Computing method and device for computing power network privacy, processing equipment and readable storage medium
By using blockchain and unintentional transmission protocols in the computing power network, the participating nodes in the computation are identified and the computation data is encrypted, thus solving the problem of data privacy leakage in the computing power network and realizing the secure distribution and privacy protection of computation data.
Patent Information
- Application Number
- CN202311423115.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-10-30
- Publication Date
- 2026-01-16
- Estimated Expiration
- 2043-10-30
AI Technical Summary
In the process of collaborative computing in a computing network, how can we protect the security of the computing data of the computing initiator during the transfer process, prevent nodes from knowing which computing data the computing participants have obtained, and prevent data privacy leaks?
By using blockchain and unintentional transmission protocols, the computing nodes involved in the target computing task are identified, and random numbers and encryption technologies are used to ensure that computing data is only obtained by designated nodes during transmission, thus preventing data leakage.
It enables the protection of computing data and the privacy of participants during collaborative computing in a computing network, avoids data leakage, and improves the security of computing data distribution.
Smart Images

Figure CN118827097B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of computing power network security, in particular to a computing power network privacy computing method and device, processing equipment and readable storage medium. BACKGROUND
[0002] By using the computing and storage capabilities of edge devices, rich computing power and other shared resources can be provided for collaborative computing, AI training, etc. Through the computing power network, based on the perception of the deployment location, real-time state, load information and service demand of computing power resources / services, a service scheduling strategy is dynamically generated on demand, which can improve the efficiency of computing power and network resources and guarantee user experience.
[0003] How to protect the security of computing data of the computing initiator during the flow process, while avoiding the nodes in the computing power network from knowing which computing data the computing participant obtains, is a privacy security risk that needs to be concerned in the collaborative computing process of the computing power network. SUMMARY
[0004] The purpose of the present application is to provide a computing power network privacy computing method, device, processing equipment and readable storage medium, which solves the problem of data privacy leakage risk in the collaborative computing process of the computing power network.
[0005] To achieve the above purpose, an embodiment of the present application provides a computing power network privacy computing method applied to a first node, comprising:
[0006] determining at least one second node capable of executing a target computing task;
[0007] publishing related information of the target computing task to a blockchain, the related information including a node identifier corresponding to the second node;
[0008] transmitting at least one set of computing data corresponding to the target computing task to at least one second node based on an inadvertent transmission protocol;
[0009] obtaining a target computing result through the blockchain, the target computing result being obtained by the second node according to at least one set of computing data.
[0010] Optionally, the publishing of the related information of the target computing task to the blockchain comprises:
[0011] generating a random number corresponding to each set of computing data;
[0012] performing a chain operation on the related information of the target computing task, the related information further including the random number.
[0013] Optionally, the related information further includes a public key corresponding to the first node.
[0014] The transmitting, based on the oblivious transfer protocol, of the at least one set of computing data corresponding to the target computing task to at least one second node includes:
[0015] Obtaining, through the blockchain, an intermediate parameter corresponding to first computing data, the first computing data being one set of the computing data corresponding to the target computing task, the intermediate parameter being determined by the second node according to a public key corresponding to the first node and a first random number corresponding to the first computing data;
[0016] Encrypting, using a private key corresponding to the first node and the intermediate parameter, the first computing data to obtain first encrypted data;
[0017] Uploading the first encrypted data to a target network, so that the target network performs a chain operation on a first storage address of the first encrypted data on the target network, the target network including a computing power network and / or an InterPlanetary FileSystem (IPFS) network. , IPFS) network.
[0018] Optionally, the obtaining, through the blockchain, of the target computing result includes:
[0019] Obtaining, through the blockchain, a first computing result ciphertext and a second computing result ciphertext corresponding to the target computing task, wherein the first computing result ciphertext is obtained by encrypting a first computing result by the second node, the first computing result is obtained by the second node according to first computing data, the first computing data being one set of the computing data corresponding to the target computing task, and the second computing result ciphertext is obtained by proxy re-encryption of the first computing result ciphertext by the blockchain;
[0020] Decrypting, using a private key corresponding to the first node, the second computing result ciphertext to obtain a symmetric key;
[0021] Decrypting, using the symmetric key, the first computing result ciphertext to obtain the target computing result.
[0022] Optionally, the determining of at least one second node capable of executing the target computing task includes:
[0023] Determining a target node satisfying a preset condition as the second node;
[0024] The preset condition includes at least one of the following:
[0025] The available resource is greater than or equal to a first threshold value;
[0026] The node reputation value is greater than or equal to a second threshold value;
[0027] The distance between the first node is less than or equal to a third threshold value.
[0028] To achieve the above purpose, the embodiments of the application provide a computing power network privacy computing method, applied to a second node, comprising:
[0029] Based on the oblivious transfer protocol, the first computing data is obtained, and the first computing data is a set of computing data corresponding to a target computing task published by a first node;
[0030] According to the first computing data, a first computing result is obtained;
[0031] Based on the proxy re-encryption mechanism, the relevant encryption information of the first computing result is obtained;
[0032] The relevant encryption information is chained.
[0033] Optionally, the first computing data is obtained based on the oblivious transfer protocol, comprising:
[0034] Through the blockchain, the first random number corresponding to the first computing data and the public key corresponding to the first node are obtained;
[0035] The second random number corresponding to the first computing data is generated;
[0036] According to the public key corresponding to the first node, the first random number and the second random number, the intermediate parameter corresponding to the first computing data is determined, and the intermediate parameter is chained;
[0037] Through the blockchain, a first storage address of the first encrypted data on a target network is obtained, the first encrypted data is obtained by encrypting the first computing data by the first node, and the target network includes a computing power network and / or an interplanetary file system IPFS network;
[0038] According to the first storage address, the first encrypted data is obtained from the target network;
[0039] According to the first random number and the second random number, the first encrypted data is decrypted to obtain the first computing data.
[0040] Optionally, the relevant encryption information of the first computing result is obtained based on the proxy re-encryption mechanism, comprising:
[0041] Through the blockchain, the public key corresponding to the first node is obtained;
[0042] generating a re-encryption key corresponding to the first calculation result using a public key corresponding to the first node and a private key corresponding to the second node;
[0043] encrypting the first calculation result using the symmetric key to generate a first calculation result ciphertext;
[0044] encrypting the symmetric key using a public key corresponding to the second node to obtain a key ciphertext;
[0045] determining the first calculation result ciphertext, the re-encryption key and the key ciphertext as related encryption information of the first calculation result.
[0046] To achieve the above object, an embodiment of the present application provides a computing power network privacy calculation method applied to a blockchain, comprising:
[0047] performing proxy re-encryption operation on the first calculation result ciphertext using a re-encryption key corresponding to the first calculation result and a key ciphertext to obtain a second calculation result ciphertext, wherein the first calculation result ciphertext is obtained by encrypting the first calculation result by the second node, the re-encryption key is generated by the second node using a public key corresponding to the first node and a private key corresponding to the second node, and the key ciphertext is generated by the second node using a public key corresponding to the second node and a symmetric key;
[0048] storing the second calculation result ciphertext on the blockchain.
[0049] To achieve the above object, an embodiment of the present application provides a computing power network privacy calculation device applied to a first node, comprising:
[0050] a first processing module configured to determine at least one second node capable of performing a target calculation task;
[0051] a task publishing module configured to publish related information of the target calculation task to a blockchain, wherein the related information comprises a node identifier corresponding to the second node;
[0052] a data distribution module configured to transmit at least one group of calculation data corresponding to the target calculation task to at least one second node based on an oblivious transfer protocol;
[0053] a result obtaining module configured to obtain a target calculation result through the blockchain, wherein the target calculation result is obtained by the second node according to at least one group of calculation data.
[0054] Optionally, the task publishing module comprises:
[0055] The first generating unit is configured to generate, for each group of the calculation data, a random number corresponding to the calculation data;
[0056] The first uplink unit is configured to perform an uplink operation on related information of the target computing task, and the related information further includes the random number.
[0057] Optionally, the related information further includes a public key corresponding to the first node; and the data distribution module includes:
[0058] The parameter obtaining unit is configured to obtain, through the blockchain, an intermediate parameter corresponding to first calculation data, the first calculation data being a group of the calculation data corresponding to the target computing task, and the intermediate parameter being determined by the second node according to a public key corresponding to the first node and a first random number corresponding to the first calculation data;
[0059] The data encryption unit is configured to encrypt the first calculation data by using a private key corresponding to the first node and the intermediate parameter, to obtain first encrypted data;
[0060] The data uploading unit is configured to upload the first encrypted data to a target network, so that the target network performs an uplink operation on a first storage address of the first encrypted data on the target network, and the target network includes a computing power network and / or an InterPlanetary File System (IPFS) network.
[0061] Optionally, the result obtaining module includes:
[0062] The ciphertext obtaining unit is configured to obtain, through the blockchain, a first calculation result ciphertext and a second calculation result ciphertext corresponding to the target computing task, wherein the first calculation result ciphertext is obtained by encrypting a first calculation result by the second node, the first calculation result is obtained by the second node according to first calculation data, the first calculation data is a group of the calculation data corresponding to the target computing task, and the second calculation result ciphertext is obtained by proxy re-encryption of the first calculation result ciphertext by the blockchain;
[0063] The first decryption unit is configured to decrypt the second calculation result ciphertext by using a private key corresponding to the first node, to obtain a symmetric key;
[0064] The second decryption unit is configured to decrypt the first calculation result ciphertext by using the symmetric key, to obtain the target computing result.
[0065] Optionally, the first processing module includes:
[0066] The first processing unit is configured to determine a target node satisfying a preset condition as the second node.
[0067] The preset condition comprises at least one of the following:
[0068] The available resource is greater than or equal to a first threshold value;
[0069] The node reputation value is greater than or equal to a second threshold value;
[0070] The distance between the first node is less than or equal to a third threshold value.
[0071] To achieve the above purpose, an embodiment of the present application provides a computing power network privacy computing device, applied to a second node, comprising:
[0072] A data acquisition module is configured to acquire first computing data based on an oblivious transfer protocol, the first computing data being a set of computing data corresponding to a target computing task published by a first node;
[0073] A data calculation module is configured to calculate a first computing result based on the first computing data;
[0074] A first encryption module is configured to obtain relevant encryption information of the first computing result based on a proxy re-encryption mechanism;
[0075] An information chaining module is configured to perform a chaining operation on the relevant encryption information.
[0076] Optionally, the data acquisition module comprises:
[0077] A first acquisition unit is configured to acquire, through a blockchain, a first random number corresponding to the first computing data and a public key corresponding to the first node;
[0078] A second generation unit is configured to generate a second random number corresponding to the first computing data;
[0079] A parameter determination unit is configured to determine an intermediate parameter corresponding to the first computing data based on the public key corresponding to the first node, the first random number and the second random number, and perform a chaining operation on the intermediate parameter;
[0080] A second acquisition unit is configured to acquire, through the blockchain, a first storage address of first encrypted data on a target network, the first encrypted data being obtained by encrypting the first computing data by the first node, and the target network comprising a computing power network and / or an InterPlanetary File System (IPFS) network;
[0081] A third acquisition unit is configured to acquire the first encrypted data from the target network based on the first storage address;
[0082] A data decryption unit is configured to decrypt the first encrypted data according to the first random number and the second random number, and obtain the first calculation data.
[0083] Optionally, the first encryption module comprises:
[0084] A public key acquisition unit is configured to acquire, through a blockchain, a public key corresponding to the first node.
[0085] A key generation unit is configured to generate a re-encryption key corresponding to the first calculation result by using the public key corresponding to the first node and a private key corresponding to the second node.
[0086] A first encryption unit is configured to encrypt the first calculation result by using a symmetric key, and generate first calculation result ciphertext.
[0087] A second encryption unit is configured to encrypt the symmetric key by using a public key corresponding to the second node, and obtain key ciphertext.
[0088] A second processing unit is configured to determine the first calculation result ciphertext, the re-encryption key and the key ciphertext as related encryption information of the first calculation result.
[0089] To achieve the above object, an embodiment of the present application provides a computing power network private computing device applied to a blockchain, comprising:
[0090] A second encryption module is configured to perform proxy re-encryption operation on the first calculation result ciphertext by using the re-encryption key corresponding to the first calculation result and the key ciphertext, and obtain second calculation result ciphertext, wherein the first calculation result ciphertext is obtained by encrypting the first calculation result by the second node, the re-encryption key is generated by the second node by using the public key corresponding to the first node and the private key corresponding to the second node, and the key ciphertext is generated by the second node by using the public key corresponding to the second node and the symmetric key.
[0091] A result storage module is configured to store the second calculation result ciphertext on the blockchain.
[0092] To achieve the above object, an embodiment of the present application provides a network device, which is a first node and comprises a processor and a transceiver, wherein the processor is configured to:
[0093] Determine at least one second node capable of performing a target computing task.
[0094] Publish related information of the target computing task to a blockchain, wherein the related information comprises a node identifier corresponding to the second node.
[0095] transmit, to at least one second node, at least one set of computation data corresponding to the target computation task based on an oblivious transfer protocol;
[0096] obtain, through the blockchain, a target computation result calculated by the second node based on the at least one set of computation data.
[0097] Optionally, when publishing the information related to the target computation task to the blockchain, the processor is specifically configured to:
[0098] generate, for each set of computation data, a random number corresponding to the computation data;
[0099] perform a chain operation on the information related to the target computation task, and the information related to the target computation task further includes the random number.
[0100] Optionally, the information related to the target computation task further includes a public key corresponding to the first node.
[0101] When transmitting, to at least one second node, at least one set of computation data corresponding to the target computation task based on an oblivious transfer protocol, the processor is specifically configured to:
[0102] obtain, through the blockchain, an intermediate parameter corresponding to first computation data, the first computation data being one set of computation data corresponding to the target computation task, and the intermediate parameter being determined by the second node based on a public key corresponding to the first node and a first random number corresponding to the first computation data;
[0103] encrypt the first computation data using a private key corresponding to the first node and the intermediate parameter to obtain first encrypted data;
[0104] upload the first encrypted data to a target network, so that the target network performs a chain operation on a first storage address of the first encrypted data on the target network, the target network including a computing power network and / or an InterPlanetary File System (IPFS) network.
[0105] Optionally, when obtaining, through the blockchain, a target computation result, the processor is specifically configured to:
[0106] obtain, through the blockchain, a first computation result ciphertext and a second computation result ciphertext corresponding to the target computation task, wherein the first computation result ciphertext is obtained by encrypting a first computation result by the second node, the first computation result is calculated by the second node based on first computation data corresponding to the target computation task, and the second computation result ciphertext is obtained by proxy re-encryption of the first computation result ciphertext by the blockchain.
[0107] decrypt the second calculation result ciphertext using a private key corresponding to the first node to obtain a symmetric key;
[0108] decrypt the first calculation result ciphertext using the symmetric key to obtain the target calculation result.
[0109] Optionally, when determining the at least one second node capable of performing the target calculation task, the processor is specifically configured to:
[0110] determine a target node satisfying a preset condition as the second node;
[0111] The preset condition includes at least one of the following:
[0112] a resource available is greater than or equal to a first threshold value;
[0113] a node reputation value is greater than or equal to a second threshold value;
[0114] a distance between the first node and the target node is less than or equal to a third threshold value.
[0115] To achieve the above object, an embodiment of the present application provides a network device, which is a second node, comprising a processor and a transceiver, wherein the processor is configured to:
[0116] obtain first calculation data based on an oblivious transfer protocol, the first calculation data being a set of calculation data corresponding to a target calculation task published by a first node;
[0117] obtain a first calculation result according to the first calculation data;
[0118] obtain related encryption information of the first calculation result based on a proxy re-encryption mechanism;
[0119] perform a chain operation on the related encryption information.
[0120] Optionally, when obtaining the first calculation data based on the oblivious transfer protocol, the processor is specifically configured to:
[0121] obtain a first random number corresponding to the first calculation data and a public key corresponding to the first node through a blockchain;
[0122] generate a second random number corresponding to the first calculation data;
[0123] determine an intermediate parameter corresponding to the first calculation data according to the public key corresponding to the first node, the first random number and the second random number, and perform a chain operation on the intermediate parameter;
[0124] Obtain, through the blockchain, a first storage address of first encrypted data on a target network, the first encrypted data being obtained by encrypting the first calculation data by the first node, and the target network including a computing power network and / or an IPFS network;
[0125] Obtain, according to the first storage address, the first encrypted data from the target network;
[0126] Decrypt, according to the first random number and the second random number, the first encrypted data to obtain the first calculation data.
[0127] Optionally, when obtaining the related encrypted information of the first calculation result based on a proxy re-encryption mechanism, the processor is specifically configured to:
[0128] Obtain, through the blockchain, a public key corresponding to the first node;
[0129] Generate a re-encryption key corresponding to the first calculation result by using the public key corresponding to the first node and a private key corresponding to the second node;
[0130] Encrypt the first calculation result by using a symmetric key to generate first calculation result ciphertext;
[0131] Encrypt the symmetric key by using a public key corresponding to the second node to obtain key ciphertext;
[0132] Determine the first calculation result ciphertext, the re-encryption key and the key ciphertext as the related encrypted information of the first calculation result.
[0133] To achieve the above object, an embodiment of the present application provides a network device, which is a blockchain and includes a processor and a transceiver, wherein the processor is configured to:
[0134] Perform proxy re-encryption operation on first calculation result ciphertext by using a re-encryption key corresponding to the first calculation result and key ciphertext to obtain second calculation result ciphertext, wherein the first calculation result ciphertext is obtained by encrypting the first calculation result by a second node, the re-encryption key is generated by the second node by using a public key corresponding to the first node and a private key corresponding to the second node, and the key ciphertext is generated by the second node by using the public key corresponding to the second node and a symmetric key;
[0135] Store the second calculation result ciphertext on the blockchain.
[0136] To achieve the above object, the embodiment of the present application provides a network device, comprising a transceiver, a processor, a memory and a program or instructions stored on the memory and executable on the processor; the processor implements the computing power network privacy calculation method applied to the first node, or the computing power network privacy calculation method applied to the second node, or the computing power network privacy calculation method applied to the blockchain when executing the program or instructions.
[0137] To achieve the above object, the embodiment of the present application provides a readable storage medium, which stores a program or instructions, and the program or instructions are executable on a processor to implement the steps in the computing power network privacy calculation method applied to the first node, or the steps in the computing power network privacy calculation method applied to the second node, or the steps in the computing power network privacy calculation method applied to the blockchain.
[0138] The beneficial effects of the above technical solutions of the present application are as follows:
[0139] The method of the embodiment of the present application first determines at least one second node capable of executing a target computing task, then publishes related information of the target computing task to a blockchain, and then transmits at least one set of computing data corresponding to the target computing task to the at least one second node based on an oblivious transfer protocol. In this way, after the second node performs the calculation, the first node can obtain the target computing result calculated by the second node through the blockchain. In this process, based on the oblivious transfer protocol, the computing participant (i.e. the second node) can only obtain the selected computing data and cannot view other computing data in the process of collaborative computing in the computing power network, and other nodes (including the first node) cannot know which computing data the computing participant specifically obtains, thereby protecting the privacy of the computing data and the computing participant and avoiding the problem of data privacy leakage in the process of collaborative computing in the computing power network. BRIEF DESCRIPTION OF DRAWINGS
[0140] Figure 1 Schematic diagram for computing power state awareness and announcement;
[0141] Figure 2 Flowchart of the computing power network privacy calculation method of the embodiment of the present application;
[0142] Figure 3 Schematic diagram of the computing task processing flow of the embodiment of the present application;
[0143] Figure 4 Schematic diagram of the computing data distribution flow of the embodiment of the present application;
[0144] Figure 5 Schematic diagram of the computing result feedback flow of the embodiment of the present application;
[0145] Figure 6 A flowchart of a computing power network privacy computing method according to another embodiment of the present application;
[0146] Figure 7 A flowchart of a computing power network privacy computing method according to another embodiment of the present application;
[0147] Figure 8 A structural diagram of a computing power network privacy computing device according to an embodiment of the present application;
[0148] Figure 9 A structural diagram of a computing power network privacy computing device according to another embodiment of the present application;
[0149] Figure 10 A structural diagram of a computing power network privacy computing device according to another embodiment of the present application;
[0150] Figure 11 A structural diagram of a network device according to an embodiment of the present application;
[0151] Figure 12 A structural diagram of a network device according to another embodiment of the present application. DETAILED DESCRIPTION
[0152] To make the technical problems solved by the present application, technical solutions and advantages clearer, the following will be described in detail with reference to the drawings and specific embodiments.
[0153] It should be understood that the term “one embodiment” or “an embodiment” mentioned throughout the specification means that the specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present application. Therefore, “in one embodiment” or “in an embodiment” appearing throughout the specification does not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner.
[0154] In various embodiments of the present application, it should be understood that the size of the serial number of each process does not mean the order of execution, and the execution order of each process should be determined according to its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.
[0155] In addition, the terms “system” and “network” are often used interchangeably in this document.
[0156] In the embodiments provided in the present application, it should be understood that “B corresponding to A” means that B is associated with A, and B can be determined according to A. However, it should also be understood that the determination of B according to A does not mean that B is determined only according to A, but B can also be determined according to A and / or other information.
[0157] The related art will be introduced first as follows.
[0158] In the era of cloud computing, business data is usually transmitted to centralized large or super-large cloud computing centers for processing. However, with the development of the 5G and artificial intelligence era, a large number of new applications are emerging, and the amount of data generated is growing explosively. This places extremely high demands on network latency, data security, and controllability. As a result, edge computing and computing power networks have emerged one after another.
[0159] Multi-access Edge Computing (MEC) is a form of distributed computing that places the main processing and data storage at the edge nodes of the network. It enables data access and processing to be as close to the end user as possible, greatly reducing end-to-end service response latency.
[0160] A computing power network is a new type of information infrastructure that allocates and flexibly schedules computing, storage, and network resources on demand among the cloud, network, and edge based on business needs. Through network sensing, scheduling, and orchestration of computing power, a sharing economy model is adopted to break down and distribute high-computing-power-consuming tasks across a wide range of existing social computing resources (such as idle personal computer processors).
[0161] Among them, the core of the computing power perception network is how to realize the perception of multi-dimensional resources and services such as network, computing, and storage, as well as the scheduling and forwarding of computing tasks.
[0162] like Figure 1 As shown, in existing technologies, multiple edge data centers (DCs) report their location information, computing resource information, and computing service information to their nearest network nodes through a data center gateway. The network aggregates the computing network information reported by multiple nodes to construct a globally unified computing network status view. On the other hand, the network performs unified parsing of business computing network requirements, achieving comprehensive awareness of business needs and providing a guarantee for computing power scheduling based on business requirements.
[0163] However, since computing networks involve multiple sources and ubiquitous computing nodes, it is difficult to guarantee that each node is secure and reliable. The model of distributing data across multiple computing nodes for computation exposes computing network services to serious security risks such as network attacks and data privacy leaks. Therefore, it is necessary to introduce technologies such as privacy computing to analyze and compute data without disclosing sensitive data.
[0164] Existing computing resource / service scheduling strategies may face the following data security issues during the selection of computing nodes and the distribution of computing data:
[0165] The computing initiator hopes to use the resources of the computing participants through the computing power network to complete its own computing tasks. However, when computing tasks and data flow between network nodes and computing power nodes, there may be malicious nodes or network attackers who illegally steal computing data, thereby causing data leakage of the computing initiator.
[0166] During the task distribution phase, the computation initiator needs to distribute the data to be computed to multiple computation participants. In the existing data distribution process, both the computation initiator and the computing network can know which data the initiator sent to which computation participants. Therefore, if a malicious attacker obtains the correspondence between the data sent by the computation initiator and the computation participants, they can obtain the desired data and computation results by colluding with the computation participants, posing a security risk.
[0167] like Figures 2-3 As shown, an embodiment of the present invention provides a method for privacy computation in a computing power network, applied to a first node, comprising:
[0168] Step 201: Identify at least one second node capable of performing the target computation task.
[0169] Here, the first node and at least one second node are both nodes in the computing power network. The first node is the computing initiator, and the second node is the computing participant.
[0170] As an optional example, step 201 may specifically include: determining the target node that meets the preset conditions as the second node; wherein the preset conditions include at least one of the following: (1) available resources are greater than or equal to a first threshold; (2) the node reputation value is greater than or equal to a second threshold; (3) the distance between the node and the first node is less than or equal to a third threshold.
[0171] It should be noted that, in specific embodiments, step 201 can be executed by the first node (i.e., the computation initiator) or by the computing power network. Specifically, in step 201, the first node (or computing power network) can analyze and select suitable second nodes (i.e., computation participants) based on its computational task requirements (i.e., the task requirements of the target computational task), the location of the target node, available resources, etc., and establish a computing resource pool corresponding to the target computational task. The computing resource pool includes one or more second nodes, and the second nodes meet preset conditions and have the ability to execute the target computational task.
[0172] Through the above step 201, computing nodes can be screened according to preset conditions, that is, computing participants that meet the task requirements can be screened out, thereby determining at least one second node that can execute the target computing task.
[0173] In step 202, the related information of the target computing task is published to the blockchain, and the related information includes the node identifier corresponding to the second node.
[0174] In this way, the target node can learn whether it meets the condition for executing the target computing task through the related information of the target computing task on the blockchain. If the node identifier of the target node is included in the related information, it means that the target node meets the condition for executing the target computing task, i.e., the target node can serve as a computing participant (i.e., the second node) of the target computing task. In this way, it can be ensured that the computing data of the computing initiator (i.e., the first node) can only be obtained by the computing participant (the second node) determined by the first node in the process of collaborative computing in the computing power network, thereby protecting the security of the computing data in the computing process.
[0175] It should be noted that after the first node generates the target computing task and the computing data (i.e., at least one set of computing data corresponding to the target computing task), the first node can publish the related information of the target computing task to the blockchain.
[0176] Here, the related information of the target computing task can specifically include: first node information (such as identifier, public key, etc.), target computing task information (such as identifier, computing task digest, etc.), and computing data identifier.
[0177] Through step 201, the integration of computing power demand and computing power resources can be realized in the computing power network, and the second node suitable for executing the target computing task can be screened out. Each computing node (the first node and the second node) can access the blockchain network by calling the Application Programming Interface (API) or the Software Development Kit (SDK) of the blockchain. In this way, by closely combining the computing power network with the blockchain technology, it can support the introduction of multiple computing power providers, and the blockchain can provide a trusted record of the computing task and the key data in the computing process, thereby realizing the traceability of the computing process and the verification of the computing result.
[0178] In step 203, at least one set of computing data corresponding to the target computing task is transmitted to at least one second node based on an oblivious transfer protocol.
[0179] It should be noted that since the calculation data belongs to the privacy data of the calculation initiator (the first node), if other nodes except the calculation participant (the second node) obtain it, there is a risk of data leakage, and if a malicious node knows which calculation data the calculation participant has, it may also obtain the calculation data of the calculation initiator through illegal means, resulting in data leakage.
[0180] In step 203, based on the oblivious transfer protocol, the correspondence between the calculation data and the calculation participant (the second node) can be kept from being disclosed, the privacy of the calculation participant and the calculation data can be protected, thereby realizing the privacy protection of data distribution and improving the security of calculation data distribution.
[0181] In step 204, the target calculation result is obtained through the blockchain, and the target calculation result is obtained by the second node according to at least one set of calculation data.
[0182] It should be noted that after the second node completes the calculation task locally using the obtained calculation data, the first calculation result obtained by the second node can be fed back to the first node through the blockchain.
[0183] In this embodiment, the first node first determines at least one second node capable of performing the target calculation task, and then publishes the related information of the target calculation task to the blockchain. Then, the first node transmits at least one set of calculation data corresponding to the target calculation task to at least one second node based on the oblivious transfer protocol. In this way, after the second node performs the calculation, the first node can obtain the target calculation result calculated by the second node through the blockchain. In this process, based on the oblivious transfer protocol, it can be ensured that in the process of collaborative calculation of the computing power network, the calculation participant (i.e., the second node) can only obtain the calculation data selected by it, and cannot view other calculation data, and other nodes (including the first node) cannot know which calculation data the calculation participant has obtained, thereby protecting the privacy of the calculation data and the calculation participant, and avoiding the problem of data privacy leakage in the process of collaborative calculation of the computing power network.
[0184] In some embodiments, in step 202, the related information of the target calculation task is published to the blockchain, including:
[0185] In step 2021, for each set of calculation data, a random number corresponding to the calculation data is generated.
[0186] That is, the first node needs to generate a random number for each set of calculation data, and the random number can be used by the second node to obtain the corresponding calculation data through the oblivious transfer protocol while protecting the privacy of the calculation data.
[0187] For example, the at least one set of calculation data includes two sets of calculation data, M0 and M1, respectively, the first node can generate a random number x0 for M0 and a random number x1 for M1.
[0188] In step 2022, the related information of the target computing task is chained, and the related information further includes the random number.
[0189] Here, the random number and the first node information, target computing task information, calculation data identifier and the like can be regarded as the related information of the target computing task, and the information is chained to publish the target computing task through the blockchain.
[0190] It should be noted that, in order to ensure the traceability and auditability of the entire execution process of the target computing task, the calculation participant information (such as the node identifier corresponding to the second node), the calculation task key information (such as the calculation task digest and the like), the key data in the calculation process and the related calculation result information and the like are processed and stored after being chained, and the data is stored and queried by maintaining and updating the task index table in the blockchain.
[0191] In an optional example, after the above-mentioned publishing process of the target computing task, the task index table information is updated as follows:
[0192] Table 1: Updated task index table after publishing of the target computing task
[0193]
[0194]
[0195] Optionally, the related information further includes a public key (such as PK_A) corresponding to the first node;
[0196] In step 203, the at least one set of calculation data corresponding to the target computing task is transmitted to at least one second node based on the oblivious transfer protocol, including:
[0197] In step 2031, an intermediate parameter corresponding to the first calculation data is obtained through the blockchain, the first calculation data being one set of calculation data corresponding to the target computing task, and the intermediate parameter being determined by the second node according to the public key corresponding to the first node and the first random number corresponding to the first calculation data.
[0198] For example, the intermediate parameter can be: PK_A(k)+x i .
[0199] Wherein, PK_A represents the public key corresponding to the first node, x irepresents the first random number, and k represents the second random number. Here, the second random number is generated by the second node.
[0200] In step 2032, the first calculation data is encrypted using the private key (for example, SK_A) corresponding to the first node and the intermediate parameter, to obtain first encrypted data.
[0201] Here, the first encrypted data can be calculated by the formula: M ′ a = f (M a , k, x i , x a ) = M a + SK_A (PK_A (k) + x i -x a ).
[0202] wherein a = {i, 1-i}, M ′ a represents the first encrypted data, SK_A represents the private key corresponding to the first node, x a represents an arbitrary random number generated by the first node, and M a represents a set of calculation data corresponding to the random number x a .
[0203] In step 2033, the first encrypted data is uploaded to a target network, so that the target network performs a chain operation on a first storage address of the first encrypted data on the target network. The target network includes a computing power network and / or an InterPlanetary File System (IPFS) network.
[0204] In some embodiments, the calculation initiator (the first node) can generate a corresponding random number x i (index value i) for each set of calculation data, so that the calculation participant (the second node) can select a random number x i , combine the public key (PK_A) of the calculation initiator and the second random number (k) generated by itself to calculate an intermediate parameter (PK_A (k) + x i ), and chain the intermediate parameter. In this way, the calculation initiator can use its private key (SK_A), the intermediate parameter, and the random number to protect the calculation data, to obtain the first encrypted data (M ′ a ). Then, the first encrypted data is uploaded to the target network, and the target network chains the first storage address of the first encrypted data on the target network.
[0205] In this embodiment, the calculation data to be calculated by the second node can be protected from being disclosed, the secure distribution of the calculation data is achieved, and the privacy protection of the calculation data is achieved.
[0206] As Figure 4 shown, here taking the computing initiator as the first node A and the computing participant as the second node D as an example for illustration.
[0207] Suppose that the first node A has two sets of computing data (M0, M1), and the second node D wants to obtain one set of computing data to complete the corresponding computing task, but the second node D does not want to disclose which set of computing data is specifically obtained, then the target computing task publishing process and the computing data distribution process are as follows:
[0208] (1) The first node A generates two random numbers x0, x1 for M0, M1 respectively, and chains the relevant information of the target computing task (such as the computing task digest, the public key PK_A of the first node, the random numbers x0, x1, etc.), to complete the publishing of the target computing task.
[0209] (2) The second node D determines the computing data (such as the first random number x i ) that it wants to execute, and the corresponding set of computing data, i.e. M i , then the second node D can query and obtain the first random number x i , the public key (PK_A) of the computing initiator (i.e. the first node A) corresponding to the first random number x i through the blockchain. Wherein, i represents the index of the first random number x i selected by the second node D, and in this embodiment, x i is x0 or x1, so here the value of i is 0 or 1.
[0210] (3) The second node D generates a second random number (k), and uses the public key (PK_A) to calculate an intermediate parameter, assuming that the intermediate parameter is: f(k, x i ) = PK_A(k) + x i .
[0211] (4) The second node D chains the intermediate parameter (PK_A(k) + x i ).
[0212] (5) The first node A queries and obtains the intermediate parameter (PK_A(k) + x i ) through the blockchain.
[0213] (6) The first node A uses the private key (SK_A) of the first node A to calculate the first encrypted data: M ′ a = M a + SK_A(PK_A(k) + x i - x a ).
[0214] wherein a = {i, 1-i}, M ′ a represents the first encrypted data, k represents the second random number, PK_A represents the public key corresponding to the first node, SK_A represents the private key corresponding to the first node, x i represents the first random number, x a represents an arbitrary random number generated by the first node, M a represents the random number x a corresponds to a set of calculation data.
[0215] (7) The initiator calculates M ′ a and uploads it to the target network (a computing power network or an IPFS network).
[0216] (8) The target network stores the storage address of M ′ a on the chain;
[0217] (9) The second node D obtains the storage address of M ′ a on the chain;
[0218] (10) The second node D obtains the data information of M ′ a by accessing the storage address of M ′ a ;
[0219] (11) The second node D can restore the original calculation data (i.e., the first calculation data) by calculating: M ′ a -k = M a + SK_A(PK_A(k) + x i -x a -k.
[0220] As can be seen from the above, if a = i, then x i = x a , and in combination with SK_A(PK_A(k) = k, it can be known that M ′ a -k = M a , so the first encrypted data (M ′ a ) can be decrypted to obtain the first calculation data (i.e., M i , i.e., M a ); if a ≠ i, then x i and x a cannot be cancelled out, and the first calculation data cannot be decrypted.
[0221] Through the above method, the computing data distribution privacy protection mechanism based on the inadvertent transmission protocol is formed, so that the second node can obtain the selected computing data (that is, the computing data corresponding to the selected random number) that it wants to execute, but cannot obtain other computing data that the second node does not select, and other nodes including the first node do not know which group of computing data the second node specifically obtains, protecting the computing privacy of the second node.
[0222] In the above process, the key data in the computing process needs to be chained, and the updated task index table is as follows:
[0223] Table 2 updated task index table after computing data distribution
[0224]
[0225]
[0226] In this embodiment, in the process of multi-party computing through the computing power network, the computing data of the computing initiator (that is, the first node) can only be obtained by the computing participant (that is, the second node), which can ensure that the computing participant can only obtain the selected computing data, and cannot view other computing data, and other nodes (including the first node) cannot know which group of computing data the computing participant specifically obtains, thereby protecting the privacy of the computing data and the computing participant, and avoiding the problem of data privacy leakage in the collaborative computing process of the computing power network.
[0227] Through the above steps, the distribution process of the computing data of the computing power network can be controlled and managed, and the leakage of the computing data and the information of the computing participant in the computing task data distribution process can be avoided.
[0228] In some optional embodiments, step 204, the target computing result is obtained through the blockchain, which can specifically include the following steps:
[0229] Step 2041, the first computing result ciphertext (C1) and the second computing result ciphertext (C3) corresponding to the target computing task are obtained through the blockchain, wherein the first computing result ciphertext is obtained by encrypting the first computing result by the second node, the first computing result is obtained by calculating the first computing data by the second node, the first computing data is a group of computing data corresponding to the target computing task, and the second computing result ciphertext is obtained by proxy re-encrypting the first computing result ciphertext by the blockchain.
[0230] Step 2042, the second computing result ciphertext is decrypted using the private key (SK_A) corresponding to the first node to obtain the symmetric key.
[0231] Step 2043, using the symmetric key, the first calculation result ciphertext is decrypted, and the target calculation result is obtained.
[0232] In this embodiment, the data privacy sharing of the calculation result is realized by using the proxy re-encryption mechanism through the blockchain, which can ensure that the calculation result is only open to the nodes (first nodes) authorized by the calculation participants (second nodes), and any other nodes cannot know the calculation data and result information of the calculation participants. In this way, the calculation result after the execution of the calculation participant can be safely viewed only by the calculation initiator, and the security in the process of collaborative calculation of the computing power network is improved.
[0233] As shown in the figure, the calculation initiator is taken as the first node A and the calculation participant is taken as the second node D as an example for illustration. Figure 5
[0234] After the second node D completes the calculation task by using its own computing resources, the first calculation result is obtained, and the second node D needs to feed back the first calculation result to the first node A. In this process, the proxy re-encryption mechanism can be used to ensure the security of the data, and the specific process is as follows:
[0235] (1) The second node D obtains the public key (PK_A) of the first node A from the blockchain;
[0236] (2) The second node D uses PK_A and its own private key (i.e. the private key SK_D corresponding to the second node) to generate a re-encryption key (delkey_DA), encrypts the first calculation result by using the symmetric key to generate the first calculation result ciphertext (C1), and encrypts the symmetric key by using PK_D to obtain the key ciphertext (C2);
[0237] (3) The second node D uploads the first calculation result ciphertext (C1), the key ciphertext (C2), and the re-encryption key (delkey_DA) to the blockchain;
[0238] (4) The blockchain calls the re-encryption contract, uses the re-encryption key (delkey_DA) on the chain to perform proxy re-encryption operation by using the re-encryption key and the key ciphertext (C2) to obtain the second calculation result ciphertext (C3), and stores the second calculation result ciphertext (C3) on the blockchain;
[0239] (5) The first node A requests to obtain the execution result of the calculation task of the second node D;
[0240] (6) Query the task index table on the blockchain, and return the second calculation result ciphertext (C3) generated by re-encryption and the first calculation result ciphertext (C1);
[0241] (7) The first node A uses the private key SK_A corresponding to the first node A to decrypt the second calculation result ciphertext (C3) to obtain the symmetric key, and uses the symmetric key to decrypt the first calculation result ciphertext (C1) to obtain the original calculation result data (i.e. the first calculation result).
[0242] In this embodiment, the calculation result feedback process is realized based on the proxy re-encryption mechanism. Specifically, the second node encrypts the first calculation result using the symmetric key and stores it on the chain, encrypts the symmetric key using its public key (PK_A), and also stores the obtained key ciphertext (C2) on the chain. At the same time, the re-encryption key (delkey_DA) is generated using the public key (PK_A) of the first node and the private key (SK_D) of the second node. Then, the blockchain calls the smart contract to perform proxy re-encryption operation using the re-encryption key (delkey_DA) and the key ciphertext (C2), and stores the obtained second calculation result ciphertext (C3) on the chain. Then, the first node obtains the second calculation result ciphertext (C3) and the first calculation result ciphertext (C1) stored on the chain, and uses its own private key (SK_A) to obtain the symmetric key, which can be used to decrypt the second node's calculation result plaintext (i.e. the first calculation result).
[0243] The task index table involved in the above calculation result feedback process is updated as shown in the following table:
[0244] Table 3 Task index table update
[0245]
[0246]
[0247] In the above process, the task index table in the blockchain can be used to update and maintain the calculation task, the calculation initiator, the intermediate data and the calculation result in the calculation process, and each related information involved is uploaded after privacy protection processing. Data sharing can be realized on the premise of protecting data privacy, and the calculation process can be traced and the calculation result can be verified.
[0248] The computing power network privacy calculation method of this embodiment mainly aims at the data privacy disclosure risk that the computing power network may face in the mode of data being distributed to multiple computing power nodes for calculation. Based on the blockchain and the careless transmission, the data security of the calculation data of the calculation initiator in the circulation process can be protected, and other nodes in the computing power network can be prevented from knowing which calculation data the calculation participant obtains, thereby realizing privacy protection of the computing power network.
[0249] As shown in Figure 6 A computing power network privacy calculation method according to an embodiment of the present application is applied to a second node, which comprises:
[0250] At step 601, based on the oblivious transfer protocol, first calculation data corresponding to a set of calculation data of the target calculation task published by the first node is obtained.
[0251] It should be noted that the first node can publish the relevant information of the target calculation task to the blockchain after determining the target calculation task, and the relevant information includes the node identifier corresponding to the second node, and the second node is the node determined by the first node to be able to execute the target calculation task. Therefore, the second node can learn through the blockchain that it meets the task execution requirements for executing the target calculation task, so as to select to obtain the calculation data (that is, a set of calculation data corresponding to the target calculation task) that it hopes to execute, and execute the calculation task.
[0252] At step 602, a first calculation result is calculated based on the first calculation data.
[0253] At step 603, based on the proxy re-encryption mechanism, relevant encryption information of the first calculation result is obtained.
[0254] At step 604, the relevant encryption information is chained.
[0255] In this embodiment, the calculation participant (that is, the second node) obtains the first calculation data based on the oblivious transfer protocol, which can ensure that the calculation participant can only obtain the calculation data selected by the calculation participant in the process of the computing power network collaborative calculation, and cannot view other calculation data, and other nodes (including the first node) cannot know which calculation data the calculation participant obtains, thereby protecting the privacy of the calculation data and the calculation participant, and avoiding the problem of data privacy leakage in the process of the computing power network collaborative calculation.
[0256] In some embodiments, at step 601, the first calculation data is obtained based on the oblivious transfer protocol, which can include the following steps:
[0257] At step 6011, a first random number (x i ) corresponding to the first calculation data and a public key (PK_A) corresponding to the first node are obtained through the blockchain;
[0258] At step 6012, a second random number (k) corresponding to the first calculation data is generated;
[0259] At step 6013, an intermediate parameter corresponding to the first calculation data is determined based on the public key corresponding to the first node, the first random number, and the second random number, and the intermediate parameter is chained.
[0260] For example, the intermediate parameter can be: PK_A(k)+xi .
[0261] wherein, PK_A represents the public key corresponding to the first node, x i represents the first random number, and k represents the second random number. Here, the second random number is generated by the second node.
[0262] Step 6014, obtaining, through the blockchain, a first storage address of first encrypted data on a target network, the first encrypted data being obtained by encrypting the first calculation data by the first node, the target network including a computing power network and / or an IPFS network.
[0263] Step 6015, obtaining the first encrypted data from the target network according to the first storage address.
[0264] Step 6016, decrypting the first encrypted data according to the first random number (x i ) and the second random number (k) to obtain the first calculation data.
[0265] In this step, the original calculation data (i.e., the first calculation data) can be recovered by calculating: M ′ a -k = M a + SK_A(PK_A(k) + x i -x a -k.
[0266] wherein, a = {i, 1-i}, M ′ a represents the first encrypted data, k represents the second random number, PK_A represents the public key corresponding to the first node, SK_A represents the private key corresponding to the first node, x i represents the first random number, x a represents any one random number generated by the first node, and M a represents a set of calculation data corresponding to the random number x a .
[0267] As can be seen from the above, if a = i, then x i = x a , and in combination with SK_A(PK_A(k) = k, it can be known that M ′ a -k = M a Therefore, the first encrypted data (M ′ a ) can be decrypted to obtain the first calculation data (i.e., M i , i.e., M a ); if a ≠ i, then x i and x aThe unresolvable data cannot be decrypted to obtain the first calculation data.
[0268] In this way, only when the calculation data (M ′ a ) corresponding to the first random number (x i ) selected by the calculation participant (i.e., the second node) is the first calculation data, a = i, and the second node can recover the original calculation data (i.e., the first calculation data). That is, it can be ensured that the calculation participant can only recover the calculation data corresponding to the selected random number, and cannot recover the calculation data not selected by the second node.
[0269] In this embodiment, based on the oblivious transfer protocol, the second node can only obtain the calculation data (i.e., the first calculation data) corresponding to the random number x i selected by the second node, and other nodes in the target network, including the first node, cannot know the random number x i selected by the second node. Therefore, these nodes cannot know which calculation data the second node obtains, and these nodes cannot obtain the random number information (e.g., the second random number) generated by the calculation participant (i.e., the second node), so that these nodes cannot obtain any valid data information (privacy-protected calculation data) from the target network. In this way, the privacy of the calculation data can be protected, and the calculation privacy of the second node is protected.
[0270] Optionally, in step 603, the related encryption information of the first calculation result is obtained based on the proxy re-encryption mechanism, including the following steps:
[0271] In step 6031, the public key (PK_A) corresponding to the first node is obtained through the blockchain.
[0272] In step 6032, the re-encryption key (delkey_DA) corresponding to the first calculation result is generated using the public key corresponding to the first node and the private key (SK_D) corresponding to the second node.
[0273] In step 6033, the first calculation result is encrypted using a symmetric key to generate a first calculation result ciphertext (C1).
[0274] In step 6034, the symmetric key is encrypted using the public key (PK_D) corresponding to the second node to obtain a key ciphertext (C2).
[0275] In step 6035, the first calculation result ciphertext (C1), the re-encryption key (delkey_DA), and the key ciphertext (C2) are determined as the related encryption information of the first calculation result.
[0276] In the calculation result feedback process, the encrypted first calculation result (that is, first calculation result ciphertext) and the re-encryption key can be uploaded to the blockchain based on the proxy re-encryption mechanism of the blockchain. In this way, the blockchain can perform secondary encryption on the first calculation result ciphertext by calling the re-encryption contract and using the re-encryption key, and store the secondary encrypted result (that is, second calculation result ciphertext) in the blockchain. In this way, the data processing complexity of the calculation participant can be reduced, and the security in the calculation result feedback process can be ensured.
[0277] In the calculation result feedback process, the encrypted first calculation result (that is, first calculation result ciphertext) and the re-encryption key can be uploaded to the blockchain based on the proxy re-encryption mechanism of the blockchain. In this way, the blockchain can perform secondary encryption on the first calculation result ciphertext by calling the re-encryption contract and using the re-encryption key, and store the secondary encrypted result (that is, second calculation result ciphertext) in the blockchain. In this way, the data processing complexity of the calculation participant can be reduced, and the security in the calculation result feedback process can be ensured.
[0278] As shown in Figure 7 A power network privacy calculation method according to an embodiment of the present application is applied to a blockchain and includes the following steps.
[0279] In step 701, a proxy re-encryption operation is performed on the first calculation result ciphertext using the re-encryption key corresponding to the first calculation result and the key ciphertext, to obtain the second calculation result ciphertext. The first calculation result ciphertext is obtained by encrypting the first calculation result using the second node. The re-encryption key is generated using the public key corresponding to the first node and the private key corresponding to the second node. The key ciphertext is generated using the public key corresponding to the second node and the symmetric key.
[0280] In step 702, the second calculation result ciphertext is stored on the blockchain.
[0281] It should be noted that if the calculation result of the calculation participant needs to be shared with multiple parties, for example, the calculation initiator and the data owner are not the same node, and the calculation result needs to be shared with the calculation initiator and the data owner, then the proxy re-encryption operation based on the blockchain in step 701 can reduce the data processing complexity of the calculation participant. Only one encryption of the first calculation result using the symmetric key is required, and the secondary encryption of the calculation result by the blockchain can be realized.
[0282] The computing power network privacy computing method of the embodiment can be based on a proxy re-encryption mechanism of a block chain, in a calculation result feedback process, by calling a re-encryption contract, a first calculation result ciphertext is re-encrypted twice, and the re-encrypted result (i.e. a second calculation result ciphertext) is stored in the block chain, so that the data processing complexity of the calculation participant can be reduced, and the security in the calculation result feedback process can be ensured.
[0283] As shown in Figure 8 A computing power network privacy computing device of an embodiment of the application is applied to a first node and includes:
[0284] A first processing module 810 is configured to determine at least one second node capable of performing a target calculation task.
[0285] A task publishing module 820 is configured to publish related information of the target calculation task to a block chain, where the related information includes a node identifier corresponding to the second node.
[0286] A data distribution module 830 is configured to transmit at least one set of calculation data corresponding to the target calculation task to at least one second node based on an oblivious transfer protocol.
[0287] A result obtaining module 840 is configured to obtain a target calculation result from the block chain, where the target calculation result is obtained by the second node based on at least one set of calculation data.
[0288] In the embodiment, the first node determines at least one second node capable of performing a target calculation task, publishes related information of the target calculation task to a block chain, and then transmits at least one set of calculation data corresponding to the target calculation task to at least one second node based on an oblivious transfer protocol. In this way, after the second node performs calculation, the first node can obtain the target calculation result calculated by the second node from the block chain. In this process, based on the oblivious transfer protocol, the calculation participant (i.e. the second node) can only obtain the selected calculation data and cannot view other calculation data, and other nodes (including the first node) cannot know which calculation data is obtained by the calculation participant, thereby protecting the calculation data and the privacy of the calculation participant and avoiding data privacy leakage in the computing power network collaborative calculation process.
[0289] Optionally, the task publishing module 820 includes:
[0290] A first generating unit is configured to generate a random number corresponding to each set of calculation data.
[0291] The first uplink unit is configured to perform uplink operation on the related information of the target computing task, and the related information further includes the random number.
[0292] Optionally, the related information further includes a public key corresponding to the first node.
[0293] The parameter acquisition unit is configured to acquire, through the blockchain, an intermediate parameter corresponding to first computing data, the first computing data being a group of the computing data corresponding to the target computing task, and the intermediate parameter being determined by the second node according to a public key corresponding to the first node and a first random number corresponding to the first computing data.
[0294] The data encryption unit is configured to encrypt the first computing data by using the private key corresponding to the first node and the intermediate parameter, to obtain first encrypted data.
[0295] The data uploading unit is configured to upload the first encrypted data to a target network, so that the target network performs uplink operation on a first storage address of the first encrypted data on the target network, and the target network includes a computing power network and / or an InterPlanetary File System (IPFS) network.
[0296] Optionally, the result acquisition module 840 includes:
[0297] The ciphertext acquisition unit is configured to acquire, through the blockchain, a first computing result ciphertext and a second computing result ciphertext corresponding to the target computing task, wherein the first computing result ciphertext is obtained by encrypting a first computing result by the second node, the first computing result is obtained by the second node according to first computing data, the first computing data is a group of the computing data corresponding to the target computing task, and the second computing result ciphertext is obtained by proxy re-encryption of the first computing result ciphertext by the blockchain.
[0298] The first decryption unit is configured to decrypt the second computing result ciphertext by using the private key corresponding to the first node, to obtain a symmetric key.
[0299] The second decryption unit is configured to decrypt the first computing result ciphertext by using the symmetric key, to obtain the target computing result.
[0300] Optionally, the first processing module 810 includes:
[0301] The first processing unit is configured to determine a target node satisfying a preset condition as the second node.
[0302] The preset condition includes at least one of the following:
[0303] Available resources are greater than or equal to the first threshold;
[0304] The node's reputation value is greater than or equal to the second threshold;
[0305] The distance between the first node and the third threshold is less than or equal to the third threshold.
[0306] It should be noted that the computing power network privacy computing device provided in this embodiment of the invention can implement all the method steps implemented in the above embodiment of the computing power network privacy computing method applied to the first node, and can achieve the same technical effect. Here, the parts that are the same as those in the method embodiment and the beneficial effects will not be described in detail.
[0307] like Figure 9 As shown, an embodiment of the present invention provides a network privacy computing device, applied to a second node, comprising:
[0308] Data acquisition module 910 is used to acquire first computing data based on unintentional transmission protocol, wherein the first computing data is a set of computing data corresponding to the target computing task published by the first node;
[0309] The data calculation module 920 is used to calculate and obtain a first calculation result based on the first calculation data;
[0310] The first encryption module 930 is used to obtain the relevant encryption information of the first calculation result based on the proxy re-encryption mechanism;
[0311] The information uploading module 940 is used to upload the relevant encrypted information to the blockchain.
[0312] In this embodiment, the computing participant (i.e., the second node) obtains the first computing data based on the unintentional transmission protocol. This ensures that during the collaborative computing process of the computing power network, the computing participant can only obtain the computing data it has selected and cannot view other computing data. Moreover, other nodes (including the first node) have no way of knowing which computing data the computing participant has specifically obtained, thereby protecting the computing data and the privacy of the computing participant and avoiding the data privacy leakage problem during the collaborative computing process of the computing power network.
[0313] Optionally, the data acquisition module 910 includes:
[0314] The first acquisition unit is used to acquire, through the blockchain, the first random number corresponding to the first computational data and the public key corresponding to the first node;
[0315] The second generation unit is used to generate a second random number corresponding to the first calculated data;
[0316] A parameter determination unit is configured to determine an intermediate parameter corresponding to the first calculation data according to the public key corresponding to the first node, the first random number and the second random number, and perform a chain operation on the intermediate parameter.
[0317] A second acquisition unit is configured to acquire, through the blockchain, a first storage address of first encrypted data on a target network, the first encrypted data being obtained by encrypting the first calculation data by the first node, and the target network including a computing power network and / or an InterPlanetary File System (IPFS) network.
[0318] A third acquisition unit is configured to acquire, according to the first storage address, the first encrypted data from the target network.
[0319] A data decryption unit is configured to decrypt the first encrypted data according to the first random number and the second random number to obtain the first calculation data.
[0320] Optionally, the first encryption module 930 includes:
[0321] A public key acquisition unit is configured to acquire, through the blockchain, a public key corresponding to the first node.
[0322] A key generation unit is configured to generate a re-encryption key corresponding to the first calculation result by using the public key corresponding to the first node and a private key corresponding to the second node.
[0323] A first encryption unit is configured to encrypt the first calculation result by using a symmetric key to generate first calculation result ciphertext.
[0324] A second encryption unit is configured to encrypt the symmetric key by using a public key corresponding to the second node to obtain key ciphertext.
[0325] A second processing unit is configured to determine the first calculation result ciphertext, the re-encryption key and the key ciphertext as related encryption information of the first calculation result.
[0326] It should be noted that the above-mentioned computing power network privacy calculation device provided by the embodiment of the present application can realize all the method steps realized by the above-mentioned computing power network privacy calculation method applied to the second node, and can achieve the same technical effects. Therefore, the same parts and beneficial effects of the method embodiment in this embodiment will not be described in detail.
[0327] As shown in Figure 10 A computing power network privacy calculation device according to an embodiment of the present application applied to a blockchain includes:
[0328] The second encryption module 1010 is configured to perform proxy re-encryption operation on the first calculation result ciphertext by using a re-encryption key corresponding to the first calculation result and a key ciphertext, to obtain a second calculation result ciphertext, wherein the first calculation result ciphertext is obtained by encrypting the first calculation result by the second node, the re-encryption key is generated by the second node using a public key corresponding to the first node and a private key corresponding to the second node, and the key ciphertext is generated by the second node using a public key corresponding to the second node and a symmetric key;
[0329] The result storage module 1020 is configured to store the second calculation result ciphertext on the blockchain.
[0330] It should be noted that the above-mentioned computing power network privacy computing device provided by the embodiment of the present application can realize all method steps realized by the above-mentioned computing power network privacy computing method applied to the blockchain, and can achieve the same technical effects. Therefore, the same parts and beneficial effects of the method embodiment in this embodiment will not be described in detail.
[0331] As shown in Figure 11 The network device 1100 of the embodiment of the present application is a first node, comprising a processor 1110 and a transceiver 1120, wherein the processor 1110 is configured to:
[0332] determine at least one second node capable of performing a target computing task;
[0333] publish related information of the target computing task to a blockchain, wherein the related information comprises a node identifier corresponding to the second node;
[0334] transmit at least one group of computing data corresponding to the target computing task to at least one second node based on an oblivious transfer protocol;
[0335] obtain a target calculation result through the blockchain, wherein the target calculation result is obtained by the second node according to at least one group of computing data.
[0336] In this embodiment, the first node first determines at least one second node capable of performing the target computing task, and then publishes information related to the target computing task to a blockchain. Subsequently, the first node transmits at least one set of computing data corresponding to the target computing task to the at least one second node based on an oblivious transfer protocol. In this way, after the second node performs the calculation, the first node can obtain the target computing result calculated by the second node through the blockchain. In this process, based on the oblivious transfer protocol, it can be ensured that, in the process of collaborative calculation of the computing power network, the computing participant (i.e., the second node) can only obtain the selected computing data and cannot view other computing data. Moreover, other nodes (including the first node) cannot know which computing data the computing participant specifically obtains, thereby protecting the privacy of the computing data and the computing participant and avoiding the problem of data privacy leakage in the process of collaborative calculation of the computing power network.
[0337] Optionally, when publishing the information related to the target computing task to the blockchain, the processor 1110 is specifically configured to:
[0338] generating a random number corresponding to each set of computing data;
[0339] performing a chain operation on the information related to the target computing task, and the information further includes the random number.
[0340] Optionally, the information further includes a public key corresponding to the first node.
[0341] When transmitting at least one set of computing data corresponding to the target computing task to at least one second node based on the oblivious transfer protocol, the processor 1110 is specifically configured to:
[0342] obtaining an intermediate parameter corresponding to the first computing data through the blockchain, the first computing data being one set of computing data corresponding to the target computing task, and the intermediate parameter being determined by the second node based on a public key corresponding to the first node and a first random number corresponding to the first computing data;
[0343] encrypting the first computing data using a private key corresponding to the first node and the intermediate parameter to obtain first encrypted data;
[0344] uploading the first encrypted data to a target network, so that the target network performs a chain operation on a first storage address of the first encrypted data on the target network, and the target network includes a computing power network and / or an InterPlanetary File System (IPFS) network.
[0345] Optionally, when obtaining the target computing result through the blockchain, the processor 1110 is specifically configured to:
[0346] obtain a first computing result ciphertext and a second computing result ciphertext corresponding to the target computing task through the blockchain, wherein the first computing result ciphertext is obtained by encrypting the first computing result by the second node, the first computing result is obtained by the second node according to first computing data, the first computing data is a set of computing data corresponding to the target computing task, and the second computing result ciphertext is obtained by proxy re-encryption of the first computing result ciphertext by the blockchain;
[0347] decrypt the second computing result ciphertext using the private key corresponding to the first node to obtain a symmetric key;
[0348] decrypt the first computing result ciphertext using the symmetric key to obtain the target computing result.
[0349] Optionally, when the processor 1110 determines at least one second node capable of executing the target computing task, it is specifically used for:
[0350] determining a target node satisfying a preset condition as the second node;
[0351] The preset condition includes at least one of the following:
[0352] the available resource is greater than or equal to a first threshold value;
[0353] the node reputation value is greater than or equal to a second threshold value;
[0354] the distance between the first node and the second node is less than or equal to a third threshold value.
[0355] It should be noted that the above network device provided by the embodiment of the application can realize all the method steps realized by the above-mentioned application of the first node in the power network privacy computing method embodiment, and can achieve the same technical effects. Therefore, the same parts and beneficial effects of the method embodiment in this embodiment will not be described in detail.
[0356] A network device according to an embodiment of the application, the network device is a second node, and the structure thereof can adopt the same structure as the first node as shown in Figure 11 The network device includes a processor and a transceiver, wherein the processor is configured to:
[0357] obtain first computing data based on an oblivious transfer protocol, the first computing data being a set of computing data corresponding to a target computing task published by a first node;
[0358] obtain a first computing result according to the first computing data;
[0359] obtain relevant encryption information of the first calculation result based on a proxy re-encryption mechanism;
[0360] perform a chain operation on the relevant encryption information.
[0361] In this embodiment, the calculation participant (i.e., the second node) obtains the first calculation data based on the oblivious transfer protocol, which can ensure that the calculation participant can only obtain the selected calculation data in the process of collaborative calculation of the computing power network, and cannot view other calculation data, and other nodes (including the first node) cannot know which calculation data the calculation participant obtains, thereby protecting the privacy of the calculation data and the calculation participant and avoiding the problem of data privacy leakage in the process of collaborative calculation of the computing power network.
[0362] Optionally, when obtaining the first calculation data based on the oblivious transfer protocol, the processor is specifically configured to:
[0363] obtain a first random number corresponding to the first calculation data and a public key corresponding to the first node through a blockchain;
[0364] generate a second random number corresponding to the first calculation data;
[0365] determine an intermediate parameter corresponding to the first calculation data according to the public key corresponding to the first node, the first random number, and the second random number, and perform a chain operation on the intermediate parameter;
[0366] obtain a first storage address of the first encrypted data on a target network through the blockchain, the first encrypted data being obtained by encrypting the first calculation data by the first node, and the target network including a computing power network and / or an InterPlanetary File System (IPFS) network;
[0367] obtain the first encrypted data from the target network according to the first storage address;
[0368] decrypt the first encrypted data according to the first random number and the second random number to obtain the first calculation data.
[0369] Optionally, when obtaining the relevant encryption information of the first calculation result based on the proxy re-encryption mechanism, the processor is specifically configured to:
[0370] obtain a public key corresponding to the first node through a blockchain;
[0371] generate a re-encryption key corresponding to the first calculation result using the public key corresponding to the first node and a private key corresponding to the second node;
[0372] encrypt the first calculation result using a symmetric key to generate first calculation result ciphertext;
[0373] encrypt the symmetric key using a public key corresponding to the second node to obtain key ciphertext;
[0374] determine the first calculation result ciphertext, the re-encryption key and the key ciphertext as related encryption information of the first calculation result.
[0375] It should be noted that the above network device provided by the embodiment of the present application can realize all the method steps achieved by the above-mentioned power network privacy calculation method applied to the second node, and can achieve the same technical effects. Therefore, the same parts and beneficial effects of the method embodiment in this embodiment will not be described in detail.
[0376] The network device of the embodiment of the present application is a blockchain, and its structure can adopt the same structure as the first node as shown in Figure 11 The network device of the embodiment of the present application is a blockchain, and its structure can adopt the same structure as the first node as shown in
[0377] perform proxy re-encryption operation on the first calculation result ciphertext using a re-encryption key corresponding to the first calculation result and key ciphertext to obtain second calculation result ciphertext, wherein the first calculation result ciphertext is obtained by encrypting the first calculation result using the second node, the re-encryption key is generated by the second node using a public key corresponding to the first node and a private key corresponding to the second node, and the key ciphertext is generated by the second node using the public key corresponding to the second node and a symmetric key;
[0378] store the second calculation result ciphertext on the blockchain.
[0379] It should be noted that the above network device provided by the embodiment of the present application can realize all the method steps achieved by the above-mentioned power network privacy calculation method applied to the second node, and can achieve the same technical effects. Therefore, the same parts and beneficial effects of the method embodiment in this embodiment will not be described in detail.
[0380] The network device of another embodiment of the present application is a first node, as shown in Figure 12 The network device of another embodiment of the present application is a first node, as shown in
[0381] The transceiver 1210 is configured to receive and send data under the control of the processor 1200.
[0382] wherein, in Figure 12 the bus architecture can include any number of interconnected buses and bridges, specifically, various circuitry linking the various elements of the processor 1200, one or more processors represented by the processor, and the memory represented by the memory 1220. The bus architecture can also link various other circuitry, such as peripheral devices, voltage regulators, and power management circuitry, which are well known in the art and thus, are not further described herein. The bus interface provides an interface. The transceiver 1210 can be multiple elements, i.e., including a transmitter and a receiver, providing a means for communicating with various other apparatuses over a transmission medium. The processor 1200 is responsible for managing the bus architecture and general processing, and the memory 1220 can store data used by the processor 1200 in performing operations.
[0383] The network device of another embodiment of the application, the network device is a second node, the structure can adopt the same structure as the first node as shown in Figure 12 , including a transceiver, a processor, a memory, and a program or instruction stored on the memory and executable on the processor; the processor implements the above-mentioned computing power network privacy calculation method applied to the second node when executing the program or instruction.
[0384] The transceiver is configured to receive and send data under the control of the processor.
[0385] wherein, in Figure 12 the bus architecture can include any number of interconnected buses and bridges, specifically, various circuitry linking the various elements of the processor 1200, one or more processors represented by the processor, and the memory represented by the memory 1220. The bus architecture can also link various other circuitry, such as peripheral devices, voltage regulators, and power management circuitry, which are well known in the art and thus, are not further described herein. The bus interface provides an interface. The transceiver 1210 can be multiple elements, i.e., including a transmitter and a receiver, providing a means for communicating with various other apparatuses over a transmission medium. The processor 1200 is responsible for managing the bus architecture and general processing, and the memory 1220 can store data used by the processor 1200 in performing operations.
[0386] The network device of another embodiment of the application, the network device is a blockchain, the structure can adopt the same structure as the first node as shown in Figure 12 , including a transceiver, a processor, a memory, and a program or instruction stored on the memory and executable on the processor; the processor implements the above-mentioned computing power network privacy calculation method applied to the blockchain when executing the program or instruction.
[0387] The transceiver is configured to receive and send data under the control of the processor.
[0388] wherein, in Figure 12 The bus architecture can include any number of interconnected buses and bridges, specifically, various circuits linking the various circuits represented by the processor(s) and the memory. The bus architecture can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and thus, not further described herein. The bus interface provides an interface. The transceiver can be a plurality of elements, i.e., including a transmitter and a receiver, providing a means of communicating with various other apparatus over a transmission medium. The processor is responsible for managing the bus architecture and general processing, and the memory can store data used by the processor in executing its operations.
[0389] A readable storage medium of an embodiment of the present application, which stores programs or instructions, when executed by a processor, implements the steps in the computing power network privacy computing method as described above, and can achieve the same technical effects. To avoid repetition, this will not be described here. Among them, the computer readable storage medium, such as read-only memory (Read-Only Memory, abbreviated as ROM), random access memory (Random Access Memory, abbreviated as RAM), magnetic disk or optical disk, etc.
[0390] It is further noted that the terminals described in this specification include but are not limited to smart phones, tablet computers, etc., and many of the functional components described are referred to as modules in order to more specifically emphasize the independence of their implementation.
[0391] In an embodiment of the present application, the modules can be implemented in software to be executed by various types of processors. For example, an identified executable code module can include one or more physical or logical blocks of computer instructions. For example, it can be structured as an object, a procedure, or a function. However, the executable code of the identified module need not be physically located together, but can include different instructions stored in different locations which, when joined logically together, comprise the module and achieve the stated purpose for the module.
[0392] In fact, an executable code module can be a single instruction, or many instructions, and can even be distributed over several different code segments, among different programs, and across several memory devices. Similarly, operational data can be identified within the module, and can be implemented in any suitable form and organized within any suitable type of data structure. The operational data can be collected as a single data set, or distributed over different locations including over different storage devices, and can exist, at least partially, merely as electronic signals on a system or network.
[0393] When the modules can be implemented in software, hardware implementation of the modules can be done with the current level of technology, so that the modules implemented in software can be built into corresponding hardware circuit by those skilled in the art without considering the cost, including conventional very large scale integration (VLSI) circuit or gate array, and existing semiconductors such as logic chips, transistors and other discrete components. The modules can also be implemented by programmable hardware devices, such as field programmable gate array, programmable array logic, programmable logic device, etc.
[0394] The exemplary embodiments described above are described with reference to the accompanying drawings, many different forms and embodiments of which are possible without departing from the spirit and teachings of this disclosure. Accordingly, the disclosure should not be construed as limited to the particular exemplary embodiments described in this specification. Rather, the exemplary embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art. In the drawings, the size and relative sizes of components can be exaggerated for clarity. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting. As used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms "comprises" and / or "comprising", when used in this specification, specify the presence of stated features, integers, steps, operations, components, and / or groups thereof, but do not preclude the presence or addition of one or more other features, integers, steps, operations, components, and / or groups thereof. Unless otherwise indicated, a range of values, when recited, includes the upper and lower limits of the range and any and all subranges therebetween.
[0395] The above description is the preferred embodiment of the present application, it should be pointed out that for those skilled in the art, without departing from the principles of the present application, can make a number of improvements and refinements, these improvements and refinements should also be considered as the protection scope of the present application.
Claims
1. A computing power network privacy computing method, characterized in that, The application is applied to a first node, comprising: determining at least one second node capable of performing a target computing task; publishing relevant information of the target computing task to a blockchain, the relevant information including a node identifier corresponding to the second node; transmitting at least one set of computing data corresponding to the target computing task to at least one second node based on an oblivious transfer protocol; obtaining a target computing result through the blockchain, the target computing result being obtained by the second node according to at least one set of computing data.
2. The method of claim 1, wherein, The relevant information of the target computing task is published to the blockchain, comprising: generating a random number corresponding to each set of computing data; performing a chain operation on the relevant information of the target computing task, the relevant information further including the random number.
3. The method of claim 1, wherein, The relevant information further includes a public key corresponding to the first node. The at least one set of computing data corresponding to the target computing task is transmitted to at least one second node based on an oblivious transfer protocol, comprising: obtaining an intermediate parameter corresponding to the first computing data through the blockchain, the first computing data being a set of computing data corresponding to the target computing task, and the intermediate parameter being determined by the second node according to the public key corresponding to the first node and a first random number corresponding to the first computing data; encrypting the first computing data using the private key corresponding to the first node and the intermediate parameter to obtain first encrypted data; uploading the first encrypted data to a target network to enable the target network to perform a chain operation on a first storage address of the first encrypted data on the target network, the target network including a computing power network and / or an InterPlanetary File System (IPFS) network.
4. The method of claim 1, wherein, The target computing result is obtained through the blockchain, comprising: obtaining a first computing result ciphertext and a second computing result ciphertext corresponding to the target computing task through the blockchain, wherein the first computing result ciphertext is obtained by encrypting the first computing result by the second node, the first computing result is obtained by the second node according to the first computing data, the first computing data is a set of computing data corresponding to the target computing task, and the second computing result ciphertext is obtained by proxy re-encryption of the first computing result ciphertext by the blockchain; decrypting the second computing result ciphertext using the private key corresponding to the first node to obtain a symmetric key; decrypting the first computing result ciphertext using the symmetric key to obtain the target computing result.
5. The method of claim 1, wherein, The at least one second node capable of performing the target computing task is determined, comprising: determining a target node satisfying a preset condition as the second node; wherein the preset condition includes at least one of the following: available resources are greater than or equal to a first threshold value; a node reputation value is greater than or equal to a second threshold value; the distance between the first node and the second node is less than or equal to a third threshold value.
6. A computing power network privacy computing method, characterized in that, The application is applied to a second node, comprising: Based on the oblivious transfer protocol, obtain first calculation data, the first calculation data is a set of calculation data corresponding to a target calculation task published by a first node, the first node is used to publish related information of the target calculation task to a blockchain, and the second node is a node determined by the first node and capable of executing the target calculation task; According to the first calculation data, a first calculation result is obtained; Based on the proxy re-encryption mechanism, obtain the related encryption information of the first calculation result; The related encryption information is chained.
7. The method of claim 6, wherein, The first calculation data is obtained based on the oblivious transfer protocol, including: Through the blockchain, obtain a first random number corresponding to the first calculation data and a public key corresponding to the first node; Generate a second random number corresponding to the first calculation data; According to the public key corresponding to the first node, the first random number and the second random number, determine the intermediate parameter corresponding to the first calculation data, and chain the intermediate parameter; Through the blockchain, obtain a first storage address of the first encrypted data on a target network, the first encrypted data is obtained by encrypting the first calculation data by the first node, and the target network includes a computing power network and / or an IPFS network. According to the first storage address, obtain the first encrypted data from the target network; According to the first random number and the second random number, the first encrypted data is decrypted to obtain the first calculation data.
8. The method of claim 6, wherein, The related encryption information of the first calculation result is obtained based on the proxy re-encryption mechanism, including: Through the blockchain, obtain a public key corresponding to the first node; Using the public key corresponding to the first node and the private key corresponding to the second node, generate a re-encryption key corresponding to the first calculation result; Using a symmetric key, encrypt the first calculation result to generate a first calculation result ciphertext; Using the public key corresponding to the second node, encrypt the symmetric key to obtain a key ciphertext; The first calculation result ciphertext, the re-encryption key and the key ciphertext are determined as the related encryption information of the first calculation result.
9. A computing power network privacy computing method, characterized in that, Applied to a blockchain, including: Perform proxy re-encryption operation on the first calculation result ciphertext using the re-encryption key corresponding to the first calculation result and the key ciphertext, to obtain a second calculation result ciphertext, wherein the first calculation result ciphertext is obtained by encrypting the first calculation result by the second node, the first calculation result is obtained by the second node according to first calculation data, the first calculation data is a set of calculation data corresponding to a target calculation task published by a first node, the second node obtains the first calculation data based on an oblivious transfer protocol, the re-encryption key is generated by the second node using a public key corresponding to the first node and a private key corresponding to the second node, and the key ciphertext is generated by the second node using a public key corresponding to the second node and a symmetric key, the first node is configured to publish relevant information of the target calculation task to the blockchain, and the second node is a node determined by the first node to be able to execute the target calculation task. Store the second calculation result ciphertext on the blockchain.
10. A computing power network privacy computing device, characterized in that, Applied to a first node, comprising: A first processing module configured to determine at least one second node capable of executing a target calculation task; A task publishing module configured to publish relevant information of the target calculation task to a blockchain, wherein the relevant information includes a node identifier corresponding to the second node; A data distribution module configured to transmit at least one set of calculation data corresponding to the target calculation task to at least one second node based on an oblivious transfer protocol; A result obtaining module configured to obtain a target calculation result through the blockchain, wherein the target calculation result is obtained by the second node according to at least one set of calculation data.
11. A computing power network privacy computing device, characterized in that, Applied to a second node, comprising: A data obtaining module configured to obtain first calculation data based on an oblivious transfer protocol, wherein the first calculation data is a set of calculation data corresponding to a target calculation task published by a first node, the first node is configured to publish relevant information of the target calculation task to a blockchain, and the second node is a node determined by the first node to be able to execute the target calculation task; A data calculation module configured to obtain a first calculation result according to the first calculation data; A first encryption module configured to obtain relevant encryption information of the first calculation result based on a proxy re-encryption mechanism; An information chaining module configured to perform a chaining operation on the relevant encryption information.
12. A computing power network privacy computing device, characterized in that, Applied to a blockchain, comprising: A second encryption module is configured to perform proxy re-encryption operation on the first calculation result ciphertext using a re-encryption key corresponding to the first calculation result and a key ciphertext, to obtain a second calculation result ciphertext, wherein the first calculation result ciphertext is obtained by encrypting the first calculation result by the second node, the first calculation result is obtained by the second node based on first calculation data, the first calculation data is a set of calculation data corresponding to a target calculation task published by a first node, the second node obtains the first calculation data based on an oblivious transfer protocol, the re-encryption key is generated by the second node using a public key corresponding to the first node and a private key corresponding to the second node, and the key ciphertext is generated by the second node using a public key corresponding to the second node and a symmetric key, the first node is configured to publish information related to the target calculation task to the blockchain, and the second node is a node determined by the first node to be capable of executing the target calculation task. A result storage module is configured to store the second calculation result ciphertext on the blockchain.
13. A network device, the network device being a first node, characterized in that, Comprising: a transceiver and a processor; wherein the processor is configured to: determine at least one second node capable of executing a target calculation task; publish information related to the target calculation task to a blockchain, the information including a node identifier corresponding to the second node; transmit at least one set of calculation data corresponding to the target calculation task to at least one second node based on an oblivious transfer protocol; obtain a target calculation result through the blockchain, the target calculation result being obtained by the second node based on at least one set of calculation data.
14. A network device, the network device being a second node, characterized in that Comprising: a transceiver and a processor; wherein the processor is configured to: obtain first calculation data based on an oblivious transfer protocol, the first calculation data being a set of calculation data corresponding to a target calculation task published by a first node, the first node being configured to publish information related to the target calculation task to a blockchain, and the second node being a node determined by the first node to be capable of executing the target calculation task; obtain a first calculation result based on the first calculation data; obtain related encryption information of the first calculation result based on a proxy re-encryption mechanism; perform on-chain operation on the related encryption information. 15.A network device, the network device being a blockchain, characterized in that, Comprising: a transceiver and a processor; wherein the processor is configured to: Perform a proxy re-encryption operation on the first calculation result ciphertext using a re-encryption key corresponding to the first calculation result and a key ciphertext, to obtain a second calculation result ciphertext, wherein the first calculation result ciphertext is obtained by the second node encrypting the first calculation result, the first calculation result is obtained by the second node calculating according to first calculation data, the first calculation data is a set of calculation data corresponding to a target calculation task published by a first node, the second node obtains the first calculation data based on an oblivious transfer protocol, the re-encryption key is generated by the second node using a public key corresponding to the first node and a private key corresponding to the second node, and the key ciphertext is generated by the second node using a public key corresponding to the second node and a symmetric key, the first node is configured to publish relevant information of the target calculation task to the blockchain, and the second node is a node determined by the first node to be capable of executing the target calculation task. Store the second calculation result ciphertext on the blockchain.
16. A network device comprising: A transceiver, a processor, a memory, and a program or instructions stored on the memory and executable on the processor; characterized by: when the processor executes the program or instructions, the processor implements the computing power network privacy calculation method of any one of claims 1-5, or the computing power network privacy calculation method of any one of claims 6-8, or the computing power network privacy calculation method of claim 9.
17. A readable storage medium, on which a program or instructions are stored, characterized in that, When the processor executes the program or instructions, the processor implements the steps in the computing power network privacy calculation method of any one of claims 1-5, or the steps in the computing power network privacy calculation method of any one of claims 6-8, or the steps in the computing power network privacy calculation method of claim 9.
Citation Information
Patent Citations
Secure multi-party computing method and device supporting block chain and storage medium
CN112862616A
Data safety collaborative calculation method and system
CN113438237A