Customer risk control method and device based on homomorphic encryption algorithm

Abstract

The application discloses a customer risk control method and device based on a homomorphic encryption algorithm. The method comprises the following steps: obtaining first identity information and first asset information of a target user; sending the first identity information, the first asset information, second identity information and second asset information to an authoritative institution, and sending the first identity information and the second identity information to a second financial institution; receiving target identity information and target asset information returned by the authoritative institution, wherein the authoritative institution determines the target asset information corresponding to the target identity information by using a homomorphic encryption algorithm; and completing risk control on the target user based on the target identity information and the target asset information. The application solves the technical problem of information leakage risk in the process of implementing customer risk control by each financial institution in the prior art.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information security, in particular to a customer risk control method and device based on a homomorphic encryption algorithm. BACKGROUND

[0002] Risk control of a financial institution involves risk management of customers. In addition to evaluating customer asset information of the financial institution itself, the financial institution also hopes to obtain asset information of the customer in other financial institutions to improve the accuracy of risk evaluation. Statistical calculation of asset information, such as total financial assets and total loans, needs to be calculated in a plaintext state. Calculation in a plaintext state may lead to leakage of financial asset information.

[0003] Currently, no effective solution has been proposed for the above problems. SUMMARY

[0004] Embodiments of the present application provide a customer risk control method and device based on a homomorphic encryption algorithm to at least solve the technical problem of information leakage in the process of implementing customer risk control by each financial institution in the prior art.

[0005] According to an aspect of an embodiment of the present application, a customer risk control method based on a homomorphic encryption algorithm is provided, including: obtaining first identity information and first asset information of a target user; sending the first identity information, the first asset information, and a plurality of second identity information and a plurality of second asset information to an authoritative institution, and sending the first identity information and the plurality of second identity information to a second financial institution; receiving target identity information and target asset information returned by the authoritative institution, wherein the authoritative institution determines the target asset information corresponding to the target identity information by using a homomorphic encryption algorithm; and completing risk control for the target user based on the target identity information and the target asset information.

[0006] Optionally, obtaining the first identity information and the first asset information of the target user includes: receiving a service request sent by the target user, wherein the service request is used to initiate a service handling application in the first financial institution, and the service request carries the first identity information of the target user; and querying the first asset information of the target user based on the first identity information.

[0007] Optionally, before sending the first identity information, the first asset information, and the plurality of second identity information and the plurality of second asset information to the authority, and sending the first identity information and the plurality of second identity information to the second financial institution, the method further comprises: selecting a preset number of target customers from a database; obtaining a plurality of second identity information of the plurality of target customers; and generating a plurality of second asset information for the plurality of target customers, wherein the plurality of second asset information corresponds to the plurality of second identity information one by one.

[0008] Optionally, sending the first identity information, the first asset information, and the plurality of second identity information and the plurality of second asset information to the authority, and sending the first identity information and the plurality of second identity information to the second financial institution comprises: obtaining a first public-private key pair, wherein the first public-private key pair is a public-private key pair corresponding to the first financial institution, comprising a first public key and a first private key; encrypting the first asset information and the plurality of second asset information using the first public key to obtain a first initial ciphertext, wherein each asset information in the first initial ciphertext corresponds to an identity information; integrating the first identity information and the plurality of second identity information into a third identity information; and sending the first initial ciphertext and the third identity information to the authority, and sending the third identity information to the second financial institution.

[0009] Optionally, sending the first initial ciphertext and the third identity information to the authority comprises: obtaining a second public-private key pair generated by the authority, wherein the second public-private key pair is a public-private key pair corresponding to the authority, comprising a second public key and a second private key; encrypting the first initial ciphertext using the second public key to obtain a first target ciphertext, wherein each asset information in the first target ciphertext corresponds to an identity information; and sending the first target ciphertext and the third identity information to the authority.

[0010] According to another aspect of the embodiments of the present application, a risk control method based on a homomorphic encryption algorithm is also provided, comprising: receiving third identity information and a first public key sent by a first financial institution, wherein the third identity information comprises first identity information and a plurality of second identity information; querying third asset information corresponding to the third identity information; encrypting the third asset information using the first public key to obtain a second initial ciphertext; obtaining a second public key generated by an authority, and encrypting the second initial ciphertext to obtain a second target ciphertext; and sending the second target ciphertext and the third identity information to the authority to complete a risk control request initiated by the first financial institution.

[0011] According to another aspect of the embodiments of the present application, a method for customer risk control based on a homomorphic encryption algorithm is also provided, comprising: receiving third identity information and first target ciphertext sent by a first financial institution; receiving third identity information and second target ciphertext sent by a second financial institution; determining target identity information and target asset information based on the third identity information, the first target ciphertext and the second target ciphertext by using the homomorphic encryption algorithm; and returning the target identity information and the target asset information to the first financial institution to complete a risk control request initiated by the first financial institution.

[0012] According to another aspect of the embodiments of the present application, a device for customer risk control based on a homomorphic encryption algorithm is also provided, comprising: an obtaining module, configured to obtain first identity information and first asset information of a target user; a first sending module, configured to send the first identity information, the first asset information, and a plurality of second identity information and a plurality of second asset information to an authority, and send the first identity information and the plurality of second identity information to a second financial institution; a first receiving module, configured to receive target identity information and target asset information returned by the authority, wherein the authority determines the target asset information corresponding to the target identity information by using a homomorphic encryption algorithm; and a first processing module, configured to complete risk control for the target user based on the target identity information and the target asset information.

[0013] According to another aspect of the embodiments of the present application, a device for customer risk control based on a homomorphic encryption algorithm is also provided, comprising: a second receiving module, configured to receive third identity information and a first public key sent by a first financial institution, wherein the third identity information comprises first identity information and a plurality of second identity information; a querying module, configured to query third asset information corresponding to the third identity information; an encryption module, configured to encrypt the third asset information by using the first public key to obtain second initial ciphertext; a second obtaining module, configured to obtain a second public key generated by an authority, and encrypt the second initial ciphertext to obtain second target ciphertext; and a second sending module, configured to send the second target ciphertext and the third identity information to the authority.

[0014] According to another aspect of the embodiments of the present application, a device for customer risk control based on a homomorphic encryption algorithm is also provided, comprising: a third receiving module, configured to receive third identity information and first target ciphertext sent by a first financial institution; a fourth receiving module, configured to receive third identity information and second target ciphertext sent by a second financial institution; a third processing module, configured to determine target identity information and target asset information based on the third identity information, the first target ciphertext and the second target ciphertext by using a homomorphic encryption algorithm; and a third sending module, configured to return the target identity information and the target asset information to the first financial institution.

[0015] According to another aspect of the embodiments of the present application, a computer readable storage medium is also provided, which stores a plurality of instructions, and the instructions are suitable for being loaded and executed by a processor to implement any of the above-mentioned customer risk control methods based on homomorphic encryption algorithm.

[0016] According to another aspect of the embodiments of the present application, an electronic device is also provided, which comprises one or more processors and a memory, and the memory is used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors are caused to implement any of the above-mentioned customer risk control methods based on homomorphic encryption algorithm.

[0017] In the embodiments of the present application, by acquiring first identity information and first asset information of a target user, sending the first identity information, the first asset information, and a plurality of second identity information and a plurality of second asset information to an authoritative institution, and sending the first identity information and the plurality of second identity information to a second financial institution, receiving target identity information and target asset information returned by the authoritative institution, wherein the authoritative institution determines the target asset information corresponding to the target identity information by using a homomorphic encryption algorithm, and based on the target identity information and the target asset information, completing risk control for the target user, the purpose of initiating a customer risk control request to other financial institutions by a method of anonymous query is achieved, thereby realizing the technical effect that the first institution statistically decrypts the asset information in plaintext by a method of private decryption, and realizing customer risk control, and further solving the technical problem of information leakage risk in the process of realizing customer risk control by each financial institution in the prior art. BRIEF DESCRIPTION OF DRAWINGS

[0018] The accompanying drawings, which are included to provide a further understanding of the present application, constitute a part of the present application, and the illustrative embodiments of the present application and their description serve to explain the present application, and do not constitute improper limitations on the present application. In the drawings:

[0019] Figure 1 is a customer risk control method flowchart based on homomorphic encryption algorithm according to the embodiments of the present application;

[0020] Figure 2 is an optional overall customer risk control flowchart based on homomorphic encryption algorithm according to the embodiments of the present application;

[0021] Figure 3 is an optional customer risk control method flowchart based on homomorphic encryption algorithm according to the embodiments of the present application;

[0022] Figure 4is another optional homomorphic encryption algorithm-based customer risk control method flowchart according to the embodiment of the present application;

[0023] Figure 5 is a structural schematic diagram of a homomorphic encryption algorithm-based customer risk control device according to the embodiment of the present application;

[0024] Figure 6 is a structural schematic diagram of another homomorphic encryption algorithm-based customer risk control device according to the embodiment of the present application;

[0025] Figure 7 is a structural schematic diagram of another homomorphic encryption algorithm-based customer risk control device according to the embodiment of the present application;

[0026] Figure 8 is a structural schematic diagram of an optional electronic device according to the embodiment of the present application. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the scheme of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor should fall within the scope of protection of the present application.

[0028] It should be noted that the terms "first", "second", and the like in the specification and claims of the present application and the above-described drawings are used to distinguish similar objects, and do not necessarily have to describe a specific order or sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device that includes a series of steps or units does not have to be limited to only those steps or units clearly listed, but can include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0029] Term Explanation

[0030] Homomorphic encryption algorithm: a special class of encryption and decryption algorithm, this kind of algorithm supports doing some calculations on the encrypted ciphertext, and the calculation result is consistent with the result of doing calculation on the corresponding plaintext after decryption.

[0031] Hidden query: also known as anonymous query, refers to the query party hides the key words or customer ID information of the queried object, and the data service party provides the matching query result but cannot know which query object corresponds to the specific query object. Data does not go out and can be calculated, and the possibility of data caching, data leakage and data trafficking is eliminated.

[0032] Embodiment 1

[0033] According to the embodiment of the present application, an embodiment of a customer risk control method based on a homomorphic encryption algorithm is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from here.

[0034] Figure 1 The flowchart of the customer risk control method based on the homomorphic encryption algorithm according to the embodiment of the present application is shown in FIG. 1, which includes the following steps: Figure 1

[0035] Step S102, obtaining the first identity information and the first asset information of the target user;

[0036] Step S104, sending the first identity information, the first asset information, and the plurality of second identity information and the plurality of second asset information to the authority, and sending the first identity information and the plurality of second identity information to the second financial institution;

[0037] Step S106, receiving the target identity information and the target asset information returned by the authority, wherein the authority determines the target asset information corresponding to the target identity information by using the homomorphic encryption algorithm;

[0038] Step S108, completing the risk control for the target user based on the target identity information and the target asset information.

[0039] ​In this embodiment of the application, the entity executing the customer risk control method based on homomorphic encryption algorithm provided in steps S102 to S108 is a first financial institution. A user initiates a business application at the first financial institution. The first financial institution obtains the target user's first identity information and first asset information, and through a concealed query method, initiates a customer risk control request to other financial institutions, sending the first identity information, the first asset information, and multiple second identity information and multiple second asset information to an authoritative institution. Second financial institutions query their own customer asset information and encrypt it into ciphertext. All financial institutions send the ciphertext asset information to a third-party authoritative institution, which calculates the total asset amount using homomorphic encryption, obtaining the target identity information and target asset information. The first financial institution receives the target identity information and target asset information returned by the authoritative institution and completes risk control for the target user based on the target identity information and target asset information.

[0040] It should be noted that the aforementioned target users are users who initiate business applications to financial institutions; the aforementioned first identity information and the aforementioned first asset information are the identity and asset information of the aforementioned target users in the first financial institution; the aforementioned second identity information is the identity information of other users, and the aforementioned second asset information may be randomly generated virtual asset information.

[0041] As an optional implementation, a customer initiates a business application to financial institution A. Financial institution A, through a concealed query method, initiates customer risk control requests to other financial institutions. Other financial institutions query their own customer asset information and encrypt it into ciphertext. All financial institutions send the ciphertext asset information to a third-party authoritative institution, which calculates the total asset amount in ciphertext using homomorphic encryption and returns it to financial institution A. Financial institution A then uses private decryption to obtain the plaintext asset information statistics for customer risk control.

[0042] It should be noted that, in this embodiment of the application, the financial institutions may include M institutions, where M is greater than or equal to 2. Taking M equal to 3 and the total amount of statistical asset information as an example, such as... Figure 2 The schematic diagram of the overall process of customer risk control based on homomorphic encryption algorithm shown is composed of multi-party module 001 of third-party authoritative institution, multi-party module 002 of financial institution A, multi-party module 003 of financial institution B, and multi-party module 004 of financial institution C.

[0043] It should be noted that the third-party authority module 001 is composed of the certificate submodule 101 and the homomorphic encryption processing submodule 102. The financial institution A multi-party module 002 is composed of the certificate submodule 201 and the multi-party processing submodule 202. The financial institution B multi-party module 003 is composed of the certificate submodule 301 and the multi-party processing submodule 302. The financial institution C multi-party module 004 is composed of the certificate submodule 401 and the multi-party processing submodule 402.

[0044] According to the embodiment of the application, the first financial institution only knows the asset statistical information (such as the total assets), and does not know the asset amount details of other financial institutions (the second financial institutions), thereby protecting the commercial interests and customer privacy of other financial institutions and reducing the resistance of financial institutions to share asset information. The third-party authority only obtains the ciphertext encrypted by the financial institution, and does not obtain the plaintext details. The third-party authority is only responsible for calculating the ciphertext and does not know the asset amount details of each financial institution. The queried financial institution (the second financial institutions) does not know which user is queried by the querying financial institution (the first financial institution), thereby avoiding the leakage of customer information of the querying financial institution, increasing the motivation of financial institutions to share asset information, improving the effectiveness of risk control management, and effectively preventing financial risks.

[0045] In an optional embodiment, the first identity information and the first asset information of the target user are obtained, including: receiving a service request sent by a target user, wherein the service request is used to initiate a service application in a first financial institution, and the service request carries the first identity information of the target user; and querying the first asset information of the target user based on the first identity information.

[0046] In the embodiment of the application, after the target user initiates a service application to the first financial institution, the first financial institution receives a service request sent by the target user, and queries the asset amount of the target user in the institution according to the first identity information of the target user.

[0047] As an optional embodiment, the customer A initiates a service application to the financial institution A, such as credit card opening credit limit, loan application, etc., the financial institution A queries the asset amount of the customer A in the financial institution A, and obtains the first asset information of the target user.

[0048] In an optional embodiment, before the first identity information, the first asset information, and the plurality of second identity information and the plurality of second asset information are sent to the authority and the first identity information and the plurality of second identity information are sent to the second financial institution, the method further comprises: selecting a preset number of target customers from the database; obtaining the plurality of second identity information of the plurality of target customers; and generating the plurality of second asset information for the plurality of target customers, wherein the plurality of second asset information corresponds to the plurality of second identity information one by one.

[0049] As an optional embodiment, the multi-party processing submodule 202 of the financial institution A receives a customer risk control request, randomly selects N-1 customers, and randomly generates N-1 asset amounts.

[0050] In an optional embodiment, sending the first identity information, the first asset information, and the plurality of second identity information and the plurality of second asset information to the authority and sending the first identity information and the plurality of second identity information to the second financial institution comprises: obtaining a first public-private key pair, wherein the first public-private key pair is a public-private key pair corresponding to the first financial institution, comprising a first public key and a first private key; encrypting the first asset information and the plurality of second asset information using the first public key to obtain first initial ciphertext, wherein each asset information in the first initial ciphertext corresponds to an identity information; integrating the first identity information and the plurality of second identity information into third identity information; and sending the first initial ciphertext and the third identity information to the authority, and sending the third identity information to the second financial institution.

[0051] In an optional embodiment, sending the first initial ciphertext to the authority comprises: obtaining a second public-private key pair generated by the authority, wherein the second public-private key pair is a public-private key pair corresponding to the authority, comprising a second public key and a second private key; encrypting the first initial ciphertext using the second public key to obtain first target ciphertext, wherein each asset information in the first target ciphertext corresponds to an identity information; and sending the first target ciphertext and the third identity information to the authority.

[0052] In the embodiments of the present application, the financial institution A encrypts the asset amounts of the customer A and N-1 customers using the first public key, and sends the N pairs of customer IDs to the financial institution B and the financial institution C. Then, the second public key of the third-party authority is used to encrypt the asset amounts one by one, and N pairs of customer information (containing customer ID and asset amount ciphertext of the financial institution A) are sent to the third-party authority.

[0053] As an optional embodiment, the multi-party processing submodule 302 of the financial institution B receives the risk control request, respectively queries the asset amounts of the N customers in the financial institution B, first encrypts each piece of information using the public key of the financial institution A, then encrypts each piece of encrypted information using the public key of the third-party authority, and sends the N pairs of customer information (customer ID and asset amount ciphertext of the financial institution B) to the homomorphic encryption processing submodule 102 of the third-party authority module 001.

[0054] As an optional embodiment, the multi-party processing submodule 402 of the financial institution C receives the risk control request, respectively queries the asset amounts of the N customers in the financial institution C, first encrypts each piece of information using the public key of the financial institution A, then encrypts each piece of encrypted information using the public key of the third-party authority, and sends the N pairs of customer information (customer ID and asset amount ciphertext of the financial institution C) to the homomorphic encryption processing submodule 102 of the third-party authority module 001.

[0055] It should be noted that the financial institution A is the first financial institution, and the financial institution B and the financial institution C are the second financial institution.

[0056] As an optional embodiment, the financial institution A decrypts the ciphertext of the total asset amount of customer A from the ciphertext list of the total asset amounts of the N customers using its own private key, obtains the total asset amount of customer A, and uses it for risk control.

[0057] Figure 3 is a risk control method flowchart based on a homomorphic encryption algorithm according to an embodiment of the present application, as shown in Figure 3 The method comprises the following steps:

[0058] Step S202, receiving third identity information and a first public key sent by a first financial institution, wherein the third identity information comprises first identity information and a plurality of second identity information;

[0059] Step S204, querying third asset information corresponding to the third identity information;

[0060] Step S206, encrypting the third asset information using the first public key to obtain second initial ciphertext;

[0061] Step S208, obtaining a second public key generated by an authority, and encrypting the second initial ciphertext to obtain second target ciphertext;

[0062] Step S210, sending the second target ciphertext and the third identity information to the authority to complete a risk control request initiated by the first financial institution.

[0063] In the embodiment of the present application, the execution subject of the customer risk control method based on the homomorphic encryption algorithm provided in steps S202 to S210 in the embodiment of the present application is a second financial institution. The second financial institution can be a plurality of financial institutions other than the first financial institution, which is configured to receive the identity information sent by the first financial institution, query the corresponding asset information according to the identity information, and send the asset to an authoritative institution.

[0064] Figure 4 is a flowchart of the customer risk control method based on the homomorphic encryption algorithm according to the embodiment of the present application, as shown in the figure, the method comprises the following steps: Figure 4

[0065] Step S302, receiving third identity information and first target ciphertext sent by the first financial institution;

[0066] Step S304, receiving third identity information and second target ciphertext sent by the second financial institution;

[0067] Step S306, determining target identity information and target asset information based on the third identity information, the first target ciphertext and the second target ciphertext by using the homomorphic encryption algorithm;

[0068] Step S308, returning the target identity information and the target asset information to the first financial institution, and completing the risk control request initiated by the first financial institution.

[0069] In the embodiment of the present application, the execution subject of the customer risk control method based on the homomorphic encryption algorithm provided in steps S302 to S308 in the embodiment of the present application is an authoritative institution. The authoritative institution receives identity information and asset information sent by a plurality of financial institutions, and summarizes the asset information according to the identity information, and sends the summary result to the first financial institution.

[0070] As an optional embodiment, after the third-party authoritative institution module 001 receives the messages of the financial institutions A, B and C, it first decrypts the asset amount ciphertexts with the private key of the third-party authoritative institution module 001, obtains the ciphertexts of the asset amounts encrypted with the public key of the financial institution A, and then calculates the asset amounts of the same customer ID by using the homomorphic encryption calculation, obtains the ciphertext of the total asset amount of the same customer, calculates the ciphertext list of the total asset amounts of N customers, and returns to the financial institution A.

[0071] ​In an optional embodiment, returning the target identity information and the target asset information to the first financial institution comprises: generating a second public-private key pair, wherein the second public-private key pair is a public-private key pair corresponding to the authority, including a second public key and a second private key; encrypting the target identity information and the target asset information using the second public key to obtain second target ciphertext; and sending the second target ciphertext to the first financial institution.

[0072] It should be noted that each financial institution and the authority can generate a corresponding public-private key pair in advance.

[0073] As an optional embodiment, the certificate submodule 101 of the third-party authority generates a pair of public-private keys, and encapsulates the public key into a root certificate 01. The certificate submodule 201 of the financial institution A generates a pair of public-private keys at random, applies for a public key to the third-party authority, and the third-party authority makes a certificate A and gives the root certificate 01 to the financial institution A. The certificate submodule 301 of the financial institution B generates a pair of public-private keys at random, applies for a public key to the third-party authority, and the third-party authority makes a certificate B and gives the root certificate 01 to the financial institution B. The certificate submodule 401 of the financial institution C generates a pair of public-private keys at random, applies for a public key to the third-party authority, and the third-party authority makes a certificate C and gives the root certificate 01 to the financial institution C.

[0074] Through the above steps, the leakage of the customer information of the query financial institution is avoided, the motivation of the financial institutions to share asset information is increased, the effectiveness of the risk control management is improved, and the financial risks are effectively prevented.

[0075] Embodiment 2

[0076] Figure 5 is a structure schematic diagram of a customer risk control device based on a homomorphic encryption algorithm according to an embodiment of the present application, as Figure 5 The customer risk control device based on the homomorphic encryption algorithm comprises an acquisition module 50, a first sending module 52, a first receiving module 54, and a first processing module 56, wherein:

[0077] The acquisition module 50 is configured to acquire first identity information and first asset information of a target user.

[0078] The first sending module 52 is configured to send the first identity information, the first asset information, and a plurality of second identity information and a plurality of second asset information to an authority, and send the first identity information and the plurality of second identity information to a second financial institution.

[0079] The first receiving module 54 is configured to receive target identity information and target asset information returned by the authority, wherein the authority determines the target asset information corresponding to the target identity information by using the homomorphic encryption algorithm.

[0080] The first processing module 56 is configured to complete risk control for the target user based on the target identity information and the target asset information.

[0081] The device for risk control of a customer based on a homomorphic encryption algorithm provided by the embodiment of the present application comprises the following steps: obtaining first identity information and first asset information of a target user; sending the first identity information, the first asset information, second identity information and second asset information to an authority; receiving target identity information and target asset information returned by the authority; and completing risk control for the target user based on the target identity information and the target asset information. The device achieves the purpose of initiating a request for risk control of a customer to other financial institutions by using a method of anonymous query, thereby realizing the technical effect of enabling a first institution to safely and statistically obtain plaintext of asset information by using a method of private decryption and achieving risk control of a customer, and further solving the technical problem of information leakage risk in the process of implementing risk control of a customer by financial institutions in the prior art.

[0082] The device for risk control of a customer based on a homomorphic encryption algorithm comprises a processor and a memory, and the obtaining module 50, the first sending module 52, the first receiving module 54 and the first processing module 56 are all stored in the memory as program units, and the processor executes the program units stored in the memory to realize corresponding functions.

[0083] Figure 6 FIG. 1 is a structural schematic diagram of a device for risk control of a customer based on a homomorphic encryption algorithm according to an embodiment of the present application, as shown in the figure, the device for risk control of a customer based on a homomorphic encryption algorithm comprises a second receiving module 60, a query module 62, an encryption module 64, a second obtaining module 66 and a second sending module 68, wherein: Figure 6

[0084] The second receiving module 60 is configured to receive third identity information and a first public key sent by a first financial institution, wherein the third identity information comprises first identity information and second identity information.

[0085] The query module 62 is configured to query third asset information corresponding to the third identity information.

[0086] The encryption module 64 is configured to encrypt the third asset information by using the first public key to obtain second initial ciphertext.

[0087] ​The second obtaining module 66 is configured to obtain a second public key generated by the authority and encrypt the second initial ciphertext to obtain a second target ciphertext.

[0088] The second sending module 68 is configured to send the second target ciphertext and the third identity information to the authority to complete the risk control request initiated by the first financial institution.

[0089] The customer risk control device based on the homomorphic encryption algorithm includes a processor and a memory, and the second receiving module 60, the query module 62, the encryption module 64, the second obtaining module 66, and the second sending module 68 are all stored in the memory as program units, and the processor executes the program units stored in the memory to realize the corresponding functions.

[0090] Figure 7 FIG. 1 is a structural schematic diagram of a customer risk control device based on a homomorphic encryption algorithm according to an embodiment of the present application. Figure 7 The customer risk control device based on the homomorphic encryption algorithm includes a third receiving module 70, a fourth receiving module 72, a third processing module 74, and a third sending module 76.

[0091] The third receiving module 70 is configured to receive third identity information and a first target ciphertext sent by a first financial institution.

[0092] The fourth receiving module 72 is configured to receive third identity information and a second target ciphertext sent by a second financial institution.

[0093] The third processing module 74 is configured to determine target identity information and target asset information based on the third identity information, the first target ciphertext, and the second target ciphertext by using the homomorphic encryption algorithm.

[0094] The third sending module 76 is configured to return the target identity information and the target asset information to the first financial institution to complete the risk control request initiated by the first financial institution.

[0095] The customer risk control device based on the homomorphic encryption algorithm includes a processor and a memory, and the third receiving module 70, the fourth receiving module 72, the third processing module 74, and the third sending module 76 are all stored in the memory as program units, and the processor executes the program units stored in the memory to realize the corresponding functions.

[0096] The processor includes a kernel, and the kernel calls the corresponding program units from the memory. The kernel can be one or more, and the training and prediction speed of the convolutional neural network can be accelerated by adjusting the kernel parameters.

[0097] The memory may include non-permanent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0098] This application provides a computer-readable storage medium storing a program that, when executed by a processor, implements the aforementioned customer risk control method based on homomorphic encryption algorithm.

[0099] This application provides a processor for running a program, wherein the program executes the aforementioned customer risk control method based on homomorphic encryption algorithm.

[0100] like Figure 8 As shown in the illustration, this application provides an electronic device 10, which includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, it performs the following steps: acquiring first identity information and first asset information of a target user; sending the first identity information, the first asset information, and multiple second identity information and multiple second asset information to an authoritative institution and sending the first identity information and multiple second identity information to a second financial institution; receiving target identity information and target asset information returned by the authoritative institution, wherein the authoritative institution uses a homomorphic encryption algorithm to determine the target asset information corresponding to the target identity information; and completing risk control for the target user based on the target identity information and the target asset information.

[0101] Optionally, when the processor executes the program, it performs the following steps: receiving a business request sent by the target user, wherein the business request is used to initiate a business application at the first financial institution, and the business request carries the target user's first identity information; and querying the target user's first asset information based on the first identity information.

[0102] Optionally, when the processor executes the program, it performs the following steps: selecting a preset number of target customers from the database; obtaining multiple sets of the second identity information of the multiple target customers; generating multiple sets of the second asset information for the multiple target customers, wherein the multiple sets of the second asset information correspond one-to-one with the multiple sets of the second identity information.

[0103] Optionally, the processor implements the following steps when executing the program: obtaining a first public-private key pair, wherein the first public-private key pair is a public-private key pair corresponding to the first financial institution, and includes a first public key and a first private key; encrypting the first asset information and the plurality of second asset information using the first public key to obtain first initial ciphertext, wherein each asset information in the first initial ciphertext corresponds to an identity information; integrating the first identity information and the plurality of second identity information into third identity information; sending the first initial ciphertext and the third identity information to the authority, and sending the third identity information to the second financial institution.

[0104] Optionally, the processor implements the following steps when executing the program: obtaining a second public-private key pair generated by the authority, wherein the second public-private key pair is a public-private key pair corresponding to the authority, and includes a second public key and a second private key; encrypting the first initial ciphertext using the second public key to obtain first target ciphertext, wherein each asset information in the first target ciphertext corresponds to an identity information; sending the first target ciphertext and the third identity information to the authority.

[0105] Optionally, the processor implements the following steps when executing the program: receiving third identity information and a first public key sent by the first financial institution, wherein the third identity information includes a first identity information and a plurality of second identity information; querying third asset information corresponding to the third identity information; encrypting the third asset information using the first public key to obtain second initial ciphertext; obtaining a second public key generated by the authority, and encrypting the second initial ciphertext to obtain second target ciphertext; sending the second target ciphertext and the third identity information to the authority.

[0106] Optionally, the processor implements the following steps when executing the program: receiving third identity information and first target ciphertext sent by the first financial institution; receiving third identity information and second target ciphertext sent by the second financial institution; determining target identity information and target asset information based on the third identity information, the first target ciphertext and the second target ciphertext using a homomorphic encryption algorithm; returning the target identity information and the target asset information to the first financial institution.

[0107] The application also provides a computer program product adapted to execute a program for initializing the following method steps when executed on a data processing device: obtaining first identity information and first asset information of a target user; sending the first identity information, the first asset information, a plurality of second identity information and a plurality of second asset information to an authority and sending the first identity information and the plurality of second identity information to a second financial institution; receiving target identity information and target asset information returned by the authority, wherein the authority determines the target asset information corresponding to the target identity information by using a homomorphic encryption algorithm; and completing risk control on the target user based on the target identity information and the target asset information.

[0108] Optionally, the computer program product is adapted to execute a program for initializing the following method steps when executed on a data processing device: receiving a service request sent by a target user, wherein the service request is used to initiate a service application in a first financial institution, and the service request carries first identity information of the target user; and querying first asset information of the target user based on the first identity information.

[0109] Optionally, the computer program product is adapted to execute a program for initializing the following method steps when executed on a data processing device: selecting a preset number of target customers from a database; obtaining a plurality of second identity information of the target customers; and generating a plurality of second asset information for the target customers, wherein the plurality of second asset information and the plurality of second identity information correspond one by one.

[0110] Optionally, the computer program product is adapted to execute a program for initializing the following method steps when executed on a data processing device: obtaining a first public-private key pair, wherein the first public-private key pair is a public-private key pair corresponding to the first financial institution, including a first public key and a first private key; encrypting the first asset information and the plurality of second asset information by using the first public key to obtain a first initial ciphertext, wherein each asset information in the first initial ciphertext corresponds to an identity information; integrating the first identity information and the plurality of second identity information into third identity information; sending the first initial ciphertext and the third identity information to the authority, and sending the third identity information to the second financial institution.

[0111] Optionally, when executed on a data processing device, the program is adapted to perform the following method steps: obtaining a second public-private key pair generated by an authority, wherein the second public-private key pair is a public-private key pair corresponding to the authority, and includes a second public key and a second private key; encrypting the first initial ciphertext using the second public key to obtain a first target ciphertext, wherein each asset information in the first target ciphertext corresponds to an identity information; and sending the first target ciphertext and the third identity information to the authority.

[0112] Optionally, when executed on a data processing device, the program is adapted to perform the following method steps: receiving third identity information and a first public key sent by a first financial institution, wherein the third identity information includes a first identity information and a plurality of second identity information; querying third asset information corresponding to the third identity information; encrypting the third asset information using the first public key to obtain a second initial ciphertext; obtaining a second public key generated by an authority, and encrypting the second initial ciphertext to obtain a second target ciphertext; and sending the second target ciphertext and the third identity information to the authority.

[0113] Optionally, when executed on a data processing device, the program is adapted to perform the following method steps: receiving third identity information and a first target ciphertext sent by a first financial institution; receiving third identity information and a second target ciphertext sent by a second financial institution; determining target identity information and target asset information based on the third identity information, the first target ciphertext and the second target ciphertext using a homomorphic encryption algorithm; and returning the target identity information and the target asset information to the first financial institution.

[0114] Those skilled in the art will understand that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk memory, CD-ROM, optical memory, etc.) containing computer-usable program code.

[0115] The computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart block or blocks. Figure 1 one or more flow or blocks Figure 1 means for functionally implementing the steps listed in the flowchart block or blocks.

[0116] These computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture including instructions which implement the function specified in the flowchart block or blocks. Figure 1 one or more flow or blocks Figure 1 means for functionally implementing the steps listed in the flowchart block or blocks.

[0117] The computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart block or blocks. Figure 1 one or more flow or blocks Figure 1 means for functionally implementing the steps listed in the flowchart block or blocks.

[0118] In one typical configuration, the computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory.

[0119] The memory can include non-persistent memory and / or persistent memory, such as flash memory, read-only memory (ROM), and / or volatile or non-volatile random access memory (RAM), among others. The memory is an example of computer readable media.

[0120] Computer-readable media includes permanent and non-permanent, movable and non-movable media that can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information accessible to a computing device. According to the definition herein, computer-readable media does not include transitory media such as modulated data signals and carriers.

[0121] It should also be noted that the terms "comprising", "containing", or any other variant thereof are intended to cover non-exclusive inclusions, such that a process, method, article or apparatus that comprises a list of elements does not only include those elements, but can also include other elements not expressly listed or inherent to such process, method, article or apparatus. Without more limitations, the element defined by the phrase "comprising a" does not exclude the presence of additional identical elements in the process, method, article or apparatus that includes the element.

[0122] Those skilled in the art will appreciate that embodiments of the present application can be provided as a method, system or computer program product. Accordingly, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROMs, optical storage devices, etc.) containing computer usable program code.

[0123] The above merely provides embodiments of the present application and is not intended to limit the present application. Various modifications and changes can be made to the present application by those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present application shall be included in the scope of the claims of the present application.

Claims

1. A customer risk control method based on homomorphic encryption algorithm, characterized in that, include: Obtain the target user's primary identity information and primary asset information; Send the first identity information, the first asset information, and multiple second identity information and multiple second asset information to an authoritative institution and send the first identity information and multiple second identity information to a second financial institution; The system receives target identity information and target asset information returned by the authoritative institution, wherein the authoritative institution uses a homomorphic encryption algorithm to determine the target asset information corresponding to the target identity information. Based on the target identity information and the target asset information, risk control is completed for the target user; The step of sending the first identity information, the first asset information, and multiple second identity information and multiple second asset information to an authoritative institution and sending the first identity information and multiple second identity information to a second financial institution includes: obtaining a first public-private key pair, wherein the first public-private key pair is a public-private key pair corresponding to the first financial institution, including a first public key and a first private key; encrypting the first asset information and multiple second asset information using the first public key to obtain a first initial ciphertext, wherein each asset information in the first initial ciphertext corresponds to an identity information; integrating the first identity information and multiple second identity information into a third identity information; sending the first initial ciphertext and the third identity information to the authoritative institution and sending the third identity information to the second financial institution; The second financial institution is used to determine each asset information corresponding to each identity information in its own institution based on the third identity information, encrypt it to obtain a second target ciphertext, and send the second target ciphertext to the authoritative institution.

2. The method according to claim 1, characterized in that, Obtain the target user's primary identity information and primary asset information, including: Receive a business request sent by a target user, wherein the business request is used to initiate a business application at a first financial institution, and the business request carries the target user's first identity information; Based on the first identity information, query the first asset information of the target user.

3. The method according to claim 1, characterized in that, Before sending the first identity information, the first asset information, and multiple second identity information and multiple second asset information to the authoritative institution and to the second financial institution, the method further includes: Select a preset number of target customers from the database; Obtain multiple second identity information of multiple target customers; Multiple sets of second asset information are generated for multiple target customers, wherein each set of second asset information corresponds one-to-one with a set of second identity information.

4. The method according to claim 1, characterized in that, Sending the first initial ciphertext and the third identity information to the authoritative institution includes: Obtain a second public-private key pair generated by an authoritative institution, wherein the second public-private key pair is the public-private key pair corresponding to the authoritative institution, including a second public key and a second private key; The first initial ciphertext is encrypted using the second public key to obtain the first target ciphertext, wherein each asset information in the first target ciphertext corresponds to an identity information. The first target encrypted text and the third identity information are sent to the authoritative institution.

5. A customer risk control device based on homomorphic encryption algorithm, characterized in that, include: The acquisition module is used to acquire the target user's primary identity information and primary asset information; The first sending module is used to send the first identity information, the first asset information, and multiple second identity information and multiple second asset information to an authoritative institution and to send the first identity information and multiple second identity information to a second financial institution. The first receiving module is used to receive the target identity information and target asset information returned by the authoritative institution, wherein the authoritative institution uses a homomorphic encryption algorithm to determine the target asset information corresponding to the target identity information; The first processing module is used to perform risk control for the target user based on the target identity information and the target asset information; The first sending module is further configured to obtain a first public-private key pair, wherein the first public-private key pair is a public-private key pair corresponding to the first financial institution, including a first public key and a first private key; encrypt the first asset information and multiple second asset information using the first public key to obtain a first initial ciphertext, wherein each asset information in the first initial ciphertext corresponds to an identity information; integrate the first identity information and multiple second identity information into a third identity information; and send the first initial ciphertext and the third identity information to the authoritative institution, and send the third identity information to the second financial institution. The second financial institution is used to determine each asset information corresponding to each identity information in its own institution based on the third identity information, encrypt it to obtain a second target ciphertext, and send the second target ciphertext to the authoritative institution.

6. A computer-readable storage medium, characterized in that, The aforementioned computer-readable storage medium stores multiple instructions adapted for a processor to load and execute the customer risk control method based on homomorphic encryption algorithm as described in any one of claims 1 to 4.

7. An electronic device, characterized in that, It includes one or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors cause the one or more processors to implement the customer risk control method based on homomorphic encryption algorithm as described in any one of claims 1 to 4.

Images