Information encryption method and device, readable storage medium and computer program product

Abstract

The application provides an information encryption method and device, a readable storage medium and a computer program product, relates to the technical field of Internet, and the information encryption method is applied to a computing power network brain, and the method comprises the following steps: receiving computing power information of a computing task and data encryption information of the computing task sent by a computing power network user; obtaining security level information of at least one computing power network node matched with the computing task according to the computing power information; each matched computing power network node corresponds to one security level information; performing encryption processing on the data encryption information and the security level information to obtain encrypted security matching information; and sending the encrypted security matching information to the computing power network user. According to the application scheme, relevant information of the matched computing power network node can be obtained by the computing power network user under the condition that only the data encryption information of the computing task is known, and the computing power network node also does not need to know the data information of the computing task, so that the data security risk is reduced.

Description

Technical Field

[0001] This invention relates to the field of Internet technology, and in particular to an information encryption method, apparatus, readable storage medium, and computer program product. Background Technology

[0002] To efficiently utilize the massive distributed computing resources at the network edge and promote the deep integration and collaborative processing of distributed edge computing and networks, the concept of computing power networks (CPNs) has been proposed. CPNs aim to interconnect and coordinate the scheduling of distributed computing nodes, optimizing and efficiently utilizing network and computing resources through improvements to network architecture and protocols. Security issues in CPNs are also increasingly attracting attention. CPNs consist of nodes provided by various computing power service providers, each possessing different computing resources, service capabilities, and security features. By accessing the CPN, users can select a matching CPN node based on their task type and required computing resources, transmitting data to that node for computation.

[0003] However, user data often involves a certain degree of confidentiality, and the varying levels of sensitivity lead to different levels of security protection required for computing power tasks. Neither external attackers nor other service providers within the computing network want confidential data to be leaked. However, existing computing power network allocation schemes cannot match suitable computing power network nodes without knowing the sensitivity of the computing task data. Summary of the Invention

[0004] The purpose of this invention is to provide an information encryption method, device, readable storage medium, and computer program product to solve the problem that existing computing power network allocation schemes cannot match suitable computing power network nodes without knowing the sensitivity of computing task data.

[0005] To address the aforementioned technical problems, the embodiments of the present invention provide the following technical solutions:

[0006] In a first aspect, embodiments of the present invention provide an information encryption method applied to a computing power network brain, the method comprising:

[0007] Receive computing power information and data encryption information of the computing task sent by the computing power network user;

[0008] Based on the computing power information, the security level information of at least one computing power network node that matches the computing task is obtained, wherein each matched computing power network node corresponds to one security level information.

[0009] The data encryption information and the security level information are encrypted to obtain encrypted security matching information;

[0010] The encrypted secure matching information is sent to the computing power network user.

[0011] Optionally, before obtaining the security level information of at least one computing power network node matching the computing task based on the computing power information, the method further includes:

[0012] Obtain capability information and security protection measures information for each computing network node;

[0013] Based on the capability information and security protection measures information of each computing power network node, the security level information of the corresponding computing power network node is obtained.

[0014] Optionally, the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task;

[0015] The data encryption information and the security level information are encrypted to obtain encrypted security matching information, including:

[0016] For the security level information of each computing power network node in the matched at least one computing power network node, obtain the corresponding first random number;

[0017] Based on the security level information of the matched at least one computing power network node, obtain the corresponding target data sensitivity level encryption information in the data encryption information;

[0018] Based on the public key corresponding to the data of the computing task and the first random number, the corresponding target data sensitivity level encryption information and security level information are encrypted to obtain the encrypted security matching information of at least one matching computing power network node.

[0019] Optionally, the method further includes:

[0020] The system receives first security matching information sent by the computing power network user, wherein the first security matching information is obtained by the computing power network user after decrypting and processing the encrypted security matching information, wherein the first security matching information includes a target indication identifier, the target indication identifier being used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of the matched at least one computing power network node;

[0021] Based on the target indication identifier, determine the first computing power network node among the at least one matching computing power network nodes corresponding to the target security level information, wherein the target security level information is the security level information of the at least one computing power network node that is higher than the data sensitivity level information of the computing task;

[0022] Based on the capability information of each of the first computing power network nodes, the target computing power network node in the first computing power network node is obtained;

[0023] The target computing network node is sent to the computing network user.

[0024] Secondly, embodiments of the present invention also provide an information encryption method applied to computing power network users, the method comprising:

[0025] Send the computing power information of the computing task and the data encryption information of the computing task to the computing power network brain;

[0026] The system receives encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task.

[0027] The encrypted secure matching information is decrypted and processed to obtain the first secure matching information.

[0028] Optionally, the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task;

[0029] Before sending the encrypted data information of the computing task to the computing power network brain, the method further includes:

[0030] The public key corresponding to the data of the computation task is obtained using the Paillier algorithm;

[0031] The data sensitivity level information of the computing task is encoded using a vector encoding method to obtain the encoding vector corresponding to the data sensitivity level information of the computing task.

[0032] Based on the data sensitivity level information of the computation task, a second random number is obtained;

[0033] Based on the second random number, the Paillier algorithm is used to encrypt the encoded vector to obtain the data sensitivity level encryption information of the computing task.

[0034] Optionally, the encrypted secure matching information is decrypted and processed to obtain first secure matching information, including:

[0035] Construct an indicator, which is used to indicate the correspondence between data sensitivity level information and security level information;

[0036] The private key corresponding to the data of the computation task is obtained using the Paillier algorithm;

[0037] Using the private key corresponding to the data of the computing task, the encrypted security matching information is decrypted to obtain decrypted security matching information. Then, according to the indication identifier, the decrypted security matching information is processed to obtain first security matching information. The first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of at least one computing power network node matched by the computing task.

[0038] Optionally, the method further includes:

[0039] Send the first security matching information to the computing power network brain;

[0040] Receive the target computing power network node from at least one matched computing power network node sent by the computing power network brain according to the first security matching information;

[0041] The data of the computing task is sent to the target computing network node using a re-encryption method.

[0042] Thirdly, embodiments of the present invention also provide an information encryption device applied to a computing power network brain, the device comprising:

[0043] The first receiving module is used to receive computing power information of computing tasks and data encryption information of computing tasks sent by computing power network users;

[0044] The first processing module is used to obtain the security level information of at least one computing power network node that matches the computing task based on the computing power information, wherein each matched computing power network node corresponds to one security level information.

[0045] The second processing module is used to encrypt the data encryption information and the security level information to obtain encrypted security matching information.

[0046] The first sending module is used to send the encrypted security matching information to the computing power network user.

[0047] Fourthly, embodiments of the present invention also provide an information encryption device for use by computing network users, the device comprising:

[0048] The second sending module is used to send the computing power information of the computing task and the data encryption information of the computing task to the computing power network brain;

[0049] The second receiving module is used to receive encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task.

[0050] The third processing module is used to decrypt and process the encrypted security matching information to obtain the first security matching information.

[0051] Fifthly, embodiments of the present invention also provide a computing power network brain, comprising: a processor and a transceiver;

[0052] The transceiver is used to receive computing power information and data encryption information of computing tasks sent by computing power network users.

[0053] The processor is configured to obtain security level information of at least one computing power network node matching the computing task based on the computing power information, wherein each matched computing power network node corresponds to one security level information; and to encrypt the data encryption information and the security level information to obtain encrypted security matching information.

[0054] The transceiver is also used to send the encrypted secure matching information to the computing power network user.

[0055] Sixthly, embodiments of the present invention also provide a computing power network user, including: a processor and a transceiver;

[0056] The transceiver is used to send computing power information of the computing task and data encryption information of the computing task to the computing power network brain; and to receive encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task.

[0057] The processor is used to decrypt and process the encrypted security matching information to obtain the first security matching information.

[0058] In a seventh aspect, embodiments of the present invention also provide a terminal device, comprising: a processor, a memory, and a program stored in the memory and executable on the processor, wherein when the program is executed by the processor, it implements the information encryption method as described in any one of the first aspects, or implements the information encryption method as described in any one of the second aspects.

[0059] Eighthly, embodiments of the present invention also provide a readable storage medium storing a program, which, when executed by a processor, implements the steps of the information encryption method as described in any one of the first aspects, or implements the steps of the information encryption method as described in any one of the second aspects.

[0060] In a ninth aspect, embodiments of the present invention also provide a computer program product, including computer instructions, which, when executed by a processor, implement the steps of the information encryption method as described in any one of the first aspects, or implement the steps of the information encryption method as described in any one of the second aspects.

[0061] At least one of the above technical solutions of the present invention has the following beneficial effects:

[0062] The information encryption method provided by this invention receives computing power information and data encryption information of a computing task sent by a computing power network user through a computing power network brain. The computing power network brain obtains the security level information of at least one computing power network node matching the computing task based on the computing power information, and encrypts the data encryption information and the security level information to obtain encrypted security matching information. This encrypted security matching information is then sent to the computing power network user, who can decrypt it to obtain the security matching information. This method allows the computing power network user to obtain relevant information about the matching computing power network node even when only knowing the data encryption information of the computing task, without the computing power network node needing to know the data information of the computing task. This ensures security and reduces data security risks. Attached Figure Description

[0063] Figure 1 A flowchart illustrating an information encryption method applied to a computing power network brain, as provided in an embodiment of the present invention;

[0064] Figure 2 A flowchart illustrating an information encryption method for computing network users provided in an embodiment of the present invention;

[0065] Figure 3 A detailed flowchart of the information encryption method provided in this embodiment of the invention;

[0066] Figure 4This is a schematic diagram of the structure of an information encryption device applied to a computing power network brain provided in an embodiment of the present invention;

[0067] Figure 5 This is a schematic diagram of the structure of an information encryption device for computing network users provided in an embodiment of the present invention;

[0068] Figure 6 This is a schematic diagram of the structure of the computing power network brain provided in an embodiment of the present invention;

[0069] Figure 7 This is a schematic diagram of the structure of a terminal device provided in an embodiment of the present invention. Detailed Implementation

[0070] To make the technical problems, technical solutions and advantages of the present invention clearer, a detailed description will be given below in conjunction with the accompanying drawings and specific embodiments.

[0071] Before describing the specific implementation methods, the following points should be noted:

[0072] First, we need to introduce the basic principles and vector encoding method of the Paillier algorithm (or Paillier homomorphic encryption algorithm):

[0073] The Paillier homomorphic encryption algorithm is a public-key encryption algorithm based on the deterministic combinatorial residues problem assumption, consisting of three algorithms: (Gen, Enc, Dec).

[0074] (1) Gen: Select public key pk = (n, g), where n = pq, gcd(pq, (p-1)(q-1)) = 1, p and q are prime numbers, and g is a random integer.

[0075] Next, calculate The private key sk = (λ, μ) is obtained.

[0076] (2) Enc: For plaintext m < n, the ciphertext is calculated as: c = g m ·r n modn 2 . m represents encrypted information.

[0077] (3) Dec: For ciphertext c < n 2 The plaintext for calculation is:

[0078]

[0079] The Paillier homomorphic encryption algorithm has the following two characteristics:

[0080] (1) Additive homomorphism: given ciphertexts E(a1) and E(a2), the ciphertext of a1+a2 can be calculated in the form E(a1+a2)=E(a1)E(a2);

[0081] (2) For a single-multiplication homomorphism, given the ciphertext E(a1), the ciphertext of a1×a2 can be calculated as E(a1)a2.

[0082] Vector encoding method:

[0083] In secure multi-party computation, plaintext data is often vector-encoded. A number k can be encoded into a vector v in the following way:

[0084] v = (v1, v2, ..., v i ,…,v n )

[0085] in:

[0086] The vector coding method described above, when used to design a comparison protocol for confidential data, has the following advantages:

[0087] (1) Vector encoding is simple and easy to implement;

[0088] (2) The data to be compared can be converted into a vector, and the form of solving the problem can be converted into a form that is easy to calculate.

[0089] (3) No matter how large the data is, as long as the number of elements in the vector is finite, the amount of computation can be reduced.

[0090] To address the problem that existing computing power network allocation schemes cannot match suitable computing power network nodes without knowing the sensitivity of computing task data, embodiments of the present invention provide an information encryption method, apparatus, computing network device, and readable storage medium.

[0091] like Figure 1 As shown, this embodiment of the invention provides an information encryption method applied to a computing power network brain, the method comprising:

[0092] Step 101: Receive computing power information of the computing task and data encryption information of the computing task sent by the computing power network user.

[0093] It should be noted that the information encryption method provided in this embodiment of the invention is applied to a computing power network system. This computing power network system includes a computing power network node module, comprising a total of n (n is an integer greater than or equal to 1) computing power network nodes, namely, computing power network node 1, computing power network node 2, ..., computing power network node n. The computing power network system also includes a computing power network brain and computing power network users. The n computing power network nodes provide computing power services and other data modeling capabilities. The computing power network brain is the control center responsible for distributing tasks among the computing power network nodes. The computing power network users include users who require data modeling capabilities. They submit their task requests to the computing power network brain, receive the address of the computing power network node that processes the task, encrypt their own data, and transmit it to that node for computation.

[0094] It should be noted that the computing power network brain can also be called the computing network brain. The computing network brain is the center for the computing power network to realize multi-element orchestration, coordination, and intelligent management. Alternatively, it can be understood that terminal devices in the computing power network that have orchestration, coordination, and intelligent management capabilities can also realize the capabilities provided in the embodiments of this invention. Figure 1 The steps of the information encryption method shown are as follows.

[0095] Computing network users can also be called computing network users or user equipment. Computing network users are the terminals or physical devices that access the computing network.

[0096] In this step, the computing power information of the computing task includes at least one of the following:

[0097] Types of computational tasks;

[0098] The amount of computing power required for the computation task.

[0099] In this step, the computing network user sends the type of computing task and the amount of computing power required for the computing task to the computing network brain.

[0100] Encrypted data information for computing tasks can be understood as data obtained after encryption processing of the data information of the computing task, which includes data sensitivity level information.

[0101] The data encryption information for the computation task includes at least one of the following:

[0102] The data sensitivity level information of the computation task is obtained by encrypting the data sensitivity level information of the computation task.

[0103] The public key corresponding to the data used in the computation task;

[0104] The private key corresponding to the data used in the computation task.

[0105] In this step, the computing network user sends the encrypted data sensitivity level information of the computing task and the public key corresponding to the data of the computing task to the computing network brain.

[0106] Step 202: Obtain the security level information of at least one computing power network node that matches the computing task based on the computing power information, wherein each matched computing power network node corresponds to one security level information.

[0107] In this step, the computing power network brain selects k computing power network nodes from the n computing power network nodes in the computing power network node module that match the type of computing task and the size of the computing power requirement of the computing task, as at least one computing power network node matching the computing task, where k is less than or equal to n, k is greater than or equal to 1, and k is an integer.

[0108] Then, the security level information corresponding to each computing power network node in at least one computing power network node that matches the computing task is obtained, resulting in a security level set Y = {y1,…,y}. k}

[0109] In this step, the computing power network brain does not need to obtain data information of the computing task (i.e., it does not need to obtain data sensitivity level information of the computing task).

[0110] Step 103: Encrypt the data encryption information and the security level information to obtain encrypted security matching information.

[0111] The encrypted security matching information (or the security matching information and the decrypted security matching information) can be understood as the correspondence between the encrypted information (or the data sensitivity level information of the computing task) used to indicate the data sensitivity level of the computing task and the security level information of each computing power network node in at least one computing power network node matched with the computing task.

[0112] In this step, the data encryption information and the security level information are encrypted using the Paillier algorithm described above to obtain encrypted security matching information.

[0113] Step 104: Send the encrypted security matching information to the computing power network user.

[0114] In this step, encrypted security matching information is sent to the computing power network user, who then decrypts the information to obtain the security matching information. This information represents the correspondence between the data sensitivity level information of the computing task and the security level information of each computing power network node in at least one matching computing power network node. Based on this correspondence, the optimal computing power network node can be determined.

[0115] In an optional embodiment, before obtaining the security level information of at least one computing power network node matching the computing task based on the computing power information, the method further includes:

[0116] Obtain the capability information and security protection measures information of each computing power network node, that is, obtain the capability information and security protection measures information of each of the above n computing power network nodes. Specifically, after each computing power network node service provider connects to the computing power network, it reports its capability information and various security protection measures information to the computing power network brain.

[0117] The capability information includes at least one of the following:

[0118] Computational ability;

[0119] communication capabilities;

[0120] Memory capacity;

[0121] Storage capacity.

[0122] The computing power network brain obtains the security level information y of the corresponding computing power network node based on the capability information and security protection measures information of each computing power network node. k .

[0123] Furthermore, the computing network user uses the key generation process of the Pailier algorithm to generate a public key (g, N) and a private key λ.

[0124] The data sensitivity level encryption information is first encoded by the computing power network user using vector encoding methods, so that the data sensitivity level information x is encoded into a vector X, as follows:

[0125] X = (m1, ..., m i ,…,m s ),

[0126]

[0127] Then, the computing power network user selects s ​​random numbers r1,…,r s And the Pailier algorithm is used to encrypt vector X, resulting in:

[0128] E(X) = (E(m1,r1),…,E(m s ,r s )),

[0129] in,

[0130] In an optional embodiment, the data encryption information and the security level information are encrypted to obtain encrypted security matching information, including:

[0131] For the security level information of each computing power network node in the at least one matched computing power network node, obtain the corresponding first random number, that is, for each matched computing power network node y k Choose a first random number r b ;

[0132] Based on the security level information of the matched at least one computing power network node, the corresponding target data sensitivity level encryption information is obtained from the data encryption information. Specifically, E(m) is selected from E(X). i ,r i ) such that i = y k The E(m) i ,r i This refers to the target data sensitivity level encryption information, which is one of the data encryption information;

[0133] Based on the public key (g, N) corresponding to the data of the computation task and the first random number r b The corresponding target data sensitivity level encryption information and security level information are encrypted to obtain the encrypted security matching information of the corresponding matching computing power network node. Specifically, the Pailier algorithm described above is used for encryption, as follows:

[0134]

[0135] The encrypted secure matching information {E(μ1),…,E(μ1)} of each matched computing power network node is obtained through the above method. k After that, the encrypted secure matching information {E(μ1),…,E(μ)} of each matched computing power network node is... k Send to computing network users.

[0136] Furthermore, after the computing power network user receives the encrypted secure matching information from each matched computing power network node, the encrypted secure matching information is decrypted and processed to obtain the first secure matching information, specifically:

[0137] The computing network user will construct a dataset U, x, yi ∈U={u1,…,u s}, where x represents the data sensitivity level information for the computation task, and the dataset indicates x and y i Specifically, the dataset uses indicators to indicate the data sensitivity level information and security level information y. k The correspondence between them is denoted as:

[0138]

[0139] Among them, "-1", "0" and "1" are all indicator symbols.

[0140] The encrypted secure matching information is decrypted using the private key λ corresponding to the data of the computation task. Then, according to the aforementioned indicator, the decrypted secure matching information is processed to obtain the first secure matching information, i.e., D(E(μ) is decrypted using the private key. k )), to obtain the decrypted secure matching information μ k Furthermore, if μ k =α, then P(x,y) k ) = -1 and x > y k If μ k =β, then P(x,y) k ) = 1 and x <y k If μ k =γ, then P(x,y) k ) = 0 and x = y k That is, according to μ k The first security matching information obtains a correspondence between the data sensitivity level information of the computation task indicated by the target indicator and the security level information corresponding to at least one matched computing power network node. The target indicator includes at least one of "-1", "1", and "0". Alternatively, it can be understood that the computing power network user generates a security level set vector Z = {z1, ..., z2} based on the decrypted security matching information. k}, where y k >=x,z i =1, otherwise it is 0, which can be understood as the safety equivalent set vector being composed of target indicator markers.

[0141] Further, the computing power network user sends the first security matching information to the computing power network brain. Based on the target indication identifier, the computing power network brain determines the first computing power network node among the at least one matched computing power network nodes corresponding to the target security level information. The target security level information is the security level information of the at least one computing power network node that is higher than the data sensitivity level information of the computing task. Specifically, the computing power network brain selects a full-level set vector with a value of 1 from the security level set vector as the security level set vector corresponding to the first security matching information. This security level set vector includes the first computing power network node among the at least one matched computing power network nodes corresponding to the target security level information.

[0142] Based on the capability information of each first computing power network node, the target computing power network node among the matched at least one computing power network node is obtained. Specifically, the computing power network brain determines the target computing power network node based on the first security matching information or the security level set vector Z = {z1, ..., z} corresponding to the first security matching information. k The first computing power network node in the first security matching information is determined, and the best computing power network node is selected as the target computing power network node based on the capability information of each computing power network node.

[0143] The target computing network node is sent to the computing network user, that is, the computing network user is notified of the target computing network node.

[0144] like Figure 2 As shown in the figure, this embodiment of the invention also provides an information encryption method applied to computing power network users, the method comprising:

[0145] Step 201: Send the computing power information of the computing task and the data encryption information of the computing task to the computing power network brain.

[0146] Computing network users, also known as computing network users or user devices, are terminals or physical devices that access the computing network. Alternatively, they can be understood as terminals or physical devices that access the computing network and are capable of performing actions such as... Figure 2 The steps of the information encryption method shown are as follows.

[0147] The computing power information of the computing task includes at least one of the following:

[0148] Types of computational tasks;

[0149] The amount of computing power required for the computation task.

[0150] In this step, the computing network user sends the type of computing task and the amount of computing power required for the computing task to the computing network brain.

[0151] Encrypted data information for computing tasks can be understood as data obtained after encryption processing of the data information of the computing task, which includes data sensitivity level information.

[0152] The data encryption information for the computation task includes at least one of the following:

[0153] The data sensitivity level information of the computation task is obtained by encrypting the data sensitivity level information of the computation task.

[0154] The public key corresponding to the data used in the computation task;

[0155] The private key corresponding to the data used in the computation task.

[0156] In this step, the computing network user sends the encrypted data sensitivity level information of the computing task and the public key corresponding to the data of the computing task to the computing network brain.

[0157] Step 202: Receive encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task.

[0158] In this step, the computing power network brain selects k computing power network nodes from the n computing power network node modules that match the type and computing power requirement of the computing task. These k nodes are designated as at least one computing power network node matching the computing task, where k is less than or equal to n, k is greater than or equal to 1, and k is an integer. Then, the security level information corresponding to each computing power network node in the at least one matching computing power network node is obtained, resulting in a security level set Y = {y1, ..., y...}. k}

[0159] The data encryption information and the security level information are encrypted using the Paillier algorithm described above to obtain encrypted security matching information, which is then sent to the computing power network user.

[0160] Step 203: Decrypt and process the encrypted security matching information to obtain the first security matching information.

[0161] Among them, the security matching information (or encrypted security matching information, decrypted security matching information) indicates the correspondence between the security level information of each matched computing power network node and the data sensitivity level information of the computing task.

[0162] This step can also be understood as decrypting the encrypted secure matching information and performing relevant calculations to obtain the first secure matching information.

[0163] In an optional embodiment, before sending the encrypted data information of the computing task to the computing network brain, the method further includes:

[0164] Using the Paillier algorithm, the public key corresponding to the data of the computing task is obtained. Specifically, the computing power network user generates a public key (g, N) and a private key λ using the key generation process of the Paillier algorithm.

[0165] The data sensitivity level information of the computing task is encoded using a vector encoding method to obtain the encoding vector X corresponding to the data sensitivity level information of the computing task.

[0166] The computing power network user first uses vector coding to encode the data sensitivity level information x into a vector X, as follows:

[0167] X = (m1, ..., m i ,…,m s ),

[0168] in,

[0169] Based on the data sensitivity level information of the computing task, a second random number is obtained, that is, the computing power network user selects s ​​random numbers r1,…,r s ;

[0170] Based on the second random number, the encoded vector is encrypted using the Paillier algorithm to obtain the data sensitivity level encryption information for the computational task, specifically:

[0171] E(X) = (E(m1,r1),…,E(m s ,r s )),

[0172] in,

[0173] In one optional embodiment, the encrypted secure matching information is decrypted and processed to obtain first secure matching information, including:

[0174] An indicator is constructed to indicate the correspondence between data sensitivity level information and security level information. Specifically, the computing power network user will construct a dataset U, x, y. i ∈U={u1,…,u s}, where x represents the data sensitivity level information for the computation task, and the dataset indicates x and y iSpecifically, the dataset uses indicators to indicate the data sensitivity level information and security level information y. k The correspondence between them is denoted as:

[0175]

[0176] Among them, "-1", "0" and "1" are all indicator symbols.

[0177] The Paillier algorithm is used to obtain the private key corresponding to the data of the computing task. Specifically, the computing power network user uses the key generation process of the Paillier algorithm to generate the public key (g, N) and the private key λ.

[0178] Using the private key corresponding to the data of the computation task, the encrypted secure matching information is decrypted to obtain the decrypted secure matching information, i.e., D(E(μ) is decrypted using the private key. k )), to obtain μ k .

[0179] Using the private key corresponding to the data of the computing task, the encrypted security matching information is decrypted to obtain decrypted security matching information. Then, according to the indication identifier, the decrypted security matching information is processed to obtain the first security matching information.

[0180] Specifically, the computing network user uses the private key corresponding to the data of the computing task to decrypt the encrypted security matching information to obtain the decrypted security matching information μ. k The decrypted security matching information μ k Filter and select those that meet y k The decrypted security matching information of >=x is used as the first security matching information and is sent to the computing power network brain.

[0181] or,

[0182] The computing power network user generates a security level set vector Z = {z1, ..., z2} based on the decrypted security matching information. k}, where y k >=x,z i =1, otherwise it is 0. Select the full set vector of security level set vector with a value of 1 as the security level set vector corresponding to the first security matching information, and send the security level set vector corresponding to the first security matching information to the computing power network brain.

[0183] Furthermore, the method also includes:

[0184] Send the first security matching information to the computing power network brain;

[0185] The computing power network brain receives the target computing power network node from at least one matched computing power network node sent by the computing power network brain according to the first security matching information. Specifically, the computing power network brain receives the target computing power network node from at least one matched computing power network node according to the first security matching information or the security level set vector Z = {z1, ..., z} corresponding to the first security matching information. k}, determine the first computing power network node in the first security matching information, and select the best computing power network node as the target computing power network node according to the capability information of each first computing power network node, and notify the computing power network user of the target computing node;

[0186] The computing task data is sent to the target computing network node using a re-encryption method. Specifically, the computing network user negotiates with the computing network service provider of the target computing network node through a proxy re-encryption method to send the encrypted computing task data to the target computing network node for task computation.

[0187] The following is combined Figure 3 The following describes the specific process of the information encryption method provided in the embodiments of the present invention:

[0188] Computing power network nodes 1 through n report capability information and security protection measures to the computing power network brain.

[0189] The computing power network user generates a public key and a private key, encodes the data sensitivity level information of the computing task into an encoding vector, generates a second random number, and uses the second random number to encrypt the encoding vector to obtain the data sensitivity level encrypted information; the computing power network user sends the data encryption information (including the data sensitivity level encrypted information), the public key, and the computing power information of the computing task to the computing power network brain;

[0190] The computing power network brain calculates the security level information of each computing power network node and constructs a dataset U; the computing power network brain selects k matching computing power network nodes and generates a first random number to encrypt the data encryption information and security level information, obtaining encrypted security matching information; the computing power network user generates a public key and a private key, encodes the data sensitivity level information of the computing task into an encoding vector, generates a second random number, and uses the second random number to encrypt the encoding vector to obtain data sensitivity level encrypted information; the data encryption information and the security level information are then encrypted to obtain encrypted security matching information; the computing power network brain sends the encrypted security matching information to the computing power network user.

[0191] The computing power network user decrypts the encrypted security matching information to obtain the first security matching information, and sends the first security matching information to the computing power network brain;

[0192] The computing power network brain obtains the target computing power network node based on the first security matching information and capability information, and notifies the computing power network user of the target computing power network node;

[0193] A computing network user initiates a request for a computing task to a target computing network node.

[0194] The information encryption method provided in this invention utilizes the Paillier algorithm throughout the computing power network. First, it performs vector encoding on the sensitivity of the computing task data of the computing power network user, followed by homomorphic encryption. Without knowing the sensitivity of the computing task data, the computing power network service provider and the computing power network brain compare and match the user's data computing tasks to a safe and suitable node. Data security is increasingly valued, and the security protection capabilities of computing power network nodes vary. The computing tasks of computing power users not only need to meet computing power requirements but also privacy and data security requirements, ensuring that the assigned tasks receive sufficient security protection.

[0195] Taking into account the security issues of node allocation, protecting data sensitivity, and constructing a comparison protocol, it can allocate nodes with appropriate security levels to user tasks, thereby reducing data security risks.

[0196] like Figure 4 As shown, this embodiment of the invention also provides an information encryption device applied to a computing power network brain, the device comprising:

[0197] The first receiving module 401 is used to receive computing power information of computing tasks and data encryption information of computing tasks sent by computing power network users;

[0198] The first processing module 402 is used to obtain the security level information of at least one computing power network node that matches the computing task based on the computing power information, wherein each matched computing power network node corresponds to one security level information.

[0199] The second processing module 403 is used to encrypt the data encryption information and the security level information to obtain encrypted security matching information.

[0200] The first sending module 404 is used to send the encrypted security matching information to the computing power network user.

[0201] Optionally, the device further includes:

[0202] The first acquisition module is used to acquire the capability information and security protection measures information of each computing power network node;

[0203] The first target processing module is used to obtain the security level information of the corresponding computing power network node based on the capability information and security protection measures information of each computing power network node.

[0204] Optionally, the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task;

[0205] The second processing module 403 includes:

[0206] The first processing unit is configured to obtain a corresponding first random number for the security level information of each computing power network node in the matched at least one computing power network node.

[0207] The second processing unit is used to obtain the corresponding target data sensitivity level encryption information in the data encryption information based on the security level information of the matched at least one computing power network node.

[0208] The third processing unit is used to encrypt the corresponding target data sensitivity level encryption information and security level information according to the public key corresponding to the data of the computing task and the first random number, so as to obtain the encrypted security matching information of the matched at least one computing power network node.

[0209] Optionally, the device further includes:

[0210] The first target receiving module is used to receive the first security matching information sent by the computing power network user. The first security matching information is obtained by the computing power network user after decrypting and processing the encrypted security matching information. The first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of the matched at least one computing power network node.

[0211] The second target processing module is used to determine, according to the target indication identifier, the first computing power network node among the at least one matching computing power network nodes corresponding to the target security level information, wherein the target security level information is the security level information of the at least one computing power network node that is higher than the data sensitivity level information of the computing task;

[0212] The third target processing module is used to obtain the target computing power network node among the first computing power network nodes based on the capability information of each of the first computing power network nodes.

[0213] The first target sending module is used to send the target computing power network node to the computing power network user.

[0214] It should be noted that the information encryption device for computing power network brain described in the embodiments of the present invention is a device capable of executing the above-described information encryption method for computing power network brain. Therefore, all embodiments of the above-described information encryption method for computing power network brain are applicable to this device and can achieve the same or similar technical effects.

[0215] like Figure 5 As shown, this embodiment of the invention also provides an information encryption device for use by computing power network users, the device comprising:

[0216] The second sending module 501 is used to send the computing power information of the computing task and the data encryption information of the computing task to the computing power network brain;

[0217] The second receiving module 502 is used to receive encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task.

[0218] The third processing module 503 is used to decrypt and process the encrypted security matching information to obtain the first security matching information.

[0219] Optionally, the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task;

[0220] The device further includes:

[0221] The fourth target processing module is used to obtain the public key corresponding to the data of the computing task using the Paillier algorithm;

[0222] The fifth target processing module is used to encode the data sensitivity level information of the computing task using a vector encoding method to obtain the encoding vector corresponding to the data sensitivity level information of the computing task.

[0223] The sixth target processing module is used to obtain a second random number based on the data sensitivity level information of the computing task;

[0224] The seventh target processing module is used to encrypt the encoded vector using the Paillier algorithm based on the second random number to obtain the data sensitivity level encryption information of the computing task.

[0225] Optionally, the third processing module 503 includes:

[0226] The fourth processing unit is used to construct an indication identifier, which is used to indicate the correspondence between data sensitivity level information and security level information;

[0227] The fifth processing unit is used to obtain the private key corresponding to the data of the computing task using the Paillier algorithm;

[0228] The sixth processing unit is used to decrypt the encrypted security matching information using the private key corresponding to the data of the computing task to obtain decrypted security matching information, and to process the decrypted security matching information according to the indication identifier to obtain first security matching information. The first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of at least one computing power network node matched by the computing task.

[0229] Optionally, the device further includes:

[0230] The second target sending module is used to send the first security matching information to the computing power network brain;

[0231] The second target receiving module is used to receive the target computing power network node among the matched at least one computing power network node sent by the computing power network brain according to the first security matching information.

[0232] The third target sending module is used to send the data of the computing task to the target computing power network node using re-encryption.

[0233] It should be noted that the information encryption device for computing network users described in the embodiments of the present invention is a device capable of executing the above-described information encryption method for computing network users. Therefore, all embodiments of the above-described information encryption method for computing network users are applicable to this device and can achieve the same or similar technical effects.

[0234] like Figure 6 As shown, this embodiment of the invention also provides a computing power network brain, including: a processor 601 and a transceiver 602;

[0235] The transceiver 602 is used to receive computing power information of computing tasks and data encryption information of computing tasks sent by computing power network users;

[0236] The processor 601 is configured to obtain security level information of at least one computing power network node matching the computing task based on the computing power information, wherein each matched computing power network node corresponds to one security level information; and to encrypt the data encryption information and the security level information to obtain encrypted security matching information.

[0237] The transceiver 602 is also used to send the encrypted security matching information to the computing power network user.

[0238] Optionally, the processor 601 is further configured to acquire capability information and security protection measures information of each computing power network node; and to obtain the security level information of the corresponding computing power network node based on the capability information and security protection measures information of each computing power network node.

[0239] Optionally, the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task;

[0240] The processor 601 is specifically used for:

[0241] For the security level information of each computing power network node in the matched at least one computing power network node, obtain the corresponding first random number;

[0242] Based on the security level information of the matched at least one computing power network node, obtain the corresponding target data sensitivity level encryption information in the data encryption information;

[0243] Based on the public key corresponding to the data of the computing task and the first random number, the corresponding target data sensitivity level encryption information and security level information are encrypted to obtain the encrypted security matching information of at least one matching computing power network node.

[0244] Optionally, the transceiver 602 is further configured to receive first security matching information sent by the computing power network user, wherein the first security matching information is obtained by the computing power network user after decrypting and processing the encrypted security matching information, wherein the first security matching information includes a target indication identifier, the target indication identifier being used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of the matched at least one computing power network node;

[0245] The processor 601 is further configured to determine, based on the target indication identifier, a first computing power network node among the matched at least one computing power network nodes corresponding to the target security level information, wherein the target security level information is the security level information of the at least one computing power network node that is higher than the data sensitivity level information of the computing task; and to obtain the target computing power network node among the first computing power network nodes based on the capability information of each first computing power network node.

[0246] The transceiver 602 is also used to send the target computing network node to the computing network user.

[0247] It should be noted that the computing power network brain described in the embodiments of the present invention is a device capable of executing the above-described information encryption method applied to the computing power network brain. Therefore, all embodiments of the above-described information encryption method applied to the computing power network brain are applicable to the computing network device and can achieve the same or similar technical effects.

[0248] This invention also provides a computing power network user, including: a processor and a transceiver;

[0249] The transceiver is used to send computing power information of the computing task and data encryption information of the computing task to the computing power network brain; and to receive encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task.

[0250] The processor is used to decrypt and process the encrypted security matching information to obtain the first security matching information.

[0251] It should be noted that the structure of the computing power network user provided in the embodiments of the present invention is similar to that of... Figure 5 The structures of the computing power network brains shown are basically the same, so they will not be described in detail here.

[0252] Optionally, the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task;

[0253] The processor is also used for:

[0254] The public key corresponding to the data of the computation task is obtained using the Paillier algorithm;

[0255] The data sensitivity level information of the computing task is encoded using a vector encoding method to obtain the encoding vector corresponding to the data sensitivity level information of the computing task.

[0256] Based on the data sensitivity level information of the computation task, a second random number is obtained;

[0257] Based on the second random number, the Paillier algorithm is used to encrypt the encoded vector to obtain the data sensitivity level encryption information of the computing task.

[0258] Optionally, the processor is specifically used for:

[0259] Construct an indicator, which is used to indicate the correspondence between data sensitivity level information and security level information;

[0260] The private key corresponding to the data of the computation task is obtained using the Paillier algorithm;

[0261] Using the private key corresponding to the data of the computation task, the encrypted secure matching information is decrypted to obtain decrypted secure matching information. Then, according to the indication identifier, the decrypted secure matching information is processed to obtain first secure matching information.

[0262] The first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of at least one computing power network node matched with the computing task.

[0263] Optionally, the transceiver is further configured to send the first security matching information to the computing power network brain; and to receive the target computing power network node among the matched at least one computing power network node sent by the computing power network brain according to the first security matching information.

[0264] The processor is also used to send the data of the computing task to the target computing network node using re-encryption.

[0265] It should be noted that the computing network user described in the embodiments of the present invention is a device capable of executing the above-described information encryption method applied to the computing network user. Therefore, all embodiments of the above-described information encryption method applied to the computing network user are applicable to the computing network device and can achieve the same or similar technical effects.

[0266] like Figure 7 As shown, this embodiment of the invention also provides a terminal device, which is a computing power network brain, including: a processor 701; and a memory 703 connected to the processor 701 via a bus interface 702. The memory 703 is used to store the programs and data used by the processor 701 when performing operations, and the processor 701 calls and executes the programs and data stored in the memory 703.

[0267] The transceiver 704 is connected to the bus interface 702 and is used to receive and send data under the control of the processor 701. Specifically, the processor 701 is used to read the program in the memory 703, and the transceiver 704 executes the following processes:

[0268] Receive computing power information and data encryption information of the computing task sent by the computing power network user;

[0269] The processor 701 performs the following procedures:

[0270] Based on the computing power information, the security level information of at least one computing power network node that matches the computing task is obtained, wherein each matched computing power network node corresponds to one security level information.

[0271] The data encryption information and the security level information are encrypted to obtain encrypted security matching information;

[0272] The transceiver 704 also performs the following processes:

[0273] The encrypted secure matching information is sent to the computing power network user.

[0274] Optionally, the processor 701 is specifically used for:

[0275] Obtain capability information and security protection measures information for each computing network node;

[0276] Based on the capability information and security protection measures information of each computing power network node, the security level information of the corresponding computing power network node is obtained.

[0277] Optionally, the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task;

[0278] The processor 701 is specifically used for:

[0279] For the security level information of each computing power network node in the matched at least one computing power network node, obtain the corresponding first random number;

[0280] Based on the security level information of the matched at least one computing power network node, obtain the corresponding target data sensitivity level encryption information in the data encryption information;

[0281] Based on the public key corresponding to the data of the computing task and the first random number, the corresponding target data sensitivity level encryption information and security level information are encrypted to obtain the encrypted security matching information of at least one matching computing power network node.

[0282] Optionally, the transceiver 704 is further configured to:

[0283] The system receives first security matching information sent by the computing power network user, wherein the first security matching information is obtained by the computing power network user after decrypting and processing the encrypted security matching information, wherein the first security matching information includes a target indication identifier, the target indication identifier being used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of the matched at least one computing power network node;

[0284] The processor 701 is also used for:

[0285] Based on the target indication identifier, a first computing power network node is determined among the at least one matched computing power network nodes corresponding to the target security level information, wherein the target security level information is the security level information of the at least one computing power network node that is higher than the data sensitivity level information of the computing task; and, based on the capability information of each of the first computing power network nodes, the target computing power network node among the first computing power network nodes is obtained.

[0286] The transceiver 704 is also used for:

[0287] The target computing network node is sent to the computing network user.

[0288] Among them, Figure 7 In this context, the bus architecture may include any number of interconnected buses and bridges, specifically linking various circuits together, represented by one or more processors (processor 701) and memory (memory 703). The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. Bus interface 702 provides user interface 705. Transceiver 704 may be multiple elements, including transmitters and receivers, providing units for communicating with various other devices over a transmission medium. Processor 701 is responsible for managing the bus architecture and general processing, and memory 703 may store data used by processor 701 during operation.

[0289] This invention also provides a terminal device, which is a computing network user, including: a processor; and a memory connected to the processor via a bus interface, the memory being used to store programs and data used by the processor when performing operations, and the processor calling and executing the programs and data stored in the memory.

[0290] The transceiver is connected to the bus interface and is used to receive and send data under the control of the processor. Specifically, the processor reads the program from the memory, and the transceiver executes the following processes:

[0291] Send the computing power information of the computing task and the data encryption information of the computing task to the computing power network brain;

[0292] The system receives encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task.

[0293] The processor performs the following procedures:

[0294] The encrypted secure matching information is decrypted and processed to obtain the first secure matching information.

[0295] It should be noted that the structure of the computing power network user provided in the embodiments of the present invention is similar to that of... Figure 6 The structures of the computing power network brains shown are basically the same, so they will not be described in detail here.

[0296] Optionally, the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task;

[0297] The processor is also used for:

[0298] The public key corresponding to the data of the computation task is obtained using the Paillier algorithm;

[0299] The data sensitivity level information of the computing task is encoded using a vector encoding method to obtain the encoding vector corresponding to the data sensitivity level information of the computing task.

[0300] Based on the data sensitivity level information of the computation task, a second random number is obtained;

[0301] Based on the second random number, the Paillier algorithm is used to encrypt the encoded vector to obtain the data sensitivity level encryption information of the computing task.

[0302] Optionally, the processor is specifically used for:

[0303] Construct an indicator, which is used to indicate the correspondence between data sensitivity level information and security level information;

[0304] The private key corresponding to the data of the computation task is obtained using the Paillier algorithm;

[0305] Using the private key corresponding to the data of the computation task, the encrypted secure matching information is decrypted to obtain decrypted secure matching information. Then, according to the indication identifier, the decrypted secure matching information is processed to obtain first secure matching information.

[0306] The first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of at least one computing power network node matched with the computing task.

[0307] Optionally, the transceiver is further used for:

[0308] Send the first security matching information to the computing power network brain; and receive the target computing power network node from at least one matched computing power network node sent by the computing power network brain based on the first security matching information;

[0309] The processor is also used for:

[0310] The data of the computing task is sent to the target computing network node using a re-encryption method.

[0311] In addition, specific embodiments of the present invention also provide a computer-readable storage medium storing a computer program thereon, wherein when the program is executed by a processor, it implements the steps of the information encryption method applied to the computing power network brain as described above, or implements the steps of the information encryption method applied to the computing power network user as described above.

[0312] In the several embodiments provided in this application, it should be understood that the disclosed methods and apparatus can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between devices or units may be electrical, mechanical, or other forms.

[0313] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can be physically comprised separately, or two or more units can be integrated into one unit. The integrated unit described above can be implemented in hardware or in the form of hardware plus software functional units.

[0314] The integrated units implemented as software functional units described above can be stored in a computer-readable storage medium. These software functional units, stored in a storage medium, include several instructions that cause a computer device (which may be a personal computer, server, or network device, etc.) to execute some steps of the transmission and reception methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0315] A specific embodiment of the present invention also provides a computer program product, including computer instructions, which, when executed by a processor, implement the above-described functionality. Figure 1 or Figure 2 The various processes of the method embodiments shown can achieve the same technical effect, and will not be described again here to avoid repetition.

[0316] The above describes the preferred embodiments of the present invention. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. An information encryption method, characterized in that, Applied to the computing power network brain, the method includes: Receive computing power information and data encryption information of the computing task sent by the computing power network user; Based on the computing power information, the security level information of at least one computing power network node that matches the computing task is obtained, wherein each matched computing power network node corresponds to one security level information. The data encryption information and the security level information are encrypted to obtain encrypted security matching information; Send the encrypted secure matching information to the computing power network user; The system receives first security matching information sent by the computing power network user, wherein the first security matching information is obtained by the computing power network user after decrypting and processing the encrypted security matching information, and wherein the first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of the matched at least one computing power network node. Based on the target indication identifier, determine the first computing power network node among the at least one matching computing power network nodes corresponding to the target security level information, wherein the target security level information is the security level information of the at least one computing power network node that is higher than the data sensitivity level information of the computing task; Based on the capability information of each of the first computing power network nodes, the target computing power network node in the first computing power network node is obtained; Send the target computing power network node to the computing power network user; The data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task; The data encryption information and the security level information are encrypted to obtain encrypted security matching information, including: For the security level information of each computing power network node in the matched at least one computing power network node, obtain the corresponding first random number; Based on the security level information of the matched at least one computing power network node, obtain the corresponding target data sensitivity level encryption information in the data encryption information; Based on the public key corresponding to the data of the computing task and the first random number, the corresponding target data sensitivity level encryption information and security level information are encrypted to obtain the encrypted security matching information of at least one matching computing power network node.

2. The method according to claim 1, characterized in that, Before obtaining the security level information of at least one computing power network node matching the computing task based on the computing power information, the method further includes: Obtain capability information and security protection measures information for each computing network node; Based on the capability information and security protection measures information of each computing power network node, the security level information of the corresponding computing power network node is obtained.

3. An information encryption method, characterized in that, Applied to users of computing power networks, the method includes: The Paillier algorithm is used to obtain the public key corresponding to the data of the computation task; The data sensitivity level information of the computing task is encoded using a vector encoding method to obtain the encoding vector corresponding to the data sensitivity level information of the computing task. Based on the data sensitivity level information of the computation task, a second random number is obtained; Based on the second random number, the Paillier algorithm is used to encrypt the encoded vector to obtain the data sensitivity level encryption information of the computing task; The computing power information of the computing task and the data encryption information of the computing task are sent to the computing power network brain; the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task; The system receives encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task. The encrypted secure matching information is decrypted and processed to obtain the first secure matching information; The encrypted security matching information is decrypted and processed to obtain first security matching information, including: Construct an indicator, which is used to indicate the correspondence between data sensitivity level information and security level information; The private key corresponding to the data of the computation task is obtained using the Paillier algorithm; Using the private key corresponding to the data of the computing task, the encrypted security matching information is decrypted to obtain decrypted security matching information. Then, according to the indication identifier, the decrypted security matching information is processed to obtain first security matching information. The first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of at least one computing power network node matched by the computing task.

4. The method according to claim 3, characterized in that, The method further includes: Send the first security matching information to the computing power network brain; Receive the target computing power network node from at least one matched computing power network node sent by the computing power network brain according to the first security matching information; The data of the computing task is sent to the target computing network node using a re-encryption method.

5. An information encryption device, characterized in that, The device, applied to the computing power network brain, includes: The first receiving module is used to receive computing power information of computing tasks and data encryption information of computing tasks sent by computing power network users; The first processing module is used to obtain the security level information of at least one computing power network node that matches the computing task based on the computing power information, wherein each matched computing power network node corresponds to one security level information. The second processing module is used to encrypt the data encryption information and the security level information to obtain encrypted security matching information. The first sending module is used to send the encrypted security matching information to the computing power network user; The first target receiving module is used to receive the first security matching information sent by the computing power network user. The first security matching information is obtained by the computing power network user after decrypting and processing the encrypted security matching information. The first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of the matched at least one computing power network node. The second target processing module is used to determine, according to the target indication identifier, the first computing power network node among the at least one matching computing power network nodes corresponding to the target security level information, wherein the target security level information is the security level information of the at least one computing power network node that is higher than the data sensitivity level information of the computing task; The third target processing module is used to obtain the target computing power network node in the first computing power network node based on the capability information of each of the first computing power network nodes. The first target sending module is used to send the target computing power network node to the computing power network user; The data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task; The second processing module includes: The first processing unit is configured to obtain a corresponding first random number for the security level information of each computing power network node in the matched at least one computing power network node. The second processing unit is used to obtain the corresponding target data sensitivity level encryption information in the data encryption information based on the security level information of the matched at least one computing power network node. The third processing unit is used to encrypt the corresponding target data sensitivity level encryption information and security level information according to the public key corresponding to the data of the computing task and the first random number, so as to obtain the encrypted security matching information of the matched at least one computing power network node.

6. An information encryption device, characterized in that, The device is applied to users of computing power networks and includes: The fourth target processing module is used to obtain the public key corresponding to the data of the computation task using the Paillier algorithm; The fifth target processing module is used to encode the data sensitivity level information of the computing task using a vector encoding method to obtain the encoding vector corresponding to the data sensitivity level information of the computing task. The sixth target processing module is used to obtain a second random number based on the data sensitivity level information of the computing task; The seventh target processing module is used to encrypt the encoded vector using the Paillier algorithm based on the second random number to obtain the data sensitivity level encryption information of the computing task. The second sending module is used to send computing power information of the computing task and data encryption information of the computing task to the computing power network brain; the data encryption information of the computing task includes data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task; The second receiving module is used to receive encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task. The third processing module is used to decrypt and process the encrypted security matching information to obtain the first security matching information; The third processing module includes: The fourth processing unit is used to construct an indication identifier, which is used to indicate the correspondence between data sensitivity level information and security level information; The fifth processing unit is used to obtain the private key corresponding to the data of the computing task using the Paillier algorithm; The sixth processing unit is used to decrypt the encrypted security matching information using the private key corresponding to the data of the computing task to obtain decrypted security matching information, and to process the decrypted security matching information according to the indication identifier to obtain first security matching information. The first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of at least one computing power network node matched by the computing task.

7. A computing power network brain, characterized in that, include: Processor and transceiver; The transceiver is used to receive computing power information and data encryption information of computing tasks sent by computing power network users. The processor is configured to obtain security level information of at least one computing power network node matching the computing task based on the computing power information, wherein each matched computing power network node corresponds to one security level information; and to encrypt the data encryption information and the security level information to obtain encrypted security matching information. The transceiver is also used to send the encrypted security matching information to the computing power network user; The transceiver is further configured to receive first security matching information sent by the computing power network user, wherein the first security matching information is obtained by the computing power network user after decrypting and processing the encrypted security matching information, wherein the first security matching information includes a target indication identifier, the target indication identifier being used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of the matched at least one computing power network node; The processor is further configured to determine, based on the target indication identifier, a first computing power network node among the matched at least one computing power network nodes corresponding to the target security level information, wherein the target security level information is the security level information of the at least one computing power network node that is higher than the data sensitivity level information of the computing task; and to obtain the target computing power network node among the first computing power network nodes based on the capability information of each first computing power network node. The transceiver is also used to send the target computing network node to the computing network user; The data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task; The processor is specifically used for: For the security level information of each computing power network node in the matched at least one computing power network node, obtain the corresponding first random number; Based on the security level information of the matched at least one computing power network node, obtain the corresponding target data sensitivity level encryption information in the data encryption information; Based on the public key corresponding to the data of the computing task and the first random number, the corresponding target data sensitivity level encryption information and security level information are encrypted to obtain the encrypted security matching information of at least one matching computing power network node.

8. A computing power network user, characterized in that, include: Processor and transceiver; The processor is used for: The Paillier algorithm is used to obtain the public key corresponding to the data of the computation task; The data sensitivity level information of the computing task is encoded using a vector encoding method to obtain the encoding vector corresponding to the data sensitivity level information of the computing task. Based on the data sensitivity level information of the computation task, a second random number is obtained; Based on the second random number, the Paillier algorithm is used to encrypt the encoded vector to obtain the data sensitivity level encryption information of the computing task; The transceiver is used to send computing power information of the computing task and data encryption information of the computing task to the computing power network brain; In addition, the system receives encrypted security matching information sent by the computing power network brain, wherein the encrypted security matching information is obtained by the computing power network brain encrypting the data encryption information and the security level information of at least one computing power network node that matches the computing task; the data encryption information of the computing task includes the data sensitivity level encryption information of the computing task and the public key corresponding to the data of the computing task. The processor is used to decrypt and process the encrypted security matching information to obtain the first security matching information; Specifically, the processor is used for: Construct an indicator, which is used to indicate the correspondence between data sensitivity level information and security level information; The private key corresponding to the data of the computation task is obtained using the Paillier algorithm; Using the private key corresponding to the data of the computing task, the encrypted security matching information is decrypted to obtain decrypted security matching information. Then, according to the indication identifier, the decrypted security matching information is processed to obtain first security matching information. The first security matching information includes a target indication identifier, which is used to indicate the correspondence between the data sensitivity level information of the computing task and the security level information of at least one computing power network node matched by the computing task.

9. A terminal device, characterized in that, include: A processor, a memory, and a program stored in the memory and executable on the processor, wherein the program, when executed by the processor, implements the information encryption method as described in claim 1 or 2, or implements the information encryption method as described in any one of claim 3 or 4.

10. A readable storage medium, characterized in that, The readable storage medium stores a program that, when executed by a processor, implements the steps of the information encryption method as described in claim 1 or 2, or implements the steps of the information encryption method as described in claim 3 or 4.

11. A computer program product, characterized in that, It includes computer instructions that, when executed by a processor, implement the steps in the information encryption method as described in claim 1 or 2, or implement the steps in the information encryption method as described in claim 3 or 4.

Images