区块链数据形成与隐私威胁  

Data Formation and Privacy Threat of Blockchain

作　　者：王群[1,2] 李馥娟 倪雪莉[1,2] 夏玲玲 梁广俊 WANG Qun;LI Fujuan;NI Xueli;XIA Lingling;LIANG Guangjun(Department of Computer Information and Cybersecurity,Jiangsu Police Institute,Nanjing 210031,China;Jiangsu Electronic Data Forensics and Analysis Engineering Research Center,Nanjing 210031,China;State Key Laboratory for Novel Software Technology at Nanjing University,Nanjing 210093,China)

机构地区：[1]江苏警官学院计算机信息与网络安全系,南京210031 [2]江苏省电子数据取证分析工程研究中心,南京210031 [3]计算机软件新技术国家重点实验室(南京大学),南京210093

出　　处：《计算机工程》2023年第8期1-12,共12页Computer Engineering

基　　金：国家自然科学基金(61802155);江苏省高校自然科学研究重大项目(20KJA520004);江苏省社会科学基金(21MLD012);计算机软件新技术国家重点实验室(南京大学)开放课题项目(KFKT2022B23);江苏省市场监督管理局科技计划项目(KJ21125027)。

摘　　要：区块链借助于密码学、共识算法、激励机制、点对点网络、分布式账本、智能合约等关键技术,在没有第三方权威机构参与的互不信任网络环境中,实现了对事务记录的分布式一致性、不可篡改性、可溯源性等功能特性,构成了一种崭新的可信、安全、可编程的网络生态。与此同时,支撑区块链自身功能实现的相关技术及机制也带来了隐私安全问题。将隐私作为个人数据的一个子集进行研究,从而将区块链数据划分为事务数据和区块数据等2种类型,并通过对区块链数据的解构以及对所得信息的关联,分析隐藏在数据中的隐私信息。从数据传输方式和数据结构方面介绍区块链数据构成;在分析区块链数据特点的基础上,综合对隐私的理解、度量、泄露途径等因素,给出区块链隐私的定义,并从身份隐私、数据隐私、网络隐私等方面进行分析;通过对网络安全、密码学安全、跨链操作、共识算法等方面带来的隐私泄露风险的分析,指出区块链隐私威胁存在的挑战和未来研究方向。The blockchain technology utilizes cryptography,consensus algorithms,incentive mechanism,Peer-to-Peer(P2P)network,distributed ledgers,smart contracts,and other key technologies.This enabled its application in a network environment without third-party authority and mutual distrust to realize distributed consistency,irreversibility,traceability,and other function characteristics for transaction records,and has constituted a new trusted,safe,and programmable network ecology.Simultaneously,the technologies and mechanisms underpinning blockchain realization have raised privacy concerns.Privacy is studied as a subset of personal data;thus,the blockchain data are divided into transaction data and block data.The blockchain data is deconstructed,the obtained information is associated to analyze the privacy information hidden in the data.To elaborate,the blockchain data structure is introduced from the perspective of the blockchain data transmission mode and data structure.Based on the analysis of the characteristics of blockchain data and by integrating factors such as understanding,measurement,and the privacy disclosure approach,a definition of blockchain privacy is provided.Blockchain privacy is analyzed in terms of identity,data,and network privacy.The challenges and research directions of blockchain privacy threats are highlighted by focusing on the analysis of privacy leakage risks brought about by network security,cryptographic security,cross-chain operations,and consensus algorithms.

关 键 词：区块链 隐私威胁 身份隐私 数据隐私 网络隐私 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]