Method and device for transmitting and verifying script execution results while maintaining information privacy

Abstract

The present invention relates to a script execution result transmission and verification method for maintaining information privacy, comprising the following steps: using the private key of the owner of the private data to pre-encrypt the private data information in the original data to obtain desensitized data; using the private key of the owner of the private data to perform secondary authorization on the desensitized data and perform decryption processing to obtain the private data information in the original data. The present invention can effectively protect the privacy and security of patients while ensuring that the value of the data is not destroyed.

Description

Technical Field

[0001] The present invention relates to the technical field of privacy data processing, and in particular to a script execution result transmission and verification method and device for maintaining information privacy. Background Art

[0002] As the privacy protection of user data has received more and more attention, research in this direction is in line with people's increasingly strong need to protect the privacy of personal information to the greatest extent while enjoying the convenience of various businesses that rely on personal information. However, privacy data protection and the analytical value of privacy data are two contradictory contradictions. For traditional privacy data protection, the data involving privacy in the original data is often desensitized before output. After the data is desensitized, it is no longer possible to trace the validity and restore the original data, which greatly reduces the analytical value of the data. If the privacy data information is completely retained, although the data mining value can be maximized, there is a risk of privacy leakage. Summary of the invention

[0003] The technical problem to be solved by the present invention is to provide a script execution result transmission and verification method and device that maintains information privacy, which can effectively protect the privacy and security of patients while ensuring that the data value is not destroyed.

[0004] The technical solution adopted by the present invention to solve the technical problem is: to provide a script execution result transmission and verification method for maintaining information privacy, comprising the following steps:

[0005] Use the private key of the private data owner to pre-encrypt the private data information in the original data to obtain desensitized data;

[0006] The desensitized data is re-authorized and decrypted using the private key of the privacy data owner to obtain the privacy data information in the original data.

[0007] The step (1) is specifically:

[0008] Generate a random value using a random number generator;

[0009] Use the private key to digitally sign the random value for the first time to obtain first digital signature information;

[0010] Using the first digital signature information as a key to perform peer-to-peer encryption on the private data information to obtain ciphertext data;

[0011] Encode the ciphertext data and the random value together as desensitized data

[0012] The step (2) is specifically:

[0013] Decoding the desensitized data to obtain the ciphertext data and the random value;

[0014] Providing the random value to the private data owner;

[0015] Receiving second digital signature information returned by the private data owner, wherein the second digital signature information is obtained by the private data owner using the private key to digitally sign the random value for the second time;

[0016] The second digital signature information is used as a key to decrypt the ciphertext data to restore the private data information in the original data.

[0017] The technical solution adopted by the present invention to solve the technical problem is: to provide a script execution result transmission and verification device that maintains information privacy, including:

[0018] A data pre-encryption module is used to pre-encrypt the private data information in the original data using the private key of the private data owner to obtain desensitized data;

[0019] The data decryption module is used to use the private key of the privacy data owner to perform secondary authorization on the desensitized data and perform decryption processing to obtain the privacy data information in the original data.

[0020] The data pre-encryption module comprises:

[0021] A random number generating unit, used for generating a random value using a random number generator;

[0022] A first digital signature unit, used to use the private key to perform a first digital signature on the random value to obtain first digital signature information;

[0023] An encryption unit, configured to use the first digital signature information as a key to perform peer-to-peer encryption on the private data information to obtain ciphertext data;

[0024] The encoding unit is used to encode the ciphertext data and the random value together as desensitized data.

[0025] The data decryption module comprises:

[0026] A decoding unit, used to decode the desensitized data to obtain the ciphertext data and the random value;

[0027] A sending unit, configured to provide the random value to the private data owner;

[0028] A receiving unit, configured to receive second digital signature information returned by the private data owner, wherein the second digital signature information is obtained by the private data owner using the private key to digitally sign the random value for the second time;

[0029] The decryption unit is used to decrypt the ciphertext data using the second digital signature information as a key to restore the private data information in the original data.

[0030] Beneficial Effects

[0031] Due to the adoption of the above technical solution, the present invention has the following advantages and positive effects compared with the prior art: the present invention uses a multi-party trusted certificate to enable the key used in encrypting private information data to be uniquely associated with the trusted party, and it does not need to additionally save the association relationship between the generated key and the trusted party, thereby ensuring the security of private information data. The present invention uses the secondary signature of the trusted party of the multi-party trusted certificate on the random number provided by the private information recipient, so that the trusted party can confirm the authorization twice and provide the private information recipient with an available decryption key, thereby ensuring that the private data can be restored and protecting the data value from being destroyed. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 It is a flowchart of the first embodiment of the present invention. DETAILED DESCRIPTION

[0033] The present invention will be further described below in conjunction with specific embodiments. It should be understood that these embodiments are only used to illustrate the present invention and are not intended to limit the scope of the present invention. In addition, it should be understood that after reading the content taught by the present invention, those skilled in the art can make various changes or modifications to the present invention, and these equivalent forms fall within the scope limited by the appended claims of the application equally.

[0034] The first embodiment of the present invention relates to a script execution result transmission and verification method for maintaining information privacy, comprising the following steps:

[0035] Step 1, pre-encrypting the privacy data information in the original data, specifically including step 1a, using a random number generator to generate a random value; step 1b, using the private key of the privacy data owner to perform a first digital signature on the generated random value to obtain the first digital signature information; step 1c, using the first digital signature information as a key to perform peer-to-peer encryption on the privacy data information to obtain ciphertext data; step 1d, encoding the encrypted ciphertext data together with the random value as the desensitized data output.

[0036] Step 2, performing secondary authorization decryption processing on the output desensitized data, specifically including step 2a, decoding the desensitized data to obtain the ciphertext data and random value; step 2b, providing the random value obtained in step 2a to the owner of the private data. When the owner of the private data confirms the secondary authorization, the random value is digitally signed for a second time using the private key to obtain a second digital signature information, and the second digital signature information is returned to the recipient of the private data. Since the private key and random value used are the same, the second digital signature information is the same as the first digital signature information; step 2c, using the second digital signature information as a key to decrypt the encrypted ciphertext data to restore the private data information in the original data.

[0037] It can be seen that this embodiment uses the digital signature of the trusted party's digital certificate and the random number as the key, so that the key used in the encryption of private data information is only uniquely associated with the trusted party, ensuring the security of private data information. This embodiment completes the authorization of private information restoration through the trusted party's secondary signature, ensuring that the trusted party can perceive the event of private data restoration. In addition, the entire process of this embodiment does not need to rely on the intermediate storage system to save the key, avoiding the possibility of the intermediate storage system becoming a potential attack point.

[0038] The second embodiment of the present invention relates to a script execution result transmission and verification device that maintains information privacy, including: a data pre-encryption module, which is used to use the private key of the privacy data owner to pre-encrypt the privacy data information in the original data to obtain desensitized data; a data decryption module, which is used to use the private key of the privacy data owner to re-authorize the desensitized data and decrypt it to obtain the privacy data information in the original data.

[0039] The data pre-encryption module includes: a random number generation unit, used to generate a random value using a random number generator; a first digital signature unit, used to use the private key to digitally sign the random value for the first time to obtain first digital signature information; an encryption unit, used to use the first digital signature information as a key to perform peer-to-peer encryption on the private data information to obtain ciphertext data; and an encoding unit, used to encode the ciphertext data and the random value together as desensitized data.

[0040] The data decryption module includes: a decoding unit, used to decode the desensitized data to obtain the ciphertext data and a random value; a sending unit, used to provide the random value to the privacy data owner; a receiving unit, used to receive the second digital signature information returned by the privacy data owner, wherein the second digital signature information is obtained by the privacy data owner after digitally signing the random value for a second time using the private key; and a decryption unit, used to decrypt the ciphertext data using the second digital signature information as a key to restore the privacy data information in the original data.

[0041] It is not difficult to find that the present invention uses a multi-party trusted certificate to make the key used in encrypting private information data uniquely associated with the trusted party, and it does not need to additionally save the association relationship between the generated key and the trusted party, thereby ensuring the security of private information data. The present invention uses the trusted party of the multi-party trusted certificate to double-sign the random number provided by the private information recipient, so that the trusted party can double-confirm the authorization and provide the private information recipient with an available decryption key, thereby ensuring that the private data can be restored and protecting the data value from being destroyed.

Claims

1. A script execution result transmission and verification method for maintaining information privacy, characterized in that: The following steps are involved: (1) Use the private key of the privacy data owner to pre-encrypt the privacy data information in the original data to obtain desensitized data, specifically: Generate a random value using a random number generator; Use the private key to digitally sign the random value for the first time to obtain first digital signature information; Using the first digital signature information as a key to perform peer-to-peer encryption on the private data information to obtain ciphertext data; Encoding the ciphertext data and the random value together as desensitized data; (2) Use the private key of the owner of the private data to re-authorize and decrypt the desensitized data to obtain the private data information in the original data, specifically: Decoding the desensitized data to obtain the ciphertext data and the random value; Providing the random value to the private data owner; Receiving second digital signature information returned by the private data owner, wherein the second digital signature information is obtained by the private data owner using the private key to digitally sign the random value for a second time; The second digital signature information is used as a key to decrypt the ciphertext data to restore the private data information in the original data.

2. A script execution result transmission and verification device that maintains information privacy, characterized in that: include: A data pre-encryption module is used to pre-encrypt the private data information in the original data using the private key of the private data owner to obtain desensitized data; The data pre-encryption module comprises: A random number generating unit, used for generating a random value using a random number generator; A first digital signature unit, used to use the private key to perform a first digital signature on the random value to obtain first digital signature information; an encryption unit, configured to use the first digital signature information as a key to perform peer-to-peer encryption on the private data information, Get the ciphertext data; An encoding unit, used for encoding the ciphertext data and the random value together as desensitized data; A data decryption module is used to use the private key of the privacy data owner to perform secondary authorization on the desensitized data and perform decryption processing to obtain the privacy data information in the original data; the data decryption module includes: A decoding unit, used to decode the desensitized data to obtain the ciphertext data and the random value; A sending unit, configured to provide the random value to the private data owner; A receiving unit, configured to receive second digital signature information returned by the private data owner, wherein the second digital signature information is obtained by the private data owner using the private key to digitally sign the random value for the second time; The decryption unit is used to decrypt the ciphertext data using the second digital signature information as a key to restore the private data information in the original data.

Images