Privacy protection link construction method, system, electronic device and storage medium

Abstract

The present application discloses a method, system, electronic device and storage medium for constructing a privacy protection link, wherein the method receives registration information from an anonymous node and stores the registration information in a directory service; enables a link access gateway device to query the directory service to obtain multiple available anonymous nodes, wherein the link access gateway device is used to indicate a device that provides data conversion services between a user terminal and the anonymous node; screens multiple available anonymous nodes to obtain a target anonymous node; and establishes a privacy protection link between the user terminal, the link access gateway device and the target anonymous node. The present application can improve the user's privacy protection level.

Description

Technical Field

[0001] The present application relates to the field of network security communication technology, and in particular to a method, system, electronic device and storage medium for constructing a privacy protection link. Background Art

[0002] With the rapid development of Internet technology, the Internet has become an indispensable part of people's daily life and work. However, this has also brought about increasingly serious network security issues and privacy leakage risks. The security of personal information and data is threatened, and users' network behavior may be tracked and analyzed, which not only infringes on users' privacy rights, but may also cause economic losses and legal risks to users. Existing privacy protection technologies still have security loopholes. Summary of the invention

[0003] The present application aims to propose a method, system, electronic device and storage medium for constructing a privacy protection link, which can improve the user's privacy protection level.

[0004] In a first aspect, an embodiment of the present application provides a method for constructing a privacy protection link, including:

[0005] receiving registration information from an anonymous node and storing the registration information in a directory service;

[0006] Enable a link access gateway device to query the directory service to obtain a plurality of available anonymous nodes, wherein the link access gateway device is used to indicate a device that provides data conversion services between a user terminal and the anonymous node;

[0007] Screening the multiple available anonymous nodes to obtain a target anonymous node;

[0008] A privacy protection link is established between the user terminal, the link access gateway device, and the target anonymous node.

[0009] Compared with the prior art, the first aspect of the present application has the following beneficial effects:

[0010] This method enables the link access gateway device to query the directory service to obtain multiple available anonymous nodes, then screen the multiple available anonymous nodes to obtain the target anonymous node, and then establish a privacy protection link between the user terminal, the link access gateway device and the target anonymous node. By using the screened target anonymous node to establish the privacy protection link, the user's privacy protection level can be improved.

[0011] In some implementations, screening the multiple available anonymous nodes to obtain a target anonymous node includes:

[0012] Obtain a historical network node tracking scheme, wherein the historical network node tracking scheme is used to indicate a historical path obtained by tracking a previous privacy protection link, and each of the historical paths corresponds to an anonymous node;

[0013] The information corresponding to the historical path in the historical network node tracking scheme is used to form a training sample of a unified template, wherein the unified template is used to indicate that the data information contained in the training sample is the same;

[0014] Sampling the training samples to train the deep neural network model to obtain a trained deep neural network model;

[0015] The trained deep neural network model is sampled to screen the multiple available anonymous nodes to obtain a target anonymous node.

[0016] In some implementations, the sampling of the trained deep neural network model to screen the multiple available anonymous nodes to obtain a target anonymous node includes:

[0017] Using a random algorithm to generate a plurality of paths corresponding to the plurality of available anonymous nodes;

[0018] Inputting the multiple paths into the trained deep neural network model to filter out the target path;

[0019] According to the target path, a target anonymous node is determined.

[0020] In some implementations, the establishing a privacy protection link between the user terminal, the link access gateway device, and the target anonymous node includes:

[0021] An encryption algorithm and a secure connection protocol are used to establish a privacy protection link between the user terminal, the link access gateway device and the target anonymous node, wherein the secure connection protocol is used to indicate a cryptographic communication framework that ensures secure communication between the user terminal, the link access gateway device and the target anonymous node.

[0022] In some implementations, after establishing a privacy protection link between the user terminal, the link access gateway device, and the target anonymous node, the method further includes:

[0023] Detecting the state of the target anonymous node in the privacy protection link, wherein the state includes whether the path corresponding to the target anonymous node is unobstructed and the load of the target anonymous node;

[0024] If the path corresponding to the target anonymous node is blocked or the load of the target anonymous node exceeds a preset value, a new target anonymous node is selected.

[0025] In some implementations, after reselecting the target anonymous node, the method further includes:

[0026] Configuring a Web management interface on the link access gateway device;

[0027] After the target anonymous node is reselected, the previous target anonymous node is switched to the reselected target anonymous node through the Web management interface.

[0028] In some implementations, after configuring the Web management interface on the link access gateway device, the method further includes:

[0029] An anonymous node discovery function is set in the Web management interface, where the anonymous node discovery function is used to view an anonymous node list;

[0030] The anonymous node discovery function is used to check the status information of the anonymous node so as to select the anonymous node, wherein the status information includes the connection status, delay and throughput of the anonymous node.

[0031] In a second aspect, the embodiment of the present application further provides a system for constructing a privacy protection link, including:

[0032] A data storage module, used for receiving registration information from an anonymous node and storing the registration information in a directory service;

[0033] A data query module, used to enable a link access gateway device to query the directory service to obtain a plurality of available anonymous nodes, wherein the link access gateway device is used to indicate a device that provides data conversion services between a user terminal and the anonymous node;

[0034] A data screening module, used for screening the multiple available anonymous nodes to obtain a target anonymous node;

[0035] The link establishment module is used to establish a privacy protection link between the user terminal, the link access gateway device and the target anonymous node.

[0036] In the third aspect, an embodiment of the present application also provides an electronic device, comprising at least one control processor and a memory for communicating with the at least one control processor; the memory stores instructions that can be executed by the at least one control processor, and the instructions are executed by the at least one control processor so that the at least one control processor can execute a method for constructing a privacy protection link as described above.

[0037] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute a method for constructing a privacy protection link as described above.

[0038] It can be understood that the beneficial effects of the second to fourth aspects compared with the related art are the same as the beneficial effects of the first aspect compared with the related art. Please refer to the relevant description in the first aspect, and no further details will be given here. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0040] Figure 1 It is a flowchart of an embodiment of a method for constructing a privacy protection link provided by the present application;

[0041] Figure 2 This is a schematic diagram of the structure of an embodiment of a system for constructing a privacy protection link provided by the present application.

[0042] Figure 3 It is a structural schematic diagram of an electronic device provided by this application. DETAILED DESCRIPTION

[0043] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present application, and cannot be understood as limiting the present application.

[0044] In the description of this application, if there is a description of first, second, etc., it is only for the purpose of distinguishing technical features, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features.

[0045] In the description of the present application, it should be understood that the descriptions involving orientation, such as the orientation or positional relationship indicated as up, down, etc., are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present application.

[0046] In the description of this application, it should be noted that, unless otherwise clearly defined, terms such as setting, installing, connecting, etc. should be understood in a broad sense, and technicians in the relevant technical field can reasonably determine the specific meaning of the above terms in this application based on the specific content of the technical solution.

[0047] With the rapid development of Internet technology, the Internet has become an indispensable part of people's daily life and work. However, this has also brought about increasingly serious network security issues and privacy leakage risks. The security of personal information and data is threatened, and users' network behavior may be tracked and analyzed, which not only infringes on users' privacy rights, but may also cause economic losses and legal risks to users. Existing privacy protection technologies still have security loopholes.

[0048] In order to solve the problem that existing privacy protection technologies still have security vulnerabilities, the present application proposes a method, system, electronic device and storage medium for constructing a privacy protection link.

[0049] Reference Figure 1 , is a flow chart of a method for constructing a privacy protection link provided in an embodiment of the present application. The method for constructing a privacy protection link is applied to an electronic device, which may be a server or a mobile terminal. Figure 1 As shown, the method for constructing the privacy protection link includes the following steps:

[0050] Step S100, receiving registration information from an anonymous node, and storing the registration information in a directory service;

[0051] Step S200: enabling the link access gateway device to query the directory service to obtain a plurality of available anonymous nodes, wherein the link access gateway device is used to indicate a device that provides data conversion services between the user terminal and the anonymous node;

[0052] Step S300, screening multiple available anonymous nodes to obtain a target anonymous node;

[0053] Step S400: Establish a privacy protection link between the user terminal, the link access gateway device and the target anonymous node.

[0054] In this embodiment, the link access gateway device queries the directory service to obtain multiple available anonymous nodes, and then screens the multiple available anonymous nodes to obtain the target anonymous node, and then establishes a privacy protection link between the user terminal, the link access gateway device and the target anonymous node. By using the screened target anonymous node to establish the privacy protection link, the user's privacy protection level can be improved.

[0055] In some implementations, screening multiple available anonymous nodes to obtain a target anonymous node includes:

[0056] Obtain a historical network node tracking scheme, wherein the historical network node tracking scheme is used to indicate a historical path obtained by tracking a previous privacy protection link, and each historical path corresponds to an anonymous node;

[0057] The information corresponding to the historical path in the historical network node tracking scheme is used to form a training sample of a unified template, and the unified template is used to indicate that the data information contained in the training sample is the same;

[0058] Sampling training samples to train the deep neural network model to obtain a trained deep neural network model;

[0059] The sampled trained deep neural network model screens multiple available anonymous nodes to obtain the target anonymous node.

[0060] In this embodiment, the information corresponding to the historical path in the historical network node tracking scheme is used to form a training sample of a unified template, and then the training sample is sampled to train the deep neural network model to obtain a trained deep neural network model. Finally, multiple available anonymous nodes are screened through the trained deep neural network model to obtain the target anonymous node. Prior information is used to select anonymous nodes with a higher success rate, and the routing path is dynamically adjusted to ensure the stability and security of data transmission.

[0061] In some implementations, the sampled trained deep neural network model screens multiple available anonymous nodes to obtain a target anonymous node, including:

[0062] A random algorithm is used to generate multiple paths corresponding to multiple available anonymous nodes;

[0063] Input multiple paths into the trained deep neural network model to filter out the target path;

[0064] According to the target path, determine the target anonymous node.

[0065] In this embodiment, since each routing adopts a random algorithm strategy, the routing path can be dynamically adjusted to cope with changes in network conditions and potential attacks, thereby ensuring the stability and security of data transmission.

[0066] In some implementations, establishing a privacy protection link between a user terminal, a link access gateway device, and a target anonymous node includes:

[0067] An encryption algorithm and a secure connection protocol are used to establish a privacy protection link between a user terminal, a link access gateway device, and a target anonymous node, wherein the secure connection protocol is used to indicate a cryptographic communication framework that ensures secure communication between the user terminal, the link access gateway device, and the target anonymous node.

[0068] In this embodiment, an encryption algorithm and a secure connection protocol are used to establish a privacy protection link between the user terminal, the link access gateway device and the target anonymous node, which can further ensure the communication security between the link access gateway device and the anonymous node.

[0069] In some implementations, after establishing a privacy protection link between the user terminal, the link access gateway device, and the target anonymous node, the method further includes:

[0070] Detect the status of the target anonymous node in the privacy protection link, including whether the path corresponding to the target anonymous node is unobstructed and the load of the target anonymous node;

[0071] If the path corresponding to the target anonymous node is blocked or the load of the target anonymous node exceeds the preset value, the target anonymous node is reselected.

[0072] In this embodiment, considering the dynamic changes in network conditions, the link access gateway device periodically sends a detection instruction to detect whether the anonymous node is connected and whether the anonymous node load is exceeded, so as to adaptively and automatically rediscover and select nodes. This embodiment can achieve failover and load balancing, ensuring that when a node is unavailable or the network condition deteriorates, it can seamlessly switch to other nodes.

[0073] In some implementations, after reselecting the target anonymous node, the method further includes:

[0074] Configure the Web management interface on the link access gateway device;

[0075] After the target anonymous node is reselected, the previous target anonymous node is switched to the reselected target anonymous node through the Web management interface.

[0076] In this embodiment, by configuring a Web management interface on the link access gateway device, the user can easily manage and select the most appropriate link according to their needs.

[0077] In some implementations, after configuring the Web management interface on the link access gateway device, the method further includes:

[0078] Set up the anonymous node discovery function in the Web management interface. The anonymous node discovery function is used to view the anonymous node list;

[0079] The anonymous node discovery function is used to view the status information of the anonymous node in order to select the anonymous node, where the status information includes the connection status, latency, and throughput of the anonymous node.

[0080] In this embodiment, an anonymous node discovery function is set in the Web management interface, and the status information of the anonymous node is viewed through the anonymous node discovery function, which can provide a good user experience.

[0081] To facilitate understanding by those skilled in the art, a set of best embodiments is provided below:

[0082] With the rapid development of Internet technology, the Internet has become an indispensable part of people's daily life and work. However, this has also brought increasingly serious network security issues and privacy leakage risks. In order to cope with these challenges, various privacy protection technologies have emerged. They mainly include the following categories of privacy protection technologies:

[0083] 1) VPN (Virtual Private Network) technology enables users to transmit data securely by establishing an encrypted tunnel over a public network. However, VPN service providers may record users' network activities, and once a VPN service is blocked, users' privacy protection will be affected.

[0084] 2) The Tor network uses multiple layers of encryption and routing technology to hide the user's real location and browsing activities, providing users with a certain degree of anonymity. However, the Tor network is slow and may not be accessible in some countries and regions.

[0085] 3) Shadowsocks is an encrypted transmission protocol based on Socks5 proxy, which can be used on a variety of devices through simple configuration. Although Shadowsocks provides better privacy protection, it mainly relies on client software. Once the client is damaged or there is a security vulnerability, the user's privacy will also be threatened.

[0086] In this context, users have a growing demand for more secure, reliable and easy-to-use privacy protection solutions. Although existing privacy protection technologies provide solutions to a certain extent, they still have many shortcomings, such as software adaptation issues, obvious traffic characteristics, poor user experience, and uncontrollable overseas nodes. These problems limit users' acceptance and effectiveness of privacy protection technologies.

[0087] In response to the above problems, this application proposes a method for constructing a privacy protection link, which can effectively solve the above problems and provide a more secure, flexible and user-friendly privacy protection service, aiming to provide users with a more secure and efficient network privacy protection solution. Specifically:

[0088] In order to achieve the above objectives, the construction method of the privacy protection link mainly includes the following parts:

[0089] 1. Link access gateway device: This device is the key hardware for users to access the privacy protection link system. It is divided into three forms: single-hop portable link access gateway device, multi-hop portable link access gateway device and multi-hop rack-mounted link access gateway device. These forms of gateway devices are used to adapt to the needs and usage scenarios of different users. Each form of gateway device has functions such as IP and MAC address binding, firewall, etc., and supports multiple export modes, such as global, proxy only for overseas IP, etc.

[0090] The single-hop portable communication may be a single-hop communication, which refers to a communication method in which data is directly transmitted from a sending node to a target node once without being forwarded by an intermediate node.

[0091] The multi-hop in the above-mentioned multi-hop portable and multi-hop rack-mounted may be multi-hop communication, which refers to a communication method in which data is transmitted to a target node through multiple intermediate nodes, and each intermediate node is responsible for forwarding data packets so that the data can reach the target node through multiple paths.

[0092] The portable device in the above-mentioned single-hop portable device and multi-hop portable device may be easy to carry.

[0093] The rack-mount in the above multi-hop rack-mount generally refers to equipment designed to be installed in a standard cabinet.

[0094] 2. Global anonymous node system: The global anonymous node system is a network composed of servers distributed in more than 10 countries and regions around the world. These servers serve as hidden positions, providing dedicated nodes to ensure that IP addresses are difficult to track. The mutual independence between nodes enhances the security of the system, so that even if a node is attacked, it will not affect the stability of the entire system and the privacy of users.

[0095] The global anonymous node system selects appropriate locations around the world to deploy server nodes. These server nodes (i.e. anonymous nodes) need to have high security and stability, while taking into account the geographical distribution and network connection quality between anonymous nodes to ensure the efficient operation of the entire system.

[0096] 3. The link access gateway device needs to be efficiently connected to the global anonymous node system to maximize the effectiveness of the system. This embodiment designs a global node discovery mechanism that enables the link access gateway device to quickly discover and connect to globally distributed anonymous nodes. The factors considered by the global node discovery mechanism include the anonymity of the node, the breadth of global distribution, the stability of the connection, and the security of the system. The global node discovery mechanism includes the following key steps:

[0097] 1) Build an anonymous node registration system. The main function of the anonymous node registration system is to enable anonymous nodes around the world to register when joining the network. It also includes the following functions:

[0098] The information of registered anonymous nodes, such as geographic location, network performance indicators, online status, etc., is stored through a distributed directory service.

[0099] The node discovery protocol allows link access gateway devices to query directory services and quickly find available anonymous nodes.

[0100] 2) Select from the available anonymous nodes. This mainly includes the following:

[0101] User Interface (UI) Design: Implement an intuitive and user-friendly web management interface that enables users to easily switch between multiple anonymous nodes. The UI design includes a simplified node selection process (i.e., automated node selection). It is possible to display anonymous node status and performance indicators in real time, while integrating security features such as two-factor authentication, session timeout, and automatic logout into the web management interface to prevent unauthorized access.

[0102] Among them, the automatic node selection can be realized by an intelligent algorithm, specifically:

[0103] The optimal anonymous node (i.e., target anonymous node) is automatically selected based on factors such as user behavior patterns (i.e., user surfing habits), network conditions (e.g., wireless, educational network, wired, etc.), anonymous node load (i.e., traffic congestion of anonymous nodes), and security. The intelligent algorithm can be an existing mature algorithm, such as an anonymous routing algorithm (i.e., Onion Routing).

[0104] Automatic node selection can also be a specially designed intelligent algorithm. The process of one intelligent algorithm is as follows:

[0105] First, obtain the existing network node tracking scheme and related historical case data (including successful and failed tracking cases), which are collectively referred to as historical network node tracking schemes. The historical path information in the historical network node tracking schemes is formed into training samples of a unified template. Each training sample includes the following information elements: the first multi-hop strategy, source address, destination address, traffic information, and the successful status of the tracking.

[0106] Secondly, a deep neural network model is constructed and trained using training samples. The relationship between different multi-hop strategies and the tracked success state under a specific state is extracted through the deep neural network model. The training of the deep neural network model is terminated only after the preset number of iterations is trained to obtain a trained deep neural network model.

[0107] Again, a random algorithm is used to generate multiple sets of random second multi-hop strategies, and the deep neural network model trained in the previous step is used to evaluate the multiple sets of random second multi-hop strategies, and the second multi-hop strategy with a lower probability of being discovered is selected as the final strategy. According to the final strategy, the target anonymous node can be obtained.

[0108] The advantage of the above dedicated intelligent algorithm is that each routing is a pure random strategy, and at the same time, a pure random strategy with a higher success rate is selected by using prior information. This is an algorithm that can dynamically adjust the routing path to cope with changes in network conditions and potential attacks, ensuring the stability and security of data transmission.

[0109] 3) Regular maintenance of privacy protection links. This mainly includes the following aspects:

[0110] Dynamic topology management: Taking into account the dynamic changes in network conditions, the system automatically rediscovers and selects anonymous nodes adaptively. At the same time, anonymous node failover (i.e., transferring traffic in anonymous nodes with blocked paths) and load balancing are implemented to ensure seamless switching to other anonymous nodes when anonymous nodes are unavailable or network conditions deteriorate.

[0111] Secure connection establishment: Use secure connection protocols, such as TLS / SSL, to ensure the communication security between the link access gateway device and the anonymous node. Advanced encryption technologies are also used, including random jump links, dynamic encryption, network traceless technology, and node traceless technology. In addition, the privacy protection link system uses the RC4 stream encryption algorithm to ensure that data communication is fully encrypted, effectively avoiding anti-tracking and backtracking.

[0112] Friendly human-computer interaction: The Link Access Gateway device is equipped with a user-friendly Web management interface, allowing users to easily configure and manage the device. Through this interface, users can switch anonymous nodes, configure WAN port static IP, upgrade firmware, and other functions. The node discovery function is integrated in the Web management interface, allowing users to view the node list, performance score, and selection preferences. Provide real-time feedback, such as node connection status, latency, and throughput, to help users make better choices.

[0113] 4. Privacy protection link system testing and optimization: After the link access gateway equipment is manufactured and the anonymous nodes are deployed, the privacy protection link system is tested. The privacy protection link system test content includes the stability, speed, compatibility of the link access gateway equipment, and the connectivity and security of the global anonymous nodes. According to the test results, the privacy protection link system is optimized as necessary to improve performance and user experience.

[0114] 5. User access and training: Provide users with privacy protection link access guides and technical support to help them successfully access the privacy protection link system. At the same time, train users so that they can use the Web management interface proficiently and master the configuration and management methods of the device.

[0115] 6. Continuous maintenance and upgrades: After the privacy protection link system is put into operation, it needs to be continuously maintained and upgraded. This includes regular firmware updates, optimization of anonymous node configurations, and enhancement of encryption algorithms to cope with ever-changing network security threats and user needs.

[0116] In this embodiment, the user's network privacy protection level is significantly improved through the globally deployed anonymous nodes and multi-hop link technology. At the same time, the Web management function and flexible jump mode configuration of the link access gateway device allow users to easily manage and select the most appropriate link according to their needs, thereby ensuring privacy while also providing a good user experience.

[0117] Reference Figure 2 , is a schematic diagram of the structure of a privacy protection link construction system provided in an embodiment of the present application. The system includes a data storage module 100, a data query module 200, a data screening module 300 and a link establishment module 400, wherein:

[0118] The data storage module 100 is used to receive registration information from an anonymous node and store the registration information in a directory service;

[0119] The data query module 200 is used to enable the link access gateway device to query the directory service to obtain multiple available anonymous nodes, wherein the link access gateway device is used to indicate a device that provides data conversion services between the user terminal and the anonymous node;

[0120] A data screening module 300 is used to screen multiple available anonymous nodes to obtain a target anonymous node;

[0121] The link establishment module 400 is used to establish a privacy protection link between a user terminal, a link access gateway device and a target anonymous node.

[0122] It should be noted that since a privacy protection link construction system in this embodiment and a privacy protection link construction method described above are based on the same inventive concept, the corresponding contents in the method embodiment are also applicable to the system embodiment and will not be described in detail here.

[0123] Reference Figure 3 The embodiment of the present application further provides an electronic device, the electronic device comprising:

[0124] at least one memory;

[0125] at least one processor;

[0126] at least one program;

[0127] The program is stored in the memory, and the processor executes at least one program to implement the method for constructing the privacy protection link described above in the present disclosure.

[0128] The electronic device may be any intelligent terminal including a mobile phone, a tablet computer, a personal digital assistant (PDA), a car computer, etc.

[0129] The electronic device according to the embodiment of the present application is described in detail below.

[0130] The processor 1600 may be implemented by a general-purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided by the embodiments of the present disclosure;

[0131] The memory 1700 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 1700 can store an operating system and other applications. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 1700, and the processor 1600 calls and executes the method for constructing a privacy protection link in the embodiment of the present disclosure.

[0132] Input / output interface 1800, used to implement information input and output;

[0133] The communication interface 1900 is used to realize the communication interaction between the device and other devices. The communication can be realized through a wired manner (such as USB, network cable, etc.) or a wireless manner (such as mobile network, WIFI, Bluetooth, etc.);

[0134] Bus 2000 , which transmits information between various components of the device (e.g., processor 1600 , memory 1700 , input / output interface 1800 , and communication interface 1900 );

[0135] The processor 1600 , the memory 1700 , the input / output interface 1800 , and the communication interface 1900 are connected to each other in communication within the device via the bus 2000 .

[0136] The embodiment of the present disclosure also provides a storage medium, which is a computer-readable storage medium. The computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute the above-mentioned privacy protection link construction method.

[0137] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0138] The embodiments described in the embodiments of the present disclosure are intended to more clearly illustrate the technical solutions of the embodiments of the present disclosure and do not constitute a limitation on the technical solutions provided by the embodiments of the present disclosure. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided by the embodiments of the present disclosure are also applicable to similar technical problems.

[0139] Those skilled in the art will appreciate that the technical solutions shown in the figures do not limit the embodiments of the present disclosure and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0140] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0141] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0142] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0143] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0144] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0145] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0146] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0147] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable an electronic device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), disk or optical disk and other media that can store programs. The above is a detailed description of the embodiments of the present application in conjunction with the accompanying drawings, but the present application is not limited to the above embodiments. Within the scope of knowledge possessed by ordinary technicians in the relevant technical field, various changes can be made without departing from the purpose of the present application.

Claims

1. A method for constructing a privacy protection link, It is characterized in that include: receiving registration information from an anonymous node and storing the registration information in a directory service; Enable a link access gateway device to query the directory service to obtain a plurality of available anonymous nodes, wherein the link access gateway device is used to indicate a device that provides data conversion services between a user terminal and the anonymous node; The multiple available anonymous nodes are screened to obtain a target anonymous node; wherein: Obtain a historical network node tracking scheme, wherein the historical network node tracking scheme is used to indicate a historical path obtained by tracking a previous privacy protection link, and each of the historical paths corresponds to an anonymous node; The information corresponding to the historical path in the historical network node tracking scheme is used to form a training sample of a unified template, wherein the unified template is used to indicate that the data information contained in the training sample is the same; Sampling the training samples to train the deep neural network model to obtain a trained deep neural network model; Sampling the trained deep neural network model to screen the multiple available anonymous nodes to obtain a target anonymous node; A privacy protection link is established between the user terminal, the link access gateway device, and the target anonymous node.

2. The method for constructing a privacy protection link according to claim 1, It is characterized in that The sampling of the trained deep neural network model to screen the multiple available anonymous nodes to obtain a target anonymous node includes: Using a random algorithm to generate a plurality of paths corresponding to the plurality of available anonymous nodes; Inputting the multiple paths into the trained deep neural network model to filter out the target path; According to the target path, a target anonymous node is determined.

3. The method for constructing a privacy protection link according to claim 1, It is characterized in that The establishing of a privacy protection link between the user terminal, the link access gateway device, and the target anonymous node includes: An encryption algorithm and a secure connection protocol are used to establish a privacy protection link between the user terminal, the link access gateway device and the target anonymous node, wherein the secure connection protocol is used to indicate a cryptographic communication framework that ensures secure communication between the user terminal, the link access gateway device and the target anonymous node.

4. The method for constructing a privacy protection link according to claim 1, It is characterized in that After establishing a privacy protection link between the user terminal, the link access gateway device, and the target anonymous node, the method further includes: Detecting the state of the target anonymous node in the privacy protection link, wherein the state includes whether the path corresponding to the target anonymous node is unobstructed and the load of the target anonymous node; If the path corresponding to the target anonymous node is blocked or the load of the target anonymous node exceeds a preset value, a new target anonymous node is selected.

5. The method for constructing a privacy protection link according to claim 4, It is characterized in that After reselecting the target anonymous node, the method further includes: Configuring a Web management interface on the link access gateway device; After the target anonymous node is reselected, the previous target anonymous node is switched to the reselected target anonymous node through the Web management interface.

6. The method for constructing a privacy protection link according to claim 5, It is characterized in that After configuring the Web management interface on the link access gateway device, the method further includes: An anonymous node discovery function is set in the Web management interface, where the anonymous node discovery function is used to view an anonymous node list; The anonymous node discovery function is used to check the status information of the anonymous node so as to select the anonymous node, wherein the status information includes the connection status, delay and throughput of the anonymous node.

7. A privacy protection link construction system, It is characterized in that include: A data storage module, used for receiving registration information from an anonymous node and storing the registration information in a directory service; A data query module, used to enable a link access gateway device to query the directory service to obtain a plurality of available anonymous nodes, wherein the link access gateway device is used to indicate a device that provides data conversion services between a user terminal and the anonymous node; A data screening module is used to screen the multiple available anonymous nodes to obtain a target anonymous node; wherein: Obtain a historical network node tracking scheme, wherein the historical network node tracking scheme is used to indicate a historical path obtained by tracking a previous privacy protection link, and each of the historical paths corresponds to an anonymous node; The information corresponding to the historical path in the historical network node tracking scheme is used to form a training sample of a unified template, wherein the unified template is used to indicate that the data information contained in the training sample is the same; Sampling the training samples to train the deep neural network model to obtain a trained deep neural network model; Sampling the trained deep neural network model to screen the multiple available anonymous nodes to obtain a target anonymous node; The link establishment module is used to establish a privacy protection link between the user terminal, the link access gateway device and the target anonymous node.

8. An electronic device, It is characterized in that It includes at least one control processor and a memory for communicating with the at least one control processor; the memory stores instructions that can be executed by the at least one control processor, and the instructions are executed by the at least one control processor so that the at least one control processor can execute the method for constructing a privacy protection link as described in any one of claims 1 to 6.

9. A computer-readable storage medium, It is characterized in that The computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute the method for constructing a privacy protection link according to any one of claims 1 to 6.

Images