Framework for privacy-preserving big-data sharing using distributed ledger
To provide a trusted, secure, and immutable record of storage operations executed by a storage center for storing measurement data provided by a process plant, techniques are described for utilizing a distributed ledger. When a data contributor such as a process plant generates measurement data, an encrypted version of a set of measurement data is transmitted to a storage center for secure storage of the measurement data. In some instances, the data contributor divides the set of measurement data into several subsets and transmits each subset of encrypted measurement data to a different storage center. Furthermore, the storage center generates a transaction for the storage operation which is recorded in a distributed ledger. When a data subscriber retrieves the encrypted measurement data from a storage center, the data subscriber can verify the authenticity of the data based on the information recorded in the distributed ledger.
1. A method for obtaining securely stored measurement data from a storage center and a distributed ledger, the method comprising:
transmitting, by a computing device, a request for measurement data generated by a data contributor;
receiving, from the data contributor, identification information for retrieving an encrypted version of the measurement data from the storage center which stores the encrypted measurement data including receiving a transaction identifier corresponding to a transaction in the distributed ledger that includes an indication of the encrypted measurement data;
receiving, from the data contributor, decryption information for decrypting the encrypted measurement data;
obtaining transaction data associated with the transaction identifier from the distributed ledger, including an identifier of the storage center which stores the encrypted measurement data;
transmitting, to an identified storage center, a request for the encrypted measurement data;
receiving the encrypted measurement data from the storage center;
comparing the encrypted measurement data to the indication of the encrypted measurement data included in the distributed ledger; and
in response to determining that the encrypted measurement data corresponds to the indication of the encrypted measurement data included in the distributed ledger, decrypting the encrypted measurement data using the decryption information to obtain the measurement data.
2. The method of claim 1 , wherein the measurement data is a set of measurement data having a plurality of subsets of measurement data, wherein each subset is stored in a different storage center, and further comprising:
receiving, from the data contributor, identification information for retrieving encrypted versions of each subset of measurement data from a plurality of storage centers, including receiving transaction identifiers corresponding to transactions in the distributed ledger that include indications of each subset of encrypted measurement data;
receiving, from the data contributor, corresponding decryption information for decrypting each subset of the encrypted measurement data;
transmitting, to each of the plurality of storage centers, a request for a corresponding subset of the encrypted measurement data;
receiving the subsets of the encrypted measurement data from the plurality of storage centers;
decrypting each subset of the encrypted measurement data using the corresponding decryption information for the subset to obtain the subset of measurement data; and
combining the plurality of subsets of measurement data to generate the set of measurement data.
3. The method of claim 1 , wherein obtaining transaction data includes obtaining an identifier of the storage center storing the encrypted measurement data, an identifier of the data contributor which generated the encrypted measurement data, an identifier for retrieving the encrypted measurement data, and a cryptographic hash value corresponding to the encrypted measurement data.
4. The method of claim 3 , wherein comparing the encrypted measurement data to the indication of the encrypted measurement data included in the distributed ledger includes comparing the encrypted measurement data to the cryptographic hash value corresponding to the encrypted measurement data.
5. The method of claim 1 , wherein receiving decryption information includes receiving, from the data contributor, a one-time cryptographic key for decrypting the encrypted measurement data.