Method, device and system for publishing and discovering privacy computing data resources

Abstract

The embodiments of this specification provide a method, device and system for publishing and discovering data resources for privacy computing, the method comprising: a data party sends a first registration request message to a resource publishing node, the first registration request message at least including a data resource identifier of the privacy data to be registered, data resource description information of the privacy data and a data party identifier of the data party; the resource publishing node saves a first mapping relationship formed by the data resource identifier, the data resource description information and the data party identifier, and uses it as a data resource record; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing. It can improve the efficiency of the initiator in obtaining information about the data resources provided by the data party.

Description

Technical Field

[0001] One or more embodiments of this specification relate to the computer field, and in particular, to methods, devices, and systems for publishing and discovering privacy computing data resources. Background Art

[0002] Secure multi-party computing is also called multi-party secure computing, which means that multiple parties jointly calculate the result of a function without disclosing the input data of each party of the function, and the result of the calculation is made public to one or more of the parties. Among them, the input data of each party is often private data. Secure multi-party computing using private data is often called privacy computing.

[0003] In the prior art, the initiator of privacy computing and the data party providing the data resources perform multi-party privacy computing using the data resources, which is inefficient.

[0004] Therefore, it is hoped that there will be an improved solution that can improve the efficiency of the initiator in obtaining information about the data resources provided by the data party. Summary of the invention

[0005] One or more embodiments of this specification describe a method, device, and system for publishing and discovering privacy computing data resources, which can improve the efficiency of an initiator in obtaining information about data resources provided by a data provider.

[0006] In a first aspect, a method for publishing privacy computing data resources is provided, the method comprising:

[0007] The data party sends a first registration request message to the resource publishing node, wherein the first registration request message includes at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of the data party;

[0008] The resource publishing node saves the first mapping relationship formed by the data resource identifier, the data resource description information and the data party identifier, and uses it as a data resource record; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing.

[0009] In a possible implementation manner, the first registration request message further includes information of a first management node, information of the data party is registered on the first management node, and the first mapping relationship further includes information of the first management node.

[0010] Furthermore, before the data direction sends the first registration request message to the resource publishing node, the method further includes:

[0011] The data party sends a second registration request message to the first management node, where the second registration request message includes at least a data party identifier of the data party, an internet protocol (IP) address and a public key of the data party;

[0012] The first management node stores a second mapping relationship formed by the data party identifier of the data party, the IP address of the data party, and the public key.

[0013] In a possible implementation manner, the information of the data party and the information of the initiator are registered on the same management node.

[0014] In a second aspect, a method for publishing privacy computing data resources is provided, the method comprising:

[0015] The resource publishing node receives first registration request messages from multiple data parties respectively, wherein the first registration request messages include at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of a corresponding data party;

[0016] The resource publishing node establishes multiple data resource records, and the data resource records correspond to a first mapping relationship, which is formed by the data resource identifier, the data resource description information and the data party identifier; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing.

[0017] In a third aspect, a method for discovering privacy computing data resources is provided, the method comprising:

[0018] The initiator of privacy computing sends a query request message to the resource publishing node;

[0019] The resource publishing node returns a data resource list to the initiator in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, wherein the first mapping relationship is formed by a data resource identifier of the private data, data resource description information of the private data, and a data party identifier of a corresponding data party;

[0020] The initiator selects a target first mapping relationship from the data resource list;

[0021] The initiator performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process.

[0022] In a possible implementation manner, the data resource list is a list formed by all data resource records possessed by the resource publishing node.

[0023] In a possible implementation manner, the query request message includes a query condition, and the data resource list is a list formed by filtering out some data resource records from all data resource records of the resource publishing node according to the query condition.

[0024] In a possible implementation, the initiator performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, including:

[0025] The initiator obtains the network protocol IP address and public key of the data party from the first management node corresponding to the corresponding data party according to the data party identifier in the target first mapping relationship; the first management node is registered with the information of the data party;

[0026] The initiator establishes a communication connection with the data party based on the IP address of the data party, verifies the digital signature of the data party using the public key based on the communication connection, and performs multi-party privacy computing with the corresponding data party.

[0027] Furthermore, the first mapping relationship also includes information of the first management node;

[0028] The acquiring, according to the data party identifier in the target first mapping relationship, the IP address and the public key of the data party from the first management node corresponding to the corresponding data party, comprises:

[0029] According to the data party identifier in the target first mapping relationship and the information of the first management node, the IP address and public key of the data party are obtained from the first management node corresponding to the corresponding data party.

[0030] Furthermore, the first management node also has information of the initiator registered therein; the initiator has the information of the first management node in advance;

[0031] The acquiring, according to the data party identifier in the target first mapping relationship, the IP address and the public key of the data party from the first management node corresponding to the corresponding data party, comprises:

[0032] According to the data party identifier in the target first mapping relationship and the information of the first management node pre-owned by the initiator, the IP address and public key of the data party are obtained from the first management node corresponding to the corresponding data party.

[0033] In a possible implementation, the multi-party privacy computing includes a data scoring task performed by using the data resources corresponding to the corresponding data resource identifiers and the scoring model of the initiator.

[0034] In a possible implementation, the multi-party privacy computing includes a data backtracking task performed using data resources corresponding to corresponding data resource identifiers.

[0035] In a fourth aspect, a method for discovering privacy computing data resources is provided, the method comprising:

[0036] The resource publishing node receives the query request message from the initiator of privacy computing;

[0037] The resource publishing node returns a data resource list to the initiator in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, wherein the first mapping relationship is formed by a data resource identifier of the privacy data, data resource description information of the privacy data, and a data party identifier of the corresponding data party; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are utilized in the multi-party privacy computing process.

[0038] In a fifth aspect, a method for publishing and discovering privacy computing data resources is provided, the method comprising:

[0039] The resource publishing node receives first registration request messages from multiple data parties respectively, wherein the first registration request messages include at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of a corresponding data party;

[0040] The resource publishing node establishes multiple data resource records, each of which corresponds to a first mapping relationship, wherein the first mapping relationship is formed by the data resource identifier, the data resource description information, and the data party identifier; the data resource record is used by the initiator of the privacy computing to query the data resources of the multi-party privacy computing;

[0041] The resource publishing node receives a query request message from an initiator of privacy computing;

[0042] The resource publishing node returns a data resource list to the initiator in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to the first mapping relationship; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are utilized in the multi-party privacy computing process.

[0043] In a sixth aspect, a system for publishing privacy computing data resources is provided, the system comprising:

[0044] The data party is used to send a first registration request message to the resource publishing node, wherein the first registration request message includes at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of the data party;

[0045] The resource publishing node is used to save the first mapping relationship formed by the data resource identifier, the data resource description information and the data party identifier, and use it as a data resource record; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing.

[0046] In a seventh aspect, a device for publishing privacy computing data resources is provided, the device comprising:

[0047] A receiving unit, configured to receive first registration request messages from multiple data parties respectively, wherein the first registration request messages include at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of a corresponding data party;

[0048] A publishing unit is used to establish multiple data resource records, where the data resource records correspond to a first mapping relationship, and the first mapping relationship is formed by the data resource identifier, the data resource description information and the data party identifier; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing.

[0049] In an eighth aspect, a system for discovering privacy computing data resources is provided, the system comprising:

[0050] The initiator of privacy computing is used to send query request messages to resource publishing nodes;

[0051] The resource publishing node is configured to return a data resource list to the initiator in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, wherein the first mapping relationship is formed by a data resource identifier of the private data, data resource description information of the private data, and a data party identifier of a corresponding data party;

[0052] The initiator is used to select a target first mapping relationship from the data resource list; perform multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and use the data resources corresponding to the corresponding data resource identifier during the multi-party privacy computing process.

[0053] In a ninth aspect, a device for discovering privacy computing data resources is provided, the device comprising:

[0054] A receiving unit, configured to receive a query request message from an initiator of privacy computing;

[0055] A sending unit is used to return a data resource list to the initiator in response to the query request message received by the receiving unit, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, and the first mapping relationship is formed by a data resource identifier of the privacy data, data resource description information of the privacy data and a data party identifier of the corresponding data party; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are utilized in the multi-party privacy computing process.

[0056] In a tenth aspect, a device for publishing and discovering privacy computing data resources is provided, the device comprising:

[0057] A receiving unit, configured to receive first registration request messages from multiple data parties respectively, wherein the first registration request messages include at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of a corresponding data party;

[0058] A publishing unit, configured to establish a plurality of data resource records, wherein the data resource records correspond to a first mapping relationship, wherein the first mapping relationship is formed by the data resource identifier, the data resource description information, and the data party identifier; the data resource records are used by the initiator of the privacy computing to query the data resources of the multi-party privacy computing;

[0059] The receiving unit is further configured to receive a query request message from an initiator of privacy computing;

[0060] A sending unit is used to return a data resource list to the initiator in response to the query request message received by the receiving unit, wherein the data resource list includes at least one data resource record corresponding to the first mapping relationship; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process.

[0061] In the eleventh aspect, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed in a computer, the computer is caused to execute the method of any one of the first to fifth aspects.

[0062] In a twelfth aspect, a computing device is provided, comprising a memory and a processor, wherein the memory stores executable code, and when the processor executes the executable code, the method of any one of the first to fifth aspects is implemented.

[0063] Through the method, device and system provided in the embodiments of this specification, in the method of publishing data resources for privacy computing, first, the data direction sends a first registration request message to the resource publishing node, and the first registration request message includes at least the data resource identifier of the privacy data to be registered, the data resource description information of the privacy data and the data party identifier of the data party; then the resource publishing node saves the first mapping relationship formed by the data resource identifier, the data resource description information and the data party identifier, and uses it as a data resource record; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing. As can be seen from the above, in the embodiments of this specification, the data direction registers the information of the data resources that can be provided by the resource publishing node, and the resource publishing node forms a queryable data resource record, so that the information of the data resources can be disseminated faster and more widely, and correspondingly, the efficiency of the initiator in obtaining the information of the data resources provided by the data party can be improved.

[0064] In the method of discovering data resources of privacy computing, first, the initiator of privacy computing sends a query request message to the resource publishing node; then, the resource publishing node returns a data resource list to the initiator in response to the query request message, and the data resource list includes at least one data resource record corresponding to the first mapping relationship, and the first mapping relationship is formed by the data resource identifier of the privacy data, the data resource description information of the privacy data and the data party identifier of the corresponding data party; then, the initiator selects the target first mapping relationship from the data resource list; finally, the initiator performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process. As can be seen from the above, in the embodiment of this specification, the initiator of privacy computing does not need to communicate with each data party separately to obtain the information of the data resources respectively owned by each data party, but only needs to interact with the resource publishing node, and the information of the data resources respectively owned by each data party can be queried from the resource publishing node, thereby improving the efficiency of the initiator in obtaining the information of the data resources provided by the data party. BRIEF DESCRIPTION OF THE DRAWINGS

[0065] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0066] Figure 1 A schematic diagram of an implementation scenario of an embodiment disclosed in this specification;

[0067] Figure 2 A schematic diagram showing an interaction method for publishing privacy computing data resources according to an embodiment;

[0068] Figure 3 A flowchart showing a method for publishing privacy computing data resources according to an embodiment is shown;

[0069] Figure 4 A schematic diagram showing an interaction method for discovering privacy computing data resources according to an embodiment;

[0070] Figure 5 A flowchart of a method for discovering privacy computing data resources according to an embodiment is shown;

[0071] Figure 6 A flowchart of a method for publishing and discovering privacy computing data resources according to an embodiment is shown;

[0072] Figure 7 A schematic block diagram showing a system for publishing privacy computing data resources according to an embodiment;

[0073] Figure 8 A schematic block diagram showing an apparatus for publishing privacy computing data resources according to an embodiment;

[0074] Fig. 9 A schematic block diagram showing a system for discovering privacy computing data resources according to an embodiment;

[0075] Fig.10 A schematic block diagram showing an apparatus for discovering privacy computing data resources according to an embodiment;

[0076] Fig.11 A schematic block diagram of an apparatus for publishing and discovering privacy computing data resources according to one embodiment is shown. DETAILED DESCRIPTION

[0077] The solution provided in this specification is described below in conjunction with the accompanying drawings.

[0078] Figure 1 This is a schematic diagram of an implementation scenario of an embodiment disclosed in this specification. The implementation scenario involves the release of privacy computing data resources and the discovery of privacy computing data resources, wherein privacy computing is a calculation involving privacy data, usually secure multi-party computing, and it is necessary to protect the privacy data from being leaked. Figure 1, the data party has data resources of private data. It can be understood that private data can be any data that is not convenient to be made public, including but not limited to data representing the user's personal information, or business secrets, etc. Since the scope of private data is very wide, different data parties usually have different data resources. Each data party can send the information of its own data resources to the resource publishing node, which will manage this information uniformly for the initiator of privacy computing to query. This process is the release of privacy computing data resources, which can be referred to as resource release. Corresponding to the resource release process, the initiator of privacy computing queries the information of data resources from the resource publishing node. This process is the discovery of privacy computing data resources, which can be referred to as resource discovery. The initiator of subsequent privacy computing can perform multi-party privacy computing with the data party with the above data resources based on the information of the above data resources. The above data resources will be used in the process of privacy computing.

[0079] In the embodiments of this specification, there may be multiple data parties that publish information about their respective data resources through a resource publishing node. The initiator of privacy computing can select the data resources he needs from them and perform multi-party privacy computing with the data party that owns the data resources.

[0080] In addition, it should be noted that the initiator and the data party are two roles involved in the same privacy computing, and the two are not mutually exclusive. For example, a user node can be not only an initiator but also a data party. In this case, the user node can also publish resources through the resource publishing node. For example, user node 1 and user node 2 jointly perform privacy computing. The data resources of user node 1 and user node 2 are used in the privacy computing process. User node 1 and user node 2 are both data parties, and either user node can serve as the initiator.

[0081] Moreover, the roles of each party may change in different privacy computing. For example, in the first privacy computing, user node 1 is the initiator, and in the second privacy computing, user node 1 is the data party. There are many possible situations, which will not be elaborated here.

[0082] In the embodiments of this specification, the management node may be registered with the data party's information and / or the initiator's information. The data party and the initiator may be registered on the same management node or on different management nodes. The management node and the resource publishing node are two roles with different functions, which may be integrated on the same server or deployed separately on different servers.

[0083] It should be noted that the initiator, data party, resource publishing node and management node mentioned in the embodiments of this specification are names given from the role, and can be physically composed of a module, a computing device or a computing cluster. Among them, the above-mentioned initiator can also be called a task initiator, which can be used to trigger privacy computing tasks, complete task resource configuration before task execution, and verify the availability of resources.

[0084] Figure 2 A schematic diagram showing an interactive method for publishing privacy computing data resources according to an embodiment of the present invention is shown. The method can be based on Figure 1 The implementation scenario shown is executed interactively by the data party and the resource publishing node. Figure 2 As shown, the method for publishing data resources for privacy computing in this embodiment includes the following steps: Step 21, the data direction sends a first registration request message to the resource publishing node, and the first registration request message includes at least the data resource identifier of the privacy data to be registered, the data resource description information of the privacy data and the data party identifier of the data party; Step 22, the resource publishing node saves the first mapping relationship formed by the data resource identifier, the data resource description information and the data party identifier, and uses it as a data resource record; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing. The specific execution method of each of the above steps is described below.

[0085] First, in step 21, the data party sends a first registration request message to the resource publishing node, wherein the first registration request message includes at least the data resource identifier of the private data to be registered, the data resource description information of the private data, and the data party identifier of the data party. It can be understood that the first registration request message includes the relevant information of the data resources owned by the data party, and in addition to the information listed above, other information may also be included, such as the communication connection information of the data party.

[0086] In an example, the first registration request message also includes information of a first management node, information of the data party is registered on the first management node, and the first mapping relationship also includes information of the first management node.

[0087] In this example, the data party is registered with the first management node, so that the management node has the address of the data party, and the first registration request message includes the information of the first management node, so as to facilitate obtaining the information of the data party from the first management node. It can be understood that in this example, the data party and the initiator can both be registered with the same management node or with different management nodes.

[0088] Furthermore, before the data direction sends the first registration request message to the resource publishing node, the method further includes:

[0089] The data party sends a second registration request message to the first management node, where the second registration request message includes at least a data party identifier of the data party, an internet protocol (IP) address and a public key of the data party;

[0090] The first management node stores a second mapping relationship formed by the data party identifier of the data party, the IP address of the data party, and the public key.

[0091] It can be understood that, according to the data party identifier, the IP address and public key of the corresponding data party can be queried from the first management node.

[0092] In an example, the information of the data provider and the information of the initiator are registered on the same management node.

[0093] In this example, the first registration request message does not need to include the information of the aforementioned first management node. By default, only the initiator and data party registered with the same management node can perform privacy computing.

[0094] Then, in step 22, the resource publishing node saves the first mapping relationship formed by the data resource identifier, the data resource description information and the data party identifier, and uses it as a data resource record; the data resource record is used by the initiator of the privacy computing to query the data resources of the multi-party privacy computing. It can be understood that the resource publishing node can establish multiple data resource records based on the first registration request messages sent by multiple data parties respectively, and each data resource record corresponds to a data resource. When a data party has multiple data resources, multiple data resource records can be established for the multiple data resources. In other words, a data party can correspond to one data resource record or multiple data resource records.

[0095] In the embodiment of this specification, a resource publishing node stores multiple data resource records, which can be queried by the initiator of privacy computing. Table 1 is a corresponding relationship table of various information in the data resource records stored in the resource publishing node, and the various information in Table 1 is given in the form of examples.

[0096] Table 1: Correspondence table of various information in the data resource record saved in the resource publishing node

[0097]

[0098] As can be seen from Table 1, resource 1 and resource 3 belong to data party A. That is to say, different data resources can be provided by the same data party. The data resource description information usually describes the category of the data resource. Since the data resource is private data, it cannot be provided to other parties in plain text. The data resource description information can also explain how to use the data resource, for example, the type of privacy computing supported by the data party.

[0099] Figure 3 A flowchart of a method for publishing privacy computing data resources according to an embodiment is shown. The method can be based on Figure 1 The implementation scenario shown mainly describes the processing flow of the resource publishing node. Figure 3 As shown, the method for publishing data resources for privacy computing in this embodiment includes the following steps: Step 31, the resource publishing node receives first registration request messages from multiple data parties respectively, the first registration request message includes at least the data resource identifier of the privacy data to be registered, the data resource description information of the privacy data and the data party identifier of the corresponding data party; Step 32, the resource publishing node establishes multiple data resource records, the data resource records correspond to the first mapping relationship, the first mapping relationship is formed by the data resource identifier, the data resource description information and the data party identifier; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing. The specific execution method of each of the above steps is described below.

[0100] First, in step 31, the resource publishing node receives first registration request messages from multiple data parties respectively, wherein the first registration request message includes at least the data resource identifier of the private data to be registered, the data resource description information of the private data, and the data party identifier of the corresponding data party. It can be understood that the resource publishing node is for all data parties, and any data party can send the above-mentioned first registration request message to the resource publishing node.

[0101] Then, in step 32, the resource publishing node establishes multiple data resource records, the data resource records correspond to the first mapping relationship, the first mapping relationship is formed by the data resource identifier, the data resource description information and the data party identifier; the data resource records are used by the initiator of the privacy computing to query the data resources of the multi-party privacy computing. It can be understood that the above multiple data resource records are public information and can be provided to the initiator of the privacy computing in whole or in part in response to the query request made by the initiator of the privacy computing.

[0102] Through the method provided in the embodiment of this specification, first, the data direction sends a first registration request message to the resource publishing node, and the first registration request message includes at least the data resource identifier of the privacy data to be registered, the data resource description information of the privacy data and the data party identifier of the data party; then the resource publishing node saves the first mapping relationship formed by the data resource identifier, the data resource description information and the data party identifier, and uses it as a data resource record; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing. As can be seen from the above, in the embodiment of this specification, the data direction registers the information of the data resources that can be provided by the resource publishing node, and the resource publishing node forms a queryable data resource record, so that the information of the data resources can be disseminated faster and more widely, and correspondingly, the efficiency of the initiator in obtaining the information of the data resources provided by the data party can be improved.

[0103] Figure 4 A schematic diagram showing an interactive method for discovering privacy computing data resources according to an embodiment of the present invention is shown. The method can be based on Figure 1 The implementation scenario shown in Figure 1 is interactively executed by the initiator of privacy computing, the resource publishing node, and the data party. Figure 4 As shown, the method for discovering data resources for privacy computing in this embodiment includes the following steps: Step 41, the initiator of privacy computing sends a query request message to the resource publishing node; Step 42, the resource publishing node responds to the query request message and returns a data resource list to the initiator, the data resource list includes at least one data resource record corresponding to the first mapping relationship, the first mapping relationship is formed by the data resource identifier of the privacy data, the data resource description information of the privacy data and the data party identifier of the corresponding data party; Step 43, the initiator selects the target first mapping relationship from the data resource list; Step 44, the initiator performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process. The specific execution method of each of the above steps is described below.

[0104] First, in step 41, the initiator of privacy computing sends a query request message to the resource publishing node. It can be understood that the query request message can be used to request to obtain all data resource records of the resource publishing node, or to request to obtain some data resource records of the resource publishing node.

[0105] In an example, the query request message includes a query condition, which limits the data party corresponding to the data resource record requested to be obtained, for example, only the data resource record corresponding to data party 1 is obtained.

[0106] Then, in step 42, the resource publishing node returns a data resource list to the initiator in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to the first mapping relationship, wherein the first mapping relationship is formed by the data resource identifier of the private data, the data resource description information of the private data, and the data party identifier of the corresponding data party. It can be understood that the data resource list can be composed of all data resource records possessed by the resource publishing node, or can be composed of some data resource records possessed by the resource publishing node.

[0107] In an example, the data resource list is a list formed by all data resource records possessed by the resource publishing node.

[0108] In this example, the query request message may not include a query condition.

[0109] In another example, the query request message includes a query condition, and the data resource list is a list formed by filtering out some data resource records from all data resource records of the resource publishing node according to the query condition.

[0110] For example, if the query condition limits the data party corresponding to the data resource record requested to be obtained, the data resource list only includes the data resource record corresponding to the data party.

[0111] Next, in step 43, the initiator selects a target first mapping relationship from the data resource list. It can be understood that the data resource list includes at least one data resource record corresponding to the first mapping relationship, and selecting the target first mapping relationship means selecting a data resource record of interest.

[0112] Finally, in step 44, the initiator performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and the data resource corresponding to the corresponding data resource identifier is used in the multi-party privacy computing process. It can be understood that the multi-party privacy computing process involves data interaction, and the initiator needs to establish a communication connection with the data party before performing the above multi-party privacy computing.

[0113] In one example, the initiator performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, including:

[0114] The initiator obtains the network protocol IP address and public key of the data party from the first management node corresponding to the corresponding data party according to the data party identifier in the target first mapping relationship; the first management node is registered with the information of the data party;

[0115] The initiator establishes a communication connection with the data party based on the IP address of the data party, verifies the digital signature of the data party using the public key based on the communication connection, and performs multi-party privacy computing with the corresponding data party.

[0116] Furthermore, the first mapping relationship also includes information of the first management node;

[0117] The acquiring, according to the data party identifier in the target first mapping relationship, the IP address and the public key of the data party from the first management node corresponding to the corresponding data party, comprises:

[0118] According to the data party identifier in the target first mapping relationship and the information of the first management node, the IP address and public key of the data party are obtained from the first management node corresponding to the corresponding data party.

[0119] Furthermore, the first management node also has information of the initiator registered therein; the initiator has the information of the first management node in advance;

[0120] The acquiring, according to the data party identifier in the target first mapping relationship, the IP address and the public key of the data party from the first management node corresponding to the corresponding data party, comprises:

[0121] According to the data party identifier in the target first mapping relationship and the information of the first management node pre-owned by the initiator, the IP address and public key of the data party are obtained from the first management node corresponding to the corresponding data party.

[0122] In one example, the multi-party privacy computing includes using the corresponding data resource identifiers to identify the data resources and the scoring model of the initiator to perform a data scoring task.

[0123] In one example, the multi-party privacy computing includes a data backtracking task performed using data resources corresponding to corresponding data resource identifiers.

[0124] The above data backtracking task can be understood as a task of obtaining data resources from the data party based on the input data of the initiator. Since private data cannot be transmitted to other parties in plain text, the above data resources can be processed data resources. For example, the initiator inputs the user's ID number, and the data party can obtain data resources such as payment data or credit data corresponding to the ID number.

[0125] Figure 5 A flowchart of a method for discovering privacy computing data resources according to an embodiment is shown. The method can be based on Figure 1 The implementation scenario shown mainly describes the processing flow of the resource publishing node. Figure 5As shown, the method for discovering data resources for privacy computing in this embodiment includes the following steps: Step 51, the resource publishing node receives a query request message from the initiator of privacy computing; Step 52, the resource publishing node responds to the query request message and returns a data resource list to the initiator, the data resource list includes at least one data resource record corresponding to a first mapping relationship, the first mapping relationship is formed by a data resource identifier of the privacy data, data resource description information of the privacy data and a data party identifier of the corresponding data party; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process. The specific execution method of each of the above steps is described below.

[0126] First, in step 51, the resource publishing node receives a query request message from the initiator of privacy computing. It can be understood that the resource publishing node is oriented to all user nodes, and any user node can be the initiator of privacy computing and send the above query request message to the resource publishing node. The user node can be a data party that has registered with the resource publishing node, or it can be a data party that has not registered with the resource publishing node.

[0127] Then in step 52, the resource publishing node responds to the query request message and returns a data resource list to the initiator, wherein the data resource list includes at least one data resource record corresponding to the first mapping relationship, wherein the first mapping relationship is formed by the data resource identifier of the privacy data, the data resource description information of the privacy data, and the data party identifier of the corresponding data party; so that the initiator selects the target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process. It can be understood that the above-mentioned data resource list may include both data resource records of interest to the initiator and data resource records of no interest to the initiator, and the initiator needs to select the data resource records of interest therefrom.

[0128] Through the method provided in the embodiment of this specification, first, the initiator of privacy computing sends a query request message to the resource publishing node; then, in response to the query request message, the resource publishing node returns a data resource list to the initiator, wherein the data resource list includes at least one data resource record corresponding to the first mapping relationship, wherein the first mapping relationship is formed by the data resource identifier of the privacy data, the data resource description information of the privacy data, and the data party identifier of the corresponding data party; then, the initiator selects the target first mapping relationship from the data resource list; finally, the initiator performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process. As can be seen from the above, in the embodiment of this specification, the initiator of privacy computing does not need to communicate with each data party separately to obtain the information of the data resources respectively owned by each data party, but only needs to interact with the resource publishing node, and the information of the data resources respectively owned by each data party can be queried from the resource publishing node, thereby improving the efficiency of the initiator in obtaining the information of the data resources provided by the data party.

[0129] Figure 6 A flowchart of a method for publishing and discovering privacy computing data resources according to an embodiment is shown. The method can be based on Figure 1 The implementation scenario shown mainly describes the processing flow of the resource publishing node. Figure 6 As shown, the method for publishing and discovering privacy computing data resources in this embodiment includes the following steps: Step 61, the resource publishing node receives first registration request messages from multiple data parties respectively, the first registration request message includes at least the data resource identifier of the privacy data to be registered, the data resource description information of the privacy data and the data party identifier of the corresponding data party; Step 62, the resource publishing node establishes multiple data resource records, the data resource records correspond to the first mapping relationship, the first mapping relationship is formed by the data resource identifier, the data resource description information and the data party identifier; the data resource record is used by the initiator of the privacy computing to query the data resources of the multi-party privacy computing; Step 63, the resource publishing node receives a query request message from the initiator of the privacy computing; Step 64, the resource publishing node responds to the query request message and returns a data resource list to the initiator, the data resource list includes at least one data resource record corresponding to the first mapping relationship; so that the initiator selects the target first mapping relationship from the data resource list; according to the data party identifier in the target first mapping relationship, the multi-party privacy computing is performed with the corresponding data party, and the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process. The specific execution method of each of the above steps is described below.

[0130] First, in step 61, the resource publishing node receives first registration request messages from multiple data parties respectively, wherein the first registration request message includes at least the data resource identifier of the private data to be registered, the data resource description information of the private data, and the data party identifier of the corresponding data party. It can be understood that the resource publishing node is for all data parties, and any data party can send the above-mentioned first registration request message to the resource publishing node.

[0131] Then, in step 62, the resource publishing node establishes multiple data resource records, the data resource records correspond to the first mapping relationship, the first mapping relationship is formed by the data resource identifier, the data resource description information and the data party identifier; the data resource records are used by the initiator of the privacy computing to query the data resources of the multi-party privacy computing. It can be understood that the above multiple data resource records are public information and can be provided to the initiator of the privacy computing in whole or in part in response to the query request made by the initiator of the privacy computing.

[0132] Then, in step 63, the resource publishing node receives a query request message from the initiator of privacy computing. It can be understood that the resource publishing node is oriented to all user nodes, and any user node can serve as the initiator of privacy computing and send the above query request message to the resource publishing node. The user node can be a data party that has registered with the resource publishing node, or it can be a data party that has not registered with the resource publishing node.

[0133] Finally, in step 64, the resource publishing node responds to the query request message and returns a data resource list to the initiator, wherein the data resource list includes at least one data resource record corresponding to the first mapping relationship; so that the initiator selects the target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and the data resource corresponding to the corresponding data resource identifier is used in the multi-party privacy computing process. It can be understood that the above data resource list may include both data resource records of interest to the initiator and data resource records of no interest to the initiator, and the initiator needs to select the data resource records of interest from them.

[0134] In the method provided in the embodiments of this specification, the resource publishing node serves as a medium for communication between the initiator and the data party, thereby improving the efficiency of the initiator in obtaining information about the data resources provided by the data party.

[0135] According to another aspect of the embodiment, a system for publishing privacy computing data resources is also provided, and the system is used to execute the method for publishing privacy computing data resources provided in the embodiment of this specification. Figure 7 A schematic block diagram of a system for publishing privacy computing data resources according to an embodiment is shown. Figure 7 As shown, the system 700 includes:

[0136] The data party 71 is used to send a first registration request message to the resource publishing node 72, wherein the first registration request message includes at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of the data party;

[0137] The resource publishing node 72 is used to save the first mapping relationship formed by the data resource identifier, the data resource description information and the data party identifier, and use it as a data resource record; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing.

[0138] According to another aspect of the embodiment, a device for publishing privacy computing data resources is also provided. The device can be set in the aforementioned resource publishing node, and is used to execute the actions performed by the resource publishing node in the method for publishing privacy computing data resources provided in the embodiment of this specification. Figure 8 A schematic block diagram of an apparatus for publishing privacy computing data resources according to an embodiment is shown. Figure 8 As shown, the device 800 includes:

[0139] The receiving unit 81 is configured to receive first registration request messages from multiple data parties respectively, wherein the first registration request message includes at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of a corresponding data party;

[0140] The publishing unit 82 is used to establish multiple data resource records, where the data resource records correspond to a first mapping relationship, and the first mapping relationship is formed by the data resource identifier, the data resource description information and the data party identifier; the data resource record is used by the initiator of privacy computing to query the data resources of multi-party privacy computing.

[0141] According to another aspect of the embodiment, a system for discovering privacy-preserving computing data resources is also provided. The system is used to execute the method for discovering privacy-preserving computing data resources provided in the embodiment of this specification. Fig. 9 A schematic block diagram of a system for discovering privacy computing data resources according to an embodiment is shown. Fig. 9 As shown, the system 900 includes:

[0142] The initiator 91 of privacy computing is used to send a query request message to the resource publishing node 92;

[0143] The resource publishing node 92 is used to return a data resource list to the initiator 91 in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, wherein the first mapping relationship is formed by a data resource identifier of the private data, data resource description information of the private data, and a data party identifier of a corresponding data party;

[0144] The initiator 91 is used to select a target first mapping relationship from the data resource list; perform multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and use the data resources corresponding to the corresponding data resource identifier during the multi-party privacy computing process.

[0145] According to another aspect of the embodiment, a device for discovering privacy computing data resources is also provided. The device can be set in the aforementioned resource publishing node and is used to execute the actions performed by the resource publishing node in the method for discovering privacy computing data resources provided in the embodiment of this specification. Fig.10 A schematic block diagram of an apparatus for discovering privacy computing data resources according to an embodiment is shown. Fig.10 As shown, the device 1000 includes:

[0146] A receiving unit 101 is used to receive a query request message from an initiator of privacy computing;

[0147] The sending unit 102 is used to return a data resource list to the initiator in response to the query request message received by the receiving unit 101, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, and the first mapping relationship is formed by a data resource identifier of the privacy data, data resource description information of the privacy data, and a data party identifier of the corresponding data party; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are utilized in the multi-party privacy computing process.

[0148] According to another aspect of the embodiment, a device for publishing and discovering privacy computing data resources is also provided. The device can be set in the aforementioned resource publishing node, and is used to execute the actions performed by the resource publishing node in the privacy computing data resource publishing method and the privacy computing data resource discovery method provided in the embodiments of this specification. Fig.11 A schematic block diagram of an apparatus for publishing and discovering privacy computing data resources according to an embodiment is shown. Fig.11 As shown, the device 1100 includes:

[0149] The receiving unit 111 is configured to receive first registration request messages from multiple data parties respectively, wherein the first registration request message includes at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of a corresponding data party;

[0150] A publishing unit 112 is used to establish multiple data resource records, where the data resource records correspond to a first mapping relationship, where the first mapping relationship is formed by the data resource identifier, the data resource description information, and the data party identifier; the data resource record is used by the initiator of the privacy computing to query the data resources of the multi-party privacy computing;

[0151] The receiving unit 111 is further configured to receive a query request message from an initiator of privacy computing;

[0152] The sending unit 113 is used to return a data resource list to the initiator in response to the query request message received by the receiving unit 111, wherein the data resource list includes at least one data resource record corresponding to the first mapping relationship; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process.

[0153] According to another embodiment, there is also provided a computer-readable storage medium having a computer program stored thereon, which, when executed in a computer, causes the computer to execute a combination of Figures 2 to 6 Any of the methods described.

[0154] According to another embodiment of the present invention, a computing device is provided, including a memory and a processor, wherein the memory stores executable code, and when the processor executes the executable code, the Figures 2 to 6 Any of the methods described.

[0155] Those skilled in the art should be aware that in one or more of the above examples, the functions described in the present invention can be implemented by hardware, software, firmware or any combination thereof. When implemented by software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on a computer-readable medium.

[0156] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made on the basis of the technical solution of the present invention should be included in the scope of protection of the present invention.

Claims

1. A method for discovering privacy computing data resources, the method comprising: The initiator of privacy computing sends a query request message to the resource publishing node; The resource publishing node returns a data resource list to the initiator in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, wherein the first mapping relationship is formed by a data resource identifier of the private data, data resource description information of the private data, and a data party identifier of a corresponding data party; The initiator selects a target first mapping relationship from the data resource list; The initiator performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process.

2. The method of claim 1, wherein: The data resource list is a list formed by all data resource records possessed by the resource publishing node.

3. The method of claim 1, wherein: The query request message includes a query condition, and the data resource list is a list formed by filtering out some data resource records from all data resource records owned by the resource publishing node according to the query condition.

4. The method of claim 1, wherein: The initiator performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, including: The initiator obtains the network protocol IP address and public key of the data party from the first management node corresponding to the corresponding data party according to the data party identifier in the target first mapping relationship; the first management node is registered with the information of the data party; The initiator establishes a communication connection with the data party based on the IP address of the data party, verifies the digital signature of the data party using the public key based on the communication connection, and performs multi-party privacy computing with the corresponding data party.

5. The method of claim 4, wherein: The first mapping relationship also includes information of the first management node; The acquiring, according to the data party identifier in the target first mapping relationship, the IP address and the public key of the data party from the first management node corresponding to the corresponding data party, comprises: According to the data party identifier in the target first mapping relationship and the information of the first management node, the IP address and public key of the data party are obtained from the first management node corresponding to the corresponding data party.

6. The method of claim 4, wherein: The first management node also has the information of the initiator registered therein; the initiator has the information of the first management node in advance; The acquiring, according to the data party identifier in the target first mapping relationship, the IP address and the public key of the data party from the first management node corresponding to the corresponding data party, comprises: According to the data party identifier in the target first mapping relationship and the information of the first management node pre-owned by the initiator, the IP address and public key of the data party are obtained from the first management node corresponding to the corresponding data party.

7. The method of claim 1, wherein: The multi-party privacy computing includes a data scoring task performed by using the data resources corresponding to the corresponding data resource identifiers and the scoring model of the initiator.

8. The method of claim 1, wherein: The multi-party privacy computing includes a data backtracking task performed using data resources corresponding to corresponding data resource identifiers.

9. A method for discovering privacy computing data resources, the method comprising: The resource publishing node receives the query request message from the initiator of privacy computing; The resource publishing node returns a data resource list to the initiator in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, wherein the first mapping relationship is formed by a data resource identifier of the privacy data, data resource description information of the privacy data, and a data party identifier of the corresponding data party; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are utilized in the multi-party privacy computing process.

10. A method for publishing and discovering privacy computing data resources, the method comprising: The resource publishing node receives first registration request messages from multiple data parties respectively, wherein the first registration request messages include at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of a corresponding data party; The resource publishing node establishes multiple data resource records, each of which corresponds to a first mapping relationship, wherein the first mapping relationship is formed by the data resource identifier, the data resource description information, and the data party identifier; the data resource record is used by the initiator of the privacy computing to query the data resources of the multi-party privacy computing; The resource publishing node receives a query request message from an initiator of privacy computing; The resource publishing node returns a data resource list to the initiator in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to the first mapping relationship; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are utilized in the multi-party privacy computing process.

11. A system for discovering privacy computing data resources, the system comprising: The initiator of privacy computing is used to send query request messages to resource publishing nodes; The resource publishing node is configured to return a data resource list to the initiator in response to the query request message, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, wherein the first mapping relationship is formed by a data resource identifier of the private data, data resource description information of the private data, and a data party identifier of a corresponding data party; The initiator is used to select a target first mapping relationship from the data resource list; perform multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, and use the data resources corresponding to the corresponding data resource identifier during the multi-party privacy computing process.

12. A device for discovering privacy computing data resources, the device comprising: A receiving unit, configured to receive a query request message from an initiator of privacy computing; A sending unit is used to return a data resource list to the initiator in response to the query request message received by the receiving unit, wherein the data resource list includes at least one data resource record corresponding to a first mapping relationship, and the first mapping relationship is formed by a data resource identifier of the privacy data, data resource description information of the privacy data and a data party identifier of the corresponding data party; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are utilized in the multi-party privacy computing process.

13. A device for publishing and discovering privacy computing data resources, the device comprising: A receiving unit, configured to receive first registration request messages from multiple data parties respectively, wherein the first registration request messages include at least a data resource identifier of the private data to be registered, data resource description information of the private data, and a data party identifier of a corresponding data party; A publishing unit, configured to establish a plurality of data resource records, wherein the data resource records correspond to a first mapping relationship, wherein the first mapping relationship is formed by the data resource identifier, the data resource description information, and the data party identifier; the data resource records are used by the initiator of the privacy computing to query the data resources of the multi-party privacy computing; The receiving unit is further configured to receive a query request message from an initiator of privacy computing; A sending unit is used to return a data resource list to the initiator in response to the query request message received by the receiving unit, wherein the data resource list includes at least one data resource record corresponding to the first mapping relationship; so that the initiator selects a target first mapping relationship from the data resource list; and performs multi-party privacy computing with the corresponding data party according to the data party identifier in the target first mapping relationship, wherein the data resources corresponding to the corresponding data resource identifier are used in the multi-party privacy computing process.

14. A computer-readable storage medium having a computer program stored thereon, which, when executed in a computer, causes the computer to execute the method according to any one of claims 1 to 10.

15. A computing device, comprising a memory and a processor, wherein the memory stores executable codes, and when the processor executes the executable codes, the method according to any one of claims 1 to 10 is implemented.

Images