Banyan Network Technology Report (TR2): Technical Framework for Data Security Compliance (English Translation)

Note: This is the second Technical Report, originally published in March 2018 by the Banyan Network Team — meant to be an addendum/update to the White Paper. They were all originally published in Chinese, so we asked the CTO for an “official” translation in order to help those interested in the project, get a better technical understanding via a more “bite-sized” report. The last report will be posted in the coming days.

Data Security Compliance Technology Framework

• Industry pains

Safety compliance has plagued the big data industry for many years, and data security regulation in China has been strengthened every year. A data & privacy permission management solution is in strong demand.

• Scenario

In response to industry pain points, Banyan Network’s years of experience, combined with the data fusion value chain network construction plan, we created an information authentication & permission authorization management framework called Multi-Trust Connector (MTC) as a blockchain pioneer application.

In the Banyan Network, participants in the data industry can be categorized as:

- Data Providers (Data Source- D );

- Data Consumers (Enterprise- B );

- End-user (Personal- C );

- Regulator (Government- G).

In the Banyan Network, all permissions are associated with the participant’s behavior:

1. When B requests the data of C from D, it must obtain sufficient authorization from C, recording the C authorization behavior, and synchronizing the authorization behavior to D. MTC in the data flow technical context ensures that D of each data provided, have been fully authorized by C (including but not limited to: time, equipment, scenarios, data and other authorization information).

2. When there is a C that needs to query for autonomous authorization or G needs verify all the authentications and authorizations, MTC can quickly provide verifications based on blockchain technology.

In MTC framework, all user authorization data are written into the blockchain through smart contracts, which are transparent and cannot be tampered with.

MTC has key features that support the user data permission customization, prevent data tampering, preventing data transfer without authorization, risk separation, real-time authorization checking, and full platform support.

• Technical Framework

The basic technical framework of MTC:

- The Authorization SDK provides the authorization interface, and the Application APP sends the user authorization behavior to the Authorization SVR through the SDK interface and obtains the return of the authorization key.

- When the Application APP calls for user data from the data source Data Service SVR, it needs to pass the authorization key at the same time.

- The data source Data Service SVR verifies the accuracy of the authorization key by requesting the Authorization SVR.

- The Authorizing SVR also saves the user authorization calling smart contract to the blockchain.

• Recent progress

Mutual information is listed as a pilot application of the Banyan Network. Currently, development and testing are being stepped up as planned. The entire development is divided into three modules: front-end products, authorization backend services and authorization smart contracts.

At present, the beta version of the front-end product has been developed and is undergoing product integrity assessment; the core API for authorization service background (application authorization and verification authorization) has been developed and is undergoing functional and performance testing; the authorization smart contract is in the development phase.

• Follow-up plan

Banyan Network will continue to push MTC integration testing and development iteration. Follow-up will be carried out step by step to complete the beta version of the front-end product, open the demo access to the community, and add the second-phase API to the authorization service backend. The beta development of the smart contract will be completed.

In the next step, MTC will first open the source code of the front-end product. The project code will be uploaded to Github in the near future (update: Github now created: https://github.com/banyanbbt).

(Original Article (in Chinese): https://mp.weixin.qq.com/s/evu0LDQhUhD3GUycRdcriQ)

Website: https://www.banyanbbt.org/
Medium: https://medium.com/banyannetwork
Twitter: https://twitter.com/banyan_network
Reddit: https://www.reddit.com/r/BanyanNetwork
Telegram: https://t.me/BBNGlobalFans