摘要： 针对个人数据要素化进程中用户权益保障不足、技术落地路径不清晰及通用性框架缺位三大核心问题，提出并构建了一个面向个人数据要素化的端到端可信授权技术框架。该框架整合去中心化身份、可验证凭证、零知识证明与智能合约等技术，形成覆盖授权-使用-计量-分账-审计全流程的闭环运行机制。框架以权属归户、管理自主、隐私保护、收益归户为设计目标，通过分层去中心化身份架构实现身份自主锚定与场景隔离，通过意图可验证凭证与字段级授权策略实现细粒度权限管控，通过链上计量与智能合约批量分账实现收益自动归户，通过零知识证明与同态加密实现数据可用不可见。基于开源工具构建的原型系统在典型数据使用场景中完成端到端功能验证，结果表明该框架能够实现分层身份管理、细粒度授权、隐私增强交付、链上计量与自动化分账等核心功能，全流程操作可上链存证并独立核验。成本评估显示，单次完整数据访问与分账流程的Gas消耗约为158万Gas，经济成本可控。

中图分类号：TP311文献标志码：ADOI:10.19358/j.issn.2097-1788.2026.07.011
中文引用格式：夏虎，吴志刚,刘济铭，等.面向个人数据要素化的可信授权系统设计［J］.网络安全与数据治理，2026，45（7）：80-86.
英文引用格式：Xia Hu, Wu Zhigang, Liu Jiming. Design of a trusted authorization system for personal data factorization［J］.Cyber Security and Data Governance，2026，45（7）：80-86.

Design of a trusted authorization system for personal data factorization

Abstract： To address three core challenges in the process of personal data factorization—insufficient protection of data subjects′ rights and interests, unclear technical implementation paths, and the absence of a universal framework—this paper proposes and constructs an endtoend trusted authorization framework for personal data factorization. The framework integrates existing technologies including decentralized identifiers, verifiable credentials, zeroknowledge proofs, and smart contracts, forming a closedloop mechanism that covers the entire lifecycle of authorization, usage, metering, revenue distribution, and audit. Guided by the four design goals of ownership attribution, autonomous management, privacy preservation, and revenue attribution, the framework achieves identity autonomy and context isolation through a layered DID architecture, enables finegrained permission control via intentbased verifiable credentials and fieldlevel authorization policies, realizes automatic revenue attribution through onchain metering and smart contractbased batch distribution, and ensures data usability without plaintext exposure by leveraging zeroknowledge proofs and homomorphic encryption. A prototype system built on opensource tools has been functionally validated in typical data usage scenarios. The results demonstrate that the framework supports layered identity management, finegrained authorization, privacypreserving data delivery, onchain metering, and automated batch distribution, with all critical operations recorded onchain and independently verifiable. The cost evaluation demonstrates that the gas consumption for a single complete data access and revenuesplitting process is estimated to 1.58 million gas, indicating that the economic cost is manageable.

Key words : data factorization; personal data; decentralized identity; verifiable credential