A data cross-border transmission system, method and device

Abstract

The present application relates to the field of cross-border data information security compliance technology, and in particular, to a cross-border data transmission system, method and device. If the first management device receives data to be transmitted uploaded by a user, and determines based on a first compliance review model that the data to be transmitted is data that complies with the data compliance requirements of the first management device's location, the data to be transmitted is forwarded to the second management device as preliminary compliance data. If the second management device receives preliminary compliance data and determines based on a second compliance review model that the preliminary compliance data is data that complies with the data compliance requirements of the second management device's location, the preliminary compliance data is determined as compliant data, and the compliant data is subsequently processed. Management devices at different locations verify the received data according to the corresponding data compliance requirements, ensuring that the data is in compliance with the data compliance requirements of its own location when transmitted by its own device, thereby ensuring the security and compliance of the network data environment.

Description

Technical Field

[0001] The present application relates to the field of cross-border data information security compliance technology, and in particular to a cross-border data transmission system, method and equipment. Background Art

[0002] Against the backdrop of the rapid growth in the scale of automobile exports, some companies have accelerated the construction of overseas factories to achieve localized production and build well-known brands.

[0003] As the level of intelligence and networking in the automotive industry becomes higher and higher, more and more sensors are installed, more and more information data is collected by automobiles, and more and more data is generated by automobiles. These data involve data from all aspects of automobiles, such as research and development, production, sales, operation, after-sales, etc. At the same time, as the number of cars with Internet of Vehicles functions continues to increase, more and more data is generated by automobiles. The data generated by automobiles involves a lot of personal privacy and geographic coordinate information data, such as personal name, mobile phone number, vehicle location, home address, and video footage around the vehicle. Automobile data also involves the national economy and relevant national security. Therefore, the cross-border transmission of automobile data between multiple countries is facing challenges at home and abroad in terms of technical requirements, certification standards, and intellectual property protection. The complexity and differences of regional regulations and certifications are making the cross-border transmission of data by companies from various countries face severe tests.

[0004] Therefore, how to ensure that the data transmitted during cross-border data transmission complies with the regulations of various countries has become an urgent problem to be solved. Summary of the invention

[0005] The embodiments of the present application provide a system, method and device for cross-border data transmission to ensure that the data transmitted during the cross-border data transmission process complies with the standards of various countries.

[0006] The present application provides a cross-border data transmission system, the system comprising: a first management device and a second management device, wherein the first management device is a domestic management device or a foreign management device, and the second management device is a foreign management device or a domestic management device;

[0007] The first management device is configured to, if receiving data to be transmitted uploaded by a user and determining, based on the first compliance review model, that the data to be transmitted is data that complies with the data compliance requirements of the place where the first management device is located, forward the data to be transmitted as preliminary compliance data to the second management device;

[0008] The second management device is used to, if it receives the preliminary compliance data and determines, based on the second compliance review model, that the preliminary compliance data is data that complies with the data compliance requirements of the location where the second management device is located, determine the preliminary compliance data as compliant data and perform subsequent processing on the compliant data.

[0009] Furthermore, the first management device is also used to desensitize the data to be transmitted according to the pre-configured desensitization rules of the place where the first management device is located, if it is determined that the data to be transmitted is data that does not comply with the data compliance requirements of the place where the first management device is located, to obtain first desensitized data, and forward the first desensitized data as the preliminary compliance data to the second management device.

[0010] Furthermore, the first management device is also used to extract features from the first desensitized data to obtain a first feature vector; process the first feature vector according to pre-configured domestic and foreign data processing requirements to obtain second desensitized data, and use the second desensitized data to update the first desensitized data.

[0011] Further, the system also includes: a third-party trusted device;

[0012] The first management device is further used to extract features from the first desensitized data to obtain a second feature vector, and send the second feature vector to the third-party trusted device;

[0013] The third-party trusted device is used to process the second feature vector according to pre-configured domestic and foreign data processing requirements to obtain third desensitized data and send it to the first management device;

[0014] The first management device is further used to update the first desensitized data using the received third desensitized data.

[0015] Furthermore, the third-party trusted device is specifically used to create a trusted execution environment, and in the trusted execution environment, processes the second feature vector according to pre-configured domestic and foreign data processing requirements, obtains third desensitized data and sends it to the first management device.

[0016] Furthermore, the third-party trusted device is also used to destroy the trusted execution environment.

[0017] Furthermore, the second management device is also used to, if it is determined that the initially reviewed compliant data is data that does not comply with the data compliance requirements of the second management device's location, perform desensitization on the initially reviewed compliant data according to the pre-configured desensitization rules of the second management device's location, to obtain fourth desensitized data; determine the fourth desensitized data as compliant data, and perform subsequent processing on the compliant data.

[0018] Furthermore, the system also includes: a cross-chain gateway;

[0019] The first management device and the second management device are further used to obtain recorded operation logs, encrypt the operation logs to obtain encrypted logs, and store the encrypted logs in their corresponding blockchains;

[0020] The cross-chain gateway is used to monitor whether there are new blocks in the blockchains corresponding to the first management device and the second management device; if there are new blocks in any blockchain, the account data of the new blocks are synchronized to other blockchains.

[0021] The present invention provides a method for cross-border data transmission, the method comprising:

[0022] receiving data to be transmitted;

[0023] Based on the third compliance review model, determine whether the data to be transmitted is data that complies with the data compliance requirements of its own place of attribution;

[0024] If so, the data to be transmitted is determined to be compliant data, and subsequent processing is performed on the compliant data.

[0025] Furthermore, the method further comprises:

[0026] If it is determined that the data to be transmitted is data that does not comply with the data compliance requirements, the data to be transmitted is desensitized according to the pre-configured desensitization rules to obtain fifth desensitized data, and the fifth desensitized data is used as the compliant data, and the compliant data is subsequently processed.

[0027] Further, after obtaining the fifth desensitized data and before using the fifth desensitized data as the compliant data, the method further includes:

[0028] Perform feature extraction on the fifth desensitized data to obtain a third feature vector; process the third feature vector according to pre-configured domestic and foreign data processing requirements to obtain sixth desensitized data, and use the sixth desensitized data to update the fifth desensitized data.

[0029] Further, after obtaining the fifth desensitized data and before using the fifth desensitized data as the compliant data, the method further includes:

[0030] Perform feature extraction on the fifth desensitized data to obtain a fourth feature vector, and send the fourth feature vector to a third-party trusted device, so that the third-party trusted device processes the fourth feature vector according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data and feed it back;

[0031] The seventh desensitized data is received, and the fifth desensitized data is updated using the seventh desensitized data.

[0032] Furthermore, the process of the third-party trusted device determining the seventh desensitized data includes:

[0033] A trusted execution environment is created, and in the trusted execution environment, the fourth feature vector is processed according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data.

[0034] Furthermore, the method further comprises:

[0035] Obtain the recorded operation log, and encrypt the operation log to obtain an encrypted log; store the encrypted log in the blockchain corresponding to itself;

[0036] The cross-chain gateway monitors whether there are new blocks in each blockchain; if there are new blocks in any blockchain, the ledger data of the new blocks will be synchronized to other blockchains.

[0037] The present application provides a device for cross-border data transmission, the device comprising:

[0038] A receiving module, used for receiving data to be transmitted;

[0039] A review module, used to determine whether the data to be transmitted is data that complies with the data compliance requirements of its own place of origin based on a third compliance review model;

[0040] The transmission module is used to determine the data to be transmitted as compliant data and perform subsequent processing on the compliant data.

[0041] Furthermore, the device also includes:

[0042] The desensitizing module is used to desensitize the data to be transmitted according to pre-configured desensitizing rules if it is determined that the data to be transmitted is data that does not comply with the data compliance requirements, to obtain fifth desensitized data, and to use the fifth desensitized data as the compliant data, and to perform subsequent processing on the compliant data.

[0043] Furthermore, the device also includes:

[0044] The desensitizing module is used to extract features from the fifth desensitized data to obtain a third feature vector; process the third feature vector according to pre-configured domestic and foreign data processing requirements to obtain sixth desensitized data, and use the sixth desensitized data to update the fifth desensitized data.

[0045] Furthermore, the desensitizing module is further used to perform feature extraction on the fifth desensitized data to obtain a fourth feature vector, and send the fourth feature vector to a third-party trusted device, so that the third-party trusted device processes the fourth feature vector according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data and feedback;

[0046] The receiving module is further used to receive the seventh desensitized data, and use the seventh desensitized data to update the fifth desensitized data.

[0047] Furthermore, the device also includes:

[0048] The evidence storage module is used to obtain the recorded operation log, encrypt the operation log, and obtain the encrypted log; store the encrypted log in the corresponding blockchain; the cross-chain gateway monitors whether there are new blocks in each blockchain; if there are new blocks in any blockchain, the account book data of the new blocks will be synchronized to other blockchains.

[0049] An embodiment of the present application also provides an electronic device, which includes a processor, and the processor is used to implement the steps of any of the above-mentioned cross-border data transmission methods when executing a computer program stored in a memory.

[0050] An embodiment of the present application also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of any of the above-mentioned methods for cross-border data transmission.

[0051] Because in the embodiment of the present application, if the first management device receives data to be transmitted uploaded by the user, and determines based on the first compliance review model that the data to be transmitted is data that complies with the data compliance requirements of the location of the first management device, then the data to be transmitted is forwarded to the second management device as preliminary compliance data. If the second management device receives preliminary compliance data, and determines based on the second compliance review model that the preliminary compliance data is data that complies with the data compliance requirements of the location of the second management device, then the preliminary compliance data is determined as compliant data, and the compliant data is subsequently processed. Management devices at different locations verify the received data according to the corresponding data compliance requirements, ensuring that the data is in compliance with the data compliance requirements of its own location when it is transmitted by its own device, and ensuring the security and compliance of the network data environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] In order to more clearly illustrate the technical solution of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0053] Figure 1 A schematic diagram of a cross-border data transmission system provided in an embodiment of the present application;

[0054] Figure 2 A schematic diagram of a process for transferring overseas data to the country provided in an embodiment of the present application Figure 1 ;

[0055] Figure 3 A schematic diagram of a process for transferring overseas data to the country provided in an embodiment of the present application Figure 2 ;

[0056] Figure 4 A schematic diagram of a cross-border data transmission system architecture provided in an embodiment of the present application;

[0057] Figure 5 A schematic diagram of the initial docking process of a domestic platform provided in an embodiment of the present application;

[0058] Figure 6 A schematic diagram of an initial docking process of an overseas platform provided in an embodiment of the present application;

[0059] Figure 7 A schematic diagram of the initial connection process of a domestic and foreign cross-border management platform provided in an embodiment of the present application;

[0060] Figure 8 A schematic diagram of the functional modules of a cross-border management platform provided in an embodiment of the present application;

[0061] Fig. 9 A schematic diagram of a process flow of cross-border data transmission provided in an embodiment of the present application;

[0062] Fig.10 A schematic diagram of the structure of a cross-border data transmission device provided in an embodiment of the present application;

[0063] Fig.11 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0064] In order to make the purpose, technical solution and advantages of the present application clearer, the technical solution of the embodiment of the present application will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiment is only a part of the embodiment of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field belong to the scope of protection of this application.

[0065] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0066] It should be noted that the terms "including" and "having" and their variations involved in the documents of this application are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0067] The terms "first" and "second" in this document are used for descriptive purposes only and should not be understood as explicitly or implicitly indicating relative importance or implicitly indicating the number of technical features indicated. Therefore, features defined as "first" and "second" may explicitly or implicitly include one or more of the features, and in the description of the embodiments of this application, unless otherwise specified, "plurality" means two or more.

[0068] The word “exemplary” is used hereinafter to mean “serving as an example, example, or illustration.” Any embodiment described as “exemplary” is not necessarily to be construed as preferred or advantageous over other embodiments.

[0069] An embodiment of the present application provides a system, method and device for cross-border data transmission, the system comprising a first management device and a second management device, wherein the first management device is a domestic management device or a foreign management device, and the second management device is a foreign management device or a domestic management device; the first management device is used to forward the data to be transmitted as preliminary compliant data to the second management device if it receives data to be transmitted uploaded by a user and determines, based on a first compliance review model, that the data to be transmitted is data that complies with data compliance requirements of the place where the first management device is located; the second management device is used to determine the preliminary compliant data as compliant data if it receives preliminary compliant data and determines, based on a second compliance review model, that the preliminary compliant data is data that complies with data compliance requirements of the place where the second management device is located, and to perform subsequent processing on the compliant data. Embodiment 1:

[0070] Figure 1 A schematic diagram of a cross-border data transmission system provided in an embodiment of the present application, the system comprising: a first management device 101 and a second management device 102, wherein the first management device 101 is a domestic management device or an overseas management device, and the second management device 102 is an overseas management device or a domestic management device;

[0071] The first management device 101 is configured to, if receiving data to be transmitted uploaded by a user and determining, based on the first compliance review model, that the data to be transmitted is data that complies with the data compliance requirements of the location where the first management device 101 is located, forward the data to be transmitted as preliminary compliance data to the second management device 102;

[0072] The second management device 102 is used to determine the preliminary compliance data as compliant data if it receives the preliminary compliance data and determines, based on the second compliance review model, that the preliminary compliance data is data that complies with the data compliance requirements of the location where the second management device 102 is located, and perform subsequent processing on the compliant data.

[0073] In order to ensure that the data transmitted during the cross-border data transmission is data that complies with the data compliance requirements of the place of attribution, a cross-border data transmission system is provided in the embodiment of the present application, which is used to detect whether the data to be transmitted in any link to be transmitted complies with the data compliance requirements of the corresponding place of attribution. In the embodiment of the present application, the system includes a first management device 101 and a second management device 102, wherein the first management device 101 can be a domestic management device or an overseas management device, and the second management device 102 can be an overseas management device or a domestic management device. That is to say, when the first management device 101 is a domestic management device, the second management device 102 is an overseas management device; when the first management device 101 is an overseas management device, the second management device 102 is a domestic management device. It should be noted that the system may include multiple first management devices 101 and multiple second management devices 102, and data can be transmitted between different management devices. Technical personnel in this field can configure it as needed. When describing the cross-border data transmission system in each embodiment below, the cross-border data transmission system is taken as an example including a first management device 101 and a second management device 102, but this does not mean that the cross-border data transmission system described in the present application only includes a first management device 101 and a second management device 102.

[0074] When data is transmitted across borders, assuming that it involves the transmission between data from country A and country B, the data to be transmitted can be transmitted from country A to country B, or from country B to country A. In other words, the data to be transmitted can be transmitted from within the country to outside the country, or from outside the country to within the country. It should be noted that the domestic and foreign countries described in this application are only relative from the perspective of different countries. If from the perspective of country A, country A can be called domestic and country B can be called foreign, then the management equipment deployed by country A can be called domestic management equipment, and the management equipment deployed by country B can be called foreign management equipment; if from the perspective of country B, country B can be called domestic and country A can be called foreign, then the management equipment deployed by country B can be called domestic management equipment, and the management equipment deployed by country A can be called foreign management equipment.

[0075] When the cross-border data transmission system performs cross-border transmission, the first management device 101 can receive the data to be transmitted uploaded by the user. The user can be any enterprise or individual who needs to transmit data. For example, the user can upload the data to be transmitted through the client, and send the data to be uploaded to the first management device 101, and the first management device 101 will review the compliance of the data to be transmitted.

[0076] If the first management device 101 receives the data to be transmitted, it can determine whether the data to be transmitted is data that complies with the data compliance requirements of the place of the first management device 101 based on the pre-trained compliance review model. If so, it means that the data to be transmitted meets the compliance requirements of the place of origin for data, and the data to be transmitted can be forwarded to the second management device 102 as preliminary compliance data. Among them, the first compliance review model can be a model trained based on the data compliance requirements of the place of origin of the first management device 101. In an embodiment of the present application, policies and regulations on data protection and cross-border data and historical cross-border compliance case data can be collected to form a fine-tuning data set, and the fine-tuning data set is combined with LoRA (Low-Rank Adaptation of LLMs) and prompt engineering technology to fine-tune the open source pre-trained large language model (Large Language Model, LLM), such as ChatGLM3-6B, Llama-3-8B, etc., to obtain the trained first compliance review model. The first compliance review model can be updated autonomously to improve the model recognition capability based on the supplementation and improvement of policies and regulations on data protection, cross-border data, and historical cross-border compliance cases.

[0077] The second management device 102 can receive the preliminary compliance data sent by the first management device 101. When the second management device 102 receives the preliminary compliance data, it means that the first management device that sent the preliminary compliance data believes that the data is compliant data. However, since different countries have different requirements for data compliance, for example, data that is considered compliant by country A may be considered non-compliant by country B. Therefore, in an embodiment of the present application, if the second management device 102 receives the preliminary compliance data, it can determine whether the preliminary compliance data is data that complies with the data compliance requirements of the second management device 102's place of origin based on the second compliance review model. If so, the preliminary compliance data can be determined as compliant data, and the compliant data can be subsequently processed. Exemplarily, the compliance data can be sent to the electronic device of the data recipient, or the compliance data can be stored in a preset storage location for subsequent use. Among them, the second compliance review model can be trained based on the data compliance requirements of the second management device 102's place of origin.

[0078] Because in the embodiment of the present application, if the first management device receives data to be transmitted uploaded by the user, and determines based on the first compliance review model that the data to be transmitted is data that complies with the data compliance requirements of the location of the first management device, then the data to be transmitted is forwarded to the second management device as preliminary compliance data. If the second management device receives preliminary compliance data, and determines based on the second compliance review model that the preliminary compliance data is data that complies with the data compliance requirements of the location of the second management device, then the preliminary compliance data is determined as compliant data, and the compliant data is subsequently processed. Management devices at different locations verify the received data according to the corresponding data compliance requirements, ensuring that the data is in compliance with the data compliance requirements of its own location when it is transmitted by its own device, and ensuring the security and compliance of the network data environment.

[0079] Combine the following Figure 2 Explain the process of cross-border data transmission. Figure 2 A schematic diagram of a process for transferring overseas data to the country provided in an embodiment of the present application Figure 1 . The process of cross-border data transmission mainly involves the domestic automobile enterprise data platform, the domestic cross-border management platform, the overseas cross-border management platform and the overseas automobile enterprise data platform. Among them, the automobile enterprise data platform is deployed on the domestic client, the overseas automobile enterprise data platform is deployed on the overseas client, the domestic cross-border management platform is deployed on the second management device, and the overseas cross-border management platform is deployed on the first management device. In other words, the first management device is an overseas management device, and the second management device is a domestic management device.

[0080] Domestic automobile enterprises can send data requests to the domestic cross-border management platform through the domestic automobile enterprise data platform. The data request may include information such as the data to be applied for, the purpose of the data, and the rules for using the data. After receiving the data request, the domestic cross-border management platform can use the key sent by the overseas cross-border management platform during the initialization phase to encrypt the data request in order to ensure data security, and forward the encrypted data request to the overseas cross-border management platform. In other words, the communication data information between the domestic cross-border management platform and the overseas cross-border management platform can be encrypted and sent using the key pair corresponding to the key system of both parties. After receiving the encrypted data request, the overseas cross-border management platform uses the key sent by the domestic cross-border management platform during the initialization phase to decrypt the encrypted data request, and sends the decrypted data request to the overseas automobile enterprise data platform.

[0081] After receiving the data request, the overseas automobile enterprise data platform obtains the data requested by the domestic automobile enterprise data platform according to the information carried in the data request, and pre-processes the data, such as format conversion, data screening, etc. After pre-processing the data, the overseas automobile enterprise data platform can send a data transmission request and pre-processed data to the overseas cross-border management platform. The pre-processed data is the data to be transmitted described in the above embodiments. The data transmission request may carry all or part of the information in the received data request.

[0082] After the overseas cross-border management platform receives the data transmission request and the data to be transmitted, it can determine whether the data to be transmitted is compliant data based on the first compliance review model that has been trained in advance. Since the degree of compliance requirements for data with different purposes is different, in an embodiment of the present application, the data to be transmitted, the purpose of the data, and the data usage rules can be input into the first compliance review model, so that the first compliance review model compares the data to be transmitted and the data compliance requirements of the corresponding purpose and the corresponding usage rules to obtain the compliance review results. Among them, the data purpose can be public or used, and the data usage rules can be internal research and development use, data promotion use, etc. If it is determined that the data to be transmitted is data that meets the data compliance requirements of the place of attribution of the first management device, the data to be transmitted can be encrypted as preliminary qualified data and sent to the domestic cross-border management platform.

[0083] After receiving the encrypted preliminary qualified data, the domestic cross-border management platform can decrypt the encrypted data to obtain preliminary compliance data. Based on the pre-trained second compliance review model, if the preliminary compliance data is determined to be data that meets the domestic data compliance requirements, the preliminary compliance data can be determined as compliant data, and the compliant data can be encrypted, packaged and transmitted to the domestic automobile enterprise data platform through a trusted communication channel.

[0084] After receiving the compliant data, the domestic automobile enterprise data platform decrypts and stores it, and then applies the compliant data to related businesses. Embodiment 2:

[0085] In order to ensure data security, based on the above embodiments, in the embodiments of the present application, the first management device 101 is also used to desensitize the data to be transmitted according to the pre-configured desensitization rules of the place where the first management device 101 is located, if it is determined that the data to be transmitted is data that does not comply with the data compliance requirements of the place where the first management device 101 is located, to obtain first desensitized data, and forward the first desensitized data as the preliminary compliance data to the second management device 102.

[0086] If it is determined based on the first compliance review model that the data to be transmitted is data that does not comply with the data compliance requirements of the location of the first management device 101, the data to be transmitted can be desensitized according to the pre-configured desensitization rules of the location of the first management device 101 to obtain first desensitized data, and the first desensitized data is forwarded as preliminary compliance data to the second management device 102. In other words, when it is determined based on the first compliance review model that the data to be transmitted is data that does not comply with the data compliance requirements, the data to be processed is desensitized to avoid the outflow of privacy data.

[0087] In order to further ensure data security, on the basis of the above embodiments, in an embodiment of the present application, the first management device 101 is also used to extract features from the first desensitized data to obtain a first feature vector; according to pre-configured domestic and foreign data processing requirements, the first feature vector is processed to obtain second desensitized data, and the first desensitized data is updated using the second desensitized data.

[0088] For some data, it may not be necessary to obtain the original data, but it is only necessary to process the original data and then comprehensively determine a statistical data. Therefore, for some data to be transmitted that do not meet the data compliance requirements, in an embodiment of the present application, after obtaining the first desensitized data, the first desensitized data can be feature extracted to obtain a first feature vector. In an embodiment of the present application, a trained feature extraction model can be used to extract features from the first desensitized data. When the first desensitized data includes multiple sub-data, a first feature vector can be extracted for each sub-data, and of course, multiple sub-data can be extracted to obtain a first feature vector. In other words, the first feature vector can be one or more.

[0089] Since the data to be transmitted domestically and overseas is determined in advance, the requirements for domestic and overseas data processing can be pre-selected and communicated and stored in the electronic device. After the first feature vector is obtained, the first feature vector can be processed according to the pre-configured domestic and overseas data processing requirements to obtain the second desensitized data. Specifically, assuming that the first desensitized data is about credit records, after obtaining the first feature vector of the credit record, the first feature vector corresponding to each credit record can be determined to determine the corresponding credit score, and the credit score can be used as the second desensitized data.

[0090] After the second desensitized data is obtained, the first desensitized data may be updated using the second desensitized data.

[0091] In order to further ensure data security, based on the above embodiments, in the embodiment of the present application, the system further includes: a third-party trusted device 103;

[0092] The first management device 101 is further used to extract features from the first desensitized data to obtain a second feature vector, and send the second feature vector to the third-party trusted device;

[0093] The third-party trusted device 103 is used to process the second feature vector according to the pre-configured domestic and foreign data processing requirements, obtain third desensitized data and send it to the first management device;

[0094] The first management device 101 is further configured to update the first desensitized data using the received third desensitized data.

[0095] Since the processing of the second feature vector according to the pre-configured internal and external data processing requirements requires additional processing of the data, but it is unknown whether the operation performed during the processing is a trusted operation, in order to improve the credibility of the obtained data, in the embodiment of the present application, the system may also include a third-party trusted device. The third-party trusted device can be understood as a device that is trusted by both the first management device and the second management device.

[0096] After obtaining the first desensitized data, the first management device 101 may perform feature extraction on the first desensitized data to obtain a second feature vector, and send the second feature vector to the third-party trusted device 103 .

[0097] After receiving the second feature vector, the third-party trusted device 103 can process the second feature vector according to the pre-configured domestic and foreign data processing requirements to obtain the third desensitized data and send it to the first management device 101. The process of determining the third desensitized data is similar to the process of determining the second desensitized data, which has been described in detail in the above embodiment, and the embodiment of the present application will not repeat this process.

[0098] After receiving the third desensitized data, the first management device 101 can use the third desensitized data to update the first desensitized data, so as to subsequently forward the updated first desensitized data to the second management device 102 as preliminary compliance data.

[0099] In order to further ensure data security, on the basis of the above embodiments, in the embodiment of the present application, the third-party trusted device 103 is specifically used to create a trusted execution environment, and in the trusted execution environment, according to pre-configured domestic and foreign data processing requirements, the second feature vector is processed to obtain third desensitized data and send it to the first management device 101.

[0100] In order to further ensure data security, in the embodiment of the present application, the third-party trusted device 103 can create a trusted execution environment (TEE), and in the trusted execution environment, according to the pre-configured domestic and foreign data processing requirements, process the second feature vector to obtain the third desensitized data and send it to the first management device 101. Among them, the trusted execution environment can be understood as a security area constructed by software and hardware methods, which can ensure that the code and data loaded in the security area are protected in terms of confidentiality and integrity. Its goal is to ensure that a task is executed as expected, to ensure the confidentiality and integrity of the initial state, and the confidentiality and integrity of the runtime state.

[0101] In the embodiment of the present application, only one trusted execution environment can be created in advance, and any second feature vector is processed in the trusted execution environment. It is also possible to create a trusted execution environment specifically for processing each second feature vector after receiving it, and after the trusted execution environment processes the second feature vector and successfully sends the obtained third desensitized data to the first management device 101, the third-party trusted device 103 can also destroy the trusted execution environment to ensure that any third-party device cannot process the trusted execution environment. Embodiment 3:

[0102] In order to further ensure data security, on the basis of the above embodiments, in the embodiment of the present application, the second management device 102 is also used to desensitize the initial review compliance data according to the pre-configured desensitization rules of the second management device 102 location if it is determined that the initial review compliance data is data that does not comply with the data compliance requirements of the second management device's location, to obtain fourth desensitized data; determine the fourth desensitized data as compliant data, and perform subsequent processing on the compliant data.

[0103] Although the preliminary review compliance data has undergone compliance review by the first management device 101, it is possible that due to the different data compliance requirements in different countries, the preliminary review qualified data that has passed the review by the first management device 101 may become unqualified data when reviewed by the second management device 102. Therefore, in an embodiment of the present application, if the second management device 102 determines that the preliminary review compliance data is data that does not meet the data compliance requirements of the second management device 102's location, the preliminary review compliance data is desensitized according to the pre-configured desensitization rules of the second management device 102's location to obtain fourth desensitized data. The fourth desensitized data is determined as compliant data, and the compliant data is subsequently processed.

[0104] Combine the following Figure 3Explain the process of cross-border data transmission. Figure 3 A schematic diagram of a process for transferring overseas data to the country provided in an embodiment of the present application Figure 2 . The process of cross-border data transmission mainly involves domestic automobile enterprise data platforms, domestic cross-border management platforms, third-party trusted devices, overseas cross-border management platforms and overseas automobile enterprise data platforms. Among them, the automobile enterprise data platform is deployed on the domestic client, the overseas automobile enterprise data platform is deployed on the overseas client, the domestic cross-border management platform is deployed on the second management device, and the overseas cross-border management platform is deployed on the first management device. In other words, the first management device is an overseas management device and the second management device is a domestic management device.

[0105] Domestic automobile enterprises can send data requests to the domestic cross-border management platform through the domestic automobile enterprise data platform. The data request may include information such as the data to be applied for, the purpose of the data, and the rules for using the data. After receiving the data request, the domestic cross-border management platform can use the key sent by the overseas cross-border management platform during the initialization phase to encrypt the data request in order to ensure data security, and forward the encrypted data request to the overseas cross-border management platform. After receiving the encrypted data request, the overseas cross-border management platform uses the key sent by the domestic cross-border management platform during the initialization phase to decrypt the encrypted data request, and sends the decrypted data request to the overseas automobile enterprise data platform.

[0106] After receiving the data request, the overseas automobile enterprise data platform obtains the data requested by the domestic automobile enterprise data platform based on the information carried in the data request. After preprocessing the data, the overseas automobile enterprise data platform can send a data transmission request and preprocessed data to the overseas cross-border management platform. The preprocessed data is the data to be transmitted as described in the above embodiments.

[0107] After receiving the data transmission request and the data to be transmitted, the overseas cross-border management platform can determine whether the data to be transmitted is compliant data based on the first compliance review model that has been pre-trained. If it is determined that the data to be transmitted is data that does not meet the data compliance requirements of the first management device's place of ownership, the data to be transmitted may not be allowed to leave the country. The data to be transmitted can be desensitized according to the pre-configured desensitization rules to obtain the first desensitized data, and the first desensitized data is feature extracted to obtain the second feature vector. The second feature vector is encrypted and transmitted to a third-party trusted device, and the third-party trusted device can create the trusted execution environment required this time, and process the second feature vector in the trust execution environment according to the pre-configured domestic and foreign data processing requirements, obtain the third desensitized data and send it to the overseas cross-border management platform. Among them, the pre-configured domestic and foreign data processing requirements can be stored in the third-party trusted device, or they can be sent to the third-party trusted device by the overseas cross-border management platform together with the second feature vector. After the third desensitized data is successfully sent to the overseas cross-border management platform, the trusted execution environment created this time is destroyed.

[0108] After receiving the third desensitized data, the overseas cross-border management platform uses the key of the domestic cross-border management platform to encrypt the third desensitized data, and transmits the encrypted third desensitized data to the domestic cross-border management platform as preliminary compliance data.

[0109] After receiving the encrypted preliminary qualified data, the domestic cross-border management platform can decrypt the encrypted data to obtain preliminary compliance data. Based on the pre-trained second compliance review model, if it is determined that the preliminary compliance data is data that does not meet the domestic data compliance requirements, the preliminary compliance data can be desensitized according to the pre-configured desensitization rules to obtain fourth desensitized data. The fourth desensitized data is encrypted, packaged and transmitted to the domestic automobile enterprise data platform through a trusted communication channel as compliance data.

[0110] After receiving the compliant data, the domestic automobile enterprise data platform will decrypt it and then apply the compliant data to related businesses.

[0111] In an embodiment of the present application, features are extracted from non-compliant data usage rules to obtain a set of feature vectors of the original data. The feature vector set data is processed in a trusted execution environment of a third-party trusted device in accordance with domestic and foreign data processing requirements, and the calculation results are ultimately transmitted to the user, thereby maximizing the value of data circulation. Embodiment 4:

[0112] In order to facilitate the control of cross-border data transmission, based on the above embodiments, in the embodiment of the present application, the system further includes: a cross-chain gateway 104;

[0113] The first management device 101 and the second management device 102 are further used to obtain recorded operation logs, encrypt the operation logs to obtain encrypted logs, and store the encrypted logs in their corresponding blockchains;

[0114] The cross-chain gateway 104 is used to monitor whether there are new blocks in the blockchains corresponding to the first management device 101 and the second management device 102; if there are new blocks in any blockchain, the account data of the new blocks are synchronized to other blockchains.

[0115] In order to facilitate the control of cross-border data transmission, in the embodiment of the present application, the data of the core processing link of the first management device 101 and the second management device 102 in the cross-border data transmission process can be stored. Due to the characteristics of the blockchain, in the embodiment of the present application, each management device can be configured with a blockchain corresponding to itself. In the embodiment of the present application, the first management device 101 and the second management device 102 can record operation logs during data transmission. When the evidence triggering opportunity is met, the recorded operation log can be obtained, and the operation log can be encrypted to obtain an encrypted log. After obtaining the encrypted log, the encrypted log is stored in the blockchain corresponding to itself. Among them, the technicians in this field can configure the evidence triggering opportunity as needed, for example, periodically storing the operation log, or storing it after processing and transmitting a certain data. When encrypting the operation log, the operation log can be encrypted as a whole, or each data recorded in the operation log can be encrypted separately, for example, determining the hash value of the data request recorded in the operation log, determining the hash value of the data to be transmitted, and the hash value of other data resources involved in the data transmission process.

[0116] Since the blockchain corresponding to each management device records its own operation log, in order for the corresponding management device to be able to trace back to the complete operation of a certain data when needed, in the embodiment of the present application, the data in the blockchain corresponding to the first management device 101 and the data in the blockchain corresponding to the second management device 102 can also be synchronized, so that each blockchain stores a complete operation log during the cross-border data transmission process. In order to achieve data synchronization, in the embodiment of the present application, a cross-chain gateway 104 can also be configured in the cross-border data transmission system, and the cross-chain transmission of data can be achieved through the cross-chain gateway 104. In the embodiment of the present application, the cross-chain gateway 104 can monitor whether there are new blocks in the blockchains corresponding to the first management device 101 and the second management device 102, that is, determine whether new data is added to each blockchain. If it is determined that there are new blocks in any blockchain, the account book data of the new blocks can be obtained, and the account book data can be synchronized to other blockchains. In a possible implementation, after obtaining the account book data, the cross-chain gateway 104 can conduct a compliance review on the account book data to ensure the security of cross-chain data transmission.

[0117] In the embodiment of the present application, cross-chain technology is used to connect domestic and overseas data storage blockchain networks to achieve full-process traceability supervision based on the cross-border flow of automobile data. Embodiment 5:

[0118] Combine the following Figure 4 Provide specific information on the cross-border data transmission system. Figure 4 A schematic diagram of a data cross-border transmission system architecture provided in an embodiment of the present application is shown in FIG. Figure 4 As shown, the system mainly consists of 6 parts, namely, domestic automobile enterprise data platform, domestic cross-border management platform, overseas cross-border management platform, third-party trusted equipment, data cross-border evidence storage network and overseas automobile enterprise data platform. This application embodiment takes the data transmission of overseas production bases of domestic automobile enterprises to the domestic as an example to illustrate the cross-border data transmission process.

[0119] Figure 4The domestic automobile enterprise data platform A, domestic automobile enterprise data platform B, foreign automobile enterprise domestic production base data platform A and foreign automobile enterprise domestic production base data platform B shown in can be deployed on different domestic clients. In the embodiment of the present application, these platforms are collectively referred to as domestic automobile enterprise data platforms. The domestic automobile enterprise overseas production base data platform A, domestic automobile enterprise overseas production base data platform B, foreign automobile enterprise data platform A and foreign automobile enterprise data platform B can be deployed on different overseas clients. In the embodiment of the present application, these platforms are collectively referred to as overseas automobile enterprise data platforms. The domestic cross-border management platform is deployed on the second management device, and the overseas cross-border management platform is deployed on the first management device. In other words, the first management device is an overseas management device, and the second management device is a domestic management device.

[0120] In a possible implementation, data may be transmitted across borders in the following manner:

[0121] The overseas automobile enterprise data platform transmits the pre-processed data to be transmitted to the overseas cross-border management platform. The data to be transmitted includes but is not limited to API interfaces, pictures, videos, data sets, etc.

[0122] The overseas cross-border management platform receives the data to be transmitted across borders, and calls the first compliance review model through the data compliance module to conduct compliance review on the data to be transmitted across borders. Among them, the first compliance review model is a model fine-tuned using overseas data compliance policy data. For data to be transmitted that meets overseas data compliance requirements, the data to be transmitted can be forwarded to the domestic cross-border management platform as preliminary compliance data.

[0123] For data to be transmitted that does not meet data compliance requirements, the data to be transmitted can be desensitized, and then the feature vector set of the desensitized data to be transmitted can be extracted according to the configured feature extraction rules, and then the feature vector set can be transmitted to a third-party trusted device for processing, and the processed data can be encrypted and transmitted to the overseas cross-border management platform. The overseas cross-border management platform will then send the received data as preliminary compliance data to the domestic cross-border management platform.

[0124] After receiving the preliminary compliance data, the domestic cross-border management platform calls the second compliance review model through the data compliance module to conduct a compliance review on the preliminary compliance data that needs to enter the country. Among them, the second compliance review model is a model that is fine-tuned using domestic data compliance policy data. For preliminary compliance data that meets domestic data compliance requirements, it can be directly forwarded to the domestic automobile enterprise data platform. For preliminary compliance data that does not meet domestic data compliance requirements, the privacy computing module can be used to desensitize the non-compliant data, and then the processed entry data can be transmitted to the domestic automobile enterprise data platform.

[0125] After receiving the data, the domestic automobile enterprise data platform processes it internally to meet business needs.

[0126] The domestic cross-border management platform and the overseas cross-border management platform record the operation logs, and encrypt the operation logs and store them in the cross-border data evidence network, which can be a blockchain.

[0127] In the embodiment of the present application, initialization may be performed to ensure smooth communication between the domestic automobile enterprise data platform and the domestic cross-border management platform. Figure 5 A schematic diagram of the initial docking process of a domestic platform provided in an embodiment of the present application is as follows: Figure 5 As shown, automobile enterprises upload information through the domestic automobile enterprise data platform and register platform accounts on the domestic cross-border management platform. The domestic cross-border management platform conducts platform review and authentication on the registration request. After the review and authentication is passed, a communication key is assigned to the automobile enterprise and sent to the domestic automobile enterprise data platform. The domestic automobile enterprise data platform interfaces with the domestic cross-border management platform through the communication key, establishes a secure communication channel, and performs initial communication verification. After the verification is passed, the data transmission private key assigned to the automobile enterprise data platform by the cross-border data platform is obtained through the secure communication channel. The data transmission private key is used for data encryption processing in the subsequent transmission process.

[0128] Similarly, in order to ensure smooth communication between the overseas automobile enterprise data platform and the overseas cross-border management platform, initialization can be performed. Figure 6 A schematic diagram of an initial docking process of an overseas platform provided in an embodiment of the present application, such as Figure 6 As shown, automobile enterprises upload information through overseas automobile enterprise data platforms and register platform accounts on overseas cross-border management platforms. Overseas cross-border management platforms conduct platform review and authentication on registration requests. After the review and authentication is passed, communication keys are allocated to the automobile enterprises and sent to overseas automobile enterprise data platforms. Overseas automobile enterprise data platforms interface with domestic cross-border management platforms through communication keys, establish secure communication channels, and perform initial communication verification. After verification, they obtain data transmission private keys allocated by cross-border data platforms to automobile enterprise data platforms through secure communication channels. The data transmission private keys are used for data encryption processing in subsequent transmission processes.

[0129] In order to ensure smooth communication between the domestic cross-border management platform and the overseas cross-border management platform, initialization is required. Figure 7 A schematic diagram of the initial connection process of a domestic and foreign cross-border management platform provided in an embodiment of the present application. The cross-border management platform is mainly divided into two stages in the initialization phase: the platform basic function initialization phase and the platform mutual authentication phase.

[0130] The initialization phase of the platform basic functions mainly includes the following steps:

[0131] Key system configuration: Configure the corresponding encryption system according to the encryption requirements of the country where the platform is deployed. For example, China configures national encryption systems such as SM2, SM3, etc.; foreign countries use RSA, DES, etc.

[0132] Third-party trusted device configuration: configure third-party trusted device information and establish an initial communication connection with the third-party trusted device. The third-party trusted device can be deployed in China or abroad.

[0133] Compliance review model fine-tuning deployment: By collecting the corresponding local data protection, data cross-border policies and regulations, and historical cross-border compliance case data to form a fine-tuning data set, the pre-trained LLM model is fine-tuned using the fine-tuning data set combined with LoRA and prompt word engineering technology to obtain the trained compliance review model, and then the compliance review model is deployed and loaded into the model service module. Among them, the compliance review model can be updated autonomously to improve the model recognition ability based on the corresponding local data protection, data cross-border policies and regulations, and historical cross-border compliance cases.

[0134] The platform mutual authentication phase mainly includes the following steps:

[0135] The domestic cross-border management platform sends a connection request to the overseas cross-border management platform, and the overseas cross-border management platform establishes a secure communication channel with the domestic cross-border management platform after receiving the request. Of course, the overseas cross-border management platform can also send a connection request to the domestic cross-border management platform.

[0136] The domestic cross-border management platform generates an authentication key for the overseas cross-border management platform based on the domestic key system, and transmits the authentication key to the overseas cross-border management platform through a secure communication channel. In the same way, the overseas cross-border management platform generates an authentication key with the domestic cross-border management platform based on the overseas key system, and transmits the authentication key to the domestic cross-border management platform through a secure communication channel.

[0137] The domestic cross-border data evidence network and the overseas cross-border data evidence network are interconnected through the cross-chain gateway. For existing evidence blockchains, such as Changan Chain, Fabric, EOS (Enterprise Operation System), Ethereum, BTC, etc., the cross-chain gateway can be directly configured for interconnection to achieve synchronization of domestic and overseas evidence data. In order to ensure smooth data transmission, the domestic cross-border management platform can be initialized and connected with the domestic cross-border data evidence platform network, and the overseas cross-border management platform can be initialized and connected with the overseas cross-border data evidence platform network.

[0138] After initialization is completed, test data can be used for data transmission to verify the transmission channel.

[0139] In order to facilitate understanding of the embodiments of the present application, the cross-border management platform deployed in any management device is divided into multiple modules according to functions. Figure 8 A functional module diagram of a domestic / foreign cross-border management platform provided in an embodiment of the present application, such as Figure 8 As shown, the domestic / foreign cross-border management platform can be divided into the following according to its functions: data receiving module, access control module, key management module, data compliance module, data encryption and decryption module, privacy computing module, model service module, data exchange module, data supervision module, and data storage module.

[0140] The data receiving module is mainly used to receive request data from domestic / foreign automobile enterprise data management platforms.

[0141] The access control module is mainly used to manage the authority management of the entire platform and verify the legitimacy of requests in the data receiving module.

[0142] The key management module is mainly used to achieve mutual recognition of domestic and foreign key systems and platform key management, including key generation and transmission.

[0143] The data compliance module is mainly used to implement compliance checks on cross-border data. By choosing the country in which you are located, you can choose to call the data compliance model in the model service module. The large model can analyze the data content and output compliance processing rules to ensure the security of data during cross-border transmission.

[0144] The data encryption and decryption module is mainly used to encrypt and decrypt data requests in combination with the key management module and the access control module.

[0145] The privacy computing module is mainly used to achieve data desensitization and anonymization according to the compliance processing rules output by the data compliance module. It also calls computing models such as homomorphic encryption and multi-party secure computing in the model service module to ensure that sensitive information will not be leaked during data transmission and processing.

[0146] The model service module is mainly used for fine-tuning and training of compliance models and calling of various models.

[0147] The data exchange module is mainly used for secure communication and data exchange with overseas / domestic automobile enterprise data management platforms or third-party trusted devices.

[0148] The data supervision module is mainly used to implement the security audit supervision of the platform and the circulation supervision of cross-border automobile data. The circulation supervision data of cross-border automobile data comes from the overseas circulation data obtained by the data existence module from the cross-border data evidence platform.

[0149] The data storage module is mainly used to realize the data storage of the core processing links of cross-border data by the data management platforms of domestic / overseas automobile enterprises.

[0150] In the embodiment of the present application, for the core processes in the cross-border process of automobile data, such as data acquisition information, data compliance review results, creation records of trusted execution environments in third-party trusted devices, third-party desensitized data obtained through processing in accordance with domestic and foreign data processing requirements, etc., the data storage module of the domestic / foreign cross-border management platform can realize data flow link combing by combining Trace tracking technology, and send the core link information to the corresponding cross-border data storage network.

[0151] For the construction of a cross-border data evidence network, when using a public chain, such as EOS, ETH, etc., it is only necessary to deploy corresponding nodes at home and abroad to form a evidence network, and no cross-chain service is needed to connect them; when using a consortium chain, such as Fabric, Chang'an Chain, etc., since each country has its own blockchain infrastructure, in order to implement the Fangbian solution, in the embodiment of the present application, a evidence network suitable for the country can be built at home and abroad, and then heterogeneous evidence networks can be connected through cross-chain services to realize the synchronous sharing of evidence data between heterogeneous networks.

[0152] The domestic / foreign cross-border management platform uses the data supervision module to analyze the link information of cross-border data between the modules of the platform, and combines the evidence data in the evidence storage network to analyze and form a cross-border automobile data circulation map, which is used to supervise the compliance, security and circulation of the entire cross-border automobile data chain.

[0153] This application realizes the adaptation of key systems of different countries and the ability to realize encrypted cross-border transmission of data based on different key systems. It realizes intelligent compliance review of cross-border data by calling the big model through the model service module, and realizes privacy protection and encrypted transmission of cross-border data through the privacy computing module, ensuring that sensitive information will not be leaked during data transmission and processing.

[0154] The cross-border data transmission system provided in this application, through big model technology, combined with privacy computing, trusted environment and cross-chain technology, enables automobile data to be securely transmitted across borders between multiple countries. At the same time, it solves the problems of data compliance detection, secure transmission, cross-border circulation supervision, etc. in the cross-border process of automobile data. It conducts intelligent management, review, compliance assessment and secure transmission of all automobile data in cross-border circulation between different countries, ensuring that outbound automobile data meets the data entry and exit requirements of different countries.

[0155] It should be noted that the cross-border data transmission system described in the present application can be applied to the implementation of cross-border circulation of automobile data between different countries. Of course, it can also be applied to cross-border data transmission in other fields, not just limited to the above examples. Embodiment 6:

[0156] Based on the same inventive concept, the present application embodiment provides a method for cross-border data transmission. Fig. 9 A schematic diagram of a process flow of cross-border data transmission provided in an embodiment of the present application, such as Fig. 9 As shown, the process includes the following steps:

[0157] S901: Receive data to be transmitted, and determine whether the data to be transmitted complies with data compliance requirements of its own location based on a third compliance review model.

[0158] The data compliance review method provided in this application is applied to an electronic device, which may be a management device described in any of the above embodiments, such as a domestic management device or an overseas management device. Specifically, the management device may be a server, a PC, etc.

[0159] S902: If yes, the data to be transmitted is determined to be compliant data, and the compliant data is subsequently processed.

[0160] In a possible implementation, the method further includes:

[0161] If it is determined that the data to be transmitted is data that does not comply with the data compliance requirements, the data to be transmitted is desensitized according to the pre-configured desensitization rules to obtain fifth desensitized data, and the fifth desensitized data is used as the compliant data, and the compliant data is subsequently processed.

[0162] In a possible implementation, after obtaining the fifth desensitized data and before using the fifth desensitized data as the compliant data, the method further includes:

[0163] Perform feature extraction on the fifth desensitized data to obtain a third feature vector; process the third feature vector according to pre-configured domestic and foreign data processing requirements to obtain sixth desensitized data, and use the sixth desensitized data to update the fifth desensitized data.

[0164] In a possible implementation, after obtaining the fifth desensitized data and before using the fifth desensitized data as the compliant data, the method further includes:

[0165] Perform feature extraction on the fifth desensitized data to obtain a fourth feature vector, and send the fourth feature vector to a third-party trusted device, so that the third-party trusted device processes the fourth feature vector according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data and feed it back;

[0166] The seventh desensitized data is received, and the fifth desensitized data is updated using the seventh desensitized data.

[0167] In a possible implementation manner, the process of the third-party trusted device determining the seventh desensitized data includes:

[0168] A trusted execution environment is created, and in the trusted execution environment, the fourth feature vector is processed according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data.

[0169] In the embodiment of the present application, the third-party trusted device may also be a virtual device created in the electronic device.

[0170] In a possible implementation, the method further includes:

[0171] Obtain the recorded operation log, and encrypt the operation log to obtain an encrypted log; store the encrypted log in the blockchain corresponding to itself;

[0172] The cross-chain gateway monitors whether there are new blocks in each blockchain; if there are new blocks in any blockchain, the ledger data of the new blocks will be synchronized to other blockchains.

[0173] Since the principle of solving the problem by the above electronic device is similar to the principle of any management device in the cross-border data transmission system, the implementation of the above cross-border data transmission method can refer to the embodiment of the method, and the repeated parts will not be repeated. Embodiment 7:

[0174] Based on the same inventive concept, the embodiment of the present application provides a cross-border data transmission device. Fig.10 For a schematic diagram of a cross-border data transmission device provided in an embodiment of the present application, please refer to Fig.10 , the device comprises:

[0175] Receiving module 1001, used for receiving data to be transmitted;

[0176] A review module 1002 is used to determine whether the data to be transmitted is data that complies with the data compliance requirements of its own place of origin based on a third compliance review model;

[0177] The transmission module 1003 is configured to determine the data to be transmitted as compliant data and perform subsequent processing on the compliant data.

[0178] In a possible implementation, the device further includes:

[0179] The desensitizing module 1004 is used to desensitize the data to be transmitted according to pre-configured desensitizing rules if it is determined that the data to be transmitted is data that does not comply with the data compliance requirements, to obtain fifth desensitized data, and to use the fifth desensitized data as the compliant data, and to perform subsequent processing on the compliant data.

[0180] In a possible implementation, the device further includes:

[0181] The desensitizing module 1004 is used to extract features from the fifth desensitized data to obtain a third feature vector; process the third feature vector according to pre-configured domestic and foreign data processing requirements to obtain sixth desensitized data, and use the sixth desensitized data to update the fifth desensitized data.

[0182] In a possible implementation, the desensitizing module 1004 is further used to perform feature extraction on the fifth desensitized data to obtain a fourth feature vector, and send the fourth feature vector to a third-party trusted device, so that the third-party trusted device processes the fourth feature vector according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data and feedback;

[0183] The receiving module 1001 is further used to receive the seventh desensitized data, and use the seventh desensitized data to update the fifth desensitized data.

[0184] In a possible implementation, the device further includes:

[0185] The evidence storage module 1005 is used to obtain the recorded operation log, encrypt the operation log, and obtain the encrypted log; store the encrypted log in the corresponding blockchain; the cross-chain gateway monitors whether there are new blocks in each blockchain; if there are new blocks in any blockchain, the account book data of the new blocks will be synchronized to other blockchains. Embodiment 8:

[0186] Based on the same inventive concept, an embodiment of the present application provides an electronic device, which can implement the steps of the cross-border data transmission method discussed above. Fig.11 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application is shown in FIG. Fig.11As shown, it includes: a processor 1101, a communication interface 1102, a memory 1103 and a communication bus 1104, wherein the processor 1101, the communication interface 1102, and the memory 1103 communicate with each other through the communication bus 1104;

[0187] The memory 1103 stores a computer program. When the program is executed by the processor 1101, the processor 1101 performs the following steps:

[0188] receiving data to be transmitted;

[0189] Based on the third compliance review model, determine whether the data to be transmitted is data that complies with the data compliance requirements of its own place of attribution;

[0190] If so, the data to be transmitted is determined to be compliant data, and subsequent processing is performed on the compliant data.

[0191] In a possible implementation, the method further includes:

[0192] If it is determined that the data to be transmitted is data that does not comply with the data compliance requirements, the data to be transmitted is desensitized according to the pre-configured desensitization rules to obtain fifth desensitized data, and the fifth desensitized data is used as the compliant data, and the compliant data is subsequently processed.

[0193] In a possible implementation, after obtaining the fifth desensitized data and before using the fifth desensitized data as the compliant data, the method further includes:

[0194] Perform feature extraction on the fifth desensitized data to obtain a third feature vector; process the third feature vector according to pre-configured domestic and foreign data processing requirements to obtain sixth desensitized data, and use the sixth desensitized data to update the fifth desensitized data.

[0195] In a possible implementation, after obtaining the fifth desensitized data and before using the fifth desensitized data as the compliant data, the method further includes:

[0196] Perform feature extraction on the fifth desensitized data to obtain a fourth feature vector, and send the fourth feature vector to a third-party trusted device, so that the third-party trusted device processes the fourth feature vector according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data and feed it back;

[0197] The seventh desensitized data is received, and the fifth desensitized data is updated using the seventh desensitized data.

[0198] In a possible implementation manner, the process of the third-party trusted device determining the seventh desensitized data includes:

[0199] A trusted execution environment is created, and in the trusted execution environment, the fourth feature vector is processed according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data.

[0200] In a possible implementation, the method further includes:

[0201] Obtain the recorded operation log, and encrypt the operation log to obtain an encrypted log; store the encrypted log in the blockchain corresponding to itself;

[0202] The cross-chain gateway monitors whether there are new blocks in each blockchain; if there are new blocks in any blockchain, the ledger data of the new blocks will be synchronized to other blockchains.

[0203] Since the principle of solving the problem by the above electronic device is similar to the method for cross-border data transmission, the implementation of the above electronic device can refer to the embodiment of the method, and the repeated parts will not be repeated.

[0204] The communication bus mentioned in the above electronic device can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus. The communication interface 1102 is used for communication between the above electronic device and other devices. The memory may include a random access memory (RAM) and may also include a non-volatile memory (NVM), such as at least one disk storage. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

[0205] The above-mentioned processor can be a general-purpose processor, including a central processing unit, a network processor (NP), etc.; it can also be a digital signal processing processor (DSP), an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, etc. Embodiment 9:

[0206] Based on the same inventive concept, an embodiment of the present application provides a computer-readable storage medium, in which a computer program executable by a processor is stored, and when the program runs on the processor, the processor executes any of the cross-border data transmission methods discussed above. Since the principle of solving the problem by the above-mentioned computer-readable storage medium is similar to that of the cross-border data transmission method, the implementation of the above-mentioned computer-readable storage medium can refer to the implementation of the method, and the repeated parts will not be repeated.

[0207] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0208] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the present application. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0209] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0210] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0211] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A cross-border data transmission system, characterized in that: The system includes: a first management device, a second management device and a third-party trusted device; wherein the first management device is a domestic management device or an overseas management device, and the second management device is an overseas management device or a domestic management device; The first management device is configured to, if receiving data to be transmitted uploaded by a user and determining, based on the first compliance review model, that the data to be transmitted is data that complies with the data compliance requirements of the place where the first management device is located, forward the data to be transmitted as preliminary compliance data to the second management device; The second management device is configured to, if receiving the preliminary review compliance data and determining, based on the second compliance review model, that the preliminary review compliance data is data that complies with the data compliance requirements of the location where the second management device is located, determine the preliminary review compliance data as compliance data and perform subsequent processing on the compliance data; The first management device is further configured to, if it is determined that the data to be transmitted is data that does not comply with the data compliance requirements of the place where the first management device is located, desensitize the data to be transmitted according to the pre-configured desensitization rules of the place where the first management device is located to obtain first desensitized data; extract features from the first desensitized data to obtain a second feature vector, and send the second feature vector to the third-party trusted device; The third-party trusted device is used to process the second feature vector according to pre-configured domestic and foreign data processing requirements to obtain third desensitized data and send it to the first management device; The first management device is further configured to update the first desensitized data using the received third desensitized data; and forward the first desensitized data as the initial review compliance data to the second management device; The third-party trusted device is specifically used to create a trusted execution environment, and in the trusted execution environment, processes the second feature vector according to pre-configured domestic and foreign data processing requirements, obtains third desensitized data and sends it to the first management device.

2. The system according to claim 1, characterized in that The first management device is also used to extract features from the first desensitized data to obtain a first feature vector; process the first feature vector according to pre-configured domestic and foreign data processing requirements to obtain second desensitized data, and use the second desensitized data to update the first desensitized data.

3. The system according to claim 1, characterized in that The third-party trusted device is also used to destroy the trusted execution environment.

4. The system according to claim 1, characterized in that The second management device is further configured to, if it is determined that the initially reviewed compliance data is data that does not comply with the data compliance requirements of the second management device's location, perform desensitization processing on the initially reviewed compliance data according to a pre-configured desensitization rule of the second management device's location to obtain fourth desensitized data; The fourth desensitized data is determined as compliant data, and subsequent processing is performed on the compliant data.

5. The system according to claim 1, characterized in that The system also includes: a cross-chain gateway; The first management device and the second management device are further used to obtain recorded operation logs, encrypt the operation logs to obtain encrypted logs, and store the encrypted logs in their corresponding blockchains; The cross-chain gateway is used to monitor whether there are new blocks in the blockchains corresponding to the first management device and the second management device; if there are new blocks in any blockchain, the account data of the new blocks are synchronized to other blockchains.

6. A method for cross-border data transmission, characterized in that: The method comprises: receiving data to be transmitted; Based on the third compliance review model, determine whether the data to be transmitted is data that complies with the data compliance requirements of its own place of attribution; If so, determining the data to be transmitted as compliant data, and performing subsequent processing on the compliant data; If it is determined that the data to be transmitted is data that does not meet the data compliance requirement, desensitizing the data to be transmitted according to a pre-configured desensitization rule to obtain fifth desensitized data; Perform feature extraction on the fifth desensitized data to obtain a fourth feature vector, and send the fourth feature vector to a third-party trusted device, so that the third-party trusted device processes the fourth feature vector according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data and feed it back; receiving the seventh desensitized data, and using the seventh desensitized data to update the fifth desensitized data, taking the fifth desensitized data as the compliant data, and performing subsequent processing on the compliant data; The process of the third-party trusted device determining the seventh desensitized data includes: A trusted execution environment is created, and in the trusted execution environment, the fourth feature vector is processed according to pre-configured domestic and foreign data processing requirements to obtain seventh desensitized data.

7. An electronic device, characterized in that: The electronic device includes a processor, and the processor is used to implement the steps of the cross-border data transmission method as claimed in claim 6 when executing a computer program stored in a memory.

Images