Method, device and system for obtaining data authorization

Abstract

The embodiments of this specification provide a method, device and system for obtaining data authorization. In the method for obtaining data authorization, any first computing node in the trusted computing center receives an authentication request from the first provider. Authentication information is returned to the first provider, including at least a first code hash of the first computing logic running in the first computing node. Receive the channel establishment request sent by the first provider after determining that the first computing node has passed the trusted authentication and the first code hash has passed the correctness verification. Establish a first trusted channel with the first provider according to the channel establishment request. Through the first trusted channel, the target encryption key among the encryption keys of several encrypted slices obtained based on the privacy data of the data provider is received, so as to obtain the target encryption key corresponding to the target encryption key based on the first calculation logic. Permission to perform calculations on shards. Thus, the security of the private data of the data provider can be ensured.

Description

technical field [0001] One or more embodiments of this specification relate to the field of security technology, and in particular to a method, device and system for obtaining data authorization. Background technique [0002] The dense-state hosting calculation refers to that the data provider uploads the data to a certain center, and the center performs dense-state calculation on the data, and the data provider does not need to participate in the calculation process. Encrypted escrow computing can be applied to multiple scenarios. For example, the data provider provides the data to the trading center in the form of encrypted state, and the trading center calculates valuable results in the form of encrypted state, and then sells the results to the data requester , so that the data provider and the transaction center can share the revenue obtained. [0003] In the current secret-hosted computing solution, the data provider usually cannot control the computing logic used by t...

AI Technical Summary

Problems solved by technology

[0003] In current dense-state hosting computing schemes, data providers usually have no control over the computing logic used by the center

However, the data provider may only want the data to be used for less leaky logic such as machine learning training, rather than for more leaky logic such as quantiles and segmented statistics

Images