| With the development of the digital economy,the issue of information security has become more and more prominent,and ensuring information security has become an inevitable trend.In the traditional certificate submission scenario,the certificate discloses some unnecessary privacy information in addition to the necessary information given,leading to excessive disclosure of information.For chemical enterprises,the private information contained in their certificates,such as the personal privacy of legal persons,corporate commercial secrets,and product core formulas,once leaked,may directly affect their core competitiveness,and bring them serious economic losses and commercial risks.In view of this,this paper proposes a selective disclosure method with zero-knowledge nature for various types of claim information,where enterprises can control the disclosure scope of certificate information by themselves,to solve the problem of excessive disclosure of information.This method is of great significance to improve the level of privacy information protection of chemical enterprises.In this paper,we use the chemical enterprise certificate as the research object,based on self-sovereign identity and verifiable credential standard,and adopt zero-knowledge range proof,commitment scheme,Merkle tree and other techniques to implement the selective disclosure method.First,the overall solution of the selective disclosure method is designed.Then the specific research of the selective disclosure method is carried out for the possible data types of the claim information.After that the proposed method is applied to the chemical enterprise certificate scenario.Finally,the experimental validation and analysis show that the proposed method can effectively respond to all kinds of assertion requests and achieve the requirements of minimum disclosure,multiple attributes and zero-knowledge while ensuring that the certificate information is resistant to repudiation and tampering.Chapter 1 of this paper analyzes the background and significance of the selective disclosure method of chemical enterprises’ certificate information,and introduces the current research status of digital identity and self-sovereign identity.Chapter 2 intro-duces the theories and technologies involved in this paper,including the characteristics of the chemical industry and chemical enterprise certificates,blockchain technology,self-sovereign identity system and the cryptography technology related to this paper.Chapter 3 divides claim information into five categories and disclosure methods into two categories,designs the processing flow of selective disclosure method,and conducts specific research on selective disclosure method for the five categories of claim information.Chapter 4 implements the application of the proposed method in chemical enterprise certificates,showing the specific application processes.Chapter 5compares the proposed method with traditional certificates and common self-sovereign identity programs,and analyzes the characteristics and advantages of the proposed method.Chapter 6 summarizes the main work and innovations of this paper,and points out the inadequacies and future research directions.The main contributions of this paper are as follows:(1)A selective disclosure method with zero-knowledge nature for various types of claim information is proposed.The claim information is divided into five categories: numeric,time,numeric string,non-numeric string,and Boolean.And the assertion request from the verifier is divided into two categories: exact value and range value.Based on W3C’s verifiable credential standard,the processing flow of the selective disclosure method is designed,which contains five parts: generating credential template,generating verifiable credential,generating assertion request,generating verifiable presentation,and verifying verifiable presentation.The selective disclosure method for five types of claim information is researched based on the processing flow.The method can reduce the disclosure amount of claim information,support selective disclosure of various types of claim information,with zero knowledge nature,and effectively solve the problem of information excessive disclosure under the premise of ensuring anti-repudiation and anti-tampering.(2)Applying selective disclosure methods to chemical enterprise certificate scenario.The selective disclosure method of numeric,numeric string and Boolean type claim information is implemented by the test report of chemical product as a case,and the selective disclosure method of time and non-numeric string type claim information is implemented by the business license of chemical enterprise as a case,which verify the effectiveness and feasibility of the method in this paper.It effectively solves the problems of excessive disclosure of certificate information and control of private data by others in chemical enterprises,so that the certificate information is completely owned and controlled by the enterprises themselves,and completely solves the problem of privacy protection in chemical enterprises. |
