Privacy Removal Method, Device, Computer Equipment and Medium for Triple Composite Function

Abstract

The present invention provides a privacy removal method, device, computer device, and computer-readable storage medium for a triple composite function. The privacy removal method for the triple composite function includes: identifying privacy data in the original data; identifying data that needs to be encrypted in the privacy data and encrypting the data that needs to be encrypted; determining an operation logic that needs to be encrypted according to the data that needs to be encrypted and the data that does not need to be encrypted, where the operation logic is a rule for operating on the data that needs to be encrypted and the data that does not need to be encrypted; encrypting the operation logic that needs to be encrypted to obtain privacy-removed data.

Description

Technical Field

[0001] The present invention relates to the field of communications, and in particular, to a method, apparatus, computer device, and computer-readable storage medium for de-privatizing a triple composite function. Background Art

[0002] With the rapid development of Internet technology, especially mobile Internet, both enterprises and individuals will retain a large amount of information on the Internet, that is, big data based on the Internet is generated. In the process of production and utilization of these data, while greatly facilitating enterprise operations and personal life, it also provides convenience for the leakage of business confidential information and personal privacy information. It even gives birth to industrial chains and industrial networks that specifically steal, sell, and attack such information that needs to be protected, causing damage to enterprises and individuals and increasing social management costs.

[0003] Therefore, how to achieve secure dissemination and use of this protected information has become an important topic. The general method is to use various encryption technologies, including hardware encryption, software encryption and other means, to try to desensitize, de-label, anonymize, etc. these information. However, these technical means often have some limitations in actual use. For example, although homomorphic encryption algorithms such as semi-homomorphic encryption, multiplicative homomorphic encryption, and additive homomorphic encryption have been commercially applied, they consume too much computing resources during the decryption process, with high costs and are not economical. Summary of the Invention

[0004] The present invention provides a method, apparatus, computer device, and computer-readable storage medium for de-privatizing a triple composite function.

[0005] In a first aspect, the present invention provides a method for de-privatizing a triple composite function, including:

[0006] Identifying privacy data in the original data;

[0007] Identifying data that needs to be encrypted in the privacy data, and encrypting the data that needs to be encrypted;

[0008] Confirming the operation logic that needs to be encrypted according to the data that needs to be encrypted and the data that does not need to be encrypted, where the operation logic is the rule for operating on the data that needs to be encrypted and the data that does not need to be encrypted;

[0009] Encrypting the operation logic that needs to be encrypted to obtain de-privatized data.

[0010] In some embodiments, the identifying privacy data in the original data includes:

[0011] Decomposing the original data into field names and field values;

[0012] Identify privacy fields according to the field names in the original data;

[0013] Determine the original data including the privacy fields as privacy data.

[0014] In some embodiments, the identifying privacy fields according to the field names in the original data includes:

[0015] Match all the field names in the original data with a predetermined sensitive word library;

[0016] Determine the field names with successful matches as privacy fields;

[0017] Determine the field names with unsuccessful matches as non-privacy fields.

[0018] In some embodiments, the identifying privacy data in the original data further includes:

[0019] Match all the field values in the original data with a predetermined sensitive data type determination library;

[0020] Determine the original data with successfully matched field values as privacy data.

[0021] In some embodiments, the de-privacy method of the triple composite function further includes:

[0022] Determine the data attribute of the field value according to the field value of the original data corresponding to the privacy data;

[0023] Classify the privacy data into data that needs to be encrypted and data that does not need to be encrypted according to the data attribute.

[0024] In some embodiments, the determining the operation logic that needs to be encrypted according to the data that needs to be encrypted and the data that does not need to be encrypted includes:

[0025] For the data that needs to be encrypted and the data that does not need to be encrypted, determine the operation logic that needs to perform the encryption operation according to the predetermined operation logic judgment rules.

[0026] Optionally, before encrypting the data that needs to be encrypted, it further includes:

[0027] Set an encryption algorithm library;

[0028] Encrypt the data that needs to be encrypted by retrieving the encryption algorithm in a configurable manner.

[0029] Optionally, encrypt the data that needs to be encrypted by using at least one of the following encryption algorithms: symmetric encryption, asymmetric encryption.

[0030] Optionally, at least one of the following encryption algorithms is used to encrypt the operation logic: fully homomorphic encryption, multiplicative homomorphism, additive homomorphism.

[0031] In a second aspect, the present invention provides a computer device, which includes:

[0032] One or more processors;

[0033] A memory, on which one or more programs are stored. When the one or more programs are executed by the one or more processors, the one or more processors implement the privacy removal method of the triple composite function according to any one of the first aspects;

[0034] One or more I / O interfaces, connected between the processor and the memory, configured to implement information interaction between the processor and the memory.

[0035] In a third aspect, the present invention provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the privacy removal method of the triple composite function according to any one of the first aspects is implemented.

[0036] In a fourth aspect, the present invention provides a privacy removal device for a triple composite function, including:

[0037] A privacy data recognition unit, configured to recognize privacy data in the original data;

[0038] A privacy data security processing unit, configured to identify data that needs to be encrypted in the privacy data and encrypt the data that needs to be encrypted;

[0039] A privacy logic security processing unit, configured to determine the operation logic that needs to be encrypted according to the data that needs to be encrypted and the data that does not need to be encrypted, and encrypt the operation logic that needs to be encrypted to obtain de-privatized data; wherein, the operation logic is a rule for operating on the data that needs to be encrypted and the data that does not need to be encrypted.

[0040] The privacy removal method of the triple composite function proposed by the present invention effectively identifies and de-privatizes privacy information from three levels of privacy data recognition, privacy data protection, and privacy logic protection, based on "whether it is privacy information" and "whether it needs protection", achieving "targeted". It can not only solve the problem that the existing technology has a relatively general recognition of what is privacy information and cannot accurately judge, but also through a three-layer composite architecture that identifies and protects privacy information in different scenarios, decides whether to perform privacy removal processing based on "whether it is necessary", reduces the processing volume, and solves the problem that the related technology occupies too much resources during the encryption process. Brief Description of the Drawings

[0041] Figure 1 is a flowchart of a method for de - anonymizing a triple - composite function provided by an embodiment of the present invention.

[0042] Figure 2 is a schematic diagram of the overall framework of the method for de - anonymizing a triple - composite function provided by an embodiment of the present invention.

[0043] Figure 3 is a schematic diagram of the privacy data identification process provided by an embodiment of the present invention.

[0044] Figure 4 is a schematic diagram of the privacy data protection process provided by an embodiment of the present invention.

[0045] Figure 5 is a schematic diagram of the privacy logic protection process provided by an embodiment of the present invention.

[0046] Figure 6 is a schematic diagram of a device for de - anonymizing a triple - composite function provided by an embodiment of the present invention.

[0047] Figure 7 is a schematic diagram of a computer device provided by an embodiment of the present invention.

[0048] Figure 8 is a schematic diagram of a computer - readable storage medium provided by an embodiment of the present invention. Detailed Embodiments

[0049] It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0050] In the following description, suffixes such as "module", "component" or "unit" used to represent elements are only for the convenience of describing the present invention, and they have no specific meaning in themselves. Therefore, "module", "component" or "unit" can be used interchangeably.

[0051] In the existing legal framework, privacy information generally refers to information about individuals such as names, ID numbers, mobile phone numbers, bank card numbers, etc. The inventors of the present invention believe that there are also issues regarding the protection of trade secret information for enterprises. These information, like personal privacy information, can also be included in the scope of privacy protection. Therefore, the privacy information referred to in the present invention does not specifically refer to the objects of personal privacy protection, but generally refers to any information carrier that a subject wishes to protect under the premise of conforming to the legal framework. What is carried on it may be data, or it may be a process, etc. In short, all information that a subject wishes to protect within the compliance framework can become privacy information.

[0052] The inventors of the present invention have found through research that there are the following defects in the existing backbone technologies:

[0053] 1) There is no unified method framework for existing privacy protection. Privacy protection is confused with consensus mechanisms, cryptographic technologies, encryption algorithms, etc. However, fundamentally speaking, these technologies do not have the ability to distinguish what privacy information is. At the same time, there is no overall method guidance framework on how to effectively combine these technologies to protect privacy information while optimizing the use of system resources as much as possible.

[0054] 2) Existing technologies do not have true specialized technologies for "privacy information". Whether it is encryption technology, federated learning, multi-party security technology, etc., they are not specialized algorithms for "privacy information" and do not distinguish between privacy information and non-privacy information. From the perspective of "computing materials", there are no specific regulations.

[0055] 3) In practice, the scope of privacy information is "dynamic". Some information needs to be protected in certain scenarios, but may not need to be protected as privacy in other scenarios, and even it may be necessary to open this information to users. For example, generally, an individual's name and ID number need to be protected as privacy information, but when handling business such as bank counter transfers, real information may have to be provided, and at this time, privacy protection measures are not applicable. If privacy protection is carried out for all privacy information, or even all comprehensive information, regardless of the scenario, it will cause unnecessary pressure on the computer system and increase meaningless computing power overhead.

[0056] In response to the above problems of the existing technology, the inventors have proposed a unified privacy-removing method framework, which effectively identifies and processes privacy information from three levels: privacy data identification, privacy data protection, and privacy logic protection, achieving "targeted" identification and protection of privacy information in different scenarios. It decides whether to perform privacy-removing processing based on "necessity", reduces the processing volume, and solves the problem of excessive resource occupation during encryption processing by related technologies.

[0057] In the first aspect, an embodiment of the present invention provides a privacy-removing method for a triple composite function, as Figure 1 shown. The privacy-removing method for the triple composite function includes the following steps:

[0058] In step S100, identify the privacy data in the original data;

[0059] In step S200, identify the data that needs to be encrypted in the privacy data and encrypt the data that needs to be encrypted;

[0060] In step S300, according to the data that needs to be encrypted and the data that does not need to be encrypted, determine the operation logic that needs to be encrypted, where the operation logic is the rule for operating on the data that needs to be encrypted and the data that does not need to be encrypted;

[0061] In step S400, encrypt the operation logic that needs to be encrypted to obtain the data after privacy removal.

[0062] It should be noted that the original data referred to in the present invention refers to the data to be processed by the privacy removal method of the triple composite function. This data may come from different devices, such as smartphones, personal computers, enterprise OA systems, etc.; it may be of various types such as pictures, multimedia, sounds, etc. For the same type of data, there may also be multiple different formats, basically presenting the characteristics of multi-source heterogeneity. For the sake of simplicity of expression, the original data is represented by D.

[0063] As Figure 2 shown, in the technical solution of the present invention, taking the original data as the input, through the triple functions of the privacy data identification function F1, the privacy data protection function F2, and the privacy logic protection function F3, effective privacy information identification and privacy removal are carried out from three levels of privacy data identification, privacy data protection, and privacy logic protection. Finally, the data after privacy removal is output to achieve the purpose of privacy removal. If F is used as the final output result of the present invention, the triple function relationship is as shown in formula 1:

[0064] F = F3(F2(F1)) (1)

[0065] The original data D is processed by the F1 function and is divided from an overall data set into two different parts, namely the non-privacy data Dn and the privacy data Dy subsets.

[0066] The privacy data Dy is processed by the F2 function and is divided from an overall data set into the data Du that does not need to be encrypted and the data Dm that needs to be encrypted.

[0067] In the composition of privacy protection, what may cause privacy leakage is not only the value of the privacy data that needs to be encrypted. Some data, when viewed alone, is not data that needs to be encrypted, but through the processing of operation logic, privacy may be determined. For example, an individual's mobile phone number itself may be public, but since the mobile phone number is bound to identity information, payment software, express delivery information, travel information, etc., it will associate a large number of related data, and through operation processing, it may still lead to the leakage of personal privacy. Therefore, both Du and Dm need to be processed as "calculation material" data. When processing "calculation material" data, various mathematical operation rules will be used. Some of these operation rules are often privacy information that also needs to be protected and also need to be de-privatized. Therefore, the F3 function is introduced in the present invention. The F3 function is a de-privatization process for data operation logic.

[0068] Through a predetermined operation logic judgment rule, the operation logics that need and do not need to perform encryption operations are confirmed, that is, privacy logic and non-privacy logic. For privacy logic, logical operations or arithmetic operations can be performed. By calling the de-privatization algorithms (such as homomorphic encryption, information obfuscation, differential privacy) or encryption methods (such as fully homomorphic encryption, multiplicative homomorphic, additive homomorphic) through the F3 function, etc., the encrypted result is output. The encrypted result can be a gradient function, weight, or direct model result, or the F2 function can also be called for encryption.

[0069] After triple function processing by F1, F2, and F3 from three levels of privacy data identification, privacy data protection, and privacy logic protection, effective privacy information identification and de-privatization processing are carried out based on "whether it is privacy information" and "whether it needs to be protected", achieving "targeted". It can not only solve the problem that the existing technology has a relatively general identification of what is privacy information and cannot accurately judge, but also through a three-layer composite architecture that identifies and protects privacy information in different scenarios, and decides whether to perform de-privatization processing based on "whether it is necessary", reducing the processing volume and solving the problem that the related technology occupies too many resources during the encryption process.

[0070] In some embodiments, the identification of privacy data in the original data includes:

[0071] Decompose the original data into a field name and a field value;

[0072] According to the field name in the original data, identify the privacy field;

[0073] Determine the original data including the privacy field as privacy data.

[0074] The original data D generally exists in the form of a field name and a field value. D can be expressed as D(k, v), where k represents the field name (key), that is, key, and v represents the field value (value), that is, value.

[0075] As Figure 3 shown, the original data D is processed by the F1 function and is divided from an overall data set into two different parts, namely two subsets of non-private data Dn and private data Dy. The F1 function is a private data recognition function, which is composed of two functions fk and fv, and their relationship is determined by Formula 2:

[0076] F1 = fv(fk) (2)

[0077] Among them, fk is a key recognition function, and fv is a value recognition function.

[0078] In some embodiments, identifying the private fields according to the field names in the original data includes:

[0079] Matching all the field names in the original data with a predetermined sensitive word library;

[0080] Determining the field names with successful matches as private fields;

[0081] Determining the field names with unsuccessful matches as non-private fields.

[0082] The processing flow of the fk function in Formula 2 is as follows:

[0083] The fk function is started to identify the k values in D, and the purpose is to identify whether the k values contain private fields. The realization of this process depends on a word library of sensitive fields. The identification process is to collide all the k values in D with this sensitive word library and give the result of whether a hit occurs. The k values with hits are all determined as private fields, otherwise they are non-private fields. It should be noted that this word library is maintainable and can include, for example, "name, ID number, mobile phone number, bank account number", etc. Users can flexibly configure it according to different scenarios, and can take out the fields in the word library or add new fields.

[0084] In some embodiments, identifying the private data in the original data further includes:

[0085] Matching all the field values in the original data with a predetermined sensitive data type determination library;

[0086] Determining the original data with successfully matched field values as private data.

[0087] The processing flow of the fv function in Formula 2 is as follows:

[0088] When the fv function is started, it is considered that the field values ​​and field names in D(k, v) may not be aligned, and there may be misalignment. For example, the corresponding number under "name" is a mobile phone number, and the beginning of the number is "130, 150, 155", etc., or the corresponding number is an ID card number, starting from the 7th digit, using 6 digits to represent a person's date of birth. If there is a mismatch, when the name is not protected as private information in a certain scenario, the corresponding mobile phone number or ID card number may be removed from the scope of private information and not protected, resulting in the "failure" of the privacy removal method.

[0089] Therefore, the fv function of the present invention is used to identify field values, mainly to determine the value. Unlike field name recognition, this function does not collide with the sensitive word library, but starts from the characteristics of the mobile phone number encoding method, the ID card number encoding method, etc., and presets the data type determination library. The data type determination library is also maintainable, and users can configure it according to the needs of the scenario. It is a pluggable data type determination library set.

[0090] In some embodiments, Figure 4 As shown, by combining the judgment of the fk function with the fv function, the F1 function processing process and output results can be expressed by formula 3 as follows:

[0091] Dy=F1(fv(fk(D(k,v))) (3)

[0092] In some embodiments, the deprivacy method of the triple compound function further includes:

[0093] Determining a data attribute of the field value according to a field value of the original data corresponding to the privacy data;

[0094] According to the data attributes, the private data is divided into data that needs to be encrypted and data that does not need to be encrypted.

[0095] The privacy data Dy is processed by the F2 function, and is divided from a whole data set into two different parts, namely, the data Du that does not need to be encrypted and the data Dm that needs to be encrypted. The F2 function is a data security processing function, which is composed of two functions, fc and fq, and their relationship is determined by formula 4:

[0096] F2=fq(fc) (4)

[0097] Where fc is the data attribute identification function and fq is the encryption function. The process shown in Formula 4 is as follows:

[0098] The fc function is started to identify the values in Dy (it is the value that is identified, not the key). The purpose of the identification is to distinguish the data therein into qualitative data and quantitative data. The main method is to determine whether the v value is numerical data or character data. If it is character data, it is converted into numerical data, and the conversion method and metric are configurable. For example, converting "excellent, good, medium, poor" into "1, 2, 3, 4". This process often requires the user to set according to their own needs. Whether it is set in ascending order or descending order, the setting logic should be recorded, and once determined, the logic should not be changed randomly during the continuous analysis process to prevent the confusion of data logic.

[0099] The fq function is started. This function is an encryption function, and the selectable method can be retrieved from the encryption algorithm package, and it is also a configurable plug-and-play method. For example, methods such as symmetric encryption, asymmetric encryption, and password substitution are used to achieve the encryption of values. The processing process and output result of the F2 function can be expressed by formula 5 as follows:

[0100] Dm = F2(fq(fc(Dy(v))) (5)

[0101] In some embodiments, the determining the operation logic that needs to be encrypted according to the data that needs to be encrypted and the data that does not need to be encrypted includes:

[0102] For the data that needs to be encrypted and the data that does not need to be encrypted, according to the predetermined operation logic judgment rules, determine the operation logic that needs to perform the encryption operation.

[0103] In the composition of privacy protection, what may cause privacy leakage is not only the value of the privacy data that needs to be encrypted itself. Some data, when viewed alone, is not data that needs to be encrypted, but privacy may be determined after being processed by the operation logic. Therefore, both Du and Dm need to be processed as "calculation material" data. When processing the "calculation material" data, various mathematical operation rules will be used. Some of these operation rules are often also privacy information that needs to be protected and also need to be de-privatized. Therefore, the F3 function is introduced in the present invention. The F3 function is a de-privacy process for the data operation logic.

[0104] Such as Figure 5 As shown, the calculation material data Du + Dm can be divided into different operation parts, the Cu part of the operation logic that does not need to be encrypted, and the Cm part of the operation logic that needs to be encrypted, according to the predetermined operation logic judgment rules or through the user's subjective judgment. This process can be expressed by formula 6 as follows:

[0105] Cm = user's subjective judgment (Du + Dm) (6)

[0106] Similar to the F2 function, the F3 function represents an algorithm package. The privacy-removing algorithm encryption method can be retrieved from the algorithm encryption package, and it is also in a configurable plug-and-play manner, such as fully homomorphic encryption, multiplicative homomorphism, additive homomorphism, etc. The processing process and output result of the F3 function can be expressed by Formula 7 as follows:

[0107] Lm = F3(Cm) (7)

[0108] Optionally, before encrypting the data to be encrypted, it further includes:

[0109] Setting up an encryption algorithm library;

[0110] Retrieving the encryption algorithm in a configurable manner to encrypt the data to be encrypted.

[0111] Optionally, encrypt the data to be encrypted using at least one of the following encryption algorithms: symmetric encryption, asymmetric encryption.

[0112] Optionally, encrypt the operation logic using at least one of the following encryption algorithms: fully homomorphic encryption, multiplicative homomorphism, additive homomorphism. As described above, when executing the F2 function, the fq function is an encryption function, and the selectable method can be retrieved from the encryption algorithm package, and it is also in a configurable plug-and-play manner, such as using methods like symmetric encryption, asymmetric encryption, password substitution, etc. to achieve the encryption of numerical values. Similar to the F2 function, the F3 function represents an algorithm package. The privacy-removing algorithm encryption method can be retrieved from the algorithm encryption package, and it is also in a configurable plug-and-play manner, such as fully homomorphic encryption, multiplicative homomorphism, additive homomorphism, etc. An encryption algorithm library can be established and configured in a plug-and-play manner. During the processing, customizable selection of encryption algorithms or algorithm combinations can be realized to improve the flexibility of selecting encryption algorithms.

[0113] In a second aspect, an embodiment of the present invention provides a computer device, as Figure 7 shown, which includes:

[0114] One or more processors 501;

[0115] A memory 502, on which one or more programs are stored. When the one or more programs are executed by the one or more processors, the one or more processors implement the privacy-removing method of the triple composite function as described in any item of the first aspect above;

[0116] One or more I / O interfaces 503, connected between the processor and the memory, configured to implement the information interaction between the processor and the memory.

[0117] Among them, the processor 501 is a device with data processing capabilities, including but not limited to a central processing unit (CPU), etc.; the memory 502 is a device with data storage capabilities, including but not limited to a random access memory (RAM, more specifically such as SDRAM, DDR, etc.), a read-only memory (ROM), an electrically erasable programmable read-only memory (EEPROM), and a flash memory (FLASH); the I / O interface (read / write interface) 503 is connected between the processor 501 and the memory 502 and can realize the information interaction between the processor 501 and the memory 502, including but not limited to a data bus (Bus), etc.

[0118] In some embodiments, the processor 501, the memory 502, and the I / O interface 503 are interconnected through a bus 504 and are further connected to other components of the computing device.

[0119] In a third aspect, an embodiment of the present invention provides a computer-readable storage medium, such as Figure 8 shown, a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, a privacy removal method for a triple composite function according to any one of the above first aspects is implemented.

[0120] In a fourth aspect, the present invention provides a privacy removal device for a triple composite function, such as Figure 6 shown, including:

[0121] A privacy data identification module 601, configured to identify privacy data in the original data;

[0122] A privacy data security processing module 602, configured to identify data that needs to be encrypted in the privacy data and encrypt the data that needs to be encrypted;

[0123] A privacy logic security processing module 603, configured to determine an operation logic that needs to be encrypted according to the data that needs to be encrypted and the data that does not need to be encrypted, and encrypt the operation logic that needs to be encrypted to obtain privacy-removed data; wherein, the operation logic is a rule for operating on the data that needs to be encrypted and the data that does not need to be encrypted.

[0124] In some embodiments, the privacy data identification module 601 includes:

[0125] An original data management unit, configured to decompose the original data into a field name and a field value;

[0126] A privacy field identification unit, configured to identify a privacy field according to the field name in the original data; and determine the original data including the privacy field as privacy data.

[0127] In some embodiments, the privacy field identification unit includes:

[0128] A sensitive word library matching subunit, configured to match all field names in the original data with a predetermined sensitive word library; determine the field names with successful matches as the privacy fields; and determine the field names with unsuccessful matches as non-privacy fields.

[0129] In some embodiments, the privacy data recognition module 601 further includes:

[0130] A sensitive data type matching unit, configured to match all field values in the original data with a predetermined sensitive data type determination library; and determine the original data with successfully matched field values as privacy data.

[0131] In some embodiments, the device further includes:

[0132] A data attribute determination module, configured to determine the data attribute of the field value according to the field value of the original data corresponding to the privacy data;

[0133] A data encryption determination module, configured to classify the privacy data into data that needs to be encrypted and data that does not need to be encrypted according to the data attribute.

[0134] Optionally, the device further includes:

[0135] A data encryption module, configured to set an encryption algorithm library, and retrieve an encryption algorithm in a configurable manner to encrypt the data that needs to be encrypted.

[0136] Optionally, the device encrypts the data that needs to be encrypted by using at least one of the following encryption algorithms: symmetric encryption, asymmetric encryption.

[0137] Optionally, the device encrypts the operation logic by using at least one of the following encryption algorithms: fully homomorphic encryption, multiplicative homomorphism, additive homomorphism.

[0138] The privacy removal method proposed by the present invention effectively identifies and performs privacy removal processing on privacy information from three levels of privacy data recognition, privacy data protection, and privacy logic protection, based on "whether it is privacy information" and "whether it needs to be protected", achieving "targeted". It can not only solve the problem that the existing technology has a relatively general recognition of what privacy information is and cannot accurately judge, but also, through a three-layer composite architecture that identifies and protects privacy information in different scenarios, decides whether to perform privacy removal processing based on "whether it is necessary", reducing the processing volume and solving the problem that the related technology occupies too many resources during the encryption process.

[0139] Those of ordinary skill in the art will understand that all or some of the steps in the methods disclosed above, and the functional modules / units in systems and devices, can be implemented as software, firmware, hardware, or a suitable combination thereof.

[0140] In a hardware implementation, the division of functional modules / units mentioned above does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be executed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or transitory medium). As is well known to those of ordinary skill in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information, such as computer-readable instructions, data structures, program modules, or other data. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those of ordinary skill in the art that a communication medium typically includes computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transmission mechanism, and may include any information delivery medium.

[0141] The preferred embodiments of the present invention have been described above with reference to the accompanying drawings, and thus do not limit the scope of the rights of the present invention. Any modifications, equivalent replacements, and improvements made by those skilled in the art without departing from the scope and essence of the present invention shall fall within the scope of the rights of the present invention.

Claims

1. A method for de-privatizing a triple composite function, comprising: Identifying private data in the original data; Identifying the data that needs to be encrypted in the private data, and encrypting the data that needs to be encrypted; Determining the operation logic that needs to be encrypted according to the data that needs to be encrypted and the data that does not need to be encrypted, wherein the operation logic is a rule for operating on the data that needs to be encrypted and the data that does not need to be encrypted; Encrypting the operation logic that needs to be encrypted to obtain de-privatized data; The identifying the data that needs to be encrypted in the private data includes: Determining the data attribute of the field value according to the field value of the original data corresponding to the private data; Dividing the private data into data that needs to be encrypted and data that does not need to be encrypted according to the data attribute; The identifying private data in the original data includes: Decomposing the original data into a field name and a field value; Identifying private fields according to the field names in the original data; Determining the original data including the private fields as private data.

2. The de-privacy method of the triple composite function according to claim 1, wherein, The identifying private fields according to the field names in the original data includes: Matching all the field names in the original data with a predetermined sensitive word library; Determining the field names that match successfully as the private fields; Determining the field names that do not match successfully as non-private fields.

3. The de-privacy method of the triple composite function according to claim 1, wherein, The identifying private data in the original data further includes: Matching all the field values in the original data with a predetermined sensitive data type determination library; Determining the original data with successfully matched field values as private data.

4. The method for de-privatizing a triple composite function according to any one of claims 1 to 3, wherein, Before encrypting the data that needs to be encrypted, it further includes: Setting an encryption algorithm library; Adopting a configurable method to retrieve an encryption algorithm to encrypt the data that needs to be encrypted.

5. The method for de-privatizing a triple composite function according to any one of claims 1 to 3, wherein, Encrypting the data that needs to be encrypted by using at least one of the following encryption algorithms: symmetric encryption, asymmetric encryption.

6. The method for de-privatizing a triple composite function according to any one of claims 1 to 3, wherein, Encrypting the operation logic by using at least one of the following encryption algorithms: fully homomorphic encryption, multiplicative homomorphism, additive homomorphism.

7. A computer device, comprising: One or more processors; A memory, on which one or more programs are stored, and when the one or more programs are executed by the one or more processors, the one or more processors implement the method for de-privatizing a triple composite function according to any one of claims 1 to 6; One or more I / O interfaces, connected between the processor and the memory, configured to implement information interaction between the processor and the memory.

8. A computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the method for de-privatizing a triple composite function according to any one of claims 1 to 6 is implemented.

Images