Privacy protection method, device, equipment and program product based on edge computing

Abstract

The present invention discloses a privacy protection method, device, equipment and program product based on edge computing, and relates to the field of encryption technology. The method includes receiving an encryption key matrix; expanding the encryption key matrix to obtain an extended key matrix; converting the data to be sent into a binary code sequence and then dividing it into multiple binary code segments of a specified length; converting multiple binary code segments into a binary code matrix; dividing the extended key matrix into multiple sub-key matrices; for multiple binary code matrices, encrypting them through multiple sub-key matrices to obtain multiple binary encryption matrices; converting the binary encryption matrix into a binary code sequence to obtain multiple encrypted binary code sequences; combining multiple encrypted binary code sequences in sequence and converting them into character sequences to obtain encrypted data and sending them to edge nodes. The method, device, equipment and program product disclosed in the present invention can prevent the leakage of privacy data and improve the security of data in an edge computing environment.

Description

Technical Field

[0001] The present invention belongs to the field of encryption technology, and specifically relates to a privacy protection method, device, equipment and program product based on edge computing. Background Art

[0002] Edge computing is a distributed computing architecture that moves the computing of applications, data and services from the central nodes of the network to the edge nodes of the network logic for processing. This computing model aims to transfer some computing tasks from remote data centers to the edge nodes of the network, that is, locations close to users or data sources, to provide services with lower latency and higher efficiency.

[0003] In an edge computing environment, data is no longer stored in a central location in a data center, but distributed on edge nodes, which places higher demands on data security and personal privacy. Currently, a more commonly used method for privacy protection in an edge computing environment is to encrypt data using a symmetric encryption algorithm. However, since edge nodes are usually in an open environment without physical protection, there is a risk of private data being leaked due to key leakage.

[0004] Therefore, how to provide an effective solution to protect privacy data in an edge computing environment has become an urgent problem to be solved in the existing technology. Summary of the invention

[0005] The purpose of the present invention is to provide a privacy protection method, device, equipment and program product based on edge computing to solve the above-mentioned problems existing in the prior art.

[0006] In order to achieve the above object, the present invention adopts the following technical solutions:

[0007] In a first aspect, the present invention provides a privacy protection method based on edge computing, which is applied to a user terminal in an edge computing system, wherein the edge computing system includes a server, a plurality of edge nodes and the user terminal, including:

[0008] Receiving the encryption key matrix sent by the server;

[0009] Expanding the encryption key matrix to obtain an expanded key matrix;

[0010] After converting the data to be sent into a binary code sequence, dividing the binary code sequence into code segments of a specified length to obtain a plurality of binary code segments;

[0011] Converting the plurality of binary code segments into binary code matrices in sequence to obtain a plurality of binary code matrices corresponding to the plurality of binary code segments one by one, wherein the size of the binary code matrix is ​​smaller than the size of the extended key matrix;

[0012] Starting from the upper left corner of the extended key matrix, the extended key matrix is ​​divided into a plurality of sub-key matrices in a sequence from left to right and from top to bottom;

[0013] For the i-th binary coding matrix among the multiple binary coding matrices, encrypt it by using the k-th subkey matrix among the multiple subkey matrices to obtain multiple binary encryption matrices corresponding to the multiple binary coding matrices one by one, where i∈[1,2,3,...,I], I is the total number of binary coding matrices, k=i mod K, K is the total number of subkey matrices;

[0014] Converting the plurality of binary encryption matrices into binary code sequences to obtain a plurality of encrypted binary code sequences corresponding one-to-one to the plurality of binary encryption matrices;

[0015] The plurality of encrypted binary code sequences are sequentially combined and converted into character sequences to obtain encrypted data corresponding to the data to be sent, and the encrypted data is sent to one of the plurality of edge nodes.

[0016] Based on the above disclosed content, the present invention receives an encryption key matrix sent by a server; expands the encryption key matrix to obtain an extended key matrix; after converting the data to be sent into a binary code sequence, the binary code sequence is divided into code segments of a specified length to obtain multiple binary code segments; the multiple binary code segments are converted into binary code matrices in sequence to obtain multiple binary code matrices corresponding to the multiple binary code segments, wherein the size of the binary code matrix is ​​smaller than the size of the extended key matrix; starting from the upper left corner of the extended key matrix, the extended key matrix is ​​divided into multiple sub-key matrices in order from left to right and from top to bottom; for the i-th binary code matrix in the multiple binary code matrices, the k-th sub-key matrix in the multiple sub-key matrices is encrypted to obtain multiple binary encryption matrices corresponding to the multiple binary code matrices, wherein i∈[1,2,3,...,I], I is the total number of binary code matrices, and k=i mod K, K is the total number of subkey matrices; multiple binary encryption matrices are converted into binary coding sequences to obtain multiple encrypted binary coding sequences corresponding to the multiple binary encryption matrices one by one; multiple encrypted binary coding sequences are sequentially combined and converted into character sequences to obtain encrypted data corresponding to the data to be sent, and the encrypted data is sent to one of the multiple edge nodes. In this way, when encrypting the data to be sent, the encryption key matrix can be first expanded into a new extended key matrix, and the extended key matrix can be divided into multiple subkey matrices, and the multiple binary coding matrices converted from the data to be sent can be encrypted based on the multiple subkey matrices, thereby realizing the encryption of the data to be sent. In the process of processing data in the edge computing environment, since the encryption key matrix is ​​subjected to key expansion and subkey matrix division operations, different encryption key matrices are used for encryption according to different coding matrices of the data. Even if the encryption key matrix is ​​leaked, the encrypted data cannot be directly decrypted and restored according to the encryption key matrix, thereby preventing the leakage of privacy data and improving the security of data in the edge computing environment.

[0017] In one possible design, the step of expanding the encryption key matrix to obtain an expanded key matrix includes:

[0018] Expanding the encryption key matrix outwards by at least one layer of elements to obtain an extended key matrix;

[0019] Among them, any extended element in the expanded encryption key matrix is ​​determined based on the first target element adjacent to the any extended element in the encryption key matrix before expansion, and the second target element in the encryption key matrix before expansion that is located on the line connecting the any extended element and the first target element and is adjacent to the first target element.

[0020] In one possible design, any extended element in the expanded encryption key matrix is ​​obtained by performing an exclusive OR operation on a first target element adjacent to the any extended element in the encryption key matrix before expansion, and a second target element in the encryption key matrix before expansion that is located on a line connecting the any extended element and the first target element and is adjacent to the first target element.

[0021] In a possible design, the encryption key matrix is ​​expanded outwardly by at least one layer of elements to obtain an expanded key matrix, including:

[0022] The encryption key matrix is ​​expanded outward by one layer of elements to obtain the expanded key matrix.

[0023] In one possible design, encrypting an i-th binary coding matrix among the multiple binary coding matrices by using a k-th subkey matrix among the multiple subkey matrices includes:

[0024] Performing a bitwise XOR operation on a kth subkey matrix among the multiple subkey matrices and an ith binary coding matrix among the multiple binary coding matrices to obtain an initial encryption matrix corresponding to the ith binary coding matrix among the multiple binary coding matrices;

[0025] Performing a byte substitution operation on the initial encryption matrix to obtain a secondary encryption matrix;

[0026] Performing a row shift operation on the secondary encryption matrix to obtain a third encryption matrix;

[0027] A column obfuscation operation is performed on the tertiary encryption matrix to obtain a binary encryption matrix corresponding to an i-th binary coding matrix among the multiple binary coding matrices.

[0028] In a possible design, starting from the upper left corner of the extended key matrix, the extended key matrix is ​​divided into a plurality of sub-key matrices in a sequence from left to right and from top to bottom, including:

[0029] Using the element in the mth row and nth column of the extended key matrix as the first element of the matrix, a sub-key matrix of a specified size is divided, wherein the initial value of m n's is 1;

[0030] After adding 1 to n, the sub-key matrix is ​​re-divided;

[0031] When the rightmost element of the divided sub-key matrix corresponds to the same element as the rightmost element of the extended key matrix, n is set to 1 and m is incremented by 1, and the sub-key matrix is ​​re-divided until the rightmost element of the divided sub-key matrix corresponds to the same element as the rightmost element of the extended key matrix, and the bottommost element of the divided sub-key matrix corresponds to the same element, and the sub-key matrix is ​​stopped from being divided to obtain multiple sub-key matrices.

[0032] In one possible design, the size of the binary coding matrix is ​​3×3 or 4×4.

[0033] In a second aspect, the present invention provides a privacy protection device based on edge computing, which is applied to a user terminal in an edge computing system, wherein the edge computing system includes a server, a plurality of edge nodes and the user terminal, including:

[0034] A receiving unit, used for receiving the encryption key matrix sent by the server;

[0035] An expansion unit, used for expanding the encryption key matrix to obtain an expanded key matrix;

[0036] The encoding unit is used to convert the data to be sent into a binary code sequence, and then divide the binary code sequence into code segments of a specified length to obtain a plurality of binary code segments;

[0037] A first conversion unit is used to convert the multiple binary code segments into binary code matrices in sequence to obtain multiple binary code matrices corresponding to the multiple binary code segments one by one, wherein the size of the binary code matrix is ​​smaller than the size of the extended key matrix;

[0038] A division unit, used for dividing the extended key matrix into a plurality of sub-key matrices starting from the upper left corner of the extended key matrix in a sequence from left to right and from top to bottom;

[0039] an encryption unit, configured to encrypt an i-th binary coding matrix among the multiple binary coding matrices by using a k-th subkey matrix among the multiple subkey matrices, to obtain a plurality of binary encryption matrices corresponding to the multiple binary coding matrices one by one, wherein i∈[1,2,3,...,I], I is the total number of binary coding matrices, k=i modK, and K is the total number of subkey matrices;

[0040] A second conversion unit is used to convert the multiple binary encryption matrices into binary code sequences to obtain multiple encrypted binary code sequences corresponding to the multiple binary encryption matrices one by one;

[0041] A third conversion unit, used for sequentially combining the multiple encrypted binary code sequences and converting them into a character sequence to obtain encrypted data corresponding to the data to be sent;

[0042] A sending unit is used to send the encrypted data to one of the edge nodes.

[0043] In a third aspect, the present invention provides a privacy protection device based on edge computing, comprising a memory, a processor and a transceiver that are communicatively connected in sequence, wherein the memory is used to store computer programs, the transceiver is used to send and receive messages, and the processor is used to read the computer program to execute the privacy protection method based on edge computing as described in the first aspect or any possible design of the first aspect.

[0044] In a fourth aspect, the present invention provides a computer-readable storage medium having instructions stored thereon. When the instructions are executed on a computer, the edge computing-based privacy protection method described in the first aspect or any possible design of the first aspect is executed.

[0045] In a fifth aspect, the present invention provides a computer program product comprising instructions, which, when executed on a computer, causes the computer to execute the edge computing-based privacy protection method as described in the first aspect or any possible design of the first aspect.

[0046] Beneficial effects:

[0047] The edge computing-based privacy protection method, apparatus, device and program product provided by the present invention can first expand the encryption key matrix into a new extended key matrix when encrypting the data to be sent, and divide the extended key matrix into multiple sub-key matrices, and encrypt multiple binary coding matrices converted from the data to be sent based on the multiple sub-key matrices, thereby realizing the encryption of the data to be sent. In the process of processing data in the edge computing environment, since the encryption key matrix is ​​subjected to key expansion and sub-key matrix division operations, and then different encryption key matrices are used to encrypt the data according to different coding matrices, even if the encryption key matrix is ​​leaked, the encrypted data cannot be directly decrypted and restored according to the encryption key matrix, thereby preventing the leakage of privacy data, improving the security of data in the edge computing environment, and facilitating practical application and promotion. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 A flowchart of a privacy protection method based on edge computing provided in an embodiment of the present application;

[0049] Figure 2 A schematic block diagram of a privacy protection device based on edge computing provided in an embodiment of the present application;

[0050] Figure 3 A block diagram of a privacy protection device based on edge computing provided in an embodiment of the present application. DETAILED DESCRIPTION

[0051] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the present invention will be briefly introduced below in combination with the drawings and the description of the embodiments or the prior art. Obviously, the following description of the structure of the drawings is only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. It should be noted that the description of these embodiments is used to help understand the present invention, but does not constitute a limitation of the present invention.

[0052] It should be understood that although the terms first, second, etc. may be used herein to describe various units, these units should not be limited by these terms. These terms are only used to distinguish one unit from another unit. For example, a first unit can be referred to as a second unit, and similarly, a second unit can be referred to as a first unit without departing from the scope of the exemplary embodiments of the present invention.

[0053] It should be understood that the term "and / or" that may appear in this article is merely a description of the association relationship between associated objects, indicating that three relationships may exist. For example, A and / or B can represent three situations: A exists alone, B exists alone, and A and B exist at the same time. The term " / and" that may appear in this article describes another type of association object relationship, indicating that two relationships may exist. For example, A / and B can represent two situations: A exists alone, and A and B exist alone. In addition, the character " / " that may appear in this article generally indicates that the previous and next associated objects are in an "or" relationship.

[0054] In order to achieve the protection of privacy data, the embodiments of the present application provide a privacy protection method, device, equipment and program product based on edge computing. The privacy protection method, device, equipment and program product based on edge computing can prevent the leakage of privacy data and improve the security of data in the edge computing environment.

[0055] The privacy protection method based on edge computing provided in the embodiment of the present application can be applied to the user end in the edge computing system. The edge computing system may include a server, multiple edge nodes and the user end. The server is respectively communicated with the multiple edge nodes and the user end for data interaction or communication, and the user end is communicated with the multiple edge nodes for data interaction or communication.

[0056] The edge computing-based privacy protection method provided in the embodiments of the present application will be described in detail below.

[0057] like Figure 1 As shown, it is a flowchart of the privacy protection method based on edge computing provided in the first aspect of the embodiment of the present application. The privacy protection method based on edge computing may include but is not limited to the following steps S101-S108.

[0058] Step S101: Receive the encryption key matrix sent by the server.

[0059] The encryption key matrix may be sent directly from the server to the user end, or may be sent from the server to the edge node and then forwarded to the user end by the edge node.

[0060] Each element in the encryption key matrix may be a binary code containing at least one binary digit, and the length of the binary code corresponding to each element in the encryption key matrix is ​​consistent. The size of the encryption key matrix may be set according to actual conditions, for example, it may be 3×4, 4×4, 4×5 or 5×5, etc., which is specifically defined in the steps of the embodiments of the present application.

[0061] Step S102: Expand the encryption key matrix to obtain an expanded key matrix.

[0062] Expanding the encryption key matrix refers to expanding the size of the encryption key matrix, for example, expanding the original 4×4 encryption key matrix to a 6×6 or 8×8 encryption key matrix.

[0063] When expanding the encryption key matrix, the encryption key matrix can be expanded outwardly by at least one layer of elements to obtain an extended key matrix, wherein any extended element in the expanded encryption key matrix can be determined based on a first target element adjacent to the any extended element in the encryption key matrix before expansion, and a second target element in the encryption key matrix before expansion that is located on a line connecting the any extended element and the first target element and is adjacent to the first target element.

[0064] In an embodiment of the present application, the encryption key matrix is ​​expanded outward by one layer of elements to obtain an extended key matrix, and any extended element in the extended encryption key matrix is ​​obtained by performing an exclusive OR operation on a first target element adjacent to any extended element in the encryption key matrix before expansion, and a second target element in the encryption key matrix before expansion that is located on a line connecting any extended element and the first target element and is adjacent to the first target element.

[0065] Example 1: The 3×3 encryption key matrix is When the encryption key matrix is ​​expanded outward by one layer of elements, the element in the first row and first column of the extended key matrix is ​​obtained by performing an XOR operation on the element 10 in the first row and first column of the encryption key matrix and the element 01 in the second row and second column of the encryption key matrix; the element in the first row and second column of the extended key matrix is ​​obtained by performing an XOR operation on the element 10 in the first row and first column of the encryption key matrix and the element 11 in the second row and first column of the encryption key matrix; the element in the second row and first column of the extended key matrix is ​​obtained by performing an XOR operation on the element 10 in the first row and first column of the encryption key matrix and the element 00 in the first row and second column of the encryption key matrix, and so on, a 5×5 extended key matrix can be obtained.

[0066]

[0067] It is understandable that in some other embodiments, the encryption key matrix may be expanded in other ways, such as expanding the encryption key matrix to the right and bottom.

[0068] Step S103: After converting the data to be sent into a binary code sequence, the binary code sequence is divided into code segments of a specified length to obtain a plurality of binary code segments.

[0069] The length of the binary code segment can be set according to the actual situation, specifically according to the size of the binary code matrix to be converted later, and the binary code length corresponding to each element in the binary code matrix (which is consistent with the binary code length corresponding to each element in the encryption key matrix). For example, if the size of the binary code matrix is ​​3×3, and the binary code length corresponding to each element in the binary code matrix is ​​2 bits, the length of the binary code segment can be 3×3×2=18 bits.

[0070] Step S104: sequentially convert the multiple binary coding segments into binary coding matrices to obtain multiple binary coding matrices corresponding to the multiple binary coding segments.

[0071] The size of the binary coding matrix is ​​smaller than the size of the extended key matrix, and can be set according to actual conditions. For example, the size of the binary coding matrix can be 2×2, 3×3, or 4×4.

[0072] Specifically, each binary coding segment can be divided into multiple binary coding sub-segments with the same number of elements according to the number of elements corresponding to the binary coding matrix, and then the multiple binary coding sub-segments are sequentially used as multiple elements in the binary coding matrix. For example, if the size of the binary coding matrix is ​​2×2, and a binary coding segment is 16 bits and is 0100110001111011, then the binary coding segment can be converted into a binary coding matrix and can be expressed as

[0073] Step S105: Starting from the upper left corner of the extended key matrix, the extended key matrix is ​​divided into a plurality of sub-key matrices in order from left to right and from top to bottom.

[0074] Specifically, a sub-key matrix of a specified size may be first divided using the element of the mth row and nth column of the extended key matrix as the first element of the matrix, wherein the initial values ​​of the m n's are all 1, and then n is incremented by 1 and the sub-key matrix is ​​re-divided. When the rightmost element of the divided sub-key matrix corresponds to the same element as the rightmost element of the extended key matrix, n is set to 1 and m is incremented by 1 and the sub-key matrix is ​​re-divided. The division of the sub-key matrix is ​​stopped when the rightmost element of the divided sub-key matrix corresponds to the same element as the rightmost element of the extended key matrix and the bottommost element of the divided sub-key matrix corresponds to the same element, so as to obtain multiple sub-key matrices.

[0075] Example: Expand the key matrix to a 5×5 matrix The size of the subkey matrix is ​​5×5, so the extended key matrix can be divided into and There are 4 sub-key matrices in total.

[0076] Step S106: Encrypt the i-th binary coding matrix among the multiple binary coding matrices by using the k-th subkey matrix among the multiple subkey matrices to obtain multiple binary encryption matrices corresponding to the multiple binary coding matrices one by one.

[0077] Wherein, i∈[1,2,3,...,I], I is the total number of binary coding matrices, k=i mod K, K is the total number of subkey matrices, and mod represents a modulo operation.

[0078] Specifically, for the i-th binary coding matrix among the multiple binary coding matrices, encryption is performed using the k-th sub-key matrix among the multiple sub-key matrices, including the following steps S1061-S1064.

[0079] Step S1061. Perform a bitwise XOR operation on the kth subkey matrix among the multiple subkey matrices and the ith binary coding matrix among the multiple binary coding matrices to obtain an initial encryption matrix corresponding to the ith binary coding matrix among the multiple binary coding matrices.

[0080] Step S1062: Perform byte substitution operation on the initial encryption matrix to obtain a secondary encryption matrix.

[0081] The byte substitution operation on the initial encryption matrix can be performed by presetting a mapping relationship table, and converting each binary code in the binary code matrix into another binary code according to the mapping relationship table, which will not be described in detail here.

[0082] Step S1063: Perform a row shift operation on the secondary encryption matrix to obtain a tertiary encryption matrix.

[0083] The row shift operation is performed on the secondary encryption matrix, which may be a cyclic left shift or a cyclic right shift operation on each row in the secondary encryption matrix, and is not specifically limited in the embodiments of the present application.

[0084] Step S1064: Perform column obfuscation operations on the tertiary encryption matrix to obtain a binary encryption matrix corresponding to the i-th binary coding matrix among the multiple binary coding matrices.

[0085] The column confusion operation may be to multiply the cubic encryption matrix by a preset matrix.

[0086] Step S107: Convert the multiple binary encryption matrices into binary code sequences to obtain multiple encrypted binary code sequences corresponding to the multiple binary encryption matrices one by one.

[0087] Step S108: Combine multiple encrypted binary code sequences in sequence and convert them into character sequences to obtain encrypted data corresponding to the data to be sent, and send the encrypted data to one of the multiple edge nodes.

[0088] The privacy protection method based on edge computing provided by the present invention receives an encryption key matrix sent by a server; expands the encryption key matrix to obtain an extended key matrix; after converting the data to be sent into a binary code sequence, the binary code sequence is divided into code segments of a specified length to obtain multiple binary code segments; the multiple binary code segments are converted into binary code matrices in sequence to obtain multiple binary code matrices corresponding to the multiple binary code segments one by one, wherein the size of the binary code matrix is ​​smaller than the size of the extended key matrix; starting from the upper left corner of the extended key matrix, the extended key matrix is ​​divided into multiple sub-key matrices in order from left to right and from top to bottom; for the i-th binary code matrix in the multiple binary code matrices, the k-th sub-key matrix in the multiple sub-key matrices is encrypted to obtain multiple binary encryption matrices corresponding to the multiple binary code matrices one by one, wherein i∈[1,2,3,...,I], I is the total number of binary code matrices, and k=i modK, K is the total number of subkey matrices; multiple binary encryption matrices are converted into binary coding sequences to obtain multiple encrypted binary coding sequences corresponding to the multiple binary encryption matrices one by one; multiple encrypted binary coding sequences are sequentially combined and converted into character sequences to obtain encrypted data corresponding to the data to be sent, and the encrypted data is sent to one of the multiple edge nodes. In this way, when encrypting the data to be sent, the encryption key matrix can be first expanded into a new extended key matrix, and the extended key matrix can be divided into multiple subkey matrices, and the multiple binary coding matrices converted from the data to be sent can be encrypted based on the multiple subkey matrices, thereby realizing the encryption of the data to be sent. In the process of processing data in the edge computing environment, since the encryption key matrix is ​​subjected to key expansion and subkey matrix division operations, different encryption key matrices are used for encryption according to different coding matrices of the data. Even if the encryption key matrix is ​​leaked, the encrypted data cannot be directly decrypted and restored according to the encryption key matrix, thereby preventing the leakage of privacy data, improving the security of data in the edge computing environment, and facilitating practical application and promotion.

[0089] See also Figure 2 In a second aspect of an embodiment of the present application, a privacy protection device based on edge computing is provided, which is applied to a user terminal in an edge computing system. The edge computing system includes a server, a plurality of edge nodes, and the user terminal. The privacy protection device based on edge computing includes:

[0090] A receiving unit, used for receiving the encryption key matrix sent by the server;

[0091] An expansion unit, used for expanding the encryption key matrix to obtain an expanded key matrix;

[0092] The encoding unit is used to convert the data to be sent into a binary code sequence, and then divide the binary code sequence into code segments of a specified length to obtain a plurality of binary code segments;

[0093] A first conversion unit is used to convert the multiple binary code segments into binary code matrices in sequence to obtain multiple binary code matrices corresponding to the multiple binary code segments one by one, wherein the size of the binary code matrix is ​​smaller than the size of the extended key matrix;

[0094] A division unit, used for dividing the extended key matrix into a plurality of sub-key matrices starting from the upper left corner of the extended key matrix in a sequence from left to right and from top to bottom;

[0095] an encryption unit, configured to encrypt an i-th binary coding matrix among the multiple binary coding matrices by using a k-th subkey matrix among the multiple subkey matrices, to obtain a plurality of binary encryption matrices corresponding to the multiple binary coding matrices one by one, wherein i∈[1,2,3,...,I], I is the total number of binary coding matrices, k=i modK, and K is the total number of subkey matrices;

[0096] A second conversion unit is used to convert the multiple binary encryption matrices into binary code sequences to obtain multiple encrypted binary code sequences corresponding to the multiple binary encryption matrices one by one;

[0097] A third conversion unit, used for sequentially combining the multiple encrypted binary code sequences and converting them into a character sequence to obtain encrypted data corresponding to the data to be sent;

[0098] A sending unit is used to send the encrypted data to one of the edge nodes.

[0099] The working process, working details and technical effects of the edge computing-based privacy protection device provided in the second aspect of this embodiment can be found in the first aspect of the embodiment and will not be repeated here.

[0100] like Figure 3 As shown, the third aspect of an embodiment of the present application provides a privacy protection device based on edge computing, comprising a memory, a processor and a transceiver that are communicatively connected in sequence, wherein the memory is used to store computer programs, the transceiver is used to send and receive messages, and the processor is used to read the computer program and execute the privacy protection method based on edge computing as described in the first aspect of the embodiment.

[0101] For specific examples, the memory may include but is not limited to random access memory (RAM), read-only memory (ROM), flash memory, first-in-first-out memory (FIFO) and / or first-in-last-out memory (FILO), etc.; the processor may be but is not limited to a microprocessor of the STM32F105 series, an ARM (Advanced RISC-Machines), an X86 or other architecture processor, or a processor with an integrated NPU (neural-network processing units); the transceiver may be but is not limited to a WiFi (Wireless Fidelity) wireless transceiver, a Bluetooth wireless transceiver, a General Packet Radio Service (GPRS) wireless transceiver, a ZigBee protocol (a low-power local area network protocol based on the IEEE802.15.4 standard, ZigBee) wireless transceiver, a 3G transceiver, a 4G transceiver and / or a 5G transceiver, etc.

[0102] The fourth aspect of this embodiment provides a computer-readable storage medium storing instructions including the edge computing-based privacy protection method described in the first aspect of the embodiment, that is, the computer-readable storage medium stores instructions, and when the instructions are executed on a computer, the edge computing-based privacy protection method described in the first aspect is executed. The computer-readable storage medium refers to a carrier for storing data, which may include but is not limited to a floppy disk, an optical disk, a hard disk, a flash memory, a USB flash drive, and / or a memory stick, etc., and the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.

[0103] The fifth aspect of this embodiment provides a computer program product comprising instructions, which, when executed on a computer, enables the computer to execute the edge computing-based privacy protection method as described in the first aspect of the embodiment, wherein the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device.

[0104] It should be understood that certain details are provided in the following description to facilitate a complete understanding of the example embodiments. However, it should be understood by those of ordinary skill in the art that the example embodiments may be implemented without these certain details. For example, the system may be shown in a block diagram to avoid obscuring the example with unnecessary details. In other instances, well-known processes, structures, and techniques may not be shown in unnecessary detail to avoid obscuring the example embodiments.

[0105] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A privacy protection method based on edge computing, applied to a user end in an edge computing system, wherein the edge computing system includes a server, a plurality of edge nodes and the user end, characterized in that: include: Receiving the encryption key matrix sent by the server; Expanding the encryption key matrix to obtain an expanded key matrix; After converting the data to be sent into a binary code sequence, dividing the binary code sequence into code segments of a specified length to obtain a plurality of binary code segments; Converting the plurality of binary code segments into binary code matrices in sequence to obtain a plurality of binary code matrices corresponding to the plurality of binary code segments one by one, wherein the size of the binary code matrix is ​​smaller than the size of the extended key matrix; Starting from the upper left corner of the extended key matrix, the extended key matrix is ​​divided into a plurality of sub-key matrices in a sequence from left to right and from top to bottom; For the i-th binary coding matrix among the multiple binary coding matrices, encrypt it by using the k-th subkey matrix among the multiple subkey matrices to obtain multiple binary encryption matrices corresponding to the multiple binary coding matrices one by one, where i∈[1,2,3,...,I], I is the total number of binary coding matrices, k=i mod K, K is the total number of subkey matrices; Converting the plurality of binary encryption matrices into binary code sequences to obtain a plurality of encrypted binary code sequences corresponding one-to-one to the plurality of binary encryption matrices; The plurality of encrypted binary code sequences are sequentially combined and converted into character sequences to obtain encrypted data corresponding to the data to be sent, and the encrypted data is sent to one of the plurality of edge nodes.

2. The privacy protection method based on edge computing according to claim 1, characterized in that: The step of expanding the encryption key matrix to obtain an expanded key matrix includes: Expanding the encryption key matrix outwards by at least one layer of elements to obtain an extended key matrix; Among them, any extended element in the expanded encryption key matrix is ​​determined based on the first target element adjacent to the any extended element in the encryption key matrix before expansion, and the second target element in the encryption key matrix before expansion that is located on the line connecting the any extended element and the first target element and is adjacent to the first target element.

3. The privacy protection method based on edge computing according to claim 2, characterized in that: Any extended element in the expanded encryption key matrix is ​​obtained by performing an exclusive OR operation on a first target element adjacent to the any extended element in the encryption key matrix before expansion, and a second target element in the encryption key matrix before expansion that is located on a line connecting the any extended element and the first target element and is adjacent to the first target element.

4. The privacy protection method based on edge computing according to claim 2, characterized in that: The encryption key matrix is ​​expanded outwardly by at least one layer of elements to obtain an extended key matrix, including: The encryption key matrix is ​​expanded outward by one layer of elements to obtain the expanded key matrix.

5. The privacy protection method based on edge computing according to claim 1, characterized in that: The step of encrypting an i-th binary coding matrix among the multiple binary coding matrices by using a k-th sub-key matrix among the multiple sub-key matrices comprises: Performing a bitwise XOR operation on a k-th subkey matrix among the multiple subkey matrices and an i-th binary coding matrix among the multiple binary coding matrices to obtain an initial encryption matrix corresponding to the i-th binary coding matrix among the multiple binary coding matrices; Performing a byte substitution operation on the initial encryption matrix to obtain a secondary encryption matrix; Performing a row shift operation on the secondary encryption matrix to obtain a third encryption matrix; A column obfuscation operation is performed on the tertiary encryption matrix to obtain a binary encryption matrix corresponding to an i-th binary coding matrix among the multiple binary coding matrices.

6. The privacy protection method based on edge computing according to claim 1, characterized in that: Starting from the upper left corner of the extended key matrix, the extended key matrix is ​​divided into a plurality of sub-key matrices in a sequence from left to right and from top to bottom, including: Using the element in the mth row and nth column of the extended key matrix as the first element of the matrix, a sub-key matrix of a specified size is divided, wherein the initial value of m n's is 1; After adding 1 to n, the sub-key matrix is ​​re-divided; When the rightmost element of the divided sub-key matrix corresponds to the same element as the rightmost element of the extended key matrix, n is set to 1 and m is incremented by 1, and the sub-key matrix is ​​re-divided until the rightmost element of the divided sub-key matrix corresponds to the same element as the rightmost element of the extended key matrix, and the bottommost element of the divided sub-key matrix corresponds to the same element, and the sub-key matrix is ​​stopped from being divided to obtain multiple sub-key matrices.

7. The privacy protection method based on edge computing according to claim 1, characterized in that: The size of the binary coding matrix is ​​3×3 or 4×4.

8. A privacy protection device based on edge computing, applied to a user end in an edge computing system, wherein the edge computing system includes a server, a plurality of edge nodes and the user end, characterized in that: include: A receiving unit, used for receiving the encryption key matrix sent by the server; An expansion unit, used for expanding the encryption key matrix to obtain an expanded key matrix; The encoding unit is used to convert the data to be sent into a binary code sequence, and then divide the binary code sequence into code segments of a specified length to obtain a plurality of binary code segments; A first conversion unit is used to convert the multiple binary code segments into binary code matrices in sequence to obtain multiple binary code matrices corresponding to the multiple binary code segments one by one, wherein the size of the binary code matrix is ​​smaller than the size of the extended key matrix; A division unit, used for dividing the extended key matrix into a plurality of sub-key matrices starting from the upper left corner of the extended key matrix in a sequence from left to right and from top to bottom; an encryption unit, configured to encrypt an i-th binary coding matrix among the multiple binary coding matrices by using a k-th subkey matrix among the multiple subkey matrices, to obtain a plurality of binary encryption matrices corresponding to the multiple binary coding matrices one by one, wherein i∈[1,2,3,...,I], I is the total number of binary coding matrices, k=i mod K, and K is the total number of subkey matrices; A second conversion unit is used to convert the multiple binary encryption matrices into binary code sequences to obtain multiple encrypted binary code sequences corresponding to the multiple binary encryption matrices one by one; A third conversion unit, used for sequentially combining the multiple encrypted binary code sequences and converting them into a character sequence to obtain encrypted data corresponding to the data to be sent; A sending unit is used to send the encrypted data to one of the edge nodes.

9. A privacy protection device based on edge computing, characterized in that: It includes a memory, a processor and a transceiver which are communicatively connected in sequence, wherein the memory is used to store a computer program, the transceiver is used to send and receive messages, and the processor is used to read the computer program to execute the edge computing-based privacy protection method as described in any one of claims 1 to 7.

10. A computer program product comprising a computer program or instructions, characterized in that When the computer program or the instruction is executed by a computer, the edge computing-based privacy protection method is implemented as described in any one of claims 1 to 7.

Images