基于双层链的个人隐私数据保护和授权框架

Personal Privacy Data Protection and Authorization Framework Based on Double-layer Chain

针对隐私泄露事件频繁发生且当前的保护方法无法避免恶意收集和恶意攻击的问题,提出了基于双层链的个人隐私数据保护和授权框架。该框架由验证链和授权链构成,通过跨链技术进行通信,不需要用户向服务商提供隐私数据就能获得服务。验证层负责验证数据并生成数据证明,授权层负责用户的授权,避免服务商得到用户隐私数据。此外,提出了基于顺序选举的RAFT改进算法和代理受益证明算法,分别应用在验证层和授权层,从而提高了共识速度和数据处理速度,解决了在没有激励机制的情况下如何维护公有链的问题。实验结果表明,所提框架保证了数据的真实性、安全性和可扩展性,平衡了隐私性和可追溯性。

In view of the frequent occurrence of privacy disclosure events and the current protection methods still couldn′t avoid malicious collection and attacks,a personal privacy data protection and authorization framework based on double-layer chain was proposed.The framework was composed of authentication chain and authorization chain.Through cross chain technology,users could obtain service without providing private data to service providers.The authentication layer was responsible for verifying data and generating data certificates,and the authorization layer was responsible for user authorization to prevent service providers from obtaining user privacy data.In addition,the improved RAFT algorithm based on the sequential election and delegated proof of benefit algorithm were proposed to be applied to the authentication layer and the authorization layer respectively,which could improve the speed of consensus and data processing,and solved the problem of how to maintain the public chain without incentive mechanism.The experimental results showed that the proposed framework ensured the authenticity,security and scalability of data,and balanced privacy and traceability.