English

应用科学学报 ›› 2025, Vol. 43 ›› Issue (4): 600-616.doi: 10.3969/j.issn.0255-8297.2025.04.004

• 区块链 • 上一篇    

一种基于区块链的数据要素精准授权机制

潘璇1,2, 张抗抗1,2, 程澳1,2   

  1. 1. 山东财经大学 山东省区块链金融重点实验室, 山东 济南 250014;
    2. 山东财经大学 计算机与人工智能学院, 山东 济南 250014
  • 收稿日期:2025-01-02 发布日期:2025-07-31
  • 通信作者: 张抗抗,副教授,研究方向为软件工程、服务计算、区块链。E-mail:zhangkk@sdufe.edu.cn E-mail:zhangkk@sdufe.edu.cn
  • 基金资助:
    国家重点研发计划（No.2023YFB2703900）；山东省科技型中小企业创新能力提升工程（No.2022TSGC2044）；山东省高速集团技术创新工程（No.HSB2021-15）

A Blockchain-Based Precise Authorization Mechanism for Data Elements

PAN Xuan1,2, ZHANG Kangkang1,2, CHENG Ao1,2   

  1. 1. Key Laboratory of Blockchain Finance in Shandong Province, Shandong University of Finance and Economics, Jinan 250014, Shandong, China;
    2. School of Computing and Artificial Intelligence, Shandong University of Finance and Economics, Jinan 250014, Shandong, China
  • Received:2025-01-02 Published:2025-07-31

PDF

24

摘要： 在数据要素流通过程中，各信任域往往采用独立的身份认证体系和权限管理标准，用户在跨域访问时难以实现精准授权。为此，提出了一种基于区块链的数据要素精准授权机制。该机制采用“链上-链下”协同架构：链上，设计智能合约驱动的非同质化通证元数据动态更新机制，通过将用户身份与角色映射为可编码的非同质化通证，实现用户身份与权限的实时更新；链下，部署信任评估模型和动态解析缓存机制，将用户信任值转化为动态授权评估因子，实现异构信任域场景下的分级自动权限映射。实验结果表明，本工作提出的机制能实现更精细的权限管理，在加速策略变更进程的同时，有效隔离潜在风险。

关键词: 数据要素, 区块链, 非同质化通证, 智能合约, 信任评估

Abstract: In the circulation of data elements, different trust domains often adopt independent identity authentication systems and access control standards, making precise authorization for cross-domain access challenging. To address this issue, a blockchain-based precise authorization mechanism for data elements is proposed. This mechanism adopts a collaborative on-chain and off-chain architecture. On-chain, a smart contract-driven dynamic metadata update mechanism for non-fungible tokens (NFTs) is designed, mapping user identities and roles into codable NFTs to enable real-time updates of identity and permissions. Off-chain, a trust evaluation model and a dynamic parsing cache mechanism are deployed to convert user trust values into dynamic authorization evaluation factors, enabling hierarchical and automated permission mapping in heterogeneous trust domains. Experimental results show that the proposed mechanism achieves finer-grained access control, accelerates policy updates, and effectively isolates potential risks.

Key words: data elements, blockchain, non-fungible token, smart contract, trust assessment

中图分类号: