Distributed aggregation method based on unidirectional isolation network

Abstract

The invention discloses a distributed aggregation method based on a one-way isolation network, and relates to the technical field of distributed data processing. Comprising the following steps: step 1, constructing a one-way isolation network: establishing a one-way transmission channel, and allowing an aggregation request to be transmitted to a data storage node in a one-way manner, step 2, sending an encryption aggregation request: before sending the aggregation request, encrypting the aggregation request by using an encryption algorithm, 3, local aggregation of the data storage node: receiving the encrypted aggregation request through the data storage node, decrypting the aggregation request and executing the aggregation operation of local data, and 4, obtaining an encrypted transmission aggregation result: after the data storage node completes the local aggregation, encrypting the aggregation result again, and sending the encrypted transmission aggregation result to the data storage node; and 5, carrying out global aggregation: collecting encrypted aggregation results of all the data storage nodes, carrying out final aggregation operation based on the aggregation results to obtain a global aggregation result, and decrypting and outputting the global aggregation result as required.

Description

Technical Field

[0001] The invention discloses a distributed aggregation method based on a unidirectional isolation network, and relates to the technical field of distributed data processing. Background Art

[0002] In a distributed system, data is usually stored in multiple nodes to achieve high availability and scalability. However, this distributed nature also brings challenges to data privacy and security. Existing data aggregation methods often require direct data exchange between different nodes, which may lead to the leakage of sensitive information and is not conducive to data privacy protection. Summary of the invention

[0003] In view of the problems of the prior art, the present invention provides a distributed aggregation method based on a unidirectional isolation network to solve the privacy protection problem in the data aggregation process in a distributed environment, ensure the security and confidentiality of the data in the aggregation process, and maintain the effectiveness and accuracy of the aggregation operation.

[0004] The specific scheme proposed by the present invention is:

[0005] The present invention provides a distributed aggregation method based on a unidirectional isolation network, comprising:

[0006] Step 1: Build a one-way isolated network: Establish a one-way transmission channel to allow aggregation requests to be transmitted one-way to the data storage node.

[0007] Step 2: Send an encrypted aggregation request: Before sending the aggregation request, encrypt the aggregation request using an encryption algorithm.

[0008] Step 3: Perform local aggregation of the data storage node: Receive the encrypted aggregation request through the data storage node, decrypt the aggregation request and perform the aggregation operation of the local data.

[0009] Step 4: Get encrypted transmission aggregation results: When the data storage node completes local aggregation, it encrypts the aggregation results again and returns the aggregation results through a one-way isolated network.

[0010] Step 5: Perform global aggregation: Collect the encrypted aggregation results of all data storage nodes, perform the final aggregation operation based on these aggregation results, obtain the global aggregation results, and decrypt and output them as needed.

[0011] Furthermore, in step 2 of the distributed aggregation method based on a one-way isolated network, the aggregation request is encrypted using an asymmetric encryption algorithm RSA before sending the aggregation request.

[0012] Furthermore, in step 3 of the distributed aggregation method based on a unidirectional isolated network, an aggregation operation of local data is performed, including: summing, counting or averaging according to the aggregation request.

[0013] Furthermore, in step 4 of the distributed aggregation method based on a one-way isolated network, the aggregation result is encrypted again using an asymmetric encryption algorithm RSA, the hash value of the aggregation result data is encrypted using a private key, a digital signature is generated, and the digital signature and the encrypted aggregation result are returned.

[0014] In step 5, the collected encrypted aggregation results are decrypted to obtain the aggregation result data, the aggregation result data is verified using a digital signature, and then the final aggregation operation is performed based on these aggregation results.

[0015] The present invention also provides a distributed aggregation device based on a unidirectional isolated network, comprising an isolated network management module, an aggregation management module, a local aggregation module and a transmission module.

[0016] The isolation network management module builds a unidirectional isolation network and establishes a unidirectional transmission channel. The aggregation management module allows the aggregation request to be transmitted unidirectionally to the data storage node.

[0017] The transmission module sends an encrypted aggregation request: Before sending the aggregation request, the transmission module uses an encryption algorithm to encrypt the aggregation request.

[0018] The local aggregation module performs local aggregation of data storage nodes: the data storage node receives the encrypted aggregation request through the local aggregation module, decrypts the aggregation request and performs the aggregation operation of the local data.

[0019] The aggregation management module obtains the encrypted transmission aggregation result: When the data storage node completes the local aggregation, it encrypts the aggregation result again and returns the aggregation result to the aggregation management module through a one-way isolated network.

[0020] The aggregation management module performs global aggregation: collects the encrypted aggregation results of all data storage nodes, performs the final aggregation operation based on these aggregation results, obtains the global aggregation results, and decrypts and outputs them as needed.

[0021] Furthermore, the transmission module of the distributed aggregation device based on the unidirectional isolation network encrypts the aggregation request using an asymmetric encryption algorithm RSA before sending the aggregation request.

[0022] Furthermore, the local aggregation module of the distributed aggregation device based on the unidirectional isolation network performs aggregation operations on local data, including: summing, counting or average value calculation according to the aggregation request.

[0023] Furthermore, the local aggregation module of the distributed aggregation device based on the unidirectional isolation network uses the asymmetric encryption algorithm RSA to encrypt the aggregation result again, encrypts the hash value of the aggregation result data using the private key, generates a digital signature, and returns the digital signature and the encrypted aggregation result to the aggregation management module.

[0024] The aggregation management module decrypts the collected encrypted aggregation results to obtain the aggregation result data, verifies the aggregation result data using digital signatures, and then performs the final aggregation operation based on these aggregation results.

[0025] The benefits of the present invention are:

[0026] Enhanced data privacy protection: Through one-way isolation network and encryption technology, data leakage during the aggregation process is effectively prevented, improving the level of data privacy protection.

[0027] Improved security: Even if the network is attacked, due to the one-way transmission and encryption of data, it is difficult for attackers to obtain the original data, thus enhancing the security of the system.

[0028] Maintaining aggregation efficiency: Without sacrificing data privacy, efficient distributed data aggregation is achieved, which is suitable for large-scale data processing scenarios.

[0029] Wide applicability: This method can be applied to a variety of scenarios where data privacy needs to be protected, such as finance, medical care, the Internet of Things, and other fields. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 It is a schematic flow chart of the method of the present invention. DETAILED DESCRIPTION

[0031] The present invention is further described below in conjunction with the accompanying drawings and specific embodiments so that those skilled in the art can better understand the present invention and implement it, but the embodiments are not intended to limit the present invention.

[0032] Example 1

[0033] The present invention provides a distributed aggregation method based on a unidirectional isolation network, comprising:

[0034] Step 1: Build a unidirectional isolation network: Establish a unidirectional transmission channel to allow aggregation requests to be transmitted unidirectionally to the data storage node, ensure the unidirectionality of the data transmission process, and prevent data backtracking and leakage.

[0035] Step 2: Send an encrypted aggregation request: Before sending the aggregation request, use the asymmetric encryption algorithm RSA to encrypt the aggregation request to ensure the confidentiality of the request content during transmission.

[0036] Step 3: Perform local aggregation of the data storage node: Receive the encrypted aggregation request through the data storage node, decrypt the aggregation request and perform aggregation operations on the local data, including: summing, counting or averaging according to the aggregation request without transmitting the original data to other nodes.

[0037] Step 4: Get the encrypted transmission aggregation result: When the data storage node completes the local aggregation, use the asymmetric encryption algorithm RSA to encrypt the aggregation result again, use the hash value of the private key aggregation result data to encrypt, generate a digital signature, and return the digital signature and encrypted aggregation result.

[0038] Step 5: Perform global aggregation: Collect the encrypted aggregation results of all data storage nodes, decrypt the collected encrypted aggregation results, obtain the aggregation result data, verify the aggregation result data with a digital signature, and then perform the final aggregation operation based on these aggregation results to obtain the global aggregation result, which is then decrypted and output as needed.

[0039] The one-way isolation network of the method of the present invention ensures that the aggregation request can only be transmitted from the aggregation module to the data storage node in one direction to prevent data backtracking, wherein the aggregation request and the aggregation result are encrypted by an encryption algorithm to ensure confidentiality during the transmission process. Local aggregation operations are performed through the data storage node, without the need to transmit the original data to other nodes, protecting data privacy, and finally the encrypted aggregation results of all nodes collected are globally aggregated to obtain the final global aggregation result, which can be decrypted and output as needed.

[0040] Example 2

[0041] The present invention also provides a distributed aggregation device based on a unidirectional isolated network, comprising an isolated network management module, an aggregation management module, a local aggregation module and a transmission module.

[0042] The isolation network management module builds a unidirectional isolation network and establishes a unidirectional transmission channel. The aggregation management module allows the aggregation request to be transmitted unidirectionally to the data storage node.

[0043] The transmission module sends an encrypted aggregation request: Before sending the aggregation request, the transmission module uses an encryption algorithm to encrypt the aggregation request.

[0044] The local aggregation module performs local aggregation of data storage nodes: the data storage node receives the encrypted aggregation request through the local aggregation module, decrypts the aggregation request and performs the aggregation operation of the local data.

[0045] The aggregation management module obtains the encrypted transmission aggregation result: When the data storage node completes the local aggregation, it encrypts the aggregation result again and returns the aggregation result to the aggregation management module through a one-way isolated network.

[0046] The aggregation management module performs global aggregation: collects the encrypted aggregation results of all data storage nodes, performs the final aggregation operation based on these aggregation results, obtains the global aggregation results, and decrypts and outputs them as needed.

[0047] As the information interaction and execution process between the modules of the above-mentioned device are based on the same concept as the embodiment of the method of the present invention, the specific contents can be found in the description of the embodiment of the method of the present invention and will not be repeated here.

[0048] Likewise, the benefits of the device of the present invention are:

[0049] Enhanced data privacy protection: Through one-way isolation network and encryption technology, data leakage during the aggregation process is effectively prevented, improving the level of data privacy protection.

[0050] Improved security: Even if the network is attacked, due to the one-way transmission and encryption of data, it is difficult for attackers to obtain the original data, thus enhancing the security of the system.

[0051] Maintaining aggregation efficiency: Without sacrificing data privacy, efficient distributed data aggregation is achieved, which is suitable for large-scale data processing scenarios.

[0052] Wide applicability: This method can be applied to a variety of scenarios where data privacy needs to be protected, such as finance, medical care, the Internet of Things, and other fields.

[0053] It should be noted that not all steps and modules in the above-mentioned processes and device structures are necessary, and some steps or modules can be ignored according to actual needs. The execution order of each step is not fixed and can be adjusted as needed. The system structure described in the above-mentioned embodiments can be a physical structure or a logical structure, that is, some modules may be implemented by the same physical entity, or some modules may be implemented by multiple physical entities, or some components in multiple independent devices may be implemented together.

[0054] The above-described embodiments are only preferred embodiments for fully illustrating the present invention, and the protection scope of the present invention is not limited thereto. Equivalent substitutions or changes made by those skilled in the art based on the present invention are within the protection scope of the present invention. The protection scope of the present invention shall be subject to the claims.

Claims

1. A distributed aggregation method based on a unidirectional isolated network, characterized in that include: Step 1: Build a one-way isolated network: Establish a one-way transmission channel to allow aggregation requests to be transmitted one-way to the data storage node. Step 2: Send an encrypted aggregation request: Before sending the aggregation request, encrypt the aggregation request using an encryption algorithm. Step 3: Perform local aggregation of the data storage node: Receive the encrypted aggregation request through the data storage node, decrypt the aggregation request and perform the aggregation operation of the local data. Step 4: Get encrypted transmission aggregation results: When the data storage node completes local aggregation, it encrypts the aggregation results again and returns the aggregation results through a one-way isolated network. Step 5: Perform global aggregation: Collect the encrypted aggregation results of all data storage nodes, perform the final aggregation operation based on these aggregation results, obtain the global aggregation results, and decrypt and output them as needed.

2. According to claim 1, a distributed aggregation method based on a unidirectional isolated network is characterized in that In step 2, before sending the aggregation request, the aggregation request is encrypted using the asymmetric encryption algorithm RSA.

3. The distributed aggregation method based on a unidirectional isolated network according to claim 1, characterized in that In step 3, the aggregation operation of the local data is performed, including: summing, counting or average value calculation according to the aggregation request.

4. The distributed aggregation method based on a unidirectional isolated network according to claim 1, characterized in that In step 4, the aggregation result is encrypted again using the asymmetric encryption algorithm RSA, and the hash value of the aggregation result data is encrypted using the private key to generate a digital signature, and the digital signature and the encrypted aggregation result are returned. In step 5, the collected encrypted aggregation results are decrypted to obtain the aggregation result data, the aggregation result data is verified using a digital signature, and then the final aggregation operation is performed based on these aggregation results.

5. A distributed aggregation device based on a unidirectional isolation network, characterized in that Includes isolation network management module, aggregation management module, local aggregation module and transmission module The isolation network management module builds a unidirectional isolation network and establishes a unidirectional transmission channel. The aggregation management module allows the aggregation request to be transmitted unidirectionally to the data storage node. The transmission module sends an encrypted aggregation request: Before sending the aggregation request, the transmission module uses an encryption algorithm to encrypt the aggregation request. The local aggregation module performs local aggregation of data storage nodes: the data storage node receives the encrypted aggregation request through the local aggregation module, decrypts the aggregation request and performs the aggregation operation of the local data. The aggregation management module obtains the encrypted transmission aggregation result: When the data storage node completes the local aggregation, it encrypts the aggregation result again and returns the aggregation result to the aggregation management module through a one-way isolated network. The aggregation management module performs global aggregation: collects the encrypted aggregation results of all data storage nodes, performs the final aggregation operation based on these aggregation results, obtains the global aggregation results, and decrypts and outputs them as needed.

6. A distributed aggregation device based on a unidirectional isolation network according to claim 5, characterized in that Before sending the aggregation request, the transmission module uses the asymmetric encryption algorithm RSA to encrypt the aggregation request.

7. A distributed aggregation device based on a unidirectional isolation network according to claim 5, characterized in that The local aggregation module performs aggregation operations on local data, including summing, counting or averaging according to the aggregation request.

8. The distributed aggregation method based on a unidirectional isolated network according to claim 1, characterized in that The local aggregation module uses the asymmetric encryption algorithm RSA to encrypt the aggregation result again, encrypts the hash value of the aggregation result data with the private key, generates a digital signature, and returns the digital signature and encrypted aggregation result to the aggregation management module. The aggregation management module decrypts the collected encrypted aggregation results to obtain the aggregation result data, verifies the aggregation result data using digital signatures, and then performs the final aggregation operation based on these aggregation results.

Images