學術產出-Theses

Article View/Open

Publication Export

Google ScholarTM

政大圖書館

Citation Infomation

題名 基於UMA與區塊鏈的分散式個人資料分享平台:以健康存摺為例
Decentralized personal data sharing platform based on User-Managed Access and blockchain: My Health Bank as an example
作者 徐嘉陽
Hsu, Chia-Yang
貢獻者 陳恭
Chen, Kung
徐嘉陽
Hsu, Chia-Yang
關鍵詞 分散式共享平台
區塊鏈
智能合約
Decentralized sharing platform
Blockchain
Smart contract
日期 2021
上傳時間 1-Oct-2021 10:14:21 (UTC+8)
摘要 近年來使用者個資遭濫用情形日益嚴重。許多開發商或組織在未經使用者允許的情況下對其個資進行不當使用,損害使用者權益。2016年歐盟所公布一般資料保護規範(GDPR),目的即在於使個資本人取回資料控制權,創設如資料可攜權(Right to data portability)、被遺忘權(Right to be forgotten)等個資自主權。為平衡資料自由流通與個資自主權,並減少不當蒐集與個資濫用問題,Tim Berners-Lee提出Solid Project分散式網路概念,分開應用程式和資料,允許使用者能夠選擇資料儲存位置,加強使用者個資自主權。
本研究受Solid Project的啟發,以健康存摺為資料分享範例,整合以下架構與標準,建構基於UMA與區塊鏈的分散式個人資料分享平台。基於UMA使用者自主管理存取流程,賦予分享者擁有自主管理資源與定義授權方式的權利,利用區塊鏈不可否認性,使得分享者授權具有可驗證特性,保障分享者與數據請求者權益;在數據驗證方面,將使用者分享的健康存摺數據產生之數據驗證收執聯,用以驗證使用者分享的數據,確保第三方數據請求者取得數據之正確性;而Solid數據保存架構,讓使用者可以自由選擇數據存放位置,建構出一個兼具穩固性(robustness)、資料自主性並保有隱私的數據共享平台,促進資料交易流通並鼓勵資料服務創新。
The misuse of users` personal data has become increasingly serious in recent years. In 2016, the European Union announced the General Data Protection Regulation (GDPR), which aims to enable individuals to take back control of their personal data, creating rights such as the right to data portability, the right to be forgotten, and other personal data autonomy. To balance data interchange and personal data autonomy, and to reduce inappropriate collection and misuse of personal data, Tim Berners-Lee proposed the Solid Project decentralized network concept, which separates applications and data, allowing users to choose where to store their data and enhancing their personal data autonomy.
Inspired by Solid Project, this study uses My Health Bank as a data sharing example and integrates the following architecture and standards to construct a decentralized personal data sharing platform based on UMA and blockchain. Based on the UMA, it gives users the right to manage the resources and define the authorization policy independently, and by the non-repudiation of blockchain to make the authorization of sharers verifiable to protect the rights of resource owner and requesters. The Solid architecture allows users to freely choose the location of data storage. This study constructs a data sharing platform with robust, data autonomy, and privacy to facilitate data transactions and encourage innovation of data service.
參考文獻 [1] Ikhlaq ur Rehman. (2019). Facebook-Cambridge Analytica data harvesting: What you need to know
[2] Solid Project https://solidproject.org/
[3] 健康存摺 https://myhealthbank.nhi.gov.tw/IHKE0002/IHKE0002S07.aspx
[4] GDPR https://gdpr.eu/what-is-gdpr/
[5] Satoshi Nakamoto. (2008). Bitcoin: A Peer-to-Peer Electronic Cash System.
[6] User-Managed Access(UMA) 2.0 https://docs.kantarainitiative.org/uma/wg/rec-oauth-uma-federated-authz-2.0.html
[7] Gavin Wood. Ethereum: A secure decentralised generalised transaction ledger. Ethereum Project Yellow Paper, 151, 2014.
[8] Vitalik Buterin. Ethereum: A next-generation smart contract and decentralized application platform. https://github.com/ethereum/wiki/ wiki/White-Paper, 2014. Accessed: 2016-08-22.
[9] OAuth 2.0 https://oauth.net/2/
[10] 陳恭博士,(2017)。區塊鏈革命 – 迎向產業新契機。
描述 碩士
國立政治大學
資訊科學系碩士在職專班
107971005
資料來源 http://thesis.lib.nccu.edu.tw/record/#G0107971005
資料類型 thesis
dc.contributor.advisor 陳恭zh_TW
dc.contributor.advisor Chen, Kungen_US
dc.contributor.author (Authors) 徐嘉陽zh_TW
dc.contributor.author (Authors) Hsu, Chia-Yangen_US
dc.creator (作者) 徐嘉陽zh_TW
dc.creator (作者) Hsu, Chia-Yangen_US
dc.date (日期) 2021en_US
dc.date.accessioned 1-Oct-2021 10:14:21 (UTC+8)-
dc.date.available 1-Oct-2021 10:14:21 (UTC+8)-
dc.date.issued (上傳時間) 1-Oct-2021 10:14:21 (UTC+8)-
dc.identifier (Other Identifiers) G0107971005en_US
dc.identifier.uri (URI) http://nccur.lib.nccu.edu.tw/handle/140.119/137327-
dc.description (描述) 碩士zh_TW
dc.description (描述) 國立政治大學zh_TW
dc.description (描述) 資訊科學系碩士在職專班zh_TW
dc.description (描述) 107971005zh_TW
dc.description.abstract (摘要) 近年來使用者個資遭濫用情形日益嚴重。許多開發商或組織在未經使用者允許的情況下對其個資進行不當使用,損害使用者權益。2016年歐盟所公布一般資料保護規範(GDPR),目的即在於使個資本人取回資料控制權,創設如資料可攜權(Right to data portability)、被遺忘權(Right to be forgotten)等個資自主權。為平衡資料自由流通與個資自主權,並減少不當蒐集與個資濫用問題,Tim Berners-Lee提出Solid Project分散式網路概念,分開應用程式和資料,允許使用者能夠選擇資料儲存位置,加強使用者個資自主權。
本研究受Solid Project的啟發,以健康存摺為資料分享範例,整合以下架構與標準,建構基於UMA與區塊鏈的分散式個人資料分享平台。基於UMA使用者自主管理存取流程,賦予分享者擁有自主管理資源與定義授權方式的權利,利用區塊鏈不可否認性,使得分享者授權具有可驗證特性,保障分享者與數據請求者權益;在數據驗證方面,將使用者分享的健康存摺數據產生之數據驗證收執聯,用以驗證使用者分享的數據,確保第三方數據請求者取得數據之正確性;而Solid數據保存架構,讓使用者可以自由選擇數據存放位置,建構出一個兼具穩固性(robustness)、資料自主性並保有隱私的數據共享平台,促進資料交易流通並鼓勵資料服務創新。
zh_TW
dc.description.abstract (摘要) The misuse of users` personal data has become increasingly serious in recent years. In 2016, the European Union announced the General Data Protection Regulation (GDPR), which aims to enable individuals to take back control of their personal data, creating rights such as the right to data portability, the right to be forgotten, and other personal data autonomy. To balance data interchange and personal data autonomy, and to reduce inappropriate collection and misuse of personal data, Tim Berners-Lee proposed the Solid Project decentralized network concept, which separates applications and data, allowing users to choose where to store their data and enhancing their personal data autonomy.
Inspired by Solid Project, this study uses My Health Bank as a data sharing example and integrates the following architecture and standards to construct a decentralized personal data sharing platform based on UMA and blockchain. Based on the UMA, it gives users the right to manage the resources and define the authorization policy independently, and by the non-repudiation of blockchain to make the authorization of sharers verifiable to protect the rights of resource owner and requesters. The Solid architecture allows users to freely choose the location of data storage. This study constructs a data sharing platform with robust, data autonomy, and privacy to facilitate data transactions and encourage innovation of data service.
en_US
dc.description.tableofcontents 摘要 i
目錄 iii
表目錄 vi
圖目錄 vii
第一章 緒論 1
1.1 研究背景與動機 1
1.2 研究方法與目的 3
1.3 研究限制 4
1.4 研究貢獻 4
1.5 論文架構 5
第二章 技術背景與相關研究 6
2.1 區塊鏈 6
2.2 以太坊 7
2.3 智能合約 8
2.4 Solid 8
2.5 OAuth 2 9
2.6 User-Managed Access (UMA) 9
2.7 UMA角色法律關係 11
2.8 JSON Web Token (JWT) 11
2.8.1 JWT數據結構 12
2.9 健康存摺 13
2.9.1 檢驗(查)結果資料格式介紹 13
2.9.2 門診資料 (用藥資料)介紹 14
第三章 系統架構與設計 15
3.1 系統設計理念與概要 15
3.2 系統架構設計 17
3.2.1 健康存摺分享平台用戶端網頁 17
3.2.2 Solid Pod分散式儲存架構 17
3.2.3 授權系統 18
3.2.4 區塊鏈系統 18
3.3 系統流程 19
3.3.1 使用者註冊流程 19
3.3.2 上傳健康存摺流程 21
3.3.3 註冊並分享健康存摺流程 24
3.3.4 查閱並取得分享者健康存摺數據流程 28
3.3.5 設定健康存摺數據存取授權規則 (Policy)流程 34
3.3.6 驗證分享者健康存摺資訊數據流程 37
3.3.7 系統流程泳道圖 38
第四章 系統實作 41
4.1 使用者註冊 41
4.1.1 首頁 41
4.1.2 註冊帳號 42
4.1.3 連結使用者Solid Pod 43
4.1.4 註冊以太坊帳號 45
4.1.5 申請為第三方數據請求者 46
4.2 上傳健康存摺 47
4.3 註冊健康存摺 49
4.4 查詢並請求健康存摺數據 52
4.5 設定授權規則 54
4.6 驗證健康存摺資訊 56
第五章 結論與未來研究方向 59
5.1 結論 59
5.2 未來研究方向 59
參考文獻 61
zh_TW
dc.format.extent 9449936 bytes-
dc.format.mimetype application/pdf-
dc.source.uri (資料來源) http://thesis.lib.nccu.edu.tw/record/#G0107971005en_US
dc.subject (關鍵詞) 分散式共享平台zh_TW
dc.subject (關鍵詞) 區塊鏈zh_TW
dc.subject (關鍵詞) 智能合約zh_TW
dc.subject (關鍵詞) Decentralized sharing platformen_US
dc.subject (關鍵詞) Blockchainen_US
dc.subject (關鍵詞) Smart contracten_US
dc.title (題名) 基於UMA與區塊鏈的分散式個人資料分享平台:以健康存摺為例zh_TW
dc.title (題名) Decentralized personal data sharing platform based on User-Managed Access and blockchain: My Health Bank as an exampleen_US
dc.type (資料類型) thesisen_US
dc.relation.reference (參考文獻) [1] Ikhlaq ur Rehman. (2019). Facebook-Cambridge Analytica data harvesting: What you need to know
[2] Solid Project https://solidproject.org/
[3] 健康存摺 https://myhealthbank.nhi.gov.tw/IHKE0002/IHKE0002S07.aspx
[4] GDPR https://gdpr.eu/what-is-gdpr/
[5] Satoshi Nakamoto. (2008). Bitcoin: A Peer-to-Peer Electronic Cash System.
[6] User-Managed Access(UMA) 2.0 https://docs.kantarainitiative.org/uma/wg/rec-oauth-uma-federated-authz-2.0.html
[7] Gavin Wood. Ethereum: A secure decentralised generalised transaction ledger. Ethereum Project Yellow Paper, 151, 2014.
[8] Vitalik Buterin. Ethereum: A next-generation smart contract and decentralized application platform. https://github.com/ethereum/wiki/ wiki/White-Paper, 2014. Accessed: 2016-08-22.
[9] OAuth 2.0 https://oauth.net/2/
[10] 陳恭博士,(2017)。區塊鏈革命 – 迎向產業新契機。
zh_TW
dc.identifier.doi (DOI) 10.6814/NCCU202101602en_US