Method and device for adjusting boundary of data security computing space operated by data element

Abstract

Embodiments of the present application relate to a kind of data element operation data security computing space boundary adjustment method and device, the method comprises: obtaining computing task;Output computing task and first connection authentication information to first data source and first computing node;Second network adjustment information is output to first computing node, so that first computing node is adjusted to the boundary of second data source at the beginning of second period;Second connection authentication information is output to second data source and first computing node.The technical scheme is adopted, one aspect is satisfied by boundary adjustment the principle of original data not out of domain, avoid the possible existence data security hidden danger, improve the security of data calculation;Another aspect, by the mode of space and time multiplexing, effective boundary control is realized, while improving the security of data calculation, improve the flexibility of computing deployment.

Description

Technical Field

[0001] This invention relates to the field of secure computing technology, and in particular to a method and apparatus for adjusting the boundary of a secure computing space for data element operations. Background Technology

[0002] Data element operation refers to the process by which data element owners analyze and mine data elements to provide compliant information hidden within massive datasets to users. Existing data security computing solutions involving data element operation typically aggregate cloud service nodes into a computing space corresponding to a computing task. Within this computing space, each computing node acquires data uploaded from various data source nodes (each data source node is not itself a computing node) and performs computations. Corresponding computing solutions may include multi-party secure computation, federated learning, or setting up a TEE environment for computation.

[0003] However, when performing calculations in the above manner, the data is transmitted from the local location of the data source, and the computing space is relatively fixed, which makes the calculation lack flexibility. Summary of the Invention

[0004] Based on the above-mentioned situation of the prior art, the purpose of this embodiment of the invention is to provide a method and apparatus for adjusting the boundary of the data security computing space for data element operation, which constructs a dynamically adjustable security computing space according to the needs of computing tasks, thereby improving the security and flexibility of data computing.

[0005] To achieve the above objectives, according to one aspect of the present invention, a method for adjusting the boundaries of a data security computing space is provided, applied to a server side, the method comprising:

[0006] A computing task is acquired, and at least a first secure computing space and a first data source, as well as a second secure computing space and a second data source, are determined based on the computing task for performing the computing; the first secure computing space includes a first computing node in a first time period, and the second secure computing space includes a first computing node in a second time period;

[0007] Output the computation task and the first connection authentication information to the first data source and the first computing node to establish an intra-domain connection between the first data source and the first computing node, and enable the first computing node to perform computation using the data from the first data source according to the computation task to obtain the first intermediate result;

[0008] Output the second network adjustment information to the first computing node so that the first computing node adjusts to be within the boundary of the second data source at the beginning of the second time period;

[0009] The second connection authentication information is output to the second data source and the first computing node to establish an intra-domain connection between the second data source and the first computing node, and the first computing node uses the data from the second data source and the first intermediate result to perform calculations according to the calculation task to obtain the first calculation result.

[0010] Furthermore, the first computing node is a common node, and the common node is located outside the physical boundary of all data sources; the method further includes:

[0011] Output the first network adjustment information to the first computing node so that the first computing node adjusts to the boundary of the first data source at the beginning of the first time period.

[0012] Furthermore, the method also includes:

[0013] Receive first end information sent by the first computing node, the end information indicating that the calculation of the first intermediate result is complete;

[0014] A first data clearing instruction is sent to the first computing node according to the first end information, so that the first computing node can clear and verify the local data according to the first data clearing instruction;

[0015] The data to be cleared and verified includes the original data of the first data source stored or cached in the first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data.

[0016] Furthermore, the method also includes:

[0017] Receive a second end message sent by the first computing node, the end message indicating that the first calculation result has been calculated;

[0018] A second data clearing instruction is sent to the first computing node according to the second end information, so that the first computing node can clear and verify the local data according to the second data clearing instruction;

[0019] The data to be cleared and verified includes the original data of the second data source stored or cached in the first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data.

[0020] Furthermore, the method also includes:

[0021] Output the third network adjustment information to the first computing node so that the first computing node adjusts to the boundary of the third data source at the beginning of the third time period;

[0022] Output the third connection authentication information to the third data source and the first computing node to establish an intra-domain connection between the third data source and the first computing node, and enable the first computing node to perform calculations based on the data from the third data source, the first intermediate result, and the first calculation result to obtain the second calculation result according to the calculation task.

[0023] The first calculation result is an intermediate result.

[0024] Furthermore, the method also includes:

[0025] Output the fourth network adjustment information to the first computing node so that the first computing node adjusts to be within the boundary of the second computing node at the beginning of the fourth time period;

[0026] The fourth connection authentication information is output to the first computing node and the second computing node to establish an intra-domain connection between the second computing node and the first computing node, and to enable the first computing node to perform calculations with the second computing node according to the calculation task to obtain the third calculation result.

[0027] Furthermore, the first network adjustment information includes network information that needs to be adjusted, so that the first computing node adjusts the network of the first computing node and the network of the first data source to the same network in a targeted manner according to the first network adjustment information, so that the first computing node is adjusted to be within the boundary of the first data source;

[0028] The second network adjustment information includes network information that needs to be adjusted, so that the first computing node adjusts the network of the first computing node and the network of the second data source to the same network in a targeted manner according to the second network adjustment information, so that the first computing node is adjusted to be within the boundary of the second data source;

[0029] The third network adjustment information includes the network information that needs to be adjusted, so that the first computing node adjusts the network of the first computing node and the network of the third data source to the same network in a targeted manner according to the third network adjustment information, so that the first computing node is adjusted to be within the boundary of the third data source;

[0030] The fourth network adjustment information includes network information that needs to be adjusted, so that the first computing node adjusts the network of the first computing node and the network of the second computing node to the same network in a target manner according to the fourth network adjustment information, so that the first computing node is adjusted to be within the boundary of the second computing node.

[0031] The target method includes at least one of the following: software-defined networking, adjusting the gateway, and adjusting the network switch.

[0032] According to a second aspect of the present invention, a method for adjusting the boundary of a data security computing space is provided, applied to a computing node, wherein the computing node and a first data source are located on the same physical device, the method comprising:

[0033] Receive the computing task and the first connection authentication information sent by the server, and establish an intra-domain connection with the first data source based on the first connection authentication information;

[0034] The first intermediate result is obtained by using data from the first data source to perform calculations based on the calculation task;

[0035] Receive the second network adjustment information sent by the server, and adjust to the boundary of the second data source at the beginning of the second time period according to the second network adjustment information;

[0036] Receive the second connection authentication information sent by the server, and establish an intra-domain connection with the second data source based on the second connection authentication information;

[0037] The first calculation result is obtained by using data from the second data source and the first intermediate result according to the calculation task;

[0038] The computing node and the first data source belong to the first secure computing space during the first time period, and the computing node and the second data source belong to the second secure computing space during the second time period.

[0039] Furthermore, the step of using data from the first data source to calculate the first intermediate result includes: in a trusted execution environment, loading data from the first data source and using the data to calculate the first intermediate result; and storing the first intermediate result after data sealing and encryption.

[0040] The step of using data from the second data source and the first intermediate result to calculate the first calculation result includes: in a trusted execution environment, loading data from the second data source and using the data and the first intermediate result to calculate the first calculation result.

[0041] According to a third aspect of the present invention, a method for adjusting the boundary of a data security computing space is provided, applied to a computing node, wherein the computing node is a common node located outside the physical boundary of all data sources, the method comprising:

[0042] Receive the first network adjustment information sent by the server, and adjust to within the boundary of the first data source at the beginning of the first time period according to the first network adjustment information;

[0043] Receive the computing task and the first connection authentication information sent by the server, and establish an intra-domain connection with the first data source based on the first connection authentication information;

[0044] The first intermediate result is obtained by using data from the first data source to perform calculations based on the calculation task;

[0045] Receive the second network adjustment information sent by the server, and adjust to the boundary of the second data source at the beginning of the second time period according to the second network adjustment information;

[0046] Receive the second connection authentication information sent by the server, and establish an intra-domain connection with the second data source based on the second connection authentication information;

[0047] The first calculation result is obtained by using data from the second data source and the first intermediate result according to the calculation task;

[0048] The computing node and the first data source belong to the first secure computing space during the first time period, and the computing node and the second data source belong to the second secure computing space during the second time period.

[0049] Furthermore, the method also includes:

[0050] The received computing tasks undergo security audits, the audited computing tasks are hashed, and the hashed computing tasks are sent to the server so that the server-side computing nodes can perform hash verification on the computing tasks after receiving the first computing result.

[0051] Furthermore, the method also includes:

[0052] After obtaining the first intermediate result, the local data is cleared and verified. The cleared and verified data includes the original data of the first data source stored or cached in the first computing node, the intermediate data transformed from the original data, and the intermediate data calculated using the original data.

[0053] After obtaining the first calculation result, the local data is cleared and verified. The cleared and verified data includes the original data of the second data source stored or cached in the first computing node, the intermediate data converted from the original data, and the intermediate data calculated using the original data.

[0054] Furthermore, the method also includes:

[0055] After obtaining the first intermediate result, a first end information is sent to the server so that the server can send a first data clearing command based on the first end information;

[0056] The system receives a first data clearing instruction sent by the server and clears and verifies the local data according to the first data clearing instruction. The cleared and verified data includes the original data of the first data source stored or cached in the first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data.

[0057] After obtaining the first calculation result, a second end information is sent to the server so that the server can send a second data clearing command based on the second end information;

[0058] The system receives a second data clearing instruction sent by the server and clears and verifies the local data according to the second data clearing instruction. The cleared and verified data includes the original data of the second data source stored or cached in the first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data.

[0059] Furthermore, the clearing of local data includes:

[0060] Restart the server for the computing task or computing node; or,

[0061] Load the image of the computing task to restore the computing task, wherein the image of the computing task is set on the server side;

[0062] The verification includes remote authentication via the server.

[0063] According to a fourth aspect of the present invention, a boundary adjustment device for a data security computing space is provided, applied on a server side, the device comprising:

[0064] A secure computing space determination module is used to acquire computing tasks and determine at least a first secure computing space and a first data source, as well as a second secure computing space and a second data source, for performing computing based on the computing tasks; the first secure computing space includes a first computing node in a first time period, and the second secure computing space includes a first computing node in a second time period;

[0065] The first connection module is used to output computing tasks and first connection authentication information to the first data source and the first computing node, so as to establish an intra-domain connection between the first data source and the first computing node, and enable the first computing node to use the data of the first data source to perform calculations according to the computing tasks to obtain the first intermediate result.

[0066] The network adjustment module outputs second network adjustment information to the first computing node so that the first computing node adjusts to within the boundary of the second data source at the beginning of the second time period.

[0067] The second connection module is used to output the second connection authentication information to the second data source and the first computing node to establish an intra-domain connection between the second data source and the first computing node, and to enable the first computing node to perform calculations based on the data from the second data source and the first intermediate result to obtain the first calculation result according to the calculation task.

[0068] According to a fifth aspect of the present invention, a method for adjusting the boundary of a data security computing space is provided, applied to a server, the method comprising:

[0069] Output the first network adjustment information to the first computing node so that the first computing node adjusts to the boundary of the first data source at the beginning of the first time period, and uses the data from the first data source to perform calculations to obtain the first intermediate result;

[0070] The second network adjustment information is output to the first computing node so that the first computing node is adjusted to be within the boundary of the second data source at the beginning of the second time period, and the first calculation result is obtained by using the data from the second data source and the first intermediate result.

[0071] The first computing node is a public node, which is located outside the physical boundary of all data sources.

[0072] Furthermore, the method also includes:

[0073] The third network adjustment information is output to the first computing node so that the first computing node is adjusted to be within the boundary of the third data source at the beginning of the third time period, and the second calculation result is obtained by using the data of the third data source, the first intermediate result and the first calculation result.

[0074] The first calculation result is an intermediate result.

[0075] Furthermore, the method also includes:

[0076] The fourth network adjustment information is output to the first computing node so that the first computing node is adjusted to be within the boundary of the second computing node at the beginning of the fourth time period, and the first computing node and the second computing node perform calculations to obtain the third calculation result.

[0077] According to a sixth aspect of the present invention, a method for adjusting the boundary of a data security computing space is provided, applied to a computing node, wherein the computing node and a first data source are located on the same physical device, the method comprising: adjusting the boundary of a data security computing space according to a preset network adjustment strategy,

[0078] Establish an intradomain connection with the first data source and use the data from the first data source to perform calculations to obtain the first intermediate result;

[0079] At the start of the second time period, adjust to within the boundaries of the second data source;

[0080] Establish an intradomain connection with the second data source, and use the data from the second data source and the first intermediate result to perform calculations to obtain the first calculation result.

[0081] A seventh aspect of the present invention provides a method for adjusting the boundary of a data security computing space, applied to a computing node, wherein the computing node is a common node located outside the physical boundary of all data sources, the method comprising: adjusting according to a preset network adjustment strategy,

[0082] At the start of the first time period, adjust to the boundary of the first data source;

[0083] Establish an intradomain connection with the first data source and use the data from the first data source to perform calculations to obtain the first intermediate result;

[0084] At the start of the second time period, adjust to within the boundaries of the second data source;

[0085] Establish an intradomain connection with the second data source, and use the data from the second data source and the first intermediate result to perform calculations to obtain the first calculation result.

[0086] Furthermore, the method also includes:

[0087] After obtaining the first intermediate result, the local data is cleared and verified. The cleared and verified data includes the original data of the first data source stored or cached in the first computing node, the intermediate data transformed from the original data, and the intermediate data calculated using the original data.

[0088] After obtaining the first calculation result, the local data is cleared and verified. The cleared and verified data includes the original data of the second data source stored or cached in the first computing node, the intermediate data converted from the original data, and the intermediate data calculated using the original data.

[0089] An eighth aspect of the present invention provides a method for adjusting the boundaries of a data security computing space, applied to a computing node, wherein the computing node is a common node located outside the physical boundaries of all data sources, the method comprising:

[0090] At the start of the first time period, adjust to the boundary of the first data source;

[0091] Establish an intradomain connection with the first data source and use the data from the first data source to perform calculations to obtain the first intermediate result;

[0092] The first intermediate result is sealed, encrypted, and stored in the storage device within the computing node or in an external storage device, and all other data except the stored data is deleted.

[0093] At the start of the second time period, adjust to within the boundaries of the second data source;

[0094] Establish an intra-domain connection with the second data source, and use the data from the second data source and the first intermediate result to perform calculations to obtain the first calculation result;

[0095] The first calculation result is sealed and encrypted, and then stored in the storage device within the computing node or in an external storage device.

[0096] In summary, this invention provides a method and apparatus for adjusting the boundary of a data security computing space for data element operations. The method includes: acquiring a computing task; determining at least a first secure computing space and a first data source, as well as a second secure computing space and a second data source, based on the computing task; outputting the computing task and first connection authentication information to the first data source and the first computing node to establish an intra-domain connection between the first data source and the first computing node; outputting second network adjustment information to the first computing node so that the first computing node adjusts to the boundary of the second data source at the beginning of a second time period; and outputting second connection authentication information to the second data source and the first computing node to establish an intra-domain connection between the second data source and the first computing node. By adopting the above technical solution, on the one hand, the boundary adjustment satisfies the principle that original data does not leave the domain, avoiding potential data security risks and improving the security of data computing; on the other hand, it achieves effective boundary control through a space-time reuse mode, that is, at a certain moment, the switching of the network boundary makes a "shared" computing element or computing node become exclusive, and after the time period ends, the relevant original data and sensitive data are cleared, improving both the security of data computing and the flexibility of computing deployment. Attached Figure Description

[0097] Figure 1 This is a flowchart of a data security computing space boundary adjustment method provided in an embodiment of the present invention;

[0098] Figure 2 This is a flowchart of a method for adjusting the boundary of a data security computing space provided in another embodiment of the present invention;

[0099] Figure 3 This is a flowchart of a method for adjusting the boundary of a data security computing space provided in another embodiment of the present invention;

[0100] Figure 4This is a schematic diagram of the network boundary and data interaction between nodes in an embodiment of the present invention. Figure 1 ;

[0101] Figure 5 This is a schematic diagram of the network boundary and data interaction between nodes in an embodiment of the present invention. Figure 2 ;

[0102] Figure 6 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0103] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to specific embodiments and the accompanying drawings. It should be understood that these descriptions are merely exemplary and not intended to limit the scope of the invention. Furthermore, descriptions of well-known structures and techniques are omitted in the following description to avoid unnecessarily obscuring the concept of the invention.

[0104] It should be noted that, unless otherwise defined, the technical or scientific terms used in one or more embodiments of the present invention should have the ordinary meaning understood by one of ordinary skill in the art to which this invention pertains. The terms "first," "second," and similar terms used in one or more embodiments of the present invention do not indicate any order, quantity, or importance, but are merely used to distinguish different components. Terms such as "comprising" or "including" mean that the element or object preceding the word encompasses the element or object listed following the word and its equivalents, without excluding other elements or objects. Terms such as "connected" or "linked" are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect.

[0105] The technical solution of the present invention will be described in detail below with reference to the accompanying drawings. An embodiment of the present invention provides a method for adjusting the boundaries of a data security computing space, applied to a server-side application. This server-side application can be, for example, a regulatory body monitoring and managing the secure computing process. An embodiment of the present invention relates to a computing node that can be sliced ​​according to time during the computing process, allowing the same computing node to be assigned to the boundaries of different data sources at different time periods. For example, a computing task may involve multiple stages. In the first stage, a first computing node is assigned to the boundary of a first data source. After the first stage of computing is completed (i.e., the data computation of the first data source is completed), the first computing node is assigned to the boundary of a second data source for the second stage of computing. Figure 1 The flowchart of the boundary adjustment method for the data security computing space provided in this embodiment is shown below. Figure 1 As shown, the method includes the following steps:

[0106] S102. Obtain the computing task, and determine at least a first secure computing space and a first data source, as well as a second secure computing space and a second data source, for performing the computing based on the computing task; the first secure computing space includes a first computing node in a first time period, and the second secure computing space includes a first computing node in a second time period. The computing task may include the hardware, platform, and algorithm required for this computing, as well as the corresponding data requirements (or directly specify the data source).

[0107] S104. Output the computing task and first connection authentication information to the first data source and the first computing node to establish an intra-domain connection between the first data source and the first computing node, and enable the first computing node to perform calculations using the data from the first data source according to the computing task to obtain a first intermediate result. In this embodiment, the first computing node is located in the same physical device as the first data source, that is, it is located within the boundary of the first data source. In this case, the server outputs the computing task and first connection authentication information to the first data source and the first computing node to establish an intra-domain connection between them.

[0108] S106. Output the second network adjustment information to the first computing node so that the first computing node is adjusted to be within the boundary of the second data source at the beginning of the second time period. During the second time period, the first computing node needs to use data from the second data source for computation, so network adjustment needs to be performed on the first computing node at the beginning of the second time period so that the first computing node is adjusted to be within the boundary of the second data source at the beginning of the second time period.

[0109] S108. Output the second connection authentication information to the second data source and the first computing node to establish an intra-domain connection between the second data source and the first computing node, and enable the first computing node to perform calculations using the data from the second data source and the first intermediate result according to the computing task to obtain a first calculation result. In this embodiment, the first calculation result can be the final calculation result.

[0110] According to certain optional embodiments, the first computing node can be a public node, which means a computing node located outside the physical boundary of all the data sources. Therefore, based on the above embodiments, before outputting the computing task and the first connection authentication information to the first data source and the first computing node, the first computing node needs to be adjusted to be within the boundary of the first data source. The method further includes:

[0111] S103. Output the first network adjustment information to the first computing node so that the first computing node is adjusted to be within the boundary of the first data source at the beginning of the first time period.

[0112] According to certain optional embodiments, the method may further include the following steps:

[0113] S105. Output the third network adjustment information to the first computing node so that the first computing node is adjusted to the boundary of the third data source at the beginning of the third time period.

[0114] S107. Output the third connection authentication information to the third data source and the first computing node to establish an intra-domain connection between the third data source and the first computing node, and enable the first computing node to perform calculations based on the computing task using the data from the third data source, the first intermediate result, and the first calculation result to obtain the second calculation result. The first calculation result may be, for example, an intermediate result obtained by the first computing node using the first intermediate result and the data from the second data source.

[0115] According to certain optional embodiments, the method may further include the following steps:

[0116] S109. Output the fourth network adjustment information to the first computing node so that the first computing node is adjusted to be within the boundary of the second computing node at the beginning of the fourth time period.

[0117] S1011. Output the fourth connection authentication information to the first computing node and the second computing node to establish an intra-domain connection between the second computing node and the first computing node, and enable the first computing node to perform calculations with the second computing node according to the calculation task to obtain the third calculation result.

[0118] In cases where secure computation may involve multi-party computation, the method of this embodiment of the invention can adjust the first computing node to the boundary of other computing nodes (e.g., the second computing node) as needed to establish intra-domain connections with other computing nodes and perform joint computation, thereby improving the data security of the multi-party computation process.

[0119] In the embodiments of the present invention, the various time periods involved, such as the first time period, the second time period, the third time period, and the fourth time period, can start the time period after responding to the server-side instruction when the network adjustment involved is the first adjustment (i.e., no calculation was performed before the adjustment), so as to start the calculation when the boundary adjustment is performed; when the network adjustment involved is not the first adjustment (i.e., the network adjustment has been performed and the calculation has been performed before the adjustment), it can be determined that the data involved in the previous adjustment has been calculated, and the data has been cleared and verified before entering the time period.

[0120] The network adjustment information involved in this embodiment of the invention includes network information that needs to be adjusted, so that the computing node to be adjusted, according to the corresponding network adjustment information, adjusts the network of the computing node to the same network as the network of the target computing node or the target data source in a targeted manner (i.e., adjusts it to within the boundary of the target computing node or the target data source). The targeted manner may include at least one of the following: software-defined networking, adjusting a network gateway, and adjusting a network switch.

[0121] The method of this invention is not limited to the network adjustments based on the first network adjustment information, the second network adjustment information, the third network adjustment information, and the fourth network adjustment information. In cases where calculations may involve using data from more data sources or where multiple multi-party calculations with other computing nodes are required, the method may also perform network adjustments on the first computing node multiple times to adjust it to other data sources other than the first, second, and third data sources, or to the network boundaries of other computing nodes other than the second computing node, and perform multiple calculations.

[0122] An embodiment of the present invention also provides a method for adjusting the boundary of a data security computing space, applied to a computing node, corresponding to the method executed on the server side described above. In this embodiment, the computing node is, for example, a computing node located on the same physical device as the first data source. According to the computing task, the computing node and the first data source belong to a first secure computing space in a first time period, and the computing node and the second data source belong to a second secure computing space in a second time period. Figure 2 The flowchart of the boundary adjustment method for the data security computing space provided in this embodiment is shown below. Figure 2 As shown, the method includes the following steps:

[0123] S202. Receive the computing task and first connection authentication information sent by the server, and establish an intra-domain connection with the first data source based on the first connection authentication information.

[0124] S204. Calculate the first intermediate result using data from the first data source according to the computation task. In this embodiment, since the computing node and the first data source are located on the same physical device, the computing node adopts a Trusted Execution Environment (TEE) scheme to ensure that after the computing node is assigned to the boundary of the second data source, the data received by the computing node from the second data source will not be exported by the first data source physically connected to the computing node (thus protecting the data of the second data source). In this step, within the trusted execution environment, the data from the first data source is loaded and used to calculate the first intermediate result; the first intermediate result is then sealed, encrypted, and stored.

[0125] S206. Receive the second network adjustment information sent by the server, and adjust to the boundary of the second data source at the beginning of the second time period according to the second network adjustment information.

[0126] S208. Receive the second connection authentication information sent by the server, and establish an intra-domain connection with the second data source based on the second connection authentication information.

[0127] S210. A first calculation result is obtained by using data from the second data source and the first intermediate result according to the calculation task. In this step, within a trusted execution environment, data from the second data source is loaded, and the first calculation result is obtained by using this data and the first intermediate result.

[0128] An embodiment of the present invention also provides a method for adjusting the boundaries of a data security computing space, applied to computing nodes, corresponding to the method executed on the server side described above. In this embodiment, the computing node is, for example, a common node, which represents a computing node located outside the physical boundaries of all data sources. According to the computing task, the computing node and the first data source belong to a first secure computing space in a first time period, and the computing node and the second data source belong to a second secure computing space in a second time period. Figure 3 The flowchart of the boundary adjustment method for the data security computing space provided in this embodiment is shown below. Figure 3 As shown, the method includes the following steps:

[0129] S302. Receive the first network adjustment information sent by the server, and adjust to within the boundary of the first data source at the beginning of the first time period according to the first network adjustment information.

[0130] S304. Receive the computation task and first connection authentication information sent by the server, and establish an intra-domain connection with the first data source based on the first connection authentication information. To improve computation security, the received computation task can be security-audited to ensure that it does not have issues such as memory leaks or backdoors. The audited computation task is hashed, and the hashed computation task is sent to the server so that the server-side computing node can perform hash verification on the computation task after obtaining the first computation result. Verification can be performed before each computation task is run to ensure that the computation task is not tampered with.

[0131] S306. Based on the calculation task, use the data from the first data source to perform calculations and obtain the first intermediate result.

[0132] S308. Receive the second network adjustment information sent by the server, and adjust to the boundary of the second data source at the beginning of the second time period according to the second network adjustment information.

[0133] S310. Receive the second connection authentication information sent by the server, and establish an intra-domain connection with the second data source based on the second connection authentication information.

[0134] S312. Based on the calculation task, the first calculation result is obtained by using the data from the second data source and the first intermediate result.

[0135] According to certain optional embodiments, after each calculation is completed (including the calculation of intermediate results and the calculation of the first calculation result), the local data of the computing node needs to be cleared, and verification is performed after clearing to remove other original and intermediate data besides the calculated intermediate results and the first calculation result, preventing data leakage from the data source. The clearing and verification process of the computing node can be completed by the computing node itself (in which case the computing node can adopt a trusted execution environment, preset processing logic in the trusted execution environment, and process according to the processing logic), or it can be completed by the server issuing corresponding instructions (for example, after obtaining the first intermediate result, the computing node uploads the end information to the server, and the server responds with corresponding instructions to complete the entire clearing process). The clearing process initiated by the computing node itself may include the following steps:

[0136] S42. After obtaining the first intermediate result, the local data is cleared and verified. The cleared and verified data includes the original data of the first data source stored or cached in the first computing node, the intermediate data converted from the original data, and the intermediate data calculated using the original data.

[0137] S44. After obtaining the first calculation result, the local data is cleared and verified. The cleared and verified data includes the original data from the second data source, the intermediate data converted from the original data, and the intermediate data calculated using the original data.

[0138] The cleanup process initiated by sending corresponding instructions from the server can include the following steps:

[0139] S62. After obtaining the first intermediate result, send the first end information to the server so that the server can send the first data clearing instruction based on the first end information.

[0140] S64. Receive a first data clearing instruction sent by the server, and clear and verify the local data according to the first data clearing instruction. The cleared and verified data includes the original data of the first data source stored or cached in the first computing node, the intermediate data converted from the original data, and the intermediate data calculated using the original data.

[0141] S66. After obtaining the first calculation result, send the second end information to the server so that the server can send the second data clearing command according to the second end information.

[0142] S68. Receive a second data clearing instruction sent by the server, and clear and verify the local data according to the second data clearing instruction. The cleared and verified data includes the original data of the second data source, the intermediate data converted from the original data, and the intermediate data calculated using the original data.

[0143] Data clearing can be accomplished by restarting the server of the computing task or computing node; or by restoring the computing task by loading its image, which is set on the server side. Verification after clearing can be performed remotely by the server. The verification mainly checks whether the computing node has cleared, but is not limited to, the original data from relevant data sources, intermediate data converted from the original data, and intermediate data calculated using the original data—that is, all relevant data except for the intermediate results and the first calculation result. After all data has been calculated and cleared, the server can perform a hash check on the computing task. If the check passes, the computing node re-enters the first stage and repeats the previous process.

[0144] An embodiment of the present invention also provides a method for adjusting the boundary of a data security computing space, applied to the server side. In this embodiment, the first computing node is a common node, which refers to a computing node located outside the physical boundary of all data sources. The method includes the following steps:

[0145] S502. Output the first network adjustment information to the first computing node so that the first computing node is adjusted to be within the boundary of the first data source at the beginning of the first time period, and uses the data of the first data source to perform calculations to obtain the first intermediate result.

[0146] S504. Output the second network adjustment information to the first computing node, so that the first computing node adjusts to within the boundary of the second data source at the beginning of the second time period, and uses the data from the second data source and the first intermediate result to calculate the first calculation result. In this embodiment, only the data from the first data source and the second data source are needed for calculation, and the first calculation result is the final calculation result.

[0147] According to certain optional embodiments, the method may further include the following steps:

[0148] S506. Output third network adjustment information to the first computing node so that the first computing node is adjusted to be within the boundary of the third data source at the beginning of the third time period, and uses the data from the third data source, the first intermediate result, and the first calculation result to calculate the second calculation result. This embodiment is for the case where data from the third data source is also needed for calculation. Therefore, after obtaining the first calculation result, network adjustment is required again to adjust the first computing node to be within the boundary of the third data source at the beginning of the third time period and perform calculation. The first calculation result is an intermediate result, and the second calculation result is the final result.

[0149] According to certain optional embodiments, the method may further include the following steps:

[0150] S508. Output fourth network adjustment information to the first computing node, so that the first computing node is adjusted to be within the boundary of the second computing node at the beginning of the fourth time period, and the first computing node and the second computing node perform calculations to obtain the third calculation result. This embodiment is for the case where the first computing node also needs to perform calculations with other computing nodes (such as the second computing node). Therefore, after obtaining the first calculation result or the second calculation result, network adjustment is required again to adjust the first computing node to be within the boundary of the second computing node at the beginning of the fourth time period and perform calculations. This calculation can utilize the first intermediate result, the first calculation result, and / or the second calculation result obtained from previous calculations, as well as the calculation results that may already exist in the second computing node. In this embodiment, the third calculation result is the final calculation result.

[0151] An embodiment of the present invention also provides a method for adjusting the boundary of a data security computing space, applied to a computing node. In this embodiment, the computing node and the first data source are located in the same physical device. The method includes the following steps: according to a preset network adjustment strategy,

[0152] S702. Establish an intra-domain connection with the first data source and use the data from the first data source to perform calculations to obtain the first intermediate result.

[0153] S704, at the start of the second time period, adjust from within the boundary of the first data source to within the boundary of the second data source.

[0154] S706. Establish an intra-domain connection with the second data source, and use the data from the second data source and the first intermediate result to perform calculations to obtain the first calculation result.

[0155] An embodiment of the present invention also provides a method for adjusting the boundary of a data security computing space, applied to a computing node. In this embodiment, the computing node and the first data source are located in the same physical device. The method includes the following steps: according to a preset network adjustment strategy,

[0156] S802, at the start of the first time period, adjust to the boundary of the first data source.

[0157] S804. Establish an intradomain connection with the first data source and use the data from the first data source to perform calculations to obtain the first intermediate result;

[0158] S806. When the first time period ends and the second time period begins, adjust from within the boundary of the first data source to within the boundary of the second data source;

[0159] S808. Establish an intra-domain connection with the second data source, and use the data from the second data source and the first intermediate result to perform calculations to obtain the first calculation result.

[0160] According to some optional embodiments, the method further includes: after obtaining a first intermediate result, clearing and verifying local data, wherein the cleared and verified data includes original data from a first data source stored or cached in a first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data; and after obtaining a first calculation result, clearing and verifying local data, wherein the cleared and verified data includes original data from a second data source stored or cached in a first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data.

[0161] The difference between this embodiment of the present invention and the previous embodiment and the foregoing embodiments is that the computing node does not rely on the network adjustment strategy issued by the server to perform network adjustment, but rather performs network adjustment based on a preset network adjustment strategy (which can be obtained in advance from the server, client or other terminals that may issue adjustment strategies), when the predetermined time period arrives and after obtaining the result of the previous calculation.

[0162] An embodiment of the present invention also provides a method for adjusting the boundary of a data security computing space, applied to a computing node. In this embodiment, the computing node is a common node located outside the physical boundary of all data sources. The method includes the following steps:

[0163] S902, at the start of the first time period, adjust to the boundary of the first data source.

[0164] S904. Establish an intra-domain connection with the first data source and use the data from the first data source to perform calculations to obtain the first intermediate result.

[0165] S906. Seal the first intermediate result, encrypt it, and store it in the storage device within the computing node or in an external storage device, and delete all other data except the stored data.

[0166] S908. When the first time period ends and the second time period begins, adjust from within the boundary of the first data source to within the boundary of the second data source.

[0167] S910. Establish an intra-domain connection with the second data source, and use the data from the second data source and the first intermediate result to perform calculations to obtain the first calculation result.

[0168] S912. Seal the first calculation result, encrypt it, and store it in the storage device within the computing node or in an external storage device.

[0169] In this embodiment of the invention, each time intermediate or final calculation result data is obtained, it is encrypted and stored in the storage device within the computing node or in an external storage device. Before the next calculation begins, all other data except the stored data is cleared, thereby improving data security.

[0170] An embodiment of the present invention also provides a boundary adjustment device for a data security computing space, applied on a server side, the device comprising:

[0171] A secure computing space determination module is used to acquire computing tasks and determine at least a first secure computing space and a first data source, as well as a second secure computing space and a second data source, for performing computing based on the computing tasks; the first secure computing space includes a first computing node in a first time period, and the second secure computing space includes a first computing node in a second time period;

[0172] The first connection module is used to output computing tasks and first connection authentication information to the first data source and the first computing node, so as to establish an intra-domain connection between the first data source and the first computing node, and enable the first computing node to use the data of the first data source to perform calculations according to the computing tasks to obtain the first intermediate result.

[0173] The network adjustment module is used to output second network adjustment information to the first computing node so that the first computing node is adjusted to be within the boundary of the second data source at the beginning of the second time period;

[0174] The second connection module is used to output the second connection authentication information to the second data source and the first computing node to establish an intra-domain connection between the second data source and the first computing node, and to enable the first computing node to perform calculations based on the data from the second data source and the first intermediate result to obtain the first calculation result according to the calculation task.

[0175] The specific process by which each module in the boundary adjustment device for the data security computing space provided in the above embodiments of the present invention realizes its function is the same as the steps of the boundary adjustment method for the data security computing space provided in the above embodiments of the present invention. Therefore, the repeated description will be omitted here.

[0176] Figure 4 and Figure 5 The diagram illustrates the network boundary and data interaction between nodes in the data security computing space boundary adjustment method provided by an embodiment of the present invention. Figure 4 As shown, compute node A and data source 1 are located in the same physical device, belonging to the same server and within the same boundary. In phase 1, compute node A establishes an intra-domain connection with data source 1, exchanges data and performs calculations to obtain intermediate results through this intra-domain connection. In phase 2, after adjusting according to network adjustment information sent by the server, compute node A adjusts to the boundary of data source 2 and establishes an intra-domain connection with data source 2, exchanging data and performing calculations through this intra-domain connection. Figure 5 As shown, compute node A is a public node and is not located on the same physical device as data source 1 or data source 2. In phase 1, compute node A first needs to adjust to the boundary of data source 1 according to network adjustment information, establish an intra-domain connection with data source 1, exchange data and perform calculations to obtain intermediate results through the intra-domain connection. In phase 2, a second adjustment is performed according to the network adjustment information sent by the server. Compute node A adjusts to the boundary of data source 2 and establishes an intra-domain connection with data source 2, exchange data and perform calculations through the intra-domain connection.

[0177] An embodiment of the present invention also provides an electronic device. Figure 6 The diagram shown is a structural schematic of an electronic device provided according to an embodiment of the present invention. Figure 6 As shown, the electronic device 600 includes: one or more processors 5601 and a memory 602; and computer program instructions stored in the memory 602, which, when executed by the processor 601, cause the processor 601 to perform a boundary adjustment method for the data security computing space as described in any of the above embodiments. The processor 601 may be a central processing unit (CPU) or other form of processing unit with data processing capabilities and / or instruction execution capabilities, and may control other components in the electronic device to perform desired functions.

[0178] The memory 602 may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. Volatile memory may include, for example, random access memory (RAM) and / or cache memory. Non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and the processor 601 may execute the program instructions to implement the steps in the boundary adjustment method for the data security computing space of the various embodiments of the present invention described above, and / or other desired functions.

[0179] In some embodiments, the electronic device 600 may further include an input device 603 and an output device 604, these components being connected via a bus system and / or other forms of connection mechanisms. Figure 6 (Not shown) Interconnected. For example, when the electronic device is a standalone device, the input device 603 can be a communication network connector for receiving acquired input signals from external mobile devices. Furthermore, the input device 603 may also include, for example, a keyboard, mouse, microphone, etc. The output device 604 can output various information to the outside, and may include, for example, a monitor, speaker, printer, and communication network and its connected remote output devices.

[0180] In addition to the methods and devices described above, embodiments of the present invention may also be computer program products, including computer program instructions, which, when executed by a processor, cause the processor to perform the steps in the boundary adjustment method for the data security computing space as described in any of the above embodiments.

[0181] Computer program products can be written in any combination of one or more programming languages ​​to perform the operations of the embodiments of the present invention. The programming languages ​​include object-oriented programming languages ​​such as Java and C++, as well as conventional procedural programming languages ​​such as C or similar languages. The program code can be executed entirely on the user's computing device, partially on the user's computing device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0182] Furthermore, embodiments of the present invention may also be computer-readable storage media storing computer program instructions thereon, which, when executed by a processor, cause the processor to perform the steps in the boundary adjustment method for the data security computing space of various embodiments of the present invention.

[0183] Computer-readable storage media may take the form of any combination of one or more readable media. A readable medium may be a readable signal medium or a readable storage medium. A readable storage medium may, for example, include, but is not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatuses, or devices, or any combination thereof. More specific examples of readable storage media (a non-exhaustive list) include: electrical connections having one or more wires, portable disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0184] It should be understood that the processor in the embodiments of the present invention can be a Central Processing Unit (CPU), but it can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor.

[0185] In summary, the embodiments of the present invention relate to a method and apparatus for adjusting the boundary of a data security computing space for data element operation. The method includes: acquiring a computing task, and determining at least a first secure computing space and a first data source, as well as a second secure computing space and a second data source, for computing based on the computing task; outputting the computing task and first connection authentication information to the first data source and the first computing node to establish an intra-domain connection between the first data source and the first computing node; outputting second network adjustment information to the first computing node so that the first computing node adjusts to the boundary of the second data source at the beginning of a second time period; and outputting second connection authentication information to the second data source and the first computing node to establish an intra-domain connection between the second data source and the first computing node. By adopting the above technical solution, on the one hand, the boundary adjustment satisfies the principle that the original data does not leave the domain, avoiding potential data security risks and improving the security of data computing; on the other hand, it achieves effective boundary control through a space and time reuse mode, that is, at a certain moment, the switching of the network boundary makes the "shared" computing element or computing node become exclusive, and after the time period ends, the relevant original data and sensitive data are cleared, improving both the security of data computing and the flexibility of computing deployment.

[0186] It should be understood that the discussion of any of the above embodiments is merely exemplary and is not intended to imply that the scope of the invention (including the claims) is limited to these examples. Within the framework of this invention, technical features of the above embodiments or different embodiments can also be combined, steps can be implemented in any order, and many other variations exist regarding different aspects of one or more embodiments of the invention as described above, which are not provided in the details for the sake of brevity. The specific embodiments described above are merely illustrative or explanatory of the principles of the invention and do not constitute a limitation thereof. Therefore, any modifications, equivalent substitutions, improvements, etc., made without departing from the spirit and scope of the invention should be included within the protection scope of the invention. Furthermore, the appended claims are intended to cover all variations and modifications falling within the scope and boundaries of the appended claims, or equivalent forms of such scope and boundaries.

Claims

1. A method for adjusting the boundaries of a data security computing space, characterized in that, Applied to the server side, the method includes: A computing task is acquired, and at least a first secure computing space and a first data source, as well as a second secure computing space and a second data source, are determined based on the computing task for performing the computing; the first secure computing space includes a first computing node in a first time period, and the second secure computing space includes a first computing node in a second time period; Output the computation task and the first connection authentication information to the first data source and the first computing node to establish an intra-domain connection between the first data source and the first computing node, and enable the first computing node to perform computation using the data from the first data source according to the computation task to obtain the first intermediate result; Output second network adjustment information to the first computing node so that the first computing node is adjusted to be within the boundary of the second data source at the beginning of the second time period; the second network adjustment information includes network information that needs to be adjusted so that the first computing node adjusts the network of the first computing node and the network of the second data source to the same network in a targeted manner according to the second network adjustment information, so that the first computing node is adjusted to be within the boundary of the second data source. The second connection authentication information is output to the second data source and the first computing node to establish an intra-domain connection between the second data source and the first computing node, and the first computing node uses the data from the second data source and the first intermediate result to perform calculations according to the calculation task to obtain the first calculation result.

2. The method according to claim 1, characterized in that, The first computing node is a public node, located outside the physical boundaries of all data sources; the method further includes: Output the first network adjustment information to the first computing node so that the first computing node adjusts to the boundary of the first data source at the beginning of the first time period.

3. The method according to claim 2, characterized in that, The method further includes: Receive first end information sent by the first computing node, the end information indicating that the calculation of the first intermediate result is complete; A first data clearing instruction is sent to the first computing node according to the first end information, so that the first computing node can clear and verify the local data according to the first data clearing instruction; The data to be cleared and verified includes the original data of the first data source stored or cached in the first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data.

4. The method according to claim 3, characterized in that, The method further includes: Receive a second end message sent by the first computing node, the end message indicating that the first calculation result has been calculated; A second data clearing instruction is sent to the first computing node according to the second end information, so that the first computing node can clear and verify the local data according to the second data clearing instruction; The data to be cleared and verified includes the original data of the second data source stored or cached in the first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data.

5. The method according to claim 4, characterized in that, The method further includes: Output the third network adjustment information to the first computing node so that the first computing node adjusts to the boundary of the third data source at the beginning of the third time period; Output the third connection authentication information to the third data source and the first computing node to establish an intra-domain connection between the third data source and the first computing node, and enable the first computing node to perform calculations based on the data from the third data source, the first intermediate result, and the first calculation result to obtain the second calculation result according to the calculation task. The first calculation result is an intermediate result.

6. The method according to claim 5, characterized in that, The method further includes: Output the fourth network adjustment information to the first computing node so that the first computing node adjusts to be within the boundary of the second computing node at the beginning of the fourth time period; The fourth connection authentication information is output to the first computing node and the second computing node to establish an intra-domain connection between the second computing node and the first computing node, and to enable the first computing node to perform calculations with the second computing node according to the calculation task to obtain the third calculation result.

7. The method according to claim 6, characterized in that, The first network adjustment information includes network information that needs to be adjusted, so that the first computing node adjusts the network of the first computing node and the network of the first data source to the same network in a targeted manner according to the first network adjustment information, so that the first computing node is adjusted to the boundary of the first data source; The third network adjustment information includes the network information that needs to be adjusted, so that the first computing node adjusts the network of the first computing node and the network of the third data source to the same network in a targeted manner according to the third network adjustment information, so that the first computing node is adjusted to be within the boundary of the third data source; The fourth network adjustment information includes network information that needs to be adjusted, so that the first computing node adjusts the network of the first computing node and the network of the second computing node to the same network in a target manner according to the fourth network adjustment information, so that the first computing node is adjusted to be within the boundary of the second computing node. The target method includes at least one of the following: software-defined networking, adjusting the gateway, and adjusting the network switch.

8. A method for adjusting the boundary of a data security computing space, characterized in that, Applied to a computing node, wherein the computing node and the first data source are located on the same physical device, the method includes: Receive the computing task and the first connection authentication information sent by the server, and establish an intra-domain connection with the first data source based on the first connection authentication information; The first intermediate result is obtained by using data from the first data source to perform calculations based on the calculation task; The first computing node receives second network adjustment information sent by the server and adjusts its network to the boundary of the second data source at the beginning of the second time period according to the second network adjustment information. The second network adjustment information includes network information that needs to be adjusted. The first computing node adjusts its network and the network of the second data source to the same network according to the second network adjustment information in a targeted manner, so that the first computing node is adjusted to the boundary of the second data source. Receive the second connection authentication information sent by the server, and establish an intra-domain connection with the second data source based on the second connection authentication information; The first calculation result is obtained by using data from the second data source and the first intermediate result according to the calculation task; The computing node and the first data source belong to the first secure computing space during the first time period, and the computing node and the second data source belong to the second secure computing space during the second time period.

9. The method according to claim 8, characterized in that, The step of using data from the first data source to calculate the first intermediate result includes: in a trusted execution environment, loading data from the first data source and using that data to calculate the first intermediate result; and storing the first intermediate result after data sealing and encryption. The step of using data from the second data source and the first intermediate result to calculate the first calculation result includes: in a trusted execution environment, loading data from the second data source and using the data and the first intermediate result to calculate the first calculation result.

10. A method for adjusting the boundary of a data security computing space, characterized in that, Applied to compute nodes, wherein the compute nodes are public nodes located outside the physical boundaries of all data sources, the method includes: Receive the first network adjustment information sent by the server, and adjust to within the boundary of the first data source at the beginning of the first time period according to the first network adjustment information; Receive the computing task and the first connection authentication information sent by the server, and establish an intra-domain connection with the first data source based on the first connection authentication information; The first intermediate result is obtained by using data from the first data source to perform calculations based on the calculation task; The computing node receives second network adjustment information sent by the server and adjusts its network to within the boundary of the second data source at the beginning of the second time period according to the second network adjustment information. The second network adjustment information includes network information that needs to be adjusted. The computing node adjusts its network and the network of the second data source to the same network in a targeted manner according to the second network adjustment information, so that the computing node is adjusted to within the boundary of the second data source. Receive the second connection authentication information sent by the server, and establish an intra-domain connection with the second data source based on the second connection authentication information; The first calculation result is obtained by using data from the second data source and the first intermediate result according to the calculation task; The computing node and the first data source belong to the first secure computing space during the first time period, and the computing node and the second data source belong to the second secure computing space during the second time period.

11. The method according to claim 10, characterized in that, The method further includes: The received computing tasks undergo security audits, the audited computing tasks are hashed, and the hashed computing tasks are sent to the server so that the server-side computing nodes can perform hash verification on the computing tasks after receiving the first computing result.

12. The method according to claim 11, characterized in that, The method further includes: After obtaining the first intermediate result, the local data is cleared and verified. The cleared and verified data includes the original data of the first data source stored or cached in the first computing node, the intermediate data transformed from the original data, and the intermediate data calculated using the original data. After obtaining the first calculation result, the local data is cleared and verified. The cleared and verified data includes the original data of the second data source stored or cached in the first computing node, the intermediate data converted from the original data, and the intermediate data calculated using the original data.

13. The method according to claim 11, characterized in that, The method further includes: After obtaining the first intermediate result, a first end information is sent to the server so that the server can send a first data clearing command based on the first end information; The system receives a first data clearing instruction sent by the server and clears and verifies the local data according to the first data clearing instruction. The cleared and verified data includes the original data of the first data source stored or cached in the first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data. After obtaining the first calculation result, a second end information is sent to the server so that the server can send a second data clearing command based on the second end information; The system receives a second data clearing instruction sent by the server and clears and verifies the local data according to the second data clearing instruction. The cleared and verified data includes the original data of the second data source stored or cached in the first computing node, intermediate data converted from the original data, and intermediate data calculated using the original data.

14. The method according to claim 12 or 13, characterized in that, The process of clearing local data includes: Restart the server for the computing task or computing node; or, Load the image of the computing task to restore the computing task, wherein the image of the computing task is set on the server side; The verification includes remote authentication via the server.

15. A boundary adjustment device for a data security computing space, characterized in that, The device, applied to the server side, includes: A secure computing space determination module is used to acquire computing tasks and determine at least a first secure computing space and a first data source, as well as a second secure computing space and a second data source, for performing computing based on the computing tasks; the first secure computing space includes a first computing node in a first time period, and the second secure computing space includes a first computing node in a second time period; The first connection module is used to output computing tasks and first connection authentication information to the first data source and the first computing node, so as to establish an intra-domain connection between the first data source and the first computing node, and enable the first computing node to use the data of the first data source to perform calculations according to the computing tasks to obtain the first intermediate result. The network adjustment module is used to output second network adjustment information to the first computing node so that the first computing node is adjusted to be within the boundary of the second data source at the beginning of the second time period. The second network adjustment information includes network information that needs to be adjusted so that the first computing node adjusts the network of the first computing node and the network of the second data source to the same network in a targeted manner according to the second network adjustment information, so that the first computing node is adjusted to be within the boundary of the second data source. The second connection module is used to output the second connection authentication information to the second data source and the first computing node to establish an intra-domain connection between the second data source and the first computing node, and to enable the first computing node to perform calculations based on the data from the second data source and the first intermediate result to obtain the first calculation result according to the calculation task.

Images