摘要
目前获取数据主体同意的方法主要是隐私条款方式,但并不能真正令数据主体获得对隐私数据的控制权。为了解决这个问题,提出将同意与访问控制技术相结合,利用区块链的去中心化、不可篡改的特性作为同意的监管平台,将数据访问视为一次交易,用智能合约实现隐私保护。提出一种基于目的限制的同意判定算法,以获得用户的同意,并验证了算法的正确性,通过区块链的监管平台可以实现用户的自主可控,根据不同的访问目的形成不同的合约,令隐私保护的智能合约可以定制。未来还需进一步对交易进行监督及验证,以判断数据访问者是否违反智能合约。
At present,the method of obtaining the consent of the data subject is mainly the privacy clauses,but it can not really make the data subject obtain the control over the private data.In order to solve this problem,it is proposed to combine consent with access control technology,use the decentralized and immutable characteristics of blockchain as a regulatory platform for consent,treat data access as a transaction,and realize privacy protection with smart contracts.A consent judgment algorithm based on purpose restriction is proposed to obtain the consent of users,and the correctness of the algorithm is verified.Through the supervision platform of blockchain,users can be autonomous and controllable,and different contracts can be formed according to different access purposes,so that smart contracts for privacy protection can be customized.In the future,transactions will need to be further monitored and verified to determine whether data visitors are violating smart contracts.
作者
马丽
Ma Li(Jiangxi Science&Technology Normal University,Nanchang 330038,China)
出处
《黑龙江科学》
2023年第14期118-121,共4页
Heilongjiang Science
基金
江西省社会科学基金项目“基于区块链和可定制智能合约的用户自主可控隐私保护研究”(No.21TQ08D)
江西省高校人文社会科学研究项目“基于用户同意的隐私数据扩散控制及溯源取证研究”(No.JC22115)。
关键词
个人数据保护
访问控制
区块链
智能合约
同意算法
Personal data protection
Access control
Blockchain
Smart contract
Consent algorithm
