Blockchain Data Sharing via Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data sharing systems lack robust security measures to ensure that only authorized users can access encrypted data, particularly in blockchain-based information sharing systems, where data privacy and security are critical.
Innovation Solution
A data sharing method that encrypts plaintext data using a key, uploads the encrypted data to a blockchain system, and utilizes an access authorization server to manage key parts, ensuring that only valid authorization codes and key combinations can decrypt and access the data, thereby maintaining data security and privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted and stored in a blockchain system for secure sharing, then data security and privacy are improved, but access control complexity and key management difficulty increase
Solution Approach 1:
The encryption key is divided into multiple parts (first key part stored on server, second key part kept by user). This segmentation allows the data to be encrypted and stored securely on the blockchain while distributing key management responsibilities, reducing the complexity of centralized key management and enabling secure access control without requiring the server to hold the complete decryption key.
2Ease of operation
If complete key is stored on server for easy decryption, then access convenience is improved, but data security and privacy protection deteriorate
Solution Approach 1:
The key is segmented into multiple parts with different storage locations and access rights. The server stores only the first key part and cannot decrypt data alone, while the user holds the second key part. This segmentation enables the server to facilitate access (improving convenience) without having access to the complete decryption key (maintaining privacy protection).
Solution Approach 2:
The encrypted data stored on the blockchain acts as an intermediary that neither the server nor the user can access alone. The server provides the first key part as a mediator to enable decryption, but the complete decryption requires combining it with the user's second key part. This intermediary mechanism allows convenient access facilitation while preserving privacy.
3Adaptability or versatility
If data is shared with multiple users in blockchain system, then information sharing capability is improved, but security risk and unauthorized access potential increase
Solution Approach 1:
By segmenting the key into multiple parts and requiring combination for decryption, the system enables secure sharing with multiple users without centralizing security risks. Each user receives only their designated key part, and no single user or the server alone can access the data, reducing security risks while maintaining versatile sharing capabilities.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This application provides a data sharing method, including: encrypting a piece of plaintext data according to a key, to obtain encrypted data; uploading the encrypted data to a block of an information sharing system, the information sharing system being a blockchain system; uploading a first part of the key to an access authorization server corresponding to the information sharing system; receiving, from the access authorization server, an authorization code corresponding to the encrypted data; and transmitting the authorization code and a second part of the key to a second client of a user in a case that the user is authorized to access the encrypted data, the second part of the key including a remaining part of the key except the first part. This application further provides a corresponding client, a server, a computing device, and a storage medium.