Data alignment method, system, electronic device and readable storage medium

Abstract

The embodiment of the application provides a data alignment method, system, electronic equipment and readable storage medium, and relates to the technical field of data processing. The embodiment of the application sends at least one second string to a matching platform by each data participant, so that the matching platform matches each second string sent by each data participant, obtains a first intersection, and sends the first intersection to each data participant. After each data participant obtains the first intersection, for each target second string in the first intersection, the data participant determines a target first string corresponding to the target second string, and sends each target first string to the matching platform, so that the matching platform matches each target first string sent by each data participant, obtains a second intersection, and sends the second intersection to each data participant. In this way, the direct interaction of each data participant is avoided through the matching platform, and the privacy of each data participant in the data alignment process is ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data processing, in particular to a data alignment method and system, an electronic device and a readable storage medium. BACKGROUND

[0002] With the introduction of relevant policies such as the data security law, each enterprise needs to share data in a safe and compliant manner when cooperating with data, which has exacerbated the emergence of data silos in each enterprise. At present, the industry introduces privacy computing technology to break through the data ecology of internal enterprises and other enterprises, and combines multi-party data to help business operations between enterprises, achieving the purpose of mutual benefit and win-win.

[0003] However, in the early stage of practice, in order to verify the value of internal data and the value of external data, the data user sends the data participating in data alignment to the data provider, and the data provider matches and filters according to the data sent by the data user to obtain aligned data. The whole process has weak privacy. SUMMARY

[0004] Based on the above research, the present application provides a data alignment method, system, electronic device and readable storage medium, which improves the privacy in the data alignment process.

[0005] The present application can be implemented in the following way:

[0006] In a first aspect, the present application provides a data alignment method applied to a data participant, comprising:

[0007] sending at least one second string to a matching platform;

[0008] receiving a first intersection obtained by the matching platform according to the matching of each second string;

[0009] for each target second string in the first intersection, determining a target first string corresponding to the target second string;

[0010] sending each target first string to the matching platform and receiving a second intersection obtained by the matching platform according to the matching of the target first string.

[0011] In an optional embodiment, before the at least one second string is sent to the matching platform, the method further comprises:

[0012] hashing each data identifier of the data to obtain a hash value of each data identifier;

[0013] Based on the target character in each hash value, a second string corresponding to each hash value is obtained.

[0014] In an optional implementation, the step of obtaining the second string corresponding to each hash value based on the target character in each hash value includes:

[0015] Based on the set character length, determine the hash prefix of each hash value;

[0016] The hash prefix of each hash value is encrypted to obtain the second string corresponding to each hash value.

[0017] In an optional implementation, before encrypting the hash prefix of each hash value to obtain the second string corresponding to each hash value, the method further includes:

[0018] The number of hash prefixes for each hash value is counted to obtain the number of each hash prefix.

[0019] Based on the number of each hash prefix, sort the hash prefixes to obtain the sorting result;

[0020] Based on the sorting results, a preset number of hash prefixes are selected as target prefixes according to the set rules;

[0021] The step of encrypting the hash prefix of each hash value to obtain the second string corresponding to each hash value includes:

[0022] Each of the target prefixes is encrypted to obtain a second string corresponding to each target prefix.

[0023] In an optional implementation, the step of determining the target first string corresponding to each target second string in the first intersection includes:

[0024] Decrypt each target second string in the first intersection to obtain the target character corresponding to each target second string;

[0025] The target characters corresponding to each of the target second strings are matched with the hash values ​​of each of the data identifiers to obtain the hash values ​​corresponding to each of the target second strings;

[0026] The hash value corresponding to each of the target second strings is encrypted to obtain the target first string corresponding to each of the target second strings.

[0027] In an optional implementation, after receiving the second intersection obtained by the matching platform based on the target first string, the method further includes:

[0028] obtain log information, code information and data information;

[0029] encrypt the log information, the code information and the data information according to a setting key to obtain data ciphertext;

[0030] encrypt the setting key by a public key to obtain ciphertext key;

[0031] send the data ciphertext and the ciphertext key to a block chain.

[0032] In a second aspect, a data alignment method is provided, which is applied to a matching platform and includes the following steps:

[0033] obtaining at least one second string sent by at least two data participants;

[0034] matching each second string sent by each data participant to obtain a first intersection;

[0035] sending the first intersection to each data participant, so that each data participant feeds back a target first string corresponding to each target second string in the first intersection;

[0036] matching each target first string sent by each data participant to obtain a second intersection;

[0037] sending the second intersection to each data participant.

[0038] In a third aspect, a data alignment method is provided, which is applied to a data alignment system including a matching platform and at least two data participants, each data participant is in communication connection with the matching platform, and the method includes the following steps:

[0039] each data participant sends at least one second string to the matching platform;

[0040] the matching platform matches each second string sent by each data participant to obtain a first intersection, and sends the first intersection to each data participant;

[0041] each data participant determines a target first string corresponding to each target second string in the first intersection, and sends each target first string to the matching platform;

[0042] the matching platform matches each target first string sent by each data participant to obtain a second intersection, and sends the second intersection to each data participant.

[0043] In a fourth aspect, an embodiment of the present application provides a data alignment system, comprising a matching platform and at least two data participants, each of the data participants being in communication connection with the matching platform;

[0044] Each of the data participants is configured to send at least one second string to the matching platform.

[0045] The matching platform is configured to match each second string sent by each of the data participants to obtain a first intersection, and send the first intersection to each of the data participants.

[0046] Each of the data participants is configured to determine, for each target second string in the first intersection, a target first string corresponding to the target second string, and send each of the target first strings to the matching platform.

[0047] The matching platform is configured to match each target first string sent by each of the data participants to obtain a second intersection, and send the second intersection to each of the data participants.

[0048] In a fifth aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and capable of running on the processor, wherein the processor implements the data alignment method of any of the preceding embodiments when executing the program.

[0049] In a sixth aspect, an embodiment of the present application provides a readable storage medium, comprising a computer program, wherein the computer program controls an electronic device in which the readable storage medium is located to execute the data alignment method of any of the preceding embodiments when running.

[0050] The data alignment method, system, electronic device, and readable storage medium provided by the embodiments of the present application can send at least one second string to the matching platform by each data participant, so that the matching platform matches each second string sent by each data participant to obtain a first intersection, and sends the first intersection to each data participant, and each data participant, after obtaining the first intersection, determines, for each target second string in the first intersection, a target first string corresponding to the target second string, and sends each target first string to the matching platform, so that the matching platform matches each target first string sent by each data participant to obtain a second intersection, and sends the second intersection to each data participant, thus, through the matching platform, direct interaction of each data participant is avoided, and privacy of each data participant in the data alignment process is ensured. BRIEF DESCRIPTION OF DRAWINGS

[0051] The technical solutions and other beneficial effects of the present application will become apparent after a specific embodiment of the present application is described in detail below with reference to the accompanying drawings.

[0052] Figure 1 A structural schematic diagram of the data alignment system provided by the embodiment of the present application.

[0053] Figure 2 A structural schematic diagram of the data participant provided by the embodiment of the present application.

[0054] Figure 3 A flow schematic diagram of the data alignment method provided by the embodiment of the present application.

[0055] Figure 4 Another flow schematic diagram of the data alignment method provided by the embodiment of the present application.

[0056] Figure 5 Still another flow schematic diagram of the data alignment method provided by the embodiment of the present application.

[0057] Icon: 100-data participant; 10-memory; 20-processor; 30-communication unit; 200-matching platform. DETAILED DESCRIPTION

[0058] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application.

[0059] In the description of the present application, it should be understood that the terms "center", "longitudinal", "transverse", "length", "width", "thickness", "upper", "lower", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", "clockwise", "counterclockwise" and the like indicate the orientation or positional relationship based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a particular orientation, be constructed and operated in a particular orientation, and therefore cannot be understood as a limitation of the present application. In addition, the terms "first", "second" are only for the purpose of description, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the technical features indicated. Therefore, the features limited by "first", "second" can explicitly or implicitly include one or more of the features. In the description of the present application, the meaning of "multiple" is two or more, unless otherwise specifically limited.

[0060] In the description of the present application, it should be noted that unless otherwise explicitly specified and limited, the terms "mounting", "connection", "connecting" should be understood in a broad sense, for example, it can be fixed connection, or detachable connection, or integrally connected; it can be mechanical connection, or electrical connection or can communicate with each other; it can be directly connected, or indirectly connected through an intermediate medium, or the internal communication of two elements or the interaction relationship between two elements. For those skilled in the art, the specific meaning of the above terms in the present application can be understood according to the specific circumstances.

[0061] In the present application, unless otherwise explicitly specified and limited, the "upper" or "lower" of the first feature to the second feature can include that the first and second features are in direct contact, or that the first and second features are not in direct contact but are in contact through another feature between them. Moreover, the "upper", "above" and "on" of the first feature to the second feature includes that the first feature is directly above and obliquely above the second feature, or only indicates that the horizontal height of the first feature is higher than that of the second feature. The "below", "under" and "under" of the first feature to the second feature includes that the first feature is directly below and obliquely below the second feature, or only indicates that the horizontal height of the first feature is less than that of the second feature.

[0062] The following disclosure provides many different embodiments or examples for implementing different structures of the present application. In order to simplify the disclosure of the present application, the components and arrangements of specific examples are described below. Of course, they are only examples, and the purpose is not to limit the present application. In addition, the present application can repeatedly refer to numbers and / or letters in different examples, and such repetition is for the purpose of simplification and clarity, which itself does not indicate the relationship between the various embodiments and / or arrangements discussed. In addition, the present application provides examples of various specific processes and materials, but those skilled in the art can realize the application of other processes and / or the use of other materials.

[0063] As described in the background, with the introduction of relevant policies such as data security law, enterprises need to share data in a safe and compliant manner when cooperating with data. This also exacerbates the generation of data silos among enterprises. At present, the industry introduces privacy computing technology to break through the data ecology of internal enterprises and other enterprises, and combines multi-party data to help business operation between enterprises, and realizes the purpose of mutual benefit and win-win.

[0064] At present, privacy computing technology is relatively advanced, and most of the practice between enterprises is in a cautious and conservative state. Strict security review will be conducted throughout the privacy computing process. Data ID alignment between enterprises is the first step of privacy computing, therefore, how to ensure the security and privacy of the data ID alignment process has become a research hotspot.

[0065] In the early stage of specific practice, in order to verify the value of internal data and the introduction value of external data, when performing data ID alignment, due to the problem that the data magnitudes of each party are quite different, the party with large data does not want to use full data to participate in data ID alignment, and at the same time, too large data will reduce the efficiency of data ID alignment. Therefore, each data participant will consider introducing a sample filtering scheme, that is, each data participant agrees to use the hash value to filter data.

[0066] However, this way makes the data user in the data participant at a disadvantage. The data user calculates the hash value of the data ID participating in alignment and sends it to the data provider. The data provider filters the data according to the hash value sent by the data user to obtain a sample data amount suitable for testing. Although the hash value does not leak the specific original data ID information, the active users of the current data participants are similar, so the data filtered by the data provider is basically the original data ID of the data user, which leads to that the data provider knows the data ID after alignment in advance, which is unfair, and it is easy to analyze the hash value data and deduce the real data ID, which has weak privacy. In addition, the data provider has obtained the filtered data, can use false data to perform data ID alignment, and cannot guarantee the authenticity.

[0067] Based on this, the embodiment provides a data alignment method, system, electronic device and readable storage medium. Each data participant sends at least one second string to the matching platform, so that the matching platform matches each second string sent by each data participant to obtain a first intersection, and sends the first intersection to each data participant. After obtaining the first intersection, each data participant determines a target first string corresponding to each target second string in the first intersection, and sends each target first string to the matching platform, so that the matching platform matches each target first string sent by each data participant to obtain a second intersection, and sends the second intersection to each data participant. In this way, through the matching platform, direct interaction of each data participant is avoided, fairness and privacy of each data participant in the data alignment process are guaranteed, and through matching and filtering of the first string, a small sample data amount of the first intersection is obtained, and then through matching and filtering of the second string, the second intersection is obtained, which improves the efficiency of data alignment.

[0068] Please refer to Figure 1 , Figure 1 for a structural schematic diagram of the data alignment system provided by the embodiment. As Figure 1 shown, the data alignment system provided by the embodiment includes a matching platform 200 and at least two data participants 100.

[0069] Among them, at least two data participants 100 include data users and data providers, the data user is a party that needs to introduce external data and performs data sharing through privacy calculation, and serves internal business, and the data provider is a party that provides data to the data user. The matching platform 200 is a platform for privacy calculation.

[0070] In the embodiment, the matching platform 200 performs privacy calculation through a private set intersection (PSI) technology. The purpose of the PSI technology is to complete intersection calculation of data sets under the premise of protecting the data privacy of both communication parties.

[0071] In the embodiment, the matching platform 200 can be deployed on any one of the data participants 100 or a third party, and can be set according to actual needs. The embodiment is not limited specifically.

[0072] In the embodiment, the matching platform 200 can provide a communication interface for each data participant 100. The matching platform 200 can call the data of each data participant 100 through the communication interface to perform privacy calculation. Each data participant 100 also publishes a privacy calculation task on the matching platform 200 through the communication interface. After each data participant 100 publishes the privacy calculation task on the matching platform 200, the matching platform 200 performs privacy calculation.

[0073] In order to ensure the privacy and security of data, in the embodiment, each data participant 100 is deployed with a computing node. Each data participant 100 processes data through the deployed computing node, for example, encrypts and decrypts data participating in data alignment.

[0074] In the embodiment, please refer to Figure 2 The computing node of each data participant 100 can include a memory 10, a processor 20, and a communication unit 30. The memory 10 stores machine-readable instructions executable by the processor 20. When the computing node is running, the processor 20 and the memory 10 communicate through a bus. The processor 20 executes the machine-readable instructions and performs the data alignment method.

[0075] The memory 10, the processor 20, and the communication unit 30 are directly or indirectly electrically connected to each other to realize signal transmission or interaction. For example, these elements can be electrically connected to each other through one or more communication buses or signal lines. The memory 10 stores software function modules. The processor 20 is used to execute the software function modules stored in the memory 10.

[0076] The memory 10 can be, but is not limited to, a Random Access Memory (RAM), a Read Only Memory (ROM), a Programmable Read-Only memory (PROM), an Erasable Programmable Read-Only Memory (EPROM), an Electric Erasable Programmable Read-Only Memory (EEPROM), or the like.

[0077] In some embodiments, the processor 20 is configured to perform one or more functions described in the present embodiments. In some embodiments, the processor 20 can include one or more processing cores (e.g., a single-core processor (S) or a multi-core processor (S)).

[0078] By way of example only, the processor 20 can include a Central Processing Unit (CPU), an Application Specific Integrated Circuit (ASIC), an Application Specific Instruction Set Processor (ASIP), a Graphics Processing Unit (GPU), a Physics Processing Unit (PPU), a Digital Signal Processor (DSP), a Field Programmable Gate Array (FPGA), a Programmable Logic Device (PLD), a controller, a microcontroller unit, a Reduced Instruction Set Computing (RISC), or a microprocessor, or the like, or any combination thereof.

[0079] For ease of illustration, only one processor is described in the computing node. However, it should be noted that the computing node in the present embodiment can also include multiple processors, and thus the steps performed by one processor described in the present embodiment can also be performed jointly by multiple processors or individually by multiple processors. For example, if the processor of the computing node performs step A and step B, it should be understood that step A and step B can also be performed jointly by two different processors or individually in one processor. For example, the processor performs step A, the second processor performs step B, or the processor and the second processor jointly perform steps A and B.

[0080] In the present embodiment, the memory 10 is configured to store a program, and the processor 20 is configured to execute the program upon receiving an execution instruction. The flow defined method disclosed in any of the embodiments of the present embodiment can be applied in the processor 20 or implemented by the processor 20.

[0081] The communication unit 30 is configured to establish a communication connection between the computing node and other devices through a network, and configured to transceive data through the network.

[0082] In some embodiments, the network can be any type of wired or wireless network, or a combination thereof. For example only, the network can include a wired network, a wireless network, a fiber optic network, a telecommunication network, an intranet, the Internet, a Local Area Network (LAN), a Wide Area Network (WAN), a Wireless Local Area Network (WLAN), a Metropolitan Area Network (MAN), a Wide Area Network (WAN), a Public Switched Telephone Network (PSTN), a Bluetooth network, a ZigBee network, or a Near Field Communication (NFC) network, etc., or any combination thereof.

[0083] In the present embodiment, the computing node can be an ultra-mobile personal computer (UMPC), a physical server, or the like, or a service cluster composed of multiple physical servers, and the present embodiment does not limit the specific type of the computing node.

[0084] It can be understood that, Figure 2 The structure shown is only schematic. The computing node can also have more or fewer components than those shown, or have components with different configurations or Figure 2 The structure shown is only schematic. The computing node can also have more or fewer components than those shown, or have components with different configurations or Figure 2different configurations are shown. Figure 2 The components shown can be implemented in hardware, software, or a combination thereof.

[0085] It can be understood that in the present embodiment, the matching platform 200 is also configured with an electronic device such as a computing node in the data participant 100, so that the matching platform 200 can perform a privacy computing task through the electronic device.

[0086] Based on the above architecture of each data participant 100 and the matching platform 200, in the present embodiment, the data alignment system can perform the following functions:

[0087] Each data participant 100 is configured to send at least one second string to the matching platform 200.

[0088] The matching platform 200 is configured to match each second string sent by each data participant 100 to obtain a first intersection, and send the first intersection to each data participant 100.

[0089] Each data participant 100 is configured to determine, for each target second string in the first intersection, a target first string corresponding to the target second string, and send each target first string to the matching platform 200.

[0090] The matching platform 200 is configured to match each target first string sent by each data participant 100 to obtain a second intersection, and send the second intersection to each data participant 100.

[0091] Among them, each data participant 100 includes at least one data user and at least one data provider. When data alignment is needed, any party (which can be a data user or a data provider) in each data participant 100 can publish a scheduling task for data alignment on the matching platform 200. After publishing the scheduling task on the matching platform 200, the matching platform 200 performs privacy computing to execute the data alignment task.

[0092] In the present embodiment, when performing data alignment, it can be aligned to the data itself, or it can be aligned to the data identifier of the data, such as ID, unique number, etc. For example, for user data, the data identifier of the user data can be a mobile phone number, an identity card, etc. To ensure the security of the data, in the present embodiment, when performing data alignment, the data identifier of the data is aligned.

[0093] To ensure the privacy and security of data alignment, this embodiment requires the data identifier to be converted into a string, which is then used for alignment. The conversion of the data identifier can be performed using an algorithm agreed upon by all data participants 100, such as a hash algorithm or a BWT (Burrows Wheeler transform) algorithm. The specific algorithm can be chosen based on actual needs, and this embodiment does not impose any specific limitations.

[0094] In this embodiment, the data identifier string includes a second string and a first string. The first string contains more characters than the second string. The first string represents the complete string obtained after the data identifier conversion process, while the second string represents a partial string obtained after the data identifier conversion process. That is, in this embodiment, the first string may include the second string, and each second string corresponds to one first string. For example, a hash calculation is performed on the data identifier of the data. Based on the hash value of the data identifier, the first string of the data identifier is obtained. Then, the second string is obtained by filtering from the first string according to a preset rule, such as filtering characters from the beginning or end of the first string according to a preset length, thereby obtaining the second string.

[0095] To ensure the privacy of data alignment and improve its efficiency, in this embodiment, after each data participant 100 receives the first string and the second string of the data identifier for the data to be aligned, it first sends the second string to the matching platform 200 to reduce the sample size for data alignment. At the same time, this also ensures the security and privacy of the data alignment.

[0096] In one optional implementation, after receiving the second string of the data identifier for the alignment, each data participant 100 can package and store the second string, and then send the storage location to the matching platform 200. The matching platform 200, based on the storage location sent by the data participant 100, searches for the file package in the data participant 100 and retrieves the second string from the file package. In another optional implementation, each data participant 100 can also directly send the second string of the data identifier to the matching platform 200. This can be set according to actual needs, and this embodiment does not impose specific limitations.

[0097] After obtaining the second strings from each data participant 100, the matching platform 200 first performs privacy calculations on the second strings of each data participant 100, that is, performs matching calculations on the second strings, to obtain the first intersection. Understandably, the first intersection includes the same second strings from all data participants 100.

[0098] Since the second string only represents part of the string obtained after the data identifier conversion processing, after obtaining the first intersection, the first intersection needs to be sent to each data participant 100. After each data participant 100 receives the first intersection, for each target second string in the first intersection, the data participant 100 determines the target first string corresponding to the target second string, i.e., determines the complete string corresponding to the target second string, and then sends the determined target first string to the matching platform 200. The matching platform 200 performs privacy calculation again, i.e., performs matching calculation of the first string, obtains the second intersection, and thus realizes data alignment. It can be understood that the second intersection includes the same first string of each data participant 100.

[0099] After the matching platform 200 obtains the second intersection, the matching platform 200 sends the second intersection to each data participant 100. Based on the target first string in the second intersection, each data participant 100 can obtain the common data identifier with other data participants 100. Based on the data identifier, each data participant 100 can obtain the common data with other data participants 100.

[0100] The data alignment system provided in the embodiment converts the data identifier of the data to be aligned by each data participant 100, obtains the first string and the second string, and then sends the second string to the matching platform 200. The matching platform 200 performs privacy calculation to obtain the first intersection. After obtaining the first intersection, the matching platform 200 sends the first intersection to each data participant 100. Each data participant 100 determines the target first string corresponding to each second string in the first intersection, and sends the determined target first string to the matching platform 200. The matching platform 200 performs privacy calculation again to obtain the second intersection, realizes data alignment, and avoids each data participant 100 directly sending the data participating in alignment to the other party, thereby ensuring fairness and privacy in data alignment. At the same time, by using the second string for matching first, and then determining the first string participating in alignment based on the first intersection, the amount of data participating in data alignment can be reduced, and the work efficiency is improved.

[0101] In order to further ensure the privacy and security of data alignment, in the embodiment, each data participant 100 converts the data identifier by using a hash algorithm. Therefore, before each data participant 100 sends the second string to the matching platform 200, each data participant 100 also needs to perform hash calculation on the data identifier of each data to obtain the hash value of each data identifier, and obtain the second string corresponding to each hash value based on the target character in each hash value.

[0102] The hash algorithm can be, but is not limited to, a SHA256 hash algorithm, an MD5 algorithm, an MD4 algorithm, and the like. In this embodiment, the SHA256 hash algorithm is used to perform hash calculation on the data identifier of each data. For example, the data identifier is a mobile phone number 12345678901, and the SHA256 hash algorithm can obtain: SHA256(12345678901) = 254aa248acb47dd654ca3ea53f48c2c26d641d23d7e2e93a1ec56258df7674c4.

[0103] After the hash calculation on the data identifier of each data obtains the hash value of the data identifier of each data, for each data identifier, the target character is determined from the hash value of the data identifier, and then the second string of the hash value of the data identifier is obtained according to the target character.

[0104] In an optional implementation, for each data identifier, the target character can be determined from the hash value of the data identifier according to the set character length, and then the determined target character is encrypted, that is, the second string of the hash value of the data identifier is obtained.

[0105] In this embodiment, when the target character is determined from the hash value of the data identifier, the target character can be determined from the head of the hash value, and then the target character is determined according to the set character length, that is, the prefix of the hash value is selected according to the set character length; or the target character can be determined from the tail of the hash value, and then the target character is determined according to the set character length, that is, the suffix of the hash value is selected according to the set character length; or the target character can be determined from the middle of the hash value, and then the target character is determined according to the set character length, that is, the middle part of the hash value is selected according to the set character length.

[0106] In this embodiment, in order to facilitate the alignment of the data, the hash prefix of the hash value of each data identifier is determined according to the set character length, the hash prefix of the hash value is taken as the target character, and then the second string corresponding to each hash value is obtained by encrypting the hash prefix of each hash value.

[0107] In this embodiment, the set character length can be set according to actual needs, and the embodiment does not make demands. For example, when the set character length is 4, the data identifier is a mobile phone number 12345678901, the hash value of the data identifier is: SHA256(12345678901) = 254aa248acb47dd654ca3ea53f48c2c26d641d23d7e2e93a1ec56258df7674c4, and the hash prefix of the hash value of the data identifier is 4 bits: 254a.

[0108] In the embodiment, the same key can be used for encryption when each data participant 100 encrypts the hash prefixes of the hash values after obtaining the hash prefixes of the hash values.

[0109] After obtaining the second strings corresponding to the hash values by encrypting the hash prefixes of the hash values, since there can be multiple hash prefixes of the hash values of the data identifiers, in order to improve the efficiency of data alignment and also to eliminate sensitive data, in the embodiment, before encrypting the hash prefixes of the hash values to obtain the second strings corresponding to the hash values, each data participant 100 also needs to count the hash prefixes of the hash values to obtain the number of each hash prefix, sort the hash prefixes according to the number of each hash prefix to obtain a sorting result, and select a preset number of hash prefixes as target prefixes according to the sorting result and a set rule.

[0110] In the embodiment, after determining the hash prefixes of the hash values of the data identifiers, each data participant 100 counts the obtained hash prefixes to obtain the number of each hash prefix, and then sorts the hash prefixes according to the number of each hash prefix.

[0111] When sorting the hash prefixes according to the number of each hash prefix, the hash prefixes can be sorted from small to large or from large to small. Specifically, the embodiment does not make any limitation.

[0112] After sorting the hash prefixes according to the number of each hash prefix to obtain a sorting result, a preset number of hash prefixes can be selected as target prefixes according to a set rule.

[0113] In the embodiment, the set rule can be to select hash prefixes with a larger number as target prefixes. When the hash prefixes are sorted from small to large, the last hash prefix is the hash prefix with the largest number. Therefore, a preset number of hash prefixes can be selected as target prefixes from the last hash prefix. When the hash prefixes are sorted from large to small, the first hash prefix is the hash prefix with the largest number. Therefore, a preset number of hash prefixes can be selected as target prefixes from the first hash prefix.

[0114] Optionally, the preset number can be set according to actual needs, and the embodiment does not make any specific limitation.

[0115] For example, if the data user in the data participant 100 counts the number of hash prefixes and sorts them in descending order as follows: the hash prefix 1111 has 20, the hash prefix 2222 has 10, and the hash 3333 has 5, the hash prefixes 1111 and 2222 are taken as target prefixes. If the data provider in the data participant 100 counts the number of hash prefixes and sorts them in descending order as follows: the hash prefix 1111 has 30, the hash prefix 1234 has 20, the hash prefix 3333 has 10, and the hash prefix 4444 has 5, the hash prefixes 1111 and 1234 are taken as target prefixes.

[0116] In this embodiment, after obtaining each target prefix, the target prefix is encrypted to obtain a second string corresponding to the target prefix. After obtaining the second string corresponding to each target prefix, the second string corresponding to each target prefix is sent to the matching platform 200, so that the matching platform 200 performs privacy calculation to calculate the intersection of the second strings sent by each data participant 100. In this way, the calculation efficiency of the matching platform 200 can be improved, and the sensitive data is filtered.

[0117] When the matching platform 200 obtains the second strings sent by each data participant 100, the matching platform 200 matches the second strings sent by each data participant 100, finds the same second strings in the second strings sent by each data participant 100, and then obtains a first intersection based on the same second strings in the second strings sent by each data participant 100.

[0118] For example, the second string sent by the data user in the data participant 100 includes {aaaa, bbbb}, and the second string sent by the data provider in the data participant 100 includes {aaaa, abcd}, and the first intersection is {1111}.

[0119] After obtaining the first intersection, the matching platform 200 can send the first intersection to each data participant 100. After receiving the first intersection, each data participant 100 can obtain the same second string as other data participants 100, and then filter the data identifiers participating in data alignment according to the same second string as other data participants 100. In this way, the amount of data participating in data alignment is reduced, and at the same time, the security and privacy of data alignment are ensured by avoiding direct data transmission from each data participant 100 to the other party.

[0120] In this embodiment, the second string in the first intersection is taken as a target string, and for each target second string in the first intersection, the target first string corresponding to the target second string is determined.

[0121] Since the second string is obtained by encrypting the target character in the hash value of the data identifier, for the target second string in the first intersection, when determining the target first string corresponding to the target second string, first, the target second string in the first intersection is decrypted to obtain the target character corresponding to each target second string, then the target character corresponding to each target second string is matched with the hash value of each data identifier to obtain the hash value corresponding to each target second string, and then the hash value corresponding to each target second string is encrypted to obtain the target first string corresponding to each target second string.

[0122] Wherein, when decrypting the target second string in the first intersection, the corresponding decryption algorithm is obtained according to the encryption algorithm used when encrypting the target character in the hash value of the data identifier, and then the target second string in the first intersection is decrypted by using the corresponding decryption algorithm to obtain the target character corresponding to each target second string.

[0123] Since the target character corresponding to each target second string is determined from the hash value of the data identifier, after the target character corresponding to each target second string is decrypted, the target character corresponding to each target second string can be matched with the hash value of each data identifier, that is, for the target character corresponding to each target second string, it is checked whether there is a hash value including the target character corresponding to the target second string, if there is, the hash value is taken as the hash value corresponding to the target second string, and the hash value corresponding to the target second string is encrypted.

[0124] In this embodiment, when matching the target character corresponding to each target second string with the hash value of each data identifier, a fuzzy matching method is used, and thus the target character corresponding to one target second string can match multiple hash values.

[0125] For example, the data user in the data participant 100 decrypts a target second string, and obtains a target character corresponding to the target second string as 1111. The target character 1111 is matched with the hash values of the data identifiers, and it is obtained that the hash values including the target character 1111 are 11111, 11112 and 11113. The hash values 11111, 11112 and 11113 are all hash values corresponding to the target second string. For another example, the data provider in the data participant 100 decrypts a target second string, and obtains a target character corresponding to the target second string as 1112. The target character 1112 is matched with the hash values of the data identifiers, and it is obtained that the hash values including the target character 1111 are 11121, 11122, 111213 and 111215. The hash values 11121, 11122, 111213 and 111215 are all hash values corresponding to the target second string.

[0126] After obtaining the hash values corresponding to the target second strings, the hash values corresponding to the target second strings are encrypted to obtain target first strings corresponding to the target second strings.

[0127] It should be noted that, in the embodiment, the encryption manner of the hash values corresponding to the target second strings is the same as the encryption manner of the target characters (hash prefixes).

[0128] After obtaining the target first strings corresponding to the target second strings, the data participant 100 sends the obtained target first strings to the matching platform 200.

[0129] After receiving the target first strings sent by the data participant 100, the matching platform 200 performs privacy calculation on the target first strings sent by the data participant 100, that is, finds the same target first strings in the target first strings sent by the data participant 100, and then obtains a second intersection based on the same target first strings in the target first strings sent by the data participant 100.

[0130] For example, the target first strings of the data user in the data participant 100 include {aaabb, abcde, bbbcd}, the target first strings of the data provider in the data participant 100 include {aaabb, abcdf, bbbcd}, and the second intersection is {aaabb, bbbcd}. After obtaining the second intersection, the matching platform 200 sends the second intersection to the data participant 100, and the alignment of the data identifiers is completed.

[0131] After receiving the second intersection, each data participant 100 decrypts the first string in the second intersection to obtain the hash value of the data identifier shared by other data participants 100, and further learns the data shared by other data participants 100.

[0132] The data alignment system provided in the embodiment converts the data identifier of the data to be aligned by each data participant 100, obtains the first string and the second string, and then sends the second string to the matching platform 200 first, and the matching platform 200 performs privacy calculation to obtain the first intersection. After obtaining the first intersection, the matching platform 200 sends the first intersection to each data participant 100, so that each data participant 100 determines the target first string corresponding to each second string in the first intersection, and sends the determined target first string to the matching platform 200. The matching platform 200 performs privacy calculation again to obtain the second intersection, realizes data alignment, and avoids each data participant 100 directly sending the data participating in alignment to the other party, thereby ensuring the fairness and privacy in data alignment. At the same time, by using the second string for matching first, and screening the first intersection, and then determining the first string participating in alignment according to the first intersection, the amount of data participating in data alignment can be reduced, and the work efficiency is improved.

[0133] In order to ensure the authenticity of the data and facilitate the traceability of the data, in the embodiment, the data alignment system further includes a supervision node. After receiving the second intersection matched by the matching platform 200 according to the target first string, each data participant 100 needs to upload all data information in the data alignment process to the blockchain composed of each data participant 100 and the supervision node, so as to facilitate supervision.

[0134] Specifically, after receiving the second intersection matched by the matching platform 200 according to the target first string, each data participant 100 obtains log information, code information and data information in the data alignment process, and then encrypts the log information, the code information and the data information according to a set key to obtain data ciphertext, and encrypts the set key through a public key to obtain a ciphertext key. Then the data ciphertext and the ciphertext key are sent to the blockchain.

[0135] Among them, by analyzing the log information, the code information and the data information in the data alignment process, the calculation process in the data alignment process and the data participating in the alignment can be obtained, and the traceability in the data alignment process can be realized, and the monitoring of the data alignment can be realized.

[0136] In the embodiment, the symmetric key or the asymmetric key can be used for encrypting the log information, the code information and the data information, and the encryption manner is not limited.

[0137] After the log information, the code information and the data information are encrypted to obtain the data ciphertext, the setting key is encrypted by using the public key of the supervision node to generate the ciphertext key. After the data ciphertext and the ciphertext key are obtained, the data ciphertext and the ciphertext key are uploaded to the blockchain composed of the data participants 100 and the supervision node.

[0138] When the data participants 100 have data disputes, the supervision node can decrypt the setting key by using the private key of the supervision node, and then decrypt the data ciphertext based on the decrypted setting key to obtain all the data information in the data alignment, so as to perform supervision and auditing and obtain the auditing result, and solve the data disputes between the data participants 100.

[0139] The data alignment system provided in the embodiment introduces the blockchain technology, adds the supervision node, and establishes the data ecological alliance chain between the data participants 100 and the supervision node, so as to ensure the authenticity of the data provided by each data participant 100 in the data alignment process.

[0140] Based on the above data alignment system, please refer to Figure 3 The embodiment also provides a data alignment method applied to the data participant in the data alignment system, and the data alignment method is executed by the data participant in the data alignment system. Figure 3 As shown in Figure 3 The data alignment method provided in the embodiment includes steps S101 to S104.

[0141] Step S101: sending at least one second string to a matching platform.

[0142] Step S102: receiving a first intersection obtained by the matching platform based on the matching of the second strings.

[0143] Step S103: determining a target first string corresponding to each target second string in the first intersection.

[0144] Step S104: sending the target first strings to the matching platform, and receiving a second intersection obtained by the matching platform based on the matching of the target first strings.

[0145] In an optional implementation, before the at least one second string is sent to the matching platform, the data alignment method provided in the embodiment further includes:

[0146] Hashing the data identifiers of the data to obtain hash values of the data identifiers.

[0147] According to the target characters in each hash value, a second string corresponding to each hash value is obtained.

[0148] In an optional implementation, the step of obtaining the second string corresponding to each hash value according to the target characters in each hash value includes:

[0149] According to the set character length, a hash prefix of each hash value is determined.

[0150] The hash prefix of each hash value is encrypted to obtain a second string corresponding to each hash value.

[0151] In an optional implementation, before the hash prefix of each hash value is encrypted to obtain a second string corresponding to each hash value, the data alignment method provided in this embodiment further includes:

[0152] The hash prefixes of each hash value are counted to obtain the number of each hash prefix.

[0153] According to the number of each hash prefix, the hash prefixes are sorted to obtain a sorting result.

[0154] According to the sorting result, a preset number of hash prefixes are selected as target prefixes according to a set rule.

[0155] Correspondingly, the step of encrypting the hash prefix of each hash value to obtain a second string corresponding to each hash value includes:

[0156] The target prefixes are encrypted to obtain a second string corresponding to each target prefix.

[0157] In an optional implementation, for each target second string in the first intersection, the step of determining the target first string corresponding to the target second string includes:

[0158] Each target second string in the first intersection is decrypted to obtain a target character corresponding to each target second string.

[0159] The target character corresponding to each target second string is matched with the hash value of each data identifier to obtain a hash value corresponding to each target second string.

[0160] The hash value corresponding to each target second string is encrypted to obtain a target first string corresponding to each target second string.

[0161] In an optional implementation, after the receiving matching platform obtains the second intersection according to the target first string, the data alignment method provided in this embodiment further includes:

[0162] Obtain log information, code information and data information.

[0163] According to the setting key, the log information, the code information and the data information are encrypted to obtain data ciphertext.

[0164] The setting key is encrypted by a public key to obtain a ciphertext key.

[0165] The data ciphertext and the ciphertext key are sent to a block chain.

[0166] The data alignment method provided by the embodiment and applied to the data participants is used to convert the data identifiers of the data to be aligned by each data participant, obtain a first string and a second string, send the second string to a matching platform first, perform privacy calculation by the matching platform to obtain a first intersection, send the first intersection to each data participant by the matching platform after obtaining the first intersection, make each data participant determine a target first string corresponding to each second string in the first intersection, send the determined target first string to the matching platform, perform privacy calculation again by the matching platform to obtain a second intersection, and realize data alignment, which avoids sending the data participating in alignment to the other party directly by each data participant and guarantees fairness and privacy in data alignment. Meanwhile, the second string is used for matching first to obtain the first intersection, and the first string participating in alignment is determined according to the first intersection, which can reduce the amount of data participating in data alignment and improve work efficiency.

[0167] The data alignment method provided by the embodiment and applied to the data participants introduces a block chain technology, increases a supervision node, establishes a data ecological alliance chain between the data participants and the supervision node, and guarantees the authenticity of the data provided by each data participant in the data alignment process.

[0168] Those skilled in the art can clearly understand the specific working process of the data alignment method applied to the data participants described above, which can refer to the corresponding process in the data alignment system, and will not be described in detail here.

[0169] On the basis of the above, please refer to Figure 4 The embodiment also provides a data alignment method applied to a matching platform in a data alignment system, and the data alignment method is executed by the matching platform in the data alignment system. Figure 4 As shown in Figure 4 The data alignment method provided by the embodiment includes steps S201 to S205.

[0170] Step S201: Obtain at least one second string sent by at least two data participants.

[0171] Step S202: match the second strings sent by each data participant to obtain a first intersection.

[0172] Step S203: send the first intersection to each data participant, so that each data participant feeds back a target first string corresponding to each target second string in the first intersection.

[0173] Step S204: match the target first strings sent by each data participant to obtain a second intersection.

[0174] Step S205: send the second intersection to each data participant.

[0175] The data alignment method applied to the matching platform provided in the embodiment, after each data participant converts the data identifiers of the data to be aligned to obtain first strings and second strings, the second strings are first sent to the matching platform, the matching platform performs privacy calculation to obtain a first intersection, the matching platform sends the first intersection to each data participant after obtaining the first intersection, each data participant determines a target first string corresponding to each second string in the first intersection, and sends the determined target first string to the matching platform, the matching platform performs privacy calculation again to obtain a second intersection, thereby realizing data alignment and avoiding each data participant from directly sending the data participating in alignment to the other party, thereby ensuring fairness and privacy in data alignment. Meanwhile, by using the second strings for matching first, and screening to obtain a first intersection, and then determining the first strings participating in alignment according to the first intersection, the amount of data participating in data alignment can be reduced, and the work efficiency is improved.

[0176] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the data alignment method applied to the matching platform described above can refer to the corresponding process in the foregoing data alignment system, and will not be described in more detail here.

[0177] Based on the above, Figure 5 the embodiment further provides a data alignment method, which is applied to a data alignment system, as shown in Figure 5 The data alignment method provided in the embodiment includes steps S301 to S304.

[0178] Step S301: each data participant sends at least one second string to the matching platform.

[0179] Step S302: the matching platform matches the second strings sent by each data participant to obtain a first intersection, and sends the first intersection to each data participant.

[0180] Step S303: Each data participant determines the target first string corresponding to each target second string in the first intersection, and sends each target first string to the matching platform.

[0181] Step S304: The matching platform matches each target first string sent by each data participant, obtains a second intersection, and sends the second intersection to each data participant.

[0182] The data alignment method applied to the data alignment system provided in the embodiment is used to convert the data identifiers of the data to be aligned by each data participant, and after obtaining the first string and the second string, the second string is first sent to the matching platform for privacy calculation to obtain the first intersection. After obtaining the first intersection, the matching platform sends the first intersection to each data participant, so that each data participant determines the target first string corresponding to each second string in the first intersection, and sends the determined target first string to the matching platform. The matching platform performs privacy calculation again to obtain the second intersection, realizes data alignment, avoids sending the data participating in alignment to the other party directly, and guarantees the fairness and privacy in data alignment. At the same time, by using the second string for matching first, and screening the first intersection, and then determining the first string participating in alignment according to the first intersection, the amount of data participating in data alignment can be reduced, and the work efficiency is improved.

[0183] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the data alignment method applied to the data alignment system described above can refer to the corresponding process in the foregoing data alignment system, and will not be described in detail here.

[0184] On the basis of the foregoing, the embodiment further provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the data alignment method of any of the foregoing embodiments when executing the program.

[0185] In the embodiment, the electronic device can include a memory, a processor, and a communication unit, the memory stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor and the memory communicate through a bus, the processor executes the machine-readable instructions, and performs the data alignment method.

[0186] The memory, the processor, and the communication unit are directly or indirectly electrically connected to each other to realize the transmission or interaction of signals. For example, these elements can be electrically connected to each other through one or more communication buses or signal lines. The processor is used to execute the executable software function modules or computer programs stored in the memory.

[0187] In the embodiment, the electronic device can be an ultra-mobile personal computer (UMPC), a physical server, or the like, or a service cluster composed of multiple physical servers, and the embodiment does not limit the specific type of the computing node.

[0188] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the electronic device described above can refer to the corresponding process in the foregoing data alignment system, and will not be described in detail here.

[0189] On the basis described above, the embodiment provides a readable storage medium, which comprises a computer program, and the computer program controls an electronic device where the readable storage medium is located to execute the data alignment method described in any one of the foregoing embodiments when running.

[0190] The readable storage medium can be, but is not limited to, a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various media that can store program codes.

[0191] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the readable storage medium described above can refer to the corresponding process in the foregoing data alignment system, and will not be described in detail here.

[0192] In summary, the data alignment method, system, electronic device and readable storage medium provided by the embodiment of the application are characterized in that each data participant sends at least one second string to a matching platform, the matching platform matches each second string sent by each data participant to obtain a first intersection, and sends the first intersection to each data participant, and each data participant, after obtaining the first intersection, determines a target first string corresponding to each target second string in the first intersection, and sends each target first string to the matching platform, so that the matching platform matches each target first string sent by each data participant to obtain a second intersection, and sends the second intersection to each data participant, thereby avoiding direct interaction of each data participant through the matching platform, and ensuring fairness and privacy of each data participant in the data alignment process.

[0193] The above describes in detail the data alignment method, system, electronic device and readable storage medium provided by the embodiments of the present application. The principles and implementation manners of the present application are described by applying specific examples. The above embodiment description is only used to help understand the technical solutions of the present application and the core ideas thereof. Those skilled in the art should understand that the technical solutions recorded in the foregoing embodiments can be modified, or some technical features thereof can be replaced equivalently, and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A data alignment method, characterized in that, Applied to data participants, the method includes: Send at least one second string to the matching platform; Receive the first intersection obtained by the matching platform based on each of the second strings; For each target second string in the first intersection, determine the target first string corresponding to that target second string; Each of the target first strings is sent to the matching platform, and the second intersection obtained by the matching platform based on the target first strings is received; The step of determining the target first string corresponding to each target second string in the first intersection includes: Decrypt each target second string in the first intersection to obtain the target character corresponding to each target second string; The target characters corresponding to each of the target second strings are matched with the hash values ​​of the data identifiers of each data to obtain the hash values ​​corresponding to each of the target second strings; The hash value corresponding to each of the target second strings is encrypted to obtain the target first string corresponding to each of the target second strings.

2. The data alignment method according to claim 1, characterized in that, Before sending at least one second string to the matching platform, the method further includes: Perform a hash calculation on the data identifier of each data to obtain the hash value of each data identifier; Based on the target character in each hash value, a second string corresponding to each hash value is obtained.

3. The data alignment method according to claim 2, characterized in that, The step of obtaining the second string corresponding to each hash value based on the target character in each hash value includes: Based on the set character length, determine the hash prefix of each hash value; The hash prefix of each hash value is encrypted to obtain the second string corresponding to each hash value.

4. The data alignment method according to claim 3, characterized in that, Before encrypting the hash prefix of each hash value to obtain the second string corresponding to each hash value, the method further includes: The number of hash prefixes for each hash value is counted to obtain the number of each hash prefix. Based on the number of each hash prefix, sort the hash prefixes to obtain the sorting result; Based on the sorting results, a preset number of hash prefixes are selected as target prefixes according to the set rules; The step of encrypting the hash prefix of each hash value to obtain the second string corresponding to each hash value includes: Each of the target prefixes is encrypted to obtain a second string corresponding to each target prefix.

5. The data alignment method according to any one of claims 1-4, characterized in that, After receiving the second intersection obtained by the matching platform based on the target first string, the method further includes: Retrieve log information, code information, and data information; The log information, code information, and data information are encrypted according to the set key to obtain ciphertext. The set key is encrypted using the public key to obtain the ciphertext key; The encrypted data and the encrypted key are sent to the blockchain.

6. A data alignment method, characterized in that, Applied to a matching platform, the method includes: Obtain at least one second string sent by at least two data participants; The first intersection is obtained by matching the second strings sent by each of the data participants. The first intersection is sent to each of the data participants, so that each of the data participants can return a target first string for each target second string in the first intersection; the target first string is obtained by encrypting the hash value corresponding to each of the target second strings. The first target string sent by each of the data participants is matched to obtain the second intersection; The second intersection is sent to each of the data participants.

7. A data alignment method, characterized in that, Applied to a data alignment system, the data alignment system including a matching platform and at least two data participants, each of the data participants being communicatively connected to the matching platform, the method includes: Each of the aforementioned data participants will send at least one second string to the matching platform; The matching platform matches the second strings sent by each of the data participants to obtain a first intersection, and sends the first intersection to each of the data participants; For each target second string in the first intersection, each data participant determines the target first string corresponding to the target second string and sends each target first string to the matching platform; the target first string is obtained by encrypting the hash value corresponding to each target second string. The matching platform matches the target first strings sent by each of the data participants to obtain a second intersection, and sends the second intersection to each of the data participants.

8. A data alignment system, characterized in that, It includes a matching platform and at least two data participants, each of which is communicatively connected to the matching platform; Each of the aforementioned data participants is used to send at least one second string to the matching platform; The matching platform is used to match the second strings sent by each of the data participants to obtain a first intersection, and then send the first intersection to each of the data participants. Each of the data participants is used to determine the target first string corresponding to each target second string in the first intersection, and send each of the target first strings to the matching platform; The target first string is obtained by encrypting the hash value corresponding to each of the target second strings; The matching platform is used to match the target first strings sent by each of the data participants to obtain a second intersection, and then send the second intersection to each of the data participants.

9. An electronic device, characterized in that, It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the computer program, implements the data alignment method according to any one of claims 1 to 5 or the data alignment method according to claim 6.

10. A computer-readable storage medium, characterized in that, The readable storage medium includes a computer program that, when executed, controls the electronic device containing the readable storage medium to perform the data alignment method according to any one of claims 1 to 5 or the data alignment method according to claim 6.

Images