基于混合区块链架构的可验证数据隐私保护方案

A Verifiable Data Privacy Protection Scheme Based on a Hybrid Blockchain Architecture

摘要: 作为日常公益活动之一，物资捐赠有助于改善受赠者(包括个人、机构或团体)的条件与环境。然而，捐赠过程中身份隐私保护不足、资源分配的公平性及有效性难以保证，难以兼顾资源共享与物资信息隐私保护之间的平衡等问题，制约了其有效实施。为应对这些挑战，本文提出了一种基于混合区块链架构的可验证数据隐私保护方案。该方案利用可随机化证书确保交易行为与身份之间的不可链接性，通过智能合约自动生成捐赠请求的优先级列表并记录交易状态，保证物资分配的公平性及有效性；同时引入佩德森承诺机制，确保资产与捐赠行为的可验证。通过结合私有链与联盟链，实现慈善组织内部数据的隐私保护，以及跨组织的资源共享与捐赠交易监督。安全性分析表明，该方案满足匿名性、可验证性、机密性与完整性要求。仿真实验结果显示，该方案具有良好的可行性、执行效率与性能。

Abstract: As one of the everyday public welfare activities, material donations help improve the conditions and environments of donees, including individuals, institutions, or groups. However, issues such as privacy protection, fairness in resource allocation, and the balance between resource sharing and privacy protection hinder its effective implementation. To address these challenges, this paper proposes a verifiable data privacy protection scheme based on a hybrid blockchain architecture. The scheme utilizes randomizable credentials to ensure unlinkability between transactions and identities, employs smart contracts to automatically generate priority lists for donation requests and record transaction status, thereby ensuring the fair distribution of materials, and introduces the Pedersen commitment mechanism to guarantee the verifiability of assets and donations. By incorporating both private and consortium blockchains, the scheme protects internal data security within charitable organizations and enables cross-organizational resource sharing and transaction supervision, respectively. Security analysis demonstrates that the scheme satisfies the requirements of anonymity, verifiability, confidentiality, and integrity. The simulation results show that the scheme has good feasibility, execution efficiency and performance.