CN109766712B - Credit reporting streaming method based on block chain and Intel SGX - Google Patents

Abstract

The invention discloses a credit reporting report circulation method based on block chain and Intel SGX. The method includes a credit reporting authorization stage, a credit reporting provision stage and a credit reporting query stage; the credit reporting authorization stage is a user-defined credit reporting stage. The credit report format and specific authorization information are set; in the credit reporting stage, the credit reporting agency generates a credit reporting report based on the report format and authorization information defined by individual users; the credit reporting query stage is when the financial institution inquires and reviews the credit reporting agency. Credit report provided. The report format, authorization information, credit report and report query records involved in the circulation process are encrypted by SGX and stored on the blockchain. The invention combines the blockchain and Intel SGX to realize the non-tampering, traceability and privacy protection of the data in the circulation process of the credit report, and solves the problem that the paper report caused by the traditional circulation method is easy to be tampered with and forged, the user's privacy concern is low, and it is impossible to Manage credit report abuse and other issues.

Description

A credit report transfer method based on blockchain and Intel SGX

technical field

The invention belongs to the technical field of blockchain, and in particular relates to a method for circulating credit reports based on blockchain.

Background technique

The credit report is a document that is collected, sorted, recorded, and processed by the credit reporting agency according to the law on the credit behavior traces of natural persons, legal persons and enterprises, and reflects their credit status and credit risks. Domestic banks, Internet credit and other financial companies usually require customers to provide credit reports when they provide customers with special services such as loans to buy houses and cars. In addition to the application in financial services such as loan application and credit card application by financial credit institutions, credit reporting reports also have important applications in many other fields. When many units recruit employees, they have changed the political review materials to personal credit reports, especially in banking, insurance, securities and other industries, requiring job seekers to provide personal credit reports, and personal credit reports have become an indispensable part of job search materials. content. In addition, in the housing rental industry, some lessors have asked renters to provide personal credit reports to prove the renters' integrity to prevent them from defaulting on rent or damaging housing facilities.

The traditional credit reporting report circulation process is that individual users first apply to the credit reporting agency, the credit reporting agency returns the paper report with the official seal of the institution to the individual user, and the individual user issues the paper report to the financial institution. With the increasing demand for issuing credit reports in many industries, the traditional credit report circulation method faces many problems. First, the paper credit report cannot effectively deal with tampering, forgery, loss and other issues during the circulation process, and the report receiving agency often questions the credibility of the paper report. Secondly, when users handle non-financial businesses and issue credit reports, they are often reluctant to disclose private information such as certificate numbers, date of birth, and marital status. Traditional credit reports use a unified report format, which is difficult to meet personalized privacy protection. new demands. Finally, the traditional circulation method does not protect the user's data sovereignty from the technical level. Once the paper report is submitted to the credit user, it cannot be controlled to be abused for other business. In a word, the traditional credit report circulation method makes paper reports easy to be tampered with and forged, users pay little attention to privacy, cannot control the abuse of credit reports, and it is difficult to adapt to various new business needs of many industries. A method of credible and controllable circulation of credit reports among multiple parties, such as credit reporting authorizers), credit reporting agencies (credit reporting providers), and financial institutions (credit reporting inquirers).

As a decentralized, non-tamperable, traceable, and multi-party jointly maintained distributed database, blockchain can establish reliable trust among multiple parties that do not trust each other, and achieve an epoch-making realization without the coordination of third-party intermediaries. Trusted data sharing and peer-to-peer value transfer. Based on the circulation of the credit report on the blockchain, the immutability, traceability and credibility of the credit data can be realized. However, in order to verify the transactions on the chain and prevent data tampering and loss, the traditional blockchain usually stores all transaction data openly and transparently on each node of the entire network, which obviously cannot protect private data. Intel SGX (Software Guard Extensions) can provide a trusted memory isolation space Enclave on the computing platform. No malware or even the operating system can access and affect the sensitive code and data inside the Enclave, thus ensuring the user's critical code and data. Confidentiality and Integrity. Combining blockchain and Intel SGX can achieve immutability, traceability, credibility and privacy of credit reports.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a method for the circulation of credit reports based on blockchain and Intel SGX in view of the deficiencies and defects of the traditional methods of circulation of credit reports. The method can also be applied to many-party applications (Many-PartyApplications) scenarios involving data authorizers, data providers, and data users, such as provident fund deposit certificates, personal income certificates, and tax payment certificates.

The concrete technical scheme that realizes the object of the present invention is:

A credit reporting report circulation method based on blockchain and Intel SGX, including a credit reporting authorization stage, a credit reporting provision stage, and a credit reporting query stage; the credit reporting authorization stage is an individual user-defined credit reporting report format, and is set up. In the credit reporting stage, the credit reporting agency generates a credit reporting report according to the report format and authorization information defined by the individual user; the credit reporting query stage is when the financial institution inquires and reviews the credit reporting report provided by the credit reporting agency; The involved credit report format, authorization information, credit report and report query records are encrypted by SGX and stored on the blockchain; among them:

The credit authorization stage includes the following steps:

Step A1: On the premise of satisfying the detailed credit information information required by the financial institution, the individual user customizes the credit reporting report format according to personal privacy needs to reduce the leakage of personal privacy data;

Step A2: The individual user clearly specifies the credit provider, the credit inquirer, the authorization time range, the reason for authorization and the specific authorization information of the digital signature;

Step A3: The individual user calls the smart contract to encrypt the credit report format and authorization information and write it into the blockchain;

The credit reference provision stage includes the following steps:

Step B1: The credit reporting agency invokes the smart contract to read the credit reporting report format and authorization information written by the individual user on the blockchain;

Step B2: The credit reporting agency extracts the credit reporting data of the individual user from the back-end credit reporting database according to the report format, and generates a credit reporting report;

Step B3: The credit reporting agency attaches the authorization information and digital signature provided by the individual user to the header or footer of each page of the credit reporting report to facilitate future verification;

Step B4: The credit reporting agency calls the smart contract to encrypt the credit reporting report and its digital signature and write it into the blockchain;

The credit inquiry stage includes the following steps:

Step C1: The financial institution invokes the smart contract to read the credit report and digital signature submitted by the credit reporting agency on the blockchain, and verifies the digital signature of the credit reporting agency;

Step C2: The financial institution verifies the authorization information of the individual user and verifies the digital signature of the individual user;

Step C3: The financial institution checks the credit report.

The step A3 includes the following steps:

Step A31: Verify the remote proof provided by the Enclave where the smart contract is located and establish an encrypted channel;

Step A32: call the smart contract and pass in the report format, authorization information and storage key;

Step A33: The smart contract verifies the digital signature of the individual user, and writes the individual user ID and storage key into the Enclave, so as to realize the blockchain data encryption based on the individual user ID;

Step A34: The smart contract encrypts the report format and authorization information based on the storage key, and writes the encrypted data into the blockchain state database.

The step B1 includes the following steps:

Step B11: Verify the remote proof provided by the Enclave where the smart contract is located and establish an encrypted channel;

Step B12: Query the smart contract based on the individual user ID and the credit reporting agency ID to obtain the credit reporting report format;

Step B13: The smart contract verifies the digital signature of the credit reporting agency, and queries the status database based on the individual user ID to obtain the encrypted credit reporting report format and authorization information;

Step B14: the smart contract obtains the storage key decryption data based on the personal user ID, and verifies the authority of the credit reporting agency based on the authorization information;

Step B15: The smart contract returns the credit report format and authorization information.

The step B4 includes the following steps:

Step B41: Verify the remote proof provided by the Enclave where the smart contract is located and establish an encrypted channel;

Step B42: call the smart contract and pass in the credit report;

Step B43: The smart contract verifies the digital signature of the credit reporting agency, and queries the state database based on the individual user ID and obtains encrypted authorization information;

Step B44: the smart contract obtains the storage key decryption data based on the personal user ID, and verifies the authority of the credit reporting agency based on the authorization information;

Step B45: The smart contract encrypts the credit report based on the storage key, and writes the encrypted data into the blockchain state database.

The step C1 includes the following steps:

Step C11: Verify the remote proof provided by the Enclave where the smart contract is located and establish an encrypted channel;

Step C12: Query the smart contract based on the individual user ID and the financial institution ID to obtain a credit report;

Step C13: The smart contract verifies the digital signature of the financial institution, and queries the state database based on the individual user ID and obtains encrypted authorization information;

Step C14: The smart contract first obtains the storage key decryption data based on the personal user ID, then verifies the authority of the financial institution based on the authorization information, and then stores the access record of the financial institution in the blockchain state database;

Step C15: The smart contract queries the state database based on the personal user ID and returns an encrypted credit report;

Step C16: The smart contract encrypts the data based on the storage key, and returns a credit report.

The beneficial effects of the present invention include:

From authorization, generation to query, the credit report is circulated on the blockchain based on SGX encryption, realizing the characteristics of complete traceability of the whole process and non-tampering of information, avoiding the tampering, forgery, loss and privacy of traditional paper information reports. leakage and many other issues. Once the authorization and query records are recorded on the blockchain, no one can tamper with them, avoiding the denial and disputes caused by traditional centralized databases. Individual users can customize the detailed format of the credit report, which not only flexibly protects personal privacy, but also meets the specific needs of various industries. Individual users can trace the authorization and query records of the credit report, which effectively prevents the credit report from being abused at will. Compared with traditional manual operations, the automatic operation and management of the whole process reduces the labor and counter and other physical operating costs of credit reporting agencies, and improves the operational efficiency and processing scale of credit reporting business. It saves individual users the toil of running back and forth. The data flow method based on blockchain and Intel SGX proposed by the present invention can also be applied to multi-party application scenarios involving data authorizers, data providers, and data users, such as provident fund payment certificates, personal income certificates, and tax payment certificates.

Description of drawings

Fig. 1 is the block chain node architecture diagram involved in the present invention;

FIG. 2 is a flow sequence diagram of a credit report proposed by the present invention.

Detailed ways

The present invention will be further described in detail with reference to the following specific embodiments and accompanying drawings. Except for the content specifically mentioned below, the process, conditions, experimental methods, etc. for implementing the present invention are all common knowledge and common knowledge in the field, and the present invention is not particularly limited.

Figure 1 shows the block chain node architecture diagram involved in the present invention. Blockchain is a decentralized, immutable, traceable, trusted, and multi-party shared distributed database. Intel SGX technology realizes the decryption and processing of encrypted data in the Enclave, which can avoid data leakage and protect data privacy. The invention combines the blockchain and Intel SGX to realize the immutability, traceability, credibility and privacy of the credit report. First, the smart contract runs in the Enclave provided by SGX, and all the data involved in the execution of the smart contract are encrypted; secondly, when individual users call the smart contract for the first time, they need to submit a storage key to the smart contract. The smart contract stores the key in the encrypted Enclave, and writes the block to the individual user based on the key. Encrypt all data with the state; finally, when individual users access historical encrypted data, they must be decrypted and read in the Enclave based on smart contracts, so their access records can be stored on the blockchain for future review and traceability, i.e. A historical record of when and why the credit report was queried by whom. Therefore, the blockchain nodes based on Figure 1 can simultaneously achieve data immutability, traceability, credibility and privacy.

Figure 2 shows the flow sequence diagram of the credit reporting report based on the blockchain and Intel SGX proposed by the present invention. The present invention includes three stages: a credit reporting authorization stage, a credit reporting providing stage and a credit reporting query stage. The functions of the three stages are described as follows:

The main participants in the credit authorization stage are individual users, and its core function is to customize the format of the credit report and set specific authorization information. On the premise of meeting the business needs of credit reporting users, the disclosure of personal privacy data is avoided by customizing the report format. The Grant method specifies the specific credit reporting institutions and financial institutions involved in the credit reporting report, and can further set the specific authorization information such as the authorization time range and authorization reasons according to the needs. Because the smart contract runs in the Enclave provided by SGX, before invoking the smart contract, it is necessary to perform remote attestation and establish an encrypted channel with the Enclave. When calling a smart contract, in addition to the report format and authorization information, it is also necessary to pass a storage key to encrypt all data stored on the blockchain by individual users, thereby realizing data privacy protection on the blockchain.

The main function of the smart contract in the credit authorization stage is to encrypt the report format and authorization information and submit it to the blockchain system. The Seal method encrypts and stores the storage key K in the Enclave according to the personal user ID, so as to realize the key management based on the user ID. After calling the Encrypt _K method and encrypting the report format and authorization information with the secret key K, the ciphertext can be stored in the blockchain state database according to the individual user ID.

The above is the specific implementation process of the credit authorization stage, which can be implemented in the blockchain system through the relevant codes in the following method 1. The code of method 1 is as follows:

The main participants in the credit reporting stage are credit reporting agencies, whose core function is to generate specific credit reporting reports based on user-customized report formats and authorization information. First, the smart contract needs to be queried to obtain the report format and authorization information from the blockchain system; secondly, the credit report data is derived from the back-end database according to the report format to generate a credit report, in order to facilitate the later verification of the authenticity and validity of the credit report It is necessary to attach the authorization information (authorizer, user, authorization time range, authorization reason and digital signature, etc.) provided by individual users to the header or footer of each page of the credit report; Submit to the blockchain system.

The main function of the smart contract in the credit authorization stage is to query the report format from the blockchain system and submit the credit report to the blockchain system. When querying the report format, you need to first obtain the encrypted report format and authorization information based on the personal user ID. After calling the Decrypt _K method and decrypting with the key K, if it is verified that the credit reporting agency is indeed authorized, the report format and authorization information can be returned. . When submitting a credit report, if it is verified that the credit reporting agency is indeed authorized, after calling the Encrypt _K method to encrypt the credit report with the secret key K, the ciphertext can be stored in the blockchain state database according to the individual user ID.

The above is the specific implementation process of the credit information provision stage, which can be implemented in the blockchain system through the relevant codes in the following method 2. The code of method 2 is as follows:

The main participants in the credit inquiry stage are financial institutions, whose core function is to inquire and review credit reports. After querying the smart contract and obtaining the credit report, it needs to verify the digital signature of the credit reporting agency based on the credit report, and the digital signature of the individual user based on the authorization information; it also needs to verify the authorization time range and authorization reasons involved in the authorization information. content.

The main function of the smart contract in the credit authorization stage is to query the credit report from the blockchain system. If it is verified that the financial institution is indeed authorized, the encrypted credit report can be obtained based on the personal user ID, and the Decrypt _K method can be called to decrypt it with the key K, and then the credit report can be returned.

The above is the specific implementation process of the credit inquiry stage, which can be implemented in the blockchain system by the relevant codes in the following method 3. The code of method 3 is as follows:

The protection content of the present invention is not limited to the above embodiments. Variations and advantages that can occur to those skilled in the art without departing from the spirit and scope of the inventive concept are included in the present invention, and the appended claims are the scope of protection.

Claims (1)

1. A credit investigation report circulation method based on a block chain and an Intel SGX comprises a credit investigation authorization stage, a credit investigation providing stage and a credit investigation query stage; the credit investigation authorization stage is that a personal user customizes a credit investigation report format and sets specific authorization information; the credit investigation providing stage is that a credit investigation organization generates a credit investigation report according to a report format and authorization information defined by an individual user; the credit investigation phase is that the financial institution inquires and audits the credit investigation report provided by the credit investigation institution; the related credit investigation report format, authorization information, credit investigation report and report inquiry record are encrypted by SGX and then stored in the block chain; wherein:

the credit investigation authorization phase comprises the following steps:

step A1: on the premise that the individual user meets credit investigation detail information required to be provided by a financial institution, customizing a credit investigation report format according to individual privacy requirements so as to reduce personal privacy data leakage;

step A2: an individual user explicitly specifies a credit investigation provider, a credit investigation inquirer, an authorization time range, an authorization reason and digital signature specific authorization information;

step A3: an individual user calls an intelligent contract to encrypt a credit investigation report format and authorization information and writes the information into a block chain;

the credit providing stage comprises the following steps:

step B1: calling an intelligent contract by a credit investigation mechanism to read a credit investigation report format and authorization information written by an individual user on a block chain;

step B2: the credit investigation organization extracts credit investigation data of the individual user from a back-end credit investigation database according to the report format to generate a credit investigation report;

step B3: the credit investigation institution attaches the authorization information and the digital signature provided by the individual user to the header or the footer of each page of the credit investigation report so as to facilitate future verification;

step B4: the credit investigation mechanism calls an intelligent contract to encrypt the credit investigation report and the digital signature thereof and write the encrypted credit investigation report and the digital signature into the block chain;

the credit investigation phase comprises the following steps:

step C1: the financial institution calls an intelligent contract to read a credit investigation report and a digital signature submitted by a credit investigation institution on the block chain and verifies the digital signature of the credit investigation institution;

step C2: the financial institution verifies the authorization information of the individual user and verifies the digital signature of the individual user;

step C3: the financial institution checks the credit report;

the step a3 specifically includes:

step A31: verifying the remote certification provided by Enclave where the intelligent contract is located and establishing an encryption channel;

step A32: calling an intelligent contract and transmitting a report format, authorization information and a storage secret key;

step A33: the intelligent contract verifies the digital signature of the individual user, and writes the individual user ID and the storage secret key into the envelope so as to realize the block chain data encryption based on the individual user ID;

step A34: the intelligent contract encrypts a report format and authorization information based on the storage secret key and writes encrypted data into a block chain state database;

the step B1 specifically includes:

step B11: verifying the remote certification provided by Enclave where the intelligent contract is located and establishing an encryption channel;

step B12: inquiring an intelligent contract based on the ID of the individual user and the ID of the credit investigation institution to obtain a credit investigation report format;

step B13: the intelligent contract verifies the digital signature of the credit investigation institution, queries a state database based on the ID of the individual user and acquires the encrypted credit investigation report format and the authorization information;

step B14: the intelligent contract acquires the decryption data of the storage secret key based on the ID of the individual user and verifies the authority of the credit investigation institution based on the authorization information;

step B15: the intelligent contract returns a credit investigation report format and authorization information;

the step B4 specifically includes:

step B41: verifying the remote certification provided by Enclave where the intelligent contract is located and establishing an encryption channel;

step B42: calling an intelligent contract and transmitting a credit investigation report;

step B43: the intelligent contract verifies the digital signature of the credit investigation institution, queries a state database based on the ID of the individual user and acquires encrypted authorization information;

step B44: the intelligent contract acquires the decryption data of the storage secret key based on the ID of the individual user and verifies the authority of the credit investigation institution based on the authorization information;

step B45: the intelligent contract encrypts the credit investigation report based on the storage secret key and writes the encrypted data into a block chain state database;

the step C1 specifically includes:

step C11: verifying the remote certification provided by Enclave where the intelligent contract is located and establishing an encryption channel;

step C12: inquiring an intelligent contract based on the ID of the individual user and the ID of the financial institution to obtain a credit investigation report;

step C13: the intelligent contract verifies the digital signature of the financial institution, queries a state database based on the ID of the individual user and acquires encrypted authorization information;

step C14: the intelligent contract firstly acquires the decryption data of the storage secret key based on the ID of the personal user, then verifies the authority of the financial institution based on the authorization information, and then stores the access record of the financial institution into a block chain state database;

step C15: the intelligent contract inquires a state database based on the ID of the individual user and returns an encrypted credit investigation report;

step C16: the intelligent contract encrypts data based on the storage key and returns a credit investigation report.

Images