用户画像数据隐私保护算法设计OA
Design of privacy protection algorithm for user profile data
当前未经授权引发的用户个人信息泄露风险突出,为解决数据泄露规模大、篡改率高的问题,以提升用户个人信息安全防护能力为目标,设计一种面向用户画像数据的隐私保护算法.利用区块链技术构建基于双层链的用户画像数据隐私保护框架:用户通过私钥生成画像数据数字签名,并与公钥一并提交给验证链,由验证层中权威机构进行验证;之后,利用改进CP-ABE算法并结合数字签名对用户画像数据进行加密,将密文存储于存储层星际文件系统(IPFS)中.验证链计算IPFS返回的密文存储地址的哈希值,并依据该哈希值与用户账户地址生成数据证明,发送给授权链,授权链根据服务商的账户地址和用户的授权交易信息得到授权,服务商可监测用户交互行为并核验授权账户状态.针对违规交易,可向验证链提交申请,完成违规交易追溯,实现用户画像数据隐私保护.实验结果表明:所提算法可实现用户画像数据加密并隐藏数据真实信息,非法用户无法获取用户画像数据,用户画像数据最大泄露量为2,篡改率为0.2%.
The risk of unauthorized user personal information leakage is high.In order to slove the issues of high leakage and tampering rates,a user profile data privacy protection algorithm is designed with the goal of enhancing the security of personal information.The blockchain technology is used to construct a user profile data privacy protection framework based on dual layer chain,users can obtain digital signature of profile data by means of their private key,and submit it together with their public key to the verification chain.After verification by an authoritative institution in the verification layer,the improved ciphertext-policy attribute-based encryption(CP-ABE)algorithm is used to encrypt user profile data by combining with the digital signature.The ciphertext is stored in the inter planetary file system(IPFS)storage layer.The verification chain is used to calculate the hash value of the ciphertext storage address returned by IPFS,generate data proof according to the hash value and the user account address,and send it to the authorization chain.The authorization chain can implement authorization based on the service provider's account address and the user's authorized transaction information.The service provider can monitor user interaction behavior and check the status of the authorized account.Applications for illegal transactions can be submitted to the verification chain to trace illegal transactions and realize privacy protection of user profile data.The experimental results show that the algorithm can achieve user profile data encryption,hide the true information of the data,and illegal users cannot obtain user profile data.The maximum leakage and tampering rate of user profile data are about 2%and 0.2%,respectively.
冯嘉诚;王晨睿;牛启梦
天津理工大学,天津 300384天津理工大学,天津 300384天津理工大学,天津 300384
信息技术与安全科学
隐私保护用户画像区块链数字签名改进CP-ABE算法授权链验证链
user profileprivacy protectionblockchaindigital signatureimproved CP-ABE algorithmauthorization chainverification chain
《现代电子技术》 2026 (20)
55-58,4
教育部人文社会科学青年项目(24YJC890010)
评论