A multi-view recording data ownership and access right confirmation management method and system

Abstract

The present application belongs to the technical field of data ownership and access right confirmation control, in particular to a multi-view recording data ownership and access right confirmation control method and system, which allocates an unforgeable unique ID for each collection view, binds the collection subject identity and collection space-time information; binds the ownership subject through biological feature verification to generate an ownership block chain for storage; performs hierarchical authorization according to a preset subject level and adopts the principle of minimum authority by default; controls the access terminal to only obtain execution instructions, limits the read-write, storage and forwarding authority of the terminal to the original data, and locally encrypts the original data for storage; records the data access behavior in the whole process, performs blocking and leaves traces on the irregular access; sets a data export firewall according to the data ownership location, and automatically blocks the overseas forced call behavior.

Description

Technical Field

[0001] This invention belongs to the field of data ownership and access control technology, and particularly relates to a method and system for multi-perspective recording of data ownership and access control. Background Technology

[0002] Currently, collaborative data collection involving multiple devices, users, and scenarios is widespread. However, the perspective data generated by various collection terminals lacks a unified and unique identifier and subject binding mechanism. Data ownership is vaguely defined, and traceability is difficult. Traditional methods of confirming ownership are easily tampered with, failing to create immutable ownership certificates and making it difficult to clarify data ownership and responsible parties. Existing data access control mechanisms generally suffer from loose hierarchical structures and lax authorization. Terminals' ability to read, write, and store raw data easily leads to data leaks. They lack protection against coercive operations, geographic compliance fencing, and offline ownership confirmation capabilities. Third-party authorization and ownership inheritance scenarios lack strict verification processes, failing to guarantee user data sovereignty and failing to meet the practical needs of cross-border data compliance and digital personality inheritance. Summary of the Invention

[0003] In view of the aforementioned problems, and in conjunction with the first aspect of the present invention, embodiments of the present invention provide a method for determining and controlling ownership and access permissions of multi-view recorded data, the method comprising: Each data collection perspective is assigned a unique, tamper-proof ID, which is then linked to the identity of the data collection entity and the spatiotemporal information of the data collection. By verifying the ownership entity through biometrics, a blockchain-based ownership certificate is generated. Authorization is granted hierarchically according to preset subject levels, using the principle of least privilege. The control access terminal only obtains execution instructions, restricts the terminal's read, write, store and forward permissions for raw data, and the raw data is stored locally in encrypted form; Record data access behavior throughout the entire process, and block and record any unauthorized access. Establish a data export firewall based on the laws of the data's home country to automatically block forced data retrieval from overseas.

[0004] Preferably, the biometric confirmation of ownership specifically involves: verifying the identity of the ownership subject through dual biometric features, including DNA and at least one combination of fingerprints and retina, and storing the ownership relationship on the blockchain to form an immutable blockchain ownership certificate.

[0005] Preferably, the preset subject hierarchy of the hierarchical permission chain is as follows: self, family members, heirs, and third parties; third-party authorization requires three levels of confirmation and DNA biometric verification to be completed.

[0006] Preferably, in the terminal isolation and control, the execution terminal only receives scenario execution instructions and has no original data reading permission. The collected data is directly transmitted to the local security hardware, and the terminal clears the data cache in real time.

[0007] Preferably, the access behavior auditing and blocking also includes: when a user performs sensitive operations such as data deletion or authorization, initiating a three-level confirmation and a preset cooling-off period; when a coercive operation is detected, immediately freezing all data permissions, which can only be unfrozen by biometric verification of the ownership entity.

[0008] Preferably, it also includes temporary third-party authorization control: when a third party requests access, after DNA verification by the ownership entity, three-level confirmation and a cooling-off period, a temporary access token with time limit and scope of permissions is generated. The permission is automatically revoked upon expiration, and the third party can only view the anonymized authorized content.

[0009] Preferably, it also includes multi-user perspective ownership isolation: assign independent perspective IDs to different users in the family scenario, store each user's perspective data in an independent warehouse, and require authorization from all owners to access public perspective data.

[0010] Preferably, it also includes offline status rights confirmation and control: when there is no network, the local offline rights confirmation engine is activated, biometric and permission verification is performed locally, offline operation records are cached locally, and synchronized to the blockchain for evidence storage after connecting to the network.

[0011] Preferably, it also includes digital personality ownership inheritance management: preset heir information and retain DNA feature templates of the ownership subject and heirs. When inheritance is triggered, the heirs' DNA is verified and confirmed at three levels, and the ownership tags of more perspectives are changed in batches and the blockchain evidence is updated.

[0012] Furthermore, embodiments of the present invention also provide a multi-view recorded data ownership and access permission confirmation and control system, characterized in that it includes: A processor; a machine-readable storage medium for storing machine-executable instructions of the processor; wherein the processor is configured to execute the aforementioned multi-view recording data ownership and access control method by executing the machine-executable instructions.

[0013] In another aspect, embodiments of the present invention also provide a computer program product, the computer program product including machine-executable instructions, the machine-executable instructions being stored in a computer-readable storage medium, the processor of a computer device reading the machine-executable instructions from the computer-readable storage medium, the processor executing the machine-executable instructions, causing the computer device to execute the above-described method for confirming and controlling the ownership and access rights of multi-view recorded data.

[0014] Based on the above, by using multi-perspective unique identifier binding and blockchain notarization, precise and tamper-proof data ownership is achieved. Hierarchical and fine-grained permission control allows for flexible configuration, revocation, and inheritance of authorizations. Terminal isolation mechanisms block the risk of original data leakage at the source, comprehensively ensuring the security of data storage, access, and transfer. This invention relies on multiple biometric verifications, three-level confirmation, and a cooling-off period design to effectively prevent accidental operation and coercive manipulation. Combined with geographic compliance fencing and offline rights confirmation capabilities, it achieves cross-border compliant data management and stable operation across all scenarios, thoroughly protecting user data sovereignty and perfectly adapting to the management needs of digital personality inheritance and multi-terminal collaborative data collection. Attached Figure Description

[0015] Figure 1 This is a schematic diagram of the execution flow of the multi-view recording data ownership and access permission confirmation and control method provided in the embodiments of the present invention.

[0016] Figure 2 This is a schematic diagram of exemplary hardware and software components of the multi-view recording data ownership and access permission confirmation and control system provided in the embodiments of the present invention. Detailed Implementation

[0017] The present invention will now be described in detail with reference to the accompanying drawings. Figure 1 This is a flowchart illustrating a method for determining and controlling ownership and access permissions of multi-view recorded data according to an embodiment of the present invention. The following is a detailed description of this method.

[0018] Each data collection perspective is assigned a unique, tamper-proof ID, which is then linked to the identity of the data collection entity and the spatiotemporal information of the data collection. By verifying the ownership entity through biometrics, a blockchain-based ownership certificate is generated. Authorization is granted hierarchically according to preset subject levels, using the principle of least privilege. The control access terminal only obtains execution instructions, restricts the terminal's read, write, store and forward permissions for raw data, and the raw data is stored locally in encrypted form; Record data access behavior throughout the entire process, and block and record any unauthorized access. Establish a data export firewall based on the laws of the data's home country to automatically block forced data retrieval from overseas.

[0019] In this embodiment, the biometric confirmation of ownership specifically involves: verifying the identity of the ownership subject through dual biometric features, including DNA and at least one combination of fingerprints and retina, and storing the ownership relationship on the blockchain to form an immutable blockchain ownership certificate.

[0020] In this embodiment, the preset subject hierarchy of the hierarchical permission chain is as follows: self, family members, heirs, and third parties; third-party authorization requires three levels of confirmation and DNA biometric verification to be completed.

[0021] In this embodiment, during the terminal isolation and control, the execution terminal only receives scenario execution instructions and has no permission to read original data. The collected data is directly transmitted to the local security hardware, and the terminal clears the data cache in real time.

[0022] In this embodiment, the access behavior auditing and blocking also includes: when a user performs sensitive operations such as data deletion or authorization, a three-level confirmation and a preset cooling-off period are initiated; when a coercive operation is detected, all data permissions are immediately frozen, and the freeze can only be lifted by biometric verification of the ownership entity.

[0023] In this embodiment, temporary access control for third parties is also included: when a third party requests access, after DNA verification by the ownership entity, three-level confirmation and a cooling-off period, a temporary access token with time limit and scope of permissions is generated. The permissions are automatically revoked upon expiration, and the third party can only view the anonymized authorized content.

[0024] In this embodiment, multi-user perspective ownership isolation is also included: independent perspective IDs are assigned to different users in the home scenario, and the perspective data of each user is stored in separate warehouses. Public perspective data can only be accessed with the joint authorization of all owners.

[0025] In this embodiment, offline status rights confirmation and control is also included: when there is no network, the local offline rights confirmation engine is enabled, biometric and permission verification is performed locally, offline operation records are cached locally, and synchronized to the blockchain for evidence storage after connecting to the network.

[0026] In this embodiment, digital personality ownership inheritance management is also included: preset heir information and retain DNA feature templates of the ownership subject and the heir. When inheritance is triggered, the heir's DNA is verified and three-level confirmation is performed, and the ownership tags of more perspective data are changed in batches and the blockchain evidence is updated.

[0027] Based on the same inventive concept, please refer to Figure 2 This paper shows a schematic block diagram of a multi-view record data ownership and access control system 100 provided in this application embodiment for performing the above-described multi-view record data ownership and access control method. The multi-view record data ownership and access control system 100 may include a communication unit 110, a machine-readable storage medium 120, and a processor 130.

[0028] In this embodiment, both the machine-readable storage medium 120 and the processor 130 are located within the multi-view recording data ownership and access control system 100 and are separately configured. However, it should be understood that the machine-readable storage medium 120 may also be independent of the multi-view recording data ownership and access control system 100 and may be accessed by the processor 130 via a bus interface. Alternatively, the machine-readable storage medium 120 may be integrated into the processor 130 and may communicate with external systems via the communication unit 110.

[0029] The processor 130 is the control center of the multi-view recording data ownership and access control system 100. It connects to various parts of the system via various interfaces and lines. By running or executing software programs and / or modules stored in the machine-readable storage medium 120, and by calling data stored in the machine-readable storage medium 120, it performs various functions and processes data within the multi-view recording data ownership and access control system 100, thereby providing overall monitoring of the system. Optionally, the processor 130 may include one or more processing cores; for example, the processor 130 may integrate an application processor and a modem processor, wherein the application processor mainly handles the operating system, user interface, and applications, while the modem processor mainly handles wireless communication. It is understood that the modem processor may also not be integrated into the processor. The machine-readable storage medium 120 is used to store machine-executable instructions for executing the scheme of this application, and the processor 130 is used to execute the machine-executable instructions stored in the machine-readable storage medium 120, so as to realize the multi-view recording data ownership and access control method provided in the aforementioned method embodiment.

[0030] It should be noted that, in order to simplify the description of the present invention and thus help to understand one or more embodiments of the invention, multiple features may sometimes be grouped into one embodiment, drawing or description thereof in the foregoing description of the embodiments of the present invention.

[0031] The embodiments of this application have been described above with reference to the accompanying drawings. Unless otherwise specified, the embodiments and features in the embodiments of this application can be combined with each other. This application is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of this application without departing from the spirit and scope of the claims, and all of these forms are within the protection scope of this application.

Claims

1. A method and system for confirming and controlling the ownership and access rights of multi-view recorded data, characterized in that: include: Each data collection perspective is assigned a unique, tamper-proof ID, which is then linked to the identity of the data collection entity and the spatiotemporal information of the data collection. By verifying the ownership entity through biometrics, a blockchain-based ownership certificate is generated. Authorization is granted hierarchically according to preset subject levels, using the principle of least privilege. The control access terminal only obtains execution instructions, restricts the terminal's read, write, store and forward permissions for raw data, and the raw data is stored locally in encrypted form; Record data access behavior throughout the entire process, and block and record any unauthorized access. Establish a data export firewall based on the laws of the data's home country to automatically block forced data retrieval from overseas.

2. The method according to claim 1, characterized in that, The specific method of biometric ownership confirmation is as follows: by verifying the identity of the ownership subject through dual biometric features, including DNA and at least one combination of fingerprints and retina, the ownership relationship is stored on the blockchain to form an immutable blockchain ownership certificate.

3. The method according to claim 1, characterized in that, The preset subject hierarchy of the hierarchical permission chain is as follows: self, family members, heirs, and third parties; third-party authorization requires three levels of confirmation and DNA biometric verification to be completed.

4. The method according to claim 1, characterized in that, In the aforementioned terminal isolation and control, execution-type terminals only receive scenario execution instructions and have no permission to read original data. The collected data is directly transmitted to the local security hardware, and the terminal clears the data cache in real time.

5. The method according to claim 1, characterized in that, The access behavior auditing and blocking also includes: when a user performs sensitive operations such as data deletion or authorization, a three-level confirmation and a preset cooling-off period are initiated; when coercive operations are detected, all data permissions are immediately frozen, and the freeze can only be lifted by biometric verification of the ownership entity.

6. The method according to claim 1, characterized in that, It also includes temporary access control for third parties: when a third party requests access, after DNA verification by the ownership entity, three-level confirmation and a cooling-off period, a temporary access token with time limit and scope of permissions is generated. The permissions are automatically revoked upon expiration, and the third party can only view the anonymized authorized content.

7. The method according to claim 1, characterized in that, It also includes multi-user perspective ownership isolation: assigning independent perspective IDs to different users in a family scenario, storing each user's perspective data in an independent warehouse, and requiring authorization from all owners for access to public perspective data.

8. The method according to claim 1, characterized in that, It also includes offline status rights confirmation and control: when there is no network, the local offline rights confirmation engine is activated, biometric and permission verification is performed locally, offline operation records are cached locally, and synchronized to the blockchain for evidence storage after connecting to the network.

9. The method according to claim 1, characterized in that, It also includes digital personality ownership inheritance management: preset heir information and retain DNA feature templates of the ownership subject and heirs. When inheritance is triggered, the heirs’ DNA is verified and confirmed at three levels, and the ownership tags of more perspectives are changed in batches and the blockchain evidence is updated.

10. A multi-view data ownership and access control system, characterized in that, include: processor; A machine-readable storage medium for storing machine-executable instructions of the processor; The processor is configured to execute the multi-view recording data ownership and access control method according to any one of claims 1 to 9 by executing the machine-executable instructions.

Images