsidy amount exceeds the budget. Access is only allowed to the "Farmer ID, Subsidy Amount, and Distribution Time" fields. SUM aggregation calculation is performed without disclosing the farmers' personal privacy and complete details.

[0122] like Figure 7 As shown, the permission application and approval process includes: Step 701: Submit permission request.

[0123] Specifically, the Finance Bureau submitted an authorization application through the unified agricultural data privacy computing platform, specifying the target table (farmer subsidy distribution table), authorized fields (farmer ID, subsidy amount, distribution time), operation type (SUM aggregation), and usage period (1 year).

[0124] Step 702: Trigger the consortium blockchain permission contract.

[0125] The permission request includes the OrgID and a list of authorized fields.

[0126] The unified agricultural data privacy computing platform triggered the consortium blockchain permission contract and initiated an approval request to the Agriculture and Rural Affairs Bureau (data provider).

[0127] Step 703: Initiate an approval request.

[0128] The approval request underwent a second confirmation from the data provider.

[0129] Step 704: Approval passed.

[0130] After approval, the permission contract generates a field-level authorization credential (associated with DataID and Finance Bureau OrgID), and the address mapping contract simultaneously decrypts the cloud data warehouse address fragment corresponding to the DataID and returns it to the platform.

[0131] Step 705: Generate authorization certificate.

[0132] This step involves associating the cloud data warehouse address of the address mapping contract.

[0133] Step 706: Return permission activation notification.

[0134] Specifically, the unified agricultural data privacy computing platform sends a notification of permission activation to the Finance Bureau, completing the preliminary preparations.

[0135] Query calculation and result return process: Step 707: Initiate a query on the aggregated amount of subsidies.

[0136] The subsidy amount aggregation query carries authorization credentials and encrypted SQL logic. The SQL is SUM(subsidy amount)WHERE disbursement time=2024Q2.

[0137] Specifically, the Finance Bureau initiates an aggregated query of subsidy amounts through the platform, carrying authorization credentials and SM4-encrypted SQL logic (SELECT SUM(subsidy amount) FROM farmer subsidy distribution table WHERE distribution time='2024Q2').

[0138] Step 708: Identity and Permission Secondary Verification.

[0139] Specifically, the unified agricultural data privacy computing platform submits a secondary verification request for identity and permissions to the consortium blockchain network. The consortium blockchain network verifies the legitimacy of the Finance Bureau's OrgID through the identity contract and verifies the validity of the authorization certificate through the permission contract.

[0140] Step 709: Verification passed, return the decrypted cloud data warehouse address.

[0141] Step 710: Issue the encrypted computing task.

[0142] Specifically, after successful verification, the consortium blockchain network returns the decrypted address of the agricultural and rural affairs bureau's cloud data warehouse, and the platform issues an encrypted computing task (including authorization credentials, encrypted SQL logic, and SM4 decryption key fragments) to the agricultural and rural affairs bureau's privacy computing node.

[0143] Step 711: Verify the authorization certificate.

[0144] Step 712: Confirm the validity of the authorization certificate.

[0145] Step 713: The privacy computing node performs a local secret state query.

[0146] Specifically, the privacy computing node of the Agriculture and Rural Affairs Bureau verifies the authorization certificate with the consortium blockchain network. After successful verification, it calls the structured data adapter to read the authorization field data of the "Farmer Subsidy Distribution Table" in the cloud data warehouse locally. The privacy computing node executes encrypted SQL calculation through the SCQL encrypted query engine to generate encrypted intermediate results (SUM aggregate value ciphertext).

[0147] Step 714: Transmit the encrypted intermediate results.

[0148] Step 715: Privacy computation node solution + result verification.

[0149] Specifically, the encrypted intermediate results are transmitted to the Finance Bureau's privacy computing node via a secure channel. The node decrypts the data using the SM2 private key and combines it with local budget data to complete compliance verification.

[0150] Step 716: Evidence query result hash + operation log.

[0151] Step 717: Write the blockchain ledger.

[0152] Specifically, the privacy computing node of the Finance Bureau uploads the query result hash and operation log to the consortium blockchain network for evidence storage, and the consortium blockchain network writes it into the ledger, forming an immutable traceability record.

[0153] In some embodiments, such as Figure 8 As shown, the method for sharing structured agricultural data adopts a five-layer distributed architecture, providing full-process support from bottom to top for storage, access, core, platform, and application. This adapts to the independent node deployment and collaboration needs of agricultural departments. Storage layer: Local cloud data warehouses for each agricultural department, storing structured agricultural government data (CSV / Parquet / ORC format), with raw data remaining within the domain.

[0154] Access Layer: Structured data adapter, providing standardized interfaces for JDBC / ODBC / Spark SQL to achieve efficient connection between cloud data warehouses and privacy computing nodes.

[0155] Core technology layer: consortium blockchain nodes (consensus, contract execution, ledger storage) + privacy computing nodes (SCQL engine, PSI engine, federated aggregation engine) to achieve on-chain trusted verification and off-chain encrypted computation.

[0156] Platform layer: A unified agricultural data privacy computing platform that provides functions such as agricultural data cataloging, permission application and approval, task scheduling, result management, and audit visualization.

[0157] Application layer: Agricultural government affairs collaborative applications (subsidy compliance verification, farmer credit assessment, production and sales statistical analysis), providing users with business operation access points.

[0158] Security and compliance layer: Covers all levels across the entire domain, providing national cryptographic encryption, field-level access control, hierarchical management of agricultural data, and full-process audit and traceability protection.

[0159] The above embodiments have the following beneficial effects: 1. Data does not leave the domain to protect farmers' privacy: The original structured agricultural data is always stored in the local cloud data warehouse of each department, and only encrypted calculation results are transmitted, which fundamentally avoids the leakage of sensitive information such as farmers' ID numbers and subsidy details, and protects data sovereignty.

[0160] 2. Precise field-level permission control: In response to the "partial field sharing" characteristic of structured data, fine-grained permission control at the "table level + field level" is implemented, which not only meets the needs of cross-departmental collaboration, but also prevents the over-authorization of sensitive fields and adapts to the privacy protection requirements of agricultural data.

[0161] 3. Strong adaptability to structured scenarios: The SCQL engine supports native SQL syntax, the adapter is compatible with mainstream cloud data warehouses, no need to modify the existing data storage architecture, data read speed ≥80MB / s, single query latency ≤5 seconds, aggregation calculation latency ≤8 seconds, meeting the high-frequency query needs of agriculture.

[0162] 4. Deeply aligned with agricultural compliance: Built-in hierarchical rules for agricultural government data and a full-process audit and traceability mechanism.

[0163] 5. Independent and controllable nodes with high efficiency: Each data participant deploys nodes independently, ensuring strong data controllability.

[0164] 6. High scalability: The modular design supports the addition of new data participant nodes, expansion of privacy computing algorithms, and adaptation to new cloud data warehouses, meeting the continuous expansion needs of digital village construction.

[0165] The following describes the structured agricultural data sharing device provided by the present invention. The structured agricultural data sharing device described below and the structured agricultural data sharing method described above can be referred to in correspondence.

[0166] In some embodiments, such as Figure 9 As shown, a structured agricultural data sharing device is provided, comprising the following modules: Output module 901 is used to display the data resource catalog, which includes the target structured agricultural data; The response module 902 is used to respond to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, and to receive the cloud data warehouse address of the target structured agricultural data fed back by the consortium blockchain network. The first sending module 903 is used to send an encrypted computing task to the second blockchain-privacy computing node that provides the target structured agricultural data. The encrypted computing task includes the cloud data warehouse address of the target structured agricultural data, the encrypted structured query instruction in the first data sharing request, and the authorization credential. The second sending module 904 is used to control the second blockchain-privacy computing node to send encrypted computing results to the first blockchain-privacy computing node; The consortium blockchain network consists of multiple interconnected blockchain-privacy computing nodes, including at least a first blockchain-privacy computing node and a second blockchain-privacy computing node. These multiple blockchain-privacy computing nodes correspond one-to-one with multiple agricultural government departments. The encrypted computing result is obtained by the second blockchain-privacy computing node executing an encrypted structured query instruction on the target structured agricultural data read from the cloud data warehouse address based on the target structured agricultural data, provided that the authorization credential is valid.

[0167] Figure 10 An example is a schematic diagram of the physical structure of an electronic device, such as... Figure 10 As shown, the electronic device may include: a processor 1010, a communication interface 1020, a memory 1030, and a communication bus 1040, wherein the processor 1010, the communication interface 1020, and the memory 1030 communicate with each other through the communication bus 1040. The processor 1010 can invoke logical instructions in the memory 1030 to execute a method for sharing structured agricultural data. This method includes: displaying a data resource catalog, which includes the target structured agricultural data; responding to a first data sharing request for the target structured agricultural data sent by a first blockchain-privacy computing node, receiving the cloud data warehouse address of the target structured agricultural data fed back by the consortium blockchain network; sending an encrypted computing task to a second blockchain-privacy computing node providing the target structured agricultural data, the encrypted computing task including the cloud data warehouse address of the target structured agricultural data, an encrypted structured query instruction from the first data sharing request, and an authorization credential; and controlling the second blockchain-privacy computing node to send an encrypted computing result to the first blockchain-privacy computing node. The consortium blockchain network consists of multiple communicating blockchain-privacy computing nodes, including at least the first and second blockchain-privacy computing nodes. These multiple blockchain-privacy computing nodes correspond one-to-one with multiple agricultural government departments. The encrypted computing result is obtained by the second blockchain-privacy computing node executing an encrypted structured query instruction on the target structured agricultural data read from the cloud data warehouse address of the target structured agricultural data, provided the authorization credential is valid.

[0168] Furthermore, the logical instructions in the aforementioned memory 1030 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0169] On the other hand, the present invention also provides a computer program product, which includes a computer program that can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer is able to execute the method for sharing structured agricultural data provided by the above methods. The method includes: displaying a data resource catalog, which includes target structured agricultural data; responding to a first data sharing request for the target structured agricultural data sent by a first blockchain-privacy computing node, receiving the cloud data warehouse address of the target structured agricultural data fed back by the consortium blockchain network; and sending an encrypted computing task to a second blockchain-privacy computing node that provides the target structured agricultural data. The encrypted computing task includes... The system includes the cloud data warehouse address of the target structured agricultural data, the encrypted structured query instruction in the first data sharing request, and the authorization credential; it controls the second blockchain-privacy computing node to send the encrypted computation result to the first blockchain-privacy computing node; wherein, the consortium blockchain network is composed of multiple blockchain-privacy computing nodes that communicate with each other, including at least the first blockchain-privacy computing node and the second blockchain-privacy computing node, and the multiple blockchain-privacy computing nodes correspond one-to-one with multiple agricultural government departments. The encrypted computation result is obtained by the second blockchain-privacy computing node executing the encrypted structured query instruction on the target structured agricultural data read from the cloud data warehouse address of the target structured agricultural data, provided that the authorization credential is valid.

[0170] In another aspect, the present invention also provides a non-transitory computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements a method for sharing structured agricultural data provided by the methods described above. The method includes: displaying a data resource catalog, the data resource catalog including target structured agricultural data; responding to a first data sharing request for the target structured agricultural data sent by a first blockchain-privacy computing node, receiving the cloud data warehouse address of the target structured agricultural data fed back by a consortium blockchain network; and sending an encrypted computing task to a second blockchain-privacy computing node providing the target structured agricultural data, the encrypted computing task including the cloud data warehouse address of the target structured agricultural data. The network consists of an address, an encrypted structured query instruction in the first data sharing request, and an authorization credential; it controls the second blockchain-privacy computing node to send encrypted computation results to the first blockchain-privacy computing node; wherein, the consortium blockchain network is composed of multiple blockchain-privacy computing nodes that communicate with each other, including at least the first blockchain-privacy computing node and the second blockchain-privacy computing node, and the multiple blockchain-privacy computing nodes correspond one-to-one with multiple agricultural government departments. The encrypted computation result is obtained by the second blockchain-privacy computing node executing an encrypted structured query instruction on the target structured agricultural data read from the cloud data warehouse address based on the target structured agricultural data, provided that the authorization credential is valid.

[0171] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0172] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., including several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods of various embodiments or some parts of embodiments.

[0173] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for sharing structured agricultural data, characterized in that, include: Display a data resource catalog, which includes target structured agricultural data; In response to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, the cloud data warehouse address of the target structured agricultural data is received from the consortium blockchain network. Send an encrypted computing task to the second blockchain-privacy computing node that provides the target structured agricultural data. The encrypted computing task includes the cloud data warehouse address of the target structured agricultural data, the encrypted structured query instruction and authorization credential in the first data sharing request. Control the second blockchain-privacy computing node to send encrypted computing results to the first blockchain-privacy computing node; The consortium blockchain network consists of multiple blockchain-privacy computing nodes that communicate with each other, including at least the first blockchain-privacy computing node and the second blockchain-privacy computing node. Each of the multiple blockchain-privacy computing nodes corresponds one-to-one with multiple agricultural government departments. The encrypted computing result is obtained by the second blockchain-privacy computing node executing the encrypted structured query instruction on the target structured agricultural data read from the cloud data warehouse address based on the target structured agricultural data, provided that the authorization credential is valid.

2. The method for sharing structured agricultural data according to claim 1, characterized in that, The first data sharing request further includes a department identifier and a user identifier. The step of responding to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, and receiving the cloud data warehouse address of the target structured agricultural data from the consortium blockchain network, further includes: The department identifier and user identifier are sent to the consortium blockchain network for verification. If the department identifier and user identifier are verified and the authorization credential is valid, the cloud data warehouse address of the target structured agricultural data will be received from the consortium blockchain network.

3. The method for sharing structured agricultural data according to claim 2, characterized in that, The method for sharing structured agricultural data also includes: The second blockchain-privacy computing node is controlled to send the authorization credential to the consortium blockchain network for verification. If the authorization credential is valid, the second blockchain-privacy computing node is controlled to invoke the structured data adapter and read the target structured agricultural data based on the cloud data warehouse address of the target structured agricultural data; and The second blockchain-privacy computing node is controlled to call the encrypted query engine and query the target structured agricultural data based on the encrypted structured query instruction to obtain the encrypted computing result.

4. The method for sharing structured agricultural data according to claim 2, characterized in that, The step of controlling the second blockchain-privacy computing node to send the encrypted computing result to the first blockchain-privacy computing node also includes: Control the first blockchain-privacy computing node to perform compliance verification on the encrypted computing results using local budget data; and If the compliance verification passes, the encrypted calculation result is output.

5. The method for sharing structured agricultural data according to claim 4, characterized in that, The method for sharing structured agricultural data also includes: Obtain process operation logs; The process operation log and the encrypted calculation result are written into the blockchain ledger.

6. The method for sharing structured agricultural data according to any one of claims 1 to 5, characterized in that, Before receiving the cloud data warehouse address of the target structured agricultural data from the consortium blockchain network in response to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, the process further includes: Receive permission request sent by the first blockchain-privacy computing node. The permission request includes an agricultural data table in the data resource directory, a request authorization field in the agricultural data table, and an operation type. The operation type includes the encrypted structured query instruction, and the request authorization field includes the target structured agricultural data. In response to the permission request, an approval request is sent to the second blockchain-privacy computing node; Upon receiving the indication that the second blockchain-privacy computing node has approved the request, the authorization credential is generated based on the request authorization field and the operation type.

7. The method for sharing structured agricultural data according to claim 6, characterized in that, Before receiving the permission request sent by the first blockchain-privacy computing node, the method for sharing structured agricultural data further includes: Deploy a blockchain-privacy computing node for each of the aforementioned agricultural government departments to build the consortium blockchain network; Generate a unique department identifier for each agricultural government department, a unique user identifier for each employee position in each agricultural government department, and a unique data identifier for the structured agricultural data stored in the cloud data warehouse associated with each agricultural government department. Construct a corresponding cloud data warehouse address for each of the aforementioned unique data identifiers.

8. A structured agricultural data sharing device, characterized in that, include: The output module is used to display the data resource catalog, which includes the target structured agricultural data; The response module is used to respond to the first data sharing request for the target structured agricultural data sent by the first blockchain-privacy computing node, and to receive the cloud data warehouse address of the target structured agricultural data fed back by the consortium blockchain network. The first sending module is used to send an encrypted computing task to the second blockchain-privacy computing node that provides the target structured agricultural data. The encrypted computing task includes the cloud data warehouse address of the target structured agricultural data, the encrypted structured query instruction and authorization credential in the first data sharing request. The second sending module is used to control the second blockchain-privacy computing node to send encrypted computing results to the first blockchain-privacy computing node; The consortium blockchain network consists of multiple blockchain-privacy computing nodes that communicate with each other, including at least the first blockchain-privacy computing node and the second blockchain-privacy computing node. Each of the multiple blockchain-privacy computing nodes corresponds one-to-one with multiple agricultural government departments. The encrypted computing result is obtained by the second blockchain-privacy computing node executing the encrypted structured query instruction on the target structured agricultural data read from the cloud data warehouse address based on the target structured agricultural data, provided that the authorization credential is valid.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that, When the processor executes the computer program, it implements the method for sharing structured agricultural data as described in any one of claims 1 to 7.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the method for sharing structured agricultural data as described in any one of claims 1 to 7.

Images