A multi-level content fingerprint-based biological data ownership registration and verification method and system

Abstract

This invention belongs to the field of bioinformatics and data security, and relates to a method and system for registering and verifying ownership of biological data based on multi-level content fingerprints. The method includes: generating multi-level data content fingerprints when biological data is generated or published; constructing ownership metadata containing the data content fingerprints, digitally signing the ownership metadata, and generating an ownership information signature package; sending the ownership information signature package to a distributed trusted evidence storage system to obtain a trusted timestamp and evidence storage transaction hash, and generating a biological data ownership certificate containing the data content fingerprints; and verifying the ownership of biological data online based on the biological data ownership certificate when biological data is transferred or used across domains. This invention enables unified ownership confirmation and integrity verification of the entire biological dataset and its constituent structures, achieving an inseparable binding between ownership information and data entity content, thereby improving the accuracy and efficiency of ownership verification during the cross-domain transfer of biological data.

Description

Technical Field

[0001] This invention relates to the field of bioinformatics and data security, specifically to the technology for ownership registration and online verification in multi-center, cross-wide area network environments for cross-domain transfer scenarios of massive heterogeneous biological data. Background Technology

[0002] With the rapid development of high-throughput sequencing technology, multidimensional biological big data is experiencing explosive growth. These data resources are widely dispersed across different research institutions, sequencing centers, and operational units, exhibiting significant cross-domain distribution characteristics. The existing biological data sharing system lacks an effective ownership registration and verification mechanism, making it difficult for data owners to effectively assert their rights. The risk of data being illegally copied, tampered with, or stolen is increasing, severely restricting the secure circulation and value mining of biological data.

[0003] Traditional biological data management primarily relies on centralized database indexes to record owner information, with ownership information being separated from the data entity content. Biological data (such as raw omics data like GSA) typically exhibits a four-tiered structure: "project-sample-experiment-run." Existing verification techniques usually perform isolated verification at the granularity of individual physical files, lacking a holistic approach to ownership confirmation for the multi-dimensional hierarchical structure of biological data. Therefore, there is an urgent need to develop a method for ownership registration and verification that can integrate multi-level content features and address the multi-level structure of biological data, ensuring the security and reliability of biological big data during cross-domain transfers. Summary of the Invention

[0004] This invention aims to address the technical problems in existing biological data sharing systems, such as the loose coupling between ownership information and data entity content, and the lack of ownership verification methods for complex hierarchical structures. This invention provides a method and system for biological data ownership registration and verification based on multi-level content fingerprints.

[0005] Specifically, during the ownership registration phase, this invention analyzes the unique "project-sample-experiment-run" hierarchical structure of biological data and employs a bottom-up hierarchical hash aggregation mechanism to generate an entity aggregation fingerprint for the dataset. This entity aggregation fingerprint is then fused with the dataset's key metadata, signed with a private key, and stored in a distributed trusted evidence storage system to generate an ownership certificate containing the hash of the evidence storage transaction. During the ownership verification phase, only the accompanying ownership certificate is needed; a dual verification mechanism combining local reconstruction of the aggregation fingerprint and online querying of the evidence storage status allows for real-time verification of the biological data's content integrity, consistency, and the authenticity and validity of its ownership status.

[0006] The technical solution adopted in this invention is as follows: A method for biometric data ownership registration and verification based on multi-level content fingerprints includes the following steps: When biological data is generated or published, cryptographic hashing is performed on the base sequence data in the biological data to obtain multi-level data content fingerprints. Construct ownership metadata that includes data content fingerprints, digital identity identifiers of biological data owners, and authorization types. Use the private key of the biological data owner or publishing institution to digitally sign the ownership metadata and generate an ownership information signature package. The ownership information signature package is sent to the distributed trusted evidence storage system for solidification and storage. The distributed trusted evidence storage system obtains the trusted timestamp and evidence storage transaction hash, and generates a biometric data ownership certificate containing the fingerprint of the data content. When biological data is transferred or used across domains, the ownership of the biological data is verified online based on the biological data ownership certificate.

[0007] Furthermore, considering that biological data has a multi-level organizational structure in the process of data storage and management, the generation process of the data content fingerprint includes a hierarchical fingerprint construction and aggregation generation mechanism based on the hierarchical structure of biological data.

[0008] Furthermore, the hierarchical structure of the biological data includes at least a Project layer, a Sample layer, an Experiment layer, and a Run layer; each layer is pre-assigned a unique Accession Number; the Run layer includes several FASTQ format base sequence data text files. The data content fingerprint is obtained by performing a cryptographic hash operation on the base sequence data text files, and the hash operation includes at least one of the hash algorithms with equivalent security strength: SHA-256, SHA-3, or equivalent. At any level, when the associated lower-level biological data entity is added, deleted, or its content changes, the data content fingerprint of the corresponding level and above changes, thereby achieving hierarchical verification of the integrity and consistency of the biological data.

[0009] Furthermore, the hierarchical fingerprint construction and aggregation generation mechanism based on the biological data hierarchy includes the following steps: Construct a multi-level Merkle tree structure consistent with the semantic hierarchy of biological data, in which the data content fingerprint of each base sequence data text file is used as a leaf node; Obtain the file names of all leaf nodes, sort the corresponding data content fingerprints in ascending order according to the file names, and concatenate the sorted fingerprint values ​​sequentially and perform a hash operation to generate the fingerprint of the Run node. Obtain the unique identifiers of all runtime nodes, sort the corresponding runtime node fingerprints in ascending order according to the lexicographical order of the unique identifiers, and concatenate the sorted fingerprint values ​​sequentially and perform a hash operation to generate experimental layer node fingerprints. Obtain the unique identifiers of all experimental layer nodes, sort the corresponding experimental layer node fingerprints in ascending order according to the lexicographical order of the unique identifiers, concatenate them and perform a hash operation to generate sample layer node fingerprints; Obtain the unique identifier of all sample layer nodes, sort the corresponding sample layer node fingerprints in ascending order according to the lexicographical order of the unique identifiers, concatenate them and perform a hash operation to obtain the root node hash value of the overall fingerprint of the biological dataset. When the content of a biological data entity at any level is changed, added, or deleted, the fingerprint values ​​of the corresponding node and its ancestor nodes in the Merkle tree change, thereby verifying the consistency and integrity of the biological dataset as a whole and its constituent structures.

[0010] Further, the ownership information signature package is generated using the following steps: Define a standardized ownership encapsulation protocol structure; wherein, the ownership encapsulation protocol structure includes: a dataset unique identifier field, a data content fingerprint field, a data owner distributed digital identity field, an authorization type field, and extended fields; wherein, the dataset unique identifier is used to ensure the global uniqueness of the corresponding biological data, and the corresponding biological data content entity can be retrieved from the database based on the unique identifier, and further aggregated to generate the overall content fingerprint; wherein, the authorization type can include various types such as fully public, visible after application, and public after the protection period; The padded ownership encapsulation protocol structure is serialized, and the serialized data is signed using the private key of the biological data owner or publishing organization by employing the Elliptic Curve Digital Signature Algorithm (ECDSA) or the national cryptographic SM2 algorithm. The signature result is attached to the end of the ownership encapsulation protocol structure to form a tamper-proof ownership information signature package.

[0011] Further, the following steps are used to generate the ownership certificate for the biological data: A distributed trusted evidence storage system affixes a trusted timestamp to the ownership information signature package and writes the digest value of the ownership information signature package into an immutable distributed ledger or blockchain node; The distributed trusted evidence storage system obtains the unique evidence storage transaction hash generated on the chain, which is used to point to the ownership evidence storage record that has been solidified on the chain. This enables a trusted binding of the dataset ownership information, the dataset's unique identifier, and the data content fingerprint. The hash is then filled into a pre-set document template to generate a PDF biological data ownership certificate.

[0012] Furthermore, the online verification of ownership of biological data based on the biological data ownership certificate includes: Based on the transaction hash of the biological data ownership certificate, the evidence storage record is queried in the distributed trusted evidence storage system to ensure the authenticity and validity of the biological data ownership certificate itself; Verify the digital signature in the biological data ownership certificate to confirm the legality of the certificate and the authenticity of the ownership entity. The fingerprint of the data content calculated in real time is compared with the fingerprint of the original data content in the biological data ownership certificate. If they match, the content integrity verification is passed, thus completing the online verification of the ownership of the biological data.

[0013] Furthermore, the online verification of the ownership of biological data based on the biological data ownership certificate includes dual verification of the authenticity of ownership and the integrity of the content, specifically including the following steps: The biological data ownership certificate corresponding to the biological data to be verified is parsed, and the unique identifier of the dataset, the evidence storage transaction hash, and the fingerprint of the original data content are extracted. Based on the evidence storage transaction hash, the corresponding evidence storage record is queried from the distributed trusted evidence storage system to verify whether the ownership certificate is real and has not been revoked. Verify the digital signature in the ownership certificate to confirm the legality of the biological data ownership certificate and the authenticity of the ownership subject; For the biological data entity to be verified, the data content fingerprint is recalculated according to the hierarchical fingerprint construction and aggregation generation mechanism consistent with the ownership registration stage. The calculated data content fingerprint is then compared with the data content fingerprint recorded in the biological data ownership certificate. If the comparison results are consistent, it is determined that the biological data has not been tampered with through renaming or format conversion, and the verification is successful; otherwise, the verification is deemed to have failed.

[0014] A biometric data ownership registration and verification system based on multi-level content fingerprinting, comprising: The data content fingerprint generation module is used to perform cryptographic hashing operations on the base sequence data in biological data during the generation or publication of biological data to obtain multi-level data content fingerprints; The ownership information signature package generation module is used to construct ownership metadata that includes data content fingerprints, digital identity identifiers of biological data owners, and authorization types. It uses the private key of the biological data owner or publishing organization to digitally sign the ownership metadata and generate an ownership information signature package. The ownership certificate generation module is used to send the ownership information signature package to the distributed trusted evidence storage system for solidification and storage. The distributed trusted evidence storage system obtains the trusted timestamp and evidence storage transaction hash and generates a biometric data ownership certificate containing the fingerprint of the data content. The ownership verification module is used to verify the ownership of biological data online based on the biological data ownership certificate when biological data is transferred or used across domains.

[0015] Compared with the prior art, the present invention has at least the following beneficial effects.

[0016] This invention addresses the multi-level organizational structure of biological data, including projects, samples, experiments, and operations. It constructs a fingerprint aggregation mechanism based on a hierarchical Merkle tree to achieve unified ownership confirmation and integrity verification of the entire biological dataset and its constituent structures, avoiding the fragmentation problem caused by confirming ownership of only a single file. Furthermore, based on the dataset's unique identifier, the ownership information is encapsulated into an ownership certificate and written into a distributed trusted evidence storage system, achieving an inseparable binding between ownership information and data entity content. This improves the accuracy and efficiency of ownership verification during the cross-domain transfer of biological data. Attached Figure Description

[0017] Figure 1 This is a flowchart illustrating the steps of a biometric data ownership registration and verification method based on multi-level content fingerprints.

[0018] Figure 2 This is a schematic diagram illustrating an application scenario for cross-domain transfer of biological data ownership registration and verification.

[0019] Figure 3 This is a schematic diagram illustrating the hierarchical fingerprint aggregation principle based on the biological data hierarchy.

[0020] Figure 4 This is a flowchart illustrating the process of registering ownership of biological data.

[0021] Figure 5 This is a schematic diagram illustrating a structural example of a biometric data ownership certificate.

[0022] Figure 6 This is a flowchart illustrating the method for verifying ownership of biological data.

[0023] Figure 7 This is a schematic diagram of the module composition of a biometric data ownership registration and verification system based on multi-level content fingerprints. Detailed Implementation

[0024] The present invention will now be described in further detail with reference to the accompanying drawings. The examples given are only for explaining the present invention and are not intended to limit the scope of the present invention.

[0025] This invention provides a method for biometric data ownership registration and verification based on multi-level content fingerprints, such as... Figure 1 As shown, it includes the following steps: When biological data is generated or published, cryptographic hashing is performed on the base sequence data in the biological data to obtain multi-level data content fingerprints. Construct ownership metadata that includes data content fingerprints, digital identity identifiers of biological data owners, and authorization types. Use the private key of the biological data owner or publishing institution to digitally sign the ownership metadata and generate an ownership information signature package. The ownership information signature package is sent to the distributed trusted evidence storage system for solidification and storage. The distributed trusted evidence storage system obtains the trusted timestamp and evidence storage transaction hash, and generates a biometric data ownership certificate containing the fingerprint of the data content. When biological data is transferred or used across domains, the ownership of the biological data is verified online based on the biological data ownership certificate.

[0026] The method described above is applicable to application scenarios of cross-domain transfer of biological data ownership registration and verification, such as... Figure 2 As shown.

[0027] In one embodiment, the data content fingerprint generation process includes a hierarchical fingerprint construction and aggregation generation mechanism based on a biological data hierarchy. The biological data hierarchy includes a project layer, a sample layer, an experimental layer, and an operational layer, each layer assigned a unique identifier. The operational layer includes several FASTQ format base sequence data text files.

[0028] In one embodiment, the hierarchical fingerprint construction and aggregation generation mechanism based on the biological data hierarchy includes: Construct a multi-level Merkle tree structure consistent with the semantic hierarchy of biological data. In the Merkle tree structure, the data content fingerprint of each base sequence data text file is used as a leaf node. Obtain the file names of all leaf nodes, sort the corresponding data content fingerprints in ascending order according to the file names, and concatenate the sorted fingerprint values ​​sequentially before performing a hash operation to generate the runtime node fingerprints. Obtain the unique identifiers of all runtime nodes, sort the corresponding runtime node fingerprints in ascending order according to the lexicographical order of the unique identifiers, and concatenate the sorted fingerprint values ​​sequentially and perform a hash operation to generate the experimental layer node fingerprints. Obtain the unique identifiers of all experimental layer nodes, sort the corresponding experimental layer node fingerprints in ascending order according to the lexicographical order of the unique identifiers, concatenate them and perform a hash operation to generate sample layer node fingerprints; Obtain the unique identifiers of all sample layer nodes, sort the corresponding sample layer node fingerprints in ascending order according to the lexicographical order of the unique identifiers, concatenate them and perform a hash operation to obtain the root node hash value of the overall fingerprint of the biological dataset; When the content of a biological data entity at any level is changed, added, or deleted, the fingerprint values ​​of the corresponding node and its ancestor nodes in the Merkle tree change, thereby verifying the consistency and integrity of the biological dataset as a whole and its constituent structures.

[0029] In one embodiment, the ownership information signature package is generated using the following steps: Define a standardized ownership encapsulation protocol structure, which includes a dataset unique identifier field, a data content fingerprint field, a data owner distributed digital identity field, an authorization type field, and extended fields; The padded ownership encapsulation protocol structure is serialized to obtain serialized data. The serialized data is then signed using the private key of the biometric data owner or publishing organization using either the elliptic curve digital signature algorithm or the national cryptographic SM2 algorithm. The signature result is attached to the end of the ownership encapsulation protocol structure to form a tamper-proof ownership information signature package.

[0030] In one embodiment, the following steps are used to generate the biometric data ownership certificate: The distributed trusted evidence storage system adds a trusted timestamp to the ownership information signature package and writes the digest value of the ownership information signature package into an immutable distributed ledger or blockchain node; The distributed trusted evidence storage system obtains the unique evidence storage transaction hash generated on the chain, realizes the trusted binding of dataset ownership information with dataset unique identifier and data content fingerprint, fills it into a pre-set document template, and generates a biological data ownership certificate.

[0031] In one embodiment, the online verification of ownership of biological data based on a biological data ownership certificate includes: Based on the transaction hash of the biological data ownership certificate, the evidence storage record is queried in the distributed trusted evidence storage system to ensure the authenticity and validity of the biological data ownership certificate itself; Verify the digital signature in the biological data ownership certificate to confirm the legality of the certificate and the authenticity of the ownership entity. The fingerprint of the data content calculated in real time is compared with the fingerprint of the original data content in the biological data ownership certificate. If they match, the content integrity verification is passed, thus completing the online verification of the ownership of the biological data.

[0032] In one embodiment, a method for registering ownership of biological data is provided. This embodiment details the ownership registration process for biological data (taking raw omics data GSA as an example) upon publication or submission. The method flow is as follows: Figure 4 As shown, it includes the following steps: Step 1: GSA Metadata Acquisition and Hierarchical Structure Parsing. The system provides an interface for biological data ownership registration. Upon receiving an ownership registration request, it first reads the metadata file of the GSA dataset (such as Excel or JSON) and parses out a standard four-layer logical structure: Project layer, i.e. Figure 3 The dataset consists of: Dataset (GSA) layer; Sample layer; Experiment layer; and Run layer.

[0033] Step 2: Calculate the fingerprints of the underlying files and aggregate them layer by layer to generate entity fingerprints for the GSA dataset. For example... Figure 3 As shown, the system iterates through all parsed Run entity files (e.g., .fastq files). Using cryptographic hash algorithms (MD5 / SHA-256), it calculates the content hash value of each entity file, which serves as the fingerprint of the leaf nodes in the Merkle tree. Simultaneously, it performs crucial sorting and aggregation operations: 1) Runtime Layer Aggregation: For any runtime layer node, obtain the names of all its subordinate entity files and sort them in ascending lexicographical order. Based on the sorting result, concatenate the corresponding entity file fingerprints sequentially, perform a hash operation on the concatenated string, and generate the runtime layer node fingerprint.

[0034] 2) Experimental Layer Aggregation: For any experimental layer node, obtain the AccessionNumber (e.g., CRRxxxx) of all its subordinate runtime layer entities and sort them in ascending lexicographical order. Based on the sorting result, concatenate the corresponding runtime layer fingerprints sequentially, perform a hash operation on the concatenated string, and generate the experimental layer node fingerprint.

[0035] 3) BioSample Aggregation: For any bioSample node, obtain the Accession Numbers of all its subordinate experimental layer nodes, sorted lexicographically. Concatenate the corresponding experimental layer node fingerprints sequentially and hash them to generate the bioSample node fingerprint.

[0036] 4) GSA Dataset Layer Aggregation: For each top-level dataset node, obtain the Accession Numbers of all its subordinate sample layer nodes, sorted lexicographically. Concatenate the corresponding sample layer fingerprints sequentially and perform the final hash operation to generate the root fingerprint of the GSA dataset.

[0037] Step 3: Binding Data Entity Fingerprints to Metadata. Extract key metadata from the GSA dataset (such as dataset name, publisher, species name, source database, etc.), register with a third-party data identification service platform, and obtain a unique identifier for the GSA dataset. Based on the identifier, bind the aggregate fingerprint of data entities to the dataset metadata to generate GSA dataset ownership metadata.

[0038] Step 4: Data Signing and Trusted Evidence Storage. The data owner uses their private key to encrypt and sign the global fingerprint generated in Step 3, producing a tamper-proof digital signature string. The signed data is sent to the National Time Service Center or a trusted timestamp service provider to obtain an accurate data publication timestamp. The "ownership metadata + digital signature + timestamp" are packaged into a GSA dataset ownership information signature package and sent to a distributed trusted evidence storage system (such as...). Figure 2 (In the blockchain), store it on the chain and retrieve the unique evidence transaction hash returned.

[0039] Step 5: Generate and associate data ownership certificates. For example... Figure 5 As shown, the system generates a standardized biological data ownership certificate (electronic PDF file) based on the above information. The certificate explicitly records basic metadata such as dataset name, publisher, unique identifier, dataset version, and publication time; data fingerprint information such as GSA dataset structure, hash algorithm, and data content fingerprint; trusted evidence storage anchor information such as evidence storage platform, evidence storage transaction hash, and timestamp; and an invisible digital signature generated based on the publisher's or issuing organization's private key.

[0040] In one embodiment, a method for verifying ownership of biological data is provided. This embodiment combines... Figure 6 This document outlines the process for verifying data ownership and integrity after acquiring a GSA dataset via a cross-domain internet connection. The method includes the following steps: Step 1: Obtain Data and Certificates. The data user (user node) downloads or mirrors the biological dataset from the source data center via the Internet, and simultaneously obtains the corresponding electronic biological data ownership certificate.

[0041] Step 2: Parse certificate information. Parse the certificate file and extract the core verification parameters, including: dataset metadata and unique identifier, dataset owner and issuing organization, and global content fingerprint. Transaction hash for evidence storage Digital signatures. Additionally, obtain the publisher's public key from the dataset publisher. .

[0042] Step 3: Perform data ownership and data integrity verification. Perform the following verification operations: 1) Verify authenticity: Submit the transaction hash to query and confirm whether the transaction record exists on the chain and whether the certificate content is consistent with the record content on the chain; ensure that the on-chain evidence record is valid.

[0043] 2) Signature verification: Use the publisher's public key to decrypt the digital signature and verify whether the signature was generated by the legitimate private key holder; ensure that the data ownership certificate itself has not been tampered with during cross-domain transfer.

[0044] 3) Verify integrity: The system executes the same algorithm logic as step 2 in the previous embodiment on the downloaded GSA dataset locally: a) Calculate the hash value of each local entity file; b) Generate fingerprints at each level (project-sample-experiment-run) by sorting and aggregating them according to the unique identifier Accession Number; finally, calculate the local real-time global fingerprint of the GSA dataset. ; c) With the certificate If the two are compared and found to be consistent, it proves that the data entity is complete and that no file has been lost or its content has been tampered with.

[0045] Step 4: Output verification conclusion. Only when the authenticity, signature, and integrity of the certificate in Step 3 are verified successfully will the system output the conclusion "Verification passed," confirming that the ownership of the biological data belongs to the issuer recorded in the certificate.

[0046] Another embodiment of the present invention provides a biometric data ownership registration and verification system based on multi-level content fingerprints, such as... Figure 7 As shown, it includes: The data content fingerprint generation module is used to perform cryptographic hashing operations on the base sequence data in biological data during the generation or publication of biological data to obtain multi-level data content fingerprints; The ownership information signature package generation module is used to construct ownership metadata that includes data content fingerprints, digital identity identifiers of biological data owners, and authorization types. It uses the private key of the biological data owner or publishing organization to digitally sign the ownership metadata and generate an ownership information signature package. The ownership certificate generation module is used to send the ownership information signature package to the distributed trusted evidence storage system for solidification and storage. The distributed trusted evidence storage system obtains the trusted timestamp and evidence storage transaction hash and generates a biometric data ownership certificate containing the fingerprint of the data content. The ownership verification module is used to verify the ownership of biological data online based on the biological data ownership certificate when biological data is transferred or used across domains.

[0047] The above division of modules is merely illustrative. In practical applications, the functions described above can be assigned to different functional modules as needed to complete all or part of the functions described in the aforementioned method. The specific working process of each module can be referred to the corresponding process in the aforementioned method embodiments, and will not be repeated here. Each of the above modules can be implemented entirely or partially through software, hardware, or a combination thereof.

[0048] Another embodiment of the present invention provides a computer device (computer, server, smartphone, etc.) including a memory and a processor, the memory storing a computer program configured to be executed by the processor, the computer program including instructions for performing steps of the method of the present invention.

[0049] Another embodiment of the present invention provides a computer-readable storage medium (such as ROM / RAM, disk, optical disk) that stores a computer program, which, when executed by a computer, implements the steps of the method of the present invention.

[0050] Another embodiment of the present invention provides a computer program product, the computer program product including a computer program, which, when executed by a computer, implements the steps of the method of the present invention.

[0051] Although specific embodiments of the invention have been disclosed for illustrative purposes to aid in understanding and implementing the invention, those skilled in the art will understand that various substitutions, variations, and modifications are possible without departing from the spirit and scope of the invention and the appended claims. Therefore, the invention should not be limited to the content disclosed in the preferred embodiments, and the scope of protection claimed by the invention is defined by the claims.

Claims

1. A method for registering and verifying ownership of biometric data based on multi-level content fingerprints, characterized in that, Includes the following steps: When biological data is generated or published, cryptographic hashing is performed on the base sequence data in the biological data to obtain multi-level data content fingerprints. Construct ownership metadata that includes data content fingerprints, digital identity identifiers of biological data owners, and authorization types. Use the private key of the biological data owner or publishing institution to digitally sign the ownership metadata and generate an ownership information signature package. The ownership information signature package is sent to the distributed trusted evidence storage system for solidification and storage. The distributed trusted evidence storage system obtains the trusted timestamp and evidence storage transaction hash, and generates a biometric data ownership certificate containing the fingerprint of the data content. When biological data is transferred or used across domains, the ownership of the biological data is verified online based on the biological data ownership certificate.

2. The method according to claim 1, characterized in that, The generation process of the data content fingerprint includes a hierarchical fingerprint construction and aggregation generation mechanism based on the biological data hierarchy.

3. The method according to claim 2, characterized in that, The biological data hierarchy includes a project layer, a sample layer, an experimental layer, and an operational layer. Each layer is assigned a unique identifier, and the operational layer includes several FASTQ format base sequence data text files.

4. The method according to claim 3, characterized in that, The hierarchical fingerprint construction and aggregation generation mechanism based on the biological data hierarchy includes: Construct a multi-level Merkle tree structure consistent with the semantic hierarchy of biological data. In the Merkle tree structure, the data content fingerprint of each base sequence data text file is used as a leaf node. Obtain the file names of all leaf nodes, sort the corresponding data content fingerprints in ascending order according to the file names, and concatenate the sorted fingerprint values ​​sequentially before performing a hash operation to generate the runtime node fingerprints. Obtain the unique identifiers of all runtime nodes, sort the corresponding runtime node fingerprints in ascending order according to the lexicographical order of the unique identifiers, and then concatenate the sorted fingerprint values ​​and perform a hash operation to generate the experimental layer node fingerprints. Obtain the unique identifiers of all experimental layer nodes, sort the corresponding experimental layer node fingerprints in ascending order according to the lexicographical order of the unique identifiers, concatenate them and perform a hash operation to generate sample layer node fingerprints; Obtain the unique identifiers of all sample layer nodes, sort the corresponding sample layer node fingerprints in ascending order according to the lexicographical order of the unique identifiers, concatenate them and perform a hash operation to obtain the root node hash value of the overall fingerprint of the biological dataset; When the content of a biological data entity at any level is changed, added, or deleted, the fingerprint values ​​of the corresponding node and its ancestor nodes in the Merkle tree change, thereby verifying the consistency and integrity of the biological dataset as a whole and its constituent structures.

5. The method according to claim 1, characterized in that, The ownership information signature package is generated using the following steps: Define a standardized ownership encapsulation protocol structure, which includes a dataset unique identifier field, a data content fingerprint field, a data owner distributed digital identity field, an authorization type field, and extended fields; The padded ownership encapsulation protocol structure is serialized to obtain serialized data. The serialized data is then signed using the private key of the biometric data owner or publishing organization using either the elliptic curve digital signature algorithm or the national cryptographic SM2 algorithm. The signature result is attached to the end of the ownership encapsulation protocol structure to form a tamper-proof ownership information signature package.

6. The method according to claim 1, characterized in that, The following steps are used to generate the ownership certificate for the biological data: The distributed trusted evidence storage system adds a trusted timestamp to the ownership information signature package and writes the digest value of the ownership information signature package into an immutable distributed ledger or blockchain node; The distributed trusted evidence storage system obtains the unique evidence storage transaction hash generated on the chain, realizes the trusted binding of dataset ownership information with dataset unique identifier and data content fingerprint, fills it into a pre-set document template, and generates a biological data ownership certificate.

7. The method according to claim 1, characterized in that, The online verification of ownership of biological data based on biological data ownership certificates includes: Based on the transaction hash of the biological data ownership certificate, the evidence storage record is queried in the distributed trusted evidence storage system to ensure the authenticity and validity of the biological data ownership certificate itself; Verify the digital signature in the biological data ownership certificate to confirm the legality of the certificate and the authenticity of the ownership entity. The fingerprint of the data content calculated in real time is compared with the fingerprint of the original data content in the biological data ownership certificate. If they match, the content integrity verification is passed, thus completing the online verification of the ownership of the biological data.

8. A biometric data ownership registration and verification system based on multi-level content fingerprints, characterized in that, include: The data content fingerprint generation module is used to perform cryptographic hashing operations on the base sequence data in biological data during the generation or publication of biological data to obtain multi-level data content fingerprints; The ownership information signature package generation module is used to construct ownership metadata that includes data content fingerprints, digital identity identifiers of biological data owners, and authorization types. It uses the private key of the biological data owner or publishing organization to digitally sign the ownership metadata and generate an ownership information signature package. The ownership certificate generation module is used to send the ownership information signature package to the distributed trusted evidence storage system for solidification and storage. The distributed trusted evidence storage system obtains the trusted timestamp and evidence storage transaction hash and generates a biometric data ownership certificate containing the fingerprint of the data content. The ownership verification module is used to verify the ownership of biological data online based on the biological data ownership certificate when biological data is transferred or used across domains.

9. A computer device, characterized in that, It includes a memory and a processor, the memory storing a computer program configured to be executed by the processor, the computer program including instructions for performing the method of any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program, which, when executed by a computer, implements the method according to any one of claims 1 to 7.

Images