Research on Distributed Trusted Data Management and Privacy Protection Technology

doi:10.19678/j.issn.1000-3428.0068120

Abstract

Abstract:

Blockchain systems provide better distribution, transparency, and trustworthiness than traditional distributed database systems in terms of bookkeeping methods. To address the trust and privacy leakage problems that exist in traditional centralized data management mechanisms, this study proposes a distributed trusted data management model that supports privacy protection. The model adopts key technologies, such as distributed storage, data privacy protection, access control, and distributed identity, to realize trusted data management and collaborative privacy protection. In terms of data privacy protection, user data privacy is guaranteed based on homomorphic encryption and a zero-knowledge proof algorithm protocol. Data access control is realized by combining an on-chain group isolation mechanism with node storage drop disk encryption technology, returning privacy control to the owner. In terms of user identity privacy protection, distributed identity technology is used to store physical identity and verifiable credentials off-chain to minimize entity information or share it within a controlled range as needed. The system prototype is built and tested for blockchain throughput. The results show that for get requests, Transactions Per Second (TPS) reaches 811.2, and for set requests, TPS reaches 225.5, with an accuracy rate of 100%. The system testing results show that the model's functionality, security, and feasibility meet expectations, with superior performance.

Key words: blockchain, privacy protection, trusted data, access control, distributed identity

摘要：

相较于传统的分布式数据库系统, 区块链技术在处理记账事务方面展现出更好的分布性、透明性和可信性, 且传统中心化数据库系统存在严重的隐私泄露问题。针对传统中心化数据管理机制中存在的信任问题和隐私泄露问题, 提出一种支持隐私保护的分布式可信数据管理模型。该模型采用分布式存储、数据隐私保护、访问控制和分布式身份等关键技术来实现数据的可信管理和协同隐私保护。在数据隐私保护方面, 基于同态加密和零知识证明算法协议保障用户的数据隐私。在数据访问控制方面, 结合链上群组隔离机制和节点存储落盘加密技术实现数据访问控制, 将隐私控制回归属主。在用户身份隐私保护方面, 利用分布式身份技术将物理身份和可验证凭证进行链下存储, 将实体信息最小化或根据需要在受控范围内共享。搭建系统原型并测试系统区块链吞吐量, 结果表明, 针对get请求, 每秒完成的事务数(TPS)达到811.2, set请求的TPS达到225.5, 正确率均为100%。系统测试结果验证了该模型在功能性、安全性和可行性方面符合预期, 性能较优。

关键词: 区块链, 隐私保护, 可信数据, 访问控制, 分布式身份

Qing'an ZHENG, Jiancheng DONG, Liang CHEN, Yingqing RUAN, Jinsong LI, Linbin XU. Research on Distributed Trusted Data Management and Privacy Protection Technology[J]. Computer Engineering, 2024, 50(7): 174-186.

郑清安, 董建成, 陈亮, 阮英清, 李锦松, 许林彬. 分布式可信数据管理与隐私保护技术研究[J]. 计算机工程, 2024, 50(7): 174-186.

/ Recommend / Download Citations

URL: https://www.ecice06.com/EN/10.19678/j.issn.1000-3428.0068120

https://www.ecice06.com/EN/Y2024/V50/I7/174

Figures/Tables 10

References 25

1	IMANE E A, YOUSSEF G. Network security strategies in big data context. Procedia Computer Science, 2020, 175, 730- 736. doi: 10.1016/j.procs.2020.07.108
2	代闯闯, 栾海晶, 杨雪莹, 等. 区块链技术研究综述. 计算机科学, 2021, 48(S2): 500- 508. URL
	DAI C C, LUAN H J, YANG X Y, et al. Review of blockchain technology research. Computer Science, 2021, 48(S2): 500- 508. URL
3	ANAND M R, ANSHUMAN K, AN B, et al. Privacy protected blockchain based architecture and implementation for sharing of students' credentials. Information Processing and Management, 2021, 58(3): 102512. doi: 10.1016/j.ipm.2021.102512
4	FENG J, WANG Y, WANG J, et al. Blockchain-based data management and edge-assisted trusted cloaking area construction for location privacy protection in vehicular networks. IEEE Internet of Things Journal, 2021, 8(4): 2087- 2101. doi: 10.1109/JIOT.2020.3038468
5	ABBAS Y, PARIZI REZA M, ALI D, et al. Blockchain-enabled authentication handover with efficient privacy protection in SDN-based 5G networks. IEEE Transactions on Network Science and Engineering, 2019, 8(2): 1120- 1132.
6	程冠杰, 黄诤杰, 邓水光. 基于区块链与边缘计算的物联网数据管理. 物联网学报, 2020, 4(2): 1- 9. URL
	CHENG G J, HUANG Z J, DENG S G. Data management based on blockchain and edge computing for Internet of Things. Chinese Journal on Internet of Things, 2020, 4(2): 1- 9. URL
7	UDDIN M, STRANIERI A, GONDAL I, et al. A survey on the adoption of blockchain in IoT: challenges and solutions[EB/OL]. [2023-06-05]. https://www.semanticscholar.org/paper/A-Survey-on-the-Adoption-of-Blockchain-in-IoT%3A-and-Uddin-Stranieri/a1cdb81de39f32a8a0f51b33a84c13bbf0f18a4a.
8	王群, 李馥娟, 倪雪莉, 等. 区块链数据形成与隐私威胁. 计算机工程, 2023, 49(8): 1- 12. URL
	WANG Q, LI F J, NI X L, et al. Data formation and privacy threat of blockchain. Computer Engineering, 2023, 49(8): 1- 12. URL
9	MUNJAL K, BHATIA R. A systematic review of homomorphic encryption and its contributions in healthcare industry. Complex & Intelligent Systems, 2023, 9(4): 3759- 3786.
10	KILLER C, ECK M, RODRIGUES B, et al. ProvotuMN: decentralized, mix-net-based, and receipt-free voting system[EB/OL]. [2023-06-05]. https://www.researchgate.net/publication/362969435_ProvotuMN_Decentralized_Mix-Net-based_and_Receipt-free_Voting_System.
11	MARCOLLA C, SUCASAS V, MANZANO M, et al. Survey on fully homomorphic encryption, theory, and applications. Proceedings of the IEEE, 2022, 110(10): 1572- 1609. doi: 10.1109/JPROC.2022.3205665
12	邵航, 高思琪, 钟离, 等. 同态加密在隐私计算中的应用综述. 信息通信技术与政策, 2022,(8): 75- 88. URL
	SHAO H, GAO S Q, ZHONG L, et al. Homomorphic encryption protocols and applications in privacy preserving computation. Information and Communications Technology and Policy, 2022,(8): 75- 88. URL
13	RIVEST R L, SHAMIR A, ADLEMAN L M. Cryptographic communications system and method: US4405829[P]. 1983-09-20.
14	PAILLIER P. Public-key cryptosystems based on composite degree residuosity classes[C]//Proceedings of the 17th International Conference on Theory and Application of Cryptographic Techniques. New York, USA: ACM Press, 1999: 223-238.
15	GENTRY C, SAHAI A, WATERS B. Homomorphic encryption from learning with errors: conceptually-simpler, asymptotically-faster, attribute-based[EB/OL]. [2023-06-05]. https://link.springer.com/chapter/10.1007/978-3-642-40041-4_5.
16	李一聪, 周宽久, 王梓仲. 基于零知识证明的区块链隐私保护研究. 空间控制技术与应用, 2022, 48(1): 44- 52. URL
	LI Y C, ZHOU K J, WANG Z Z. A survey of block chain privacy protection research based on zero-knowledge proof. Aerospace Control and Application, 2022, 48(1): 44- 52. URL
17	GENNARO R, GENTRY C, PARNO B, et al. Quadratic span programs and succinct NIZKs without PCPs[EB/OL]. [2023-06-05]. https://link.springer.com/chapter/10.1007/978-3-642-38348-9_37.
18	ELI BEN S, IDDO B, YINON H, et al. Scalable, transparent, and post-quantum secure computational integrity[EB/OL]. [2023-06-05]. https://eprint.iacr.org/2018/046.
19	WILLIAMSON Z J. The AZTEC protocol[EB/OL]. [2023-06-05]. https://github.com/AztecProtocol/AZTEC.
20	BEN SASSON E, CHIESA A, GARMAN C, et al. Zerocash: decentralized anonymous payments from Bitcoin[C]//Proceedings of 2014 IEEE Symposium on Security and Privacy. Washington D. C., USA: IEEE Press, 2014: 459-474.
21	LI C, SHANG L, WEI Z, et al. Commodity-Tra: a traceable transaction scheme based on FISCO BCOS[EB/OL]. [2023-06-05]. https://link.springer.com/chapter/10.1007/978-981-19-7242-3_17.
22	ZHU P, HU J, ZHANG Y, et al. A blockchain based solution for medication anti-counterfeiting and traceability. IEEE Access, 2020, 8, 184256- 184272. doi: 10.1109/ACCESS.2020.3029196
23	XU C, XU J, HU H, et al. When query authentication meets fine-grained access control: a zero-knowledge approach[EB/OL]. [2023-06-05]. https://xuc.me/file/paper/SIGMOD18.pdf.
24	CLAUDIA A, TUDOR C, IONUT A, et al. Distributed ledger technology review and decentralized applications development guidelines. Future Internet, 2021, 13(3): 62.
25	秦备, 卢毅, 赵俊, 等. 一种基于区块链的高可控分布式数字身份识别系统: CN114528535A[P]. 2022-05-24.
	QIN B, LU Y, ZHAO J, et al. High-controllability distributed digital identity recognition system based on block chain: CN114528535A[P]. 2022-05-24. (in Chinese)

[1]	Yifeng WANG, Cheng ZENG, Qingyu QUAN, Jiaoran WANG, Peng HE. Smart Contract Defect Detection Method Based on Multi-Feature Fusion [J]. Computer Engineering, 2024, 50(8): 133-141.
[2]	LIU Yinhao, JIANG Wenbao, SUN Linkun, WANG Yongpan. Optimization and Implementation of Hashgraph Consensus Algorithm Based on Path Storage Table [J]. Computer Engineering, 2024, 50(6): 166-178.
[3]	XIONG Shiqiang, HE Daojing, WANG Zhendong, DU Runmeng. Review of Federated Learning and Its Security and Privacy Protection [J]. Computer Engineering, 2024, 50(5): 1-15.
[4]	XUAN Yizhao, ZHAO Hongwu, JIN Yu. A Dual-Chain-Based Consensus Mechanism for Blockchain [J]. Computer Engineering, 2024, 50(5): 139-148.
[5]	WANG Dong, WANG Hejian, XUAN Jiaxing, ZHENG Shangzhuo, CHEN Bingcong. Blockchain Privacy-Traceable Deposit Scheme for Power-Dispatch Instructions [J]. Computer Engineering, 2024, 50(5): 158-166.
[6]	LU Xiaotian, PIAO Chunhui, YANG Xingyu, BAI Yingjie. Research on Differential Privacy High Dimensional Data Publishing Technology Based on Bayesian Networks [J]. Computer Engineering, 2024, 50(5): 167-181.
[7]	Jicheng CHEN, Zijian BAO, Min LUO, Debiao HE. A Security Remote Command Control Scheme for Industrial Internet of Things [J]. Computer Engineering, 2024, 50(3): 28-35.
[8]	Baoying LI, Zhihuai LI, Chengai WANG, Feng YANG. Blockchain Sharding Scalable Model of Adaptive Node Scale [J]. Computer Engineering, 2024, 50(3): 137-147.
[9]	Shaojie LIU, Bin WEN, Zexu WANG. Multi-Technology Fused Data Trading Method Based on Federated Learning [J]. Computer Engineering, 2024, 50(3): 182-190.
[10]	Xiaodong YE, Yingying ZHAO, Yongqi SUN, Sicong ZHAO, Zhen LIU. Privacy-Preserving Record Linkage Method Based on Variable-Length Coding and Sliding Window [J]. Computer Engineering, 2024, 50(2): 154-164.
[11]	MA Chao, SONG Chen. Research on Smart Contract Uplink Method and Tamper Resistance Technology Considering Power Data Security [J]. Computer Engineering, 2024, 50(10): 240-254.
[12]	Huaiyong CUI, Shaohua ZHANG, Chao LI, Bingrong DAI. An Improved Scheme for Blockchain Oracle Based on Schnorr Signature [J]. Computer Engineering, 2024, 50(1): 166-173.
[13]	Xueli NI, Zhuo MA, Qun WANG. Overview of Blockchain Mining Pool Networks and Typical Attack Modes [J]. Computer Engineering, 2024, 50(1): 17-29.
[14]	Ziyue CAI, Beihai TAN, Rong YU, Xumin HUANG, Siming WANG. Dynamic Blockchain Sharding for 6G Internet of Things Devices Collaboration [J]. Computer Engineering, 2024, 50(1): 50-59.
[15]	Yang LIU, Shengjie ZHANG. A Secure Smart Contract Generation Method Based on Timed Automata [J]. Computer Engineering, 2023, 49(9): 137-143, 157.

Please choose a citation manager

Content to export