CN114357490A

CN114357490A - Data sharing method, device and system based on block chain

Info

Publication number: CN114357490A
Application number: CN202210016171.8A
Authority: CN
Inventors: 李开元
Original assignee: Huazhong University of Science and Technology; Ezhou Institute of Industrial Technology Huazhong University of Science and Technology
Current assignee: Huazhong University of Science and Technology; Ezhou Institute of Industrial Technology Huazhong University of Science and Technology
Priority date: 2022-01-07
Filing date: 2022-01-07
Publication date: 2022-04-15

Abstract

The application provides a block chain-based data Sharing method, device and system, which are used for providing scientific research data acquisition and Sharing alliance block chain networks (SCSB) for each organization by constructing an alliance block chain platform in the aspect of scientific research, so that the problems of data leakage and network security risk are solved on the premise of Sharing data. The method comprises the following steps: after the alliance blockchain platform is added, the blockchain nodes acquire scientific research data of scientific research institutions or disease data of hospitals from the under-chain acquisition nodes in the belonged blockchain node network organization; the block chain link is used for packing scientific research data or illness state data acquired from the under-chain acquisition nodes according to the data requirements of the alliance block chain platform to obtain to-be-linked chain data; and the block chain nodes submit the data to be linked to the alliance block chain platform, and the account book is written after the different block chain nodes in the alliance block chain platform achieve consensus so as to provide data sharing service.

Description

Data sharing method, device and system based on block chain

Technical Field

The present application relates to the field of data sharing, and in particular, to a method, an apparatus, and a system for sharing data based on a block chain.

Background

The data security guarantee is a necessary premise for realizing data sharing, at present, scientific research data sharing in China is still in a starting stage, faces higher security risk and management dilemma, and is mainly embodied in two aspects of data leakage and network security.

One is that the risk of disclosure of sensitive data and private data increases with data mining and data integration exchange. In the big data era, the data development and application often easily infringe the safety and privacy of the public, enterprises, organizations and even countries, but the scientific research data volume is large, the sources are wide, the storage is centralized, and the data stealing, abuse and transaction become easier; moreover, scientific research data and different data sources are organically integrated, certain characteristics of private data can be gradually mined, sensitive data are leaked and invaded, multiple scientific research institutions are unwilling to share the sensitive data, potential safety hazards possibly brought by data sharing are worried about, and responsibility is feared to be undertaken. Therefore, protecting data privacy becomes a necessary premise and a necessary guarantee for realizing data sharing.

Secondly, the structure of the central platform architecture is more vulnerable to network attacks. At present, central scientific research institutions are the main owners of scientific research data, and general big data storage, transmission and processing are all carried out through highly concentrated central server, and many scientific research institutions have begun to store data resources through purchasing cloud computing service, further cause data to concentrate to all kinds of high in the clouds, once the server suffers from external hacker attack, must seriously threaten data security, even cause database to freeze, consequence such as data loss, forgery or malicious tampering. The micro data not only relates to the micro data of the public and the institutions, but also relates to the macro data which are related to the problems of scientific research safety and research safety, and the attack threatens the national safety and causes immeasurable loss in the whole society.

In view of the above, in the scientific research aspect, the data sharing scheme in the prior art has the problems of data leakage and network security risk.

Disclosure of Invention

The application provides a block chain-based data Sharing method, device and system, which are used for providing scientific research data acquisition and Sharing alliance block chain networks (SCSB) for each organization by constructing an alliance block chain platform in the aspect of scientific research, so that the problems of data leakage and network security risk are solved on the premise of Sharing data.

In a first aspect, the present application provides a data sharing method based on a block chain, including:

after different scientific research institutions and alliance block chain platforms formed by different hospitals are added, block chain nodes acquire scientific research data of the scientific research institutions or illness state data of the hospitals from under-chain acquisition nodes in charge of the block chain nodes in network organizations of the block chain nodes, the block chain nodes and the under-chain acquisition nodes belong to the same organization registered by the alliance block chain platform, and the under-chain acquisition nodes are nodes which are positioned outside the alliance block chain and used for providing data acquisition services for the block chain nodes;

the block chain link is used for packing scientific research data or illness state data acquired from the under-chain acquisition nodes according to the data requirements of the alliance block chain platform to obtain to-be-linked chain data;

and the block chain nodes submit the data to be linked to the alliance block chain platform, and the account book is written after the different block chain nodes in the alliance block chain platform achieve consensus so as to provide data sharing service.

With reference to the first aspect of the present application, in a first possible implementation manner of the first aspect of the present application, before acquiring scientific research data of a scientific research institution or medical data of a hospital from an under-chain acquisition node in which a blockchain node is responsible in a blockchain node network organization to which the blockchain node belongs, the method further includes:

constructing a alliance blockchain platform which is designed to be a six-layer platform structure, wherein the six-layer platform structure comprises a data layer, a network layer, a security layer, a consensus excitation layer, a contract layer and an application service layer,

the data layer encapsulates block data, a chain structure, a timestamp on a block head, a hash function, a Merkle tree, a random number on a block tail and a public key on a chain;

the network layer encapsulates a networking mode, a message propagation protocol and a data verification mechanism of the block chain system;

the security layer provides security guarantee for the whole block chain system of the alliance;

the consensus excitation layer encapsulates a consensus algorithm and an excitation mechanism based on statistical capability and statistical workload certification, and constructs a consensus excitation mechanism for participation of data providers, intermediaries and data users;

the contract layer encapsulates scripts, algorithms and intelligent contracts, and changes a block chain from an encapsulated system into a contract mechanism which can be programmed to carry out secondary development and even intelligent operation;

and the application service layer is positioned at the top of the six-layer platform structure and is an application program realized by codes.

With reference to the first aspect of the present application, in a second possible implementation manner of the first aspect of the present application, a block link point stores a data recording pool and a data controller;

the data recording pool stores the data of the block chain of the alliance;

the data controller is responsible for integrating scientific research data or illness state data uploaded by the collection nodes under the chain, and examining the quality of the collected data and controlling the shared access of the data according to the intelligent contract.

With reference to the first aspect of the present application, in a third possible implementation manner of the first aspect of the present application, before acquiring scientific research data of a scientific research institution or medical data of a hospital from an under-chain acquisition node in which a blockchain node is responsible in a blockchain node network organization to which the blockchain node belongs, the method further includes:

in the data acquisition node access stage, a downlink acquisition node is accessed to a alliance block chain platform through a block chain node to become a node which is positioned outside an alliance block chain and used for providing data acquisition service for the block chain node, wherein the block chain node utilizes an intelligent contract to automatically update, maintain, examine and import a basic unit name list library of the downlink acquisition node, an organization administrator stores basic information of the downlink acquisition node in the organization and a public key in an uplink mode through the name list library updated in real time, the matching relation between the public key and the downlink acquisition node and the content of the public key cannot be tampered are guaranteed, the public key is acquired from the alliance block chain platform, if the acquisition fails, the data acquisition node is not accessed by an organization administrator, subsequent operation is rejected, and outermost safety protection is provided for the alliance block chain platform.

With reference to the third possible implementation manner of the first aspect of the present application, in a fourth possible implementation manner of the first aspect of the present application, the method further includes:

in the data acquisition stage, in order to ensure that the acquired data is not tampered in the reporting process and the acquisition nodes and the block chain nodes are not attacked by illegal equipment, the block chain platform uses public and private keys generated in the data acquisition node access stage and adopts a bidirectional signature verification mechanism to identify the identity between the acquisition nodes and the block chain nodes and confirm the data.

With reference to the first aspect of the present application, in a fifth possible implementation manner of the first aspect of the present application, in a process of performing consensus on data to be uplink between different block chain nodes in a block chain platform, a block link point with a fastest statistical capability to calculate an effective result is used as a master node in a current consensus process, other block link point nodes are used as slave nodes, a bayesian Fault Tolerance (PBFT) consensus mechanism is used to perform block consensus, after the consensus is achieved, current data blocks are stored in the block chain platform in a sequentially connected manner according to a time sequence, and the master node obtains a union point reward due to data recording.

With reference to the first aspect of the present application, in a sixth possible implementation manner of the first aspect of the present application, during a data sharing process, a Merkle tree structure is used to perform hierarchical encryption and multi-level encryption, and according to different characteristics of three Merkle trees in a block, statistical data sharing on an alliance block chain platform is divided into three different levels:

at the first level, counting a Merkle tree in a transaction mode;

second level, overall statistics Merkle tree;

third level, individual statistics Merkle Tree.

In a second aspect, the present application provides a device for sharing data based on a block chain, where the device includes:

the acquisition unit is used for acquiring scientific research data of the scientific research institutions or illness state data of hospitals from under-chain acquisition nodes in charge of the acquisition unit in the block chain link point network organization to which the acquisition unit belongs after joining alliance block chain platforms formed by different scientific research institutions and different hospitals, wherein the block chain link points and the under-chain acquisition nodes belong to the same organization registered by the alliance block chain platform, and the under-chain acquisition nodes are nodes which are positioned outside the alliance block chain and used for providing data acquisition services for the block chain link points;

the packaging unit is used for packaging scientific research data or illness state data acquired from the under-chain acquisition nodes according to the data requirements of the block chain platform of the alliance to obtain to-be-linked data;

and the uplink unit is used for submitting the data to be uplink to the block chain platform of the alliance, and writing the account book after the different block chain nodes in the block chain platform of the alliance achieve consensus so as to provide data sharing service.

With reference to the second aspect of the present application, in a first possible implementation manner of the second aspect of the present application, before acquiring scientific research data of a scientific research institution or medical data of a hospital from an under-chain acquisition node in which a blockchain node is responsible in a blockchain node network organization to which the blockchain node belongs, the method further includes:

With reference to the second aspect of the present application, in a second possible implementation manner of the second aspect of the present application, a block link point stores a data recording pool and a data controller;

the data recording pool stores the data of the block chain of the alliance;

In combination with the second aspect of the present application, in a third possible implementation manner of the second aspect of the present application, in a data acquisition node access stage, a downlink acquisition node is accessed to a federation blockchain platform through a blockchain node to become a node located outside a federation blockchain and used for providing data acquisition service for blockchain link points, where the blockchain link points perform automatic update maintenance, audit and import on a base unit directory library of the downlink acquisition node by using an intelligent contract, an organization administrator stores basic information of the downlink acquisition node and a public key in the organization through the directory library updated in real time, so as to ensure that a matching relationship between the public key and the downlink acquisition node and the content of the public key cannot be tampered, the public key is obtained from the federation blockchain platform, and if the obtaining fails, it is indicated that the data acquisition node is not accessed by the organization administrator, and subsequent operations are rejected, and providing outermost safety protection for the block chain platform of the alliance.

In combination with the third possible implementation manner of the second aspect of the present application, in the data acquisition stage, in order to ensure that the acquired data is not tampered in the reporting process and that the acquisition nodes under the link and the block link nodes are not attacked by illegal devices, the block link platform uses public and private keys generated in the data acquisition node access stage to perform identity identification and data confirmation between the acquisition nodes under the link and the block link nodes by using a bidirectional signature verification mechanism.

With reference to the second aspect of the present application, in a fifth possible implementation manner of the second aspect of the present application, in a process of performing consensus on to-be-uplink data among different block chain nodes in a block chain platform of a federation, a block chain link point with a fastest statistical capability to calculate an effective result is used as a master node in a current consensus process, other block chain link point nodes are used as slave nodes, a PBFT consensus mechanism is adopted to perform block consensus, after the consensus is achieved, current data blocks are stored in the block chain platform of the federation in a sequentially connected manner according to a time sequence, and the master node obtains a federation credit reward due to recording data.

With reference to the second aspect of the present application, in a sixth possible implementation manner of the second aspect of the present application, during data sharing, a Merkle tree structure is used to perform hierarchical encryption and multi-level encryption, and according to different characteristics of three Merkle trees in a block, statistical data sharing on an alliance block chain platform is divided into three different levels:

at the first level, counting a Merkle tree in a transaction mode;

second level, overall statistics Merkle tree;

third level, individual statistics Merkle Tree.

In a third aspect, the present application provides a data sharing system based on a block chain, where the system includes a block chain node and a downlink acquisition node, where the block chain node and the downlink acquisition node both include a processor and a memory, where the memory stores a computer program, and when the processor calls the computer program in the memory, the processor executes the method provided in the first aspect of the present application or any possible implementation manner of the first aspect of the present application.

In a fourth aspect, the present application provides a computer-readable storage medium storing a plurality of instructions adapted to be loaded by a processor to perform the method provided in the first aspect of the present application or any one of the possible implementations of the first aspect of the present application.

From the above, the present application has the following advantageous effects:

in the aspect of scientific research between various research institutions and hospitals, for the related data sharing requirements, a alliance block chain platform is constructed, each block chain link point corresponds to an organization, a collection node under the chain collects relevant data of the organization for the block chain link point, the block chain link points carry out chain linking, and the alliance block chain platform provides data sharing service, so that the safety of data in the stages of input, storage, access and the like is guaranteed, the problems of data leakage and network safety risks are solved, and the efficient and safe scientific research environment is promoted.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present application, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.

Fig. 1 is a schematic flowchart of a block chain-based data sharing method according to the present application;

FIG. 2 is a schematic structural diagram of a block chain platform of the present application alliance;

FIG. 3 is a block chain architecture of the block chain platform of the present application alliance;

FIG. 4 is a schematic view of an operation scenario of the block chain platform of the federation of the present application;

fig. 5 is a schematic view of a scenario of an acquisition node under an access link according to the present application;

FIG. 6 is a schematic view of a scenario for data acquisition according to the present application;

FIG. 7 is a schematic structural diagram of a block chain-based data sharing apparatus according to the present application;

fig. 8 is a schematic structural diagram of the data sharing system based on the blockchain according to the present application.

Detailed Description

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

The terms "first," "second," and the like in the description and in the claims of the present application and in the above-described drawings are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It will be appreciated that the data so used may be interchanged under appropriate circumstances such that the embodiments described herein may be practiced otherwise than as specifically illustrated or described herein. Moreover, the terms "comprises," "comprising," and any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or modules is not necessarily limited to those steps or modules explicitly listed, but may include other steps or modules not expressly listed or inherent to such process, method, article, or apparatus. The naming or numbering of the steps appearing in the present application does not mean that the steps in the method flow have to be executed in the chronological/logical order indicated by the naming or numbering, and the named or numbered process steps may be executed in a modified order depending on the technical purpose to be achieved, as long as the same or similar technical effects are achieved.

The division of the modules presented in this application is a logical division, and in practical applications, there may be another division, for example, multiple modules may be combined or integrated into another system, or some features may be omitted, or not executed, and in addition, the shown or discussed coupling or direct coupling or communication connection between each other may be through some interfaces, and the indirect coupling or communication connection between the modules may be in an electrical or other similar form, which is not limited in this application. The modules or sub-modules described as separate components may or may not be physically separated, may or may not be physical modules, or may be distributed in a plurality of circuit modules, and some or all of the modules may be selected according to actual needs to achieve the purpose of the present disclosure.

Before describing the block chain-based data sharing method provided by the present application, the background related to the present application will be described first.

The block chain-based data sharing method, device and computer-readable storage medium provided by the application can be applied to a block chain-based data sharing system, and are used for providing SCSB (security coding scheme) for each organization by constructing an alliance block chain platform in the aspect of scientific research, so that the problems of data leakage and network security risk are solved on the premise of sharing data.

The execution main body of the method for sharing data based on a blockchain may be a blockchain-based data sharing device or a blockchain-based data sharing system integrating the blockchain-based data sharing device, where the blockchain-based data sharing device may be implemented in a hardware or software manner, the blockchain nodes in the blockchain-based data sharing system may be different types of devices such as a server, a physical host or a User Equipment (UE), the UE may specifically be a terminal device such as a smart phone, a tablet computer, a laptop computer, a desktop computer or a Personal Digital Assistant (PDA), and the system may further include a downlink collection node belonging to the same organization as the blockchain nodes, for providing collection services of data of related mechanisms for the organization to which the blockchain nodes belong, corresponding to the blockchain nodes, that is, a data source may be provided for the data sharing services involved in the federated blockchain platform.

Next, a block chain based data sharing method provided by the present application is described.

First, referring to fig. 1, fig. 1 shows a schematic flow chart of the block chain-based data sharing method according to the present application, and the block chain-based data sharing method according to the present application may specifically include the following steps S101 to S103:

step S101, after different scientific research institutions and alliance block chain platforms formed by different hospitals are added, block chain nodes acquire scientific research data of the scientific research institutions or illness state data of the hospitals from under-chain acquisition nodes in the block chain node network organization to which the block chain nodes belong, the block chain node and the under-chain acquisition nodes belong to the same organization registered by the alliance block chain platform, and the under-chain acquisition nodes are nodes which are positioned outside the alliance block chain and used for providing data acquisition services for the block chain node;

it can be understood that, for the architecture of the federated blockchain platform or federated blockchain network to which the present application relates, reference may also be made to a schematic structural diagram of the federated blockchain platform of the present application shown in fig. 2.

The block chain alliance platform is composed of various research institutions and hospitals, each institution serves as an organization configuration in an alliance, the organizations are embodied in the platform through block chain nodes, and scientific research data and disease data are collected and shared through the block chain alliance in a distribution mode based on the block chain.

For each bit organization, a block chain node is allocated, and of course, it is also possible to allocate a case where two or more block chain nodes belong to the same organization according to specific application.

In the organization, besides the blockchain node, a downlink acquisition node other than the federation blockchain platform may be further included, where the downlink acquisition node is, as is easily understood, specifically a node located outside the federation blockchain and used for providing data acquisition services for the blockchain link point, and the downlink acquisition node may be configured in the form of one client in the organization.

In the context of the above-described alliance blockchain platform, as a basis for normal data sharing, uplink of shared data may be involved, and at this time, data acquisition from a downlink acquisition node may begin from a blockchain node.

It can be understood that for the acquisition nodes under the chain, the acquisition nodes can be used for writing related data, such as scientific research data of scientific research institutions or disease data of hospitals, so that the data can be directly extracted from the local to the blockchain nodes; alternatively, the relevant data may be extracted to the blockchain node from other devices that make the connection.

In the process of acquiring the data to be linked, as a practical implementation mode, on one hand, current statistical data can be gathered from the down-link collection nodes in the organization at irregular time by the block link points; on the other hand, the statistical data can be actively reported to the block chain nodes of the organization by the down-chain collection node at regular time.

In addition, for obtaining the data to be uplink, it can be understood that the data to be uplink is generally obtained in a guidance manner such as a preset data type, data content, or data storage address, so as to be used for scientific research.

Step S102, the block chain nodes pack scientific research data or illness state data acquired from the under-chain acquisition nodes according to the data requirements of the alliance block chain platform to obtain to-be-linked chain data;

it can be understood that after acquiring scientific research data or disease data required for uplink in the current organization, the block link points can be packaged according to uplink requirements of the block link platforms of the alliances under contract requirements to obtain data to be uplink in a standard format.

The method can involve preset data processing such as data format conversion, abnormal data cleaning, data fusion and the like.

Step S103, the block link node submits the to-be-linked data to the alliance block link platform, and the book is written after the consensus among the different block link nodes in the alliance block link platform is achieved, so as to provide the data sharing service.

It can be understood that, in the data uplink process of the alliance blockchain platform, the data uplink process is performed based on a pre-configured consensus mechanism, if the block link points in the alliance blockchain platform achieve a passing consensus result for the uplink of the current to-be-uplink data, the uplink can be completed normally and written into the account book of the alliance blockchain platform, and then the data access service of the to-be-uplink data, that is, the data sharing service can be provided according to the preset data access form.

As can be seen from the embodiment shown in fig. 1, in the scientific research between each research institution and each hospital, for the related data sharing requirements, by constructing a block chain platform of an alliance, each block chain node corresponds to an organization, the acquisition nodes under the chain acquire the related data of the organization for the block chain node, and then the block chain node performs chain accessing, the data sharing service is provided through the block chain platform of the alliance, the security of the data in the stages of inputting, storing, accessing and the like is guaranteed, the problems of data leakage and network security risk are solved, and the efficient and safe scientific research environment is promoted.

Further, for the details of the alliance blockchain platform, the present application is configured with a further optimization scheme.

The construction of a federated blockchain platform may also be involved before providing data sharing services through the federated blockchain platform.

In the present application, referring to a schematic architecture of the block chain platform of the present application shown in fig. 3, as another practical implementation manner, the block chain platform of the present application can be designed as a six-layer platform structure, which specifically includes a data layer, a network layer, a security layer, a consensus excitation layer, a contract layer and an application service layer,

1. and the data layer encapsulates block data, a chain structure, a timestamp on a block head, a hash function, a Merkle tree, random numbers on a block tail, public keys on a chain and other related data on the chain.

The data in the block mainly includes various scientific research data, patient disease data and the like. The Merkle tree is designed by taking the Ethengfang block chain principle as reference, and comprises a scientific research disease Merkle tree (a block data structure obtained by using a Hash process for sharing transaction records and data evaluation records), a medical disease Merkle tree (a block data structure obtained by using a Hash process for summarized data of microscopic main bodies at different levels) and an overall statistics Merkle tree (a block data structure obtained by using a Hash process for a plurality of individual (same type) data sets). By establishing different statistical Merkle trees, the proper separation of macroscopic comprehensive information and microscopic individual information is realized in the data records, the use of scientific research data on different levels is met, the flexibility of data use permission is enhanced, and the safety, the order and the controllability of statistical data are ensured.

2. And the network layer encapsulates the networking mode, the message propagation protocol and the data verification mechanism of the block chain system.

The system is connected with servers of different scientific research institutions, servers of hospitals and even servers of a supervisor and the like through a P2P network, and a specific propagation protocol and a data verification mechanism are designed by combining actual statistical requirements, so that each node in a statistical block chain system can participate in the verification and accounting process of block data, the single-point failure problem caused by a centralized architecture is solved, and the safety problem of a traditional central architecture is relieved.

3. And the security layer provides security guarantee for the whole block chain system of the alliance.

Through a Hash algorithm, an asymmetric encryption technology and a digital signature technology, data acquisition based on a signature verification mechanism and data sharing based on multi-level authority management and multiple signature mechanisms are realized in the whole network system, identity verification and identity management are carried out on the acquisition nodes, the block chain nodes and the visitors under the chain, legal butt joint between the acquisition nodes under the chain and the corresponding block chain nodes is ensured, the visitors with authority are ensured to enter corresponding access spaces, and the safety and the non-repudiation of data are ensured.

4. The consensus excitation layer encapsulates a consensus algorithm and an excitation mechanism based on statistical capability and statistical workload certification, and constructs a consensus excitation mechanism for participation of data providers, intermediaries and data users;

the distributed statistical nodes reach consensus on the validity of block data in a decentralized block chain network, alliance points are used as a unified standard for internal incentive execution, points are issued to data providers and statistical processors in a unified operation mode in combination with data quality scoring, the points can be exchanged for service, an ecological system for releasing data value is constructed, the activity of statistical data participating in all parties is stimulated, data circulation is encouraged, and data service content and operation modes are deepened.

5. The contract layer encapsulates scripts, algorithms and intelligent contracts, and changes a block chain from an encapsulated system into a contract mechanism which can be programmed to carry out secondary development and even intelligent operation;

in the framework of the contract layer, intelligent contracts are required to be able to implement the following functions:

(1) an account system: public and private keys generated by block chain asymmetric encryption are combined with all main bodies in a statistical data acquisition sharing scene, so that an account management function with reliability, safety, convenience in use and friendliness to interaction is provided;

(2) data management: the basic data management functions of data acquisition, data retrieval, data permission interaction, data sharing and the like are realized;

(3) data service: the method realizes the processes of processing and customizing of Data sharing Service, automatic integration and authorization of Data based on a subscription mode, and provides an extensible customizing function facing Data-as-a-Service (DaaS);

(4) and (3) evaluating the data quality: the method has the advantages that the data quality evaluation quantification function is realized, and the recording and calculating functions of scientific research data quality evaluation are realized through evaluation feedback of a data user, data reference amount, data download amount statistics and data reference index h index.

6. And the application service layer is positioned at the top of the six-layer platform structure and is an application program realized by codes.

The App and the Web system call an intelligent contract through an interface, and are responsible for providing statistical data services facing a mobile terminal and a PC terminal for a user in a visual mode, specifically comprising data acquisition, data query, data source tracing, data analysis, data sharing and the like.

In addition, in terms of the operation of the alliance blockchain platform, as another practical implementation, a data recording pool and a data controller are stored in a blockchain link point;

the data recording pool stores the data of the alliance chain block;

On the software level of the block chain link points, through the configuration of the data recording pool and the data controller, through definite division of labor setting, more efficient data processing is realized.

In addition, regarding the operation aspect of the alliance blockchain platform, the application considers that the data acquisition, data examination, data chaining (consensus mechanism, data block generation) and data sharing can be specifically performed, and the overall working scenario can be understood by referring to an operation scenario diagram of the alliance blockchain platform of the application shown in fig. 4.

In the data acquisition part of the previous stage, the whole process can go through the following three stages: the method comprises a link down acquisition node access stage, a data acquisition stage and a data storage stage.

As another practical implementation manner, in the access phase of the acquisition node under the link, the acquisition node under the link can access the alliance block chain platform through the block chain node, and becomes a node outside the alliance block chain and used for providing data acquisition service for the block chain link point, wherein the block chain link point uses an intelligent contract to perform automatic update, maintenance, audit and import of the basic unit name book library of the acquisition node under the link, an organization administrator stores the basic information of the acquisition node under the link in the organization and the public key in the uplink through the name book library updated in real time, so as to ensure the matching relationship between the public key and the acquisition node under the link, and the content non-falsification access process of the public key, for example, referring to a scene diagram of the acquisition node under the access link shown in fig. 5, and the related public key can be obtained from the alliance block chain platform, if the obtaining fails, the data acquisition node is not accessed by an organization administrator, subsequent operation is refused, outermost safety protection is provided for the block chain platform of the alliance, in the process, the matching relation between the public key and the acquisition node under the chain and the content of the public key cannot be tampered are guaranteed, and safety and reliability guarantee is provided for subsequent data input.

Further, in the data collection phase, as another practical implementation manner, in order to ensure that the collected data is not tampered in the reporting process and that the collection nodes and the block chain nodes under the chain are not attacked by illegal devices, the block chain platform uses public and private keys generated in the data collection node access phase to perform identity recognition and data confirmation between the collection nodes under the chain and the block chain nodes by using a bidirectional signature verification mechanism, and related processing flows can be understood by referring to a scene schematic diagram of the data collection of the present application shown in fig. 6.

In the stage of verifying the identity of the blockchain node by the acquisition node under the chain, the blockchain node uses a private key to sign a data acquisition request and sends the data acquisition request to the acquisition node under the chain, the acquisition node under the chain acquires a public key of the blockchain node from the block chain platform of the alliance through the basic information of the blockchain node, then the public key is used for verifying the signature data of the blockchain node, and if the signature verification is successful, the identity verification of the blockchain node passes;

in the stage of verifying the identity of the collection node under the chain at the block link point, the collection node under the chain uses the private key to sign the statistical data and sends the statistical data to the block chain node, the block chain node obtains the public key of the collection node under the chain from the alliance block chain platform, then the signature data sent by the collection node is verified, if the verification is passed, the collection node identity authentication is considered to pass, the sent statistical data is not modified in the transmission process, in the data collection process, the signature and the signature are the same as in the stage of accessing the collection node under the chain, the private key for signature and the public key for signature verification are used.

In the data storage stage, the main task is that the block link points link and store the scientific research data or the illness state data received in the acquisition stage. Because the types and standard rules of the data from different sources are not consistent, the alliance node can automatically execute examination according to the written code on the intelligent contract and check and verify the content of the related data such as types, standards, ranges, quantity and the like and the electronic signature. When node data is not in compliance or is not reported in overtime, the corresponding codes are triggered to automatically send out real-time early warning of the whole network, and the early warning content and the fault reason are recorded on a block chain, so that responsibility tracing is facilitated. If the data passes the verification, the data is confirmed to be safe, complete and effective, and then the data can be stored in a local data recording pool, after a period of time, the block chain nodes can pack and integrate the effective data collected in the period of time into a data set, and the data set is encrypted and digitally signed, so that the legality and verification of the data set and the source are ensured.

As another practical implementation manner, in the process of identifying the data to be linked together among different block chain nodes in the alliance block chain platform, the block chain link point with the fastest statistical capability and calculated effective result is used as a main node in the current identifying process, the other block chain link point nodes are used as slave nodes, a PBFT identifying mechanism is used for block identifying, after the identifying is achieved, the current data blocks are stored in the alliance block chain platform in a sequential connection manner according to the time sequence, and the master node obtains alliance point reward due to the recorded data, so that the robustness of the whole system is ensured under the formula incentive mechanism.

In the data sharing part in the later stage, namely in the data sharing process, the method specifically adopts a Merkle tree structure to carry out hierarchical encryption and multilevel encryption, so that the problem of data leakage can be avoided, and according to the different characteristics of three Merkle trees in a block, the statistical data sharing on the alliance block chain platform is divided into three different levels:

at the first level, counting a Merkle tree in a transaction mode;

second level, overall statistics Merkle tree;

third level, individual statistics Merkle Tree.

In particular, reference is made to the following:

(1) transaction statistics Merkle tree. The access of the shared record and the data evaluation record does not need to set any authority, and the scene that the block chain node uses the intelligent contract to implement data sharing mainly comprises the following processes:

after the node a sends a data sharing request to the node b, the node b firstly checks the identity of the node a, after the check is passed, an intelligent contract is executed according to information such as data access purpose, time, frequency and the like contained in the request, meanwhile, the public key of the node a and the private key of the node b are used for carrying out asymmetric encryption on shared data and outputting a result, after the node a receives the data, the data are decrypted through the public key of the node b and the private key of the node b, data reading access is carried out, and the collection node under the chain can realize data sharing only by checking the identity of the collection node through the block chain link point of the organization.

(2) Population statistics Merkle tree. The access sharing of the summarized data of the microscopic main body on different levels, namely the macroscopic comprehensive data, is realized by deploying an access mechanism with multi-level access and multiple signatures by each block link point according to an intelligent contract agreed in advance. According to the social attributes of the visitors, the three aspects of security level, jurisdiction and function can be classified, meanwhile, macroscopic comprehensive data is managed in a grading mode according to the security level and the scope of the macroscopic comprehensive data, wherein the security level is classified into absolute security, confidentiality, secrecy and public, the scope of the macroscopic comprehensive data corresponds to the jurisdiction of the attributes of the visitors, and the statistical data is subjected to multistage access control through the processes of secret key generation, data encryption, multiple signatures and data decryption under specific strategies according to the related attributes of a sharing subject and an object.

(3) Individuals count the Merkle tree. The microscopic individual data sharing is authorized and controlled by a data real holder, namely a collection node under a chain, the individual data is encrypted by using a private key, partial data sharing is selected by setting the constraint conditions of the data sharing range, time limit and the like, and meanwhile, the data visitor behavior is normalized by using a computer program, and the method mainly comprises the following processes:

when the node c requests the node d for sharing individual data, the node d firstly checks the identity of the node c, after the identity of the node c is identified with the node c, the node d sets constraint conditions to limit the range, time, frequency and the like of the shared data, provides a private key for an intelligent contract to automatically execute data decryption, automatically matches related data according to the constraint conditions, finally encrypts the data by using the public key of the node c, and decrypts the data by using the private key of the node c to realize data sharing.

The above is an introduction of the data sharing method based on the block chain provided by the present application, and in order to better implement the data sharing method based on the block chain provided by the present application, the present application further provides a data sharing apparatus based on the block chain from the perspective of a functional module.

Referring to fig. 7, fig. 7 is a schematic structural diagram of a data sharing device based on a block chain according to the present application, in which the data sharing device 700 based on a block chain specifically includes the following structure:

the acquisition unit 701 is configured to acquire scientific research data of a scientific research institution or illness state data of a hospital from an under-chain acquisition node in charge of the acquisition unit in an affiliated block link point network organization after joining alliance block chain platforms formed by different scientific research institutions and different hospitals, where the block link point and the under-chain acquisition node belong to the same organization registered by the alliance block chain platform, and the under-chain acquisition node is a node located outside the alliance block chain and configured to provide data acquisition services for the block link point;

a packing unit 702, configured to pack scientific research data or illness state data acquired from an offline acquisition node according to data requirements of an alliance block chain platform, so as to obtain to-be-linked data;

the uplink unit 703 is configured to submit data to be uplink to the block chain alliance platform, and write an account book after reaching a consensus among different block chain nodes in the block chain alliance platform, so as to provide a data sharing service.

In another exemplary implementation manner, before the blockchain node acquires scientific research data of a scientific research institution or medical data of a hospital from an under-chain collection node in which the blockchain node is responsible in the blockchain node network organization, the method further includes:

In yet another exemplary implementation, the block link point stores a data log pool and a data controller;

the data recording pool stores the data of the block chain of the alliance;

In another exemplary implementation manner, in the data acquisition node access phase, the acquisition node under the chain accesses the alliance blockchain platform through the blockchain node to become a node which is positioned outside the alliance blockchain and used for providing data acquisition service for the blockchain node, the block chain link points automatically update, maintain, verify and import a basic unit name list library of the down-link acquisition nodes by using an intelligent contract, an organization administrator stores basic information of the down-link acquisition nodes and a public key in an organization in a chain through the name list library updated in real time, the matching relation between the public key and the down-link acquisition nodes and the content of the public key cannot be tampered are guaranteed, the public key is obtained from a alliance block chain platform, if the obtaining fails, the data acquisition nodes are not accessed by the organization administrator, the follow-up operation is refused, and the outermost layer safety protection is provided for the alliance block chain platform.

In another exemplary implementation manner, in the data acquisition stage, in order to ensure that the acquired data is not tampered in the reporting process and that the acquisition nodes and the blockchain nodes are not attacked by illegal devices, the blockchain platform uses public and private keys generated in the data acquisition node access stage to perform identity identification and data confirmation between the acquisition nodes and the blockchain nodes by using a bidirectional signature and signature verification mechanism.

In another exemplary implementation manner, in the process of identifying the data to be uplink jointly among different block chain nodes in the block chain alliance platform, the block chain link point with the fastest statistical capability and calculated effective result is used as a master node in the current identifying process, the other block chain link point nodes are used as slave nodes, a PBFT (basic block transport function) identifying mechanism is adopted to identify the blocks, the current data blocks are stored in the block chain alliance platform in a sequential connection manner according to a time sequence after the identification is achieved, and the master node obtains alliance point reward due to recording data.

In another exemplary implementation manner, during the data sharing process, a Merkle tree structure is adopted to perform hierarchical encryption and multi-level encryption, and according to different characteristics of three Merkle trees in a block, statistical data sharing on an alliance block chain platform is divided into three different levels:

at the first level, counting a Merkle tree in a transaction mode;

second level, overall statistics Merkle tree;

third level, individual statistics Merkle Tree.

The present application further provides a data sharing system based on a block chain from a hardware structure perspective, where the system includes a block chain node and a collection node under the chain, referring to fig. 8, fig. 8 shows a schematic structural diagram of the data sharing system based on a block chain in the present application, and as a whole, the data sharing system based on a block chain in the present application may include a processor 801, a memory 802, and an input/output device 803, where the processor 801 is configured to implement, when executing a computer program stored in the memory 802, the steps of the method in the corresponding embodiment in fig. 1; alternatively, the processor 801 is configured to implement the functions of the units in the embodiment corresponding to fig. 7 when executing the computer program stored in the memory 802, and the memory 802 is configured to store the computer program required by the processor 801 to execute the data sharing method based on the block chain in the embodiment corresponding to fig. 1.

Illustratively, a computer program may be partitioned into one or more modules/units, which are stored in the memory 802 and executed by the processor 801 to accomplish the present application. One or more modules/units may be a series of computer program instruction segments capable of performing certain functions, the instruction segments being used to describe the execution of a computer program in a computer device.

The data sharing system based on the block chain may include, but is not limited to, a processor 801, a memory 802, and an input-output device 803. Those skilled in the art will appreciate that the illustration is merely an example of a blockchain based data sharing system, and does not constitute a limitation of the blockchain based data sharing system, and may include more or less components than those illustrated, or combine some components, or different components, for example, the blockchain based data sharing system may further include a network access device, a bus, etc., and the processor 801, the memory 802, the input and output device 803, etc. are connected by the bus.

The Processor 801 may be a Central Processing Unit (CPU), other general purpose Processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA) or other Programmable logic device, discrete Gate or transistor logic, discrete hardware components, etc. The general purpose processor may be a microprocessor or the processor may be any conventional processor or the like, the processor being the control center of a blockchain based data sharing system, with various interfaces and lines connecting the various parts of the overall device.

The memory 802 may be used to store computer programs and/or modules, and the processor 801 may implement various functions of the computer device by running or executing the computer programs and/or modules stored in the memory 802 and invoking data stored in the memory 802. The memory 802 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application program required for at least one function, and the like; the storage data area may store data created according to the use of the block chain-based data sharing system, and the like. In addition, the memory may include high speed random access memory, and may also include non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), at least one magnetic disk storage device, a Flash memory device, or other volatile solid state storage device.

The processor 801, when executing the computer program stored in the memory 802, may specifically implement the following functions:

It can be clearly understood by those skilled in the art that, for convenience and brevity of description, the above-described specific working processes of the device and system for sharing data based on a block chain and the corresponding units thereof may refer to the description of the method for sharing data based on a block chain in the corresponding embodiment of fig. 1, and are not described herein again in detail.

It will be understood by those skilled in the art that all or part of the steps of the methods of the above embodiments may be performed by instructions or by associated hardware controlled by the instructions, which may be stored in a computer readable storage medium and loaded and executed by a processor.

For this reason, the present application provides a computer-readable storage medium, where a plurality of instructions are stored, where the instructions can be loaded by a processor to execute the steps of the data sharing method based on the block chain in the embodiment corresponding to fig. 1 in the present application, and specific operations may refer to the description of the data sharing method based on the block chain in the embodiment corresponding to fig. 1, and are not described herein again.

Wherein the computer-readable storage medium may include: read Only Memory (ROM), Random Access Memory (RAM), magnetic or optical disks, and the like.

Since the instructions stored in the computer-readable storage medium can execute the steps of the data sharing method based on the block chain in the embodiment corresponding to fig. 1, the beneficial effects that can be achieved by the data sharing method based on the block chain in the embodiment corresponding to fig. 1 can be achieved, for details, see the foregoing description, and are not repeated herein.

The block chain-based data sharing method, apparatus, system and computer-readable storage medium provided in the present application are described in detail above, and a specific example is applied in the present application to explain the principles and embodiments of the present application, and the description of the above embodiment is only used to help understand the method and core ideas of the present application; meanwhile, for those skilled in the art, according to the idea of the present application, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present application.

Claims

1. A method for sharing data based on a block chain, the method comprising:

after different scientific research institutions and alliance blockchain platforms formed by different hospitals are added, blockchain nodes acquire scientific research data of the scientific research institutions or illness state data of the hospitals from under-chain acquisition nodes in the belonged blockchain node network organization, wherein the blockchain nodes and the under-chain acquisition nodes belong to the same organization registered by the alliance blockchain platform, and the under-chain acquisition nodes are nodes which are positioned outside the alliance blockchain and used for providing data acquisition services for the blockchain nodes;

the block chain link packs the scientific research data or the illness state data acquired from the under-chain acquisition nodes according to the data requirements of the alliance block chain platform to obtain to-be-linked chain data;

and the block chain link point submits the data to be uplink to the alliance block chain platform, and an account book is written after consensus among different block chain nodes in the alliance block chain platform is achieved so as to provide data sharing service.

2. The method of claim 1, wherein the blockchain node, prior to obtaining scientific research data of a scientific research institution or medical data of a hospital from an under-chain collection node in charge of the blockchain node in the blockchain node network organization, further comprises:

constructing the block chain platform, wherein the block chain platform is designed into a six-layer platform structure, the six-layer platform structure comprises a data layer, a network layer, a security layer, a consensus excitation layer, a contract layer and an application service layer,

the application service layer is positioned at the top end of the six-layer platform structure and is an application program realized by codes.

3. The method of claim 1, wherein the blockchain node stores a pool of data records and a data controller;

the data recording pool stores block data of a block chain of the alliance;

and the data controller is responsible for integrating the scientific research data or the illness state data uploaded by the acquisition nodes under the chain, and examining the quality of the acquired data and controlling the shared access of the data according to an intelligent contract.

4. The method of claim 1, wherein the blockchain node, prior to obtaining scientific research data of a scientific research institution or medical data of a hospital from an under-chain collection node in charge of the blockchain node in the blockchain node network organization, further comprises:

in the data acquisition node access stage, the downlink acquisition node accesses the alliance blockchain platform through the blockchain link point to become a node which is positioned outside the alliance blockchain and used for providing data acquisition service for the blockchain node, wherein, the block chain node utilizes an intelligent contract to automatically update, maintain, verify and import the basic unit directory library of the downlink acquisition node, an organization administrator stores the basic information of the downlink acquisition node and the public key in the organization through the directory library updated in real time, thereby ensuring the matching relationship between the public key and the downlink acquisition node and the non-falsification of the content of the public key, and if the public key is acquired from the block chain platform, the public key indicates that the data acquisition node is not accessed by an organization administrator, subsequent operation is refused, and outermost layer safety protection is provided for the block chain platform.

5. The method of claim 4, further comprising:

in the data acquisition stage, in order to ensure that the acquired data is not tampered in the reporting process and the acquisition nodes under the chain and the block chain nodes are not attacked by illegal equipment, the block chain platform adopts a bidirectional signature verification mechanism to identify the identity and confirm the data between the acquisition nodes under the chain and the block chain nodes by using public and private keys generated in the data acquisition node access stage.

6. The method according to claim 1, wherein during the process of consensus on uplink data among different blockchain nodes in the alliance blockchain platform, the blockchain node point with the fastest statistical capability to calculate a valid result is used as a master node in the current consensus process, the other blockchain node points are used as slave nodes, a bayesian fault-tolerant PBFT consensus mechanism is adopted to perform blockchain consensus, after consensus is achieved, current data blocks are stored in the alliance blockchain platform in a sequential connection manner according to a time sequence, and the master node obtains alliance point reward due to recording data.

7. The method according to claim 1, wherein during the data sharing process, a Merkle tree structure is adopted to perform hierarchical encryption and multi-level encryption, and according to different characteristics of three Merkle trees in a block, the statistical data sharing on the alliance block chain platform is divided into three different levels:

at the first level, counting a Merkle tree in a transaction mode;

second level, overall statistics Merkle tree;

third level, individual statistics Merkle Tree.

8. An apparatus for data sharing based on a blockchain, the apparatus comprising:

the system comprises an acquisition unit, a processing unit and a processing unit, wherein the acquisition unit is used for acquiring scientific research data of scientific research institutions or illness state data of hospitals from under-chain acquisition nodes in charge of the acquisition unit in block chain link point network organizations to which the acquisition unit is responsible after joining alliance block chain platforms formed by different scientific research institutions and different hospitals, the block chain nodes and the under-chain acquisition nodes belong to the same organization registered by the alliance block chain platform, and the under-chain acquisition nodes are nodes which are positioned outside the alliance block chain and used for providing data acquisition services for the block chain nodes;

the packaging unit is used for packaging the scientific research data or the illness state data acquired from the under-chain acquisition node according to the data requirement of the alliance block chain platform to obtain to-be-linked data;

and the uplink unit is used for submitting the data to be uplink to the block chain alliance platform, and writing an account book after the different block chain nodes in the block chain alliance platform achieve consensus so as to provide data sharing service.

9. A blockchain based data sharing system, the system comprising a blockchain node and a down-link acquisition node, the blockchain node and the down-link acquisition node each comprising a processor and a memory, the memory having stored therein a computer program, the processor when calling the computer program in the memory performing the method according to any one of claims 1 to 7.

10. A computer-readable storage medium storing a plurality of instructions adapted to be loaded by a processor to perform the method of any one of claims 1 to 7.