Data Privacy-Preserving Scheme on Blockchain for Heterogeneous Multi-Chain

doi:10.3969/j.issn.1671-1122.2022.12.008

Abstract

Abstract:

In order to solve the problem of heterogeneous blockchain data privacy security, under the application scenario of knowledge payment, this paper proposed two data privacy protection schemes that support heterogeneous multi-chain, realizing knowledge sharing in the alliance chain and knowledge payment on the public chain. In the scheme, IPFS system was used to store knowledge files, which solved the problem of overloaded blockchain storage. In addition, in order to avoid the problem that the traditional public key encryption mechanism encrypts data for many times and repeatedly encrypts the data on the chain, this scheme used proxy re-encryption technology to achieve data sharing between the two parties involved. At the end of the paper, the author analyzed the security and performance of the method proposed in this paper from both theoretical and practical aspects.

Key words: blockchain, privacy-preserving, heterogeneous multi-chain, proxy re-encryption

CLC Number:

TP309

WANG Sidie, MA Zhaofeng, LUO Shoushan, XU Danheng. Data Privacy-Preserving Scheme on Blockchain for Heterogeneous Multi-Chain[J]. Netinfo Security, 2022, 22(12): 67-75.

Figures/Tables 10

References 24

[1]	iiMedia New Economic Industry Research Center. 2022-2023 China Knowledge Payment Industry Research and Consumer Behavior Analysis Report[R]. Guangzhou: iiMedia Research, IM43243, 2022.
	艾媒新经济产业研究中心. 2022-2023年中国知识付费行业研究及消费者行为分析报告[R]. 广州:艾媒咨询,IM43243, 2022.
[2]	MA Zhaofeng. Blockchain Technology Development Guide[M]. Beijing: Tsinghua University Press, 2020.
	马兆丰. 区块链技术开发指南[M]. 北京: 清华大学出版社, 2020.
[3]	NAKAMOTO S. Bitcoin: A Peer-to-Peer Electronic Cash System[EB/OL]. (2008-10-31) [2022-08-11]. https://bitcoin.org/bitcoin.pdf.
[4]	MA Zhaofeng, JIANG Ming, GAO Hongmin, et al. Blockchain for Digital Rights Management[J]. Future Generation Computer Systems, 2018, 89: 746-764. doi: 10.1016/j.future.2018.07.029 URL
[5]	ZHANG Ao, BAI Xiaoying. Summary of Research and Practice of Blockchain Privacy Protection[J]. Journal of Software, 2020, 31(5): 1406-1434.
	张奥, 白晓颖. 区块链隐私保护研究与实践综述[J]. 软件学报, 2020, 31(5):1406-1434.
[6]	ZHAI Sheping, TONG Tong, BAI Xifang. Blockchain-Based Attribute Proxy Re-Encryption Data Sharing Scheme[EB/OL]. (2022-07-20) [2022-07-30]. https://kns.cnki.net/kcms/detail/detail.aspx?dbcode=CAPJ&dbname=CAPJLAST&filename=JSGG20220718008&uniplatform=NZKPT&v=ZhiUyUsnOHCXWbRHbSs-i8HmSbiwkIzqHUAONULUsvormF6Uk5li-idNDjCQyAle.
	翟社平, 童彤, 白喜芳. 基于区块链的属性代理重加密数据共享方案[EB/OL]. (2022-07-20) [2022-07-30]. https://kns.cnki.net/kcms/detail/detail.aspx?dbcode=CAPJ&dbname= CAPJLAST&filename=JSGG20220718008&uniplatform=NZKPT&v=ZhiUyUsnOHCXWbRHbSs-i8HmSbiwkIzqHUAONULUsvormF6Uk5li-idNDjCQyAle.
[7]	LIU Shang, GUO Yinzhang. Multi-Authority Based CP-ABE Proxy Re-Encryption Scheme for Cloud Computing[J]. Chinese Journal of Network and Information Security, 2022, 8(3): 176-188.
[8]	POURNAGHI S M, BAYAT M, FARJAMI Y. MedSBA: A Novel and Secure Scheme to Share Medical Data Based on Blockchain Technology and Attribute-Based Encryption[J]. Journal of Ambient Intelligence and Humanized Computing, 2020, 11(11): 4613-4641. doi: 10.1007/s12652-020-01710-y URL
[9]	SHAMSHAD S, MAHMOOD K, KUMARI S, et al. A Secure Blockchain-Based E-Health Records Storage and Sharing Scheme[EB/OL]. [2022-07-11]. https://doi.org/10.1016/j.jisa.2020.102590.
[10]	ZHANG Xiaohong, SUN Lanlan. Attribute Proxy Re-Encryption for Ciphertext Storage Sharing Scheme on Blockchain[J]. Journal of System Simulation, 2020, 32(6): 1009-1020. doi: 10.16182/j.issn1004731x.joss.18-0658
	张小红, 孙岚岚. 属性代理重加密的区块链密文云存储共享研究[J]. 系统仿真学报, 2020, 32(6):1009-1020. doi: 10.16182/j.issn1004731x.joss.18-0658
[11]	SHAO Qifeng, JIN Cheqing, ZHANG Zhao, et al. Blockchain: Architecture and Research Progress[J]. Chinese Journal of Computers, 2018, 41(5): 969-988.
	邵奇峰, 金澈清, 张召, 等. 区块链技术:架构及进展[J]. 计算机学报, 2018, 41(5):969-988.
[12]	MA Zhaofeng, WANG Lingyun, ZHAO Weizhe. Blockchain-Driven Trusted Data Sharing with Privacy Protection in IoT Sensor Network[J]. IEEE Sensors Journal, 2021, 21(22): 25472-25479. doi: 10.1109/JSEN.2020.3046752 URL
[13]	XIA Xiaolei, REN Yingzhi. Summary of Technical Application of Blockchain in the Field of Shared Data[J]. China Invention & Patent, 2020, 17(10): 35-41.
	夏晓蕾, 任盈之. 区块链在共享数据领域的技术应用综述[J]. 中国发明与专利, 2020, 17(10):35-41.
[14]	LI Peng. Implementation of Data Sharing Platform Based on Blockchain Technology[J]. Network Security Technology and Application, 2022(6): 64-65.
	李鹏. 基于区块链技术的数据共享平台的实现[J]. 网络安全技术与应用, 2022(6):64-65.
[15]	CHU Chunyan. Research on the Application of Blockchain Technology in Government Data Sharing[J]. Electronic Technology & Software Engineering, 2022(11): 250-253.
	褚春燕. 区块链技术在政府数据共享中的应用研究[J]. 电子技术与软件工程, 2022(11):250-253.
[16]	PANG Zhen, YAO Yuan, ZHANG Xiaoqin. Secure Storage and Sharing of Medical Data Based on Blockchain[J]. Netinfo Security, 2021, 21(S1): 168-172.
	庞震, 姚远, 张晓琴. 基于区块链的医疗数据安全存储与共享方案[J]. 信息网络安全, 2021, 21(S1):168-172.
[17]	WANG Shangping, ZHANG Yinglong, ZHANG Yaling. A Blockchain-Based Framework for Data Sharing with Fine-Grained Access Control in Decentralized Storage System[J]. IEEE Access, 2018, 6: 38437-38450. doi: 10.1109/ACCESS.2018.2851611 URL
[18]	SHE Wei, HUO Lijuan, ZHAO Tian, et al. A Double Steganography Model Combining Blockchain and Interplanetary File System[J]. Peer-to-Peer Networking and Applications, 2021, 14(5): 3029-3042. doi: 10.1007/s12083-021-01143-0 URL
[19]	BLAZE M, BLEUMER G, STRAUSS M. Divertible Protocols and Atomic Proxy Cryptography[C]// Springer. International Conference on the Theory and Applications of Cryptographic Techniques. Heidelberg: Springer, 1998: 127-144.
[20]	ATENIESE G, FU K, GREEN M, et al. Improved Proxy Re-Encryption Schemes with Applications to Secure Distributed Storage[J]. ACM Transactions on Information and System Security, 2009, 9(1): 1-30. doi: 10.1145/1127345.1127346 URL
[21]	DU Ruizhong, ZHANG Tianhe, SHI Pengliang. Ciphertext Policy Hidden Access Control Scheme Based on Blockchain and Supporting Data Sharing[J]. Journal on Communications, 2022, 43(6): 168-178. doi: 10.11959/j.issn.1000-436x.2022119
	杜瑞忠, 张添赫, 石朋亮. 基于区块链且支持数据共享的密文策略隐藏访问控制方案[J]. 通信学报, 2022, 43(6):168-178. doi: 10.11959/j.issn.1000-436x.2022119
[22]	YANG Geng, GUO Rui, ZHUANG Chaoyuan, et al. Dynamically Updatable Attribute Based Proxy Re-Encryption Scheme in Cloud[J]. Journal of Cyber Security, 2022, 7(3): 43-55.
[23]	MA Zhaofeng, WANG Lingyun, WANG Xiaochang, et al. Blockchain-Enabled Decentralized Trust Management and Secure Usage Control of IoT Big Data[J]. IEEE Internet of Things Journal, 2020, 183: 4000-4003.
[24]	SHERLZP. GORECRYPT[EB/OL].(2020-04-05) [2022-08-05]. https://github.com/SherLzp/goRecrypt.

符号	含义
$ Key$	对称密钥
$ Has{{h}_{1}}$	$ C{{T}_{K}}$ 在IPFS上的指纹路径
$ (P{{K}_{KO}},S{{K}_{KO}})$	KO的公私钥对
$ (P{{K}_{KR}},S{{K}_{KR}})$	KR的公私钥对
$ (P{{K}_{KS}},S{{K}_{KS}})$	KS的公私钥对
$ En{{c}_{AES}}\left( M,Key \right)$	对称加密算法
$ De{{c}_{AES}}\left( C,PK \right)$	对称解密算法
$ Enc\left( M,PK \right)$	公钥加密算法
$ Dec\left( M,SK \right)$	解密算法
$ Knowledge$	知识原文
$ C{{T}_{K}}$	对知识原文进行对称加密后的密文
$ C{{T}_{HO}}$	使用KO公钥对$ \left( Has{{h}_{1}},Key \right)$ 加密生成的密文
$ R{{K}_{O\to R}}$	代理重加密密钥
$ C{{T}_{RK}}$	使用KS公钥对$ R{{K}_{O\to R}}$ 加密生成的密文
$ C{{T}_{HR}}$	可用KR私钥解密的密文
$ Setup\left( k \right)$	初始化算法
$ KeyGen$	密钥生成算法
$ R\text{e}KeyGen$	重加密密钥生成
$ ReEnc$	重加密算法
$ Address_{C-Chain}^{KR}$	KR在C链上的地址
$ Address_{C-Chain}^{KO}$	KO在C链上的地址
$ Address_{C-Chain}^{KS}$	KS在C链上的地址
$ Address_{K-Chain}^{KR}$	KR在K链上的地址
$ Address_{K-Chain}^{KO}$	KO在K链上的地址
$ Address_{K-Chain}^{KS}$	KS在K链上的地址
$ T{{x}_{i}}$	区块链交易
$ ID$	区块链交易ID
$ payload$	区块链交易数据内容
$ Timestamp$	区块链交易时间戳

方案	KO加密次数	KS解密次数	生成重加密密钥次数	密文转换次数	KR解密次数	计算开销
传统方案	2	1	0	0	1	$ 2\left( {{T}_{1}}+{{T}_{2}} \right)$
本文方案	1	0	1	1	1	$ {{T}_{1}}+{{T}_{2}}+{{T}_{3}}+{{T}_{4}}$

方案	KO加密次数	KS解密次数	生成重加密密钥次数	密文转换次数	KR解密次数	计算开销
传统方案	2K	K	0	0	K	$ 2K\left( {{T}_{1}}+{{T}_{2}} \right)$
本文方案	K	0	1	K	K	$ K\left( {{T}_{1}}+{{T}_{2}}+{{T}_{4}} \right)+{{T}_{3}}$