Data exchange method and apparatus, electronic device, and medium

Abstract

The application provides a data exchange method and device, electronic equipment and medium, and relates to the technical field of data processing.The method comprises the following steps: receiving a data exchange request, and performing identity authentication on a data requester sending the data exchange request; if the data requester passes the identity authentication, sending a resource data authorization request to a data owner; and if the resource data authorization is obtained, performing resource data access on a data platform to obtain the data to be exchanged, thereby realizing data exchange.The application first performs identity authentication on the data requester sending the data exchange request, ensures the compliance of the identity of the data requester, avoids data infringement, sends a resource data authorization request to the data owner after the data requester sending the data exchange request passes the identity authentication, controls the authorization range of the resource data by the principle of the data owner itself, and then obtains the data to be exchanged, which can ensure the reasonable use of the resource data and improve the security of data exchange.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data processing, and in particular to a data exchange method and device, electronic equipment, non-transitory computer readable storage medium, and computer program product. BACKGROUND

[0002] In the existing data exchange process, data is directly obtained according to a data exchange request to achieve data exchange, and there is a general lack of complete identity authentication and resource data authorization links, resulting in frequent problems of data infringement and data abuse in the current data exchange ecosystem. In order to solve the foregoing problems, the prior art uses the OAuth2 open authorization mechanism or the OIDC (OpenID Connect) identity authentication and identity data authorization mechanism, wherein the OAuth2 mechanism is essentially an authorization protocol, which cannot provide perfect identity authentication function to the client, and the core function of the OIDC mechanism is to authenticate the identity and authorize the identity detailed data (Userinfo), and the management and authorization function of the resource data is not realized, so the two mechanisms do not simultaneously solve the problems of identity authentication and resource data authorization in the data exchange ecosystem. SUMMARY

[0003] The present application provides a data exchange method, device, electronic equipment, non-transitory computer readable storage medium, and computer program product to solve the problem that the prior art cannot simultaneously solve the problems of identity authentication and resource data authorization in the data exchange ecosystem, resulting in frequent problems of data infringement and data abuse in the current data exchange ecosystem.

[0004] The present application provides a data exchange method, comprising:

[0005] receiving a data exchange request and performing identity authentication on a data requester sending the data exchange request;

[0006] determining that the data requester sending the data exchange request passes the requester identity authentication, and then sending a resource data authorization request to a data owner according to the data exchange request;

[0007] determining that the data exchange request obtains resource data authorization from the data owner, and then performing resource data access on a data platform according to the data exchange request to obtain data to be exchanged, thereby realizing data exchange.

[0008] According to the data exchange method provided by the present application, the identity authentication on the data requester sending the data exchange request comprises:

[0009] obtaining identity authentication data of the data requester sending the data exchange request;

[0010] comparing the to-be-authenticated information of the data requester with the identity authentication data to obtain an identity authentication result.

[0011] According to the data exchange method provided by the application, the determination condition of the data requester issuing the data exchange request through the requester identity authentication is that the identity authentication data contains the to-be-authenticated information.

[0012] According to the data exchange method provided by the application, the information in the data exchange request includes:

[0013] to-be-exchanged data entry information, request deadline information, usage mode information and usage range information.

[0014] According to the data exchange method provided by the application, the resource data authorization request sent to the data owner according to the data exchange request is specifically:

[0015] The resource data authorization request is sent to the data owner according to the to-be-exchanged data entry information of the data request.

[0016] According to the data exchange method provided by the application, the usage mode information includes direct usage mode information and indirect usage mode information, and the resource data access to the data platform according to the data exchange request to obtain to-be-exchanged data includes:

[0017] According to the usage mode information of the data exchange request, the resource data access request is sent to the data platform;

[0018] When the usage mode information of the data exchange request is direct usage mode information, the first to-be-exchanged data returned by the data platform is obtained.

[0019] When the usage mode information of the data exchange request is indirect usage mode information, the second to-be-exchanged data returned by the data platform is obtained, wherein the second to-be-exchanged data is processed through a computing task.

[0020] According to the data exchange method provided by the application, the data exchange request obtains the resource data authorization of the data owner, including:

[0021] The data exchange request obtains the entire resource data authorization of the data owner.

[0022] The data exchange request obtains part of the resource data authorization of the data owner.

[0023] The application also provides a data exchange device, which comprises:

[0024] An identity authentication module is configured to receive a data exchange request and perform identity authentication on a data requester sending the data exchange request.

[0025] A resource data authorization module is configured to, when the data requester sending the data exchange request passes the identity authentication, send a resource data authorization request to a data owner according to the data exchange request.

[0026] A data exchange module is configured to, when the data exchange request obtains the resource data authorization of the data owner, perform resource data access to a data platform according to the data exchange request to obtain the data to be exchanged, and realize data exchange.

[0027] The application further provides an electronic device comprising a memory, a processor, and a computer program stored in the memory and capable of running on the processor, wherein the processor implements the steps of the data exchange method according to any one of the above embodiments when executing the program.

[0028] The application further provides a non-transitory computer readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the data exchange method according to any one of the above embodiments.

[0029] The application further provides a computer program product comprising a computer program, wherein the computer program, when executed by a processor, implements the steps of the data exchange method according to any one of the above embodiments.

[0030] The data exchange method, device, electronic device, non-transitory computer readable storage medium, and computer program product provided by the application first perform identity authentication on a data requester sending a data exchange request, ensure the compliance of the identity of the data requester, avoid data infringement, send a resource data authorization request to a data owner when the data requester sending the data exchange request passes the identity authentication, control the authorization range of the resource data by the principle of the data owner itself, perform resource data access to a data platform to obtain the data to be exchanged, and realize data exchange, thereby ensuring the reasonable use of the resource data, improving the security of data exchange, and ensuring the stability of the data exchange ecology. BRIEF DESCRIPTION OF DRAWINGS

[0031] In order to more clearly illustrate the technical solutions of the present application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiments or prior art description. Obviously, the drawings in the following description are some embodiments of the present application, and those skilled in the art can obtain other drawings according to these drawings without creative labor.

[0032] Figure 1 is a flowchart of the data exchange method provided by the present application.

[0033] Figure 2 is a structural schematic diagram of the data exchange device provided by the present application;

[0034] Figure 3 is a structural schematic diagram of the electronic device provided by the present application. DETAILED DESCRIPTION

[0035] In order to make the objects, technical solutions and advantages of the present application clearer, the technical solutions in the present application will be described clearly and completely below with reference to the drawings in the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all the other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application.

[0036] The present application will be described below with reference to the drawings. Figures 1-3 The data exchange method, device and electronic device provided by the present application are described.

[0037] With reference to Figure 1 , the data exchange method provided by the present application can include:

[0038] S110, receiving a data exchange request and performing identity authentication on a data requester sending the data exchange request;

[0039] S120, determining that the data requester sending the data exchange request passes the requester identity authentication, and then sending a resource data authorization request to a data owner according to the data exchange request;

[0040] S130, determining that the data exchange request obtains the resource data authorization of the data owner, and then performing resource data access to a data platform according to the data exchange request to obtain the data to be exchanged, thereby realizing data exchange.

[0041] It should be noted that the execution subject of the data exchange method provided by the present application can be any terminal-side device, such as a data exchange system.

[0042] The data exchange system can include a data exchange client, a data owner, a data platform party, a data requester, and an authorization service provider. The data exchange client is used for data exchange operations by system users and includes a data exchange system and a third-party application integrated with an SDK. It can be understood as the "front end" of the data exchange process. The authentication and authorization service provider is the central role of data exchange. It can implement authentication and authorization and access control functions by issuing credentials and providing verification. It can be understood as the "back end" of the data exchange process. The data requester can initiate a data exchange request based on its own resource data needs, including items and scope of data to be exchanged. The data owner can process resource data authorization requests based on its own control granularity of resource data and control the authorization scope of resource data based on its own principles. The data platform party is used to store original resource data and to verify resource data access requests through resource data access credentials to implement access control functions.

[0043] In step S110, the terminal-side device receives the data exchange request and assists the data requester that initiated the data exchange request to complete identity authentication.

[0044] It should be noted that in the data exchange system, the data requester can initiate a data exchange request through the data exchange client. The information in the data exchange request includes item information of data to be exchanged, request period information, usage method information, and usage range information for subsequent data owner review and authorization.

[0045] It should be noted that after receiving the data exchange request through the data exchange client, the terminal-side device can initiate a request to the authentication and authorization service provider to perform identity authentication on the data requester of the data exchange request to ensure the identity compliance of the data requester. It should be noted that the data requester needs to have joined the data exchange ecosystem and registered an identity with the authentication and authorization service provider to be able to perform identity authentication.

[0046] In step S120, the terminal-side device determines whether the data requester that initiated the data exchange request has passed the requester identity authentication, and then assists the data owner to complete resource data authorization based on the data exchange request.

[0047] It should be noted that the terminal-side device can send a resource data authorization request to the data owner according to the data item information to be exchanged of the data request, specifically, the terminal-side device can first send a resource data authorization request to the authentication and authorization service provider according to the data item information to be exchanged of the data request, and then the authentication and authorization service provider is directed to forward to the data exchange client, and then the data exchange client notifies the resource data authorization request to the data owner, realizing the directed interaction between the authentication and authorization service provider and the data owner, and establishing an information channel for the resource data authorization operation.

[0048] The data owner will audit the resource data authorization request in the resource data authorization operation, and control the authorization range of the resource data according to its own principles, so as to respond to the resource data authorization request with full agreement, partial agreement or full rejection. After receiving the response of the data owner, if the authentication and authorization service provider agrees to access the resource data, it will send a resource data authorization response to the data exchange client, which contains resource data access credentials. The information in the resource data access credentials includes data requester identity information, resource data item information, authorization period information, authorized use mode information, authorized range information and other fields for realizing access control.

[0049] In step S130, the terminal-side device will determine that the data exchange request has obtained the resource data authorization of the data owner, and then perform resource data access to the data platform according to the data exchange request to obtain the data to be exchanged, and realize data exchange.

[0050] It should be noted that after the data exchange client in the terminal-side device receives the resource data authorization response, it can initiate a resource data access request to the data platform carrying the resource data access credentials in the resource data authorization response; if the authorized use mode information in the resource data access credentials is indirect use information, that is, the data requester cannot directly "get" the plaintext resource data, the data requester has two schemes to use the resource data: 1) the data requester needs to submit the complete calculation task using data to the data platform, and the data platform performs local calculation according to the complete calculation task and returns the calculation result to the data requester; 2) the data requester designs a privacy calculation algorithm to divide the complete calculation task into subtasks protected by privacy, and sends the subtasks to the data platform, and the data platform performs privacy calculation according to the algorithm logic and combines the data locally, and returns the sub-computation result to the data requester, and the data requester integrates multiple sub-computation results and obtains the final result.

[0051] Further, after receiving the resource data access request initiated by the terminal side device, the data platform party initiates a data access credential verification request to the authentication and authorization service provider, so that the authentication and authorization service provider compares the credentials stored locally or in the cloud and returns a data access credential verification result; if the data access credential verification result is valid and the authorized use mode is direct use, the data platform party can extract the resource data matched with the resource data access request from the local storage or the cloud storage and send it to the data exchange client in the same format; if the data access credential verification result is valid and the authorized use mode is indirect use, the data platform party extracts the resource data matched with the resource data access request from the local storage or the cloud storage, and combines the computing task provided by the data requester to perform local calculation, and sends the calculation result to the data exchange client, and the data exchange client will further process and integrate the result according to the computing task to form the final result; the terminal side device can display the obtained data to be exchanged or the calculation result to the data requester through the data exchange client, complete the resource data access, and facilitate subsequent data exchange.

[0052] The data exchange method provided by the application first performs identity authentication on the data requester who initiates the data exchange request, ensures the compliance of the identity of the data requester, avoids data infringement, and then sends a resource data authorization request to the data owner after the data requester of the data exchange request passes the requester identity authentication, controls the authorization range of the resource data by the principle of the data owner itself, and then performs resource data access to the data platform party to obtain the data to be exchanged, realizes data exchange, can guarantee the reasonable use of resource data, improves the security of data exchange, and ensures the stability of the data exchange ecology.

[0053] In one embodiment, the identity authentication of the data requester who initiates the data exchange request comprises:

[0054] Obtaining the identity authentication data of the data requester who initiates the data exchange request;

[0055] Comparing the to-be-authenticated information of the data requester with the identity authentication data to obtain an identity authentication result.

[0056] It should be noted that the terminal-side device can guide the data requester to perform identity authentication through account password or other forms by using the identity authentication page guide data provided by the authentication and authorization service provider, so as to obtain the to-be-authenticated information of the data requester. In addition, the terminal-side device can also inquire whether the data requester authorizes the data exchange client to obtain its identity authentication data through the data exchange client. When the data requester authorizes the data exchange client to obtain its identity authentication data, the authentication and authorization service provider can return the identity authentication response of the data requester to the data exchange client, which includes part of the identity authentication data of the data requester and an identity data credential for further obtaining detailed information. The data exchange client can select and use the identity data credential to obtain more detailed identity authentication data from the authentication and authorization service provider as needed.

[0057] It should be noted that the determination condition for determining whether the data requester issuing the data exchange request passes the requester identity authentication is that the identity authentication data contains the to-be-authenticated information. When the identity authentication data of the data requester obtained from the authorization service provider contains the to-be-authenticated information of the data requester, it indicates that the identity of the data requester meets the requirements, and the data requester is a safe requester. Therefore, it is determined that the data requester issuing the data exchange request successfully passes the requester identity authentication, thereby improving the security and compliance of the data exchange process.

[0058] In an embodiment, the data exchange request obtains the resource data authorization of the data owner, including:

[0059] The data exchange request obtains the entire resource data authorization of the data owner.

[0060] The data exchange request obtains part of the resource data authorization of the data owner.

[0061] It should be noted that according to the resource data entry information, the request period information, the use mode information, and the use range information in the data exchange request, the terminal-side device can control the authorization range of the resource data according to the preset rules through the authentication and authorization service provider, so as to ensure that the resource data is not misused.

[0062] In an embodiment, the use mode information includes direct use mode information and indirect use mode information, and the resource data access to the data platform party according to the data exchange request to obtain the to-be-exchanged data includes:

[0063] According to the use mode information of the data exchange request, the resource data access request is performed on the data platform party;

[0064] When the use mode information of the data exchange request is direct use mode information, the first to-be-exchanged data returned by the data platform party is obtained.

[0065] When the usage mode information of the data exchange request is indirect usage mode information, the second to-be-exchanged data returned by the data platform party is obtained, wherein the second to-be-exchanged data is processed by a computing task.

[0066] When the identity authentication of the data request party is successfully passed and the resource data authorization is obtained, the terminal side device can perform resource data access to the data platform party according to the data exchange request. Specifically, when the usage mode information of the data exchange request indicates that the usage mode of the resource data is direct usage, the data platform party directly sends the resource data matched with the data exchange request to the data exchange client in a unified format for the data request party to view, extract and use; when the usage mode information of the data exchange request indicates that the usage mode of the resource data is indirect usage, the data platform party can perform local calculation on the resource data matched with the data exchange request according to the computing task provided by the data request party, for example, can use privacy computing technologies such as secure multi-party computation, federated learning and differential privacy, and directly returns the calculation result to the data exchange client, so that the resource data can be more reasonably allocated, the resource data can be prevented from being abused, and the security of obtaining the resource data can be improved.

[0067] In addition, the present application solves the problems of data infringement and data abuse in the existing data exchange ecology by proposing a technical solution that integrates identity authentication, data authorization and access control functions, improves the security and compliance of the data exchange process; and the present application transfers the access control function of data exchange from the data platform party to the authentication and authorization service provider, builds a compatibility solution for accessing stock data into the data exchange ecology, and greatly improves the scalability of the data exchange system.

[0068] The data exchange device provided by the present application is described below, and the data exchange device described below can be referred to each other corresponding to the data exchange method described above.

[0069] Referring to Figure 2 The data exchange device provided by the present application can include:

[0070] The identity authentication module 210 is configured to receive a data exchange request and perform identity authentication on a data request party that issues the data exchange request;

[0071] The resource data authorization module 220 is configured to determine whether the data request party that issues the data exchange request passes the request party identity authentication, and then send a resource data authorization request to a data owner according to the data exchange request;

[0072] The data exchange module 230 is configured to: determine that the data exchange request is authorized by the resource data of the data owner, perform resource data access to the data platform according to the data exchange request, obtain the to-be-exchanged data, and realize data exchange.

[0073] It should be noted that the data exchange request is authorized by the resource data of the data owner, including:

[0074] The data exchange request is authorized by all resource data of the data owner.

[0075] The data exchange request is authorized by part of the resource data of the data owner.

[0076] In an embodiment, the identity authentication module 210 includes:

[0077] The identity authentication data obtaining submodule is configured to: obtain identity authentication data of a data requester sending the data exchange request.

[0078] The identity authentication result obtaining submodule is configured to: compare the to-be-authenticated information of the data requester with the identity authentication data, and obtain an identity authentication result.

[0079] In an embodiment, the determination condition that the data requester sending the data exchange request passes the requester identity authentication is that the identity authentication data contains the to-be-authenticated information.

[0080] In an embodiment, the information in the data exchange request includes:

[0081] To-be-exchanged data entry information, request time limit information, use mode information, and use range information.

[0082] In an embodiment, the resource data authorization module 220 is specifically configured to:

[0083] Determine that the data requester sending the data exchange request passes the requester identity authentication, and send a resource data authorization request to the data owner according to to-be-exchanged data entry information of the data exchange request.

[0084] In an embodiment, the data exchange module 230 includes:

[0085] The resource data access submodule is configured to: perform resource data access to the data platform according to use mode information of the data exchange request.

[0086] The first to-be-exchanged data obtaining submodule is configured to: when the use mode information of the data exchange request is direct use mode information, obtain first to-be-exchanged data returned by the data platform.

[0087] The second data to be exchanged obtaining submodule is used to: when the usage information of the data exchange request is indirect usage information, obtain the second data to be exchanged returned by the data platform, wherein the second data to be exchanged is processed by the computing task.

[0088] Figure 3 An example of a physical structure diagram of an electronic device is shown below. Figure 3 As shown, the electronic device may include: a processor 810, a communication interface 820, a memory 830, and a communication bus 840, wherein the processor 810, the communication interface 820, and the memory 830 communicate with each other via the communication bus 840. The processor 810 may call the logic instructions in the memory 830 to execute the data exchange method, which includes:

[0089] receiving a data exchange request and performing identity authentication on the data requester who issued the data exchange request;

[0090] Determining that the data requester that issues the data exchange request passes the requester identity authentication, then issuing a resource data authorization request to the data owner according to the data exchange request;

[0091] If it is determined that the data exchange request has obtained resource data authorization from the data owner, resource data access is performed on the data platform according to the data exchange request to obtain the data to be exchanged and realize data exchange.

[0092] In addition, the logic instructions in the above-mentioned memory 830 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0093] In another aspect, the present application also provides a computer program product, which comprises a computer program, the computer program being stored in a non-transitory computer readable storage medium, and the computer program being executable by a processor to enable a computer to perform the data exchange method provided by any of the above methods, and the method comprises:

[0094] receiving a data exchange request and performing identity authentication on a data requester sending the data exchange request;

[0095] determining that the data requester sending the data exchange request passes the identity authentication, and sending a resource data authorization request to a data owner according to the data exchange request;

[0096] determining that the data exchange request obtains the resource data authorization of the data owner, and performing resource data access to a data platform according to the data exchange request to obtain the data to be exchanged, thereby realizing data exchange.

[0097] In another aspect, the present application also provides a non-transitory computer readable storage medium, which stores a computer program, and the computer program is executable by a processor to perform the data exchange method provided by any of the above methods, and the method comprises:

[0098] receiving a data exchange request and performing identity authentication on a data requester sending the data exchange request;

[0099] determining that the data requester sending the data exchange request passes the identity authentication, and sending a resource data authorization request to a data owner according to the data exchange request;

[0100] determining that the data exchange request obtains the resource data authorization of the data owner, and performing resource data access to a data platform according to the data exchange request to obtain the data to be exchanged, thereby realizing data exchange.

[0101] The device embodiments described above are only schematic, wherein the units described as separate components can or can not be physically separate, and the components displayed as units can or can not be physical units, i.e., can be located in one place, or can be distributed on a plurality of network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the present embodiment scheme. Those skilled in the art can understand and implement without creative labor.

[0102] Those skilled in the art can clearly understand the technical solutions of the various embodiments from the above description of the embodiments, and the various embodiments can be implemented by means of software with the necessary general hardware platforms, and of course, can also be implemented by hardware. Based on such understanding, the above technical solutions, essentially or in other words, the part of the prior art that makes a contribution, can be embodied in the form of a software product, which can be stored in a computer readable storage medium, such as a ROM / RAM, a magnetic disk, an optical disk, and the like, and includes a number of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0103] Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, rather than limit them; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: it can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement for some technical features therein; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A data exchange method, characterized by, The method comprises: receiving a data exchange request and authenticating a data requester sending the data exchange request; information in the data exchange request comprises usage information; determining that the data requester sending the data exchange request passes the requester authentication, and sending a resource data authorization request to a data owner according to the data exchange request; determining that the data exchange request obtains resource data authorization from the data owner, and sending a resource data access request to a data platform according to the usage information of the data exchange request; when the usage information of the data exchange request is direct usage information, obtaining first to-be-exchanged data returned by the data platform; when the usage information of the data exchange request is indirect usage information, obtaining second to-be-exchanged data returned by the data platform, wherein the second to-be-exchanged data is processed by a computing task, and data exchange is realized; wherein, after receiving a resource data access request initiated by a terminal-side device, the data platform initiates a data access credential verification request to an authentication and authorization service provider, so that the authentication and authorization service provider compares the credential stored locally or in the cloud, and returns a data access credential verification result; if the data access credential verification result is valid and the authorized usage is direct usage, the data platform extracts resource data matching the resource data access request from local storage or cloud storage, and sends the resource data to a data exchange client in the same format; if the data access credential verification result is valid and the authorized usage is indirect usage, the data platform extracts resource data matching the resource data access request from local storage or cloud storage, and performs local calculation combined with the computing task provided by the data requester, and sends the calculation result to the data exchange client; the data exchange client further processes and integrates the result according to the computing task to form a final result; The terminal-side device displays the obtained to-be-exchanged data or calculation result to the data requester through the data exchange client, and completes resource data access.

2. The data exchange method of claim 1, wherein, The authentication of the data requester sending the data exchange request comprises: obtaining identity authentication data of the data requester sending the data exchange request; comparing the to-be-authenticated information of the data requester with the identity authentication data to obtain an identity authentication result.

3. The data exchange method of claim 2, wherein, The determination condition that the data requester sending the data exchange request passes the requester authentication is that the identity authentication data contains the to-be-authenticated information.

4. The data exchange method according to any one of claims 1 to 3, characterized in that, The information in the data exchange request comprises: to-be-exchanged data item information, request deadline information, and usage range information.

5. The data exchange method of claim 4, wherein, The sending of the resource data authorization request to the data owner according to the data exchange request comprises: sending a resource data authorization request to the data owner according to the to-be-exchanged data item information of the data request.

6. The data exchange method according to any one of claims 1 to 3, characterized in that, The data exchange request obtains resource data authorization from the data owner, comprising: the data exchange request obtains all resource data authorization from the data owner; or, the data exchange request obtains part of the resource data authorization from the data owner.

7. A data exchange device, characterized by The method comprises: An identity authentication module is configured to receive a data exchange request and perform identity authentication on a data requester sending the data exchange request; information in the data exchange request comprises usage information; A resource data authorization module is configured to determine whether the data requester sending the data exchange request passes the identity authentication, and then send a resource data authorization request to a data owner according to the data exchange request; A data exchange module is configured to determine whether the data exchange request obtains resource data authorization from the data owner, and then send a resource data access request to a data platform according to usage information of the data exchange request; when the usage information of the data exchange request is direct usage information, obtain first to-be-exchanged data returned by the data platform; when the usage information of the data exchange request is indirect usage information, obtain second to-be-exchanged data returned by the data platform, wherein the second to-be-exchanged data is processed by a computing task, and data exchange is realized; The data platform receives a resource data access request initiated by a terminal-side device, initiates a data access credential verification request to an authentication and authorization service provider, and makes the authentication and authorization service provider compare a locally stored or cloud-stored credential and return a data access credential verification result; if the data access credential verification result is valid and the authorized usage is direct usage, the data platform extracts resource data matching the resource data access request from the local storage or the cloud storage and sends the resource data to a data exchange client in the same format; if the data access credential verification result is valid and the authorized usage is indirect usage, the data platform extracts resource data matching the resource data access request from the local storage or the cloud storage, performs local computing in combination with a computing task provided by the data requester, and sends the computing result to the data exchange client; the data exchange client further processes and integrates the result according to the computing task to form a final result; The terminal-side device displays the obtained to-be-exchanged data or computing result to the data requester through the data exchange client, and completes resource data access.

8. An electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that, The processor implements the steps of the data exchange method according to any one of claims 1 to 6 when executing the program. 9.A non-transitory computer-readable storage medium having stored thereon a computer program. The computer program implements the steps of the data exchange method according to any one of claims 1 to 6 when executed by the processor.

Images