強化區塊鏈於資料存取控制、選擇性揭露與隱私保護之應用

Abstract

傳統的集中式和聯邦身分管理系統是目前常見的管理方式。然而這些系統可能在資料安全、隱私保護和單點故障方面存在挑戰。本研究提出一個強化區塊鏈於資料存取控制、選擇性揭露與隱私保護之應用，以解決這些問題。 該系統利用區塊鏈技術的特性使資料使用情況可追蹤且不可篡改。通過採用去中心化身份（DIDs）和可驗證憑證（VCs），使用者可以保有對其資料的控制權，避免大型身分提供商對使用者數據的過度監管和濫用，並允許使用者選擇性披露資訊，降低了集中式身分管理中資料洩漏的風險。 系統採用了密鑰封裝機制(KEM)和IPFS去中心化存儲技術，在資料傳輸過程中保護使用者的隱私，確保只有經授權的實體才能解密和訪問資料。最後還整合了NFT技術，以實現產品的可追蹤性和可轉移性，使其適用於需要隱私和可追蹤性的供應鏈場景。 本研究結合了區塊鏈、去中心化身份和加密技術，實現了一個能夠確保資料可追蹤、防止資料洩漏並保護使用者隱私的系統。

Traditional centralized and federated identity management systems are commonly used currently; nonetheless, such systems present challenges regarding data security, privacy safeguards, and lone points of failure. This exploration proposes an enhanced application of blockchain for data access control, selective disclosure, and privacy protection to address these issues. The system exploits the traits of blockchain engineering to assure information traceability and immutability. By embracing decentralized identities (DIDs) and verifiable credentials (VCs), users maintain control over their details, preventing excessive oversight and misapplication of user data by enormous identity suppliers. It additionally permits users to selectively disclose information, reducing the danger of detail leakage related to centralized identity management. The system employs key encapsulation mechanisms(KEM) and IPFS decentralized storage to shield user privacy during data transmission, confirming that only authorized organizations can decrypt and access the data. Lastly, the system incorporates NFT technology to facilitate product traceability and transferability, rendering it suitable for supply chain scenarios necessitating both privacy and traceability. This exploration combines blockchain, decentralized identities, and encryption technologies to create a system that confirms data traceability, averts data leakage, and safeguards user privacy.