信息安全研究 ›› 2021, Vol. 7 ›› Issue (7): 606-614.

• 学术论文 • 上一篇    下一篇

基于区块链的业务协同数据安全共享方案

王冠1)   丁浩2)   

  1. 1)(北京工业大学信息学部 北京 100124) 
    2)(可信计算北京市重点实验室 北京 100124)

  • 出版日期:2021-07-09 发布日期:2021-07-08
  • 通讯作者: 王冠
  • 作者简介:王冠 副教授,硕士生导师,主要研究方向为信息安全、可信计算、数据挖掘与智能信息系统. wanguan@bjut.edu.cn 丁浩 硕士研究生,主要研究方向为信息安全、可信计算. 1052351722@qq.com

Blockchain-based scheme for secure sharing of business collaboration data 

Wang Guan1)   Ding Hao2)   

  1. 1)(Faculty of Information Technology, Beijing University of Technology, Beijing 100124) 
    2)(Beijing Key Laboratory of Trusted Computing, Beijing 100124)

  • Online:2021-07-09 Published:2021-07-08

摘要: 现有电子政务环境下业务协同数据共享过程中存在数据来源不可知、数据真实性存在争议、数据隐私泄露、数据使用者在使用非法数据或者数据提供者提供假冒数据后出现抵赖现象难以进行追责等问题。针对以上问题,本文提出了一种基于区块链的业务协同数据安全共享方案。通过区块链实现电子政务环境下数据共享流程公开透明且去中心化、数据在共享过程中不可篡改以及共享流程可追溯等。该方案根据业务逻辑部署智能合约对数据密文进行数据处理得到数据处理结果,实现共享数据处理结果而不共享数据密文从根本上解决数据隐私泄露问题。通过数据脱链存储解决区块链内存问题,同时提高共识效率,并通过设计授权令牌Token并将其记录在区块中实现访问控制。最后通过安全性分析和性能分析表明该方案是可行的,满足电子政务环境下业务协同数据共享。

关键词: 业务协同, 数据共享, 区块链, 智能合约, IPFS

Abstract: In the current e-government environment, there are problems such as unknowable data sources, disputes over the authenticity of data, leakage of data privacy, and difficulties for accountability due to denial after data users using illegal data or data providers providing fake data in the existing data sharing process. In response to the above problems, this paper proposes a business collaborative data sharing scheme based on blockchain. Through the blockchain, the data sharing process in the e-government environment is open, transparent and decentralized, the data cannot be tampered with during the sharing process, and the sharing process can be traced. This solution deploys smart contracts based on business logic to perform data processing on data ciphertext to obtain data processing results, and realizes sharing of data processing results without sharing data ciphertexts, which fundamentally solves the problem of data privacy leakage. Solve the problem of blockchain memory through off-chain storage of data, and improve consensus efficiency. In addition, access control is achieved by designing the authorization token Token and recording it in the block. Finally, security analysis and performance analysis show that the scheme is feasible, and it can meet the requirements of business collaborative data sharing in the e-government environment.

Key words: Business Collaboration, Data Sharing, Blockchain, Smart contract, IPFS