Blockchain Data Sharing via Hybrid Encryption and Secret Schemes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional blockchain systems fail to ensure data privacy, as even private blockchains cannot protect data privacy for all entities within the network, as all entities share data between them.
Innovation Solution
The proposed solution involves generating first combined data by combining target data with a random bit string, encrypting it using a symmetric key-based algorithm, and then generating second combined data by combining the ciphertext with public key-based ciphertexts for decryption keys and another random bit string, which is disclosed to entities along with an electronic signature for secure sharing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is disclosed in a blockchain network to enable sharing, then data sharing capability is improved, but data privacy is compromised
Solution Approach 1:
The patent segments data into multiple shares using secret sharing schemes, where each entity receives only a portion of the data. The original data can be reconstructed only when a threshold number of shares are combined, preventing any single entity from accessing the complete data and thus preserving privacy while enabling sharing.
Solution Approach 2:
The patent introduces cryptographic intermediaries including hash functions, encryption algorithms, and smart contracts that mediate the data sharing process. These intermediaries enable verification of data integrity and authentication of entities without exposing the actual data content, thus maintaining privacy while facilitating trusted sharing.
2Loss of information
If encryption is applied to protect data privacy, then data privacy is improved, but data accessibility and verification become more complex
Solution Approach 1:
The patent performs preliminary cryptographic operations during data upload, including generating hash values, creating encrypted shares, and storing verification metadata in advance. This preliminary action ensures that when entities need to access or verify data, the complex cryptographic operations have already been completed, reducing the complexity of the access process.
Solution Approach 2:
The patent implements self-verification mechanisms where the system automatically verifies data integrity and entity authentication using pre-stored hash values and cryptographic proofs. This eliminates the need for manual verification processes and reduces the operational complexity for users while maintaining strong security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An apparatus and method for sharing data are provided. The apparatus for sharing data according to one embodiment includes a first combined data generator configured to generate first combined data by combining target data to be shared and a random bit string, a data encryptor configured to generate a ciphertext for the first combined data, a key encryptor configured to generate one or more ciphertexts for a decryption key of the ciphertext for the first combined data using one or more public keys, a second combined data generator configured to generate second combined data by combining the ciphertext for the first combined data, the one or more ciphertexts for the decryption key, and the random bit string, and a data discloser configured to disclose the second combined data to one or more entities to share the target data to be shared.