Research On Key Technologies For Personal Data Confirmation, Management And Transaction In Compliance With GDPR

Data is one of the most valuable resources in the digital economy.The personal data of the current end users are stored and managed by the service providers instead of being controlled by the data subject.This poses two challenging problems: on the one hand,ownership of personal data is not clear enough,and service providers often take advantage of the vagueness of data ownership to arbitrarily process many personal data that are difficult to monitor and verify.On the other hand,data replication costs and data flow transparency are extremely low,and data leakage,even malicious analysis,storage and resale and other problems cannot be timely discovered by the data subject and regulatory authorities.These problems can only be fundamentally resolved if ownership of personal data is truly returned to the data subject.This paper comprehensively utilizes block chain,intelligent contract,homomorphic encryption and other technologies to accomplish the following three aspects.(1)We combine existing Ownership determination methods and elements to put forward the basic theory supporting the full text: Abstract Personal Data Ownership Determination and Trading Lifecycle(APDODTL).It is an important theoretical basis for the subsequent construction of the personal data rights confirmation,management and trading framework.It also takes into account the responsibilities of the regulator and strives to achieve a multi-party data governance system.(2)We describe the background and development process of personal data confirmation and point out the deficiencies of current solutions.Then,based on APDODTL and combined with block chain,distributed storage component IPFS realizes a decentralized personal data management module.It is the basic module in the whole system and is designed to help the data subject control his data more easily and safely.(3)We describe the pain points of current data trading schemes and analyze the advantages and disadvantages of existing personal data trading strategies.Then,a data trading and sharing mechanism based on homomorphic encryption is proposed,which is combined with the personal data management module to form the whole framework of personal data rights confirmation,management and trading.We will focus on analyzing the intelligent contract of data trading based on the design of semaphore mechanism,and analyze the security and availability of this scheme from the perspective of the feature of "one transaction against replication".we conduct performance tests on the core interface of the system to find the performance bottleneck of the system,and based on this,propose technical points that can be improved in future work,and finally summarize the contributions of the whole paper.