可控、可追责的敏感数据共享方案

张正昊; 李勇; 张振江

doi:10.7544/issn1000-1239.20210587

可控、可追责的敏感数据共享方案

(北京交通大学电子信息工程学院北京 100044) (19120172@bjtu.edu.cn)

基金项目: 国家重点研发计划项目(2018YFC0832300,2018YFC0832303)

详细信息

中图分类号: TP391
计量
- 文章访问数: 272
- HTML全文浏览量: 18
- PDF下载量: 169
出版历程
- 发布日期: 2022-11-30

Controllable and Accountable Sensitive Data Sharing Scheme

(School of Electronic and Information Engineering, Beijing Jiaotong University, Beijing 100044)

Funds: This work was supported by the National Key Research and Development Program of China (2018YFC0832300, 2018YFC0832303).

摘要

摘要: 在大数据时代下，海量数据之间的共享是充分挖掘数据价值的前提.对涉及用户隐私的敏感数据，需要对其共享过程特别关注，而传统的数据共享方式存在数据流向不明确、难以追责等缺陷.针对这些问题，基于区块链提出了一种支持监管的敏感数据可控共享方案.通过使用动态累加器技术实现敏感数据的访问控制，数据拥有方可以灵活地授予或者撤销其他参与方对数据的访问权限，实现数据拥有方对数据的可控性.设置监管方对数据请求过程进行审核，监管方将为通过审核的数据请求方颁发监管凭证，只有拥有监管凭证且获得数据拥有方授权的数据请求方才能获得数据.为保护数据请求方的隐私，通过强指定验证者签名技术，使无关第三方无法获得数据请求方的身份信息.使用区块链技术记录数据的请求和响应情况，该记录只有监管方可以读取，从而实现了监管方对数据共享全流程的可监管性.安全性分析表明，方案满足数据请求方隐私性、数据拥有方可控性、可监管性，仿真实验验证了方案的可行性.
- 数据共享 /
- 可控 /
- 隐私保护 /
- 可追责 /
- 区块链
Abstract: In the era of big data, the sharing of massive amounts of data is a prerequisite for fully mining the value of data. Some of these data are sensitive data involving user privacy, and special attention should be paid to the data sharing process. However, traditional data sharing methods have defects such as unclear data flow and difficulty in accountability. To solve these problems, a blockchain-based sensitive data controllable sharing solution that supports regulation is proposed. By using the dynamic accumulator technology to achieve access control of sensitive data, the data owner can flexibly grant or revoke the access rights of other participants to the data and realize the controllability of the data by the data owner. A regulator is set up to check the data request process. The regulator will issue a regulatory certificate to the data requester after the check is approved. Only the data requester who has the regulatory certificate and is authorized by the data owner can get the data. To protect the privacy of the data requester, unrelated third parties cannot obtain the identity information of the data requester by using strong designated verifier signature (SDVS). Blockchain technology is used to record data requests and responses. The record can only be read by the regulator, which realizes the regulation of the whole data sharing process. The security analysis proves that the scheme satisfies the privacy of the data requester, the controllability of the data owner, and accountability. The simulation experiment proves the feasibility of the scheme.
- data sharing /
- controllability /
- privacy protection /
- accountability /
- blockchain

HTML全文

参考文献(0)

施引文献(10)

期刊类型引用(5)

1.	夏心锋，陈泽，周于超，刘莉莉. 面向区块链的电力营销大数据安全共享研究. 电气技术与经济. 2025(02): 245-248 . 百度学术
2.	吴昊，李贝，贺小伟，王宾，李思远. 基于侧链和信任管理模型的数据共享方案. 计算机工程与设计. 2024(01): 24-31 . 百度学术
3.	李鸣，宋文鹏，宗燕，刘冕宸. 基于区块链的元宇宙生态体系架构. 计算机研究与发展. 2024(09): 2364-2383 . 本站查看
4.	陈月静，朴春慧，卢晓天，霍仁崇，白英杰. 工业互联网安全评测数据隐私保护与共享方法. 情报杂志. 2023(06): 180-186 . 百度学术
5.	于欣海，黄欣哲，梁海，丁勇. 基于区块链的高速联网收费数据传输应用研究. 计算机技术与发展. 2023(10): 51-58 . 百度学术