分布式可信数据管理与隐私保护技术研究

doi:10.19678/j.issn.1000-3428.0068120

计算机工程 ›› 2024, Vol. 50 ›› Issue (7): 174-186. doi: 10.19678/j.issn.1000-3428.0068120

分布式可信数据管理与隐私保护技术研究

郑清安¹, 董建成², 陈亮³, 阮英清⁴, 李锦松³, 许林彬⁵^,*()

1. 福建警察学院计算机与信息安全管理系, 福建福州 350007
2. 北京邮电大学网络空间安全学院, 北京 100876
3. 福建省监狱管理局, 福建福州 350002
4. 福建省司法厅, 福建福州 350025
5. 中共福建省委政法委员会, 福建福州 350003

收稿日期:2023-07-20 出版日期:2024-07-15 发布日期:2024-03-06
通讯作者: 许林彬
基金资助:
2023年福建省社会科学基金公安理论研究专项(FJ2023TWGA004); 福建省财政厅省直单位教育和科研专项; 国家重点研发计划(2020YFB1005500); 北京市自然科学基金(M21034)

Research on Distributed Trusted Data Management and Privacy Protection Technology

Qing'an ZHENG¹, Jiancheng DONG², Liang CHEN³, Yingqing RUAN⁴, Jinsong LI³, Linbin XU⁵^,*()

1. Department of Computer and Information Security Management, Fujian Police College, Fuzhou 350007, Fujian, China
2. School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing 100876, China
3. Fujian Provincial Prison Administration, Fuzhou 350002, Fujian, China
4. Fujian Provincial Department of Justice, Fuzhou 350025, Fujian, China
5. The Political and Legal Affairs Committee of the CPC Fujian Provincial Committee, Fuzhou 350003, Fujian, China

Received:2023-07-20 Online:2024-07-15 Published:2024-03-06
Contact: Linbin XU

摘要/Abstract

摘要：

相较于传统的分布式数据库系统, 区块链技术在处理记账事务方面展现出更好的分布性、透明性和可信性, 且传统中心化数据库系统存在严重的隐私泄露问题。针对传统中心化数据管理机制中存在的信任问题和隐私泄露问题, 提出一种支持隐私保护的分布式可信数据管理模型。该模型采用分布式存储、数据隐私保护、访问控制和分布式身份等关键技术来实现数据的可信管理和协同隐私保护。在数据隐私保护方面, 基于同态加密和零知识证明算法协议保障用户的数据隐私。在数据访问控制方面, 结合链上群组隔离机制和节点存储落盘加密技术实现数据访问控制, 将隐私控制回归属主。在用户身份隐私保护方面, 利用分布式身份技术将物理身份和可验证凭证进行链下存储, 将实体信息最小化或根据需要在受控范围内共享。搭建系统原型并测试系统区块链吞吐量, 结果表明, 针对get请求, 每秒完成的事务数(TPS)达到811.2, set请求的TPS达到225.5, 正确率均为100%。系统测试结果验证了该模型在功能性、安全性和可行性方面符合预期, 性能较优。

关键词: 区块链, 隐私保护, 可信数据, 访问控制, 分布式身份

Abstract:

Blockchain systems provide better distribution, transparency, and trustworthiness than traditional distributed database systems in terms of bookkeeping methods. To address the trust and privacy leakage problems that exist in traditional centralized data management mechanisms, this study proposes a distributed trusted data management model that supports privacy protection. The model adopts key technologies, such as distributed storage, data privacy protection, access control, and distributed identity, to realize trusted data management and collaborative privacy protection. In terms of data privacy protection, user data privacy is guaranteed based on homomorphic encryption and a zero-knowledge proof algorithm protocol. Data access control is realized by combining an on-chain group isolation mechanism with node storage drop disk encryption technology, returning privacy control to the owner. In terms of user identity privacy protection, distributed identity technology is used to store physical identity and verifiable credentials off-chain to minimize entity information or share it within a controlled range as needed. The system prototype is built and tested for blockchain throughput. The results show that for get requests, Transactions Per Second (TPS) reaches 811.2, and for set requests, TPS reaches 225.5, with an accuracy rate of 100%. The system testing results show that the model's functionality, security, and feasibility meet expectations, with superior performance.

Key words: blockchain, privacy protection, trusted data, access control, distributed identity

郑清安, 董建成, 陈亮, 阮英清, 李锦松, 许林彬. 分布式可信数据管理与隐私保护技术研究[J]. 计算机工程, 2024, 50(7): 174-186.

Qing'an ZHENG, Jiancheng DONG, Liang CHEN, Yingqing RUAN, Jinsong LI, Linbin XU. Research on Distributed Trusted Data Management and Privacy Protection Technology[J]. Computer Engineering, 2024, 50(7): 174-186.

https://www.ecice06.com/CN/Y2024/V50/I7/174

图/表 10

图1 支持隐私保护的可信数据管理模型

Fig.1 Trusted data management model supporting privacy protection

图2 首次初始化流程

Fig.2 Initial initialization process

图3 落盘加密方案流程

Fig.3 On-disk encryption scheme process

参考文献 25

1	IMANE E A, YOUSSEF G. Network security strategies in big data context. Procedia Computer Science, 2020, 175, 730- 736. doi: 10.1016/j.procs.2020.07.108
2	代闯闯, 栾海晶, 杨雪莹, 等. 区块链技术研究综述. 计算机科学, 2021, 48(S2): 500- 508. URL
	DAI C C, LUAN H J, YANG X Y, et al. Review of blockchain technology research. Computer Science, 2021, 48(S2): 500- 508. URL
3	ANAND M R, ANSHUMAN K, AN B, et al. Privacy protected blockchain based architecture and implementation for sharing of students' credentials. Information Processing and Management, 2021, 58(3): 102512. doi: 10.1016/j.ipm.2021.102512
4	FENG J, WANG Y, WANG J, et al. Blockchain-based data management and edge-assisted trusted cloaking area construction for location privacy protection in vehicular networks. IEEE Internet of Things Journal, 2021, 8(4): 2087- 2101. doi: 10.1109/JIOT.2020.3038468
5	ABBAS Y, PARIZI REZA M, ALI D, et al. Blockchain-enabled authentication handover with efficient privacy protection in SDN-based 5G networks. IEEE Transactions on Network Science and Engineering, 2019, 8(2): 1120- 1132.
6	程冠杰, 黄诤杰, 邓水光. 基于区块链与边缘计算的物联网数据管理. 物联网学报, 2020, 4(2): 1- 9. URL
	CHENG G J, HUANG Z J, DENG S G. Data management based on blockchain and edge computing for Internet of Things. Chinese Journal on Internet of Things, 2020, 4(2): 1- 9. URL
7	UDDIN M, STRANIERI A, GONDAL I, et al. A survey on the adoption of blockchain in IoT: challenges and solutions[EB/OL]. [2023-06-05]. https://www.semanticscholar.org/paper/A-Survey-on-the-Adoption-of-Blockchain-in-IoT%3A-and-Uddin-Stranieri/a1cdb81de39f32a8a0f51b33a84c13bbf0f18a4a.
8	王群, 李馥娟, 倪雪莉, 等. 区块链数据形成与隐私威胁. 计算机工程, 2023, 49(8): 1- 12. URL
	WANG Q, LI F J, NI X L, et al. Data formation and privacy threat of blockchain. Computer Engineering, 2023, 49(8): 1- 12. URL
9	MUNJAL K, BHATIA R. A systematic review of homomorphic encryption and its contributions in healthcare industry. Complex & Intelligent Systems, 2023, 9(4): 3759- 3786.
10	KILLER C, ECK M, RODRIGUES B, et al. ProvotuMN: decentralized, mix-net-based, and receipt-free voting system[EB/OL]. [2023-06-05]. https://www.researchgate.net/publication/362969435_ProvotuMN_Decentralized_Mix-Net-based_and_Receipt-free_Voting_System.
11	MARCOLLA C, SUCASAS V, MANZANO M, et al. Survey on fully homomorphic encryption, theory, and applications. Proceedings of the IEEE, 2022, 110(10): 1572- 1609. doi: 10.1109/JPROC.2022.3205665
12	邵航, 高思琪, 钟离, 等. 同态加密在隐私计算中的应用综述. 信息通信技术与政策, 2022,(8): 75- 88. URL
	SHAO H, GAO S Q, ZHONG L, et al. Homomorphic encryption protocols and applications in privacy preserving computation. Information and Communications Technology and Policy, 2022,(8): 75- 88. URL
13	RIVEST R L, SHAMIR A, ADLEMAN L M. Cryptographic communications system and method: US4405829[P]. 1983-09-20.
14	PAILLIER P. Public-key cryptosystems based on composite degree residuosity classes[C]//Proceedings of the 17th International Conference on Theory and Application of Cryptographic Techniques. New York, USA: ACM Press, 1999: 223-238.
15	GENTRY C, SAHAI A, WATERS B. Homomorphic encryption from learning with errors: conceptually-simpler, asymptotically-faster, attribute-based[EB/OL]. [2023-06-05]. https://link.springer.com/chapter/10.1007/978-3-642-40041-4_5.
16	李一聪, 周宽久, 王梓仲. 基于零知识证明的区块链隐私保护研究. 空间控制技术与应用, 2022, 48(1): 44- 52. URL
	LI Y C, ZHOU K J, WANG Z Z. A survey of block chain privacy protection research based on zero-knowledge proof. Aerospace Control and Application, 2022, 48(1): 44- 52. URL
17	GENNARO R, GENTRY C, PARNO B, et al. Quadratic span programs and succinct NIZKs without PCPs[EB/OL]. [2023-06-05]. https://link.springer.com/chapter/10.1007/978-3-642-38348-9_37.
18	ELI BEN S, IDDO B, YINON H, et al. Scalable, transparent, and post-quantum secure computational integrity[EB/OL]. [2023-06-05]. https://eprint.iacr.org/2018/046.
19	WILLIAMSON Z J. The AZTEC protocol[EB/OL]. [2023-06-05]. https://github.com/AztecProtocol/AZTEC.
20	BEN SASSON E, CHIESA A, GARMAN C, et al. Zerocash: decentralized anonymous payments from Bitcoin[C]//Proceedings of 2014 IEEE Symposium on Security and Privacy. Washington D. C., USA: IEEE Press, 2014: 459-474.
21	LI C, SHANG L, WEI Z, et al. Commodity-Tra: a traceable transaction scheme based on FISCO BCOS[EB/OL]. [2023-06-05]. https://link.springer.com/chapter/10.1007/978-981-19-7242-3_17.
22	ZHU P, HU J, ZHANG Y, et al. A blockchain based solution for medication anti-counterfeiting and traceability. IEEE Access, 2020, 8, 184256- 184272. doi: 10.1109/ACCESS.2020.3029196
23	XU C, XU J, HU H, et al. When query authentication meets fine-grained access control: a zero-knowledge approach[EB/OL]. [2023-06-05]. https://xuc.me/file/paper/SIGMOD18.pdf.
24	CLAUDIA A, TUDOR C, IONUT A, et al. Distributed ledger technology review and decentralized applications development guidelines. Future Internet, 2021, 13(3): 62.
25	秦备, 卢毅, 赵俊, 等. 一种基于区块链的高可控分布式数字身份识别系统: CN114528535A[P]. 2022-05-24.
	QIN B, LU Y, ZHAO J, et al. High-controllability distributed digital identity recognition system based on block chain: CN114528535A[P]. 2022-05-24. (in Chinese)

[1]	刘寅昊, 蒋文保, 孙林昆, 王勇攀. 基于路径存储表的Hashgraph共识算法优化与实现[J]. 计算机工程, 2024, 50(6): 166-178.
[2]	熊世强, 何道敬, 王振东, 杜润萌. 联邦学习及其安全与隐私保护研究综述[J]. 计算机工程, 2024, 50(5): 1-15.
[3]	旋逸昭, 赵红武, 金瑜. 一种基于双链的区块链共识机制[J]. 计算机工程, 2024, 50(5): 139-148.
[4]	王栋, 王合建, 玄佳兴, 郑尚卓, 陈炳聪. 面向电力调度指令的区块链隐私可追踪存证方案[J]. 计算机工程, 2024, 50(5): 158-166.
[5]	卢晓天, 朴春慧, 杨兴雨, 白英杰. 基于贝叶斯网络的差分隐私高维数据发布技术研究[J]. 计算机工程, 2024, 50(5): 167-181.
[6]	陈纪成, 包子健, 罗敏, 何德彪. 一种面向工业物联网的远程安全指令控制方案[J]. 计算机工程, 2024, 50(3): 28-35.
[7]	李宝莹, 李志淮, 王成爱, 杨锋. 自适应节点规模的区块链分片可扩展模型[J]. 计算机工程, 2024, 50(3): 137-147.
[8]	张晓均, 李兴鹏, 唐伟, 郝云溥, 薛婧婷. 云-边融合的可验证隐私保护跨域联邦学习方案[J]. 计算机工程, 2024, 50(3): 148-155.
[9]	刘少杰, 文斌, 王泽旭. 基于联邦学习的多技术融合数据交易方法[J]. 计算机工程, 2024, 50(3): 182-190.
[10]	叶晓东, 赵迎迎, 孙永奇, 赵思聪, 刘真. 基于非定长编码和滑动窗口的隐私保护记录链接方法[J]. 计算机工程, 2024, 50(2): 154-164.
[11]	倪雪莉, 马卓, 王群. 区块链矿池网络及典型攻击方式综述[J]. 计算机工程, 2024, 50(1): 17-29.
[12]	蔡梓越, 谭北海, 余荣, 黄旭民, 王思明. 面向6G物联网设备协同的区块链动态分片[J]. 计算机工程, 2024, 50(1): 50-59.
[13]	崔怀勇, 张绍华, 李超, 戴炳荣. 一种基于Schnorr签名的区块链预言机改进方案[J]. 计算机工程, 2024, 50(1): 166-173.
[14]	刘阳, 张圣杰. 一种基于时间自动机的安全智能合约生成方法[J]. 计算机工程, 2023, 49(9): 137-143, 157.
[15]	于莹莹, 丁红发, 蒋合领. 图数据精确最短距离的隐私保护外包计算方案[J]. 计算机工程, 2023, 49(9): 158-171.

选择文件类型/文献管理软件名称

选择包含的内容

分布式可信数据管理与隐私保护技术研究

Research on Distributed Trusted Data Management and Privacy Protection Technology

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献 25

相关文章 15

编辑推荐

Metrics

本文评价

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

分布式可信数据管理与隐私保护技术研究

Research on Distributed Trusted Data Management and Privacy Protection Technology

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献 25

相关文章 15

编辑推荐

Metrics

本文评价