Data security sharing method and system in untrusted environment

Abstract

The invention provides a data security sharing system and method in an untrusted environment. The system comprises a central platform system and a front-end processor system; the central platform system is arranged in a third-party credible cloud, and the front-end processor systems are arranged in internal safe areas of all data owners; and the central platform system is responsible for performing communication and data transfer processing with each front-end processor system, and the front-end processor system is used as a connection intermediary system of the central platform system and the client system. Various privacy protection mechanisms including homomorphic encryption, secret sharing, differential privacy, a trusted execution environment and the like are provided, the risk of single-point privacy disclosure can be avoided through a centralized architecture, the multi-subject data analysis and mining process based on service requirements is met, under the non-trusted environment, safe and reliable fusion and data application of multi-party data are achieved, it is ensured that data provided by all parties are not leaked, and it is ensured that the data after safety protection can meet the service application requirements of all parties to the maximum extent.

Description

Technical field: [0001] The present invention relates to the field of data security sharing, in particular to a data security sharing method and system in an untrusted environment. Background technique: [0002] At present, multiple data subjects mainly include: State Grid Corporation, government agencies, and enterprises. The data of China Network Corporation is currently in its own internal network, and the data of government agencies and sensitive privacy-related data are also in In the government affairs or in the internal network built by the organization; the enterprise data is mainly in the enterprise, and the sensitive and privacy-related data are strictly stored in the enterprise. [0003] Even if multiple data subjects do not exchange specific data records, but only exchange the data statistical characteristics of each party, there is still a risk of leaking the data privacy of each party. Based on business needs, in the process of data analysis and mining, it is ...

AI Technical Summary

Problems solved by technology

The encryption-based data security transmission method adopted in the power system is difficult to prevent such privacy leakage, and it is even more difficult to take into account the availability of data characteristics, and there is also a lack of pilot verification for multi-data subject fusion technology

Images