A data detection method, apparatus, system, storage medium, and computer program product.
By coordinating multiple computing nodes through the computing power resource scheduling and management node to perform data detection and generate pollution detection tokens, the reliability problem of privacy data pollution detection in computing power networks is solved, and effective detection of privacy data is achieved.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- CHINA MOBILE COMM LTD RES INST
- Filing Date
- 2024-04-03
- Publication Date
- 2026-05-05
AI Technical Summary
In computing networks, how to effectively detect contaminated data while ensuring data privacy has become an urgent problem to be solved.
The computing power resource scheduling and management node identifies multiple computing power nodes associated with data identification information. Nodes with different security performances work together to generate and transmit contamination detection tokens to perform contamination detection on encrypted data.
It achieves comprehensive contamination detection of privacy data, is applicable to various forms of data detection, and has universal applicability.
Smart Images

Figure CN118827129B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of distributed storage, and more particularly to a data detection method, apparatus, system, storage medium, and computer program product. Background Technology
[0002] To more efficiently utilize the massive distributed computing resources at the network edge and promote the deep integration and collaborative processing of distributed edge computing and the network, a computing power network implementation scheme has been proposed. This scheme optimizes and efficiently utilizes network and computing resources by interconnecting and coordinating the scheduling of distributed computing nodes and improving the network architecture and protocols. Currently, with the rapid development and application of computing power networks, effectively detecting corrupted data within these networks while ensuring data privacy and security has become a pressing technical challenge.
[0003] Application content
[0004] To address the aforementioned technical problems, this application aims to provide a data detection method, apparatus, system, storage medium, and computer program product. This solves the current problem of lacking a reliable and effective method for detecting contaminated data in private computing networks. The application proposes a data detection method that achieves comprehensive and effective detection of contaminated data in private data, and is capable of detecting various forms of data, thus possessing universal applicability.
[0005] The technical solution of this application is implemented as follows:
[0006] This application provides a data detection method, which is applied to a computing resource scheduling and management node, and the method includes:
[0007] If a first contamination detection request is received from a contamination detection node, a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information are determined based on the first contamination detection request; wherein, the first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information;
[0008] Send the first pollution detection request, a first node identification information for identifying the first computing power node, and a second node identification information for identifying the second computing power node to the third computing power node; wherein, the third computing power node is used to perform the pollution detection operation corresponding to the first pollution detection request, the security performance of the first computing power node is lower than or equal to the security performance of the third computing power node, and the security performance of the third computing power node is lower than or equal to the security performance of the second computing power node.
[0009] In the above scheme, if a first pollution detection request is received from a pollution detection node, determining a first computing power node, a second computing power node, and a third computing power node associated with the first data identification information based on the first pollution detection request includes:
[0010] If the first pollution detection request is received, determine the first computing power node that stores the first encrypted data corresponding to the first data identification information and the second computing power node that obtains the first encrypted data through encryption processing;
[0011] Based on the first pollution detection request, resource scheduling and management are performed to allocate the corresponding third computing node to the first data identification information.
[0012] In the above scheme, if a first pollution detection request is received from a pollution detection node, determining a first computing power node, a second computing power node, and a third computing power node associated with the first data identification information based on the first pollution detection request includes:
[0013] If the first contamination detection request is received, determine the first computing node that stores the first encrypted data corresponding to the first data identification information;
[0014] Based on the first pollution detection request, resource scheduling and management are performed to allocate the corresponding second computing power node and the third computing power node to the first data identification information.
[0015] The method in the above scheme further includes:
[0016] If the second computing power node does not include authentication information for authenticating the first encrypted data, the authentication information is sent to the second computing power node so that the second computing power node can perform a response operation based on the authentication information in response to the pollution query request.
[0017] In the above scheme, the first computing node, the second computing node, and the third computing node are three different nodes, or the first computing node, the second computing node, and the third computing node are two different nodes, and any two computing nodes are one node, or the first computing node, the second computing node, and the third computing node are one node.
[0018] This application provides a data detection method, which is applied to a third computing node, and the method includes:
[0019] The system receives a first contamination detection request, a first node identification information for identifying a first computing power node, and a second node identification information for identifying a second computing power node, all sent by a computing power resource scheduling and management node. The first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information.
[0020] Based on the first data identification information, a second pollution detection request is generated; wherein, the second pollution detection request is used to request the pollution detection token corresponding to the first data identification information;
[0021] Send the second pollution detection request to the second computing node corresponding to the second node identification information;
[0022] Receive a pollution detection token sent by the second computing power node; wherein the pollution detection token is generated by the second computing power node based on the second pollution detection request;
[0023] Send a contamination query request, including the contamination detection token, to the first computing power node; wherein, the contamination query request is used to obtain contamination detection data related to the first encrypted data stored in the first computing power node;
[0024] Receive the pollution detection data sent by the first computing power node;
[0025] Pollution detection is performed based on the pollution detection data to obtain pollution detection results;
[0026] Send the pollution detection results to the pollution detection node.
[0027] In the above scheme, generating a second pollution detection request based on the first data identification information includes:
[0028] Get the timestamp;
[0029] A signature is generated by using a preset signature method to identify the first data identifier, the timestamp, and the third node identifier.
[0030] Generate a second contamination detection request that includes the signature information.
[0031] In the above scheme, the step of performing pollution detection based on the pollution detection data to obtain pollution detection results includes:
[0032] The pollution detection data is decrypted using authentication information to obtain the data to be analyzed, the data index, and the pollution evaluation threshold.
[0033] Based on the data to be analyzed and the data index, calculate the pollution assessment value corresponding to the data to be analyzed;
[0034] The pollution detection results are obtained based on the pollution assessment values and the pollution assessment thresholds.
[0035] In the above scheme, the data index includes the expected value and variance set corresponding to the data to be analyzed.
[0036] This application provides a data detection method, which is applied to a second computing node, and the method includes:
[0037] Receive a second contamination detection request sent by a third computing power node; wherein the second contamination detection request is used to request a contamination detection token corresponding to the first data identification information;
[0038] The second pollution detection request is authenticated to obtain the authentication result;
[0039] If the authentication result indicates that the authentication is successful, the pollution detection token is generated based on the second pollution detection request;
[0040] Send the pollution detection token to the third computing node.
[0041] In the above scheme, the authentication process for the second pollution detection request to obtain the authentication result includes:
[0042] The signature information included in the second pollution detection request is authenticated to obtain the authentication result.
[0043] In the above scheme, if the authentication result indicates successful authentication, generating the pollution detection token based on the second pollution detection request includes:
[0044] If the authentication result indicates that the authentication is successful, the pollution detection token is generated based on the first data identification information included in the signature information.
[0045] The method in the above scheme further includes:
[0046] Receive authentication information sent by the computing resource scheduling and management node that is associated with the first data identification information.
[0047] The method in the above scheme further includes:
[0048] If the computing power resource scheduling and management node receives data to be stored, it encrypts the data using authentication information to obtain first encrypted data; wherein the data to be stored is sent from the data providing node to the computing power resource scheduling and management node;
[0049] Send the first encrypted data to the first computing power node; wherein the first computing power node is indicated by the computing power resource scheduling and management node.
[0050] The method in the above scheme further includes:
[0051] The data to be stored is classified to obtain n types of data to be analyzed and data identification information for each type of data to be analyzed;
[0052] Calculate the expected value and variance of the data to be analyzed for each class;
[0053] Based on the data identification information, expectation and variance of each type of data to be analyzed, a data index corresponding to each type of data to be analyzed is established;
[0054] The authentication information is used to encrypt the data index to obtain an encrypted index.
[0055] The method in the above scheme further includes:
[0056] Based on each type of data to be analyzed, a pollution assessment threshold corresponding to each type of data to be analyzed is determined.
[0057] Based on the data identification information and pollution evaluation threshold of the n types of data to be analyzed, a pollution verification dictionary is obtained.
[0058] This application provides a first data detection device, which is applied to a computing resource scheduling and management node. The device includes: a first determining unit and a first sending unit; wherein:
[0059] The first determining unit is configured to, upon receiving a first contamination detection request sent by a contamination detection node, determine a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information based on the first contamination detection request; wherein, the first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information;
[0060] The first sending unit is configured to send the first pollution detection request, a first node identification information for identifying the first computing power node, and a second node identification information for identifying the second computing power node to the third computing power node; wherein, the third computing power node is configured to perform the pollution detection operation corresponding to the first pollution detection request, the security performance of the first computing power node is lower than or equal to the security performance of the third computing power node, and the security performance of the third computing power node is lower than or equal to the security performance of the second computing power node.
[0061] This application provides a second data detection device, which is applied to a third computing node. The device includes: a first receiving unit, a first generating unit, a second sending unit, and a detection unit; wherein:
[0062] The first receiving unit is configured to receive a first contamination detection request, a first node identification information for identifying the first computing power node, and a second node identification information for identifying the second computing power node sent by the computing power resource scheduling and management node; wherein, the first contamination detection request is configured to request contamination detection of the first encrypted data corresponding to the first data identification information;
[0063] The first generation unit is configured to generate a second pollution detection request based on the first data identification information; wherein the second pollution detection request is used to request a pollution detection token corresponding to the first data identification information;
[0064] The second sending unit is used to send the second pollution detection request to the second computing power node corresponding to the second node identification information;
[0065] The first receiving unit is further configured to receive a pollution detection token sent by the second computing power node; wherein the pollution detection token is generated by the second computing power node based on the second pollution detection request;
[0066] The second sending unit is further configured to send a pollution query request including the pollution detection token to the first computing power node; wherein the pollution query request is used to obtain pollution detection data related to the first encrypted data stored in the first computing power node;
[0067] The first receiving unit is further configured to receive the pollution detection data sent by the first computing node;
[0068] The detection unit is used to perform pollution detection based on the pollution detection data and obtain pollution detection results.
[0069] The second sending unit is used to send the pollution detection result to the pollution detection node.
[0070] This application provides a third data detection device, which is applied to a second computing node. The device includes: a second receiving unit, an authentication unit, a second generating unit, and a third sending unit; wherein:
[0071] The second receiving unit is configured to receive a second contamination detection request sent by the third computing node; wherein the second contamination detection request is configured to request a contamination detection token corresponding to the first data identification information;
[0072] The authentication unit is used to authenticate the second pollution detection request and obtain an authentication result.
[0073] The second generation unit is used to generate the pollution detection token based on the second pollution detection request if the authentication result indicates that the authentication is successful.
[0074] The third sending unit is used to send the pollution detection token to the third computing node.
[0075] This application provides a data detection system, the system comprising: a computing power resource scheduling and management node and at least one computing power node; wherein:
[0076] The computing power resource scheduling and management node is used to determine the first computing power node, the second computing power node, and the third computing power node from at least one of the computing power nodes, and to implement the steps of the data detection method as described above.
[0077] The second computing node is used to implement the steps of the data detection method as described in any of the above items;
[0078] The third computing node is used to implement the steps of the data detection method as described in any of the above.
[0079] This application provides a storage medium storing a data detection program, which, when executed, implements the steps of the data detection method as described in any of the preceding claims.
[0080] This application provides a computer program product, including a computer program, characterized in that, when executed by a processor, the computer program implements the steps of the data detection method according to any one of the above claims.
[0081] This application provides a data detection method, apparatus, system, storage medium, and computer program product. Upon receiving a first pollution detection request from a pollution detection node, the computing power resource scheduling and management node, based on the first pollution detection request, determines a first computing power node, a second computing power node, and a third computing power node associated with first data identification information. It then sends the first pollution detection request, first node identification information for identifying the first computing power node, and second node identification information for identifying the second computing power node to the third computing power node. After receiving the first pollution detection request, the first node identification information for identifying the first computing power node, and the second node identification information for identifying the second computing power node from the computing power resource scheduling and management node, the third computing power node, based on the first data identification information... The data identification information is used to generate a second pollution detection request and send it to the second computing power node corresponding to the second node identification information. After receiving the second pollution detection request sent by the third computing power node, the second computing power node performs authentication processing on the second pollution detection request and obtains the authentication result. If the authentication result indicates that the authentication is successful, a pollution detection token is generated based on the second pollution detection request and sent to the third computing power node. After receiving the pollution detection token sent by the second computing power node, the third computing power node sends a pollution query request including the pollution detection token to the first computing power node and receives the pollution detection data sent by the first computing power node. Based on the pollution detection data, pollution detection is performed, and after obtaining the pollution detection result, the pollution detection result is sent to the pollution detection node. In this way, the computing power resource scheduling and management node determines the first computing power node storing the first encrypted data, the third computing power node performing the pollution detection operation, and the second computing power node generating the pollution detection token to respond to the first pollution detection request. Pollution detection of encrypted data is realized on the computing power node side, which solves the problem that there is no reliable and effective method for detecting pollution data of privacy in the current computing power network. A data detection method is proposed, which realizes effective and comprehensive detection of pollution data of privacy data. It can detect data of various forms and has universal applicability. Attached Figure Description
[0082] Figure 1 Flowchart of the data detection method provided in the embodiments of this application Figure 1 ;
[0083] Figure 2 Flowchart of the data detection method provided in the embodiments of this application Figure 2 ;
[0084] Figure 3 Flowchart of the data detection method provided in the embodiments of this application Figure 3 ;
[0085] Figure 4Flowchart of the data detection method provided in the embodiments of this application Figure 4 ;
[0086] Figure 5 Flowchart of the data detection method provided in the embodiments of this application Figure 5 ;
[0087] Figure 6 A schematic diagram of a computing power network system architecture provided in this application embodiment;
[0088] Figure 7 A schematic diagram of a system architecture for implementing a data detection method provided in an embodiment of this application;
[0089] Figure 8 This is a schematic diagram of the structure of a first data detection device provided in an embodiment of this application;
[0090] Figure 9 This is a schematic diagram of the structure of a second data detection device provided in an embodiment of this application;
[0091] Figure 10 This is a schematic diagram of the structure of a third data detection device provided in an embodiment of this application;
[0092] Figure 11 This is a schematic diagram of the structure of a data detection system provided in an embodiment of this application. Detailed Implementation
[0093] The technical solutions in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings.
[0094] The embodiments of this application provide a data detection method, referring to... Figure 1 As shown, the method is applied to a computing resource scheduling and management node, and the method includes the following steps:
[0095] Step 101: If a first pollution detection request is received from a pollution detection node, based on the first pollution detection request, determine the first computing power node, the second computing power node, and the third computing power node that are associated with the first data identification information.
[0096] The first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information.
[0097] In this embodiment, the computing power network can provide a data contamination detection service. To ensure the security of data stored in the computing power network, the data is encrypted using a pre-configured encryption method before storage. A computing power resource scheduling and management node manages and controls the computing power nodes in the computing power network, configuring resource allocation for these nodes. Thus, when the computing power resource scheduling and management node receives a first contamination detection request from an external contamination detection node requesting to use the data contamination detection service, the node performs resource scheduling configuration based on the first contamination detection request, determining the computing power nodes capable of responding to the first contamination detection request from the infrastructure layer of the computing power network, resulting in a first computing power node, a second computing power node, and a third computing power node.
[0098] Step 102: Send the first pollution detection request, the first node identification information for identifying the first computing power node, and the second node identification information for identifying the second computing power node to the third computing power node.
[0099] The third computing node is used to execute the pollution detection operation corresponding to the first pollution detection request. The security performance of the first computing node is lower than or equal to that of the third computing node, and the security performance of the third computing node is lower than or equal to that of the second computing node.
[0100] In this embodiment, when a computing node in the infrastructure layer of the computing power network accesses the network, the network evaluates and analyzes its performance parameters to determine its corresponding security level. The first, second, and third computing nodes provide different services during the pollution detection process. This reduces the computational burden on the computing nodes, improves their analysis efficiency, and fully utilizes their computing resources. The first node identification information uniquely identifies the first computing node; for example, it could be its node code, name, or other identity information. Similarly, the second node identification information uniquely identifies the second computing node.
[0101] After the computing power resource scheduling and management node determines the first computing power node, the second computing power node, and the third computing power node, it sends the first pollution detection request, the first node identification information, and the second identification information to the third computing power node so that the third computing power node can interact with the first and second computing power nodes to complete the pollution detection operation in response to the first pollution detection request.
[0102] The data detection method provided in this application embodiment, upon receiving a first pollution detection request sent by a pollution detection node, determines, based on the first pollution detection request, a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information through a computing power resource scheduling and management node. The node then sends the first pollution detection request, first node identification information for identifying the first computing power node, and second node identification information for representing the second computing power node to the third computing power node. This allows the third computing power node to generate a second pollution detection request based on the first data identification information and send the second pollution detection request to the node corresponding to the second node identification information. Two computing nodes operate in a hierarchical manner. The second computing node receives a second contamination detection request from the third computing node. It then authenticates the request and obtains an authentication result. If the authentication is successful, it generates a contamination detection token based on the request and sends it to the third computing node. The third computing node receives the token and sends a contamination query request, including the token, to the first computing node. It also receives contamination detection data from the first node, performs contamination detection based on this data, and sends the result back to the first computing node. This approach, using a computing resource scheduling and management node, identifies the first computing node storing the encrypted data, the third node performing the contamination detection operation, and the second node generating the contamination detection token to respond to the first contamination detection request. This enables contamination detection of encrypted data at the computing node level, addressing the current lack of reliable and effective methods for detecting contamination in private data within computing networks. The proposed method provides a comprehensive and effective contamination detection solution for private data, capable of detecting various data formats and possessing broad applicability.
[0103] Based on the foregoing embodiments, embodiments of this application provide a data detection method, referring to... Figure 2 As shown, the method is applied to the third computing node, and the method includes the following steps:
[0104] Step 201: Receive the first pollution detection request, the first node identification information for identifying the first computing power node, and the second node identification information for identifying the second computing power node sent by the computing power resource scheduling and management node.
[0105] The first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information.
[0106] In this embodiment, the first data identification information is data identity identification information used to uniquely identify the first encrypted data. After the computing power resource scheduling and management node sends a first contamination detection request, a first node identification information for identifying the first computing power node, and a second node identification information for identifying the second computing power node to the third computing power node, the third computing power node receives the first contamination detection request, the first node identification information for identifying the first computing power node, and the second node identification information for identifying the second computing power node sent by the computing power resource scheduling and management node.
[0107] Step 202: Generate a second pollution detection request based on the first data identification information.
[0108] The second pollution detection request is used to request the pollution detection token corresponding to the first data identification information.
[0109] In this embodiment of the application, the third computing node parses the first pollution detection request to obtain the first data identification information, and generates a second pollution detection request based on the first data identification information to request the pollution detection token corresponding to the first data identification information.
[0110] Step 203: Send the second pollution detection request to the second computing node corresponding to the second node identification information.
[0111] In this embodiment, the second computing node is a node capable of generating a contamination detection token corresponding to the first data identification information. Thus, the third computing node sends the second contamination detection request to the second computing node corresponding to the second node identification information. After receiving the second contamination detection request, the second computing node responds to the second contamination detection request and generates a contamination detection token corresponding to the first data identification information, so as to detect the encrypted data based on the contamination detection token.
[0112] Step 204: Receive the pollution detection token sent by the second computing power node.
[0113] The pollution detection token is generated by the second computing node based on the second pollution detection request.
[0114] In this embodiment of the application, the third computing node receives the pollution detection token generated by the second computing node.
[0115] Step 205: Send a pollution query request, including a pollution detection token, to the first computing node.
[0116] The contamination query request is used to obtain contamination detection data related to the first encrypted data stored in the first computing node.
[0117] In this embodiment, the third computing node generates a pollution query request based on the pollution detection token and sends the pollution query request to the first computing node, which stores the pollution detection data corresponding to the first data identification information.
[0118] Step 206: Receive the pollution detection data sent by the first computing node.
[0119] In this embodiment of the application, the first computing node responds to the contamination detection request and obtains the contamination detection data corresponding to the first data identification information, which is related to the first encrypted data.
[0120] Step 207: Conduct pollution detection based on the pollution detection data to obtain pollution detection results.
[0121] In this embodiment, the third computing node performs contamination detection on the received contamination detection data using a corresponding contamination detection method, obtaining a contamination detection result for the first encrypted data. The contamination detection result includes two cases: the first encrypted data is contaminated, or the first encrypted data is not contaminated.
[0122] Step 208: Send the pollution detection results to the pollution detection node.
[0123] In this embodiment of the application, the third computing node sends the determined pollution detection result to the pollution detection node, thereby responding to the first pollution detection request sent by the pollution detection node.
[0124] The data detection method provided in this application embodiment involves a third computing power node receiving a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information, as determined by the computing power resource scheduling and management node based on the first pollution detection request. The third computing power node then generates a second pollution detection request based on the first data identification information and sends it to the second computing power node corresponding to the second node identification information. Upon receiving the second pollution detection request from the third computing power node, the second computing power node performs authentication processing on the second pollution detection request to obtain an authentication result. If the authentication result indicates successful authentication, a pollution detection token is generated based on the second pollution detection request and sent to the third computing power node. After receiving the pollution detection token from the second computing power node, the third computing power node sends a pollution query request including the pollution detection token to the first computing power node and receives pollution detection data from the first computing power node. Based on the pollution detection data, it performs pollution detection, obtains a pollution detection result, and then sends the pollution detection result to the pollution detection node. In this way, the computing power resource scheduling and management node determines the first computing power node storing the first encrypted data, the third computing power node performing the pollution detection operation, and the second computing power node generating the pollution detection token to respond to the first pollution detection request. Pollution detection of encrypted data is realized on the computing power node side, which solves the problem that there is no reliable and effective method for detecting pollution data of privacy in the current computing power network. A data detection method is proposed, which realizes effective and comprehensive detection of pollution data of privacy data. It can detect data of various forms and has universal applicability.
[0125] This application provides a data detection method, referring to... Figure 3 As shown, the method is applied to the second computing node, and the method includes the following steps:
[0126] Step 301: Receive the second contamination detection request sent by the third computing node.
[0127] The second pollution detection request is used to request the pollution detection token corresponding to the first data identification information.
[0128] Step 302: Authenticate the second pollution detection request and obtain the authentication result.
[0129] In this embodiment, the second computing node uses an authentication processing method to authenticate the received second pollution detection request and obtain an authentication result. The authentication result can indicate whether the authentication passed or failed.
[0130] Step 303: If the authentication result indicates that the authentication is successful, generate a pollution detection token based on the second pollution detection request.
[0131] In this embodiment, no subsequent operations are performed when the authentication result indicates that authentication failed. When the authentication result indicates that authentication passed, the second computing node generates a pollution detection token corresponding to the first data identification information based on the second pollution detection request.
[0132] Step 304: Send the pollution detection token to the third computing node.
[0133] In this embodiment of the application, the second computing node sends the contamination detection token to the third computing node.
[0134] The data detection method provided in this application embodiment involves a second computing power node receiving a second contamination detection request from a third computing power node. The second computing power node then authenticates the request and obtains an authentication result. If the authentication result indicates successful authentication, a contamination detection token is generated based on the second contamination detection request and sent to the third computing power node. The third computing power node, upon receiving the contamination detection token from the second computing power node, sends a contamination query request including the token to the first computing power node and receives contamination detection data from the first computing power node. Based on this data, contamination detection is performed, and a result is obtained and sent to the contamination detection node. In this way, the computing power resource scheduling and management node determines the first computing power node storing the first encrypted data, the third computing power node performing the contamination detection operation, and the second computing power node generating the contamination detection token to respond to the first contamination detection request. This achieves contamination detection of encrypted data at the computing power node level, solving the problem of the lack of a reliable and effective method for detecting contamination of private data in current computing power networks. This data detection method effectively and comprehensively detects contamination of private data, can detect various forms of data, and has universal applicability.
[0135] Based on the foregoing embodiments, this application provides a data detection method, referring to... Figure 4 As shown, the method includes the following steps:
[0136] Step 401: If a first pollution detection request is received from a pollution detection node, the computing power resource scheduling and management node determines the first computing power node, the second computing power node, and the third computing power node that are associated with the first data identification information based on the first pollution detection request.
[0137] The first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information.
[0138] In this embodiment of the application, when the computing power resource scheduling and management node receives a first pollution detection request sent by an external device, namely a pollution detection node, the computing power resource scheduling and management node responds to the first pollution detection request and determines the first computing power node, the second computing power node, and the third computing power node based on the first data identification information in the first pollution detection request.
[0139] Step 402: The computing power resource scheduling and management node sends a first pollution detection request, a first node identification information for identifying the first computing power node, and a second node identification information for identifying the second computing power node to the third computing power node.
[0140] The third computing node is used to execute the pollution detection operation corresponding to the first pollution detection request. The security performance of the first computing node is lower than or equal to that of the third computing node, and the security performance of the third computing node is lower than or equal to that of the second computing node.
[0141] In this embodiment, the security performance of the first computing node is the lowest, followed by the third computing node, with the second computing node having the highest security performance. The first computing node stores the encrypted first encrypted data, the second computing node performs contamination detection operations, and the third computing node encrypts the data to obtain the first encrypted data and generate corresponding contamination detection data. It also generates a contamination detection token corresponding to the first encrypted data for subsequent contamination detection operations. In addition to sending the first contamination detection request to the third computing node, the computing resource scheduling and management node also sends the first node identification information of the first computing node and the second node identification information of the second computing node to the third computing node, enabling information exchange between the third computing node, the first computing node, and the second computing node to achieve the contamination detection operation. It should be noted that there is already a communication connection between the first computing node, the second computing node, and the third computing node. Alternatively, the third computing node may establish a communication connection with the first computing node based on the first node identification information and with the second computing node based on the second node identification information after receiving the first node identification information and the second node identification information. The specific situation can be determined according to the actual application scenario, and no specific limitation is made here.
[0142] Step 403: The third computing power node receives the first pollution detection request, the first node identification information used to identify the first computing power node, and the second node identification information used to identify the second computing power node sent by the computing power resource scheduling and management node.
[0143] The first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information.
[0144] Step 404: The third computing node generates a second pollution detection request based on the first data identification information.
[0145] The second pollution detection request is used to request the pollution detection token corresponding to the first data identification information.
[0146] In this embodiment, the third computing node signs the first data identification information to obtain the second pollution detection request.
[0147] Step 405: The third computing node sends a second pollution detection request to the second computing node corresponding to the second node identification information.
[0148] Step 406: The second computing node receives the second contamination detection request sent by the third computing node.
[0149] The second pollution detection request is used to request the pollution detection token corresponding to the first data identification information.
[0150] Step 407: The second computing node performs authentication processing on the second pollution detection request and obtains the authentication result.
[0151] In this embodiment, the second computing node performs authentication processing on the second pollution detection request according to a preset authentication algorithm to obtain an authentication result. The second computing node uses stored authentication information to perform authentication processing on the second pollution detection request to obtain an authentication result.
[0152] Step 408: If the authentication result indicates that the authentication is successful, the second computing node generates a pollution detection token based on the second pollution detection request.
[0153] In this embodiment of the application, after the second pollution detection request is authenticated by the second computing power node, the second computing power node uses the first data identification information in the second pollution detection request to generate a pollution detection token.
[0154] Step 409: The second computing node sends a contamination detection token to the third computing node.
[0155] Step 410: The third computing node receives the pollution detection token sent by the second computing node.
[0156] The pollution detection token is generated by the second computing node based on the second pollution detection request.
[0157] Step 411: The third computing node sends a pollution query request, including a pollution detection token, to the first computing node.
[0158] The contamination query request is used to obtain contamination detection data related to the first encrypted data stored in the first computing node.
[0159] In this embodiment, the third computing node sends a pollution query request, including a pollution detection token, to the first computing node. The first computing node queries its stored encrypted data based on the pollution detection token to obtain pollution detection data related to the first encrypted data. The pollution detection data is an index that allows for quick retrieval of the first encrypted data. For example, the pollution detection data may include at least an encrypted index obtained by indexing the variance and expectation obtained from the calculation and analysis of the unencrypted data corresponding to the first encrypted data, followed by further encryption of the index; the unencrypted data corresponding to the first encrypted data; and the corresponding pollution evaluation threshold, etc.
[0160] Step 412: The third computing node receives the pollution detection data sent by the first computing node.
[0161] Step 413: The third computing node performs pollution detection based on the pollution detection data and obtains the pollution detection results.
[0162] In this embodiment, after receiving the pollution detection data sent by the first computing node, the third computing node decrypts the pollution detection data to obtain the decrypted index data corresponding to the first encrypted data. The decrypted index data and the data to be analyzed obtained after decrypting the first encrypted data are calculated and compared with the corresponding pollution evaluation threshold to determine the pollution detection result.
[0163] Step 414: The third computing node sends the pollution detection results to the pollution detection node.
[0164] Based on the foregoing embodiments, in other embodiments of this application, step 401 can be implemented by steps 401a to 401b:
[0165] Step 401a: If a first pollution detection request is received, the computing power resource scheduling and management node determines the first computing power node that stores the first encrypted data corresponding to the first data identification information and the second computing power node that obtains the first encrypted data through encryption processing.
[0166] In this embodiment, the first computing node is a computing node that stores the first encrypted data corresponding to the first data identification information, and the second computing node can be a computing node that generates the first encrypted data. The computing resource scheduling and management node can directly find the first computing node and the second computing node from the multiple computing nodes it manages based on the first data identification information.
[0167] Step 401b: The computing power resource scheduling and management node performs resource scheduling and management based on the first pollution detection request, and allocates the corresponding third computing power node to the first data identification information.
[0168] In this embodiment of the application, for the node performing pollution detection, the computing power resource scheduling and management node performs resource scheduling and management from the computing power nodes it manages according to the selection rules, and selects a third computing power node that matches the data processing requirements corresponding to the first data identification information.
[0169] Based on the foregoing embodiments, in other embodiments of this application, step 401 can also be implemented by steps 401c to 401d:
[0170] Step 401c: If a first contamination detection request is received, the computing power resource scheduling and management node determines the first computing power node that stores the first encrypted data corresponding to the first data identification information.
[0171] In this embodiment of the application, after receiving the first contamination detection request, the computing power resource scheduling and management node can directly determine the first computing power node storing the first encrypted data.
[0172] Step 401d: The computing power resource scheduling and management node performs resource scheduling and management based on the first pollution detection request, and allocates the corresponding second computing power node and third computing power node to the first data identification information.
[0173] In this embodiment of the application, if the computing power node that previously generated the first encrypted data no longer exists among the computing power nodes managed by the computing power resource scheduling and management node, or if the security level of the computing power node that generated the first encrypted data has been reduced, the computing power resource scheduling and management node can perform resource scheduling and management based on the first data identification information in the first contamination detection request, and determine the corresponding second and third computing power nodes for the first data identification information.
[0174] Based on the foregoing embodiments, in other embodiments of this application, after the computing power resource scheduling and management node executes step 401d, it is further configured to execute step 415:
[0175] Step 415: If the second computing power node does not include authentication information for authenticating the first encrypted data, the computing power resource scheduling and management node sends authentication information to the second computing power node so that the second computing power node can perform a response operation to the pollution query request based on the authentication information.
[0176] In this embodiment, the computing power resource scheduling and management node detects whether the second computing power node stores authentication information corresponding to the first encrypted data. If the second computing power node does not have authentication information corresponding to the first encrypted data, the computing power resource scheduling and management node sends the authentication information corresponding to the first encrypted data to the second computing power node. The authentication information may be, for example, the encryption and decryption information such as the key used to generate the first encrypted data and the encryption processing algorithm.
[0177] Correspondingly, the second computing node is also used to execute step 416:
[0178] Step 416: The second computing node receives authentication information sent by the computing resource scheduling and management node that is associated with the first data identification information.
[0179] Based on the foregoing embodiments, in other embodiments of this application, the first computing node, the second computing node, and the third computing node belong to three different nodes, or the first computing node, the second computing node, and the third computing node belong to two different nodes, wherein any two computing nodes constitute one node, or the first computing node, the second computing node, and the third computing node belong to one node.
[0180] In the embodiments of this application, in actual implementation, the first computing node, the second computing node, and the third computing node can be three independent and different nodes, or two of the computing nodes can be an independent node and the remaining computing node can be an independent node, or the three computing nodes can be a single node. When two or three computing nodes are a single node, the corresponding implementation step is the content information interaction process.
[0181] Based on the foregoing embodiments, in other embodiments of this application, step 404 can be implemented by steps 404a to 404c:
[0182] Step 404a: The third computing node obtains the timestamp.
[0183] In this embodiment of the application, the third computing node obtains the current processing time and records it as a timestamp.
[0184] Step 404b: The third computing node uses a preset signature method to generate signature information by combining the first data identification information, the timestamp, and the third node identification information.
[0185] In this embodiment of the application, the preset signature method is a pre-configured signature processing method. The third computing power node uses the preset signature method to sign the first data identification information, the timestamp, and the third node identification information to generate signature information.
[0186] Step 404c: The third computing node generates a second contamination detection request that includes signature information.
[0187] Based on the foregoing embodiments, in other embodiments of this application, step 413 can be implemented by steps 413a to 413c:
[0188] Step 413a: The third computing node uses authentication information to decrypt the pollution detection data to obtain the data to be analyzed, the data index, and the pollution evaluation threshold.
[0189] The data index includes the expected value and variance set corresponding to the data to be analyzed.
[0190] In this embodiment, the third computing node uses the decryption key included in the authentication information to decrypt the received contamination detection data, obtaining the data to be analyzed, the data index, and the contamination evaluation threshold. The data index and the contamination evaluation threshold are obtained during the encryption of the first encrypted data.
[0191] Step 413b: The third computing node calculates the pollution assessment value corresponding to the data to be analyzed based on the data to be analyzed and the data index.
[0192] In this embodiment, the third computing node performs calculations and analysis on the data to be analyzed and the data index to determine the pollution evaluation value of the data to be analyzed.
[0193] Step 413c: The third computing node obtains the pollution detection results based on the pollution assessment values and pollution assessment thresholds.
[0194] In this embodiment, the third computing node compares the pollution assessment data with the pollution assessment threshold to obtain the pollution detection result. For example, if the pollution assessment data is less than or equal to the pollution assessment threshold, it is determined that the data to be analyzed is polluted, and the pollution detection result is that the data is polluted. If the pollution assessment data is greater than the pollution assessment threshold, it is determined that the data to be analyzed is not polluted, and the pollution detection result is that the data is normal.
[0195] Based on the foregoing embodiments, in other embodiments of this application, step 407 can be implemented by step 407a:
[0196] Step 407a: The second computing node performs signature authentication on the signature information included in the second pollution detection request and obtains the authentication result.
[0197] Based on the foregoing embodiments, in other embodiments of this application, step 408 can be implemented by step 408a:
[0198] Step 408a: If the authentication result indicates that the authentication is successful, the second computing node generates a pollution detection token based on the first data identification information included in the signature information.
[0199] Based on the foregoing embodiments, in other embodiments of this application, reference is made to... Figure 5 As shown, the second computing node is also used to execute steps 417-418:
[0200] Step 417: If the second computing power node receives the data to be stored sent by the computing power resource scheduling and management node, the second computing power node uses the authentication information to encrypt the data to be stored to obtain the first encrypted data.
[0201] The data to be stored is sent from the data provider node to the computing resource scheduling and management node.
[0202] In this embodiment, the data providing node is an external node that calls the data storage service of the computing power network. The first, second, and third computing power nodes are determined by the computing power resource scheduling and management node when it receives the storage task for the data to be stored, based on resource scheduling performed by the computing power resource scheduling and management node according to the storage task corresponding to the data to be stored. The authentication information is pre-configured on the second computing power node. Thus, after receiving the data to be stored sent by the computing power resource scheduling and management node, the second computing power node encrypts the data to be stored using encryption methods such as the encryption key included in the authentication information, obtaining the first encrypted data.
[0203] Step 418: The second computing node sends the first encrypted data to the first computing node.
[0204] The first computing power node is indicated by the computing power resource scheduling and management node.
[0205] In this embodiment, the second computing node sends the encrypted first data to the first computing node so that the first computing node can store and process the first encrypted data. Since the first encrypted data has already undergone encryption processing, its data security is relatively high; therefore, the node security requirements of the first computing node do not need to be particularly high.
[0206] It should be noted that steps 417 to 418 can be performed before step 401, and steps 417 to 418 can also be performed as a separate embodiment.
[0207] Based on the foregoing embodiments, in other embodiments of this application, reference is made to... Figure 5 As shown, the second computing node is also used to execute steps 419 to 422:
[0208] Step 419: The second computing node classifies the data to be stored to obtain n types of data to be analyzed and the data identification information of each type of data to be analyzed.
[0209] In this embodiment, after receiving the data to be stored, the second computing node further classifies the data. The classification method can be determined based on the storage configuration requirements sent by the data providing node, or it can be determined using the default classification configuration on the second computing node's side. The second computing node classifies the data to be stored, obtaining n categories of data to be analyzed, and determines the data identification information for each category. The data identification information is a data classification attribute, and for example, it can be a data tag for each category of data to be analyzed.
[0210] Step 420: The second computing node calculates the expected value and variance of each type of data to be analyzed.
[0211] In this embodiment of the application, the second computing node uses the expectation calculation method to calculate the expectation of each type of data to be analyzed, and uses the variance calculation method to calculate the variance of each type of data to be analyzed.
[0212] Step 421: The second computing node establishes a data index corresponding to each type of data to be analyzed based on the data identification information, expectation and variance of each type of data to be analyzed.
[0213] In this embodiment of the application, the second computing node performs index construction processing on the data identification information, expectation and variance of each type of data to be analyzed according to the index construction method, so as to obtain the data index corresponding to each type of data to be analyzed.
[0214] Step 422: The second computing node uses authentication information to encrypt the data index, resulting in an encrypted index.
[0215] In this embodiment of the application, the second computing node uses the encryption key included in the authentication information to encrypt the data index of each type of data to be analyzed, thereby obtaining an encrypted index.
[0216] Steps 419 to 422 can be executed by the second computing node after step 417.
[0217] Based on the foregoing embodiments, in other embodiments of this application, reference is made to... Figure 5 As shown, the second computing node is also used to execute steps 423-424:
[0218] Step 423: The second computing node determines the pollution assessment threshold corresponding to each type of data to be analyzed based on each type of data to be analyzed.
[0219] In this embodiment, the second computing node performs calculations for each type of data to be analyzed to determine the pollution assessment threshold corresponding to each type of data. For example, multiple F-value calculations can be performed for each type of data to be analyzed, and the pollution assessment threshold corresponding to each type of data can be determined based on the calculated F-values.
[0220] Step 424: The second computing node obtains a pollution verification dictionary based on the data identification information and pollution evaluation threshold of n types of data to be analyzed.
[0221] In this embodiment of the application, the second computing node records the correspondence between the data identification information of each type of data to be analyzed and the corresponding pollution evaluation threshold to obtain a pollution verification dictionary.
[0222] Steps 423 to 424 can be executed by the second computing node after step 419.
[0223] It should be noted that steps 417 to 424 can be performed as an independent embodiment, namely, the process of obtaining the first encrypted data, and the process of obtaining the data index and the pollution evaluation threshold.
[0224] Based on the foregoing embodiments, this application provides a computing network system architecture for a data contamination detection method that supports privacy protection in a computing network, referring to... Figure 6 As shown, it includes: a data ownership terminal, a data contamination detection terminal, and a computing power network. The system architecture of the computing power network can be divided into: an operation service layer, an orchestration management layer, and an infrastructure layer. The infrastructure layer, also known as the cloud edge network, is mainly composed of computing power nodes. The computing power nodes in the infrastructure layer can be divided into nodes with different security levels, such as medium-security trusted nodes, high-security trusted nodes, and low-security trusted nodes.
[0225] The operations service layer is used to provide data security storage services, including pollution detection services. It is responsible for providing data communication interfaces and corresponding services to the data owner and the data pollution detection end.
[0226] The orchestration management layer is used for resource scheduling management and corresponds to the aforementioned computing power resource scheduling management node.
[0227] In the infrastructure layer, computing nodes typically undergo security level authentication and assessment upon connecting to the computing network. High-security trusted nodes have the highest security and trustworthiness levels; they are unlikely to collude with other computing nodes and are therefore secure and trustworthy enough to encrypt plaintext into ciphertext. Medium-security trusted computing nodes have relatively high security and trustworthiness levels, but lower than high-security trusted nodes; therefore, real-time monitoring measures can be implemented for the processing operations of these nodes. Low-security trusted nodes have moderate security and trust levels; they are honest and curious, and log auditing measures can be implemented for the processing operations of these nodes.
[0228] Correspondingly, based on Figure 6 The system architecture of the computing network shown provides a methodological architecture for a data detection method that can be referenced. Figure 7As shown, the system includes: a data encryption module, a detection token generation module, a data contamination detection module, and a data storage module. These four modules are deployed on different computing nodes in the infrastructure layer of the computing network. The data encryption module and the detection token generation module are deployed on high-security trusted nodes, defined as TrustedNodes (TN). The data contamination detection module is deployed on medium-security trusted nodes, defined as DataDetectNodes (DTN). The data storage module is deployed on low-security trusted nodes, defined as DataStorageNodes (DSN). Specifically, the data encryption module is responsible for encrypting the received data and the generated contamination detection index before uploading it to the data storage module of the data storage node to protect data privacy and security. The detection token generation module is responsible for generating detection tokens based on contamination detection requests. The data contamination detection module is responsible for initiating data contamination detection requests, negotiating detection tokens with the detection token generation module, and then performing contamination detection on the stored encrypted data based on the detection tokens. The data storage module is responsible for storing the encrypted data, storing the encrypted detection index, and performing contamination detection.
[0229] based on Figure 7 The implementation process of the data storage service corresponding to the illustrated architecture can be described as follows: The data owner submits a storage service application for data storage and orders a data security storage service through the operations service layer. The orchestration management layer parses the storage service application submitted by the operations service layer, and orchestrates and manages the existing computing power and network resources. It also performs the scheduling and configuration of computing power resources, and determines high-security trusted nodes, medium-security trusted nodes, and low-security trusted nodes from the infrastructure layer. Specifically, a data encryption module is configured on the high-security trusted nodes, and a data storage module is configured on the low-security trusted nodes.
[0230] Correspondingly, the implementation process of the pollution detection service can be described as follows: The pollution detection end submits a data pollution detection request through the operation service layer. The orchestration management layer parses the data pollution detection request and orchestrates and manages the existing computing power and network resources. It also performs the scheduling and configuration of computing power resources and determines high-security trusted nodes, medium-security trusted nodes, and low-security trusted nodes from the infrastructure layer. The high-security trusted nodes are configured with a detection token generation module, the trusted nodes are configured with a data pollution detection module, and the low-security trusted nodes are configured with a data storage module.
[0231] Correspondingly, after configuring high-security trusted nodes, medium-security trusted nodes, and low-security trusted nodes for data storage services and pollution detection services, the corresponding execution operations of high-security trusted nodes, medium-security trusted nodes, and low-security trusted nodes can be as follows:
[0232] The security parameters in the high-security trusted node correspond to the aforementioned authentication information. These security parameters include k, K, and H(). k is the key used to encrypt the stored data, K is the key used to encrypt the contamination detection index, and both k and K can be symmetric keys. H() is a hash function used to construct the contamination detection token. The high-security trusted node also generates public and private keys PKTN and SKTN; correspondingly, the medium-security trusted node also generates public and private keys PKDTN and SKDTN. These public and private keys from the high-security and medium-security trusted nodes can be used for signature verification.
[0233] The process of generating the pollution detection index is as follows: First, the data encryption module in the high-security trusted node uses key k to encrypt the dataset D uploaded by the data owner, obtaining encrypted data D', and then uploads the encrypted data D' to the data storage module of the low-security trusted node for storage. The key k can be obtained using an encryption algorithm such as the Advanced Encryption Standard (AES) or other symmetric encryption algorithms.
[0234] Then, the data encryption module classifies the dataset D and determines the data identification information for each category; it calculates the expectation and variance of the data for each category, and constructs a pollution detection index based on the data identification information, expectation and variance for each category.
[0235] For example, when the data encryption module classifies dataset D, it can use the computing power nodes stored during the distributed storage of data in dataset D to achieve classification. The data identification information for each classification can be denoted as the node identification information of the stored computing power node, denoted as l1. For example, when the classification label is l1, it indicates that the corresponding data was uploaded to computing power node 1. In this way, the dataset uploaded to each computing power node can be denoted as an n-dimensional vector data l. i =(x (1) ,x (2) ,x (3) ,...,x (n) ) T Let i = 1, 2, ..., m, where m is the total number of categories obtained after classifying dataset D. In some application scenarios, the data samples uploaded to each computing node need to undergo certain processing, such as taking the logarithm, to make them conform to a certain mathematical statistical distribution, such as a Gaussian distribution, i.e., x... (i) ~N(μ, σ 2 ).
[0236] The expected value and variance of each category of data can be calculated using the formula... Calculate the expected value of the j-th class classification data using the formula Calculate the variance of the j-th class of classification data.
[0237] Constructing a pollution detection index, for example, can be denoted as...
[0238] Finally, the contamination verification dictionary was determined.
[0239] Specifically, based on each category of data sample, the F-value of the sample is calculated, and after multiple attempts, the data contamination threshold ε is obtained. i Once the data contamination thresholds for all categorized sample data have been determined, a verification dictionary D is constructed using data identification information, such as data label l, and the contamination threshold ε. T =[l i :ε i The pollution threshold corresponds to the aforementioned pollution assessment threshold.
[0240] Contamination Detection Index Encryption: After generating the contamination detection index, the data encryption module in the high-security trusted node encrypts the index to protect its privacy. The encryption method can utilize a symmetric key K and a hash function H() to generate an encrypted index EI, which can be denoted as... Finally, the high-security trusted node uploads the encrypted index EI to the data storage module of the low-security trusted node.
[0241] In the process of implementing pollution detection services, the process of pollution detection token negotiation and generation is as follows: After receiving the first pollution detection request sent by the data pollution detection terminal, the secure and trusted node uses its personal private key SKDTN and hash function H() to query the data tag l. q The node identity information (ID) and timestamp (TS) of the secure and trusted node are used to generate a signature: Sig = Enc(H(TS||ID||l) q The generated signature Sig = Enc(H(TS||ID||l) will be generated. q The signature is sent to a highly secure and trusted node. Upon receiving the signature, the highly secure node first verifies the validity of the node's identity information (ID) and timestamp (TS) in the signature. After verifying the validity of the node's identity information (ID) and timestamp (TS), it uses the public key PKDTN to verify the signature: ver(Sig,(TS||ID||l)). q = Dec(Sig); After successful signature verification, the high-security trusted node uses the data tag to be queried. q Generate a data contamination detection token T = H(l) q ), and send a pollution detection token T = H(l q (To secure and trusted nodes.)
[0242] The secure and trusted node uses the received contamination detection token to encrypt the detection index I. q and the data to be detected D(l q The data contamination detection process is as follows: A medium-security trusted node sends a contamination detection token to a low-security trusted node. The low-security trusted node then uses the contamination detection token T = H(l) q Match it with its stored encrypted index EI to obtain l q The corresponding encrypted expectation and variance are calculated, and returned. q The corresponding encrypted expectation and variance are given to the medium-security trusted node; the medium-security trusted node, with the assistance of the high-security trusted node, uses the symmetric key K provided by the high-security trusted node to pair l. q The corresponding encrypted expectation and variance are decrypted to obtain l. q Corresponding expectation and variance strings The formula for secure and trusted nodes in China For l q Corresponding expectation and variance strings The parameters and the data to be detected in D(l) q ) Perform calculations to obtain l q The corresponding pollution detection value R s (x), then compare l q The corresponding pollution detection value R s (x) and the verification dictionary D T =[l i :ε i [middle] q The corresponding pollution threshold ε q The pollution detection results were obtained; among them, when R s (x) is less than ε q When, it indicates that the data to be detected is D(l) q If R is contaminated s (x) is greater than or equal to ε q This indicates the data is normal. The medium-security, trusted node returns the contamination detection results to the data contamination detection end. Furthermore, it can also send the contamination detection results to the low-security, trusted node, so that the low-security, trusted node can process the data D(l) to be detected. q (Then proceed with further processing.)
[0243] This approach achieves contamination detection of encrypted data stored in the computing power network while ensuring data security. Furthermore, by deploying different functional modules of the encrypted data contamination detection service on computing power nodes with varying security and trust levels based on their security and trustworthiness characteristics, it avoids deploying all service functions on high-security and trustworthy nodes and eliminates the need for extensive computing and storage resources on the user side. This enables reliable service outsourcing and delegation while controlling costs. Deploying encryption, detection index generation, and other processing steps on high-security and trustworthy nodes reduces the data processing resource requirements on the user side. Moreover, matching data based on its classification using hash processing achieves an efficiency of O(1), improving detection efficiency during contamination detection.
[0244] It should be noted that the descriptions of the same steps and contents as in other embodiments in this embodiment can be found in the descriptions in other embodiments, and will not be repeated here.
[0245] The data detection method provided in this application embodiment, upon receiving a first pollution detection request sent by a pollution detection node, determines, based on the first pollution detection request, a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information through a computing power resource scheduling and management node. The method then sends the first pollution detection request, first node identification information for identifying the first computing power node, and second node identification information for identifying the second computing power node to the third computing power node. After receiving the first pollution detection request, the first node identification information for identifying the first computing power node, and the second node identification information for identifying the second computing power node from the computing power resource scheduling and management node, the third computing power node generates a second... The first computing node receives a pollution detection request from the second computing node and sends a second pollution detection request to the second computing node corresponding to the second node identification information. After receiving the second pollution detection request from the third computing node, the second computing node performs authentication processing on the second pollution detection request and obtains the authentication result. If the authentication result indicates that the authentication is successful, a pollution detection token is generated based on the second pollution detection request and sent to the third computing node. After receiving the pollution detection token sent by the second computing node, the third computing node sends a pollution query request including the pollution detection token to the first computing node and receives the pollution detection data sent by the first computing node. Based on the pollution detection data, it performs pollution detection, obtains the pollution detection result, and then sends the pollution detection result to the pollution detection node. In this way, the computing power resource scheduling and management node determines the first computing power node storing the first encrypted data, the third computing power node performing the pollution detection operation, and the second computing power node generating the pollution detection token to respond to the first pollution detection request. Pollution detection of encrypted data is realized on the computing power node side, which solves the problem that there is no reliable and effective method for detecting pollution data of privacy in the current computing power network. A data detection method is proposed, which realizes effective and comprehensive detection of pollution data of privacy data. It can detect data of various forms and has universal applicability.
[0246] Based on the foregoing embodiments, embodiments of this application provide a first data detection device, which can be applied to... Figure 1 and Figure 4 In the data detection method provided in the corresponding embodiment, refer to Figure 8 As shown, the first data detection device 5 may include: a first determining unit 51 and a first transmitting unit 52; wherein:
[0247] The first determining unit 51 is configured to, upon receiving a first pollution detection request sent by a pollution detection node, determine a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information based on the first pollution detection request; wherein, the first pollution detection request is used to request pollution detection on the first encrypted data corresponding to the first data identification information;
[0248] The first sending unit 52 is used to send a first pollution detection request, a first node identification information for identifying the first computing power node, and a second node identification information for identifying the second computing power node to the third computing power node; wherein, the third computing power node is used to perform the pollution detection operation corresponding to the first pollution detection request, the security performance of the first computing power node is lower than or equal to the security performance of the third computing power node, and the security performance of the third computing power node is lower than or equal to the security performance of the second computing power node.
[0249] In other embodiments of this application, the first determining unit includes: a first determining module and a management module; wherein:
[0250] The first determining module is used to determine, if a first pollution detection request is received, a first computing power node storing the first encrypted data corresponding to the first data identification information and a second computing power node that has obtained the first encrypted data through encryption processing.
[0251] The management module is used to manage resource scheduling based on the first pollution detection request and to allocate the corresponding third computing power node to the first data identification information.
[0252] In other embodiments of this application, the first determining module is further configured to, upon receiving a first pollution detection request, determine the first computing power node storing the first encrypted data corresponding to the first data identification information;
[0253] The management module is also used to manage resource scheduling based on the first pollution detection request, and to allocate corresponding second and third computing power nodes to the first data identification information.
[0254] In other embodiments of this application, the first sending unit is further configured to send authentication information to the second computing power node if the second computing power node does not include authentication information for authenticating the first encrypted data, so that the second computing power node can perform a response operation to the pollution query request based on the authentication information.
[0255] In other embodiments of this application, the first computing node, the second computing node, and the third computing node belong to three different nodes, or the first computing node, the second computing node, and the third computing node belong to two different nodes, wherein any two computing nodes constitute one node, or the first computing node, the second computing node, and the third computing node belong to one node.
[0256] It should be noted that the specific implementation process of the interaction between units and modules in this embodiment can be referred to Figure 1 and Figure 4 The implementation process of the data detection method provided in the corresponding embodiment will not be described in detail here.
[0257] The first data detection device provided in this application embodiment, upon receiving a first pollution detection request sent by a pollution detection node, determines, based on the first pollution detection request, a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information through a computing power resource scheduling and management node. It then sends the first pollution detection request, first node identification information for identifying the first computing power node, and second node identification information for representing the second computing power node to the third computing power node. This allows the third computing power node to generate a second pollution detection request based on the first data identification information and send the second pollution detection request to the node corresponding to the second node identification information. The second computing node receives a second contamination detection request from the third computing node, authenticates the request, and obtains an authentication result. If the authentication result indicates successful authentication, it generates a contamination detection token based on the second contamination detection request and sends the token to the third computing node. The third computing node receives the token and sends a contamination query request, including the token, to the first computing node. It also receives contamination detection data from the first computing node, performs contamination detection based on the data, and sends the result back to the contamination detection node. In this way, the computing resource scheduling and management node determines the first computing node storing the first encrypted data, the third computing node performing the contamination detection operation, and the second computing node generating the contamination detection token to respond to the first contamination detection request. This achieves contamination detection of encrypted data at the computing node level, solving the problem of the lack of a reliable and effective method for contaminating sensitive data in current computing networks. It proposes a data detection method that achieves comprehensive and effective contamination detection of sensitive data, capable of detecting various forms of data, and has universal applicability.
[0258] Based on the foregoing embodiments, embodiments of this application provide a second data detection device, which can be applied to... Figure 2 and Figure 4 In the data detection method provided in the corresponding embodiment, refer to Figure 9 As shown, the second data detection device 6 is applied to the third computing node. The device includes: a first receiving unit 61, a first generating unit 62, a second sending unit 63, and a detection unit 64; wherein:
[0259] The first receiving unit 61 is configured to receive a first contamination detection request, a first node identification information for identifying the first computing power node, and a second node identification information for identifying the second computing power node sent by the computing power resource scheduling and management node; wherein, the first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information;
[0260] The first generation unit 62 is used to generate a second pollution detection request based on the first data identification information; wherein the second pollution detection request is used to request the pollution detection token corresponding to the first data identification information.
[0261] The second sending unit 63 is used to send a second pollution detection request to the second computing power node corresponding to the second node identification information;
[0262] The first receiving unit 61 is also used to receive a pollution detection token sent by the second computing power node; wherein the pollution detection token is generated by the second computing power node based on the second pollution detection request;
[0263] The second sending unit 63 is further configured to send a pollution query request including a pollution detection token to the first computing power node; wherein, the pollution query request is used to obtain pollution detection data related to the first encrypted data stored in the first computing power node;
[0264] The first receiving unit 61 is also used to receive pollution detection data sent by the first computing node;
[0265] Detection unit 64 is used to perform pollution detection based on pollution detection data and obtain pollution detection results;
[0266] The second sending unit 63 is used to send the pollution detection results to the pollution detection node.
[0267] In other embodiments of this application, the first generation unit includes: an acquisition module and a generation module; wherein:
[0268] The acquisition module is used to obtain the timestamp;
[0269] The generation module is used to generate signature information by using a preset signature method to identify the first data identifier, the timestamp, and the third node identifier.
[0270] The generation module is further configured to generate a second contamination detection request including signature information. In other embodiments of this application, the detection unit includes: a decryption module, a calculation module, and an analysis module; wherein:
[0271] The decryption module is used to decrypt pollution detection data using authentication information to obtain the data to be analyzed, data index, and pollution assessment threshold.
[0272] The calculation module is used to calculate the pollution assessment value corresponding to the data to be analyzed based on the data to be analyzed and the data index;
[0273] The analysis module is used to obtain pollution detection results based on pollution assessment values and pollution assessment thresholds.
[0274] In other embodiments of this application, the data index includes the expected value and variance set corresponding to the data to be analyzed.
[0275] It should be noted that the specific implementation process of the interaction between units and modules in this embodiment can be referred to Figure 2 and Figure 4 The implementation process of the data detection method provided in the corresponding embodiment will not be described in detail here.
[0276] The second data detection device provided in this application embodiment involves a third computing power node receiving a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information, as determined by the computing power resource scheduling and management node based on the first pollution detection request. The third computing power node then generates a second pollution detection request based on the first data identification information and sends it to the second computing power node corresponding to the second node identification information. Upon receiving the second pollution detection request from the third computing power node, the second computing power node performs authentication processing on the second pollution detection request to obtain an authentication result. If the authentication result indicates successful authentication, a pollution detection token is generated based on the second pollution detection request and sent to the third computing power node. After receiving the pollution detection token from the second computing power node, the third computing power node sends a pollution query request including the pollution detection token to the first computing power node and receives pollution detection data from the first computing power node. Based on the pollution detection data, it performs pollution detection, obtains a pollution detection result, and then sends the pollution detection result to the pollution detection node. In this way, the computing power resource scheduling and management node determines the first computing power node storing the first encrypted data, the third computing power node performing the pollution detection operation, and the second computing power node generating the pollution detection token to respond to the first pollution detection request. Pollution detection of encrypted data is realized on the computing power node side, which solves the problem that there is no reliable and effective method for detecting pollution data of privacy in the current computing power network. A data detection method is proposed, which realizes effective and comprehensive detection of pollution data of privacy data. It can detect data of various forms and has universal applicability.
[0277] Based on the foregoing embodiments, embodiments of this application provide a third data detection device, which can be applied to... Figures 3-5 In the data detection method provided in the corresponding embodiment, refer to Figure 10 As shown, the third data detection device 7 is applied to the second computing node, and the device includes: a second receiving unit 71, an authentication unit 72, a second generating unit 73, and a third sending unit 74; wherein:
[0278] The second receiving unit 71 is used to receive a second contamination detection request sent by the third computing power node; wherein, the second contamination detection request is used to request a contamination detection token corresponding to the first data identification information;
[0279] Authentication unit 72 is used to authenticate the second pollution detection request and obtain the authentication result;
[0280] The second generation unit 73 is used to generate a pollution detection token based on the second pollution detection request if the authentication result indicates that the authentication is successful.
[0281] The third sending unit 74 is used to send the pollution detection token to the third computing node.
[0282] In other embodiments of this application, the authentication unit is specifically used to implement the following steps:
[0283] The signature information included in the second pollution detection request is authenticated to obtain the authentication result.
[0284] In other embodiments of this application, the second generation unit is specifically used to implement the following steps:
[0285] If the authentication result indicates that the authentication is successful, a pollution detection token is generated based on the first data identification information included in the signature information.
[0286] In other embodiments of this application, the second receiving unit is further configured to receive authentication information that is associated with the first data identification information sent by the computing power resource scheduling and management node.
[0287] In other embodiments of this application, the third data detection device further includes: an encryption unit; wherein:
[0288] The encryption unit is used to encrypt the data to be stored using authentication information if it receives the data to be stored from the computing resource scheduling and management node, thereby obtaining the first encrypted data; wherein the data to be stored is sent from the data providing node to the computing resource scheduling and management node;
[0289] The third sending unit is also used to send the first encrypted data to the first computing power node; wherein the first computing power node is indicated by the computing power resource scheduling and management node.
[0290] In other embodiments of this application, the third processing apparatus further includes: a processing unit, a computing unit, and a building unit; wherein:
[0291] The processing unit is used to classify the data to be stored, and obtain n types of data to be analyzed and data identification information for each type of data to be analyzed.
[0292] The calculation unit is used to calculate the expected value and variance of each type of data to be analyzed.
[0293] A data index is established based on the data identification information, expectation, and variance of each type of data to be analyzed, to obtain the corresponding data index for each type of data to be analyzed.
[0294] The encryption unit is also used to encrypt the data index using authentication information to obtain an encrypted index.
[0295] In other embodiments of this application, the third data processing apparatus further includes: a second determining unit and a obtaining unit; wherein:
[0296] The second determining unit is used to determine the pollution assessment threshold corresponding to each type of data to be analyzed based on each type of data to be analyzed.
[0297] The obtained unit is used to obtain a pollution verification dictionary based on the data identification information and pollution evaluation threshold of n types of data to be analyzed.
[0298] It should be noted that the specific implementation process of the interaction between units and modules in this embodiment can be referred to Figure 2 and Figure 4 The implementation process of the data detection method provided in the corresponding embodiment will not be described in detail here.
[0299] The third data detection device provided in this application embodiment involves a second computing power node receiving a second contamination detection request from another computing power node. The second computing power node then authenticates the request and obtains an authentication result. If the authentication result indicates successful authentication, a contamination detection token is generated based on the second contamination detection request and sent to the third computing power node. The third computing power node, upon receiving the contamination detection token from the second computing power node, sends a contamination query request including the token to the first computing power node and receives contamination detection data from the first computing power node. Based on this data, it performs contamination detection and obtains a result, which is then sent to the contamination detection node. In this way, the computing power resource scheduling and management node determines the first computing power node storing the first encrypted data, the third computing power node performing the contamination detection operation, and the second computing power node generating the contamination detection token to respond to the first contamination detection request. This achieves contamination detection of encrypted data at the computing power node level, solving the problem of the lack of a reliable and effective method for detecting contamination of private data in current computing power networks. It proposes a data detection method that achieves effective and comprehensive contamination detection of private data, can detect various forms of data, and has universal applicability.
[0300] Based on the foregoing embodiments, embodiments of this application provide a data detection system that can be applied to... Figures 1-5 In the data detection method provided in the corresponding embodiment, refer to Figure 11 As shown, the data detection system 8 may include: a computing power resource scheduling and management node 81 and at least one computing power node 82; wherein:
[0301] The computing power resource scheduling and management node 81 is used to determine the first computing power node, the second computing power node, and the third computing power node from at least one computing power node 82, and to implement the following: Figure 1 and Figure 4 The steps of the data detection method;
[0302] The second computing node is used to achieve, for example Figures 3-5 The steps of data detection methods;
[0303] The third computing node is used to achieve, for example Figure 2 and Figure 4 The steps of the data detection method.
[0304] Based on the foregoing embodiments, embodiments of this application provide a computer-readable storage medium, simply referred to as a storage medium, which stores one or more programs that can be executed by one or more processors to implement the reference. Figure 1 and Figure 4 ,or Figure 2 and Figure 4 ,or Figures 3-5 The implementation process of the data detection method provided in the corresponding embodiment will not be described in detail here.
[0305] Based on the foregoing embodiments, this application also provides a computer program product, including a computer program that can be executed by the processor of a computing power resource scheduling and management node, the processor of a second computing power node, or the processor of a third computing power node to complete any of the foregoing method steps.
[0306] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of hardware embodiments, software embodiments, or embodiments combining software and hardware aspects. Furthermore, this application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage and optical storage) containing computer-usable program code.
[0307] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.
[0308] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.
[0309] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.
[0310] The above description is merely a preferred embodiment of this application and is not intended to limit the scope of protection of this application.
Claims
1. A data detection method, characterized in that, The method is applied to a computing resource scheduling and management node, and the method includes: If a first contamination detection request is received from a contamination detection node, a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information are determined based on the first contamination detection request; wherein, the first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information; Send the first pollution detection request, first node identification information for identifying the first computing power node, and second node identification information for identifying the second computing power node to the third computing power node; wherein, the third computing power node is used to perform the pollution detection operation corresponding to the first pollution detection request, the security performance of the first computing power node is lower than or equal to the security performance of the third computing power node, and the security performance of the third computing power node is lower than or equal to the security performance of the second computing power node. Wherein, if a first pollution detection request is received from a pollution detection node, determining a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information based on the first pollution detection request includes: If the first pollution detection request is received, determine the first computing power node that stores the first encrypted data corresponding to the first data identification information and the second computing power node that obtains the first encrypted data through encryption processing; Based on the first pollution detection request, resource scheduling and management are performed to allocate the corresponding third computing power node to the first data identification information; If the second computing power node does not include authentication information for authenticating the first encrypted data, the authentication information is sent to the second computing power node so that the second computing power node can perform a response operation based on the authentication information in response to the second contamination detection request sent by the third computing power node.
2. The method according to claim 1, characterized in that, If a first pollution detection request is received from a pollution detection node, the process of determining a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information based on the first pollution detection request includes: If the first contamination detection request is received, determine the first computing node that stores the first encrypted data corresponding to the first data identification information; Based on the first pollution detection request, resource scheduling and management are performed to allocate the corresponding second computing power node and the third computing power node to the first data identification information.
3. The method according to any one of claims 1 to 2, characterized in that, The first computing node, the second computing node, and the third computing node are three different nodes, or the first computing node, the second computing node, and the third computing node are two different nodes, where any two computing nodes are one node, or the first computing node, the second computing node, and the third computing node are one node.
4. A data detection method, characterized in that, The method is applied to a third computing node, and the method includes: The system receives a first contamination detection request, a first node identification information for identifying a first computing power node, and a second node identification information for identifying a second computing power node, all sent by a computing power resource scheduling and management node. The first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information. Based on the first data identification information, a second pollution detection request is generated; wherein, the second pollution detection request is used to request the pollution detection token corresponding to the first data identification information; Send the second pollution detection request to the second computing node corresponding to the second node identification information; Receive a pollution detection token sent by the second computing power node; wherein the pollution detection token is generated by the second computing power node based on the second pollution detection request; Send a contamination query request, including the contamination detection token, to the first computing power node; wherein, the contamination query request is used to obtain contamination detection data related to the first encrypted data stored in the first computing power node; Receive the pollution detection data sent by the first computing node; Pollution detection is performed based on the pollution detection data to obtain pollution detection results; Send the pollution detection results to the pollution detection node.
5. The method according to claim 4, characterized in that, The step of generating a second pollution detection request based on the first data identification information includes: Get the timestamp; A signature is generated by using a preset signature method to identify the first data identifier, the timestamp, and the third node identifier. Generate a second contamination detection request that includes the signature information.
6. The method according to claim 4 or 5, characterized in that, The pollution detection based on the pollution detection data, to obtain the pollution detection result, includes: The pollution detection data is decrypted using authentication information to obtain the data to be analyzed, the data index, and the pollution evaluation threshold. Based on the data to be analyzed and the data index, calculate the pollution assessment value corresponding to the data to be analyzed; The pollution detection results are obtained based on the pollution assessment values and the pollution assessment thresholds.
7. The method according to claim 6, characterized in that, The data index includes the expected value and variance set corresponding to the data to be analyzed.
8. A data detection method, characterized in that, The method is applied to the second computing node, and the method includes: Receive a second contamination detection request sent by a third computing power node; wherein the second contamination detection request is used to request a contamination detection token corresponding to the first data identification information; The second pollution detection request is authenticated to obtain the authentication result; If the authentication result indicates that the authentication is successful, the pollution detection token is generated based on the second pollution detection request; Send the pollution detection token to the third computing node; If the computing power resource scheduling and management node receives data to be stored, it encrypts the data using authentication information to obtain first encrypted data; wherein the data to be stored is sent from the data providing node to the computing power resource scheduling and management node; Send the first encrypted data to the first computing power node; wherein the first computing power node is indicated by the computing power resource scheduling and management node.
9. The method according to claim 8, characterized in that, The authentication process for the second pollution detection request, to obtain the authentication result, includes: The signature information included in the second pollution detection request is authenticated to obtain the authentication result.
10. The method according to claim 9, characterized in that, If the authentication result indicates successful authentication, the pollution detection token is generated based on the second pollution detection request, including: If the authentication result indicates that the authentication is successful, the pollution detection token is generated based on the first data identification information included in the signature information.
11. The method according to claim 8, characterized in that, The method further includes: Receive authentication information sent by the computing power resource scheduling and management node that is associated with the first data identification information.
12. The method according to claim 8, characterized in that, The method further includes: The data to be stored is classified to obtain n categories of data to be analyzed and data identification information for each category of data to be analyzed; Calculate the expected value and variance of the data to be analyzed for each class; Based on the data identification information, expectation and variance of each type of data to be analyzed, a data index corresponding to each type of data to be analyzed is established; The authentication information is used to encrypt the data index to obtain an encrypted index.
13. The method according to claim 12, characterized in that, The method further includes: Based on each type of data to be analyzed, a pollution assessment threshold corresponding to each type of data to be analyzed is determined. Based on the data identification information and pollution evaluation threshold of the n types of data to be analyzed, a pollution verification dictionary is obtained.
14. A first data detection device, characterized in that, The device is applied to a computing resource scheduling and management node, and the device includes: a first determining unit and a first sending unit; wherein: The first determining unit is configured to, upon receiving a first contamination detection request sent by a contamination detection node, determine a first computing power node, a second computing power node, and a third computing power node that are associated with the first data identification information based on the first contamination detection request; wherein, the first contamination detection request is used to request contamination detection of the first encrypted data corresponding to the first data identification information; The first sending unit is configured to send the first pollution detection request, a first node identification information for identifying the first computing power node, and a second node identification information for identifying the second computing power node to the third computing power node; wherein, the third computing power node is configured to perform the pollution detection operation corresponding to the first pollution detection request, the security performance of the first computing power node is lower than or equal to the security performance of the third computing power node, and the security performance of the third computing power node is lower than or equal to the security performance of the second computing power node. Specifically, the first determining unit is used to implement the following steps: If the first pollution detection request is received, determine the first computing power node that stores the first encrypted data corresponding to the first data identification information and the second computing power node that obtains the first encrypted data through encryption processing; Based on the first pollution detection request, resource scheduling and management are performed to allocate the corresponding third computing power node to the first data identification information; The first sending unit is further configured to send the authentication information to the second computing power node if the second computing power node does not include authentication information for authenticating the first encrypted data, so that the second computing power node performs a response operation based on the authentication information in response to the second contamination detection request sent by the third computing power node.
15. A second data detection device, characterized in that, The device is applied to a third computing node, and the device includes: a first receiving unit, a first generating unit, a second sending unit, and a detection unit; wherein: The first receiving unit is configured to receive a first contamination detection request, a first node identification information for identifying the first computing power node, and a second node identification information for identifying the second computing power node sent by the computing power resource scheduling and management node; wherein, the first contamination detection request is configured to request contamination detection of the first encrypted data corresponding to the first data identification information; The first generation unit is configured to generate a second pollution detection request based on the first data identification information; wherein the second pollution detection request is used to request a pollution detection token corresponding to the first data identification information; The second sending unit is used to send the second pollution detection request to the second computing power node corresponding to the second node identification information; The first receiving unit is further configured to receive a pollution detection token sent by the second computing power node; wherein the pollution detection token is generated by the second computing power node based on the second pollution detection request; The second sending unit is further configured to send a pollution query request including the pollution detection token to the first computing power node; wherein the pollution query request is used to obtain pollution detection data related to the first encrypted data stored in the first computing power node; The first receiving unit is further configured to receive the pollution detection data sent by the first computing node; The detection unit is used to perform pollution detection based on the pollution detection data and obtain pollution detection results. The second sending unit is used to send the pollution detection result to the pollution detection node.
16. A third data detection device, characterized in that, The device is applied to a second computing node, and the device includes: a second receiving unit, an authentication unit, a second generating unit, a third sending unit, and an encryption unit; wherein: The second receiving unit is configured to receive a second contamination detection request sent by the third computing node; wherein the second contamination detection request is configured to request a contamination detection token corresponding to the first data identification information; The authentication unit is used to authenticate the second pollution detection request and obtain an authentication result. The second generation unit is used to generate the pollution detection token based on the second pollution detection request if the authentication result indicates that the authentication is successful. The third sending unit is used to send the pollution detection token to the third computing node; The encryption unit is used to encrypt the data to be stored using authentication information if it receives the data to be stored sent by the computing power resource scheduling and management node, to obtain the first encrypted data; wherein the data to be stored is sent from the data providing node to the computing power resource scheduling and management node; The third sending unit is further configured to send the first encrypted data to the first computing power node; wherein the first computing power node is indicated by the computing power resource scheduling and management node.
17. A data detection system, characterized in that, The system includes: a computing power resource scheduling and management node and at least one computing power node; wherein: The computing power resource scheduling and management node is used to determine the first computing power node, the second computing power node, and the third computing power node from at least one of the computing power nodes, and to implement the steps of the data detection method as described in any one of claims 1 to 3; The second computing node is used to implement the steps of the data detection method as described in any one of claims 8 to 13; The third computing node is used to implement the steps of the data detection method as described in any one of claims 4 to 7.
18. A storage medium, characterized in that, The storage medium stores a data detection program, which, when executed, is used to implement the steps of the data detection method as described in any one of claims 1 to 3, 4 to 7, or 8 to 13.
19. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the data detection method according to any one of claims 1 to 3, 4 to 7, or 8 to 13.
Citation Information
Patent Citations
Processing method and processing system of computing power information and computing power gateway
CN114760304A
Security chip communication method and device based on third-party key management node
CN114793184A