A privacy computing system, method, device, storage medium and program product

Abstract

The present application proposes a privacy computing system and method, which belongs to the field of privacy computing technology. Specifically, the privacy computing system includes a first user terminal, a privacy service terminal and a second user terminal. Among them, the privacy service terminal includes a service disclosure unit and a service privacy unit. The service disclosure unit and the service privacy unit can operate independently, and there is no need to switch the operating system when processing data, which greatly improves the operating efficiency. The service disclosure unit and the service privacy unit can filter the transmitted data based on the preset internal transmission protocol to avoid the service privacy unit from directly communicating with the external network, so that the trusted execution environment of privacy computing does not rely on a trusted operating system. The service privacy terminal can only output the ciphertext of the privacy result to ensure the security of privacy computing. At the same time, the privacy computing system can realize the full information domain security of privacy computing from privacy data input, privacy computing and privacy result output.

Description

Technical Field

[0001] The present application relates to the field of privacy computing technology, and specifically to a privacy computing system and method, device, storage medium and program product. Background Art

[0002] Academician Yao Qizhi, winner of the 2000 Turing Award, raised a question in 1982: suppose there are two wealthy people, and they both want to know who is richer, but they both want to protect their privacy and do not want to let the other party or other second parties know how much wealth they really have. The essence of this question is about the privacy calculation of information data.

[0003] With the development of big data, artificial intelligence and communication technology, the role of information data in the digital age has become increasingly prominent. Information data is often considered the fifth largest production factor in today's society after land, labor, capital and technology, and its importance is self-evident. However, information data has its own particularity. Compared with other production factors, the uniqueness of information data is that once it is used or seen, it will lead to the leakage of information data, and this leakage will be spread or copied infinitely, resulting in the loss of the value of information data, causing huge economic losses to the data resource party, and even suffering a catastrophic disaster.

[0004] In the existing technology, the field of privacy computing presents many technical features and solutions, including but not limited to homomorphic encryption, differential privacy, oblivious transmission, etc. However, from a technical perspective, there are two main types of solutions for privacy computing: one is to use cryptography; the other is to use a hardware-based trusted execution environment.

[0005] Specifically, cryptographic solutions are mainly represented by multi-party secure computing, which is implemented through professional technologies such as homomorphic encryption, differential privacy, and oblivious transmission. However, the application scenarios of this cryptographic solution are relatively limited, and it only has practical application value in specific scenarios. The hardware-based trusted execution environment solution is to build a hardware security area, and private data is only decrypted in this security area for calculation. Its core is to hand over the information data trust mechanism to hardware parties such as Intel and AMD.

[0006] Taking the typical trusted execution environment ARM TrustZone as an example, its principle is to introduce two protection domains with different permissions in the processor: Secure World and Normal World. Programs in the Normal World run on an operating system that provides a Rich Execution Environment (REE). Programs in the Secure World run on another operating system that provides a Trusted Execution Environment (TEE). At a certain moment, the processor runs in only one of the environments. This approach has at least the following problems:

[0007] 1. The computing efficiency is low. The operation of different worlds / environments requires switching of operating systems on hardware such as processors and memory;

[0008] 2. The rich execution environment and the trusted execution environment run on the same processor, which means that the execution of the trusted execution environment depends on the trusted operating system. If there are vulnerabilities or maliciousness in the operating system, it will still cause the leakage of private information data, which will lead to the insufficient security of the above-mentioned privacy computing based on the trusted execution environment. Summary of the invention

[0009] Based on this, it is necessary to provide a privacy computing system and method, device, storage medium and program product to address the above technical problems.

[0010] In a first aspect, a privacy computing system is provided, comprising: at least one first client, a privacy server connected to the first client, and at least one second client connected to the privacy server;

[0011] The first user terminal is configured to provide the privacy data in a ciphertext state to the privacy server terminal; the privacy server terminal is configured to perform privacy calculation on the privacy data to obtain a privacy result, and provide the privacy result in a ciphertext state to the second user terminal;

[0012] The privacy service end includes a service disclosure unit and a service privacy unit for data transmission using a preset internal transmission protocol;

[0013] The service disclosure unit is configured to obtain the privacy data sent by the first user terminal, and encapsulate the privacy data using a preset internal transmission protocol and send it to the service privacy unit; and obtain the privacy result sent by the service privacy unit, and send the privacy result to the second user terminal.

[0014] The service privacy unit is configured to obtain privacy data, and perform privacy calculation based on the privacy data in plain text to obtain a privacy result; and encapsulate the privacy result using a preset internal transmission protocol, and send the encapsulated privacy result to the service disclosure unit;

[0015] The privacy data and privacy results are both in a ciphertext state in the service disclosure unit.

[0016] In a further embodiment, the privacy service end further includes a service ferry unit connected to the service disclosure unit and the service privacy unit respectively;

[0017] The service ferry unit is configured to receive the encapsulated private data sent by the service public unit, and transmit the private data that meets the requirements to the service privacy unit based on a preset internal transmission protocol;

[0018] The service ferry unit is also configured to receive the encapsulated privacy results sent by the service privacy unit, and transmit the privacy results that meet the requirements to the service disclosure unit based on a preset internal transmission protocol.

[0019] In a further embodiment, the service disclosure unit includes: a disclosure communication module, a disclosure conversion module, and a disclosure transmission module connected in sequence;

[0020] The public communication module is configured to obtain the private data ciphertext with the network communication protocol attached thereto sent by the first user terminal, and transmit it to the public conversion module for connection;

[0021] The public conversion module is configured to unload the network communication protocol attached to the private data ciphertext and send the private data ciphertext to the public transmission module;

[0022] The public transmission module is connected to the service ferry unit, and the public transmission module is configured to encapsulate the received private data ciphertext based on a preset internal transmission protocol, and transmit the encapsulated private data ciphertext to the service ferry unit.

[0023] In a further embodiment, the public transmission module is further configured to receive the encapsulated privacy result ciphertext sent by the service ferry unit, obtain the privacy result ciphertext by stripping the internal transmission protocol and send it to the public conversion module;

[0024] The public conversion module is configured to attach a network communication protocol to the acquired privacy result ciphertext and send it to the public communication module;

[0025] The public communication module is configured to send the privacy result ciphertext with the network communication protocol attached to it to the second user terminal.

[0026] In a further embodiment, the service ferry unit includes a service ferry module, and a service encryption and decryption module connected to the service ferry module;

[0027] The service ferry module is configured to receive the encapsulated private data ciphertext sent by the public transmission module and verify the encapsulated private data ciphertext: if the encapsulated private data ciphertext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated private data ciphertext to the service encryption and decryption module for decryption; otherwise, the private data is prohibited from being transmitted to the service privacy unit;

[0028] The service ferry module is also configured to receive the encapsulated privacy result plaintext sent by the service privacy unit, and verify the encapsulated privacy result plaintext: if the encapsulated privacy result plaintext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated privacy result plaintext to the service encryption and decryption module for encryption; otherwise, the privacy result is prohibited from being transmitted to the service disclosure unit;

[0029] The service encryption and decryption module is configured to extract the private data ciphertext, decrypt it and obtain the private data plaintext, and return the private data plaintext to the service ferry module in the format of the internal transmission protocol, so that the service ferry module transmits the private data plaintext to the service privacy unit;

[0030] The service encryption and decryption module is also configured to extract the privacy result plaintext and encrypt it to obtain the privacy result ciphertext, and return the privacy result ciphertext to the service ferry module in the format of the internal transmission protocol, so that the service ferry module transmits the privacy result ciphertext to the service disclosure unit.

[0031] In a further embodiment, the service privacy unit includes: a privacy transmission module, a privacy storage module and a privacy processing module connected in sequence, the privacy transmission module is connected to the service ferry module; the privacy processing module includes a privacy calculation submodule;

[0032] The privacy transmission module is configured to receive the encapsulated privacy data plaintext sent by the service ferry module, then strip the internal transmission protocol to obtain the privacy data plaintext, and send it to the privacy storage module;

[0033] The privacy storage module is configured to receive and store the privacy data in plain text;

[0034] The privacy calculation submodule is configured to call the privacy data plaintext to perform privacy calculation to obtain a privacy result, and send the privacy result plaintext to the privacy transmission module;

[0035] The privacy transmission module is also configured to receive the privacy result plaintext, encapsulate the privacy result plaintext based on the internal transmission protocol, and then send the encapsulated privacy result plaintext to the service ferry module.

[0036] In a further embodiment, the service ferry unit includes a service ferry module;

[0037] The service ferry module is configured to receive the encapsulated private data ciphertext sent by the public transmission module and verify the encapsulated private data ciphertext: if the encapsulated private data ciphertext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated private data ciphertext to the service privacy unit; otherwise, the private data is prohibited from being transmitted to the service privacy unit;

[0038] The service ferry module is also configured to receive the encapsulated privacy result ciphertext sent by the service privacy unit and verify the encapsulated privacy result ciphertext: if the encapsulated privacy result ciphertext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated privacy result ciphertext to the public transmission module of the service disclosure unit; otherwise, the privacy result is prohibited from being transmitted to the service disclosure unit.

[0039] In a further embodiment, the service privacy unit includes: a privacy transmission module, a privacy processing module and a privacy storage module connected in sequence, the privacy transmission module is connected to the service ferry module; the privacy processing module includes a privacy encryption and decryption submodule and a privacy calculation submodule;

[0040] The privacy transmission module is configured to receive the encapsulated privacy data ciphertext sent by the service ferry module, then strip the internal transmission protocol to obtain the privacy data ciphertext, and send it to the privacy encryption and decryption submodule;

[0041] The privacy encryption and decryption submodule is configured to receive the ciphertext of the privacy data, then decrypt it to obtain the plaintext of the privacy data, and send the plaintext of the privacy data to the privacy storage module for storage;

[0042] The privacy computing submodule is configured to call the privacy data plaintext to perform privacy computing to obtain a privacy result.

[0043] In a further embodiment, when storing the plain text of the privacy data, the privacy storage module encrypts the plain text of the privacy data according to a preset encryption rule and then stores it;

[0044] When the privacy computing submodule calls the privacy data plaintext to perform privacy computing, it first decrypts the privacy data plaintext encrypted according to the preset encryption rule to obtain the privacy data plaintext, and then performs privacy computing to obtain a privacy result.

[0045] In a further embodiment, the privacy encryption and decryption submodule is further configured to encrypt the privacy result plaintext to form a privacy result ciphertext, and send it to the privacy transmission module;

[0046] The privacy transmission module is also configured to encapsulate the privacy result ciphertext using a preset internal transmission protocol, and send the encapsulated privacy result ciphertext to the service ferry module.

[0047] In a further embodiment, the public transmission module is further configured to receive the encapsulated privacy result ciphertext sent by the service ferry module, then strip the internal transmission protocol to obtain the privacy result ciphertext, and send the privacy result ciphertext to the public conversion module;

[0048] The public conversion module is also configured to attach a network communication protocol to the private result ciphertext and send it to the public communication module;

[0049] The public communication module is also configured to send the privacy result ciphertext with the network communication protocol attached to it to the second user terminal.

[0050] In a further embodiment, the first user terminal includes a first public unit and a first privacy unit for data transmission using a preset first transmission protocol;

[0051] The first privacy unit is configured to generate private data, encapsulate the private data based on a preset first transmission protocol, and then send the private data to the first public unit;

[0052] The first public unit is configured to strip the encapsulated private data to obtain the private data, and send the private data to the privacy service end;

[0053] The private data is in a ciphertext state in the first public unit.

[0054] In a further embodiment, the first user terminal is also configured to obtain a privacy data request ciphertext sent by the privacy server, decrypt the privacy data request ciphertext to obtain a privacy data request plaintext, and then generate privacy data based on the privacy data request plaintext and send the privacy data ciphertext to the privacy server.

[0055] In a further embodiment, the second user terminal includes a second public unit and a second privacy unit for data transmission using a preset second transmission protocol;

[0056] The second public unit is configured to obtain the privacy result sent by the privacy server, encapsulate the privacy result based on a preset second transmission protocol, and then send it to the second privacy unit;

[0057] The second privacy unit is configured to strip the encapsulated privacy data to obtain a privacy result;

[0058] The privacy result is in a ciphertext state in the second public unit.

[0059] In a further embodiment, the second user terminal is further configured to send a privacy result request ciphertext to the privacy service terminal, so that the privacy service terminal sends the privacy result ciphertext to the second user terminal according to the privacy result request.

[0060] In a further embodiment, the privacy service end is further configured to obtain a first quantum key sent by the first user end through the quantum communication network to decrypt the private data ciphertext sent by the first user end;

[0061] The privacy service end is also configured to send a second quantum key used to decrypt the privacy result ciphertext to the second user end through the quantum communication network.

[0062] In a further embodiment, the first user terminal is further configured to generate a first summary about the private data, and send the first summary together with the private data to the privacy service terminal;

[0063] The privacy service end is also configured to obtain the privacy data and the first summary sent by the first user end, and perform privacy data verification based on the obtained privacy data and the first summary.

[0064] In a further embodiment, the privacy service end is further configured to generate a second summary about the privacy result, and send the second summary together with the privacy result to the second user end;

[0065] The second user terminal is also configured to obtain the ciphertext of the privacy result and the second summary sent by the privacy service terminal, and verify the privacy result based on the privacy result and the second summary.

[0066] In a further embodiment, the privacy data model is also configured to call a pre-configured algorithm model to perform privacy calculation on the privacy data plaintext to obtain the privacy result plaintext when performing privacy calculation.

[0067] In a second aspect, a privacy computing method is provided, including:

[0068] S201: The service disclosure unit of the privacy service end obtains the private data ciphertext sent by the first user end, and encapsulates the private data ciphertext through a preset internal transmission protocol, and then sends the encapsulated private data ciphertext to the service ferry module of the privacy service end;

[0069] S202: The service ferry module of the privacy service end sends the ciphertext of the encapsulated privacy data that meets the requirements to the service encryption and decryption module based on the preset internal transmission protocol;

[0070] S203: The service encryption and decryption module of the privacy service end extracts the ciphertext of the privacy data and decrypts it to obtain the plaintext of the privacy data, and then returns the plaintext of the privacy data to the service ferry module in a format that complies with the internal transmission protocol, and then the service ferry module transmits it to the service privacy unit;

[0071] S204: The service privacy unit of the privacy server strips the encapsulated privacy data plaintext to obtain the privacy data plaintext, then performs privacy calculation based on the privacy data plaintext to obtain the privacy result, encapsulates the privacy result plaintext with a preset internal transmission protocol, and sends the encapsulated privacy result plaintext to the service ferry module;

[0072] S205: The service ferry module of the privacy service end sends the encapsulated privacy result in plain text that meets the requirements to the service encryption and decryption module based on the preset internal transmission protocol;

[0073] S206: extract the privacy result plaintext and encrypt it to obtain the privacy result ciphertext, then return the privacy result ciphertext to the service ferry module in a format that complies with the internal transmission protocol, and then the service ferry module transmits it to the service disclosure unit;

[0074] S207: The service disclosure unit of the privacy service end receives and strips the privacy result ciphertext to obtain the privacy result ciphertext, and then sends the privacy result ciphertext to the second user end.

[0075] In a third aspect, a privacy computing method is provided, including:

[0076] S211: The service disclosure unit of the privacy service end obtains the private data ciphertext sent by the first user end, encapsulates the private data ciphertext through a preset internal transmission protocol, and then sends the encapsulated private data ciphertext to the service ferry module of the privacy service end;

[0077] S212: The service ferry module of the privacy service end transmits the ciphertext of the privacy data that meets the requirements to the service privacy unit based on the preset internal transmission protocol;

[0078] S213: The service privacy unit of the privacy service end strips the encapsulated privacy data ciphertext to obtain the privacy data ciphertext, then decrypts it to obtain the privacy data plaintext, further performs privacy calculation based on the privacy data plaintext to obtain the privacy result, and encrypts the privacy result plaintext to obtain the privacy result ciphertext, and then encapsulates the privacy result ciphertext with a preset internal transmission protocol, and sends the encapsulated privacy result ciphertext to the service ferry module;

[0079] S214: The service ferry module of the privacy service end transmits the privacy result ciphertext that meets the requirements to the service disclosure unit based on the preset internal transmission protocol;

[0080] S215: The service disclosure unit of the privacy service end receives the privacy result ciphertext sent by the service ferry module, and sends the privacy result ciphertext to the second user end.

[0081] According to a fourth aspect, a computer device is provided, comprising:

[0082] a memory storing a computer program;

[0083] A processor is configured to implement the privacy computing method provided in the second aspect when executing the computer program.

[0084] In a fifth aspect, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the privacy computing method provided in the second aspect is implemented.

[0085] In a sixth aspect, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the privacy computing method provided in the second aspect.

[0086] Beneficial effects: The privacy computing system provided by the present application includes a first user terminal, a privacy service terminal and a second user terminal. Among them, the privacy service terminal includes a service disclosure unit and a service privacy unit for data transmission using a preset internal transmission protocol. The service disclosure unit and the service privacy unit can operate independently, and when processing data, there is no need to frequently switch the operating system like the prior art, which greatly improves the operating efficiency. At the same time, the service disclosure unit and the service privacy unit can filter the transmitted data based on the preset internal transmission protocol. On the one hand, the service privacy unit is prevented from directly communicating with the external network, so that the trusted execution environment of privacy computing does not rely on a trusted operating system, thereby avoiding the risk of privacy data in the service privacy unit being stolen; at the same time, it ensures that the service privacy unit can only output the privacy results after privacy computing, so as to ensure the security of privacy data. In addition, the transmission of privacy data between the first user terminal and the privacy service terminal and the transmission of privacy results between the privacy service terminal and the second user terminal are both encrypted. Transmission ensures the full domain security of privacy computing from privacy data input, privacy computing and privacy result output. BRIEF DESCRIPTION OF THE DRAWINGS

[0087] Figure 1 It is a schematic diagram of the structure of a trusted execution environment in the prior art.

[0088] Figure 2 It is a structural diagram of the privacy computing system.

[0089] Figure 3 It is a structural diagram of the first user terminal in Example 1.

[0090] Figure 4It is a structural diagram of the privacy service end in Example 1.

[0091] Figure 5 It is a structural diagram of the second user terminal in Example 1.

[0092] Figure 6 This is a flowchart of the privacy computing method in Example 1.

[0093] Figure 7 It is a structural diagram of the first user terminal in Example 2.

[0094] Figure 8 It is a structural diagram of the privacy service end in Example 2.

[0095] Fig. 9 It is a structural diagram of the second user terminal in Example 2.

[0096] Fig.10 This is a flowchart of the privacy computing method in Example 2.

[0097] Fig.11 It is a schematic diagram of the connection method between the privacy client and the privacy server.

[0098] Fig.12 This is another diagram of the connection method between the privacy client and the privacy server. DETAILED DESCRIPTION

[0099] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0100] With the development of big data, artificial intelligence, and communication technology, the role of information data in the digital age has become increasingly prominent. However, once information data is used or seen, it will lead to the leakage of information data, and this leakage will be spread or copied indefinitely, resulting in the loss of the value of information data. In order to solve this problem, privacy computing related technologies have emerged. In the prior art, privacy computing solutions include but are not limited to homomorphic encryption, differential privacy, and inadvertent transmission. From a technical perspective, there are two main types of solutions for privacy computing: one is to use cryptography; the other is to use a hardware-based trusted execution environment.

[0101] Among them, cryptographic solutions are mainly represented by multi-party secure computing, which is implemented through professional technologies such as homomorphic encryption, differential privacy, and oblivious transmission. The hardware-based trusted execution environment solution is to build a hardware security area, and the private data is only decrypted and calculated in this security area. Figure 1As shown in the figure, taking the typical trusted execution environment ARMTrustZone as an example, its principle is to introduce two protection domains with different permissions in the processor: Secure World and Normal World. Among them, the programs in the Normal World run on a Rich OS operating system, which can provide a Rich Execution Environment (REE). The programs in the Secure World run on another Trusted OS operating system, which provides a Trusted Execution Environment (TEE). In order to ensure the security of privacy computing, at a certain moment, the processor only runs in one of the environments. However, this privacy computing solution has certain security risks: first, when different secure worlds / environments are running, the operating system needs to be switched on the processor, memory and other hardware, which will greatly reduce the computing efficiency of the privacy computing process; second, the rich execution environment and the trusted execution environment run on the same processor, which is directly connected to the external network. Therefore, to ensure the security of privacy computing, the execution of the trusted execution environment depends on the trusted operating system. If the operating system has vulnerabilities or maliciousness, it will still cause the leakage of private information data; finally, although the trusted execution environment ARM TrustZone can build two different protection domains, these two protection domains are based on the same hardware memory, and the memory usually has a data input / output interface to input / output data in the ordinary world, which will cause similar operations to be performed in the secure world, which in turn leads to the leakage of private data, and the above-mentioned privacy computing based on the trusted execution environment is insufficient in security.

[0102] To this end, the present application provides a privacy computing system and method to improve the existing privacy computing system.

[0103] Example 1

[0104] like Figure 2As shown, this embodiment provides a privacy computing system. A specific privacy computing system includes at least one first user terminal, at least one second user terminal and a privacy service terminal. In addition, all first user terminals are connected to the privacy service terminal in communication; all second user terminals are connected to the privacy service terminal in communication. The privacy computing system provided by this embodiment can realize privacy computing of private data to obtain privacy results. The private data and the privacy results exist in a ciphertext state (ciphertext form) and a plaintext state (plaintext form). Here, in order to better illustrate the technical solution of the present invention, the private data in the ciphertext state is defined as the private data ciphertext, and the private data in the plaintext state is defined as the private data plaintext. The privacy result in the ciphertext state is defined as the privacy result ciphertext, and the privacy result in the plaintext state is defined as the privacy result plaintext. The following relationship exists between the private data plaintext and the private data ciphertext: the private data plaintext is encrypted by a key to form the private data ciphertext. Similarly, the private result plaintext is encrypted by a key to form the private result ciphertext. For other types of data, the above rules also exist, which will not be described in detail here.

[0105] Specifically, the first user terminal provides the privacy data ciphertext to the privacy server terminal, and the privacy server terminal obtains the privacy data ciphertext to perform privacy calculation and outputs the privacy result ciphertext to the second user terminal. Figure 3 , the first user end includes a physically isolated first privacy unit and a first public unit. The first privacy unit and the first public unit transmit data using a preset first transmission protocol. Specifically, data transmission between the first privacy unit and the second privacy unit is realized through a first ferry unit. That is, the first privacy unit, the first ferry module and the first public unit are connected in sequence. The first privacy unit and the first public unit are two independent hardware structures, which respectively have their own processors and memories, and the memory of the hardware structure of the first privacy unit has no other external hardware interfaces except for the interface for realizing its internal data communication, that is, it is impossible to copy the data in the memory in the hardware structure to which the first privacy unit belongs.

[0106] The first privacy unit includes a first privacy storage module, a first privacy processing module and a first privacy transmission module. Among them, the first privacy processing module includes a first privacy request submodule and a first privacy generation submodule. The first privacy request submodule is used to obtain a first request for obtaining privacy data from an external network device. The first request refers to the request information for obtaining privacy data submitted by the external network device to the first user terminal. The external network device here refers to the privacy service terminal. Of course, this request information is usually encrypted and needs to be decrypted to form the first request for obtaining privacy data. The first privacy request submodule notifies the first privacy generation submodule to generate customized privacy data based on the first request plaintext. Of course, the first privacy generation submodule can also generate privacy data autonomously. At this time, the privacy data is in plaintext and cannot be directly transmitted to the external network device. Then, the first privacy processing module transmits the privacy data plaintext to the first privacy transmission module, and then the first privacy transmission module encapsulates the privacy data plaintext based on the preset first transmission protocol. The purpose of encapsulation here is to add a transmission protocol to the privacy data plaintext so as to transmit the privacy data from the first privacy unit to the first public unit through the first ferry unit. The transmission protocol is defined as the first transmission protocol. Unlike the network communication protocol when the external network device transmits network data, it needs to set the 7-layer protocol stack format including the application layer, presentation layer, session layer, transport layer, network layer, data link layer and physical layer. The first transmission protocol preset in this application is used as the internal transmission protocol of the first user end, and only needs to set the 4-layer protocol stack format including the data link layer, network layer, transport layer and application layer. Among them, the link layer includes the communication ID, version number Ver, length Len and type Type. The network layer can carry timestamp information, etc.

[0107] The first ferry unit includes a first ferry module and a first encryption and decryption module. Among them, the first ferry module is connected to the first privacy unit and the first public unit respectively. The first encryption and decryption module is connected to the first ferry module. After receiving the privacy data plaintext encapsulated based on the first transmission protocol, the first ferry module verifies the encapsulated privacy data plaintext based on the preset first transmission protocol: if the format of the encapsulated privacy data plaintext does not meet the format requirements of the preset first transmission protocol, it cannot be transmitted outward; if it meets the format requirements of the first transmission protocol, the encapsulated privacy data plaintext is sent to the first encryption and decryption module. The first encryption and decryption module extracts the privacy data plaintext from the encapsulated privacy data plaintext and encrypts it to form a privacy data ciphertext, and then returns the privacy data ciphertext to the first ferry module in the encapsulation format of the first transmission protocol, and the first ferry module transmits the encapsulated privacy data ciphertext to the first public unit.

[0108] The first public unit includes a first public transmission module, a first public conversion module and a first public communication module connected in sequence. The first public transmission module receives the encapsulated private data ciphertext sent by the first ferry module, then strips the first transmission protocol on the encapsulated private data ciphertext to obtain the private data ciphertext, and transmits the private data ciphertext to the first public conversion module. The first public conversion module encapsulates the private data ciphertext based on the transmission requirements and the network communication protocol, and specifically can adopt any one of the TCP / IP protocol, IPX / SPX protocol and NetBEUI protocol. From then on, the private data ciphertext has met the transmission requirements to the external network device, and the private data ciphertext encapsulated with the network communication protocol is transmitted to the privacy service end through the classic network channel.

[0109] Combination Figure 4 The privacy service end includes a service disclosure unit and a service privacy unit connected in sequence. Data is transmitted between the service disclosure unit and the service privacy unit based on a preset internal transmission protocol. Similar to the structure of the first user end, the service disclosure unit and the service privacy unit of the privacy service end are physically isolated from each other, and a communication connection is established through a service ferry unit. The service disclosure unit and the service privacy unit belong to two independent hardware structures, which have their own processors and memories respectively. In addition to the interface for implementing its internal data communication, the memory of the hardware structure of the service privacy unit has no other external hardware interfaces, that is, it is impossible to copy the data in the memory of the hardware structure to which the service privacy unit belongs. The processor of the service disclosure unit and the processor of the service privacy unit run on their respective operating systems.

[0110] The service disclosure unit is configured to obtain the private data sent by the first user end, and encapsulate the private data with a preset internal transmission protocol and send it to the service privacy unit. First, the service disclosure unit encapsulates the private data ciphertext sent by the first user end based on the preset internal transmission protocol, and sends the encapsulated private data ciphertext to the service ferry module. Specifically, the service disclosure unit includes a public communication module, a public conversion module and a public transmission module. Among them, the public communication module is used to establish a communication connection with an external network, receive the private data ciphertext sent by the first user end through the public communication module, and transmit the private data ciphertext to the public conversion module. Since the private data ciphertext is encapsulated by the network communication protocol, the network communication protocol attached to the private data ciphertext is unloaded by the public conversion module to extract the real private data ciphertext. Further, the public conversion module sends the private data ciphertext to the public transmission module. First, the public transmission module encapsulates the received private data ciphertext based on the preset internal transmission protocol. Among them, the preset internal transmission protocol is to transform the format of the received private data ciphertext in a pre-configured manner so that it meets the customized requirements of internal communication transmission. For example, the privacy data ciphertext is inserted at the front, end or middle position of the pre-formatted character string. The internal transmission protocol here can adopt a configuration method similar to the first transmission protocol. Taking into account the differences in internal transmission objects, the specific configuration parameters of the internal transmission protocol should be different from those of the first transmission protocol. Since the specific configuration parameters are irrelevant to the innovation of the present invention and the specific application scenarios are different, this application will not be described in detail. In actual operation, the configuration is performed according to actual needs. The public transmission module is connected to the service ferry unit, and transmits the privacy data ciphertext encapsulated based on the preset internal transmission protocol to the service ferry unit.

[0111] The service ferry unit receives the encapsulated private data sent by the service public unit, and transmits the private data that meets the requirements to the service privacy unit based on the preset internal transmission protocol. Specifically, the private data sent by the service public unit received by the service ferry unit is the encapsulated private data ciphertext. The service ferry unit includes a service ferry module and a service encryption and decryption module connected to the service ferry module. The service ferry module is connected to the public transmission module and is used to receive the encapsulated private data ciphertext sent by the public transmission module. Then, the service ferry module verifies the encapsulated private data ciphertext and determines whether to further transmit the data based on the verification result. If the encapsulated private data ciphertext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated private data ciphertext to the service encryption and decryption module for decryption. The service encryption and decryption module first extracts the private data ciphertext for decryption to obtain the private data plaintext, and returns the private data plaintext to the service ferry module in the format of the internal transmission protocol. Finally, the service ferry module transmits the private data plaintext to the service privacy unit, and the private data plaintext is in the format of packaging with the internal transmission protocol. If the encapsulated private data ciphertext does not meet the requirements of the internal transmission protocol, the private data is prohibited from being further transmitted to the service privacy unit.

[0112] The service privacy unit is used to obtain privacy data, and perform privacy calculation based on the privacy data in plain text state to obtain privacy results. At the same time, the service privacy unit further encapsulates the privacy results with a preset internal transmission protocol, and sends the encapsulated privacy results to the service disclosure unit. The service privacy unit includes a privacy transmission module, a privacy storage module and a privacy processing module. And the privacy transmission module, the privacy storage module and the privacy processing module are connected in sequence. Among them, the privacy transmission module is connected to the service ferry module. The encapsulated privacy data plaintext sent by the service ferry module is received through the privacy transmission module, and then the privacy data plaintext is obtained after the internal transmission protocol is stripped, and the obtained privacy data plaintext is sent to the privacy storage module for storage. At this time, the privacy storage module stores the received privacy data plaintext in plain text. Of course, in order to improve security, the privacy data plaintext can also be encrypted based on the preset encryption rules before storage. The privacy processing module includes a privacy calculation submodule. The privacy data plaintext is calculated by the privacy calculation submodule to obtain a privacy result. The privacy result at this time is the privacy result plaintext. The privacy calculation submodule further sends the privacy result plaintext to the privacy transmission module. After receiving the plaintext of the privacy result, the privacy transmission module encapsulates the plaintext of the privacy result based on the internal transmission protocol, and sends the encapsulated plaintext of the privacy result to the service ferry module.

[0113] After receiving the encapsulated privacy result plaintext sent by the service privacy unit, the service ferry module first verifies the encapsulated privacy result plaintext, and determines whether the data needs to be further transmitted based on the verification result. If the encapsulated privacy result plaintext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated privacy result plaintext to the service encryption and decryption module for encryption. The service encryption and decryption module first extracts the privacy result plaintext and encrypts it to obtain the privacy result ciphertext, and returns the privacy result ciphertext to the service ferry module in the format of the internal transmission protocol. Finally, the service ferry module transmits the privacy result ciphertext to the public transmission module of the service disclosure unit. At this time, the privacy result ciphertext is in the format of encapsulation of the internal transmission protocol. If the encapsulated privacy result plaintext does not meet the requirements of the internal transmission protocol, the privacy result is prohibited from being further transmitted to the service disclosure unit, and of course there is no process of encrypting the privacy result plaintext.

[0114] The public transmission module is connected to the service ferry module of the service ferry unit to receive the encapsulated privacy result ciphertext sent by the service ferry module, then strip the internal transmission protocol to obtain the privacy result ciphertext, and send the privacy result ciphertext to the public conversion module. After the public conversion module obtains the privacy result ciphertext, it adds the network communication protocol to the obtained privacy result, and then sends it to the public communication module. Finally, the public communication module sends the privacy result ciphertext attached with the network communication protocol to the second user end.

[0115] Combination Figure 5 , the second user end is used to receive the privacy result provided by the privacy service end. The second user end includes a physically isolated second privacy unit and a second public unit. The second privacy unit and the second public unit transmit data using a preset second transmission protocol. Specifically, the second user end includes a second public unit, a second ferry unit and a second privacy unit connected in sequence. Among them, the second public unit is used to obtain the privacy result ciphertext sent by the privacy service end. The second public unit includes a second public communication unit, a second public conversion module and a second public transmission unit connected in sequence. The second public communication unit is an interface for data transmission with an external network. The second public communication unit obtains the privacy result ciphertext sent by the privacy service end, and the privacy result ciphertext at this time is attached with a network communication protocol. The second public communication unit sends the privacy result ciphertext to the second public conversion module. The second public conversion module strips the attached network communication protocol to obtain the privacy result ciphertext, and then sends the privacy result ciphertext to the second public transmission unit. The second public transmission unit encapsulates the privacy result ciphertext based on the preset second transmission protocol, and sends the encapsulated privacy result ciphertext to the second ferry unit. The protocol stack format of the second transmission protocol can also refer to the first transmission protocol, which will not be repeated here.

[0116] The second ferry unit includes a second ferry module and a second encryption and decryption module connected to the second ferry module. Among them, the second ferry module is connected to the second privacy unit and the second public unit respectively. After the second ferry module receives the privacy result ciphertext encapsulated based on the second transmission protocol, it verifies the encapsulated privacy result ciphertext based on the preset second transmission protocol. If the format of the encapsulated privacy result ciphertext does not meet the format requirements of the preset second transmission protocol, it cannot be transmitted inward. If the format of the encapsulated privacy result ciphertext meets the second transmission format, the encapsulated privacy result ciphertext is sent to the second encryption and decryption module. The second encryption and decryption module extracts the privacy result ciphertext in the encapsulated privacy result ciphertext and decrypts it to form a privacy result plaintext, and then returns the privacy result plaintext to the second ferry module in the encapsulation format of the second transmission protocol, and the second ferry module transmits the encapsulated privacy result plaintext to the second privacy unit.

[0117] The second privacy unit includes a second privacy storage module, a second privacy processing module and a second privacy transmission module. Specifically, the second privacy transmission module is connected to the second ferry module to obtain the encapsulated privacy result plaintext sent by the second ferry module, and strip the second transmission protocol to obtain the privacy result plaintext. The second privacy storage module is connected to the second privacy transmission module, and is used to obtain the privacy result plaintext sent by the second privacy transmission module and store it. The storage here can be plaintext storage, or it can be encrypted using preset encryption rules and then stored. The second privacy processing module is connected to the second privacy storage module, and is used to obtain the privacy result plaintext for the next application operation or direct reading and use.

[0118] In the actual privacy computing process, the initiation process of privacy computing may start from the second user end. Specifically, the second privacy processing module of the second user end includes a second privacy request submodule. The second privacy request submodule is used to generate a second request for obtaining a privacy result, and send the second request plaintext to the second privacy transmission module. The second privacy transmission module encapsulates the second request plaintext based on the second transmission protocol, and then transmits it to the second ferry module. The second ferry module sends the encapsulated second request plaintext to the second encryption and decryption module. The second encryption and decryption module extracts the second request plaintext and encrypts it to form a second request ciphertext, and returns the second request ciphertext to the second ferry module in the encapsulation format of the second transmission protocol. The second ferry module then sends the encapsulated second request ciphertext to the second public transmission module, and the second public transmission module strips off the second transmission protocol to obtain the second request ciphertext, and sends the second request ciphertext to the second public conversion module. The second public conversion module adds a network communication protocol to the received second request ciphertext, and further sends it to the second public communication module. The second public communication module sends the ciphertext of the second request to the privacy service end through a public classic network channel.

[0119] After receiving the ciphertext of the second request, the public communication module of the privacy service end transmits the second request to the service privacy unit with reference to the internal transmission method for obtaining the ciphertext of the privacy data. The second request is in a ciphertext state in the service public unit, but in a plaintext state in the service privacy unit. The privacy processing module of the service privacy unit obtains the plaintext of the second request. Furthermore, the privacy request submodule generates a first request plaintext for obtaining the privacy data from a specific first user end based on the plaintext of the second request. The first request is transmitted to the public communication module with reference to the internal transmission method for outputting the plaintext of the privacy result, and then the public communication module sends the first request ciphertext to the specific first user end through the classic network channel.

[0120] After the first public communication module of the first user terminal receives the first request ciphertext, it first strips the network communication protocol through the first public conversion module, and then transmits the first request ciphertext stripped of the network communication protocol to the first public transmission unit. The first public transmission unit encapsulates the first request ciphertext based on the first transmission protocol, and sends the encapsulated first request ciphertext to the first ferry module. The first ferry unit performs verification based on the first transmission protocol, and the specific verification process refers to the verification process of the first ferry module for privacy data. After the verification is passed, the encapsulated first request ciphertext is transmitted to the first encryption and decryption module. The first encryption and decryption module extracts the first request ciphertext and decrypts it to obtain the first request plaintext, and returns the first request plaintext to the first ferry module in the format of the first transmission protocol. The first ferry module sends the encapsulated first request plaintext to the first privacy transmission module. The first privacy transmission module strips the first transmission protocol to obtain the first request plaintext, and sends it to the first privacy storage module for storage. Finally, the first privacy request submodule notifies the first privacy generation submodule to generate customized privacy data based on the first request plaintext.

[0121] Thus, we have built a feasible execution environment based on hardware architecture for the security of privacy computing. And further generate a series of benefits, specifically as follows:

[0122] First, the privacy server, which mainly performs privacy computing, includes an independently running service disclosure unit and a service privacy unit. These two units each have their own processor and memory, and on this basis, have their own operating systems to perform independent operations. There is no need to frequently switch operating systems like the existing technology, which greatly improves the operating efficiency of privacy computing.

[0123] Secondly, the service ferry module establishes a data transmission channel between the service public unit and the service unit, and only allows specific forms of data transmission, thereby filtering the data transmitted between the service public unit and the service privacy unit, thereby maintaining the operating mode of privacy data input and privacy result output, that is, privacy data can only be input, and the output is the privacy result; at the same time, this method makes it unnecessary to set other external interfaces for the storage of the service privacy unit except the internal transmission interface, ensuring that the privacy data will not be copied, further preventing the leakage of privacy data.

[0124] Secondly, the service privacy unit avoids direct communication with the external network and builds a completely feasible execution environment. This trusted execution environment does not rely on a trusted operating system, further avoiding the risk of privacy data in the privacy unit being stolen or attacked, and effectively addressing the vulnerabilities of the feasible execution environment in the existing technology.

[0125] Finally, on the basis of building a completely thorough trusted execution loop, combined with the application of cryptography, the private data and the private results obtained based on the private data are all in the encrypted state in the service disclosure unit connected to the external network. Therefore, the security of the private data and private results in the privacy computing process is effectively guaranteed; at the same time, the transmission of private data, the storage of private data, and the output of private results in the form of ciphertext also ensure the security of privacy computing; and on this basis, the request for private data and the request for private results are realized in the form of ciphertext, further improving the security level of privacy computing. In this way, the information security of the entire information domain in the privacy computing process is constructed, referred to as global security.

[0126] In the following, a privacy computing method is proposed in combination with the privacy computing system proposed in this embodiment. Figure 6 , the process is as follows:

[0127] S11: The service disclosure unit of the privacy service end obtains the private data ciphertext sent by the first user end, encapsulates the private data ciphertext through a preset internal transmission protocol, and then sends the encapsulated private data ciphertext to the service ferry module of the privacy service end;

[0128] S12: The service ferry module of the privacy service end sends the encapsulated privacy data ciphertext that meets the requirements to the service encryption and decryption module based on the preset internal transmission protocol;

[0129] S13: The service encryption and decryption module of the privacy service end extracts the ciphertext of the privacy data and decrypts it to obtain the plaintext of the privacy data, and then returns the plaintext of the privacy data to the service ferry module in a format that complies with the internal transmission protocol, and then the service ferry module transmits it to the service privacy unit;

[0130] S14: The service privacy unit of the privacy server strips the plaintext of the encapsulated privacy data to obtain the plaintext of the privacy data, then performs privacy calculation based on the plaintext of the privacy data to obtain the privacy result, and encapsulates the plaintext of the privacy result with a preset internal transmission protocol, and sends the encapsulated plaintext of the privacy result to the service ferry module;

[0131] S15: The service ferry module of the privacy service end sends the encapsulated privacy result that meets the requirements to the service encryption and decryption module based on the preset internal transmission protocol;

[0132] S16: extract the privacy result plaintext and encrypt it to obtain the privacy result ciphertext, then return the privacy result ciphertext to the service ferry module in a format that complies with the internal transmission protocol, and then the service ferry module transmits it to the service disclosure unit;

[0133] S17: The service disclosure unit of the privacy service end receives and strips the ciphertext of the privacy result to obtain the ciphertext of the privacy result, and then sends the ciphertext of the privacy result to the second user end.

[0134] Compared with the prior art, the technical solution proposed in this implementation has significant improvements in both the infrastructure of the privacy computing system and the privacy computing process, and can greatly improve the efficiency and security of privacy computing. However, we should also note that there is still room for improvement in this technical solution. For example, the service ferry unit is needed to transmit privacy data from the service public unit to the service privacy unit and to transmit privacy results from the service privacy unit to the service public unit. As an independent transmission medium, the service ferry unit needs to encrypt and decrypt privacy data and privacy results, that is, there are plaintext privacy data and plaintext privacy results in the transmission medium. Although it is not directly connected to the external network, it increases risk points and improves security risks.

[0135] Example 2

[0136] like Figure 2 As shown, this embodiment provides a privacy computing system, including a first user terminal, a second user terminal and a privacy service terminal. Among them, the number of first user terminals is at least one, and the first user terminal and the privacy service terminal are communicatively connected. The privacy data ciphertext can be provided to the privacy service terminal through the first user terminal. After obtaining the privacy data ciphertext, the privacy service terminal decrypts it to obtain the privacy data plaintext, and then obtains the privacy calculation result by performing privacy calculation on the privacy data plaintext, and then encrypts the privacy result plaintext to form a privacy result ciphertext, and sends the privacy result ciphertext to the second user terminal. Like the first user terminal, the number of second user terminals is at least one, and can be multiple, and these second user terminals respectively establish communication connections with the privacy service terminal.

[0137] Specific, combined Figure 7 , the first user end includes a first privacy unit and a first public unit. Specifically, the first privacy unit and the second privacy unit are physically isolated, and data transmission between the first privacy unit and the second public unit is realized through the first ferry module. That is, the first privacy unit, the first ferry module and the first public unit are connected in sequence. The first privacy unit and the first public unit are two independent hardware structures, and the two hardware structures respectively have their own processors and memories, and the memory of the hardware structure of the first privacy unit has no other external hardware interfaces except the interface for realizing its internal data communication, that is, it is impossible to copy the data in the memory in the hardware structure to which the first privacy unit belongs.

[0138] The first privacy unit includes a first privacy storage module, a first privacy processing module and a first privacy transmission module. Among them, the first privacy processing module includes a first privacy request submodule, a first privacy generation submodule and a first privacy encryption and decryption submodule. The first privacy request submodule is used to obtain a first request for obtaining privacy data from an external network device. The first request refers to the request information for obtaining privacy data submitted by the external network device to the first user terminal. The external network device here refers to the privacy service terminal. Of course, this request information is usually encrypted and needs to be decrypted by the first privacy encryption and decryption submodule to form the plaintext of the first request. The first privacy request submodule notifies the first privacy generation submodule to generate customized privacy data based on the plaintext of the first request. Of course, the first privacy generation submodule can also generate privacy data autonomously. At this time, the privacy data is in a plaintext state and cannot be directly transmitted to the external network device. It needs to be encrypted by the first privacy encryption and decryption submodule to form a ciphertext of privacy data. The process of decrypting the privacy data request and encrypting the privacy data plaintext will be described later. The first privacy processing module transmits the privacy data ciphertext to the first privacy transmission module, and then the first privacy transmission module encapsulates the privacy data ciphertext based on the preset first transmission protocol. The purpose of encapsulation here is to add a transmission protocol to the private data ciphertext so as to transmit the private data ciphertext from the first private unit to the first public unit through the first ferry module. The protocol stack format of the first transmission protocol can refer to the technical solution of the first embodiment.

[0139] After receiving the encapsulated privacy data ciphertext sent by the first privacy transmission module, the first ferry module verifies the encapsulated privacy data ciphertext based on the preset first transmission protocol: if the format of the encapsulated privacy data ciphertext does not meet the format requirements of the preset first transmission protocol, it cannot be transmitted; if it meets the format requirements of the first transmission protocol, the encapsulated privacy data ciphertext is transmitted to the first public unit.

[0140] Specifically, the first public unit includes a first public transmission module, a first public conversion module and a first public communication module. The first public transmission module receives the encapsulated private data ciphertext sent by the first ferry module, then strips the first transmission protocol on the encapsulated private data ciphertext to obtain the private data ciphertext, and transmits the private data ciphertext to the first public conversion module. The first public conversion module encapsulates the private data ciphertext based on the transmission requirements and the network communication protocol, and can specifically adopt any one of the TCP / IP protocol, IPX / SPX protocol and NetBEUI protocol. From then on, the private data ciphertext has met the transmission requirements to the external network device, and the private data ciphertext encapsulated with the network communication protocol is transmitted to the privacy service end through the classic network channel.

[0141] Combination Figure 8 , the privacy service end includes a service disclosure unit and a service privacy unit connected in sequence. Data is transmitted between the service disclosure unit and the service privacy unit based on a preset internal transmission protocol. Referring to the technical solution of Example 1, the service disclosure unit and the service privacy unit of the privacy service end are physically isolated, and data communication between the two is realized through the service ferry unit. The service disclosure unit, the service ferry unit and the service privacy unit are connected in sequence. The service disclosure unit and the service privacy unit belong to two independent hardware structures, which have their own processors and memories respectively, and the memory of the hardware structure of the service privacy unit has no other external hardware interfaces except the interface for realizing its internal data communication, that is, it is impossible to copy the data in the memory of the hardware structure to which the service privacy unit belongs. The processor of the service disclosure unit and the processor of the service privacy unit run on their respective operating systems.

[0142] The service disclosure unit can encapsulate the private data ciphertext based on the preset internal transmission protocol, and send the encapsulated private data ciphertext to the service ferry module. Specifically, the service disclosure unit includes a public communication module, a public conversion module and a public transmission module. Among them, the public communication module is used to establish a communication connection with the external network, receive the private data ciphertext sent by the first user terminal through the public communication module, and transmit the private data ciphertext to the public conversion module. Since the private data ciphertext is encapsulated by the network communication protocol, the network communication protocol attached to the private data ciphertext is stripped by the public conversion module, and the private data ciphertext is obtained. Further, the private data ciphertext of the public conversion module is sent to the public transmission module. First, the public transmission module encapsulates the received private data ciphertext based on the preset internal transmission protocol. Among them, the preset internal transmission protocol uses a pre-configured method to transform the format of the received private data ciphertext so that it meets the customized requirements of internal communication transmission. The internal transmission protocol here can be configured in a similar manner to the first transmission protocol, which is not described in detail here. The public transmission module is connected to the service ferry unit, and transmits the ciphertext of the private data encapsulated based on the preset internal transmission protocol to the service ferry unit.

[0143] The service ferry unit receives the encapsulated privacy data sent by the service public unit, and transmits the privacy data that meets the requirements to the service privacy unit based on the preset internal transmission protocol. Specifically, the service ferry unit includes a service ferry module. The service ferry module connects the service public unit and the service privacy unit. Its specific function is to verify whether the received information data meets the internal transmission protocol. If it meets the internal transmission protocol, it is allowed to pass through to realize the ferrying of information data between the service privacy unit and the service public unit; if it does not meet the requirements, it is prohibited to pass through. Specific description: If the information data is a ciphertext of privacy data encapsulated according to the preset internal transmission protocol, the ciphertext of privacy data is directly transmitted to the service privacy unit. That is, other abnormal and non-safe information data cannot be input from the service public unit to the service privacy unit. Similarly, unauthorized information data cannot be output from the service privacy unit to the service public unit. Thereby, the leakage of privacy data is avoided and the security of privacy computing is improved.

[0144] The service privacy unit is used to obtain privacy data, and perform privacy calculation based on the privacy data in plain text to obtain privacy results. At the same time, the service privacy unit further encapsulates the privacy results with a preset internal transmission protocol, and sends the encapsulated privacy results to the service disclosure unit. Specifically, the service privacy unit includes a privacy transmission module, a privacy processing module, and a privacy storage module connected in sequence. Among them, the privacy transmission module is connected to the service ferry module to realize the information data transmission between the service ferry module. The privacy processing module includes a privacy encryption and decryption submodule, a privacy calculation submodule, and a privacy request submodule. Specifically, the privacy transmission module receives the encapsulated privacy data ciphertext sent by the service ferry module, and then strips the internal transmission protocol to obtain the privacy data ciphertext, and finally transmits the obtained privacy data ciphertext to the privacy processing module. On the one hand, the received privacy data ciphertext can be directly stored in the privacy storage unit. On the other hand, after the privacy encryption and decryption submodule obtains the privacy data ciphertext, the privacy data ciphertext can be first decrypted to obtain the privacy data plaintext, and then the privacy encryption and decryption submodule encrypts the privacy data plaintext according to the preset encryption rules to form a new privacy data ciphertext, and stores the new privacy data ciphertext in the privacy storage unit. When there is a need for privacy computing, the privacy computing submodule first calls the stored privacy data ciphertext, and decrypts it through the privacy encryption and decryption submodule to form a privacy data plaintext, and then calls the pre-stored privacy algorithm model based on the privacy computing request to perform privacy computing on the privacy data plaintext to obtain a privacy result. Here, we briefly explain the privacy algorithm model, which is pre-stored in the privacy storage module in a pre-configured manner. This algorithm model can be pre-trained before application to improve the practicality of the algorithm model. Returning to the question raised by Academician Yao Qizhi in the background technology, the privacy data input by the two rich men as the two first user terminals are their respective asset data, and the algorithm model can be simply described as comparing the two asset data. Of course, this algorithm model is relatively simple. A more complex algorithm model will also involve the calculation of different asset data and liability data and the calculation of currency exchange rates before comparing asset data. And a further algorithm model will also involve the comparison of assets in different periods and the expectation of future wealth growth. Therefore, the application of the algorithm model has a great relationship with actual needs, and this application itself has nothing to do with the innovation of the present invention. Therefore, the design, training and specific calculation process of the algorithm model are not described in detail in the embodiments of the present application. In addition, if the privacy result is not described in plain text or ciphertext in this application, the privacy result refers to the privacy result plaintext. Furthermore, the privacy encryption and decryption submodule encrypts the privacy result plaintext to obtain the privacy result ciphertext and then transmits it to the privacy transmission unit. The privacy transmission unit encapsulates the privacy result ciphertext according to the preset internal transmission protocol, and sends the encapsulated privacy result ciphertext to the service ferry module.As mentioned above, the service ferry module needs to verify whether the received information data satisfies the internal transmission protocol. If it does, it is allowed to pass; if it does not, it is prohibited to pass. If the information data is a privacy result ciphertext encapsulated according to the preset internal transmission protocol, it is transmitted to the service disclosure unit. After receiving the encapsulated privacy result ciphertext sent by the service ferry module, the public transmission module of the service disclosure unit strips the internal transmission protocol to obtain the privacy result ciphertext, and sends the privacy result ciphertext to the public conversion module. The public conversion module attaches the network communication protocol to the privacy result ciphertext and sends it to the public communication module. Further, the public communication module sends the privacy result ciphertext attached with the network communication protocol to the second user end. In actual applications, the public transmission module and the public conversion module can be combined into an integral module dedicated to the processing of the transmission protocol.

[0145] Combination Fig. 9 , the second user end includes a second public unit, a second ferry module and a second privacy unit connected in sequence. Among them, the second public unit is used to obtain the privacy result ciphertext sent by the privacy service end. The second public unit includes a second public communication unit, a second public conversion module and a second public transmission unit connected in sequence. The second public communication unit is configured as an interface for data transmission with an external network. The privacy result ciphertext sent by the privacy service end can be obtained through the second public communication unit, and the privacy result ciphertext at this time is attached with a network communication protocol. The second public communication unit sends the privacy result ciphertext to the second public conversion module. The second public conversion module strips the attached network communication protocol to obtain the privacy result ciphertext, and then sends the privacy result ciphertext to the second public transmission unit. The second public transmission unit encapsulates the privacy result ciphertext based on the preset second transmission protocol, and sends the encapsulated privacy result ciphertext to the second ferry module. The protocol stack format of the second transmission protocol can also refer to the first transmission protocol, which will not be repeated here.

[0146] The second ferry module is used to transmit the privacy result ciphertext that meets the requirements to the second privacy unit based on the preset second transmission protocol. The second ferry module needs to verify whether the received information data meets the second transmission protocol. If it does, it is allowed to pass; if it does not, it is prohibited to pass. If the information data is the privacy result ciphertext encapsulated according to the preset second transmission protocol, it is transmitted to the second privacy unit.

[0147] The second privacy unit is used to strip the encapsulated privacy result ciphertext according to the second transmission protocol to obtain the privacy result ciphertext, and decrypt it to obtain the privacy result plaintext. Specifically, the second privacy unit includes a second privacy transmission module, a second privacy processing module and a second privacy storage module. The second privacy transmission module receives the privacy result ciphertext encapsulated according to the preset second transmission protocol sent by the second ferry module, strips the second transmission protocol, obtains the privacy result ciphertext, and then transmits the privacy result ciphertext to the second privacy processing module. The second privacy processing module includes a second privacy encryption and decryption submodule, a second privacy result submodule and a second privacy request submodule. Among them, the second privacy encryption and decryption submodule decrypts the privacy result ciphertext to obtain the privacy result plaintext, and sends it to the second privacy result submodule for the next application operation. At the same time, the second privacy encryption and decryption submodule can further encrypt the privacy result plaintext based on the new encryption rule to form a new privacy result ciphertext, and send it to the second privacy storage unit for secure storage.

[0148] As in Example 1, in the actual privacy computing process, the initiation process of privacy computing may start from the second user end. Specifically, the second privacy request submodule of the second user end is used to generate a second request for obtaining a privacy result. The second privacy encryption and decryption submodule is used to encrypt the plaintext of the second request to form the ciphertext of the second request after obtaining it, and send the ciphertext of the second request to the second privacy transmission module. The second transmission module encapsulates the ciphertext of the second request based on the second transmission protocol, and then transmits it to the second public transmission module through the second ferry unit. The second public transmission module is used to strip the second transmission protocol from the encapsulated ciphertext of the second request to obtain the ciphertext of the second request, and send the ciphertext of the second request to the second public conversion module, which adds the network communication protocol and further sends it to the second public communication module. The second public communication module sends the ciphertext of the second request to the privacy service end through the public classic network channel.

[0149] After receiving the ciphertext of the second request, the public communication module of the privacy service end transmits the ciphertext of the second request to the privacy processing module with reference to the internal transmission method for obtaining the ciphertext of the privacy data. Furthermore, the privacy encryption and decryption submodule obtains the plaintext of the second request by decryption. The privacy request submodule generates a first request to obtain the privacy data from a specific first user end based on the plaintext of the second request. The privacy request submodule further encrypts the plaintext of the first request to form the ciphertext of the first request, and transmits the first request ciphertext to the public communication module with reference to the internal transmission method for outputting the ciphertext of the privacy result, and then the public communication module sends it to the specific first user end through the classic network channel.

[0150] After the first public communication module of the first user terminal receives the ciphertext of the first request, it first strips the network communication protocol through the first public conversion module, and then transmits the ciphertext of the first request stripped of the network communication protocol to the first public transmission unit. The first public transmission unit encapsulates the ciphertext of the first request based on the first transmission protocol, and sends the encapsulated ciphertext of the first request to the first privacy transmission module through the first ferry unit. After stripping the first transmission protocol, the first privacy transmission module further transmits the ciphertext of the first request to the first privacy processing module. As for how the first privacy processing module subsequently processes the first request, it has been explained above and will not be explained here.

[0151] Next, we will propose a privacy computing method based on the privacy computing system. Fig.10 , the process is as follows:

[0152] S21: The service disclosure unit of the privacy server obtains the privacy data ciphertext sent by the first user terminal, encapsulates the privacy data ciphertext through a preset internal transmission protocol, and then sends the encapsulated privacy data ciphertext to the service ferry module of the privacy server.

[0153] S22: The service ferry module of the privacy service end transmits the ciphertext of the privacy data that meets the requirements to the service privacy unit based on the preset internal transmission protocol.

[0154] S23: The service privacy unit of the privacy service end strips the encapsulated privacy data ciphertext to obtain the privacy data ciphertext, and then decrypts it to obtain the privacy data plaintext, further performs privacy calculation based on the privacy data plaintext to obtain the privacy result, and encrypts the privacy result plaintext to obtain the privacy result ciphertext, and then encapsulates the privacy result ciphertext with a preset internal transmission protocol, and sends the encapsulated privacy result ciphertext to the service ferry module.

[0155] S24: The service ferry module of the privacy service end transmits the ciphertext of the privacy result that meets the requirements to the service disclosure unit based on the preset internal transmission protocol.

[0156] S25: The service disclosure unit of the privacy service end receives the encapsulated privacy result ciphertext sent by the service ferry module, and sends the privacy result ciphertext to the second user end.

[0157] The technical solution of this embodiment can not only achieve all the technical effects of the technical solution of embodiment 1. Moreover, based on embodiment 1, the privacy data and privacy results only exist in plain text in the service privacy unit, completely avoiding the security risks brought by the transmission medium service ferry unit.

[0158] Example 3

[0159] In the actual privacy computing process, facing different privacy computing processes, the roles of the first user terminal and the second user terminal may change. That is, in a privacy computing process, the first user terminal is used to generate privacy data, and the second user terminal is used to obtain privacy results. In another privacy computing process, the original first user terminal may be used to obtain privacy results, and its role changes to the second user terminal; the original second user terminal may be used to generate privacy data, and its role changes to the first user terminal. Correspondingly, the functions of the units and modules inside the first user terminal and the second user terminal will also change accordingly. In order to better describe the relationship between the first user terminal / second user terminal and the privacy service terminal, we uniformly define the first user terminal and the second user terminal as privacy user terminals. The communication connection relationship between the privacy user terminal and the privacy service terminal can be expressed as Fig.11 At this time, the private data ciphertext, the first request ciphertext, the private result ciphertext and the second request ciphertext are all transmitted through the classic network channel.

[0160] It should be noted that in order to improve the security of private data and privacy computing, we have also combined cryptography-related content. The following is a description of the solution for the relevant content.

[0161] First option:

[0162] The first user terminal has its own first key pair (Pub1, Pri1), wherein Pub1 is the public key of the first user terminal, which is open to the public; Pri1 is the private key of the first user terminal, which is kept confidential. The first privacy unit of the first user terminal includes a first key module, which is used to store the first key pair (Pub1, Pri1). Similarly, the second privacy unit of the second user terminal includes a second key module, which stores a second key pair (Pub2, Pri2). Pub2 is the public key of the second user terminal; Pri2 is the private key of the second user terminal. The service privacy unit of the privacy service terminal includes a privacy key module, which stores a privacy key pair (Pub3, Pri3). Pub3 is the public key of the privacy service terminal; Pri3 is the private key of the privacy service.

[0163] The first privacy generating submodule of the first user terminal generates the privacy data X 明 After that, the first privacy encryption and decryption submodule / the first encryption and decryption module uses the privacy server public key Pub3 to encrypt the private data ciphertext Then the privacy server receives After that, the first privacy encryption and decryption submodule / first encryption and decryption module can use its own private key Pri3 to decrypt and obtain the privacy data plaintext X 明 The first request is the opposite process: the privacy request submodule of the privacy server generates the first request Y 明The first privacy encryption and decryption submodule / the first encryption and decryption module uses the public key Pub1 of the first user terminal to encrypt and form the ciphertext of the first request The first client receives After that, the first privacy encryption and decryption submodule / first encryption and decryption module can use its own private key Pri1 to decrypt and obtain the plaintext Y of the first request. 明 Similarly, the privacy result Z and the second request Q are further represented. The privacy calculation submodule of the privacy server generates the privacy result Z 明 The privacy encryption and decryption submodule / privacy encryption and decryption module uses the public key Pub2 of the second user end to encrypt and form a privacy result ciphertext The second client receives After that, the privacy encryption and decryption submodule / privacy encryption and decryption module can use its own private key Pri2 to decrypt and obtain the privacy result plaintext Y 明 The second privacy request submodule of the second user terminal generates a second request Q 明 After that, the second privacy encryption and decryption submodule / second privacy encryption and decryption module uses the privacy server public key Pub3 to encrypt and form the ciphertext of the second request Then the privacy server receives After that, the second privacy encryption and decryption submodule / second privacy encryption and decryption module can use its own private key Pri3 to decrypt and obtain the plaintext X of the second request. 明 .

[0164] At this point, there is a problem that attackers may tamper with the above data, so this solution is further improved:

[0165] The first privacy processing module of the first user terminal also includes a first privacy authentication submodule. Specifically, the first privacy generation submodule of the first user terminal generates the privacy data X 明 After that, the first privacy encryption and decryption submodule uses the privacy server public key Pub3 to encrypt the private data ciphertext The first privacy authentication submodule uses a one-way hash function to obtain a fixed-digit value and uses it as the first summary X of the privacy data. ′ 明 . The first summary of private data X ′ 明 Represented as X ′ 明 =H1(X 明 ), where H1() represents a hash function, which can be SHA-224, SHA-256, SHA-384 or other hash functions. The first privacy encryption and decryption submodule uses the private key of the first user terminal to encrypt the first summary X of the privacy data. ′ Encrypt to form the first summary ciphertext of private data The first user sends the encrypted private data The first summary ciphertext of the private data is also included When the privacy server receives the ciphertext of the privacy data and the first summary ciphertext of the private data After that, the privacy encryption and decryption submodule uses its own private key Pri3 to encrypt the private data Decrypt to obtain the private data plaintext X 明 , and use the first user's public key Pub1 to encrypt the first summary ciphertext of the private data Decrypt to obtain the first summary plaintext X′ of the private data 明 The privacy processing module of the privacy server also includes a privacy authentication submodule. The privacy authentication submodule uses the obtained plaintext X 明 Substitute into the formula H1(X 明 ) Get the new data summary plaintext X′ 明 , and decrypt it with the data summary plaintext X′ 明 By comparing, we can determine the privacy data X 明 Whether it has been intercepted or tampered with in order to achieve the purpose of verification.

[0166] For the privacy result, the privacy calculation submodule of the privacy service generates the privacy result Z 明 After that, the privacy encryption and decryption submodule uses the public key Pub2 of the second user end to encrypt and form the privacy result ciphertext The privacy authentication submodule uses a one-way hash function to obtain a fixed-digit value and uses it as the second summary Z of the privacy result. ′ 明 . Second summary of privacy results Z ′ 明 Represented as Z ′ 明 =H2(Z 明 ), where H z () represents a hash function, which can be SHA-224, SHA-256, SHA-384, etc. The privacy encryption and decryption submodule uses the private key Pri3 of the privacy server to encrypt the second summary Z of the privacy result. ′ Encryption to form the second summary ciphertext of the privacy result The privacy server sends the ciphertext of the privacy result The second summary ciphertext with the privacy result is also included When the second user receives the ciphertext of the privacy result And the second summary ciphertext of the privacy result After that, the second privacy encryption and decryption submodule uses its own private key Pri2 to encrypt the privacy result ciphertext Decrypt to obtain the privacy result plaintext Z明 , and use the public key Pub3 of the privacy server to cipher the second summary of the privacy result Decrypt to obtain the second summary plaintext Z of the privacy result ′ 明 The second privacy processing module of the second user terminal further includes a second privacy authentication submodule. The second privacy authentication submodule uses the obtained privacy result plaintext Z 明 Substituting into the formula H2(Z 明 ) Get the new data summary plaintext Z ′ 明 , and decrypt it with the data summary plaintext Z ′ 明 By comparing, we can determine the privacy result Z 明 Whether it has been intercepted or tampered with in order to achieve the purpose of verification.

[0167] Similarly, the technical solutions for the first request and the second request also refer to the above solutions. The process of the first request is opposite to the encryption process of the privacy data and the verification process of the first summary of the privacy data. The process of the second request is opposite to the encryption process of the privacy result and the verification process of the second summary of the privacy result. This improved solution is an explanation of the improved solution in combination with the privacy computing system in Example 2. Similarly, this solution can also be applied to the technical solution of Example 1, and it is only necessary to replace the (service, first, second) privacy encryption and decryption submodules in each (service, first, second) privacy unit with the (service, first, second) encryption module in the (service, first, second) ferry unit.

[0168] The first solution can effectively solve the problem of encryption and decryption of private data and private results, as well as the problem of privacy verification of private data and private results. However, the first user end, the second user end, and the privacy service end will also face certain security risks when using public-private key pairs. That is, if the private key is leaked or cracked, it will lead to the problem of leakage of private data or private results. Therefore, there is room for further improvement in the first solution.

[0169] Second option:

[0170] The communication connection relationship between the privacy client and the privacy server can be expressed as Fig.12. In addition to establishing a classical network channel, the privacy user and the privacy service directly establish a quantum secure channel. Among them, the quantum secure channel refers to setting up at least one quantum communication network service station between the privacy user and the privacy service. The privacy user and the quantum communication network service station share key pool one. At the same time, the privacy service and the quantum communication network service station share key pool two. When the privacy user transmits data to the privacy service, it first obtains a one-time quantum key from key pool one to encrypt the transmitted information data, and then sends the encrypted information data to the privacy service. At the same time, the privacy user sends the key index of the quantum key to the quantum communication network service station. The quantum communication network service station obtains the corresponding quantum key from the corresponding shared key pool one based on the key index, and then obtains a new key with the same number of bits as the quantum key from the shared key pool to encrypt the quantum key, and then sends it to the privacy service together with the key index of the new key. After receiving the encrypted quantum key, the privacy service obtains a new key from the shared key pool two through the key index of the new key to decrypt the encrypted quantum key to obtain the quantum key. The encrypted transmission data received by the privacy server can be decrypted using the quantum key to obtain the plaintext information of the data. The process of information data transmission from the privacy server to the privacy user is exactly the opposite, which will not be described here.

[0171] In this solution, the ciphertext of the private data, the ciphertext of the first request, the ciphertext of the private result, and the ciphertext of the second request are all transmitted through the classical network channel. The relevant keys for encrypting the private data, the first request, the private result, and the second request are transmitted through the quantum communication network service station.

[0172] Specifically, the first privacy unit of the first user terminal includes a first key module, in which a first quantum key pool is pre-stored. The first privacy processing module of the first user terminal also includes a first privacy authentication submodule. Specifically, the first privacy generation submodule of the first user terminal generates privacy data X 明 After that, the first privacy authentication submodule uses a one-way hash function to obtain a fixed-digit value and uses it as the first summary X of the privacy data. ′ 明 . The first summary of private data X ′ 明 Represented as X ′ 明 =H3(X 明 ), where H3() represents a hash function. The first privacy encryption and decryption submodule calls the one-time first quantum key Key1 from the first quantum key pool in the first key module to perform a one-time encryption on the privacy data X 明 and the first summary of the private data X ′ 明Perform XOR encryption, the encryption process is expressed as The first user end encrypts the private data ciphertext X 密 and the first summary ciphertext X of the private data ′ 密 The first quantum key Key1 of the first user terminal is transmitted to the privacy server through the classical network channel. At the same time, the first quantum key Key1 of the first user terminal is transmitted to the privacy server through the quantum secure channel. The privacy encryption and decryption submodule of the privacy server terminal performs XOR decryption to obtain the privacy data X 明 and the first summary of the private data X ′ 明 The privacy processing module of the privacy server also includes a privacy authentication submodule. The privacy authentication submodule uses the obtained plaintext X 明 Substituting into the formula H3(X 明 ) Get the new first summary plaintext X ′ 明 , and decrypt it with the first summary plaintext X ′ 明 By comparing, we can determine the privacy data X 明 Whether it has been intercepted or tampered with in order to achieve the purpose of verification.

[0173] The privacy service unit of the privacy client includes a privacy key module, in which a second quantum key pool is pre-stored. The privacy processing module of the privacy client also includes a privacy authentication submodule. Specifically, the privacy calculation submodule of the privacy client generates a privacy result Z through privacy calculation. 明 After that, the privacy authentication submodule uses a one-way hash function to obtain a fixed-digit value and uses it as the second summary Z of the privacy result. ′ 明 Summary of privacy results ′ 明 Represented as Z ′ 明 =H4(Z 明 ), where H4() represents the hash function. The privacy encryption and decryption submodule calls the one-time second quantum key Key2 from the second quantum key pool in the privacy key module to perform a one-time encryption on the privacy result Z 明 and the second summary Z of the private data ′ 明 XOR encryption is performed, and the encryption process is expressed as [Z 明 ,Z ′ 明 ]⊕Key2. The privacy server will encrypt the privacy result ciphertext Z 密 and the second summary ciphertext Z of the private data ′ 密The second quantum key Key2 of the privacy service end is transmitted to the second user end through the quantum secure channel. The second privacy encryption and decryption submodule of the second user end performs XOR decryption to obtain the privacy result Z 明 and the first summary Z of the privacy result ′ 明 The second privacy processing module of the second user terminal further includes a second privacy authentication submodule. The second privacy authentication submodule uses the obtained privacy result plaintext Z 明 Substituting into the formula H4(Z 明 ) Get the new second summary plaintext Z ′ 明 , and decrypt it with the second summary plaintext Z ′ 明 By comparing, we can determine the privacy result Z 明 Whether it has been intercepted or tampered with in order to achieve the purpose of verification.

[0174] Regarding the second solution for the first request and the second request, please refer to the second solution for private data and private results, which will not be described in detail here. The second solution effectively solves the risks brought by private encryption keys and further improves the security of private computing, especially the security of private data and private results.

[0175] The second solution is described in conjunction with the privacy computing system in Example 2. Similarly, this solution can also be applied to the technical solution in Example 1. The application of the solution only requires replacing the (service, first, second) privacy encryption and decryption submodules in each (service, first, second) privacy unit with the (service, first, second) encryption module in the (service, first, second) ferry unit. At the same time, the (service, first, second) key module in the (service, first, second) privacy unit is correspondingly set in the corresponding (service, first, second) ferry unit.

[0176] Example 4

[0177] This embodiment provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the privacy computing method in the above-mentioned embodiment 1 or embodiment 2 is implemented. There may be multiple processors and memories.

[0178] Example 5

[0179] This embodiment provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the privacy computing method in the above-mentioned embodiment 1 or embodiment 2 is implemented.

[0180] Example 6

[0181] This embodiment provides a computer program product, including a computer program, which implements the privacy computing method in the above-mentioned embodiment 1 or embodiment 2 when executed by a processor.

[0182] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A privacy computing system, characterized in that: include: At least one first client, a privacy server connected to the first client, and at least one second client connected to the privacy server; The first user terminal is configured to provide the privacy data in a ciphertext state to the privacy server; the privacy server is configured to perform privacy calculation on the privacy data to obtain a privacy result, and provide the privacy result in a ciphertext state to the second user terminal; The privacy service end includes a service disclosure unit and a service privacy unit that perform data transmission using a preset internal transmission protocol; The service disclosure unit is configured to obtain the privacy data sent by the first user terminal, and encapsulate the privacy data using a preset internal transmission protocol and send it to the service privacy unit; and obtain the privacy result sent by the service privacy unit, and send the privacy result to the second user terminal. The service privacy unit is configured to obtain privacy data, and perform privacy calculation based on the privacy data in plain text to obtain a privacy result; and encapsulate the privacy result using a preset internal transmission protocol, and send the encapsulated privacy result to the service disclosure unit; The privacy data and privacy results are both in encrypted form in the service disclosure unit; Among them, the service disclosure unit and the service privacy unit of the privacy server are physically isolated.

2. The privacy computing system according to claim 1, characterized in that: The privacy service end also includes a service ferry unit connected to the service disclosure unit and the service privacy unit respectively; The service ferry unit is configured to receive the encapsulated private data sent by the service public unit, and transmit the private data that meets the requirements to the service privacy unit based on a preset internal transmission protocol; The service ferry unit is also configured to receive the encapsulated privacy results sent by the service privacy unit, and transmit the privacy results that meet the requirements to the service disclosure unit based on a preset internal transmission protocol.

3. The privacy computing system according to claim 2, characterized in that: The service disclosure unit includes: a disclosure communication module, a disclosure conversion module and a disclosure transmission module connected in sequence; The public communication module is configured to obtain the private data ciphertext with the network communication protocol attached thereto sent by the first user terminal, and transmit it to the public conversion module for connection; The public conversion module is configured to unload the network communication protocol attached to the private data ciphertext and send the private data ciphertext to the public transmission module; The public transmission module is connected to the service ferry unit, and the public transmission module is configured to encapsulate the received private data ciphertext based on a preset internal transmission protocol, and transmit the encapsulated private data ciphertext to the service ferry unit.

4. The privacy computing system according to claim 3, characterized in that: The public transmission module is also configured to receive the encapsulated privacy result ciphertext sent by the service ferry unit, obtain the privacy result ciphertext by stripping the internal transmission protocol, and send it to the public conversion module; The public conversion module is configured to attach a network communication protocol to the acquired privacy result ciphertext and send it to the public communication module; The public communication module is configured to send the privacy result ciphertext with the network communication protocol attached to it to the second user terminal.

5. The privacy computing system according to claim 4, characterized in that: The service ferry unit includes a service ferry module and a service encryption and decryption module connected to the service ferry module; The service ferry module is configured to receive the encapsulated private data ciphertext sent by the public transmission module and verify the encapsulated private data ciphertext: if the encapsulated private data ciphertext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated private data ciphertext to the service encryption and decryption module for decryption; otherwise, the private data ciphertext is prohibited from being transmitted to the service privacy unit; The service ferry module is also configured to receive the encapsulated privacy result plaintext sent by the service privacy unit, and verify the encapsulated privacy result plaintext: if the encapsulated privacy result plaintext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated privacy result plaintext to the service encryption and decryption module for encryption; Otherwise, the privacy result is prohibited from being transmitted to the service disclosure unit in plain text; The service encryption and decryption module is configured to extract the private data ciphertext, decrypt it and obtain the private data plaintext, and return the private data plaintext to the service ferry module in the format of the internal transmission protocol, so that the service ferry module transmits the private data plaintext to the service privacy unit; The service encryption and decryption module is also configured to extract the privacy result plaintext and encrypt it to obtain the privacy result ciphertext, and return the privacy result ciphertext to the service ferry module in the format of the internal transmission protocol, so that the service ferry module transmits the privacy result ciphertext to the service disclosure unit.

6. The privacy computing system according to claim 5, characterized in that: The service privacy unit includes: a privacy transmission module, a privacy storage module and a privacy processing module connected in sequence, the privacy transmission module is connected to the service ferry module; the privacy processing module includes a privacy calculation submodule; The privacy transmission module is configured to receive the encapsulated privacy data plaintext sent by the service ferry module, then strip the internal transmission protocol to obtain the privacy data plaintext, and send it to the privacy storage module; The privacy storage module is configured to receive and store the privacy data in plain text; The privacy calculation submodule is configured to call the privacy data plaintext to perform privacy calculation to obtain a privacy result, and send the privacy result plaintext to the privacy transmission module; The privacy transmission module is also configured to receive the privacy result plaintext, encapsulate the privacy result plaintext based on the internal transmission protocol, and then send the encapsulated privacy result plaintext to the service ferry module.

7. The privacy computing system according to claim 4, characterized in that: The service ferry unit includes a service ferry module; The service ferry module is configured to receive the encapsulated private data ciphertext sent by the public transmission module and verify the encapsulated private data ciphertext: if the encapsulated private data ciphertext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated private data ciphertext to the service privacy unit; otherwise, the private data ciphertext is prohibited from being transmitted to the service privacy unit; The service ferry module is also configured to receive the encapsulated privacy result ciphertext sent by the service privacy unit, and verify the encapsulated privacy result ciphertext: if the encapsulated privacy result ciphertext meets the requirements of the internal transmission protocol, the service ferry module sends the encapsulated privacy result ciphertext to the public transmission module of the service public unit; Otherwise, the privacy result ciphertext is prohibited from being transmitted to the service disclosure unit.

8. The privacy computing system according to claim 7, characterized in that: The service privacy unit includes: a privacy transmission module, a privacy processing module and a privacy storage module connected in sequence, the privacy transmission module is connected to the service ferry module; the privacy processing module includes a privacy encryption and decryption submodule and a privacy calculation submodule; The privacy transmission module is configured to receive the encapsulated privacy data ciphertext sent by the service ferry module, then strip the internal transmission protocol to obtain the privacy data ciphertext, and send it to the privacy encryption and decryption submodule; The privacy encryption and decryption submodule is configured to receive the ciphertext of the privacy data, then decrypt it to obtain the plaintext of the privacy data, and send the plaintext of the privacy data to the privacy storage module for storage; The privacy computing submodule is configured to call the privacy data plaintext to perform privacy computing to obtain a privacy result.

9. The privacy computing system according to claim 8, characterized in that: When storing the plain text of the private data, the privacy storage module encrypts the plain text of the private data according to a preset encryption rule and then stores it; When the privacy computing submodule calls the privacy data plaintext to perform privacy computing, it first decrypts the privacy data plaintext encrypted according to the preset encryption rule to obtain the privacy data plaintext, and then performs privacy computing on the privacy data plaintext to obtain the privacy result.

10. The privacy computing system according to claim 8, characterized in that: The privacy encryption and decryption submodule is also configured to encrypt the privacy result plaintext to form a privacy result ciphertext, and send it to the privacy transmission module; The privacy transmission module is also configured to encapsulate the privacy result ciphertext using a preset internal transmission protocol, and send the encapsulated privacy result ciphertext to the service ferry module.

11. The privacy computing system according to claim 1, characterized in that: The first user terminal includes a first public unit and a first privacy unit for performing data transmission using a preset first transmission protocol; The first privacy unit is configured to generate private data, encapsulate the private data based on a preset first transmission protocol, and then send the private data to the first public unit; The first public unit is configured to strip the encapsulated private data to obtain the private data, and send the private data to the privacy service end; The private data is in a ciphertext state in the first public unit.

12. The privacy computing system according to claim 1, characterized in that: The first user terminal is also configured to obtain the privacy data request ciphertext sent by the privacy server, decrypt the privacy data request ciphertext to obtain the privacy data request plaintext, and then generate privacy data based on the privacy data request plaintext and send the privacy data ciphertext to the privacy server.

13. The privacy computing system according to claim 1, characterized in that: The second user terminal includes a second public unit and a second privacy unit for performing data transmission using a preset second transmission protocol; The second public unit is configured to obtain the privacy result sent by the privacy server, encapsulate the privacy result based on a preset second transmission protocol, and then send it to the second privacy unit; The second privacy unit is configured to strip the encapsulated privacy data to obtain a privacy result; The privacy result is in a ciphertext state in the second public unit.

14. The privacy computing system according to claim 1, characterized in that: The second user terminal is also configured to send a privacy result request ciphertext to the privacy service terminal, so that the privacy service terminal sends the privacy result ciphertext to the second user terminal according to the privacy result request.

15. The privacy computing system according to claim 1, characterized in that: The privacy service end is further configured to obtain a first quantum key sent by the first user end through the quantum communication network to decrypt the privacy data ciphertext sent by the first user end; The privacy service end is also configured to send a second quantum key used to decrypt the privacy result ciphertext to the second user end through the quantum communication network.

16. The privacy computing system according to claim 1, characterized in that: The first user terminal is also configured to generate a first summary about the private data, and send the first summary together with the private data to the privacy service terminal; The privacy service end is also configured to obtain the privacy data and the first summary sent by the first user end, and perform privacy data verification based on the obtained privacy data and the first summary.

17. The privacy computing system according to claim 1, characterized in that: The privacy service end is further configured to generate a second summary about the privacy result, and send the second summary together with the privacy result to the second user end; The second user terminal is also configured to obtain the ciphertext of the privacy result and the second summary sent by the privacy service terminal, and verify the privacy result based on the privacy result and the second summary.

18. A privacy computing method, characterized in that: include: S201: The service disclosure unit of the privacy service end obtains the private data ciphertext sent by the first user end, and encapsulates the private data ciphertext through a preset internal transmission protocol, and then sends the encapsulated private data ciphertext to the service ferry module of the privacy service end; S202: The service ferry module of the privacy service end sends the ciphertext of the encapsulated privacy data that meets the requirements to the service encryption and decryption module based on the preset internal transmission protocol; S203: The service encryption and decryption module of the privacy service end extracts the ciphertext of the privacy data and decrypts it to obtain the plaintext of the privacy data, and then returns the plaintext of the privacy data to the service ferry module in a format that complies with the internal transmission protocol, and then the service ferry module transmits it to the service privacy unit; S204: The service privacy unit of the privacy service end strips the encapsulated privacy data plaintext to obtain the privacy data plaintext, then performs privacy calculation based on the privacy data plaintext to obtain the privacy result, encapsulates the privacy result plaintext with a preset internal transmission protocol, and sends the encapsulated privacy result plaintext to the service ferry module; S205: The service ferry module of the privacy service end sends the encapsulated privacy result in plain text that meets the requirements to the service encryption and decryption module based on the preset internal transmission protocol; S206: The service encryption and decryption module extracts the privacy result plaintext and encrypts it to obtain the privacy result ciphertext, and then returns the privacy result ciphertext to the service ferry module in a format that complies with the internal transmission protocol, and then the service ferry module transmits it to the service disclosure unit; S207: The service disclosure unit of the privacy service end receives and strips the privacy result ciphertext from the format that complies with the internal transmission protocol, and then sends the stripped privacy result ciphertext to the second user end; Among them, the service disclosure unit and the service privacy unit of the privacy server are physically isolated.

19. A privacy computing method, characterized in that: include: S211: The service disclosure unit of the privacy service end obtains the private data ciphertext sent by the first user end, encapsulates the private data ciphertext through a preset internal transmission protocol, and then sends the encapsulated private data ciphertext to the service ferry module of the privacy service end; S212: The service ferry module of the privacy service end transmits the ciphertext of the privacy data that meets the requirements to the service privacy unit based on the preset internal transmission protocol; S213: The service privacy unit of the privacy service end strips the encapsulated privacy data ciphertext to obtain the privacy data ciphertext, then decrypts it to obtain the privacy data plaintext, further performs privacy calculation based on the privacy data plaintext to obtain the privacy result, and encrypts the privacy result plaintext to obtain the privacy result ciphertext, and then encapsulates the privacy result ciphertext with a preset internal transmission protocol, and sends the encapsulated privacy result ciphertext to the service ferry module; S214: The service ferry module of the privacy service end transmits the privacy result ciphertext that meets the requirements to the service disclosure unit based on the preset internal transmission protocol; S215: The service disclosure unit of the privacy service end receives the privacy result ciphertext sent by the service ferry module, and sends the privacy result ciphertext to the second user end; Among them, the service disclosure unit and the service privacy unit of the privacy server are physically isolated.

20. A computer device, characterized in that: include: a memory storing a computer program; A processor is configured to implement the privacy computing method described in claim 18 or 19 when executing the computer program.

21. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the privacy computing method described in claim 18 or 19 is implemented.

22. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the privacy computing method described in claim 18 or 19 is implemented.

Images