面向领域数据安全可信共享的云链融合系统  

Cloud-blockchain fusion system for secure and trusted sharing of domain data

作　　者：齐伊宁 秦宣梅 孙东红[2] 潘鸿运 李琪[2] 黄永峰[1] 王丹丹 QI Yining;QIN Xuanmei;SUN Donghong;PAN Hongyun;LI Qi;HUANG Yongfeng;WANG Dandan(Department of Electronic Engineering,Tsinghua University,Beijing 100084,China;Institute for Network Science and Cyberspace,Tsinghua University,Beijing 100084,China;Informatization and Industry Development Department,State Information Center,Beijing 100045,China)

机构地区：[1]清华大学电子系,北京100084 [2]清华大学网络科学与网络空间研究院,北京100084 [3]国家信息中心信息化和产业发展部,北京100045

出　　处：《中国传媒大学学报（自然科学版）》2022年第2期9-18,共10页Journal of Communication University of China：Science and Technology

基　　金：国家重点研发计划专项(2018YFB2101501);国家自然基金委联合基金重点项目(U1836204);工信部工业互联网创新发展工程专项(TC200H02Y和TC200H02X)。

摘　　要：针对领域大数据存储分散性的问题,引入区块链技术,提出了云计算和区块链结合的领域大数据共享管理的框架模型,设计云链融合的协同机制。在此基础上,建立了基于云链融合机制的共享数据标识编码与解析方法,实现分散数据的统一标识和定位寻址;提出轻量级加密访问控制方法,结合属性基加密机制实现领域数据的“可控可计量”共享访问;提出数据完整性审计方法,实现共享数据的完整性和可用性验证,提高领域数据的共享可信性。根据云链融合的领域大数据的共享管理框架模型以及相关技术,研发了一套面向分散领域大数据的安全可信共享软件系统,对上述模型和方法进行了有效性的验证和性能分析。该系统可以进一步扩展应用到涉及多个云环境的智慧城市评价、产业链协同等行业。At present,various domains such as smart city,industrial chain have recorded data of every business stage in different time and space.Big data in these domains is characterized by life cycle,information correlation and content integrity,which make the domain data form a typical chain and has high value.However,the storage of domain data is highly decentralized,which greatly affects the mining and utilization of domain data.To solve this problem,this paper introduces blockchain technology,proposes a framework model combining cloud computing and blockchain for sharing and management of domain data,and designs a collaborative scheme of cloud-blockchain fusion.On this basis,a shared data identification encoding and parsing method based on cloud-blockchain fusion scheme is established to realize unified identification and location addressing of dispersed data.Then,a lightweight access control method combined with attribute-based encryption mechanism is introduced to realize controllable and quantifiable sharing and access of domain data.Afterwards,a data integrity audit method is proposed to verify the integrity and availability of shared data,thus improving the credibility of shared domain data.According to the domain big data sharing framework model and related methods of cloud-blockchain fusion scheme,a set of secure and trusted shareware system for decentralized domain big data is developed,and the validity of the above model and methods is verified and performance analysis is conducted.The system can be further extended and applied to industries involving multiple cloud environments such as smart city evaluation and industrial chain collaboration.

关 键 词：领域大数据 云计算 区块链 云链融合 数据共享 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]