Method and device for converting identifier, method and device for converting privacy item

Abstract

An embodiment of the present specification provides a method for converting identifiers, which involves at least two participants, wherein a first participant stores multiple first original identifiers of a first type, and a second participant stores multiple second original identifiers of the first type and multiple third original identifiers of the second type, as well as a mapping relationship between the two; the method is applied to the second participant, and the method includes: first, by jointly executing a privacy set intersection protocol PSI with the first participant, a first original intersection between multiple first original identifiers and multiple second original identifiers is obtained; then, based on the above mapping relationship, a second original intersection of the second type corresponding to the first original intersection is determined.

Description

Technical Field

[0001] The embodiments of this specification relate to the field of computer technology, and in particular, to a method and device for converting an identifier, and a method and device for converting a privacy item. Background Art

[0002] With the development of science and technology and the progress of society, people are increasingly using a variety of services provided by service platforms to meet various needs in daily work and life. Different service platforms may provide services to users based on different types of user identifications (or user identifiers). For example, some service platforms store the user's mobile phone number collected or obtained through legal means, while some service platforms store the user's terminal device number collected or obtained through legal means.

[0003] In some cases, in order to optimize the user's service experience, a service platform may need to use the user identification information in another service platform. If the types of user identification stored in the two service platforms are different, conversion between different types of identification is required. For example, service platform A and service platform B intend to jointly push certain services to users, such as recommending services provided by service platform A to users in service platform B. At this time, if the user identification types in service platforms A and B are mobile phone numbers and device numbers respectively, service platform B needs to know the device number of the target user in service platform A, and then recommend the services of service platform A to the target user, which involves the conversion of mobile phone numbers and device numbers.

[0004] However, for the privacy protection and security compliance of user personal information, the data privacy of all parties involved in the identifier conversion must not be leaked. Therefore, a solution is needed that can efficiently and conveniently implement the type conversion of user identifiers while ensuring the security of the privacy data of all parties. Summary of the invention

[0005] In the method and device for converting identifiers described in this specification, the Privacy Set Intersection Protocol PSI is introduced to achieve the secure flow and conversion of user identifiers. During the execution process, each participant cannot obtain a user identifier that is not legally collected by themselves.

[0006] According to a first aspect, a method for converting identifiers is provided, the method involving at least two participants, wherein a first participant stores a plurality of first original identifiers of a first type, and a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, as well as a mapping relationship between the two; the method is applied to the second participant, and the method comprises: obtaining a first original intersection between the plurality of first original identifiers and the plurality of second original identifiers by jointly executing a privacy set intersection protocol PSI with the first participant; and determining a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0007] In one embodiment, the PSI protocol is based on a cryptographic protocol; wherein, by jointly executing the privacy set intersection protocol PSI with the first participant, a first original intersection between the multiple first original identifiers and the multiple second original identifiers is obtained, including: by jointly executing the cryptographic protocol with the first participant, a multiple second encrypted identifiers corresponding to the multiple second original identifiers are obtained, which are equivalent to the result of encrypting the multiple second original identifiers using the first key of the first participant; receiving a multiple first self-encrypted identifier from the first participant, which is obtained by encrypting the multiple first original identifiers using the first key; determining a first encrypted intersection between the multiple first self-encrypted identifiers and the multiple second encrypted identifiers; and determining the first original intersection corresponding to the first encrypted intersection based on the correspondence between the multiple second original identifiers and the multiple second encrypted identifiers.

[0008] In a specific embodiment, by jointly executing the cryptographic protocol with the first participant, multiple second other-encrypted identifiers corresponding to the multiple second original identifiers are obtained, including: using the first encryption key in the first paired key to encrypt the multiple second original identifiers to obtain the corresponding multiple second self-encrypted identifiers; sending the multiple second self-encrypted identifiers to the first participant so that it uses the first key to encrypt the multiple second self-encrypted identifiers to obtain multiple second double-encrypted identifiers; using the first decryption key in the first paired key to decrypt the multiple second double-encrypted identifiers to obtain the multiple second other-encrypted identifiers.

[0009] In one embodiment, the first original intersection between the multiple first original identifiers and the multiple second original identifiers is obtained by jointly executing the privacy set intersection protocol PSI with the first participant, including: based on a secure channel pre-established between the second participant and the first participant, jointly executing the PSI protocol with the first participant to obtain the first original intersection.

[0010] In one embodiment, the method also involves a third party that stores multiple fourth original identifiers of the second type; wherein, after determining a second original intersection of the second type corresponding to the first original intersection, the method further includes: by jointly executing the PSI protocol with the third party, so that the third party obtains a third original intersection between the second original intersection and multiple fourth original identifiers.

[0011] In a specific embodiment, the PSI protocol is based on a cryptographic protocol; wherein, by jointly executing the PSI protocol with the third party, the third party obtains the third original intersection between the second original intersection and multiple fourth original identifiers, including: by jointly executing the cryptographic protocol with the third party, the third party obtains multiple fourth other-encrypted identifiers corresponding to the multiple fourth original identifiers, which are equivalent to the result of encrypting the multiple fourth original identifiers using the second key of the second participant; sending multiple second self-encrypted identifiers to the third party, which are obtained by encrypting the original identifiers in the second original intersection using the second key, so that the third party determines the second encrypted intersection between the multiple second self-encrypted identifiers and the multiple fourth other-encrypted identifiers, and determines the corresponding third original intersection.

[0012] In a more specific embodiment, the cryptographic protocol is jointly executed with the third party so that the third party obtains multiple fourth other-encrypted identifiers corresponding to the multiple fourth original identifiers, including: receiving multiple fourth self-encrypted identifiers from the third party, which are obtained by encrypting the multiple fourth original identifiers using the second encryption key in the second pair of keys; encrypting the multiple fourth self-encrypted identifiers using the second key to obtain corresponding multiple fourth double-encrypted identifiers; sending the multiple fourth double-encrypted identifiers to the third party so that it decrypts the multiple fourth double-encrypted identifiers using the second decryption key in the second pair of keys to obtain the multiple fourth other-encrypted identifiers.

[0013] On the other hand, in a specific embodiment, by jointly executing the PSI protocol with the third party, the third party obtains the third original intersection between the second original intersection and multiple fourth original identifiers, including: based on a secure channel pre-established between the second party and the third party, jointly executing the PSI protocol with the third party to obtain the third original intersection.

[0014] In one embodiment, the first type is any one of the following: mobile phone number, terminal device ID, identity card number.

[0015] According to a second aspect, a method for converting identifiers is provided, the method involving at least two participants, wherein a first participant stores a plurality of first original identifiers of a first type, and a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, as well as a mapping relationship between the two; the method is applied to the first participant, and the method comprises: by jointly executing a privacy set intersection protocol PSI with the second participant, the second participant obtains a first original intersection between the plurality of first original identifiers and the plurality of second original identifiers, thereby determining a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0016] According to a third aspect, a method for converting identifiers is provided, the method involving three participants, wherein a first participant stores multiple first original identifiers of a first type, a second participant stores multiple second original identifiers of the first type and multiple third original identifiers of the second type, as well as a mapping relationship between the two, and a third participant stores multiple fourth original identifiers of the second type; the method is applied to the third participant, the method comprising: obtaining a third original intersection between a second original intersection and the multiple fourth original identifiers by jointly executing a privacy set intersection protocol PSI with the second participant; the second original intersection is obtained by the following steps: the first participant and the second participant jointly execute the PSI protocol to obtain a first original intersection between the multiple first original identifiers and the multiple second original identifiers; the second participant determines a second original intersection of a second type corresponding to the first original intersection based on the mapping relationship.

[0017] According to a fourth aspect, a method for converting privacy items is provided, the method involving at least two participants, wherein a first participant stores a plurality of first original privacy items of a first type, and a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, as well as a mapping relationship between the two; the method is applied to the second participant, and the method comprises: obtaining a first original intersection between the plurality of first original privacy items and the plurality of second original privacy items by jointly executing a privacy set intersection protocol PSI with the first participant; and determining a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0018] In one embodiment, the method also involves a third party that stores multiple fourth original identifications of the second type; wherein, after determining a second original intersection of the second type corresponding to the first original intersection, the method further includes: by jointly executing the PSI protocol with the third party, so that the third party obtains a third original intersection between the second original intersection and multiple fourth original privacy items.

[0019] According to a fifth aspect, a method for converting privacy items is provided, the method involving at least two participants, wherein a first participant stores a plurality of first original privacy items of a first type, and a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, as well as a mapping relationship between the two; the method is applied to the first participant, and the method comprises: jointly executing a privacy set intersection protocol PSI with the second participant, so that the second participant obtains a first original intersection between the plurality of first original privacy items and the plurality of second original privacy items, thereby determining a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0020] According to a sixth aspect, a method for converting privacy items is provided, the method involving three participants, wherein a first participant stores a plurality of first original privacy items of a first type, a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, as well as a mapping relationship between the two, and a third participant stores a plurality of fourth original privacy items of the second type; the method is applied to the third participant, the method comprising: obtaining a third original intersection between a second original intersection and the plurality of fourth original privacy items by jointly executing a privacy set intersection protocol PSI with the second participant; the second original intersection is obtained by the following steps: the first participant and the second participant jointly execute the PSI protocol to obtain a first original intersection between the plurality of first original privacy items and the plurality of second original privacy items; the second participant determines a second original intersection of a second type corresponding to the first original intersection based on the mapping relationship.

[0021] According to the seventh aspect, a device for converting identifiers is provided, the device involving at least two participants, wherein a first participant stores a plurality of first original identifiers of a first type, and a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, as well as a mapping relationship between the two; the device is integrated in the second participant, and the device comprises: a first intersection protocol execution unit, configured to obtain a first original intersection between the plurality of first original identifiers and the plurality of second original identifiers by jointly executing a privacy set intersection protocol PSI with the first participant; and an identifier mapping unit, configured to determine a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0022] In one embodiment, the device also involves a third participant, which stores multiple fourth original identifiers of the second type; wherein the device also includes a second intersection protocol execution unit, configured to execute the PSI protocol together with the third participant so that the third participant obtains the third original intersection between the second original intersection and multiple fourth original identifiers.

[0023] According to an eighth aspect, a device for converting identifiers is provided, the device involving at least two participants, wherein a first participant stores a plurality of first original identifiers of a first type, and a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, as well as a mapping relationship between the two; the device is integrated in the first participant, and the device comprises: an intersection protocol execution unit, configured to execute a privacy set intersection protocol PSI together with the second participant, so that the second participant obtains a first original intersection between the plurality of first original identifiers and the plurality of second original identifiers, thereby determining a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0024] According to the ninth aspect, a device for converting identifiers is provided, the device involving three participants, wherein the first participant stores multiple first original identifiers of the first type, the second participant stores multiple second original identifiers of the first type and multiple third original identifiers of the second type, as well as a mapping relationship between the two, and the third participant stores multiple fourth original identifiers of the second type; the device is integrated in the third participant, and the device includes: an intersection protocol execution unit, which obtains a third original intersection between the second original intersection and the multiple fourth original identifiers by jointly executing a privacy set intersection protocol PSI with the second participant; the second original intersection is obtained based on a processing unit, and the processing unit is configured for the first participant and the second participant to jointly execute the PSI protocol to obtain a first original intersection between the multiple first original identifiers and the multiple second original identifiers; the second participant determines a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0025] According to the tenth aspect, a device for converting privacy items is provided, the device involving at least two participants, wherein a first participant stores a plurality of first original privacy items of a first type, and a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, as well as a mapping relationship between the two; the device is integrated in the second participant, and the device comprises: a first intersection protocol execution unit, configured to obtain a first original intersection between the plurality of first original privacy items and the plurality of second original privacy items by jointly executing a privacy set intersection protocol PSI with the first participant; and a privacy item mapping unit, configured to determine a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0026] In one embodiment, the device further involves a third party, in which a plurality of fourth original privacy items of the second type are stored; the device further comprises a second intersection protocol execution unit, configured to execute the PSI protocol together with the third party so that the third party obtains a third original intersection between the second original intersection and the plurality of fourth original privacy items.

[0027] According to an eleventh aspect, a device for converting privacy items is provided, the device involving at least two participants, wherein a first participant stores a plurality of first original privacy items of a first type, and a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, as well as a mapping relationship between the two; the device is applied to the first participant, and the device comprises: an intersection protocol execution unit, configured to execute a privacy set intersection protocol PSI together with the second participant, so that the second participant obtains a first original intersection between the plurality of first original privacy items and the plurality of second original privacy items, thereby determining a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0028] According to the twelfth aspect, a device for converting privacy items is provided, the device involving three participants, wherein the first participant stores multiple first original privacy items of the first type, the second participant stores multiple second original privacy items of the first type and multiple third original privacy items of the second type, as well as a mapping relationship between the two, and the third participant stores multiple fourth original privacy items of the second type; the device is applied to the third participant, and the device includes: an intersection protocol execution unit, configured to obtain a third original intersection between the second original intersection and the multiple fourth original privacy items by jointly executing a privacy set intersection protocol PSI with the second participant; the second original intersection is obtained based on a processing unit, and the processing unit is configured to jointly execute a PSI protocol with the first participant and the second participant to obtain a first original intersection between the multiple first original privacy items and the multiple second original privacy items; the second participant determines a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0029] According to the thirteenth aspect, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed in a computer, the computer executes the method described in any one of the first to sixth aspects.

[0030] According to the fourteenth aspect, a computing device is provided, comprising a memory and a processor, wherein executable code is stored in the memory, and when the processor executes the executable code, the method described in any one of the first to sixth aspects is implemented.

[0031] In summary, the method for converting identifiers disclosed in the embodiments of this specification can achieve the situation where none of the three parties can obtain identifier information that is not legally collected by themselves, and there is no need to introduce other trusted third parties, so that the third party can obtain the third original intersection and realize the secure flow and conversion of identifiers. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions of the multiple embodiments disclosed in this specification, the drawings required for the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only the multiple embodiments disclosed in this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1 A schematic diagram showing an implementation scenario of identifier transfer according to an embodiment;

[0034] Figure 2 A multi-party interaction diagram illustrating conversion of identifiers according to one embodiment;

[0035] Figure 3 A schematic diagram showing an interaction of a participant A and a participant S jointly executing a PSI protocol according to an embodiment;

[0036] Figure 4 A schematic diagram showing an interaction between a participant A and a participant S jointly executing a cryptographic protocol according to an embodiment;

[0037] Figure 5 A schematic diagram showing an interaction of a participant S and a participant B jointly executing a PSI protocol according to an embodiment;

[0038] Figure 6 A schematic diagram showing an interaction between a participant S and a participant B jointly executing a cryptographic protocol according to an embodiment;

[0039] Figure 7 A multi-party interaction diagram illustrating conversion of privacy items according to one embodiment;

[0040] Figure 8 A schematic block diagram showing an apparatus for converting an identifier according to an embodiment;

[0041] Fig. 9 A schematic block diagram of an apparatus for converting a privacy item according to an embodiment is shown. DETAILED DESCRIPTION

[0042] Several embodiments disclosed in this specification are described below in conjunction with the accompanying drawings.

[0043] In combination with the above, there is the following problem scenario: Participant A (for example, service platform A) holds a set of legally collected identifiers of type p (for example, mobile phone numbers) X p , participant B (e.g., service platform B) holds a set Y of legally collected identifiers of type q (e.g., device number) q , the participant S (for example, the data center) also holds a set of p-type identifiers Z that are legally collected p and the set of identities Z of type q q , and the mapping relationship between the two Furthermore, participant A wants to use the identifier x p (x p ∈X p ) is converted to the identifier y held by party B q (y q ∈Y q ) for subsequent recommendation, analysis and other scenarios. At the same time, for the sake of data compliance, data privacy and security, it is required that participants A, B and S cannot obtain identifiers (or identifications) that are not legally collected by themselves.

[0044] Therefore, a safe and reliable solution is needed to enable each participant to obtain an additional identifier without obtaining additional identifiers. With the assistance of participant S, participant A can transfer the identifier x held by participant A to the p Securely converted to the identifier y held by party B q , thereby achieving the secure flow and conversion (or secure circulation) of user identities.

[0045] In one possible solution, similar functions can be achieved by de-identifying the identifier, where hashing, salted hashing, etc. can be used as de-identification technologies. However, if the possible value range of the identifier is limited (for example, there are about billions of possible mobile phone numbers), the existing de-identification technologies may be subject to enumeration attacks, which means that each participant can infer identifiers held by other participants that are not legally collected for themselves through enumeration attacks. Therefore, this solution has certain compliance and security risks.

[0046] In another possible solution, if there is a trusted party T that all parties trust, for example, using TEE (Trusted Execution Environment) to construct the trusted party T, then party A, party B, and party S can each send X to the trusted party T through a secure channel. p , Z p , Z q and Y q Sent to participant T. However, this solution requires all participants to trust participant T. Since it is difficult to construct a trusted participant T (generally special hardware is required), its practicality is relatively weak.

[0047] Based on the above observations and analysis, the inventors proposed a more secure solution. In this solution, by introducing the PSI (Private Set Intersection) protocol, and without introducing any trusted third party, it can be ensured that each participant cannot obtain identifiers that are not legally collected by themselves during the identifier conversion process, thereby achieving the secure flow of identifiers.

[0048] For ease of understanding, let's first combine Figure 1 The implementation scenario schematic diagram shown schematically illustrates the strong security solution proposed by the inventor.

[0049] like Figure 1 As shown, party A holds the identifier set X p , it needs to be explained that in the figure |X p | represents the set X p The number of elements in , correspondingly, Represents the set X p The first |X p | elements; party S holds a set Z of identifiers of the same type p p ; Further, participants A and S each hold a set of the same type of identifiers X p and Z p , execute the PSI protocol, this execution process can be expressed as PSI(X p ,Z p ), the result of the execution includes that at least party S gets X p and Z p The intersection of , which can be expressed as (X∩Z) P It should be noted that according to the functional and security definition of the PSI protocol, during the execution process, participants A and S can at most obtain the intersection of their identifier sets. Apart from this, neither party can obtain any additional information. This means that neither party A nor party S will obtain identifiers from the other party that are not legally collected by themselves.

[0050] Then, the participant S holds a set of identifiers Z of type p. p and the set Z of identifiers of type q q The mapping relationship between Intersect the identifiers of type p (X∩Z) p Convert to the intersection of identifiers of type q (X∩Z) q ; Then, the participant S uses the intersection of the identifiers (X∩Z) q , based on the identifier set Y held by party B q , jointly execute the PSI protocol, and this execution process can be expressed as PSI((X∩Z) q ,Y q ), the result of the execution includes that at least party B obtains (X∩Z) q and Y q The intersection of , which can be expressed as (X∩Z) q ∩Y q or (X∩Z∩Y) q ,Similarly, participants S and B will not obtain identifiers that are not legally collected by themselves during the ,process of executing PSI.

[0051] In this way, the secure flow of identifiers between participants A, S and B is achieved.

[0052] Combination of the above Figure 1The highly secure and practical solution proposed by the inventor is schematically illustrated. Accordingly, in an embodiment of this specification, a method for converting an identifier is disclosed. Next, the solution proposed by the inventor is further illustrated by describing the method.

[0053] Specifically, Figure 2 A multi-party interaction diagram for converting identifiers according to one embodiment is shown. Figure 2 As shown, the multiple parties include three participants, namely, participant A, participant S and participant B, which are respectively referred to as the first participant, the second participant and the third participant in the text; participant A stores the first original identification set X p , which includes a plurality of first original identifiers x of the first type p p ; Participant S stores the second original identification set Z p , which includes a plurality of second original identifiers z of the first type p p , and also stores the third original identification set Z q , which includes a plurality of third original identifiers z of the second type q q , and store the second original identification set Z p and the third original identity set Z q The mapping relationship between Participant S stores the fourth original identification set Y q , which includes a plurality of fourth original identifiers y of the second type q q .

[0054] The original identification held by the above-mentioned parties may be, in one embodiment, a user identification, which is used to uniquely identify a single user, and may be specifically a user's number, code or feature, etc. In a specific embodiment, the type of user identification may be a user's mobile phone number, terminal device ID (Identity), or ID card number, wherein the terminal device ID may specifically be IMEI (International Mobile Equipment Identity). In another embodiment, the original identification may also be for other objects, for example, a business event (including a login event, a browsing event, a purchase event, etc.). In a specific embodiment, the business event is a purchase event, which involves multiple links, including the placement of advertisements by advertisers and the purchase of goods by users by clicking on advertisements. For the same purchase event, the advertiser identifies the purchase event based on the placement of advertisements, and the e-commerce platform identifies the event based on the click and purchase links. Therefore, for the same purchase event, different types of event identifications may appear.

[0055] It can be understood that the above-mentioned parties can be implemented as any platform or server cluster with computing and processing capabilities, such as a service platform or a business platform.

[0056] like Figure 2 As shown, the multi-party interaction process may include the following steps:

[0057] Step S201: Participant A and participant S jointly execute the PSI protocol, so that participant S obtains the first original identification set X p and the second original identity set Z p The first primitive intersection between (X∩Z) p ; Step S202, the participant S based on the second original identification set Z p and the third original identity set Z q The mapping relationship between The first original intersection (X∩Z) p Convert to the second primitive intersection (X∩Z) of type q q ; Further, in one embodiment, the above interaction process may also include step S203, where the participant S and the participant B jointly execute the PSI protocol, so that the participant B obtains the second original intersection (X∩Z) q and the fourth original identity set Y q The intersection between (X∩Z∩Y) q .

[0058] The above steps are as follows:

[0059] First, in step S201, participants A and S jointly execute the PSI protocol, so that participant S obtains the first original intersection (X∩Z) p .

[0060] It should be noted that after negotiation, one of the two parties participating in the execution of the PSI protocol will be designated as the server in the PSI protocol, and the other party will be designated as the client in the PSI protocol. The client will determine the result of the intersection of the two sets, and then the client can safely pass the intersection result to the server according to the agreement, or it may not pass it to the server. Accordingly, in this step, party A can be designated as the server, and party S can be designated as the client. At this time, party S first obtains the first original intersection (X∩Z) p , and does not need to be passed to participant A; or, participant A can be designated as the client, and participant S can be designated as the server. In this case, participant A determines the first original intersection (X∩Z) p After that, it needs to be securely delivered to participant S.

[0061] Based on the above, the following takes the example of designating participant A as the server in the PSI protocol and designating participant S as the client in the PSI protocol to illustrate the process of participant A and participant S jointly executing the PSI protocol. Specifically, Figure 3 A schematic diagram of interaction of a participant A and a participant S jointly executing a PSI protocol according to an embodiment is shown, wherein the interaction steps shown include:

[0062] Step S301, participants A and S jointly execute the cryptographic protocol based on the PSI protocol, so that participant S obtains the second original identification set Z p The second encrypted identifier set [Z p ] a , which is equivalent to: using the first key a held by participant A to identify the second original identification set Z p The encrypted element set is obtained by encrypting each original identifier in .

[0063] It should be noted that the PSI protocol is built based on cryptographic protocols (or cryptographic basic protocols), where the cryptographic protocols may include any of the following: OT (Oblivious Transfer) protocol, GC (Garbled Circuit), HE (Homomorphic Encryption) and SS (Secret Sharing), etc.

[0064] In addition, in this article, for the encrypted identifier obtained by encrypting the original identifier using a key, the following naming rules are followed: if the key used is held by a party other than the storage party of the original identifier, the corresponding encrypted identifier is called a other-encrypted identifier; if the key used is owned by the storage party of the original identifier, the corresponding encrypted identifier is called a self-encrypted identifier; if the key used includes both the key owned by the storage party of the original identifier and the key held by another party, the corresponding encrypted identifier is called a double-encrypted identifier.

[0065] Step S302: Party A uses its first key a to identify the first original identification set X. p Each original identifier x in p Encryption is performed to obtain the first self-encryption identification set [X p ] a .

[0066] Step S303: Participant S receives the first self-encryption identifier set [X p ] a .

[0067] Step S304, the participant S determines the second encrypted identifier set [Z p ] a and the first self-encrypting identity set [X p ] a The first encrypted intersection between [(X∩Z) p ] a .

[0068] Step S305: Participant S uses the second original identification set Z p and the second encrypted identifier set [Z p ] a The corresponding relationship between the identifiers Determine the first encrypted intersection [(X∩Z) p ] a The corresponding first original intersection (X∩Z) p . It needs to be explained that the corresponding relationship between the identifiers It can be established in step S301.

[0069] Furthermore, in one embodiment, for the above step S301, that is, the participant A and the participant S jointly execute the cryptographic protocol, so that the participant S obtains the second encrypted identification set [Z p ] a , can be implemented by Figure 4 The interactive steps shown in are implemented, wherein the interactive steps include:

[0070] Step S401: Participant S uses the first pairwise key (s1,s ′ 1) in the first encryption key s1, for the second original identification set Z p The original identifiers z in p Encrypt them respectively to obtain multiple second self-encryption identifiers The second self-encrypting identity set

[0071] Step S402: Participant S sets the second self-encryption identifier Sent to Party A.

[0072] Step S403: Party A uses the first key a it holds to encrypt the second self-encrypting identifier set. Encrypt each self-encryption identifier in to obtain the second double encryption identifier set

[0073] Step S404: Participant S receives a second double-encrypted identification set from participant A.

[0074] Step S405: Party S uses the first pairwise key (s1,s ′1) The first decryption key s ′ 1. For the second double encryption identification set Decrypt each second double encryption identifier in the decryption, and obtain the second other encryption identifier set [Z p ] a .

[0075] It should be noted that the corresponding relationship of the identifiers used in the above step S305 In one embodiment, first, in step S401, the participant S may establish Z p and The mapping relationship between them is: Second, in step S403, party A uses the first key a it holds to encrypt the second self-encrypting identifier set The self-encrypted identifiers in the ciphertext are encrypted separately, and the obtained second double-encrypted identifiers are arranged in the original order to form the second double-encrypted identifier set. Based on this, participant S receives the second double encryption identification set in step S404 Afterwards, you can create and The mapping relationship between them is: Third, in step S405, the participant S can establish With [Z p ] a The mapping relationship between them is: Therefore, the participant S has the mapping relationship and Through relationship transfer, Z can be established p With [Z p ] a The mapping relationship between

[0076] In addition, in another embodiment, the above step S402 can also be replaced by: the participant S sets the second self-encryption identifier The identifiers in the second self-encrypted identifier are sent to the participant B one by one. Accordingly, step S403 and step S404 can be replaced by: the participant B sends the second self-encrypted identifier to the participant B according to the second self-encrypted identifier. The receiving order will correspond to the second double encryption mark Sequentially sent to participant S. In this way, participant S can also establish and The mapping relationship between

[0077] In another embodiment, steps S402 to S404 may be replaced by: the participant S first sends a second self-encrypting identifier Sent to Party B until receiving the corresponding second double-encrypted identifier from Party B After that, the next second self-encryption identifier is sent to participant B, and this process is repeated until the participant receives the second self-encryption identifier set. The double encryption identifiers corresponding to each identifier in the second double encryption identifier set are formed. In this way, the participant S can also establish and The mapping relationship between

[0078] From above, by executing Figure 4 The interactive process in Figure 3 Step S301 in the above example enables the participant S to obtain the second encrypted identifier set [Z p ] a , and establish Z p With [Z p ] a The mapping relationship between By executing Figure 3 The interactive process including step S301 etc. can be implemented Figure 2 Step S201 in the above example enables the participant S to obtain the first original intersection (X∩Z) p .

[0079] Back to Figure 2 , by executing step S201, the first original intersection (X∩Z) is obtained. p Then, in step S202, the participant S uses the second original identification set Z p and the third original identity set Z q The mapping relationship between The first original intersection (X∩Z) p Convert to the second primitive intersection of type q (X∩Z) q .

[0080] It should be noted that, in one embodiment, the mapping relationship It can be a one-to-one relationship, that is, the set Z p Each element z in p , in the set Z q There is a unique element z in q Correspondingly, in another embodiment, the mapping relationship may also be a one-to-many, many-to-one, or many-to-many relationship. Accordingly, the same object may have one or more identifiers of a certain type. For example, the same user may have one or more mobile phone numbers, and the corresponding device numbers may also be multiple (in the case of multiple devices). According to a specific example, assuming (X∩Z) pA certain z in p The corresponding z q There are three. At this time, you can combine these three z according to actual business needs. q All are included in (X∩Z) q , or, select one or two of them and put them into (X∩Z) q .

[0081] Step S203, participants S and B jointly execute the PSI protocol, so that participant B obtains the second original intersection (X∩Z) q and the fourth original identity set Y q The third primitive intersection between (X∩Z∩Y) q .

[0082] It should be noted that the PSI protocols executed in step S203 and step S201 may be the same or different. For example, the two PSI protocols may be constructed based on the same cryptographic protocol or different cryptographic protocols.

[0083] In one embodiment, participant S may be designated as the server of the PSI protocol, and participant B may be designated as the client of the PSI protocol. In this case, participant B first obtains the third original intersection (X∩Z∩Y): q , and does not need to be transmitted to participant S. In another embodiment, participant S may be designated as the client in the PSI protocol, and participant B may be designated as the server in the PSI protocol. In this case, participant S determines the third original intersection (X∩Z∩Y) q After that, it needs to be securely delivered to participant B.

[0084] Based on the above, the following takes the example of designating participant S as the server in the PSI protocol and designating participant B as the client in the PSI protocol to illustrate the process of participant S and participant B jointly executing the PSI protocol. Specifically, Figure 5 A schematic diagram of interaction of a participant S and a participant B jointly executing a PSI protocol according to an embodiment is shown, wherein the interaction steps shown include:

[0085] Step S501, participants S and B jointly execute the cryptographic protocol based on the PSI protocol, so that participant B obtains the fourth original identification set Y q The fourth encrypted identity set This is equivalent to: using the second key s2 held by participant S to identify the fourth original identification set Y q The encrypted element set is obtained by encrypting each original identifier in .

[0086] Step S502, the participant S uses the second key s2 held by it to calculate the second original intersection (X∩Z) q Encrypt each original identifier in to obtain the second self-encrypted identifier set This includes a plurality of second self-encrypting identifiers.

[0087] Step S503: Party B receives a second self-encryption identifier set from Party S.

[0088] Step S504, Party B determines the fourth encrypted identification set and the second self-encrypting identity set The second encrypted intersection between

[0089] Step S505: Party B uses the fourth original identification set Y q and the fourth encrypted identity set The corresponding relationship between the identifiers Determine the intersection with the second encrypted The corresponding third original intersection (X∩Z∩Y) q . It needs to be explained that the corresponding relationship between the identifiers It may be established in step S501.

[0090] Furthermore, in one embodiment, for the aforementioned step S501, that is, the participant S and the participant B jointly execute the cryptographic protocol, so that the participant B obtains the fourth encrypted identification set The implementation can be achieved through Figure 6 The interactive steps shown in are implemented, wherein the interactive steps include:

[0091] Step S601: Party B uses the second pairwise key (b, b) it holds to ′ ), for the fourth original identification set Y q The original identifiers y in q Encrypt them respectively to obtain a plurality of fourth self-encryption identifiers [y q ] b The fourth self-encrypting identifier set [Y q ] b .

[0092] Step S602, Party B sends the fourth self-encryption identifier set [Y q ] b Sent to participant S.

[0093] Step S603, the participant S uses the second key s2 held by it to encrypt the fourth self-encrypted identifier set [Y q ] bEncrypt each self-encryption identifier in to obtain the fourth double encryption identifier set

[0094] Step S604: Party B receives a fourth double-encrypted identification set from Party S.

[0095] Step S605: Party B uses the second pairwise key (b, b ′ ) in the second decryption key b ′ , for the fourth double encryption identification set Decrypt each fourth double encryption identifier in the fourth double encryption identifier to obtain the fourth other encryption identifier set

[0096] It should be noted that the corresponding relationship of the identifiers used in the above step S505 In one embodiment, first, in step S601, party B may establish Y q and [Y q ] b The mapping relationship between them is: Second, in step S603, the participant S uses the second key s2 held by it to encrypt the fourth self-encrypted identifier set [Y q ] b The self-encryption identifiers in are encrypted separately, and the obtained fourth double encryption identifiers are arranged in the original order to form the fourth double encryption identifier set. Based on this, participant B receives the fourth double encryption identification set in step S604 After that, you can build [Y q ] b and The mapping relationship between them is: Third, in step S605, party B can establish and The mapping relationship between them is: Therefore, Party B, based on the mapping relationship it holds and Through relationship transfer, Y can be established q and The mapping relationship between

[0097] In addition, in another embodiment, the above step S602 can also be replaced by: Party B sends the fourth self-encryption identifier set [Y q ] b The identifiers in the fourth self-encryption identifier [Y q ] bThe order of receiving will correspond to the fourth double encryption mark Sequentially sent to participant B. In this way, participant B can also establish [Y q ] b and The mapping relationship between

[0098] In another embodiment, steps S602 to S604 may be replaced by: Party B first converts a fourth self-encrypting identifier [y q ] b Sent to participant B until receiving the corresponding fourth double encryption identifier from participant B After that, the fourth self-encryption identifier is sent to participant B, and this process is repeated until the participant receives the fourth self-encryption identifier set [Y q ] b The double encryption identifiers corresponding to each identifier in the , thus forming the fourth double encryption identifier set In this way, participant B can also establish [Y q ] b and The mapping relationship between

[0099] From above, by executing Figure 6 The interactive process in Figure 5 Step S501 in the above example enables Party B to obtain the fourth encrypted identification set. And, establish Y q and The mapping relationship between By executing Figure 5 The interactive process including step S501 etc. can be implemented Figure 2 Step S203 in the above example enables participant B to obtain the third original intersection (X∩Z∩Y) q .

[0100] In addition, it should be noted that in one embodiment, the interaction between any two parties mentioned above can be achieved based on a secure channel pre-established between the corresponding two parties. It should be understood that the establishment of a secure channel includes: the two parties perform identity authentication and key negotiation through a public communication channel. In one example, the two parties can establish a secure channel through standard security protocols such as TLS; the establishment of a secure channel enables the two parties to achieve secure communication through a public communication channel. For example, when the two parties send data to each other, they can use the key negotiated when establishing the secure channel to encrypt the plaintext data and then send it to the other party, so that the other party can use the corresponding key to decrypt it; in addition, the negotiated key can be a symmetric key or an asymmetric key. In this way, it is possible to resist attacks on the integrity of the data sent by the two parties from the outside.

[0101] Therefore, in one example, the above step S201 can be implemented as follows: the participant S and the first participant A jointly execute the PSI protocol based on the first secure channel pre-established between them to obtain the first original intersection (X∩Z) p The above step S203 can be implemented as follows: the participant S and the participant B jointly execute the PSI protocol based on the second secure channel pre-established between them to obtain the third original intersection (X∩Z∩Y) q .

[0102] According to a specific example, assuming that the key negotiated by party B and party S in the process of establishing a secure channel is a symmetric key k, then in the above step S602, party B sends the fourth self-encryption identifier set [Y q ] b The method may be specifically implemented as follows: Party B uses the symmetric key k to encrypt the fourth self-encrypted identifier set [Y q ] b Encrypt and get [[Y q ] b ] k , and then send it to the participant S; accordingly, the participant S can use the symmetric key k to [[Y q ] b ] k Decryption yields [Y q ] b .

[0103] In this way, by establishing a secure channel in advance, it is possible to effectively resist attacks from the outside on the integrity of the interactive data between the participants.

[0104] In summary, by adopting a method for converting identifiers disclosed in an embodiment of this specification, it is possible to achieve that participant A, participant S, and participant B cannot obtain identifier information that is not legally collected by themselves, and without introducing other trusted third parties, participant B obtains the third original intersection (X∩Z∩Y) q , to achieve the secure flow and conversion of identifiers.

[0105] The above mainly introduces the collaborative conversion method of identifiers. In fact, the above conversion method can also be extended to other privacy items that need to be securely protected. For example, in scenarios involving joint authentication of platforms, or cross-platform auxiliary authentication, these privacy items need to be converted across platforms. In one embodiment, privacy items may include biometric images such as face images, as well as user friends. In a specific embodiment, different service platforms may hold face images of the same user taken at different times for face recognition. At this time, it can be considered that the face images held by different service platforms naturally have different categories. It should be noted that the above privacy items are all collected or obtained through legal means.

[0106] Specifically, Figure 7 FIG. 4 shows a multi-party interaction diagram for converting privacy items according to one embodiment. Figure 7 As shown, the multiple parties include three participants, namely, participant A, participant S and participant B, which are respectively referred to as the first participant, the second participant and the third participant in the text; participant A stores the first original privacy item set X p , which includes multiple first original privacy items x of the first type p p ; Participant S stores the second original privacy item set Z p , which includes multiple second original privacy items z of the first type p p , and also stores the third original privacy item set Z q , which includes multiple third original privacy items z of the second type q q , and store the second original privacy item set Z p and the third original privacy item set Z q The mapping relationship between Participant S stores the fourth original privacy item set Y q , which includes multiple fourth original privacy items y of the second type q q .

[0107] It can be understood that the above-mentioned parties can be implemented as any platform or server cluster with computing and processing capabilities, such as a service platform or a business platform.

[0108] like Figure 7 As shown, the multi-party interaction process may include the following steps:

[0109] Step S701: Participant A and participant S jointly execute the PSI protocol, so that participant S obtains the first original privacy item set X p and the second original privacy item set Z p The first primitive intersection between (X∩Z) p; Step S702, the participant S based on the second original privacy item set Z p and the third original privacy item set Z q The mapping relationship between The first original intersection (X∩Z) p Convert to the second primitive intersection (X∩Z) of type q q ; Further, in one embodiment, the above interaction process may also include step S703, where the participant S and the participant B jointly execute the PSI protocol, so that the participant B obtains the second original intersection (X∩Z) q and the fourth original privacy item set Y q The intersection between (X∩Z∩Y) q .

[0110] Need to explain, yes Figure 7 For the description of the steps in the above, please refer to the description of the above embodiments, which will not be repeated here.

[0111] In summary, by adopting a method for converting privacy items disclosed in the embodiments of this specification, it is possible to achieve that Party A, Party S, and Party B cannot obtain privacy item information that is not legally collected by themselves, and without introducing other trusted third parties, Party B obtains the third original intersection (X∩Z∩Y) q , to achieve the secure flow and conversion of privacy items.

[0112] It should be noted that although the article mentions many times that during the execution of the PSI protocol, each participant uses a key to encrypt or decrypt the identifier, in the actual provisions of the PSI protocol, encrypting the identifier using a key to obtain an encrypted identifier is often described as mapping the identifier to a random number using a cryptographic algorithm, or decrypting the identifier using a key and obtaining the intersection of the encrypted identifier are collectively described as verifying whether the other party's random number set contains the random number mapped by us.

[0113] Corresponding to the above conversion method, the embodiment of this specification also discloses a conversion device. The details are as follows:

[0114] Figure 8 A schematic block diagram of an apparatus for converting identifiers according to one embodiment is shown, wherein the multiple parties include three participants, specifically, a first participant stores multiple first original identifiers of a first type, a second participant stores multiple second original identifiers of the first type and multiple third original identifiers of the second type, as well as a mapping relationship between the two, and a third participant stores multiple fourth original identifiers of the second type.

[0115] The device is integrated in the second participant, and can be implemented as any platform or server cluster with computing and processing capabilities. Figure 8As shown, the device 800 includes:

[0116] The first intersection protocol execution unit 810 is configured to obtain the first original intersection between the multiple first original identifiers and the multiple second original identifiers by jointly executing the privacy set intersection protocol PSI with the first participant. The identifier mapping unit 820 is configured to determine the second type of second original intersection corresponding to the first original intersection based on the mapping relationship. Further, in one embodiment, the device 800 may also include a second intersection protocol execution unit 830, configured to jointly execute the PSI protocol with the third participant so that the third participant obtains the third original intersection between the second original intersection and the multiple fourth original identifiers.

[0117] In one embodiment, the PSI protocol is based on a cryptographic protocol; wherein the first intersection protocol execution unit 810 comprises:

[0118] The first cryptographic protocol execution module 811 is configured to obtain a plurality of second encrypted identifiers corresponding to the plurality of second original identifiers by jointly executing the cryptographic protocol with the first participant, which is equivalent to the result of encrypting the plurality of second original identifiers using the first key of the first participant; the encrypted identifier receiving module 812 is configured to receive a plurality of first self-encrypted identifiers from the first participant, which is obtained by encrypting the plurality of first original identifiers using the first key; the encrypted intersection determination module 813 is configured to determine the first encrypted intersection between the plurality of first self-encrypted identifiers and the plurality of second encrypted identifiers; the identifier mapping module 814 is configured to determine the first original intersection corresponding to the first encrypted intersection based on the correspondence between the plurality of second original identifiers and the plurality of second encrypted identifiers.

[0119] In a specific embodiment, the first cryptographic protocol execution module 811 is specifically configured as follows:

[0120] The multiple second original identifiers are encrypted using the first encryption key in the first pair of keys to obtain the corresponding multiple second self-encryption identifiers; the multiple second self-encryption identifiers are sent to the first participant so that the first participant encrypts the multiple second self-encryption identifiers using the first key to obtain multiple second double-encrypted identifiers; the multiple second double-encrypted identifiers are decrypted using the first decryption key in the first pair of keys to obtain the multiple second other-encrypted identifiers.

[0121] In one embodiment, the PSI protocol is based on a cryptographic protocol; wherein the second intersection protocol execution unit 830 comprises:

[0122] The second cryptographic protocol execution module 831 is configured to execute the cryptographic protocol together with the third party so that the third party obtains multiple fourth other-encrypted identifiers corresponding to the multiple fourth original identifiers, which are equivalent to the result of encrypting the multiple fourth original identifiers using the second key of the second party; the encrypted identifier sending module 832 is configured to send multiple second self-encrypted identifiers to the third party, which are obtained by encrypting the original identifiers in the second original intersection using the second key, so that the third party determines the second encrypted intersection between the multiple second self-encrypted identifiers and the multiple fourth other-encrypted identifiers, and determines the corresponding third original intersection.

[0123] In a specific embodiment, the second cryptographic protocol execution module 831 is specifically configured as follows:

[0124] Receive multiple fourth self-encrypted identifiers from the third party, which are obtained by encrypting the multiple fourth original identifiers using the second encryption key in the second pair of keys; encrypt the multiple fourth self-encrypted identifiers using the second key to obtain corresponding multiple fourth double-encrypted identifiers; send the multiple fourth double-encrypted identifiers to the third party, so that it can decrypt the multiple fourth double-encrypted identifiers using the second decryption key in the second pair of keys to obtain the multiple fourth other-encrypted identifiers.

[0125] In one embodiment, the first intersection protocol execution unit 810 is specifically configured as: based on the secure channel pre-established by the second participant and the first participant, jointly executing the PSI protocol with the first participant to obtain the first original intersection; wherein the second intersection protocol execution unit 830 is specifically configured as: based on the secure channel pre-established by the second participant and the third participant, jointly executing the PSI protocol with the third participant to obtain the third original intersection.

[0126] In one embodiment, the first type is any one of the following: mobile phone number, terminal device ID, identity card number.

[0127] Fig. 9 A schematic block diagram of an apparatus for converting a privacy item according to an embodiment is shown; wherein the multiple parties include three participants, specifically, the first participant stores a plurality of first original privacy items of the first type, the second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, and a mapping relationship between the two, and the third participant stores a plurality of fourth original privacy items of the second type; the apparatus is integrated in the second participant, and the apparatus 900 includes:

[0128] The first intersection protocol execution unit 910 is configured to obtain a first original intersection between the multiple first original privacy items and the multiple second original privacy items by jointly executing the privacy set intersection protocol PSI with the first participant; the privacy item mapping unit 920 is configured to determine a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship; further, in one embodiment, the device 900 may also include a second intersection protocol execution unit 930, configured to jointly execute the PSI protocol with the third participant, so that the third participant obtains a third original intersection between the second original intersection and multiple fourth original privacy items.

[0129] In one embodiment, the PSI protocol is based on a cryptographic protocol; wherein the first intersection protocol execution unit 910 includes:

[0130] The first cryptographic protocol execution module 911 is configured to obtain a plurality of second other-encrypted privacy items corresponding to the plurality of second original privacy items by jointly executing the cryptographic protocol with the first participant, which is equivalent to the result of encrypting the plurality of second original privacy items using the first key of the first participant; the encrypted privacy item receiving module 912 is configured to receive a plurality of first self-encrypted privacy items from the first participant, which is obtained by encrypting the plurality of first original privacy items using the first key; the encrypted intersection determination module is configured to determine a first encrypted intersection 913 between the plurality of first self-encrypted privacy items and the plurality of second other-encrypted privacy items; the privacy item mapping module 914 is configured to determine the first original intersection corresponding to the first encrypted intersection based on the correspondence between the plurality of second original privacy items and the plurality of second other-encrypted privacy items.

[0131] In a specific embodiment, the first cryptographic protocol execution module 911 is specifically configured as follows:

[0132] Using the first encryption key in the first pair of keys, the multiple second original privacy items are encrypted to obtain the corresponding multiple second self-encrypted privacy items; sending the multiple second self-encrypted privacy items to the first participant so that it uses the first key to encrypt the multiple second self-encrypted privacy items to obtain multiple second double-encrypted privacy items; using the first decryption key in the first pair of keys, the multiple second double-encrypted privacy items are decrypted to obtain the multiple second other-encrypted privacy items.

[0133] In one embodiment, the PSI protocol is based on a cryptographic protocol; wherein the second intersection protocol execution unit 930 includes:

[0134] The second cryptographic protocol execution module 931 is configured to execute the cryptographic protocol together with the third party, so that the third party obtains multiple fourth other-encrypted privacy items corresponding to the multiple fourth original privacy items, which are equivalent to the result of encrypting the multiple fourth original privacy items using the second key of the second party; the encrypted privacy item sending module 932 is configured to send multiple second self-encrypted privacy items to the third party, which are obtained by encrypting the original privacy items in the second original intersection using the second key, so that the third party determines the second encrypted intersection between the multiple second self-encrypted privacy items and the multiple fourth other-encrypted privacy items, and determines the corresponding third original intersection.

[0135] In a specific embodiment, the second cryptographic protocol execution module 931 is specifically configured as follows:

[0136] Receive multiple fourth self-encrypted privacy items from the third party, which are obtained by encrypting the multiple fourth original privacy items using the second encryption key in the second pair of keys; encrypt the multiple fourth self-encrypted privacy items using the second key to obtain corresponding multiple fourth double-encrypted privacy items; send the multiple fourth double-encrypted privacy items to the third party, so that it can decrypt the multiple fourth double-encrypted privacy items using the second decryption key in the second pair of keys to obtain the multiple fourth other-encrypted privacy items.

[0137] In one embodiment, the first intersection protocol execution unit 910 is specifically configured as: based on the secure channel pre-established by the second participant and the first participant, jointly executing the PSI protocol with the first participant to obtain the first original intersection; wherein the second intersection protocol execution unit 930 is specifically configured as: based on the secure channel pre-established by the second participant and the third participant, jointly executing the PSI protocol with the third participant to obtain the third original intersection.

[0138] In one embodiment, the first type is any one of the following: mobile phone number, terminal device ID, identity card number.

[0139] According to an embodiment of another aspect, an embodiment of this specification discloses a device for converting an identifier, wherein the device involves at least two participants, wherein a first participant stores a plurality of first original identifiers of a first type, and a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, and a mapping relationship between the two; the device is integrated in the first participant, and the device includes:

[0140] The intersection protocol execution unit is configured to jointly execute the privacy set intersection protocol PSI with the second participant, so that the second participant obtains the first original intersection between the multiple first original identifiers and the multiple second original identifiers, and thereby determines the second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0141] According to another embodiment, the embodiment of this specification discloses a device for converting an identifier, the device involves three participants, wherein the first participant stores multiple first original identifiers of the first type, the second participant stores multiple second original identifiers of the first type and multiple third original identifiers of the second type, and a mapping relationship between the two, and the third participant stores multiple fourth original identifiers of the second type; the device is integrated in the third participant, and the device includes:

[0142] The intersection protocol execution unit executes the privacy set intersection protocol PSI together with the second participant to obtain the third original intersection between the second original intersection and the multiple fourth original identifiers; the second original intersection is obtained based on the processing unit, and the processing unit is configured for the first participant and the second participant to jointly execute the PSI protocol to obtain the first original intersection between the multiple first original identifiers and the multiple second original identifiers; the second participant determines a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0143] According to another embodiment of the present specification, an apparatus for converting a privacy item is disclosed. The apparatus involves at least two participants, wherein a first participant stores a plurality of first original privacy items of a first type, and a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, as well as a mapping relationship between the two. The apparatus is applied to the first participant, and includes:

[0144] The intersection protocol execution unit is configured to execute the privacy set intersection protocol PSI together with the second participant, so that the second participant obtains the first original intersection between the multiple first original privacy items and the multiple second original privacy items, and thereby determines a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

[0145] According to another embodiment, the present specification discloses a device for converting a privacy item, the device involving three participants, wherein the first participant stores a plurality of first original privacy items of the first type, the second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, and a mapping relationship between the two, and the third participant stores a plurality of fourth original privacy items of the second type; the device is applied to the third participant, and the device includes:

[0146] An intersection protocol execution unit is configured to obtain a third original intersection between the second original intersection and the multiple fourth original privacy items by jointly executing a privacy set intersection protocol PSI with the second participant; the second original intersection is obtained based on a processing unit, and the processing unit is configured for the first participant and the second participant to jointly execute the PSI protocol to obtain a first original intersection between the multiple first original privacy items and the multiple second original privacy items; the second participant determines a second original intersection of a second type corresponding to the first original intersection based on the mapping relationship.

[0147] As described above, according to another embodiment of the present invention, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed in a computer, the computer executes the combination of Figures 2 to 7 The method described.

[0148] According to another embodiment, a computing device is provided, including a memory and a processor, wherein the memory stores an executable code, and when the processor executes the executable code, the Figures 2 to 7 The method described.

[0149] Those skilled in the art should be aware that in one or more of the above examples, the functions described in the multiple embodiments disclosed in this specification can be implemented by hardware, software, firmware, or any combination thereof. When implemented by software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on a computer-readable medium.

[0150] The specific implementation methods described above further illustrate in detail the purposes, technical solutions and beneficial effects of the multiple embodiments disclosed in this specification. It should be understood that the above description is only the specific implementation methods of the multiple embodiments disclosed in this specification, and is not used to limit the protection scope of the multiple embodiments disclosed in this specification. Any modifications, equivalent substitutions, improvements, etc. made on the basis of the technical solutions of the multiple embodiments disclosed in this specification should be included in the protection scope of the multiple embodiments disclosed in this specification.

Claims

1. A method for converting an identifier, the method involving three participants, wherein a first participant stores a plurality of first original identifiers of a first type, a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original identifiers of the second type; The method is applied to the second participant, and the method comprises: By executing the privacy set intersection protocol PS I together with the first participant, a first original intersection between the plurality of first original identifiers and the plurality of second original identifiers is obtained; Based on the mapping relationship, determining a second original intersection of a second type corresponding to the first original intersection; By jointly executing the PS I protocol with the third party, the third party obtains the third original intersection between the second original intersection and multiple fourth original identifiers, thereby providing recommendation or authentication services for the target user indicated by the third original intersection.

2. The method according to claim 1, wherein: The PSI protocol is based on a cryptographic protocol; wherein, by jointly executing the privacy set intersection protocol PSI with the first participant, a first original intersection between the plurality of first original identifiers and the plurality of second original identifiers is obtained, including: By executing the cryptographic protocol together with the first participant, a plurality of second encrypted identifiers corresponding to the plurality of second original identifiers are obtained, which are equivalent to the result of encrypting the plurality of second original identifiers using the first key of the first participant; receiving a plurality of first self-encrypted identifiers from the first participant, which are obtained by encrypting the plurality of first original identifiers using the first key; Determine a first encrypted intersection between the plurality of first self-encryption identifiers and the plurality of second other-encryption identifiers; Based on the correspondence between the plurality of second original identifiers and the plurality of second encrypted identifiers, the first original intersection corresponding to the first encrypted intersection is determined.

3. The method according to claim 2, wherein: By executing the cryptographic protocol together with the first participant, a plurality of second encrypted identifiers corresponding to the plurality of second original identifiers are obtained, including: Using the first encryption key in the first pair-wise key, encrypt the plurality of second original identifiers to obtain a corresponding plurality of second self-encrypted identifiers; Sending the plurality of second self-encryption identifiers to the first participant so that the first participant encrypts the plurality of second self-encryption identifiers using the first key to obtain a plurality of second double-encryption identifiers; The plurality of second double-encrypted identifiers are decrypted using the first decryption key in the first pair of keys to obtain the plurality of second other-encrypted identifiers.

4. The method according to claim 1, wherein: The method of obtaining a first original intersection set between the plurality of first original identifiers and the plurality of second original identifiers by jointly executing a privacy set intersection protocol PSI with the first participant includes: Based on the secure channel pre-established between the second participant and the first participant, the second participant and the first participant jointly execute the PS I protocol to obtain the first original intersection.

5. The method according to claim 1, wherein: The PSI protocol is based on a cryptographic protocol; wherein, by jointly executing the PSI protocol with the third party, the third party obtains the second original intersection and a third original intersection of a plurality of fourth original identifiers, including: By jointly executing the cryptographic protocol with the third party, the third party obtains a plurality of fourth encrypted identifiers corresponding to the plurality of fourth original identifiers, which are equivalent to the result of encrypting the plurality of fourth original identifiers using the second key of the second party; Sending a plurality of second self-encrypted identifiers to the third party, which are obtained by encrypting the original identifiers in the second original intersection using the second key, so that the third party can determine the second encrypted intersection between the plurality of second self-encrypted identifiers and the plurality of fourth other-encrypted identifiers, and determine the corresponding third original intersection.

6. The method according to claim 5, wherein: By jointly executing the cryptographic protocol with the third party, the third party obtains a plurality of fourth encrypted identifiers corresponding to the plurality of fourth original identifiers, including: receiving a plurality of fourth self-encrypted identifiers from the third party, which are obtained by encrypting the plurality of fourth original identifiers using a second encryption key in the second pairwise key; Encrypting the plurality of fourth self-encryption identifiers using the second key to obtain a plurality of corresponding fourth double-encryption identifiers; The plurality of fourth double-encrypted identifiers are sent to the third party, so that the third party uses the second decryption key in the second pair of keys to decrypt the plurality of fourth double-encrypted identifiers to obtain the plurality of fourth other-encrypted identifiers.

7. The method according to claim 1, wherein: By executing the PSI protocol together with the third party, the third party obtains a third original intersection between the second original intersection and a plurality of fourth original identifiers, including: Based on the secure channel pre-established by the second participant and the third participant, the PS I protocol is jointly executed with the third participant to obtain the third original intersection.

8. The method according to claim 1, wherein: The first type is any one of the following: mobile phone number, terminal device ID, and ID card number.

9. A method for converting an identifier, the method involving three participants, wherein a first participant stores a plurality of first original identifiers of a first type, a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original identifiers of the second type; the method is applied to the first participant, and the method comprises: By jointly executing the privacy set intersection protocol PSI with the second participant, the second participant obtains the first original intersection between the multiple first original identifications and the multiple second original identifications, and then determines the second type of second original intersection corresponding to the first original intersection based on the mapping relationship, and then by jointly executing the PSI protocol with the third participant, the third participant obtains the third original intersection between the second original intersection and multiple fourth original identifications, so as to provide recommendation or authentication services for the target user indicated by the third original intersection.

10. A method for converting an identifier, the method involving three participants, wherein a first participant stores a plurality of first original identifiers of a first type, a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original identifiers of the second type; the method is applied to the third participant, and the method comprises: By executing the privacy set intersection protocol PS I together with the second participant, a third original intersection between the second original intersection and the plurality of fourth original identifiers is obtained, thereby providing a recommendation or authentication service for a target user indicated by the third original intersection; The second original intersection is obtained by the following steps: the first participant and the second participant jointly execute the PSI protocol to obtain the first original intersection between the multiple first original identifiers and the multiple second original identifiers; the second participant determines a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

11. A method for converting a privacy item, the method involving three participants, wherein a first participant stores a plurality of first original privacy items of a first type, a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original privacy items of the second type; The method is applied to the second participant, and the method comprises: By executing the privacy set intersection protocol PS I together with the first participant, a first original intersection set between the plurality of first original privacy items and the plurality of second original privacy items is obtained; Based on the mapping relationship, a second original intersection of the second type corresponding to the first original intersection is determined; and by jointly executing the PSI protocol with the third party, the third party obtains a third original intersection between the second original intersection and multiple fourth original privacy items, thereby providing a recommendation or authentication service for the target user indicated by the third original intersection.

12. A method for converting a privacy item, the method involving three participants, wherein a first participant stores a plurality of first original privacy items of a first type, a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original privacy items of the second type; the method is applied to the first participant, and the method comprises: By jointly executing the privacy set intersection protocol PSI with the second participant, the second participant obtains the first original intersection between the multiple first original privacy items and the multiple second original privacy items, thereby determining the second type of second original intersection corresponding to the first original intersection based on the mapping relationship, and then jointly executing the PSI protocol with the third participant, the third participant obtains the third original intersection between the second original intersection and the multiple fourth original privacy items, thereby providing recommendation or authentication services for the target user indicated by the third original intersection.

13. A method for converting privacy items, the method involving three participants, wherein a first participant stores a plurality of first original privacy items of a first type, a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original privacy items of the second type; the method is applied to the third participant, and the method comprises: By jointly executing the privacy set intersection protocol PS I with the second participant, a third original intersection between the second original intersection and the plurality of fourth original privacy items is obtained, thereby providing a recommendation or authentication service for a target user indicated by the third original intersection; The second original intersection is obtained by the following steps: the first participant and the second participant jointly execute the PSI protocol to obtain the first original intersection between the multiple first original privacy items and the multiple second original privacy items; the second participant determines a second original intersection of the second type corresponding to the first original intersection based on the mapping relationship.

14. A device for converting an identifier, the device involving three participants, wherein a first participant stores a plurality of first original identifiers of a first type, and a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, and a mapping relationship between the two; The device is integrated in the second participant, and the third participant stores a plurality of fourth original identifiers of the second type, and the device includes: A first intersection protocol execution unit is configured to obtain a first original intersection set between the plurality of first original identifiers and the plurality of second original identifiers by executing a privacy set intersection protocol PSI together with the first participant; An identification mapping unit is configured to determine a second original intersection of a second type corresponding to the first original intersection based on the mapping relationship; a second intersection protocol execution unit is configured to jointly execute the PSI protocol with the third party so that the third party obtains a third original intersection between the second original intersection and multiple fourth original identifications, thereby providing recommendation or authentication services for the target user indicated by the third original intersection.

15. A device for converting identifiers, the device involving three participants, wherein a first participant stores a plurality of first original identifiers of a first type, a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original identifiers of the second type; the device is integrated in the first participant, and comprises: The intersection protocol execution unit is configured to jointly execute the privacy set intersection protocol PSI with the second participant, so that the second participant obtains the first original intersection between the multiple first original identifiers and the multiple second original identifiers, thereby determining the second type of second original intersection corresponding to the first original intersection based on the mapping relationship, and then jointly execute the PSI protocol with the third participant, so that the third participant obtains the third original intersection between the second original intersection and multiple fourth original identifiers, thereby providing recommendation or authentication services for target users indicated by the third original intersection.

16. A device for converting an identifier, the device involving three participants, wherein a first participant stores a plurality of first original identifiers of a first type, a second participant stores a plurality of second original identifiers of the first type and a plurality of third original identifiers of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original identifiers of the second type; The device is integrated in the third party, and the device includes: an intersection protocol execution unit, which executes a privacy set intersection protocol PS I with the second participant to obtain a third original intersection between the second original intersection and the plurality of fourth original identifiers, thereby providing a recommendation or authentication service for a target user indicated by the third original intersection; The second original intersection is obtained based on a processing unit, and the processing unit is configured to execute the PSI protocol together with the first participant and the second participant to obtain a first original intersection between the plurality of first original identifiers and the plurality of second original identifiers; The second participant determines, based on the mapping relationship, a second original intersection of a second type corresponding to the first original intersection.

17. A device for converting a privacy item, the device involving three participants, wherein a first participant stores a plurality of first original privacy items of a first type, a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original privacy items of the second type; The device is integrated in the second participant, and the device includes: A first intersection protocol execution unit is configured to obtain a first original intersection set between the plurality of first original privacy items and the plurality of second original privacy items by executing a privacy set intersection protocol PSI together with the first participant; a privacy item mapping unit configured to determine, based on the mapping relationship, a second original intersection of a second type corresponding to the first original intersection; and a second intersection protocol execution unit configured to execute the PSI protocol together with the third party so that the third party obtains a third original intersection between the second original intersection and a plurality of fourth original privacy items, thereby providing a recommendation or authentication service for a target user indicated by the third original intersection.

18. A device for converting privacy items, the device involving three participants, wherein a first participant stores a plurality of first original privacy items of a first type, a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original privacy items of the second type; the device is applied to the first participant, and comprises: The intersection protocol execution unit is configured to jointly execute the privacy set intersection protocol PSI with the second participant, so that the second participant obtains the first original intersection between the multiple first original privacy items and the multiple second original privacy items, thereby determining the second original intersection of the second type corresponding to the first original intersection based on the mapping relationship, and further jointly execute the PSI protocol with the third participant, so that the third participant obtains the third original intersection between the second original intersection and the multiple fourth original privacy items, thereby providing recommendation or authentication services for the target user indicated by the third original intersection.

19. A device for converting privacy items, the device involving three participants, wherein a first participant stores a plurality of first original privacy items of a first type, a second participant stores a plurality of second original privacy items of the first type and a plurality of third original privacy items of the second type, and a mapping relationship between the two, and a third participant stores a plurality of fourth original privacy items of the second type; the device is applied to the third participant, and comprises: an intersection protocol execution unit, configured to obtain a third original intersection between the second original intersection and the plurality of fourth original privacy items by jointly executing a privacy set intersection protocol PSI with the second participant, thereby providing a recommendation or authentication service for a target user indicated by the third original intersection; The second original intersection is obtained based on a processing unit, and the processing unit is configured for the first participant and the second participant to jointly execute the PSI protocol to obtain a first original intersection between the multiple first original privacy items and the multiple second original privacy items; the second participant determines a second original intersection of a second type corresponding to the first original intersection based on the mapping relationship.

20. A computer-readable storage medium having a computer program stored thereon, wherein: When the computer program is executed in a computer, the computer is caused to execute the method according to any one of claims 1 to 13.

21. A computing device comprising a memory and a processor, wherein: The memory stores executable codes, and when the processor executes the executable codes, the method according to any one of claims 1 to 13 is implemented.

Images