A blockchain plus-based data asset ownership and use control system and method

Abstract

The application discloses a data asset ownership and use control system and method based on blockchain Plus, wherein the blockchain Plus refers to a new type of ownership control technology which organically integrates blockchain technology and certificate ownership and use control technology; the blockchain technology is mainly used for backup storage, recovery, trace and judicial evidence of data assets; and the certificate ownership technology is mainly used for ownership solidification, right exercise, right verification, transaction and extended data extraction of data assets on a mobile terminal. The system and method adopt a double-track architecture of the blockchain and the certificate ownership technology, and through double-track division of labor, the credibility of the blockchain and the convenience, autonomous controllability of the certificate operation are taken into account.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data asset management, in particular to a data asset ownership and use control system and method based on blockchain Plus. BACKGROUND

[0002] With the development of digital economy, data has become an important production factor. In the process of data asset transformation from resource to asset to capital, ownership definition and safe circulation are the core bottlenecks. The traditional centralized data management mode has the following defects:

[0003] (1) When the traditional blockchain technology is used for data asset ownership control, multi-node common storage leads to low storage efficiency, and large-capacity data deployed in a node will significantly reduce access efficiency. The deployment of alliance chain is prone to form an information island, and there is no effective method to monitor the data on the chain.

[0004] (2) In the existing blockchain + smart contract scheme, each authorization, transaction and verification of data assets requires both parties to connect to the blockchain network at the same time, which is not intuitive, flexible and convenient. It is difficult to protect privacy information when circulating and sharing, and the user experience is poor.

[0005] (3) The existing data certificate scheme mostly adopts a centralized supervision party generation and hosting mode. The certificate itself lacks national secret level security protection (such as SM2 signature, SM9 encryption, security label packaging, and black box verification), and it is difficult to realize the capabilities of anti-leakage, anti-attack, and non-repudiation.

[0006] (4) The existing technology does not encapsulate data assets into a certificate product with complete security rules and interoperability capabilities. The data content and ownership control logic are separated, which leads to ownership disputes and security risks in the circulation link.

[0007] (5) The existing technology lacks a closed-loop management mechanism for the whole life cycle of data assets (registration, production, authorization, annotation, submission, verification, listing, transaction, de-listing, and extension data extraction). The traces of each link cannot be effectively traced and traced. SUMMARY

[0008] To solve the above technical problems, the present application provides a data asset ownership and use control system and method based on blockchain Plus. The system and method adopt a dual-track architecture of blockchain and certificate ownership technology, and through dual-track division, the credibility of blockchain and the convenience, autonomy and controllability of certificate operation are considered.

[0009] A data asset ownership and use control system based on blockchain Plus includes a user terminal layer, a data fortress layer, a blockchain layer, a trusted data space layer, and a private domain data space layer.

[0010] The user terminal layer serves as the interaction entry point between the data subject and the system, providing a graphical interface for operation.

[0011] The data fortress layer serves as a credential encapsulation carrier for data assets, integrating original data content, data logic, security rules, and interactive operation capabilities into a unified electronic container.

[0012] The blockchain layer provides decentralized and trusted evidence storage and verification capabilities, records the entire lifecycle of data assets, and ensures that the data asset operation trajectory is tamper-proof and traceable.

[0013] The trusted data space layer provides a public and trusted environment for data assets to be registered, valued, and facilitated in circulation.

[0014] The private domain data space layer is used to ensure that the data subject has the ultimate control over its own data. After the data assets have completed the confirmation and circulation in the trusted data space, they return to the private domain space and are managed autonomously by the subject.

[0015] As a preferred embodiment of the above technical solution, the user terminal layer interacts directly with the data fortress layer, and can be used to initiate instructions and receive data regression and dynamic authorization feedback from the private domain data space layer. The operations that can be performed in the user terminal layer include ownership solidification, authorization, exercise of rights, verification of rights, and transactions. The instructions initiated include credential creation, authorization annotation, and submission for verification.

[0016] As a preferred embodiment of the above technical solution, the data fortress layer receives operation instructions from the user terminal layer to complete the creation, signing, verification, and maintenance of credentials, interacts with the blockchain layer to upload the key HASH value and operation trajectory of the credentials to the blockchain for evidence storage, and can collaborate with the data space layer to complete the confirmation and registration of data assets and the catalog registration.

[0017] As a preferred embodiment of the above technical solution, the core security mechanism of the data fortress layer includes:

[0018] SM2 signature, which is used for identity authentication and non-repudiation;

[0019] SM9 encryption is used for data confidentiality;

[0020] A timestamp, used to ensure the reliability of the time sequence;

[0021] Security tag encapsulation, wherein the security tag encapsulation is used for access control;

[0022] Shadow tags, which are used for information hiding and tracing;

[0023] Black-box verification, which is used for attack prevention verification.

[0024] As a preferred embodiment of the above technical solution, the blockchain layer includes...

[0025] The heavy node is responsible for the complete backup and storage of data asset certificates and for judicial evidence collection.

[0026] Light nodes, which only store the credential hash value and operation trajectory summary, reduce storage pressure;

[0027] Smart contracts automatically execute asset verification and ownership changes.

[0028] As a preferred embodiment of the above technical solution, the data recorded in the blockchain layer includes registration, creation, authorization, annotation, submission, verification, listing, transaction, delisting, and extended data extraction.

[0029] As a preferred embodiment of the above technical solution, the trusted data space layer receives the rights confirmation application submitted by the data fortress layer, completes the compliance testing, catalog management, and value assessment of data assets, and supports data users to process and apply data under the premise that the data is available but not visible through privacy computing and data security gateway.

[0030] As a preferred embodiment of the above technical solution, the data subject realizes autonomous control, dynamic authorization, and restricted access to data through the private data space; data operations in the private data space are also encapsulated through the data fortress, and key trajectories are synchronously uploaded to the blockchain layer.

[0031] A method for a data asset ownership and usage control system based on Blockchain Plus, as described in any one of the above, comprises the following steps:

[0032] S1, Data Asset Registration: The data resource owner submits the original data to be confirmed to the Trusted Data Space Operation Platform. The platform conducts compliance testing on the data, and assigns a unique identifier to the data asset after the test is passed.

[0033] S2, Data Fortress Creation: The original data and its metadata are encapsulated into a data fortress. During the creation of the data fortress, the identity of the creator is confirmed by SM2 signature, the data content is protected by SM9 encryption, and a timestamp is added to ensure the time sequence of evidence.

[0034] S3, Ownership consolidation: Data subjects can perform ownership consolidation operations on the data fortress via mobile devices;

[0035] S4, Blockchain HASH Evidence Storage: Upload the key information of the data fortress to the blockchain layer. Heavy nodes save the complete backup, light nodes save the HASH value digest, and the blockchain synchronously records the production process.

[0036] S5, Authorization / Augmentation: Data subjects authorize or annotate the data fortress via mobile devices according to application scenario requirements. The new rules after authorization / annotation regenerate verification parameters and update the blockchain evidence storage synchronously.

[0037] S6, Submission and Verification: After receiving the data fortress submitted by the data subject, the data user verifies the authorization through the verification system. After successful verification, the user can obtain data access permissions according to the restriction rules.

[0038] S7, Listing and Trading: Data subjects can list their data fortresses on data exchanges for trading;

[0039] S8, Delisting and Extended Data Extraction: Data subjects can delist their data fortresses from the trading platform at any time. For authorized users, extended data can be extracted within the scope permitted by the control rules.

[0040] S9, Track Synchronization on the Blockchain: Operation tracks are generated for each stage of the data asset's lifecycle and synchronized to the blockchain for evidence storage in real time or near real time.

[0041] S10, Return to Private Data Space: After data assets complete circulation and trading in a trusted data space, their core ownership certificates return to the private data space of the data subject. The private space is independently controlled, authorized and managed by the data subject to ensure that data sovereignty is not deprived by the platform or third party.

[0042] S11, Dynamic Authorization Management: Data subjects can dynamically adjust the authorization status of the data fortress at any time in the private data space. Dynamic authorization changes take effect immediately, and the change trajectory is synchronized on the blockchain to ensure the traceability of authorization history.

[0043] The beneficial effects of this invention are as follows:

[0044] 1. Balancing Trustworthiness and Convenience: Through the dual-track architecture of Blockchain Plus, the blockchain only undertakes the functions of backup and evidence storage and judicial evidence collection. The daily ownership operations of data assets are completed on the mobile terminal through the data fortress, which solves the problems of traditional blockchain being unintuitive, inflexible, and inconvenient, while maintaining the immutability of the blockchain.

[0045] 2. Secure Encapsulation of Credentials: The Data Fortress integrates data content, ownership rules, and security mechanisms into a unified credential. It features multiple national cryptographic security protections, including SM2 signature, SM9 encryption, timestamp, security tag, shadow tag, and black-box verification, achieving protection against data leakage, attack resistance, and non-repudiation.

[0046] 3. Closed-loop management throughout the entire lifecycle: Covering the entire process of data assets from registration, creation, authorization, transaction to return to the private domain, the trajectory of each link is recorded on the blockchain in real time, forming a complete lineage map and audit file, effectively preventing ownership disputes.

[0047] 4. Private Domain Autonomy and Control: After data assets return to the private data space, the data subject can independently perform dynamic authorization and restriction control without relying on the platform or third party, truly realizing the supremacy of data sovereignty. Attached Figure Description

[0048] Figure 1 This is a framework diagram of the system of the present invention.

[0049] Figure 2 This is a flowchart of the system of the present invention. Detailed Implementation

[0050] The technical solution of the present invention will be clearly and completely described below with reference to the accompanying drawings. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without inventive effort are within the scope of protection of the present invention.

[0051] like Figure 1 The aforementioned data asset ownership and usage control system based on Blockchain Plus includes a user terminal layer, a data fortress layer, a blockchain layer, a trusted data space layer, and a private domain data space layer.

[0052] The user terminal layer serves as the interaction entry point between the data subject and the system, providing a graphical interface for operation.

[0053] The data fortress layer serves as a credential encapsulation carrier for data assets, integrating original data content, data logic, security rules, and interactive operation capabilities into a unified electronic container.

[0054] The blockchain layer provides decentralized and trusted evidence storage and verification capabilities, records the entire lifecycle of data assets, and ensures that the data asset operation trajectory is tamper-proof and traceable.

[0055] The trusted data space layer provides a public and trusted environment for data assets to be registered, valued, and facilitated in circulation.

[0056] The private domain data space layer is used to ensure that the data subject has the ultimate control over its own data. After the data assets have completed the confirmation and circulation in the trusted data space, they return to the private domain space and are managed autonomously by the subject.

[0057] In this embodiment, the user terminal layer interacts directly with the data fortress layer, and can be used to initiate instructions and receive data regression and dynamic authorization feedback from the private domain data space layer. The operations that can be performed in the user terminal layer include ownership solidification, authorization, exercise of rights, verification of rights, and transactions. The instructions initiated include credential creation, authorization annotation, and submission for verification.

[0058] In this embodiment, the data fortress layer receives operation instructions from the user terminal layer to complete the creation, signing, verification, and maintenance of credentials. It interacts with the blockchain layer to upload the key HASH value and operation trajectory of the credentials to the blockchain for evidence storage. It can also collaborate with the data space layer to complete the confirmation and registration of data assets and the catalog registration.

[0059] In this embodiment, the core security mechanism of the data fortress layer includes:

[0060] SM2 signature, which is used for identity authentication and non-repudiation;

[0061] SM9 encryption is used for data confidentiality;

[0062] A timestamp, used to ensure the reliability of the time sequence;

[0063] Security tag encapsulation, wherein the security tag encapsulation is used for access control;

[0064] Shadow tags, which are used for information hiding and tracing;

[0065] Black-box verification, which is used for attack prevention verification.

[0066] In this embodiment, the blockchain layer includes

[0067] The heavy node is responsible for the complete backup and storage of data asset certificates and for judicial evidence collection.

[0068] Light nodes, which only store the credential hash value and operation trajectory summary, reduce storage pressure;

[0069] Smart contracts automatically execute asset verification and ownership changes.

[0070] In this embodiment, the data recorded by the blockchain layer includes registration, creation, authorization, annotation, submission, verification, listing, transaction, delisting, and extended data extraction.

[0071] In this embodiment, the trusted data space layer receives the rights confirmation application submitted by the data fortress layer, and completes the compliance detection, catalog management, and value assessment of data assets; through privacy computing and data security gateway, it supports data users to process and apply data under the premise that the data is available but not visible.

[0072] In this embodiment, the data subject realizes autonomous management, dynamic authorization, and restricted access to data through the private data space; data operations in the private data space are also encapsulated through the data fortress, and key trajectories are synchronously uploaded to the blockchain layer.

[0073] A method for a data asset ownership and usage control system based on Blockchain Plus, as described in any one of the above, such as Figure 2 As shown, the specific process is as follows:

[0074] S1, Data Asset Registration: The data resource owner submits the original data to be confirmed to the Trusted Data Space Operation Platform. The platform conducts compliance testing on the data, and assigns a unique identifier to the data asset after the test is passed.

[0075] S2, Data Fortress Creation: The original data and its metadata are encapsulated into a data fortress. During the creation of the data fortress, the identity of the creator is confirmed by SM2 signature, the data content is protected by SM9 encryption, and a timestamp is added to ensure the time sequence of evidence.

[0076] Specifically, the creation of a data fortress includes steps such as base design, layout selection, data import, template creation, and fortress construction.

[0077] S3, Ownership consolidation: Data subjects can perform ownership consolidation operations on the data fortress via mobile devices;

[0078] Specifically, the ownership consolidation operation includes property registration, asset consolidation, self-authorization setting, and restriction and control addition. The restriction and control conditions are coded as the first parameter (access permission confirmation) and the second parameter (access permission confirmation) of the verification parameters.

[0079] S4, Blockchain HASH Evidence Storage: Upload the key information of the data fortress to the blockchain layer. Heavy nodes save the complete backup, light nodes save the HASH value digest, and the blockchain synchronously records the production process.

[0080] Specifically, the key information of a data fortress includes data digest hash, ownership information hash, and restriction rule hash.

[0081] S5, Authorization / Augmentation: Data subjects authorize or annotate the data fortress via mobile devices according to application scenario requirements. The new rules after authorization / annotation regenerate verification parameters and update the blockchain evidence storage synchronously.

[0082] Specifically, authorization operations include designating users, setting the scope of use, and adding usage conditions; annotation operations include adding new restrictions or instructions to the voucher.

[0083] S6, Submission and Verification: After receiving the data fortress submitted by the data subject, the data user verifies the authorization through the verification system. After successful verification, the user can obtain data access permissions according to the restriction rules.

[0084] Specifically, the verification process is as follows: First, a black-box verification (anti-attack detection) is performed; then, the security label is parsed to confirm the integrity of the credential; next, the SM2 signature is verified to confirm the authenticity of the identity; and finally, the HASH value on the blockchain is compared with the trace record to confirm that the credential has not been tampered with.

[0085] S7, Listing and Trading: Data subjects can list their data fortresses on data exchanges for trading;

[0086] Specifically, the trading platform issues a sales label based on the legal information and value assessment results of the data asset. After the buyer makes the payment, the trading platform transfers the payment label and data fortress to the buyer and records the transaction trajectory and ownership change on the blockchain.

[0087] S8, Delisting and Extended Data Extraction: Data subjects can delist their data fortresses from the trading platform at any time. For authorized users, extended data can be extracted within the scope permitted by the control rules.

[0088] Specifically, the extracted extended data includes related data and derived data. The extraction operation is constrained by security tags and verification parameters to prevent unauthorized access.

[0089] S9, Track Synchronization on the Blockchain: Operation tracks are generated for each stage of the data asset's lifecycle and synchronized to the blockchain for evidence storage in real time or near real time.

[0090] Specifically, the operational steps include registration, creation, authorization, annotation, submission, verification, listing, transaction, delisting, and extended data extraction. The trajectory information includes operation type, operation time, operation subject, voucher identifier, and summary of change content.

[0091] S10, Return to Private Data Space: After data assets complete circulation and trading in a trusted data space, their core ownership certificates return to the private data space of the data subject. The private space is independently controlled, authorized and managed by the data subject to ensure that data sovereignty is not deprived by the platform or third party.

[0092] S11, Dynamic Authorization Management: Data subjects can dynamically adjust the authorization status of the data fortress at any time in the private data space. Dynamic authorization changes take effect immediately, and the change trajectory is synchronized on the blockchain to ensure the traceability of authorization history.

[0093] Specifically, dynamic adjustments include expanding / reducing the scope of use, extending / shortening the validity period, and withdrawing authorization.

[0094] The following is a further explanation with reference to specific embodiments.

[0095] Application scenario: A provincial government data element circulation platform.

[0096] Known categories: electronic certificate data assets, enterprise credit data, medical data.

[0097] Data scale: The provincial platform aggregates dozens of types of electronic certificates and licenses, involving tens of millions of data entities.

[0098] System Flow Summary:

[0099] 1. The Provincial Big Data Bureau will submit the original data of the electronic certificates to the Trusted Data Space Operation Platform to complete compliance testing and registration of ownership.

[0100] 2. The platform encapsulates electronic certificates and their metadata (certificate information, issuing authority, validity period, and usage rules) into a data fortress, uses SM2 signature to confirm the identity of the issuing authority, and SM9 encryption to protect sensitive certificate information.

[0101] 3. Citizens can view their electronic certificate data fortress through the "Mou Tong" APP (mobile terminal) and can set the authorization scope themselves (e.g., only open identity information to the Medical Insurance Bureau, valid for 30 days, and cannot be downloaded).

[0102] 4. When citizens submit electronic certificates to the hospital, the hospital's verification system performs black-box verification and security tag verification on the data fortress. After confirming that the certificate is complete and has not been tampered with, the system provides identity information according to the authorization rules.

[0103] 5. The entire lifecycle of electronic certificates (creation, authorization, submission, verification) is synchronized in real time to the provincial government's blockchain for evidence storage.

[0104] 6. After use, the electronic certificate data fortress returns to the citizen's private data space, and the citizen can withdraw or adjust the authorization at any time.

[0105] Technical effects:

[0106] The process of data asset ownership has been transformed from "requiring both parties to connect to the blockchain simultaneously" to "one-click authorization on mobile devices," improving operational efficiency by more than 80%.

[0107] Data Fortress's national cryptographic security protection system effectively prevents credential forgery and information leakage, reducing security incidents by more than 95%.

[0108] With the entire lifecycle tracked on the blockchain for evidence storage, the average time for handling ownership disputes has been shortened from 30 days to less than 7 days.

[0109] Example of parameter settings (not intended to limit the scope of the claims):

[0110] Encryption algorithm: Chinese national standard SM9.

[0111] Signature algorithm: Chinese national cryptographic standard SM2.

[0112] Timestamp: Second-level precision, using the time source from the National Time Service Center.

[0113] Verification parameters: The first parameter is a 24-bit code (including seller ID, access validity period, and download / reprint / copy status), and the second parameter is a 256-bit random number.

[0114] Track synchronization delay: ≤3 minutes.

[0115] The above are merely preferred embodiments of the present invention and are not intended to limit the present invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A data asset ownership and usage control system based on Blockchain Plus, characterized in that: It includes the user terminal layer, data fortress layer, blockchain layer, trusted data space layer, and private domain data space layer; The user terminal layer serves as the interaction entry point between the data subject and the system, providing a graphical interface for operation. The data fortress layer serves as a credential encapsulation carrier for data assets, integrating original data content, data logic, security rules, and interactive operation capabilities into a unified electronic container. The blockchain layer provides decentralized and trusted evidence storage and verification capabilities, records the entire lifecycle of data assets, and ensures that the data asset operation trajectory is tamper-proof and traceable. The trusted data space layer provides a public and trusted environment for data assets to be registered, valued, and facilitated in circulation. The private domain data space layer is used to ensure that the data subject has the ultimate control over its own data. After the data assets have completed the confirmation and circulation in the trusted data space, they return to the private domain space and are managed autonomously by the subject.

2. The data asset ownership and usage control system based on Blockchain Plus according to claim 1, characterized in that: The user terminal layer interacts directly with the data fortress layer and can be used to initiate commands and receive data regression and dynamic authorization feedback from the private domain data space layer. The operations that can be performed in the user terminal layer include ownership solidification, authorization, exercise of rights, verification of rights, and transactions. The commands initiated include credential creation, authorization annotation, and submission for verification.

3. A data asset ownership and usage control system based on Blockchain Plus according to claim 2, characterized in that: The data fortress layer receives operation instructions from the user terminal layer, completes the creation, signing, verification, and maintenance of credentials, interacts with the blockchain layer, uploads the key HASH value and operation trajectory of the credentials to the blockchain for evidence storage, and can collaborate with the data space layer to complete the confirmation and registration of data assets and catalog registration.

4. A data asset ownership and usage control system based on Blockchain Plus according to claim 3, characterized in that: The core security mechanisms of the data fortress layer include: SM2 signature, which is used for identity authentication and non-repudiation; SM9 encryption is used for data confidentiality; A timestamp, used to ensure the reliability of the time sequence; Security tag encapsulation, wherein the security tag encapsulation is used for access control; Shadow tags, which are used for information hiding and tracing; Black-box verification, which is used for attack prevention verification.

5. A data asset ownership and usage control system based on Blockchain Plus according to claim 4, characterized in that: The blockchain layer includes The heavy node is responsible for the complete backup and storage of data asset certificates and for judicial evidence collection. Light nodes, which only store the credential hash value and operation trajectory summary, reduce storage pressure; Smart contracts automatically execute asset verification and ownership changes.

6. A data asset ownership and usage control system based on Blockchain Plus according to claim 1, characterized in that: The data recorded in the blockchain layer includes registration, creation, authorization, annotation, submission, verification, listing, transaction, delisting, and extended data extraction.

7. A data asset ownership and usage control system based on Blockchain Plus according to claim 1, characterized in that: The trusted data space layer receives the rights confirmation application submitted by the data fortress layer, and completes the compliance detection, catalog management, and value assessment of data assets; through privacy computing and data security gateway, it supports data users to process and apply data under the premise that the data is available but not visible.

8. A data asset ownership and usage control system based on Blockchain Plus according to claim 1, characterized in that: The data subject achieves autonomous control, dynamic authorization, and restricted access to data through the private data space; data operations in the private data space are also encapsulated through the data fortress, and key trajectories are synchronously uploaded to the blockchain layer.

9. A method for controlling the ownership and use of data assets based on Blockchain Plus as described in any one of claims 1-8, characterized in that: The specific process is as follows: S1, Data Asset Registration: The data resource owner submits the original data to be confirmed to the Trusted Data Space Operation Platform. The platform conducts compliance testing on the data, and assigns a unique identifier to the data asset after the test is passed. S2, Data Fortress Creation: The original data and its metadata are encapsulated into a data fortress. During the creation of the data fortress, the identity of the creator is confirmed by SM2 signature, the data content is protected by SM9 encryption, and a timestamp is added to ensure the time sequence of evidence. S3, Ownership consolidation: Data subjects can perform ownership consolidation operations on the data fortress via mobile devices; S4, Blockchain HASH Evidence Storage: Upload the key information of the data fortress to the blockchain layer. Heavy nodes save the complete backup, light nodes save the HASH value digest, and the blockchain synchronously records the production process. S5, Authorization / Augmentation: Data subjects authorize or annotate the data fortress via mobile devices according to application scenario requirements. The new rules after authorization / annotation regenerate verification parameters and update the blockchain evidence storage synchronously. S6, Submission and Verification: After receiving the data fortress submitted by the data subject, the data user verifies the authorization through the verification system. After successful verification, the user can obtain data access permissions according to the restriction rules. S7, Listing and Trading: Data subjects can list their data fortresses on data exchanges for trading; S8, Delisting and Extended Data Extraction: Data subjects can delist their data fortresses from the trading platform at any time. For authorized users, extended data can be extracted within the scope permitted by the control rules. S9, Track Synchronization on the Blockchain: Operation tracks are generated for each stage of the data asset's lifecycle and synchronized to the blockchain for evidence storage in real time or near real time. S10, Return to Private Data Space: After data assets complete circulation and trading in a trusted data space, their core ownership certificates return to the private data space of the data subject. The private space is independently controlled, authorized and managed by the data subject to ensure that data sovereignty is not deprived by the platform or third party. S11, Dynamic Authorization Management: Data subjects can dynamically adjust the authorization status of the data fortress at any time in the private data space. Dynamic authorization changes take effect immediately, and the change trajectory is synchronized on the blockchain to ensure the traceability of authorization history.

Images