A method, device and related equipment for securely requesting information on ticketing data

Abstract

The embodiment of the present application provides a method, apparatus, and related equipment for secure intersection of ticket data information, including: determining summary information of the ticket sample data of the data sender, determining the corresponding identification public key based on the summary information, sending the identification public key to the data selection party participating in the secure intersection, receiving a first ciphertext matrix generated by the data selection party, decrypting the first ciphertext matrix to generate a first pseudo-plaintext matrix corresponding to the ciphertext matrix, performing an XOR operation on the pseudo-plaintext matrix based on the summary information to generate a second ciphertext matrix, and sending the second ciphertext matrix to the data selection party, so that the data selection party performs secure intersection of ticket data information based on the second ciphertext matrix. This method is based on ticket identification and national secret algorithm, realizes large-scale casual intersection of ticket data, does not require casual transmission of samples one by one under the support of trusted third-party certificates, reduces the amount of data communication during the secure intersection process, has fast response, flexible configuration, and good applicability.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a method, device and related equipment for securely requesting information on ticketing data. Background Art

[0002] With the advancement of information security technology, data security requirements are becoming increasingly stringent across all industries. In today's society, data sharing, a key component of daily life and production across all industries, has seen significant growth, leading to a growing demand for data sharing. However, as the scope of data sharing expands, so too does the demand for the security, legality, and compliance of the shared data. To enhance data security during the transmission and use of ticketing data, secure data exchange is often required based on legality and compliance. Currently, secure data exchange within the industry requires the support of certificates issued by a trusted third party. However, facing the ever-increasing volume of ticketing data exchange, this process, using certificates issued by a trusted third party, consumes significant time and communication traffic, requiring significant system resources. This significantly impacts the efficiency of secure data exchange and leads to poor user satisfaction. Summary of the Invention

[0003] In view of this, embodiments of the present application provide a data processing method, apparatus, and related equipment to at least partially solve the above-mentioned problems.

[0004] In a first aspect, embodiments of the present application provide a method for securely intersecting ticketing data information, which is applied to a data sender participating in securely intersecting ticketing data information, and is characterized by comprising:

[0005] Determine summary information of the ticketing sample data that the data sender participates in the secure exchange;

[0006] Determine the identification public key of the data sender according to the summary information;

[0007] Sending the identification public key to the data selection parties participating in the secure intersection;

[0008] Receiving a first ciphertext matrix generated by the data selector according to the identification public key;

[0009] Decrypting the first ciphertext matrix to generate a first pseudo-plaintext matrix corresponding to the ciphertext matrix;

[0010] Performing an XOR process on the pseudo plaintext matrix according to the summary information to generate a second ciphertext matrix corresponding to the pseudo plaintext matrix;

[0011] The second ciphertext matrix is ​​sent to the data selection party, so that the data selection party performs a secure intersection of the ticket data information according to the second ciphertext matrix.

[0012] Optionally, in an embodiment of the present application, determining the identification public key of the data sender according to the summary information includes:

[0013] According to the ticket ID corresponding to the summary information, the domestic SM3 encryption algorithm is used to determine the identification public key of the data sender participating in the secure exchange.

[0014] Optionally, in an embodiment of the present application, performing an XOR process on the pseudo plaintext matrix according to the summary information to generate a second ciphertext matrix corresponding to the pseudo plaintext matrix includes:

[0015] Performing an XOR process on the summary information of the ticket sample data and the first pseudo plaintext matrix;

[0016] According to the result of the XOR processing, a second ciphertext matrix corresponding to the sample data amount of the data sender and the data selector is generated through the domestic SM9 encryption algorithm.

[0017] Optionally, in an embodiment of the present application, determining summary information of the ticket sample data in which the data sender participates in the secure transaction includes:

[0018] Determining the characteristic items and total length of the ticket sample data;

[0019] Using the domestic SM3 encryption algorithm, a hash calculation is performed on the sample data with a length equal to the total length to generate summary data with a corresponding length of 256 bits to determine the summary information of the ticketing sample data.

[0020] In a second aspect, corresponding to the method for securely intersecting ticket data information provided in the first aspect of the present application, embodiments of the present application also provide another method for securely intersecting ticket data information, which is applied to a data selection party participating in the secure intersecting ticket data information, including:

[0021] Determine summary information of the ticket sample data that the data selector participates in the secure submission;

[0022] generating a first ciphertext matrix corresponding to the sample data of the data selector according to the identification public key sent by the data sender performing the secure intersection;

[0023] Sending the first ciphertext matrix to the data sender:

[0024] Receiving a second ciphertext matrix generated by the data sender according to the first ciphertext matrix:

[0025] Decrypting the second ciphertext matrix to generate a second pseudo-plaintext matrix;

[0026] An intersection data set for securely intersecting data information between the data selector and the data sender is determined according to the second pseudo plaintext matrix.

[0027] Optionally, in an embodiment of the present application, generating a first ciphertext matrix corresponding to the sample data of the data selector according to the identification public key sent by the data sender performing the secure intersection includes:

[0028] Generate a random number corresponding to the number of sample data for secure intersection with the data sender;

[0029] According to the random number, the sample data of the data selection party for secure intersection, and the identification public key, a first ciphertext matrix corresponding to the sample data of the selection party is generated through the domestic SM9 encryption algorithm.

[0030] Optionally, in an embodiment of the present application, determining, based on the second pseudo-plaintext matrix, an intersection data set for information security intersection between the data selector and the data sender includes:

[0031] performing an XOR process on the second pseudo-plaintext matrix;

[0032] An intersection data set for securely intersecting data information between the data selector and the sender is determined according to a result of the XOR processing.

[0033] In a third aspect, based on the method for securely intersecting ticketing data information provided in the first aspect of the present application, an embodiment of the present application further provides an apparatus for securely intersecting ticketing data information, which is applied to a data sender participating in securely intersecting ticketing data information, and is characterized by comprising:

[0034] A first acquisition module is used to determine summary information of the ticketing sample data that the data sender participates in the secure exchange;

[0035] a determination module, configured to determine an identification public key of the data sender according to the summary information;

[0036] A first sending module, configured to send the identification public key to a data selection party participating in the secure intersection;

[0037] A first receiving module is configured to receive a first ciphertext matrix generated by the data selection party according to the identification public key;

[0038] a first decryption module, configured to decrypt the first ciphertext matrix to generate a first pseudo plaintext matrix corresponding to the ciphertext matrix;

[0039] a first encryption module, configured to perform an XOR operation on the pseudo plaintext matrix according to the summary information to generate a second ciphertext matrix corresponding to the pseudo plaintext matrix;

[0040] The transmission module is used to send the second ciphertext matrix to the data selection party, so that the data selection party performs a secure intersection of the ticket data information according to the second ciphertext matrix.

[0041] In a fourth aspect, correspondingly, based on the method for securely intersecting ticketing data information provided in the second aspect of the present application, embodiments of the present application also provide another apparatus for securely intersecting ticketing data information, which is applied to a data selection party participating in the secure intersecting ticketing data information, comprising:

[0042] A second acquisition module is used to determine summary information of the ticketing sample data that the data selector participates in the secure exchange;

[0043] A second encryption module is configured to generate a first ciphertext matrix corresponding to the sample data of the data selector according to the identification public key sent by the data sender performing the secure intersection;

[0044] A second sending module is configured to send the first ciphertext matrix to the data sender:

[0045] A second receiving module is configured to receive a second ciphertext matrix generated by the data sender according to the first ciphertext matrix:

[0046] A second decryption module, configured to decrypt the second ciphertext matrix to generate a second pseudo plaintext matrix;

[0047] An intersection module is used to determine, based on the second pseudo plaintext matrix, an intersection data set for the data selector and the data sender to perform secure intersection of data information.

[0048] In a fifth aspect, an embodiment of the present application further provides a storage medium on which a computer program is stored, which, when executed by a processor, implements the method for securely intersecting ticketing data information as described in any one of the first or second aspects of the present application.

[0049] An embodiment of the present application provides a method, apparatus, and related equipment for securely intersecting ticket data information, including: determining summary information of ticket sample data that the data sender participates in secure intersection, determining an identification public key of the data sender based on the summary information, sending the identification public key to a data selection party participating in the secure intersection, receiving a first ciphertext matrix generated by the data selection party based on the identification public key, decrypting the first ciphertext matrix to generate a first pseudo-plaintext matrix corresponding to the ciphertext matrix, performing XOR processing on the pseudo-plaintext matrix based on the summary information to generate a second ciphertext matrix corresponding to the pseudo-plaintext matrix, and sending the second ciphertext matrix to the data selection party, so that the data selection party performs secure intersection of ticket data information based on the second ciphertext matrix. The secure intersection method provided in the embodiment of the present application realizes the oblivious intersection of the corresponding ticket data based on the ticket identification and the national secret algorithm, solves the efficiency problem of 1-out-n oblivious transmission of samples one by one without a trusted third-party certificate mechanism, reduces the communication volume of data transmission in the process of large-scale data security intersection of ticket data, has fast response speed, flexible configurability, and good applicability, thereby improving the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments recorded in the embodiments of the present application. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0051] Figure 1 A flowchart of a method for securely intersecting ticketing data information provided in an embodiment of the present application;

[0052] Figure 2 A schematic diagram of another method for securely intersecting ticketing data provided in an embodiment of the present application;

[0053] Figure 3 A schematic diagram of the structure of a device for securely intersecting ticketing data information provided in an embodiment of the present application;

[0054] Figure 4 A schematic structural diagram of an apparatus for another method for securely intersecting ticketing data information provided in an embodiment of the present application. DETAILED DESCRIPTION

[0055] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the embodiments of the present application, all other embodiments obtained by ordinary technicians in this field should fall within the scope of protection of the embodiments of the present application.

[0056] It should be understood that the various steps described in the method embodiments of the present application can be performed in different orders and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present application is not limited in this respect.

[0057] Example 1

[0058] The embodiment of the present application provides a method for securely requesting ticket data information. Figure 1 As shown, Figure 1 This is a workflow diagram of a method for securely intersecting ticketing data information provided in an embodiment of the present application. The method for securely intersecting ticketing data information includes:

[0059] S101, determining summary information of ticketing sample data that a data sender participates in a secure transaction;

[0060] S102, determining the identification public key of the data sender according to the summary information;

[0061] S103, sending the identification public key to the data selection party participating in the secure intersection;

[0062] S104, receiving a first ciphertext matrix generated by the data selector according to the identification public key;

[0063] S105. Decrypt the first ciphertext matrix to generate a first pseudo-plaintext matrix corresponding to the ciphertext matrix;

[0064] S106. Perform an XOR process on the pseudo plaintext matrix according to the summary information to generate a second ciphertext matrix corresponding to the pseudo plaintext matrix;

[0065] S107: Send the second ciphertext matrix to each data selector, so that the data selector performs secure intersection of the ticketing data information according to the second ciphertext matrix.

[0066] Optionally, in an implementation of the embodiment of the present application, determining the identification public key of the data sender according to the summary information includes: using the domestic SM3 encryption algorithm according to the ticket ID corresponding to the summary information to determine the identification public key of the data sender participating in the secure intersection. Specifically, in a specific application scenario of the embodiment of the present application, the domestic SM3 encryption algorithm can be used to directly calculate the ID corresponding to the summary information, and the ID identifier corresponding to each ticket sample data is used as the identification public key ID for the secure intersection of the ticket sample data. Pkey , thus allowing the secure intercourse method of the present embodiment to perform normal secure intercourse based directly on local sample data, without the need for a trusted third-party to generate corresponding certificates. The ticket ID, such as the invoice number, can of course also be other unique identification data corresponding to the invoice information, and this embodiment of the present application does not impose any restrictions on this.

[0067] Optionally, in an implementation method of an embodiment of the present application, the pseudo-plaintext matrix is ​​XORed according to the summary information to generate a second ciphertext matrix corresponding to the pseudo-plaintext matrix, including: performing XOR processing with the first pseudo-plaintext matrix based on the summary information of the ticket sample data; and generating a second ciphertext matrix corresponding to the sample data volume of the data sender and the data selector through the domestic SM9 encryption algorithm according to the result of the XOR processing. The SM9 encryption algorithm is an identity-based cryptographic algorithm (abbreviated as "IBC"), which consists of three parts: a digital signature algorithm, an identity encryption algorithm, and a key negotiation protocol. Compared with the traditional cryptographic system, its biggest advantage is that it does not require a certificate, is easy to use, easy to manage, and has a low total cost of ownership. By using the domestic SM9 encryption algorithm in the embodiment of the present application, the security of the data transmission process is effectively guaranteed.

[0068] Specifically, in an implementation scenario of an embodiment of the present application, the summary information of the ticket sample data is XORed with the first pseudo-plaintext matrix; based on the result of the XOR processing, a second ciphertext matrix corresponding to the sample data amount of the data sender and the data selector is generated by the domestic SM9 encryption algorithm, including: the data sender locally generates the same number of n1 summary information corresponding to the ticket sample data, and determines the corresponding n1 identification public keys, receives the first ciphertext matrix generated by the data selector based on the identification public key, the summary information, and the n2 ticket sample data for secure intersection of the data information, decrypts the first ciphertext matrix to determine the first pseudo-plaintext matrix, and the first pseudo-plaintext matrix contains a data matrix of an n1*n2 array; then the first pseudo-plaintext matrix and the summary information of the corresponding data selector are XORed to mask the securely intersected public key pair, and then the mask structure is encrypted using the domestic SM9 encryption algorithm to generate a second ciphertext matrix corresponding to the sample data amount of the data sender and the data selector. Using the domestic SM9 encryption algorithm, the summary information and identification public key corresponding to the ticket sample data of the data sender and the data selection method are masked, further improving the security of the data transmission process.

[0069] Optionally, in one implementation of the embodiment of the present application, the summary information of the ticket sample data that the data sender participates in the secure intersection is determined, including: determining the characteristic items and total length of the ticket sample data; using the domestic SM3 encryption algorithm to perform hash calculation on the sample data with a length of the total length to generate summary data with a corresponding length of 256 bits to determine the summary information of the ticket sample data. In the embodiment of the present application, the use of the domestic SM3 encryption algorithm can save encryption costs while ensuring the security of the encrypted data. The hash calculation is used to generate summary information with a length of 256 bits to ensure the consistency of the information structure such as length and size, which is convenient for subsequent data processing. At the same time, based on the hash calculation and the domestic SM3 encryption algorithm, the secure intersection of long-bit data is realized, which reduces the data communication volume and facilitates the joint intersection of configurable and multiple characteristic items to better improve the security of the data after the secure intersection, thereby improving the response efficiency and performance of the secure intersection.

[0070] The embodiment of the present application provides a method, apparatus, and related equipment for secure intersection of ticket data information, including: determining summary information of ticket sample data of a data sender participating in secure intersection, determining an identification public key of the data sender based on the summary information, sending the identification public key to a data selection party participating in the secure intersection, receiving a first ciphertext matrix generated by the data selection party based on the identification public key, decrypting the first ciphertext matrix to generate a first pseudo-plaintext matrix corresponding to the ciphertext matrix, performing XOR processing on the pseudo-plaintext matrix based on the summary information to generate a second ciphertext matrix corresponding to the pseudo-plaintext matrix, and sending the second ciphertext matrix to a data selection party, so that the data selection party performs secure intersection of ticket data information based on the second ciphertext matrix. The secure intersection method provided in the embodiment of the present application realizes the oblivious intersection of the corresponding ticket data based on the ticket identification and the national secret algorithm, solves the efficiency problem of 1-out-n oblivious transmission of samples one by one without a trusted third-party certificate mechanism, reduces the communication volume of data transmission in the process of large-scale data secure intersection of ticket data, has fast response speed, flexible configuration, and good applicability.

[0071] Example 2

[0072] Based on the method for securely intersecting ticket data information provided in the first aspect of the present application, an embodiment of the present application further provides another method for securely intersecting ticket data information, which is applied to a data selection party participating in the secure intersecting ticket data information, comprising:

[0073] S201. Determine summary information of the ticketing sample data that the data selector participates in the secure submission;

[0074] S202: Generate a first ciphertext matrix of the sample data corresponding to the data selector according to the identification public key sent by the data sender performing the secure intersection;

[0075] S203: Send the first ciphertext matrix to the data sender:

[0076] S204: Receive the second ciphertext matrix generated by the data sender based on the first ciphertext matrix:

[0077] S205. Decrypt the second ciphertext matrix to generate a second pseudo-plaintext matrix;

[0078] S206: Determine, based on the second pseudo plaintext matrix, an intersection data set for the data selector and the data sender to perform secure intersection of data information.

[0079] Optionally, in one implementation of the embodiment of the present application, based on the identification public key sent by the data sender for secure intersection, a first ciphertext matrix of the sample data of the corresponding data selector is generated, including: generating a random number for the number of sample data for secure intersection by the corresponding data sender; based on the random number, the sample data for secure intersection by the data selector, and the identification public key, the first ciphertext matrix of the sample data of the corresponding selector is generated through the domestic SM9 encryption algorithm. Specifically, as the data selector C with a ticket sample data volume of n2, the identification public key ID of the data sender with a ticket sample data volume of n1 is obtained. Spkey-i , generate n1 random numbers rj, j∈[1,n1], and encrypt them through the SM9 algorithm to generate the first ciphertext matrix k=E(IDSpkey-i,(hc-j⊕rj)) of the ticket sample data corresponding to the data selection party, where h c-j This is the summary information of the ticket sample data of the data selector.

[0080] Optionally, in one implementation of the embodiment of the present application, determining the intersection data set for information security intersection between the data selector and the data sender based on the second pseudo-plaintext matrix includes: performing an XOR operation on the second pseudo-plaintext matrix, and determining the intersection data set for data information security intersection between the data selector and the sender based on the result of the XOR operation. Specifically, the data selector performs an XOR operation on the second pseudo-plaintext matrix obtained after decryption and the corresponding n1 random numbers rj. If the result of the XOR operation is zero, and the summary information h obtained by the data sender and the data selector at this time is respectively C-j With h S-j If they are equal, then the safe intersection process has been completed. C-j With h S-j Determine the intersection data set h after safe intersection.

[0081] Optionally, in one implementation of the embodiment of the present application, determining the summary information of the ticket sample data that the data sender participates in the secure intersection includes: determining the characteristic items and total length of the ticket sample data of the data selector; using the domestic SM3 encryption algorithm to perform hash calculation on the sample data with a length of the total length to generate summary data with a corresponding length of 256 bits to determine the summary information of the ticket sample data. In the embodiment of the present application, the use of the domestic SM3 encryption algorithm can save encryption costs while ensuring the security of the encrypted data. The hash calculation is used to generate summary information with a length of 256 bits to ensure the consistency of the information structure such as length and size, which is convenient for subsequent data processing. At the same time, based on the hash calculation and the domestic SM3 encryption algorithm, the secure intersection of long-bit data is realized, reducing the data communication volume. The corresponding summary information is determined based on the characteristic items of the determined ticket sample data, realizing a flexible configuration and joint intersection of multiple characteristic items, so as to better improve the security of the data after the secure intersection, thereby improving the response efficiency and performance of the secure intersection.

[0082] The present application provides another method for secure intersection of ticket data information, comprising: determining summary information of ticket sample data that a data selector participates in secure intersection, generating a first ciphertext matrix of sample data corresponding to the data selector based on an identification public key sent by a data sender performing secure intersection, sending the first ciphertext matrix to the data sender, receiving a second ciphertext matrix generated by the data sender based on the first ciphertext matrix, decrypting the second ciphertext matrix to generate a second pseudo-plaintext matrix, and determining an intersection data set for secure intersection of data information between the data selector and the data sender based on the second pseudo-plaintext matrix. The secure intersection method provided in the embodiment of the present application, based on ticket identification and national secret algorithm, realizes inadvertent intersection of corresponding ticket data, solves the efficiency problem of 1-out-n inadvertent transmission of samples one by one without a trusted third-party certificate mechanism, reduces the amount of communication required for data transmission during large-scale secure intersection of ticket data, has fast response speed, flexible configuration, and good applicability.

[0083] Example 3:

[0084] Corresponding to the method for securely intersecting ticket data information provided in the first aspect of the present application, the embodiment of the present application further provides a device 30 for securely intersecting ticket data information, such as Figure 3 As shown, Figure 3 This is a schematic diagram of the structure of a device for securely intersecting ticketing data information provided in an embodiment of the present application. The device 30 for securely intersecting ticketing data information includes:

[0085] The first acquisition module 301 is used to determine summary information of the ticketing sample data that the data sender participates in the secure exchange;

[0086] Determination module 302, used to determine the identification public key of the data sender according to the summary information;

[0087] The first sending module 303 is used to send the identification public key to the data selection party participating in the secure intersection;

[0088] A first receiving module 304 is configured to receive a first ciphertext matrix generated by a data selector according to an identification public key;

[0089] A first decryption module 305 is configured to decrypt the first ciphertext matrix to generate a first pseudo plaintext matrix corresponding to the ciphertext matrix;

[0090] The first encryption module 306 is configured to perform an XOR operation on the pseudo plaintext matrix according to the summary information to generate a second ciphertext matrix corresponding to the pseudo plaintext matrix;

[0091] The transmission module 307 is configured to send the second ciphertext matrix to the data selection party, so that the data selection party performs a secure intersection of the ticket data information according to the second ciphertext matrix.

[0092] Optionally, in an implementation of an embodiment of the present application, the determination module 302 is further used to determine the identification public key of the data sender participating in the secure transaction based on the ticket ID corresponding to the summary information using the domestic SM3 encryption algorithm.

[0093] Optionally, in one implementation of an embodiment of the present application, the first encryption module 306 is also used to perform XOR processing with the first pseudo-plaintext matrix based on the summary information of the ticket sample data; based on the result of the XOR processing, a second ciphertext matrix corresponding to the sample data amount of the data sender and the data selector is generated through the domestic SM9 encryption algorithm.

[0094] Optionally, in one implementation of an embodiment of the present application, the first acquisition module 301 is also used to determine the characteristic items and total length of the ticket sample data; using the domestic SM3 encryption algorithm, a hash calculation is performed on the sample data with a length equal to the total length to generate summary data with a corresponding length of 256 bits to determine the summary information of the ticket sample data.

[0095] An embodiment of the present application provides a device for securely intersecting ticket data information, by setting a first acquisition module to determine summary information of ticket sample data that a data sender participates in secure intersection, determining an identification public key of the data sender based on the summary information, setting a first sending module to send the identification public key to a data selection party participating in the secure intersection, setting a first receiving module for receiving a first ciphertext matrix generated by the data selection party based on the identification public key, setting a first decryption module to decrypt the first ciphertext matrix to generate a first pseudo-plaintext matrix corresponding to the ciphertext matrix, setting a first encryption module to perform XOR processing on the pseudo-plaintext matrix based on the summary information to generate a second ciphertext matrix corresponding to the pseudo-plaintext matrix, and setting a transmission module to send the second ciphertext matrix to each data selection party, so that the data selection party performs secure intersection of ticket data information based on the second ciphertext matrix. The secure intersection method provided in the embodiment of the present application realizes the oblivious intersection of the corresponding ticket data based on the ticket identification and the national secret algorithm, solves the efficiency problem of 1-out-n oblivious transmission of samples one by one without a trusted third-party certificate mechanism, reduces the communication volume of data transmission in the process of large-scale data security intersection of ticket data, has fast response speed, flexible configuration, and good applicability.

[0096] Example 4:

[0097] Based on another method for securely intersecting ticket data information provided in the second embodiment of the present application, the embodiment of the present application also provides another device 40 for securely intersecting ticket data information, which is applied to a data selection party participating in the secure intersecting ticket data information, such as Figure 4 As shown, Figure 4 This is a schematic diagram of the structure of another device for securely intersecting ticketing data information provided in an embodiment of the present application. The device 40 for securely intersecting ticketing data information includes:

[0098] The second acquisition module 401 is used to determine summary information of the ticket sample data that the data selector participates in the secure exchange;

[0099] The second encryption module 402 is used to generate a first ciphertext matrix of the sample data corresponding to the data selector according to the identification public key sent by the data sender performing the secure intersection;

[0100] The second sending module 403 is used to send the first ciphertext matrix to the data sender:

[0101] The second receiving module 404 is configured to receive a second ciphertext matrix generated by the data sender according to the first ciphertext matrix:

[0102] A second decryption module 405 is used to decrypt the second ciphertext matrix to generate a second pseudo plaintext matrix;

[0103] The intersection module 406 is configured to determine, based on the second pseudo plaintext matrix, an intersection data set for the data selector and the data sender to perform secure intersection of data information.

[0104] Optionally, in one implementation of an embodiment of the present application, the second encryption module 402 is also used to generate a random number corresponding to the number of sample data for secure intersection by the data sender; based on the random number, the sample data for secure intersection by the data selector, and the identification public key, the first ciphertext matrix of the sample data of the corresponding selector is generated through the domestic SM9 encryption algorithm.

[0105] Optionally, in one implementation of the embodiment of the present application, the intersection module 406 is further configured to perform an XOR process on the second pseudo-plaintext matrix; and determine an intersection data set for secure intersection of data information between the data selector and the sender based on the result of the XOR process.

[0106] The present application provides another method for securely intersecting ticket data information, comprising: providing a second acquisition module for determining summary information of ticket sample data for a data selector to participate in secure intersection; providing a second encryption module for generating a first ciphertext matrix of the sample data corresponding to the data selector based on an identification public key sent by a data sender performing secure intersection; providing a second sending module for transmitting the first ciphertext matrix to the data sender; providing a second receiving module for receiving a second ciphertext matrix generated by the data sender based on the first ciphertext matrix; providing a second decryption module for decrypting the second ciphertext matrix to generate a second pseudo-plaintext matrix; and providing an intersection module for determining an intersection data set for securely intersecting data information between the data selector and the data sender based on the second pseudo-plaintext matrix. The apparatus for securely intersecting ticket data information provided in the embodiment of the present application, based on ticket identification and a national secret algorithm, implements oblivious intersection of corresponding ticket data, solves the efficiency problem of oblivious 1-out-n transmission of samples one by one without a trusted third-party certificate mechanism, reduces the data transmission communication volume during secure intersection of large-scale ticket data information, has a fast response speed, is flexible and configurable, and has good applicability.

[0107] Example 5

[0108] An embodiment of the present application further provides a storage medium on which a computer program is stored. When the program is executed by a processor, the method for securely intersecting ticketing data information as described in any of the above-mentioned embodiments 1 or 2 of the present application is implemented.

[0109] Thus far, specific embodiments of the present subject matter have been described. Other embodiments are within the scope of the appended claims. In some cases, the actions recited in the claims can be performed in a different order and still achieve the desired results. Furthermore, the processes depicted in the accompanying drawings do not necessarily require the specific order shown or sequential order to achieve the desired results. In certain embodiments, multitasking and parallel processing may be advantageous.

[0110] In the 1990s, technological improvements could be clearly distinguished as either hardware improvements (for example, improvements to circuit structures like diodes, transistors, and switches) or software improvements (improvements to process flows). However, with the advancement of technology, many process flow improvements today can now be considered direct improvements to hardware circuit structures. Designers almost always create the corresponding hardware circuit structure by programming the improved process flow into the hardware circuit. Therefore, it cannot be said that a process flow improvement cannot be implemented using hardware modules. For example, a programmable logic device (PLD), such as a field programmable gate array (FPGA), is an integrated circuit whose logical function is determined by user programming. Designers can "integrate" a digital system on a PLD through their own programming, without having to hire a chip manufacturer to design and manufacture a dedicated integrated circuit chip. Moreover, nowadays, instead of manually fabricating integrated circuit chips, this programming is mostly done using "logic compiler" software. This is similar to the software compiler used when developing programs. Before compilation, the original code must also be written in a specific programming language, called a hardware description language (HDL). There is not just one HDL, but many, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art will also understand that by simply programming the method flow in one of these hardware description languages ​​and then programming it into an integrated circuit, a hardware circuit that implements the logic method flow can be easily obtained.

[0111] The controller can be implemented in any suitable manner. For example, the controller can take the form of a microprocessor or processor and a computer-readable medium storing computer-readable program code (e.g., software or firmware) executable by the (micro)processor, logic gates, switches, application-specific integrated circuits (ASICs), programmable logic controllers, and embedded microcontrollers. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320. The memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art will also know that in addition to implementing the controller in a purely computer-readable program code format, the controller can be implemented in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers by logically programming the method steps. Therefore, such a controller can be considered a hardware component, and the devices included therein for implementing various functions can also be considered as structures within the hardware component. Or even, the devices for implementing various functions can be considered as both software modules that implement the method and structures within the hardware component.

[0112] The systems, devices, modules, or units described in the above embodiments may be implemented by computer chips or entities, or by products having certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smartphone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0113] For the convenience of description, the above devices are described as being divided into various units according to their functions. Of course, when implementing this application, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0114] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0115] It should also be noted that the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, commodity, or apparatus that includes a series of elements includes not only those elements but also other elements not explicitly listed, or includes elements inherent to such process, method, commodity, or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not exclude the presence of other identical elements in the process, method, commodity, or apparatus that includes the element.

[0116] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0117] The present application may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, and the like that perform specific tasks or implement specific abstract data types. The present application may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected via a communications network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0118] The various embodiments in this specification are described in a progressive manner. Similar parts between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, the system embodiments are generally similar to the method embodiments, so the description is relatively simple. For relevant parts, refer to the description of the method embodiments.

[0119] The above are merely embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various modifications and variations. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application should all be included within the scope of the claims of the present application.

Claims

1. A method for securely intersecting ticketing data information, applied to a data sender participating in securely intersecting ticketing data information, characterized in that: include: Determine summary information of the ticketing sample data that the data sender participates in the secure exchange; Determine the identification public key of the data sender according to the summary information; Sending the identification public key to the data selection parties participating in the secure intersection; Receive the first ciphertext matrix generated by the data selector according to the identification public key, wherein the first ciphertext matrix generated by the data selector according to the identification public key includes: the data selector C with the ticket sample data volume n2 obtains the identification public key ID of the data sender with the ticket sample data volume n1 Spkey-i , generate n1 random numbers rj, j∈[1,n1], and encrypt them through the SM9 algorithm to generate the first ciphertext matrix k=E(IDSpkey-i,(hc-j⊕rj)) of the ticket sample data of the corresponding data selector, where h c-j Summary information of the ticket sample data of the data selector; Decrypting the first ciphertext matrix to generate a first pseudo-plaintext matrix corresponding to the ciphertext matrix; Performing an XOR process on the pseudo plaintext matrix according to the summary information to generate a second ciphertext matrix corresponding to the pseudo plaintext matrix; Sending the second ciphertext matrix to the data selector, so that the data selector performs secure intersection of ticket data information according to the second ciphertext matrix; Among them, the XOR processing of the pseudo plaintext matrix according to the summary information to generate a second ciphertext matrix corresponding to the pseudo plaintext matrix includes: performing XOR processing on the summary information of the ticket sample data and the first pseudo plaintext matrix; according to the result of the XOR processing, generating a second ciphertext matrix corresponding to the sample data amount of the data sender and the data selector through the domestic SM9 encryption algorithm. This process is specifically as follows: the data sender locally generates n1 summary information of the same number of corresponding ticket sample data, and determines the corresponding n1 identification public keys, and the receiving data selector receives the second ciphertext matrix according to the summary information of the ticket sample data. The corresponding n1 identification public keys, summary information, and the first ciphertext matrix generated by the n2 ticket sample data for secure data information intersection of the data selector are decrypted to determine the first pseudo-plaintext matrix, which contains a data matrix of an n1*n2 array; then the first pseudo-plaintext matrix and the summary information of the corresponding data selector are XORed to mask the public key pairs for secure intersection, and then the mask structure is encrypted using the domestic SM9 encryption algorithm to generate a second ciphertext matrix of the sample data volume corresponding to the data sender and the data selector.

2. The method for securely intersecting ticketing data according to claim 1, characterized in that: The determining the identification public key of the data sender according to the summary information includes: According to the ticket ID corresponding to the summary information, the domestic SM3 encryption algorithm is used to determine the identification public key of the data sender participating in the secure exchange.

3. The method for securely intersecting ticketing data according to claim 1, characterized in that: The summary information of the ticket sample data for determining that the data sender participates in the secure transaction includes: Determining the characteristic items and total length of the ticket sample data; Using the domestic SM3 encryption algorithm, a hash calculation is performed on the sample data with a length equal to the total length to generate summary data with a corresponding length of 256 bits to determine the summary information of the ticketing sample data.

4. A method for securely intersecting ticketing data information, applied to a data selection party participating in securely intersecting ticketing data information, characterized in that: include: Determine summary information of the ticket sample data that the data selector participates in the secure submission; According to the identification public key sent by the data sender performing the secure intersection, the first ciphertext matrix corresponding to the sample data of the data selector is generated; this process is specifically as follows: the data selector C with the ticket sample data volume n2 obtains the identification public key ID of the data sender with the ticket sample data volume n1 Spkey-i , generate n1 random numbers rj, j∈[1,n1], and encrypt them through the SM9 algorithm to generate the first ciphertext matrix k=E(IDSpkey-i,(hc-j⊕rj)) of the ticket sample data of the corresponding data selector, where h c-j Summary information of the ticket sample data of the data selector; Sending the first ciphertext matrix to the data sender: Receiving a second ciphertext matrix generated by the data sender according to the first ciphertext matrix: Decrypting the second ciphertext matrix to generate a second pseudo-plaintext matrix; determining, based on the second pseudo-plaintext matrix, an intersection data set for securely intersecting data information between the data selector and the data sender; The second ciphertext matrix is ​​generated as follows: the data sender locally generates n1 summary information of the same number as the corresponding ticket sample data, and determines the corresponding n1 identification public keys; the data selector receives the first ciphertext matrix generated by the data selector based on the corresponding n1 identification public keys, summary information, and n2 ticket sample data obtained by securely intersecting data information; the first ciphertext matrix is ​​decrypted to determine a first pseudo-plaintext matrix, where the first pseudo-plaintext matrix contains a data matrix of an n1*n2 array; an exclusive-OR calculation is then performed on the first pseudo-plaintext matrix and the summary information of the corresponding data selector to mask the securely intersected public key pair; the mask structure is then encrypted using the domestic SM9 encryption algorithm to generate a second ciphertext matrix corresponding to the sample data volume of the data sender and the data selector; The method of determining the intersection data set for information security intersection between the data selector and the data sender based on the second pseudo plaintext matrix includes: the data selector performs an XOR operation on the second pseudo plaintext matrix obtained after decryption and the corresponding n1 random numbers rj. If the result of the XOR operation is zero, and the summary information h obtained by the data sender and the data selector is C-j With h S-j If they are equal, then the safe intersection process has been completed. C-j With h S-j Determine the intersection data set h after safe intersection.

5. The method for securely intersecting ticketing data according to claim 4, characterized in that: The step of generating a first ciphertext matrix corresponding to the sample data of the data selector according to the identification public key sent by the data sender performing the secure intersection comprises: Generate a random number corresponding to the number of sample data for secure intersection with the data sender; According to the random number, the sample data of the data selection party for secure intersection, and the identification public key, a first ciphertext matrix corresponding to the sample data of the selection party is generated through the domestic SM9 encryption algorithm.

6. A device for securely interchanging ticketing data information, applied to a data sender participating in securely interchanging ticketing data information, characterized in that: include: A first acquisition module is used to determine summary information of the ticketing sample data that the data sender participates in the secure exchange; a determination module, configured to determine an identification public key of the data sender according to the summary information; A first sending module, configured to send the identification public key to a data selection party participating in the secure intersection; The first receiving module is configured to receive a first ciphertext matrix generated by the data selector according to the identification public key, wherein the first ciphertext matrix generated by the data selector according to the identification public key includes: the data selector C with the ticket sample data volume n2 obtains the identification public key ID of the data sender with the ticket sample data volume n1 Spkey-i , generate n1 random numbers rj, j∈[1,n1], and encrypt them through the SM9 algorithm to generate the first ciphertext matrix k=E(IDSpkey-i,(hc-j⊕rj)) of the ticket sample data of the corresponding data selector, where h c-j Summary information of the ticket sample data of the data selector; a first decryption module, configured to decrypt the first ciphertext matrix to generate a first pseudo plaintext matrix corresponding to the ciphertext matrix; a first encryption module, configured to perform an XOR operation on the pseudo plaintext matrix according to the summary information to generate a second ciphertext matrix corresponding to the pseudo plaintext matrix; a transmission module, configured to send the second ciphertext matrix to the data selection party, so that the data selection party performs a secure intersection of ticket data information according to the second ciphertext matrix; The first encryption module is also used to: perform XOR processing on the summary information of the ticket sample data and the first pseudo plaintext matrix; based on the result of the XOR processing, generate a second ciphertext matrix corresponding to the sample data amount of the data sender and the data selector through the domestic SM9 encryption algorithm. This process is specifically as follows: the data sender locally generates the same number of n1 summary information corresponding to the ticket sample data, and determines the corresponding n1 identification public keys, receives the first ciphertext matrix generated by the data selector based on the corresponding n1 identification public keys, summary information, and n2 ticket sample data for secure data information intersection by the data selector, decrypts the first ciphertext matrix to determine the first pseudo plaintext matrix, which contains a data matrix of an n1*n2 array; then performs XOR calculation on the first pseudo plaintext matrix and the summary information of the corresponding data selector to mask the securely intersected public key pair, and then uses the domestic SM9 encryption algorithm to encrypt the mask structure to generate a second ciphertext matrix corresponding to the sample data amount of the data sender and the data selector.

7. A device for securely intersecting ticketing data information, applied to a data selection party participating in securely intersecting ticketing data information, characterized in that: include: A second acquisition module is used to determine summary information of the ticketing sample data that the data selector participates in the secure exchange; The second encryption module is used to generate a first ciphertext matrix corresponding to the sample data of the data selector according to the identification public key sent by the data sender performing the secure intersection; specifically: the data selector C with the ticket sample data volume n2 obtains the identification public key ID of the data sender with the ticket sample data volume n1 Spkey-i , generate n1 random numbers rj, j∈[1,n1], and encrypt them through the SM9 algorithm to generate the first ciphertext matrix k=E(IDSpkey-i,(hc-j⊕rj)) of the ticket sample data of the corresponding data selector, where h c-j Summary information of the ticket sample data of the data selector; A second sending module is configured to send the first ciphertext matrix to the data sender: The second receiving module is used to receive a second ciphertext matrix generated by the data sender based on the first ciphertext matrix. The anti-counterfeiting generation of the second ciphertext matrix is ​​as follows: the data sender locally generates n1 summary information of the same number as the ticket sample data, and determines the corresponding n1 identification public keys, receives the first ciphertext matrix generated by the data selector based on the corresponding n1 identification public keys, summary information, and n2 ticket sample data obtained by the data selector for secure data information intersection, decrypts the first ciphertext matrix to determine a first pseudo-plaintext matrix, where the first pseudo-plaintext matrix contains a data matrix of an n1*n2 array; then performs an exclusive-OR calculation on the first pseudo-plaintext matrix and the summary information of the corresponding data selector to mask the securely intersected public key pair, and then uses the domestic SM9 encryption algorithm to encrypt the mask structure to generate a second ciphertext matrix corresponding to the sample data volume of the data sender and the data selector: A second decryption module, configured to decrypt the second ciphertext matrix to generate a second pseudo plaintext matrix; The intersection module is used to determine the intersection data set for the data selection party and the data sending party to perform data information security intersection based on the second pseudo plaintext matrix. Specifically, the data selection party performs an XOR operation on the second pseudo plaintext matrix obtained after decryption and the corresponding n1 random numbers rj. If the result of the XOR operation is zero, and the summary information h obtained by the data sending party and the data selection party is C-j With h S-j If they are equal, then the safe intersection process has been completed. C-j With h S-j Determine the intersection data set h after safe intersection.

8. A storage medium having a computer program stored thereon, which, when executed by a processor, implements the method for securely intersecting ticketing data information as claimed in any one of claims 1 to 5.

Images