Framework for privacy-preserving big-data sharing using distributed ledgers
To provide a trusted, secure, and immutable record of storage operations executed by a storage center for storing measurement data provided by a process plant, techniques are described for utilizing a distributed ledger. When a data contributor such as a process plant generates measurement data, an encrypted version of a set of measurement data is transmitted to a storage center for secure storage of the measurement data. In some instances, the data contributor divides the set of measurement data into several subsets and transmits each subset of encrypted measurement data to a different storage center. Furthermore, the storage center generates a transaction for the storage operation which is recorded in a distributed ledger. When a data subscriber retrieves the encrypted measurement data from a storage center, the data subscriber can verify the authenticity of the data based on the information recorded in the distributed ledger.
1. A method for storing measurement data using a distributed ledger maintained by a plurality of participants, the method comprising:
obtaining, at a storage center computing device, encrypted measurement data from a data contributor which generated and encrypted the measurement data;
storing, by the storage center computing device, the encrypted measurement data;
generating, by the storage center computing device, a transaction representing a storage operation performed by the storage center computing device for the encrypted measurement data, wherein the storage operation indicates the storage center computing device where the encrypted measurement data is stored;
transmitting, by the storage center computing device, the transaction to at least one other participant in a distributed ledger network of participants maintaining a distributed ledger;
transmitting, by the storage center computing device to the data contributor, identification information for retrieving the encrypted measurement data;
receiving, at the storage center computing device from a data subscriber, a request for the encrypted measurement data including an identifier of the encrypted measurement data;
and in response to the request, transmitting, by the storage center computing device, the encrypted measurement data to the data subscriber.
2. The method of claim 1 , wherein generating a transaction includes generating the transaction including an identifier of the computing device storing the encrypted measurement data, an identifier of the data contributor which generated the encrypted measurement data, an identifier for retrieving the encrypted measurement data, and a cryptographic hash value corresponding to the encrypted measurement data.
3. The method of claim 2 , wherein the data subscriber retrieves the cryptographic hash value from the distributed ledger, generates a cryptographic hash of the encrypted measurement data and compares the cryptographic hash of the encrypted measurement data to the cryptographic hash value in the distributed ledger to verify authenticity of the encrypted measurement data.
4. The method of claim 1 , wherein transmitting identification information for retrieving the encrypted measurement data includes transmitting, to the data contributor, a transaction identifier corresponding to the transaction in the distributed ledger that includes the encrypted measurement data.
5. The method of claim 1 , wherein generating the transaction includes:
generating a cryptographic signature based on the transaction; and
augmenting the transaction with the cryptographic signature.
6. The method of claim 5 , further comprising:
adding the transaction to a block of transactions;
solving a cryptographic puzzle based on the block of transactions;
adding the solution to the cryptographic puzzle to the block of transactions; and
transmitting the block of transactions to at least one other participant in the distributed ledger network.