A browser-based privacy computing method, electronic device, and storage medium

Abstract

The present invention provides a browser-based private computing method, electronic device, and storage medium. The browser-based private computing method includes the following steps: loading a private computing plug-in into the browser; the private computing plug-in receiving login information of a website logged in by a user through the browser; the private computing plug-in sending the login information to a server, causing the server to sign the login information and send the signed login information and a participant list including at least one participant to the private computing plug-in; and the private computing plug-in initiating a private computing invitation to at least one participant in the participant list based on the signed login information, so that the private computing plug-in performs private computing with the invited participant. The present invention can improve corresponding flexibility.

Description

Technical Field

[0001] The present invention relates to privacy encryption technology, and in particular to a browser-based privacy computing method, electronic device and storage medium. Background Art

[0002] With the introduction and implementation of privacy data protection laws in various countries and the gradual improvement of users' awareness of privacy data protection, private data is becoming increasingly difficult to share in plain text. Therefore, privacy computing systems, which make "data available but not visible", are becoming more and more widely used. However, general privacy computing systems often need to be deployed independently in a server environment and require permission to access business system data. Summary of the Invention

[0003] Embodiments of the present invention provide a browser-based privacy computing method, electronic device, and storage medium. The present invention eliminates the need to deploy a privacy computing system in a server environment, thereby improving flexibility.

[0004] According to a first aspect of an embodiment of the present invention, a browser-based privacy computing method is provided, comprising the following steps:

[0005] Loading a privacy computing plug-in in the browser;

[0006] The privacy computing plug-in receives login information of a website logged in by a user through the browser;

[0007] The privacy computing plug-in sends the login information to the server, so that the server signs the login information and sends the signed login information and a participant list including at least one participant to the privacy computing plug-in;

[0008] The privacy computing plug-in initiates a privacy computing invitation to at least one participant in the participant list based on the signed login information, so that the privacy computing plug-in performs privacy computing with the invited participant.

[0009] Optionally, in a possible implementation of the first aspect, the privacy computing plug-in includes a website verification public key, and the method further includes: the privacy computing plug-in verifies the signed login information through the verification public key, and when the verification is successful, initiates a privacy computing invitation to at least one participant in the participant list.

[0010] Optionally, in a possible implementation manner of the first aspect, the login information includes user name information of the user logging into the website, and the signature verification public key has a corresponding relationship with the user name information.

[0011] Optionally, in a possible implementation of the first aspect, the login information further includes certificate information and login success information, wherein the certificate information corresponds to the website, and the login success information is used to indicate that the user has successfully logged into the website.

[0012] Optionally, in a possible implementation of the first aspect, the certificate information includes an SSL certificate.

[0013] Optionally, in a possible implementation of the first aspect, the method further includes: the privacy computing plug-in is also used to obtain user data of the user on the website, so that the privacy computing plug-in and the invited participant perform privacy computing based on the user data.

[0014] Optionally, in a possible implementation of the first aspect, the privacy computing plug-in communicates with the at least one participant in an encrypted manner.

[0015] Optionally, in a possible implementation of the first aspect, the privacy computing plug-in is written and executed using JAVASCRIPT and / or WASM.

[0016] According to a second aspect of an embodiment of the present invention, an electronic device is provided, comprising: one or more processors; a memory; and one or more computer programs, wherein the one or more computer programs are stored in the memory, and the one or more computer programs include instructions that, when executed by the electronic device, cause the electronic device to execute the method described in the first aspect.

[0017] According to a third aspect of an embodiment of the present invention, a readable storage medium is provided, in which a computer program is stored. When the computer program is executed by a processor, it is used to implement the method of the first aspect of the present invention and various possible designs of the first aspect.

[0018] The present invention provides a browser-based privacy computing method, electronic device, and storage medium, which can load a privacy computing plug-in in the browser. When a user logs in to a website through the browser, the privacy computing plug-in can perform corresponding privacy computing to protect the user's data privacy. In addition, the privacy computing plug-in is loaded in the browser, which improves the corresponding flexibility. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 A flowchart of a browser-based privacy computing method according to an embodiment of the present invention;

[0020] Figure 2 This is an interactive flow chart of the browser-based privacy computing method in this embodiment;

[0021] Figure 3 This is a schematic structural diagram of an electronic device proposed in another embodiment of the present invention. DETAILED DESCRIPTION

[0022] To make the objectives, technical solutions, and advantages of the embodiments of the present invention more clear, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts shall fall within the scope of protection of the present invention.

[0023] The terms "first," "second," "third," "fourth," and so forth (if any) in the description and claims of the present invention and the accompanying drawings are used to distinguish similar objects and are not necessarily used to describe a particular order or sequential sequence. It should be understood that the terms used in this manner are interchangeable where appropriate, such that the embodiments of the present invention described herein can be practiced in sequences other than those illustrated or described herein.

[0024] It should be understood that in various embodiments of the present invention, the size of the sequence number of each process does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0025] It should be understood that in the present invention, "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or apparatus that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to these processes, methods, products or apparatuses.

[0026] It should be understood that in the present invention, "multiple" refers to two or more. "And / or" is only a description of the association relationship of associated objects, indicating that three relationships can exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "Contains A, B and C", "Contains A, B, C" means that A, B, and C are all included, "Contains A, B or C" means that one of A, B, and C is included, and "Contains A, B and / or C" means that any one, any two, or any three of A, B, and C are included.

[0027] It should be understood that, in the present invention, "B corresponding to A," "B corresponding to A," "A corresponds to B," or "B corresponds to A" means that B is associated with A and B can be determined based on A. Determining B based on A does not mean determining B based solely on A; B can also be determined based on A and / or other information. A and B match when the similarity between A and B is greater than or equal to a preset threshold.

[0028] Depending on the context, "if" as used herein may be interpreted as "when" or "when" or "in response to determining" or "in response to detecting."

[0029] The following specific embodiments are used to describe the technical solution of the present invention in detail. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments.

[0030] During the research process, the inventors of the present invention discovered that with the successive introduction and implementation of privacy data protection laws in various countries and the gradual improvement of users' awareness of privacy data protection, privacy data is becoming increasingly difficult to be shared in plain text. Therefore, privacy computing systems, a technology that makes "data available but not visible", are becoming more and more widely used. However, general privacy computing systems often need to be deployed in a server environment and require permission to access business system data. This will at least lead to the following problems: 1. Many users of Internet platforms cannot deploy privacy computing systems to the internal environment of the Internet platform to perform privacy computing on their own data; 2. Even if they apply for deployment permissions, they still need special deployment environments and software support, which greatly limits the use of privacy computing among general user groups.

[0031] In order to solve the above problems, in the first aspect, an embodiment of the present invention provides a browser-based privacy computing method, see Figure 1 As shown, the method includes the following steps:

[0032] S10. Load the privacy computing plug-in in the browser;

[0033] S20. The privacy computing plug-in receives login information of a website logged in by the user through a browser;

[0034] S30. The privacy computing plug-in sends the login information to the server, so that the server signs the login information and sends the signed login information and a participant list including at least one participant to the privacy computing plug-in.

[0035] S40. The privacy computing plug-in initiates a privacy computing invitation to at least one participant in the participant list based on the signed login information, so that the privacy computing plug-in performs privacy computing with the invited participant.

[0036] For example, in this embodiment, a plug-in (also known as addin, add-in, addon, or add-on) is a program written in accordance with a certain standard application program interface. It can only run under the system platform specified by the program (it may support multiple platforms at the same time) and cannot run independently from the specified platform. This is because the plug-in needs to call the function library or data provided by the original pure system. Many software programs have plug-ins, and there are countless types of plug-ins. For example, in IE, after installing the relevant plug-in, the web browser can directly call the plug-in program to process specific types of files. The website can also be a third-party website or a pre-set website.

[0037] For example, in this embodiment, a browser is an application used to retrieve, display, and transmit web information resources. Web information resources are identified by Uniform Resource Identifiers (URIs) and can be a web page, an image, a video, or any other content presented on the web. Users can browse related information through a browser using hyperlinks.

[0038] For example, in this embodiment, privacy computing refers to a collection of technologies that implement data analysis and computation while protecting the data itself from external disclosure. Privacy computing is a computational theory and method for protecting private information throughout its lifecycle. It is a computable model and axiomatic system for privacy measurement, privacy leakage costs, privacy protection, and the complexity of privacy analysis when ownership, management, and usage rights of private information are separated.

[0039] For example, in S10, the privacy computing plug-in can be a plug-in with privacy computing functions. The privacy computing plug-in can be loaded in the browser used by the user and run in the browser without being deployed in the server, thereby increasing adaptability and flexibility.

[0040] For example, in S20, when a user logs in to a website through a browser, the privacy computing plug-in will obtain his login information. Here, the login information may include the user's username information, certificate information, and login success information. The certificate information corresponds to the website, and the two have a one-to-one matching relationship. The login success information is used to indicate that the user has successfully logged in to the website.

[0041] For example, the certificate information may include an SSL certificate. In this embodiment, an SSL certificate complies with the SSL protocol and is issued by a trusted digital certificate authority (CA) after verifying the server's identity. It provides server authentication and data transmission encryption. SSL certificates are currently available and are not described in detail in this embodiment.

[0042] For example, in S30, after the privacy computing plug-in receives the login information, the privacy computing plug-in will send the corresponding login information to the server. After receiving the login information, the server will sign the login information to mark the login information. After completing the signature, the server will send the corresponding signed login information and a list of participants including at least one participant to the privacy computing plug-in.

[0043] For example, a list of participants can be pre-stored in a server. The participants in the list of participants can be understood as parties that can be used to participate in privacy computing. The multiple participants participating in privacy computing can be different departments of the same organization or different organizations. The multiple participants participating in privacy computing can jointly perform corresponding privacy computing on the data.

[0044] For example, in S40, the privacy computing plug-in initiates a privacy computing invitation to at least one participant in the participant list based on the signed login information. The participant receiving the invitation can perform privacy computing together with the privacy computing plug-in.

[0045] For example, in this embodiment, the privacy computing plug-in may also include a website verification public key. The privacy computing plug-in can verify the signed login information through the verification public key. When the verification is successful, the privacy computing plug-in can initiate a privacy computing invitation to at least one participant in the list of receiving participants. After the participant receives the invitation, it can perform privacy computing on the data.

[0046] For example, in this embodiment, when loading the privacy computing plug-in through the browser, the user can apply for loading by logging in to the website with the username information. At this time, the privacy computing plug-in will also generate a signature verification public key that is paired with the username information based on this username information. When the privacy computing plug-in receives the signed login information sent by the server, the privacy computing plug-in will check the username information in the login information to confirm whether the signature verification public key and the username information in the signed login information can be paired. When the pairing is successful, the privacy computing plug-in will accordingly initiate a privacy computing invitation to at least one participant in the participant list, so that the privacy computing plug-in can perform privacy computing with the invited participant.

[0047] For example, in this embodiment, the method further includes: the privacy computing plug-in is also used to obtain user data of the user on the website, so that the privacy computing plug-in and the invited participant perform privacy computing based on the user data.

[0048] For example, user data can be understood as: after a user logs in to a website, the user's personal privacy data on the website can be protected by a privacy computing plug-in and the invited parties through privacy computing based on the user data, thereby improving privacy.

[0049] For example, in this embodiment, the privacy computing plug-in communicates with at least one participant in an encrypted manner. The privacy computing plug-in and at least one participant jointly perform privacy processing on user data and obtain corresponding calculation results respectively. The privacy computing plug-in and the participant can transmit the calculation structure through encrypted communication.

[0050] For example, in this embodiment, there are multiple ways to implement the privacy computing plug-in, including writing and executing it through JAVASCRIPT and / or WASM. The advantages of this method are: low intrusion to the system, high flexibility, high security, and ease of use.

[0051] A browser-based privacy computing method provided in this embodiment can load a privacy computing plug-in in the browser. When a user logs in to a website through the browser, the privacy computing plug-in can perform corresponding privacy computing to protect the user's data privacy. In addition, the privacy computing plug-in is loaded in the browser, which improves the corresponding flexibility.

[0052] Figure 2 The interactive flow chart of a browser-based privacy computing method provided by this embodiment is shown below. Figure 2 Further introduction to privacy computing methods, such as Figure 2 As shown, first, after the user downloads the privacy computing plug-in, he can load the privacy computing plug-in on the browser. When loading, the user needs to apply with the username information for logging into the website. After loading, the privacy computing plug-in generates the corresponding signature verification public key; then, when the user logs in to the website, the privacy computing plug-in receives the login information of the user and sends the login information to the server. After receiving the login information, the server signs the login information and sends the signed login information and the list of participants to the privacy computing plug-in. After receiving the signed login information, the privacy computing plug-in verifies the signed login information through the signature verification public key; finally, after the verification is passed, the privacy computing plug-in sends a privacy computing invitation to the participant based on the participant list, so that the invited participant and the privacy computing plug-in can jointly perform privacy computing and obtain the calculation results.

[0053] In a second aspect, another embodiment of the present invention provides an electronic device, wherein the electronic device is used to execute the above-mentioned browser-based privacy computing method, see Figure 3As shown, in a basic configuration 102, computing device 100 typically includes system memory 106 and one or more processors 104. A memory bus 108 may be used for communication between processor 104 and system memory 106.

[0054] Depending on the desired configuration, the processor 104 can be any type of processor, including, but not limited to, a microprocessor (μP), a microcontroller (μC), a digital signal processing unit (DSP), or any combination thereof. The processor 104 can include one or more levels of cache, such as a level 1 cache 110 and a level 2 cache 112, a processor core 114, and registers 116. An example processor core 114 can include an arithmetic logic unit (ALU), a floating point unit (FPU), a digital signal processing core (DSP core), or any combination thereof. An example memory controller 118 can be used with the processor 104, or in some implementations, the memory controller 118 can be an internal part of the processor 104.

[0055] Depending on the desired configuration, system memory 106 can be any type of memory, including but not limited to volatile memory (such as RAM), non-volatile memory (such as ROM, flash memory, etc.), or any combination thereof. Physical memory in a computing device typically refers to volatile RAM. Data stored on a disk must be loaded into physical memory before it can be read by processor 104. System memory 106 can include an operating system 120, one or more applications 122, and program data 124. Applications 122 are essentially multiple program instructions that instruct processor 104 to perform corresponding operations. In some embodiments, applications 122 can be arranged so that one or more processors 104 execute instructions on the operating system using program data 124. Operating system 120, for example, can be Linux, Windows, etc., and includes program instructions for handling basic system services and performing hardware-dependent tasks. Applications 122 include program instructions for implementing various user-desired functions. Applications 122 can be, for example, browsers, instant messaging software, software development tools (such as integrated development environments (IDEs), compilers, etc.), but are not limited thereto. When the application 122 is installed into the computing device 100 , a driver module may be added to the operating system 120 .

[0056] When the computing device 100 is started, the processor 104 reads and executes the program instructions of the operating system 120 from the memory 106. Applications 122 run on top of the operating system 120, utilizing the interfaces provided by the operating system 120 and the underlying hardware to implement various user-desired functions. When a user launches an application 122, the application 122 is loaded into the memory 106, and the processor 104 reads and executes the program instructions of the application 122 from the memory 106.

[0057] Computing device 100 also includes a storage device 132 including removable storage 136 and non-removable storage 138 , both of which are connected to storage interface bus 134 .

[0058] The computing device 100 may also include an interface bus 140 that facilitates communication from various interface devices (e.g., output devices 142, peripheral interfaces 144, and communication devices 146) to the basic configuration 102 via the bus / interface controller 130. Example output devices 142 include a graphics processing unit 148 and an audio processing unit 150. These can be configured to facilitate communication with various external devices such as a display or speakers via one or more A / V ports 152. Example peripheral interfaces 144 may include a serial interface controller 154 and a parallel interface controller 156, which can be configured to facilitate communication with external devices such as input devices (e.g., a keyboard, mouse, pen, voice input device, touch input device) or other peripherals (e.g., a printer, scanner, etc.) via one or more I / O ports 158. Example communication devices 146 may include a network controller 160, which can be arranged to facilitate communication with one or more other computing devices 162 via a network communication link via one or more communication ports 164.

[0059] A network communication link can be an example of a communication medium. Communication media can generally be embodied as computer-readable instructions, data structures, program modules in a modulated data signal such as a carrier wave or other transmission mechanism, and can include any information delivery medium. A "modulated data signal" can be a signal in which one or more of its data sets or changes thereto can be performed in a manner that encodes information in the signal. As non-limiting examples, communication media can include wired media such as a wired network or a dedicated line network, and various wireless media such as sound, radio frequency (RF), microwave, infrared (IR) or other wireless media. The term computer-readable medium as used herein can include both storage media and communication media.

[0060] The computing device 100 also includes a storage interface bus 134 connected to the bus / interface controller 130. The storage interface bus 134 is connected to a storage device 132, which is suitable for storing data. Example storage devices 132 may include removable storage 136 (e.g., CDs, DVDs, USB flash drives, removable hard drives, etc.) and non-removable storage 138 (e.g., hard disk drives, HDDs, etc.).

[0061] In the computing device 100 according to the present invention, the application 122 includes a plurality of program instructions for executing the method 200 .

[0062] The various techniques described herein may be implemented in conjunction with hardware or software, or a combination thereof. Thus, the methods and apparatus of the present invention, or certain aspects or portions of the methods and apparatus of the present invention, may be implemented in the form of program codes (i.e., instructions) embedded in a tangible medium, such as a removable hard disk, a USB flash drive, a floppy disk, a CD-ROM, or any other machine-readable storage medium, wherein when the program is loaded into a machine such as a computer and executed by the machine, the machine becomes an apparatus for practicing the present invention.

[0063] When the program code is executed on a programmable computer, the computing device generally includes a processor, a storage medium readable by the processor (including volatile and non-volatile memory and / or storage elements), at least one input device, and at least one output device. The memory is configured to store the program code; the processor is configured to execute the method of the present invention according to the instructions in the program code stored in the memory.

[0064] By way of example and not limitation, readable media include readable storage media and communication media. Readable storage media store information such as computer-readable instructions, data structures, program modules, or other data. Communication media typically embody computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and include any information delivery medium. Combinations of any of the above are also included within the scope of readable media.

[0065] In the description provided herein, the algorithms and displays are not inherently related to any particular computer, virtual system, or other device. Various general-purpose systems may also be used in conjunction with the examples of the present invention. Based on the above description, it is apparent that the structure required for constructing such systems is well understood. In addition, the present invention is not directed to any specific programming language. It should be understood that various programming languages ​​may be utilized to implement the present invention described herein, and the description of specific languages ​​above is provided for the purpose of disclosing preferred embodiments of the present invention.

[0066] In the description provided herein, a large number of specific details are described. However, it is understood that embodiments of the present invention can be practiced without these specific details. In some instances, well-known methods, structures, and techniques are not shown in detail so as not to obscure the understanding of this description.

[0067] Similarly, it should be understood that in order to streamline the present invention and aid in understanding one or more of the various inventive aspects, in the above description of exemplary embodiments of the present invention, various features of the present invention are sometimes grouped together into a single embodiment, figure, or description thereof. However, this disclosed method should not be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as reflected in the claims below, inventive aspects lie in less than all the features of the individual embodiments disclosed above. Accordingly, the claims that follow the detailed description are hereby expressly incorporated into this detailed description, with each claim standing on its own as a separate embodiment of the present invention.

[0068] Those skilled in the art will appreciate that the modules, units, or components of the devices in the examples disclosed herein may be arranged in the device described in the embodiment, or alternatively may be located in one or more devices different from the devices in the examples. The modules in the foregoing examples may be combined into one module or further divided into multiple submodules.

[0069] Those skilled in the art will appreciate that the modules in the devices in the embodiments may be adaptively changed and arranged in one or more devices different from the embodiments. The modules or units or components in the embodiments may be combined into one module or unit or component, and in addition may be divided into multiple submodules or subunits or subcomponents. All features disclosed in this specification (including the accompanying claims, abstracts and drawings) and all processes or units of any method or device disclosed herein may be combined in any combination, except that at least some of such features and / or processes or units are mutually exclusive. Unless expressly stated otherwise, each feature disclosed in this specification (including the accompanying claims, abstracts and drawings) may be replaced by an alternative feature providing the same, equivalent or similar purpose.

[0070] Furthermore, those skilled in the art will appreciate that although some embodiments described herein include certain features included in other embodiments but not other features, combinations of features from different embodiments are intended to be within the scope of the present invention and to form different embodiments. For example, in the claims, any of the claimed embodiments may be used in any combination.

[0071] In addition, some of the embodiments are described herein as methods or combinations of method elements that can be implemented by a processor of a computer system or by other devices that perform the functions described. Thus, a processor having the necessary instructions for implementing the method or method element forms a device for implementing the method or method element. Furthermore, the elements described herein of the device embodiments are examples of devices for implementing the functions performed by the elements for the purpose of implementing the invention.

[0072] Although the present invention has been described with respect to a limited number of embodiments, it will be apparent to those skilled in the art, having benefit of the foregoing description, that other embodiments are contemplated within the scope of the invention thus described. Furthermore, it should be noted that the language used in this specification has been selected primarily for readability and didactic purposes, rather than for the purpose of explaining or limiting the subject matter of the present invention. Consequently, many modifications and variations will be apparent to those skilled in the art without departing from the scope and spirit of the appended claims. The disclosure of the present invention is intended to be illustrative and not restrictive of the scope of the invention, which is defined by the appended claims.

Claims

1. A browser-based privacy computing method, characterized in that: The following steps are involved: Loading a privacy computing plug-in in the browser; The privacy computing plug-in receives login information of a website logged in by a user through the browser; The privacy computing plug-in sends the login information to the server, so that the server signs the login information and sends the signed login information and a participant list including at least one participant to the privacy computing plug-in; The privacy computing plug-in initiates a privacy computing invitation to at least one participant in the participant list based on the signed login information, so that the privacy computing plug-in performs privacy computing with the invited participant; The privacy computing plug-in includes a website signature verification public key, and the method further includes: The privacy computing plug-in verifies the signed login information using the signature verification public key, and when the verification succeeds, initiates a privacy computing invitation to at least one participant in the participant list; The login information includes the username information of the user logging into the website, and the signature verification public key has a corresponding relationship with the username information; The login information also includes certificate information and login success information, wherein the certificate information corresponds to the website, and the login success information is used to indicate that the user has successfully logged into the website.

2. The browser-based privacy computing method according to claim 1, characterized in that: The certificate information includes an SSL certificate.

3. The browser-based privacy computing method according to claim 1, characterized in that: The method also includes: the privacy computing plug-in is further used to obtain user data of the user on the website, so that the privacy computing plug-in and the invited participant perform privacy computing based on the user data.

4. The browser-based privacy computing method according to claim 1, characterized in that: The privacy computing plug-in communicates with the at least one participant in an encrypted manner.

5. The browser-based privacy computing method according to claim 1, characterized in that: The privacy computing plug-in is written and executed using JAVASCRIPT and / or WASM.

6. An electronic device, characterized in that: include: one or more processors; Memory; and one or more computer programs, wherein the one or more computer programs are stored in the memory, and the one or more computer programs include instructions, which, when executed by the electronic device, cause the electronic device to perform the method according to any one of claims 1 to 5.

7. A readable storage medium, characterized in that The readable storage medium stores a computer program, which is used to implement the method according to any one of claims 1 to 5 when executed by a processor.

Images