Information processing method, apparatus and related device

Abstract

The application discloses an information processing method, device and related equipment, and belongs to the technical field of communication. The method comprises the following steps: receiving first information of a second device and second information of a third device, wherein the first information comprises a data set corresponding to a first cipher text set, and the second information comprises a data set corresponding to a second cipher text set; inputting the first information and the second information into a privacy set intersection function to obtain a target function corresponding to the first information and a first function value corresponding to the second information; sending the target function to the second device, wherein the target function is used for the second device to generate a second function value corresponding to the first information; and sending the first function value to the third device; wherein the first function value and the second function value are used for the third device to determine an intersection result, and the intersection result is used for representing intersection information corresponding to the first information and the second information.

Description

Technical Field

[0001] This application belongs to the field of communication technology, specifically relating to an information processing method, apparatus and related equipment. Background Technology

[0002] Currently, in some information exchange processes, information is usually encrypted during transmission to avoid leakage. However, in certain application scenarios, such as calculating advertising conversion rates, when terminal manufacturers send encrypted data packets to advertisers, they may include terminal device identifiers, which could easily lead to the leakage of these identifiers.

[0003] It is evident that information exchange in related technologies suffers from poor security. Summary of the Invention

[0004] The purpose of this application is to provide an information processing method, apparatus, and related equipment that can solve the problem of poor security in information interaction in related technologies.

[0005] To solve the above-mentioned technical problems, this application is implemented as follows:

[0006] In a first aspect, embodiments of this application provide an information processing method applied to a first device, the method comprising:

[0007] Receive first information from the second device and second information from the third device, wherein the first information includes a data set corresponding to the first ciphertext set and the second information includes a data set corresponding to the second ciphertext set;

[0008] The first information and the second information are input into the privacy set intersection function to obtain the corresponding objective function and the first function value corresponding to the second information;

[0009] The target function is sent to the second device, and the target function is used by the second device to generate a second function value corresponding to the first information;

[0010] Send the first function value to the third device;

[0011] The first function value and the second function value are used by the third device to determine the intersection result, and the intersection result is used to represent the intersection information corresponding to the first information and the second information.

[0012] Secondly, embodiments of this application provide an information processing method applied to a second device, the method comprising:

[0013] Send first information to the first device, the first information including a data set corresponding to the first ciphertext set;

[0014] The objective function sent by the first device is received, wherein the objective function is generated by the first device based on the intersection function of the privacy set, the first information, and the second information of the third device.

[0015] Generate the second function value corresponding to the first information based on the objective function;

[0016] The second function value is sent to the third device. The second function value and the first function value are used by the third device to determine the intersection result. The intersection result is used to represent the intersection information corresponding to the first information and the second information. The first function value is generated by the first device based on the intersection function of the privacy set, the first information and the second information.

[0017] Thirdly, embodiments of this application provide an information processing method applied to a third device, the method comprising:

[0018] Send a second message to the first device, the second message including a data set corresponding to the second ciphertext set;

[0019] Receive a first function value sent by the first device, wherein the first function value is generated by the first device based on the intersection function of the privacy set, the second information, and the first information of the second device;

[0020] The device receives a second function value sent by the second device, the second function value being determined by the second device based on a target function, the target function being sent by the first device to the second device, and the target function being generated by the first device based on the intersection function of the privacy set, the second information, and the first information;

[0021] The intersection result is determined based on the first function value and the second function value. The intersection result is used to represent the intersection information corresponding to the first information and the second information.

[0022] Fourthly, embodiments of this application provide an information processing apparatus, which is a first device, comprising:

[0023] The receiving module is used to receive first information from the second device and second information from the third device, wherein the first information includes a data set corresponding to a first ciphertext set and the second information includes a data set corresponding to a second ciphertext set.

[0024] The security processing module is used to input the first information and the second information into the privacy set intersection function to obtain the corresponding objective function and the first function value corresponding to the second information;

[0025] A sending module is used to send the target function to the second device, the target function being used by the second device to generate a second function value corresponding to the first information;

[0026] The sending module is further configured to send the first function value to the third device;

[0027] The first function value and the second function value are used by the third device to determine the intersection result, and the intersection result is used to represent the intersection information corresponding to the first information and the second information.

[0028] Fifthly, embodiments of this application provide an information processing apparatus, which is a second device, comprising:

[0029] A sending module is used to send first information to a first device, wherein the first information includes a data set corresponding to a first ciphertext set;

[0030] The receiving module is configured to receive the target function sent by the first device, wherein the target function is generated by the first device based on the intersection function of the privacy set, the first information and the second information of the third device;

[0031] The generation module is used to generate a second function value corresponding to the first information based on the objective function;

[0032] The sending module is further configured to send the second function value to the third device. The second function value and the first function value are used by the third device to determine the intersection result. The intersection result is used to represent the intersection information corresponding to the first information and the second information. The first function value is generated by the first device based on the intersection function of the privacy set, the first information and the second information.

[0033] Sixthly, embodiments of this application provide an information processing apparatus, which is a third device, comprising:

[0034] The sending module is used to send second information to the first device, the second information including a data set corresponding to the second ciphertext set;

[0035] The receiving module is configured to receive a first function value sent by the first device, wherein the first function value is generated by the first device based on the intersection function of the privacy set, the second information, and the first information of the second device;

[0036] The receiving module is further configured to receive a second function value sent by the second device, the second function value being determined by the second device based on a target function, the target function being sent by the first device to the second device, and the target function being generated by the first device based on the intersection function of the privacy set, the second information, and the first information;

[0037] The determining module is used to determine the corresponding intersection result based on the first function value and the second function value, and the intersection result is used to represent the intersection information corresponding to the first information and the second information.

[0038] In a seventh aspect, embodiments of this application provide an electronic device including a processor and a memory, wherein the memory stores a program or instructions executable on the processor, and the program or instructions, when executed by the processor, implement the steps of the method described in the first, second, or third aspect.

[0039] Eighthly, embodiments of this application provide a readable storage medium on which a program or instructions are stored, which, when executed by a processor, implement the steps of the method described in the first, second, or third aspect.

[0040] Ninthly, embodiments of this application provide a chip, the chip including a processor and a communication interface, the communication interface being coupled to the processor, the processor being used to run programs or instructions to implement the methods described in the first, second, or third aspects.

[0041] In a tenth aspect, embodiments of this application provide a computer program product stored in a storage medium, which is executed by at least one processor to implement the method described in the first, second, or third aspect.

[0042] In this embodiment, the system receives first information from a second device and second information from a third device; inputs the first and second information into a privacy set intersection function to obtain a corresponding objective function and a first function value corresponding to the second information; sends the objective function to the second device, which is used by the second device to generate a second function value corresponding to the first information; and sends the first function value to the third device. The first and second function values ​​are used by the third device to determine the intersection result, which represents the intersection information corresponding to the first and second information. This effectively avoids the leakage of information other than the intersection result, thus significantly improving information security. Attached Figure Description

[0043] Figure 1This is a structural diagram of the system architecture used in the information processing method provided in the embodiments of this application;

[0044] Figure 2 This is one of the flowcharts of the information processing method provided in the embodiments of this application;

[0045] Figure 3 This is the second flowchart of the information processing method provided in the embodiments of this application;

[0046] Figure 4 This is the third flowchart of the information processing method provided in the embodiments of this application;

[0047] Figure 5 This is the fourth flowchart of the information processing method provided in the embodiments of this application;

[0048] Figure 6 This is one of the structural diagrams of the information processing apparatus provided in the embodiments of this application;

[0049] Figure 7 This is a second structural diagram of the information processing device provided in the embodiments of this application;

[0050] Figure 8 This is the third structural diagram of the information processing device provided in the embodiments of this application;

[0051] Figure 9 This is one of the structural diagrams of the electronic device provided in the embodiments of this application;

[0052] Figure 10 This is the second structural diagram of the electronic device provided in the embodiments of this application. Detailed Implementation

[0053] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0054] The terms "first," "second," etc., used in the specification and claims of this application are used to distinguish similar objects and not to describe a specific order or sequence. It should be understood that such terms can be used interchangeably where appropriate so that embodiments of this application can be implemented in orders other than those illustrated or described herein, and the objects distinguished by "first," "second," etc., are generally of the same class and the number of objects is not limited; for example, a first object can be one or more. Furthermore, in the specification and claims, "and / or" indicates at least one of the connected objects, and the character " / " generally indicates that the preceding and following objects are in an "or" relationship.

[0055] To better understand the technical solution of this application, some terms used in this application will be explained below:

[0056] Private Set Intersection (PSI) refers to the process by which participating parties obtain the intersection of their respective data sets without revealing any additional information. Here, "additional information" refers to any information other than the intersection of their data sets.

[0057] For example, in scenarios involving data sharing between two parties, the implementation of privacy set intersection functions has many typical application requirements. For two parties each possessing sets X and Y, they input the element values ​​of their sets into the privacy set intersection function module to obtain the intersection result "X∩Y". Either party or both parties can obtain the intersection without revealing any information outside the intersection. Furthermore, functions such as "f(X∩Y)" can be performed on the intersection to perform statistical calculations such as intersection size and intersection weights.

[0058] Cuckoo Hash is primarily an optimized data structure. It was initially proposed to solve the problem of hash collisions, trading less computation for more space, and has advantages such as small space consumption and fast query speed.

[0059] Elliptic Curve Diffie–Hellman Key Exchange (ECDH) is an anonymous key-agreement protocol. Under this protocol, two parties exchange public and private key pairs established using elliptic curve cryptography over an insecure channel, enabling the creation of a symmetric key for a secure channel. This is a variant of ECDH that employs elliptic curve cryptography to enhance security.

[0060] The information processing method provided in this application will be described in detail below with reference to the accompanying drawings, through specific embodiments and application scenarios.

[0061] See Figure 1 , Figure 1 This is a structural diagram of the system architecture used in the information processing method provided in the embodiments of this application. For example... Figure 1 As shown, the system architecture includes a first device 10, a second device 20, a third device 30, and a fourth device 40, each of which includes multiple functional modules. The first device 10 can be understood as a third-party server or a third-party credit platform, the second device 20 and the third device 30 can be understood as participating devices in the intersection of privacy sets, and the fourth device 40 can be understood as an authentication platform or authentication center.

[0062] For example, in the case where the information processing method of this application is applied to the application scenario of advertising attribution, the first device 10 can be understood as a trusted server, the second device 20 can be understood as a terminal device manufacturer, the third device 30 can be understood as an advertiser, and the fourth device 40 can be understood as an authentication platform or authentication center. That is, in the application scenario of advertising attribution, the participants in the intersection of privacy sets are the terminal device manufacturer and the advertiser.

[0063] The first device 10 includes the following functional modules:

[0064] The Secure Processing Unit (SPU) mainly refers to the virtual environment constructed by the cloud server using code to achieve security logic. When there is no secure physical space set up on the cloud or third-party server, the SPU virtual physical security module can be adopted.

[0065] With the development of Software Guard Extensions (SGX), Intel introduced the SGX instruction set, which allows applications to implement secure (enclave) containers, providing confidentiality and integrity protection for code and data within the containers, providing mandatory guarantees for hardware security, independent of the security state of firmware and software, and providing users with a trusted execution environment;

[0066] A graphics processing unit (GPU) is a component with strong computing power, comparable to a central processing unit (CPU) which has strong management, coordination, and scheduling capabilities. GPUs have a multi-core parallel computing architecture, higher memory access speed, and higher precision floating-point arithmetic capabilities.

[0067] The privacy set intersection module, taking two participants as an example, involves one party storing data using a simple hash and the other party storing data using a cuckoo hash. Both parties input their processed data into the Oblivious Pseudorandom Function (OPRF) module. After calculation by the OPRF module, the output is given to one party's function with a key and to the other party's function value.

[0068] The database module has built-in capabilities for data preprocessing, extraction, filtering, summarization, and statistical calculation, and can be used in the pre-processing stage of PSI.

[0069] The second device 20 includes the following functional modules:

[0070] Plaintext computing hardware module;

[0071] Message-Digest Algorithm 5 (MD5) is a secure hash algorithm that is irreversible. It is mainly used in applications such as digital signatures, file integrity, and password encryption.

[0072] Curve25519 is a high-efficiency ECDH solution that is not covered by any patents. It can provide 128-bit security based on the elliptic curve problem.

[0073] Hash table storage uses a hash function to establish a mapping relationship between elements and storage locations, and the resulting structure is called a hash table.

[0074] The third device 30 includes the following functional modules:

[0075] Plaintext computing hardware module;

[0076] Message digest algorithms, also known as secure hash algorithms, are irreversible and are mainly used in applications such as digital signatures, file integrity, and password encryption.

[0077] SHA256: Belongs to the SHA-2 secure hash algorithm family, it outputs a 256-bit message digest value for any input message length;

[0078] Curve25519: Efficient Elliptic Curve ECDH Algorithm;

[0079] Cuckoo Hash Storage: Cuckoo hash is a technique used to resolve hash collisions. It can replace Bloom filters in set structures and is characterized by its smaller space footprint and fast query functionality.

[0080] By embedding plaintext computing hardware within the third device 30, when the technical solution of this application is applied in the advertising ecosystem, the data that advertisers / advertiser platforms (i.e., the third device) can obtain from different terminal platform mobile devices are all MD5-encrypted data; therefore, in the actual attribution process, the data possessed by the advertiser platform is all MD5-encrypted data.

[0081] The fourth device 40 (Certificate of Authority, CA) includes the following functional modules:

[0082] It has an embedded security server module that provides security services such as certificate application, browsing, revocation, and download.

[0083] A Registration Authority (RA) has two functions: forwarding certificate request requests from the security server to the CA; and forwarding digital certificates and certificate revocation lists issued by the CA to the Lightweight Directory Access Protocol (LDAP) server and the security server.

[0084] The CA server, the core of the Certificate Authority, is responsible for issuing certificates. The CA generates its own private and public keys to generate digital certificates; it also generates digital certificates for the security server and the RA server.

[0085] The database server module is mainly used for storing and managing keys, user information, logs, and statistical information in the CA.

[0086] In some implementations, the fourth device 40 can be represented as a Public Key Infrastructure (PKI) / CA, which can be understood as a PKI / CA server.

[0087] In the solution, the certification center can first certify two nodes, namely the second and third devices, and issue certificates to each other so that the digital certificates can be verified when the two parties communicate using the interactive protocol.

[0088] See Figure 2 , Figure 2 This is one of the flowcharts of the information processing method provided in the embodiments of this application. For example... Figure 2 As shown, this information processing method can be applied to, for example... Figure 1 The system architecture shown includes the following steps:

[0089] Step 201: The second device initiates certification with the certification center.

[0090] If the authentication is successful, the authentication center will issue the corresponding digital certificate to the second device.

[0091] Step 202: The third device initiates certification with the certification center.

[0092] If the authentication is successful, the authentication center will issue the corresponding digital certificate to the third-party device.

[0093] Step 203: The second and third devices perform two-way authentication based on their respective digital certificates.

[0094] Once mutual authentication is successful, both parties determine the format of the original input data. For example, it can be encrypted using MD5 to form a corresponding ciphertext set.

[0095] Step 204: The second device sends the first ciphertext set to the first device.

[0096] The second device can send the first set of encrypted text to the first device via Hypertext Transfer Protocol Secure (HTTPS).

[0097] Step 205: The third device sends the second ciphertext set to the first device.

[0098] The third device can send the second ciphertext set to the first device via HTTPS.

[0099] Step 206: Process the received first and second ciphertext sets using the SPU, and output the objective function and the first function value.

[0100] The SPU has embedded data processing capabilities and an OPRF (Optical Programming Function). The SPU's data processing function can process the first and second ciphertext sets, then input the processed data sets into the OPRF, and output the corresponding objective function and a first function value. The first function value can be the function value associated with the second ciphertext set; that is, the first function value can be the function value corresponding to the data set corresponding to the second ciphertext set.

[0101] In the case where OPRF is represented as function F(), the objective function can be represented as F(K,.), the first function value can be represented as F(K,Y), and Y is the data set corresponding to the second ciphertext set.

[0102] Step 207: Send the target function to the second device.

[0103] The first device sends the target function to the second device so that the second device can generate the corresponding second function value based on the target function.

[0104] The second function value can be represented as F(K, X), where X is the data set corresponding to the first ciphertext set.

[0105] Step 208: Send the second function value to the third device.

[0106] The second device sends a second function value to the third device. The second function value is generated by the second device based on the target function. The second function value can be generated by inputting the data set corresponding to the first ciphertext set into the target function.

[0107] Step 209: Send the first function value to the third device.

[0108] The first device sends the first function value to the third device.

[0109] Step 210: The second device determines the corresponding intersection result based on the first function value and the second function value.

[0110] The intersection of the first and second function values ​​can be determined based on equality consistency verification. This intersection result represents the intersection information between the data sets corresponding to the first ciphertext set and the data sets corresponding to the second ciphertext set.

[0111] The above process can be understood as follows: After the first participant (second device) and the second participant (third device) pass CA authentication and mutual authentication, and after both the first participant and the second participant confirm the data format (encrypted) to be transmitted, they send the first encrypted data (corresponding to the first participant) and the second encrypted data (corresponding to the second participant) to the SPU respectively, and perform calculations in the SPU; after calculation by the OPRF module in the SPU, the function F(K,.) with the key is output to the first parameter and the function value F(K,Y) is output to the second parameter; the first participant can generate the corresponding function value F(K,X) based on the function F(K,.) with the key and send the set F(K,X) to the second participant; the second participant can perform local equality consistency verification on F(K,X) and F(K,Y), and calculate the size of the intersection of elements after passing the verification, thereby obtaining the corresponding intersection result.

[0112] This method effectively avoids the leakage of information other than the intersection results, thus significantly improving information security.

[0113] In this application embodiment, the corresponding data set can be processed by the privacy set intersection module to obtain the corresponding intersection result. Moreover, the privacy set intersection module in this application can adopt the KKRT scheme. The KKRT scheme mainly focuses on the intersection of two-party privacy sets, and is suitable for real-world applications in terms of running time, communication complexity, and memory consumption during peak operation.

[0114] Moreover, compared to PSI, which is suitable for intersection of small sets based on the ECDH scheme, this application integrates the KKRT intersection scheme, making it applicable to real-world commercial scenarios involving large sets. Furthermore, by embedding the KKRT intersection scheme and using the Cuckoo Hash data structure and Oblivious Transfer (OT) component, combined with a hash function, the runtime of this application is four times that of the ECDH-PSI scheme under the same hardware and set conditions. Under the same conditions, theoretically, the communication computation of this application is orders of magnitude lower than that of PSI based on Bloom filters and hash tables.

[0115] When the technical solution of this application is applied to advertising scenarios, especially on the advertiser side of big data collections, it can realize the use of Cuckoo Hash for data storage and achieve parallel operation. During peak operation periods, memory is allocated to each process, which is more efficient and suitable for real-world commercial scenarios.

[0116] For example, in the application scenario of this application, the first device can be defined as a third-party trusted server, the second device as an Original Equipment Manufacturer (OEM) platform, and the third device as an Advertiser Provider (ADP) platform. Since the intersection result is generated only on the third device, meaning only the advertiser can obtain the intersection result, the first and second devices are effectively prevented from knowing the intersection result, thus improving the security of the intersection result. Furthermore, in obtaining the intersection result, plaintext containing the Open Anonymous Device Identifier (OAID) is not leaked. The initial input stage is a set of ciphertext encrypted with MD5, which is then processed by the SPU logic device and operated via OPRF, resulting in multiple encryption effects. Ultimately, the advertiser can only obtain the effectively encrypted data and cannot crack the plaintext OAID, thereby improving information security and meeting the initial product requirements.

[0117] Furthermore, after obtaining the intersection results, advertisers can calculate ad conversion rates based on these results, enabling a secure ad attribution process without disclosing the terminal manufacturer's device identifier. The ad conversion rate calculation can be performed whether the third-party device is online or offline.

[0118] Before performing step 201, the data sets of the first device and the second device can be deduplicated, and the intersection feature series of the sets can be determined at the same time to ensure that the features of both sets are covered by the intersection feature series.

[0119] This application's embodiments employ a PSI scheme constructed based on an unintentional pseudo-random function and the Cuckoo Hash tool. This type of scheme uses Cuckoo Hash to structurally optimize the input data, employs a superior Cuckoo Hash storage method, and uses an unintentional pseudo-random function to assist in achieving the function of privacy set intersection. Compared with schemes constructed using ordinary OT extension methods, the information processing method provided in this application offers superior performance, simultaneously optimizing overall performance in storage, communication, and computation speed. Moreover, the PSI scheme proposed in this application can be applied to ad attribution between terminal manufacturers and advertisers, most directly manifested in the calculation of ad conversion rates. It can calculate ad conversion rates without disclosing the terminal manufacturer's device identifier, securely completing the ad attribution process.

[0120] In one embodiment of this application, the two parties participating in the privacy intersection can be defined as A (i.e., the second device) and B (i.e., the third device). Both parties perform plaintext computation on their local plaintext computation hardware modules. Both parties are authenticated by a CA and perform identity authentication between them. In this embodiment, a 32-byte shared key can be calculated using the Curve25519 encryption algorithm. The terminal manufacturer and the advertising platform act as computation nodes, and the generated shared key is used for identity verification and information encryption between the two nodes. Participants A and B can act as computation nodes connected to a cloud-based SPU device for encrypted computation. Both parties encrypt the plaintext device identifier using SHA256 on the plaintext computation hardware module to generate a comma-separated value (Comma-S). An `exparatedValues` (CSV) file is input into the cloud server SPU. SPU has a built-in privacy set intersection function, primarily embedding the KKRT intersection function. Encrypted identifiers can occupy a column in the CSV file. In different intersection scenarios, if it's necessary to simultaneously perform intersections on other features, two or more columns need to be built into the intersection function. The specific implementation development process depends on the feature requirements. A sends the function calculation values ​​to B. After receiving the function value set, B performs a consistency comparison of the function values ​​obtained by calculating the same function on its local data. Typically, built-in functions from the Python data analysis library pandas are used to verify the intersection results.

[0121] See Figure 3 , Figure 3 This is the second flowchart of the information processing method provided in the embodiments of this application. For example... Figure 3 As shown, this information processing method can be applied to, for example... Figure 1The first device in the process includes the following steps:

[0122] Step 301: Receive the first information from the second device and the second information from the third device.

[0123] In this step, the first information can be understood as the data set corresponding to the first ciphertext set in step 204; the second information can be understood as the data set corresponding to the second ciphertext set in step 205.

[0124] Step 302: Input the first information and the second information into the privacy set intersection function to obtain the corresponding objective function and the first function value corresponding to the second information.

[0125] In this step, the intersection function of the privacy set can be OPRF, and the objective function and the first function value can be understood as the objective function and the first function value in step 206.

[0126] Step 303: Send the target function to the second device. The target function is used by the second device to generate the second function value corresponding to the first information.

[0127] Step 304: Send the first function value to the third device.

[0128] The first function value and the second function value are used by the third device to determine the intersection result, and the intersection result is used to represent the intersection information corresponding to the first information and the second information.

[0129] Optionally, the objective function is a function carrying a key.

[0130] Optionally, the first information includes a first data set, the second information includes a second data set, and the set features of both the first data set and the second data set cover the target intersection feature series.

[0131] Optionally, the step of inputting the first information and the second information into a privacy set intersection function to obtain the corresponding objective function and the first function value corresponding to the second information includes:

[0132] The first information and the second information are input into the privacy set intersection function to obtain the objective function corresponding to the target intersection feature series and the first function value corresponding to the second information.

[0133] The information processing method provided in this application embodiment can achieve... Figure 2 The various processes that the first device in the method embodiment can implement and achieve the same technical effect will not be described again here to avoid repetition.

[0134] See Figure 4 , Figure 4 This is the third flowchart of the information processing method provided in the embodiments of this application. For example... Figure 4 As shown, this information processing method can be applied to, for example... Figure 1 The second device in the process includes the following steps:

[0135] Step 401: Send the first information to the first device.

[0136] In this step, the first information can be understood as the data set corresponding to the first ciphertext set in step 204.

[0137] Step 402: Receive the target function sent by the first device. The target function is generated by the first device based on the intersection function of the privacy set, the first information, and the second information of the third device.

[0138] In this step, the intersection function of the privacy set can be OPRF, and the objective function can be understood as the objective function in step 206.

[0139] Step 403: Generate the second function value corresponding to the first information based on the objective function.

[0140] Step 404: Send the second function value to the third device. The second function value and the first function value are used by the third device to determine the intersection result. The intersection result is used to represent the intersection information corresponding to the first information and the second information. The first function value is generated by the first device based on the intersection function of the privacy set, the first information and the second information.

[0141] Optionally, sending the first information to the first device includes:

[0142] Based on the digital certificate of the second device, an authentication is initiated to the third device, wherein the digital certificate is obtained by the second device from the certification authority;

[0143] If the authentication is successful, the first information is sent to the first device via encrypted transmission.

[0144] Optionally, generating the second function value corresponding to the first information based on the objective function includes:

[0145] The first information is input into the target function to generate the second function value corresponding to the first information.

[0146] The information processing method provided in this application embodiment can achieve... Figure 2 The various processes that the second device in the method embodiment can implement and achieve the same technical effect will not be described again here to avoid repetition.

[0147] See Figure 5 , Figure 5 This is the fourth flowchart of the information processing method provided in the embodiments of this application. Figure 5 As shown, this information processing method can be applied to, for example... Figure 1 The third device in the process includes the following steps:

[0148] Step 501: Send the second information to the first device.

[0149] In this step, the second information can be understood as the data set corresponding to the second ciphertext set in step 205.

[0150] Step 502: Receive the first function value sent by the first device. The first function value is generated by the first device based on the intersection function of the privacy set, the second information, and the first information of the second device.

[0151] In this step, the intersection function of the privacy set can be OPRF, and the first function value can be understood as the first function value in step 206.

[0152] Step 503: Receive the second function value sent by the second device. The second function value is determined by the second device based on the target function. The target function is sent by the first device to the second device and is generated by the first device based on the intersection function of the privacy set, the second information, and the first information.

[0153] Step 504: Determine the corresponding intersection result based on the first function value and the second function value. The intersection result is used to represent the intersection information corresponding to the first information and the second information.

[0154] Optionally, sending the second information to the first device includes:

[0155] Based on the digital certificate of the third device, an authentication is initiated to the second device, wherein the digital certificate is obtained by the third device from the certification authority;

[0156] If the authentication is successful, the second information is sent to the first device via encrypted transmission.

[0157] The information processing method provided in this application embodiment can achieve... Figure 2 The various processes that the third device in the method embodiment can implement and achieve the same technical effect will not be described again here to avoid repetition.

[0158] See Figure 6 This application provides an information processing apparatus, wherein the apparatus 600 is a first device, and the apparatus 600 includes:

[0159] The receiving module 601 is used to receive first information from the second device and second information from the third device, wherein the first information includes a data set corresponding to a first ciphertext set and the second information includes a data set corresponding to a second ciphertext set.

[0160] The security processing module 602 is used to input the first information and the second information into the privacy set intersection function to obtain the corresponding objective function and the first function value corresponding to the second information;

[0161] Sending module 603 is used to send the target function to the second device, the target function being used by the second device to generate a second function value corresponding to the first information;

[0162] The sending module 603 is further configured to send the first function value to the third device;

[0163] The first function value and the second function value are used by the third device to determine the intersection result, and the intersection result is used to represent the intersection information corresponding to the first information and the second information.

[0164] Optionally, the objective function is a function carrying a key.

[0165] Optionally, the first information includes a first data set, the second information includes a second data set, and the set features of both the first data set and the second data set cover the target intersection feature series.

[0166] Optionally, the security processing module 602 is specifically used to input the first information and the second information into the privacy set intersection function to obtain the objective function corresponding to the target intersection feature series and the first function value corresponding to the second information.

[0167] The apparatus provided in this application embodiment can achieve... Figure 3 The various processes implemented in the method embodiment achieve the same technical effect, and will not be described again here to avoid repetition.

[0168] See Figure 7 This application provides an information processing apparatus, which is a second device, and the apparatus 700 includes:

[0169] The sending module 701 is used to send first information to the first device, the first information including a data set corresponding to the first ciphertext set;

[0170] The receiving module 702 is used to receive the target function sent by the first device, wherein the target function is generated by the first device based on the intersection function of the privacy set, the first information and the second information of the third device;

[0171] The generation module 703 is used to generate a second function value corresponding to the first information based on the objective function;

[0172] The sending module 701 is further configured to send the second function value to the third device. The second function value and the first function value are used by the third device to determine the intersection result. The intersection result is used to represent the intersection information corresponding to the first information and the second information. The first function value is generated by the first device based on the intersection function of the privacy set, the first information and the second information.

[0173] Optionally, the sending module 701 is specifically used to initiate authentication to the third device based on the digital certificate of the second device, wherein the digital certificate is obtained by the second device from the authentication center; and if the authentication is successful, to send first information to the first device in encrypted form.

[0174] Optionally, the generation module 703 is specifically used to input the first information into the target function to generate a second function value corresponding to the first information.

[0175] The apparatus provided in this application embodiment can achieve... Figure 4 The various processes implemented in the method embodiment achieve the same technical effect, and will not be described again here to avoid repetition.

[0176] See Figure 8 This application provides an information processing apparatus, which is a third device, and the apparatus 800 includes:

[0177] The sending module 801 is used to send second information to the first device, the second information including a data set corresponding to the second ciphertext set;

[0178] The receiving module 802 is used to receive a first function value sent by the first device, wherein the first function value is generated by the first device based on the intersection function of the privacy set, the second information, and the first information of the second device;

[0179] The receiving module 802 is further configured to receive a second function value sent by the second device, the second function value being determined by the second device based on a target function, the target function being sent by the first device to the second device, and the target function being generated by the first device based on the intersection function of the privacy set, the second information, and the first information;

[0180] The determining module 803 is used to determine the corresponding intersection result based on the first function value and the second function value, and the intersection result is used to represent the intersection information corresponding to the first information and the second information.

[0181] Optionally, the sending module 801 is specifically used to initiate authentication to the second device based on the digital certificate of the third device, wherein the digital certificate is obtained by the third device from the authentication center; and if the authentication is successful, to send the second information to the first device in encrypted form.

[0182] The apparatus provided in this application embodiment can achieve... Figure 5 The various processes implemented in the method embodiment achieve the same technical effect, and will not be described again here to avoid repetition.

[0183] Optionally, such as Figure 9 As shown, this application embodiment also provides an electronic device 900, including a processor 901 and a memory 902. The memory 902 stores a program or instructions that can run on the processor 901. For example, when the electronic device is a first device, the program or instructions executed by the processor 901 implement the above-mentioned... Figure 3 The various steps of the method embodiments, which can achieve the same technical effect, will not be repeated here to avoid repetition; for example, when the electronic device is a second device, the program or instructions executed by the processor 901 implement the above. Figure 4 The various steps of the method embodiments, which can achieve the same technical effect, will not be repeated here to avoid repetition; for example, when the electronic device is a third device, the program or instructions executed by the processor 901 implement the above. Figure 5 The steps in the method embodiments are the same and can achieve the same technical effect, so they will not be repeated here to avoid repetition.

[0184] The electronic device can be a terminal or other devices besides a terminal. For example, the electronic device can be a mobile phone, tablet computer, laptop computer, handheld computer, in-vehicle electronic device, mobile internet device (MID), augmented reality (AR) / virtual reality (VR) device, robot, wearable device, ultra-mobile personal computer (UMPC), netbook, or personal digital assistant (PDA), etc. It can also be a server, network attached storage (NAS), personal computer (PC), television (TV), ATM, or self-service machine, etc. The embodiments of this application do not specifically limit it.

[0185] It should be noted that the electronic devices in the embodiments of this application include the mobile electronic devices and non-mobile electronic devices described above.

[0186] See Figure 10 , Figure 10 This is a structural diagram of an electronic device provided in an embodiment of this application, as shown below. Figure 10 As shown, the electronic device 1000 includes, but is not limited to, components such as: radio frequency unit 1001, network module 1002, audio output unit 1003, input unit 1004, sensor 1005, display unit 1006, user input unit 1007, interface unit 1008, memory 1009, and processor 1010.

[0187] Those skilled in the art will understand that the electronic device 1000 may also include a power supply (such as a battery) for supplying power to various components. The power supply may be logically connected to the processor 1010 through a power management system, thereby enabling functions such as managing charging, discharging, and power consumption through the power management system. Figure 10 The electronic device structure shown does not constitute a limitation on the electronic device. The electronic device may include more or fewer components than shown, or combine certain components, or have different component arrangements, which will not be elaborated here.

[0188] It should be understood that, in this embodiment, the input unit 1004 may include a graphics processing unit (GPU) 10041 and a microphone 10042. The GPU 10041 processes image data of still images or videos obtained by an image capture device (such as a camera) in video capture mode or image capture mode. The display unit 1006 may include a display panel 10061, which may be configured in the form of a liquid crystal display, an organic light-emitting diode, or the like. The user input unit 1007 includes a touch panel 10071 and at least one of other input devices 10072. The touch panel 10071 is also called a touch screen. The touch panel 10071 may include a touch detection device and a touch controller. Other input devices 10072 may include, but are not limited to, physical keyboards, function keys (such as volume control buttons, power buttons, etc.), trackballs, mice, and joysticks, which will not be described in detail here.

[0189] The memory 1009 can be used to store software programs and various data. The memory 1009 may primarily include a first storage area for storing programs or instructions and a second storage area for storing data. The first storage area may store the operating system, application programs or instructions required for at least one function (such as sound playback, image playback, etc.). Furthermore, the memory 1009 may include volatile memory or non-volatile memory, or both. The non-volatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory can be random access memory (RAM), static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct memory bus RAM (DRRAM). The memory 1009 in this embodiment includes, but is not limited to, these and any other suitable types of memory.

[0190] The processor 1010 may include one or more processing units; optionally, the processor 1010 integrates an application processor and a modem processor, wherein the application processor mainly handles operations involving the operating system, user interface, and applications, and the modem processor mainly handles wireless communication signals, such as a baseband processor. It is understood that the aforementioned modem processor may also not be integrated into the processor 1010.

[0191] The electronic device provided in this application embodiment can achieve... Figure 3 or Figure 4 or Figure 5 The various processes implemented in the method embodiments achieve the same technical effect, and will not be described again here to avoid repetition.

[0192] This application embodiment also provides a readable storage medium storing a program or instructions that, when executed by a processor, implement the above-described functionality. Figure 3 or Figure 4 or Figure 5 The methods and processes of the above embodiments are the same and can achieve the same technical effects. To avoid repetition, they will not be described again here.

[0193] The processor is the processor in the electronic device described in the above embodiments. The readable storage medium includes computer-readable storage media, such as computer read-only memory (ROM), random access memory (RAM), magnetic disk, or optical disk.

[0194] This application embodiment also provides a chip, the chip including a processor and a communication interface, the communication interface being coupled to the processor, the processor being used to run programs or instructions to implement the above. Figure 3 or Figure 4 or Figure 5 The methods and processes of the above embodiments are the same and can achieve the same technical effects. To avoid repetition, they will not be described again here.

[0195] It should be understood that the chip mentioned in the embodiments of this application may also be referred to as a system-on-a-chip, system chip, chip system, or system-on-a-chip, etc.

[0196] This application provides a computer program product, which is stored in a storage medium and executed by at least one processor to implement the above-described functionality. Figure 3 or Figure 4 or Figure 5 The methods and processes of the above embodiments are the same and can achieve the same technical effects. To avoid repetition, they will not be described again here.

[0197] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element. Furthermore, it should be noted that the scope of the methods and apparatuses in the embodiments of this application is not limited to performing functions in the order shown or discussed, but may also include performing functions substantially simultaneously or in the reverse order, depending on the functions involved. For example, the described methods may be performed in a different order than described, and various steps may be added, omitted, or combined. Additionally, features described with reference to certain examples may be combined in other examples.

[0198] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a computer product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the various embodiments of this application.

[0199] The embodiments of this application have been described above with reference to the accompanying drawings. However, this application is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of this application without departing from the spirit and scope of the claims, and all of these forms are within the protection scope of this application.

Claims

1. An information processing method, characterized in that, Applied to a first device, wherein the first device is a third-party server or a third-party credit platform, the method includes: The device receives first information from a second device and second information from a third device. The first information includes a data set corresponding to a first ciphertext set, and the second information includes a data set corresponding to a second ciphertext set. The second device and the third device are participating devices in the intersection of privacy sets. In the security processing module (SPU) of the first device, the first information and the second information are input into the privacy set intersection function to obtain the corresponding objective function and the first function value corresponding to the second information; The target function is sent to the second device. The target function is a function carrying a key. The target function is used by the second device to generate a second function value corresponding to the first information. Send the first function value to the third device; The first function value and the second function value are used by the third device to determine the intersection result, and the intersection result is used to represent the intersection information corresponding to the first information and the second information.

2. The method according to claim 1, characterized in that, The first information includes a first data set, and the second information includes a second data set. The set features of both the first data set and the second data set cover the target intersection feature series.

3. The method according to claim 2, characterized in that, The step of inputting the first information and the second information into the intersection function of the privacy set to obtain the corresponding objective function and the first function value corresponding to the second information includes: The first information and the second information are input into the privacy set intersection function to obtain the objective function corresponding to the target intersection feature series and the first function value corresponding to the second information.

4. An information processing method, characterized in that, Applied to a second device, the method includes: Send first information to the first device, the first information including a data set corresponding to the first ciphertext set; The system receives a target function sent by the first device. The target function is generated by the first device based on the privacy set intersection function, the first information, and the second information of the third device. The first device is a third-party server or a third-party credit platform, and the second device and the third device are participating devices in the privacy set intersection. The target function is a function carrying a key. The second function value corresponding to the first information is generated based on the objective function. The second function value is obtained by inputting the first information and the second information into the privacy set intersection function in the security processing module (SPU) of the first device. The second function value is sent to the third device. The second function value and the first function value are used by the third device to determine the intersection result. The intersection result is used to represent the intersection information corresponding to the first information and the second information. The first function value is generated by the first device based on the intersection function of the privacy set, the first information and the second information.

5. The method according to claim 4, characterized in that, Sending the first information to the first device includes: Based on the digital certificate of the second device, an authentication is initiated to the third device, wherein the digital certificate is obtained by the second device from the certification authority; If the authentication is successful, the first information is sent to the first device via encrypted transmission.

6. The method according to claim 4, characterized in that, The step of generating the second function value corresponding to the first information based on the objective function includes: The first information is input into the target function to generate the second function value corresponding to the first information.

7. An information processing method, characterized in that, Applied to a third device, the method includes: Send a second message to the first device, the second message including a data set corresponding to the second ciphertext set; The system receives a first function value sent by the first device. The first function value is generated by the first device based on the privacy set intersection function, the second information, and the first information of the second device. The first device is a third-party server or a third-party credit platform, and the second device and the third device are participating devices in the privacy set intersection. The system receives a second function value sent by the second device. The second function value is determined by the second device based on a target function. The target function is sent by the first device to the second device and is generated by the first device based on the privacy set intersection function, the second information, and the first information. The target function is a function carrying a key. The target function is obtained by inputting the first information and the second information into the privacy set intersection function in the security processing module (SPU) of the first device. The intersection result is determined based on the first function value and the second function value. The intersection result is used to represent the intersection information corresponding to the first information and the second information.

8. The method according to claim 7, characterized in that, Sending the second information to the first device includes: Based on the digital certificate of the third device, an authentication is initiated to the second device, wherein the digital certificate is obtained by the third device from the certification authority; If the authentication is successful, the second information is sent to the first device via encrypted transmission.

9. An information processing device, characterized in that, The device is a first device, which is a third-party server or a third-party credit platform. The device includes: The receiving module is used to receive first information from the second device and second information from the third device. The first information includes a data set corresponding to the first ciphertext set, and the second information includes a data set corresponding to the second ciphertext set. The second device and the third device are participating devices in the intersection of privacy sets. The security processing module is used to input the first information and the second information into the privacy set intersection function in the security processing module (SPU) of the first device to obtain the corresponding objective function and the first function value corresponding to the second information; The sending module is used to send the target function to the second device. The target function is a function carrying a key, and the target function is used by the second device to generate a second function value corresponding to the first information. The sending module is further configured to send the first function value to the third device; The first function value and the second function value are used by the third device to determine the intersection result, and the intersection result is used to represent the intersection information corresponding to the first information and the second information.

10. The apparatus according to claim 9, characterized in that, The first information includes a first data set, and the second information includes a second data set. The set features of both the first data set and the second data set cover the target intersection feature series.

11. The apparatus according to claim 10, characterized in that, The security processing module is specifically used to input the first information and the second information into the privacy set intersection function to obtain the objective function corresponding to the target intersection feature series and the first function value corresponding to the second information.

12. An information processing device, characterized in that, The device is a second device, and the device includes: A sending module is used to send first information to a first device, wherein the first information includes a data set corresponding to a first ciphertext set; The receiving module is used to receive the target function sent by the first device. The target function is generated by the first device based on the privacy set intersection function, the first information and the second information of the third device. The first device is a third-party server or a third-party credit platform, and the second device and the third device are participating devices in the privacy set intersection. The target function is a function carrying a key. The generation module is used to generate a second function value corresponding to the first information based on the objective function. The second function value is obtained by inputting the first information and the second information into the privacy set intersection function in the security processing module (SPU) of the first device. The sending module is further configured to send the second function value to the third device. The second function value and the first function value are used by the third device to determine the intersection result. The intersection result is used to represent the intersection information corresponding to the first information and the second information. The first function value is generated by the first device based on the intersection function of the privacy set, the first information and the second information.

13. The apparatus according to claim 12, characterized in that, The sending module is specifically used to initiate authentication to the third device based on the digital certificate of the second device, wherein the digital certificate is obtained by the second device from the authentication center. If the authentication is successful, the first information is sent to the first device via encrypted transmission.

14. The apparatus according to claim 12, characterized in that, The generation module is specifically used to input the first information into the target function and generate the second function value corresponding to the first information.

15. An information processing device, characterized in that, The device is a third device, and the device includes: The sending module is used to send second information to the first device, the second information including a data set corresponding to the second ciphertext set; The receiving module is used to receive a first function value sent by the first device. The first function value is generated by the first device based on the privacy set intersection function, the second information, and the first information of the second device. The first device is a third-party server or a third-party credit platform, and the second device and the third device are participating devices in the privacy set intersection. The receiving module is further configured to receive a second function value sent by the second device. The second function value is determined by the second device based on a target function. The target function is sent by the first device to the second device and is generated by the first device based on the privacy set intersection function, the second information, and the first information. The target function is a function carrying a key. The target function is obtained by inputting the first information and the second information into the privacy set intersection function in the security processing module (SPU) of the first device. The determining module is used to determine the corresponding intersection result based on the first function value and the second function value, and the intersection result is used to represent the intersection information corresponding to the first information and the second information.

16. The apparatus according to claim 15, characterized in that, The sending module is specifically used to initiate authentication to the second device based on the digital certificate of the third device, wherein the digital certificate is obtained by the third device from the authentication center. If the authentication is successful, the second information is sent to the first device via encrypted transmission.

17. An electronic device, characterized in that, It includes a processor and a memory, wherein the memory stores a program or instructions that can run on the processor, and the program or instructions, when executed by the processor, implement the steps of the information processing method as described in any one of claims 1 to 8.

18. A readable storage medium, characterized in that, The readable storage medium stores a program or instructions that, when executed by a processor, implement the steps of the information processing method as described in any one of claims 1 to 8.

Images