Information processing method, device and system, electronic device, storage medium and product

Abstract

The invention relates to the technical field of communication, and particularly provides an information processing method, equipment and system, electronic equipment, a storage medium and a product. The cloud server performs multi-key homomorphic encryption processing and proxy re-encryption processing on a plurality of pieces of first information from a plurality of terminals, and can obtain a second intermediate processing result encrypted by using a public key of an initiating device based on the first information encrypted by a private key of each terminal, so that after the second intermediate processing result is sent to the initiating device, the second intermediate processing result is sent to the initiating device, and the security of the initiating device is improved. And the initiating device can decrypt by using a private key of the initiating device to obtain a final result. In conclusion, according to the technical scheme provided by the invention, the security processing of the information can be realized on the premise of ensuring the privacy security of multiple parties; furthermore, when the scheme is applied to a general sensing positioning scene, safe and accurate positioning of the positioned target can be realized on the premise of ensuring the position privacy of the positioning task participating terminal and the position privacy of the positioned target.

Description

Technical Field

[0001] The present disclosure relates to the field of communication technology, and in particular to an information processing method and device, a system, an electronic device, a storage medium and a product. Background Art

[0002] Synaesthesia fusion is also called Integrated Sensing and Communication (ISAC), which realizes communication and perception functions at the same time by sharing the same spectrum and hardware. Synaesthesia fusion technology is also used in wireless positioning scenarios. In related wireless positioning technologies, users often receive signals from reference nodes to obtain measurement information and estimate their own positions based on the obtained information, or users send the obtained information to the server, which executes the position estimation algorithm. In other words, the existing wireless synaesthesia positioning technology can locate the target position by relying on the known reference node position and the distance measurement value from the reference point to the target.

[0003] However, the user's location information and movement trajectory may be exposed during the interactive calculation process, and the disclosure of the reference point location information will also leak the privacy of the communication device holder. In summary, in the prior art, wireless telepathic positioning technology has a large privacy and security problem. Summary of the invention

[0004] The present disclosure provides an information processing method and device, a system, an electronic device, a storage medium and a product, which are used to realize secure processing of information under the premise of ensuring the privacy security of multiple parties. Furthermore, when the present solution is applied to the synaesthesia positioning scenario, it can also realize secure and accurate positioning of the located target under the premise of ensuring the location privacy of the terminals participating in the positioning task and the location privacy of the located target.

[0005] According to one aspect of the present disclosure, there is provided an information processing method, which is applied to a cloud server, and the method includes:

[0006] Receiving first information from a plurality of terminals, wherein the first information is obtained by encrypting second information using a private key of the terminal;

[0007] Performing multi-key homomorphic encryption processing on each of the first information to obtain a first intermediate result;

[0008] Based on the public key of the initiating device, perform proxy re-encryption processing on the first intermediate result to obtain a second intermediate result;

[0009] The second intermediate result is sent to the initiating device.

[0010] According to another aspect of the present disclosure, another information processing method is provided, which is applied to an initiating device, and the method includes:

[0011] receiving a second intermediate result from the cloud server;

[0012] Decrypting the second intermediate result using the private key of the initiating device;

[0013] Among them, the second intermediate result is obtained by proxy re-encrypting the first intermediate result based on the public key of the initiating device, the first intermediate result is obtained based on multi-key homomorphic encryption of multiple first information, and the first information is obtained by encrypting the second information using the private key of the terminal.

[0014] According to another aspect of the present disclosure, another information processing method is provided, which is applied to a terminal, and the method includes:

[0015] Encrypting the second information using the private key of the terminal to obtain the first information;

[0016] The first information is sent to a cloud server; wherein the first information is used by the cloud service to perform multi-key homomorphic encryption processing and proxy re-encryption processing to obtain a second intermediate result.

[0017] According to another aspect of the present disclosure, there is provided a cloud server, comprising:

[0018] A transceiver unit, configured to receive first information from a plurality of terminals, wherein the first information is obtained by encrypting second information using a private key of the terminal;

[0019] A first processing unit, configured to perform multi-key homomorphic encryption processing on each of the first information to obtain a first intermediate result;

[0020] A second processing unit, configured to perform proxy re-encryption processing on the first intermediate result based on a public key of an initiating device to obtain a second intermediate result;

[0021] The transceiver unit is further configured to send the second intermediate result to the initiating device.

[0022] According to another aspect of the present disclosure, there is provided an initiating device, including:

[0023] A transceiver unit, configured to receive a second intermediate result from a cloud server;

[0024] a processing unit, configured to decrypt the second intermediate result using a private key of the initiating device;

[0025] Among them, the second intermediate result is obtained by proxy re-encrypting the first intermediate result based on the public key of the initiating device, the first intermediate result is obtained based on multi-key homomorphic encryption of multiple first information, and the first information is obtained by encrypting the second information using the private key of the terminal.

[0026] According to another aspect of the present disclosure, there is provided a terminal, including:

[0027] A processing unit, configured to encrypt the second information using the private key of the terminal to obtain the first information;

[0028] A transceiver unit is used to send the first information to a cloud server; wherein the first information is used by the cloud service to perform multi-key homomorphic encryption processing and proxy re-encryption processing to obtain a second intermediate result.

[0029] According to another aspect of the present disclosure, there is provided an information processing system, comprising:

[0030] A cloud server, used to implement the information processing method described in any embodiment executed by the cloud server side;

[0031] An initiating device, used to implement the information processing method described in any embodiment executed by the initiating device side;

[0032] A terminal is used to implement the information processing method described in any embodiment executed on the terminal side.

[0033] According to another aspect of the present disclosure, an electronic device is provided, including a memory, a processor, and a computer program stored in the memory, wherein the processor executes the computer program to implement the information processing method described in any one of the above embodiments.

[0034] According to another aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program / instruction is stored. When the computer program / instruction is executed by a processor, the information processing method described in any of the above embodiments is implemented.

[0035] According to another aspect of the present disclosure, a computer program product is provided, including a computer program / instruction, which implements the information processing method described in any of the above embodiments when executed by a processor.

[0036] As described in detail below, according to an information processing method and device, system, electronic device, storage medium and product of an embodiment of the present disclosure. In the present disclosure, multiple terminals can use their own private keys to encrypt the content to be transmitted (i.e., the second information) to obtain the first information, so that other participants cannot decrypt their information, ensuring the communication security and privacy protection between the terminal and the cloud server; and after receiving multiple first information, the cloud server can perform homomorphic calculations on the ciphertext (i.e., the first information) encrypted with different terminal private keys, and the present disclosure further performs targeted homomorphic proxy re-encryption processing on its first intermediate result, and converts the multi-key ciphertext (i.e., the first intermediate result obtained by synthesizing the homomorphic encryption processing of multiple terminal private keys) into a result that can only be decrypted by the initiating device (i.e., the second intermediate result encrypted with the public key of the initiating device) without the need for device-to-device interaction with multiple terminals and initiating devices. In summary, the technical solution provided by the present disclosure can realize homomorphic processing and homomorphic proxy re-encryption of multi-key ciphertext without interaction, which means that the present disclosure can realize secure processing of information under the premise of ensuring the privacy security of multiple parties; further, when the present solution is applied to the synaesthesia positioning scenario, it can also realize secure and accurate positioning of the located target under the premise of ensuring the location privacy of the terminals participating in the positioning task and the location privacy of the located target.

[0037] It is to be understood that both the foregoing general description and the following detailed description are exemplary, and are intended to provide further explanation of the technology as claimed. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The above and other purposes, features and advantages of the present disclosure will become more apparent by describing the embodiments of the present disclosure in more detail in conjunction with the accompanying drawings. The accompanying drawings are used to provide a further understanding of the embodiments of the present disclosure and constitute a part of the specification. Together with the embodiments of the present disclosure, they are used to explain the present disclosure and do not constitute a limitation of the present disclosure. In the accompanying drawings, the same reference numerals generally represent the same components or steps.

[0039] Figure 1 A schematic diagram of the architecture of an information processing system provided in an embodiment of the present disclosure.

[0040] Figure 2 A flowchart of an information processing method provided by an embodiment of the present disclosure.

[0041] Figure 3 A flowchart of another information processing method provided by an embodiment of the present disclosure.

[0042] Figure 4 A structural block diagram of a cloud server provided in an embodiment of the present disclosure.

[0043] Figure 5 A structural block diagram of an initiator device provided in an embodiment of the present disclosure.

[0044] Figure 6 A structural block diagram of a terminal provided in an embodiment of the present disclosure.

[0045] Figure 7 A structural block diagram of an information processing system provided in an embodiment of the present disclosure.

[0046] Figure 8 A hardware block diagram of an electronic device provided in an embodiment of the present disclosure.

[0047] Fig. 9 A schematic diagram of a computer program product provided by an embodiment of the present disclosure. DETAILED DESCRIPTION

[0048] In order to make the purpose, technical solution and advantages of the present disclosure more obvious, the exemplary embodiments according to the present disclosure will be described in detail with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present disclosure, rather than all the embodiments of the present disclosure, and it should be understood that the present disclosure is not limited to the exemplary embodiments described here.

[0049] The present disclosure can be specifically applied to synaesthesia fusion scenarios, and further, can be specifically applied to synaesthesia fusion positioning scenarios.

[0050] Traditional perception is generally achieved through independent dedicated equipment, such as infrared equipment, cameras, radars, wearable sensors, etc. However, traditional perception technology implemented using dedicated equipment has limitations such as limited perception range and high risk of privacy leakage in camera perception. In contrast, in the synaesthesia fusion scenario, by using communication equipment such as base stations and user terminals (including mobile phones, cars, drones, etc.) that are widely deployed in existing scenarios, the communication equipment can be used to send and receive perception signals to locate, track, and characterize the physical world of the target object, which can reduce the cost of additional perception equipment and support all-time and all-weather sensing.

[0051] As described in the background technology above, the relevant wireless positioning technology can locate the target position by relying on the known reference node position and the distance value from the reference point to the target. Taking the triangulation positioning method as an example, the intersection of three circles with the reference node as the center and the distance value between the target object and the reference point as the radius is calculated as the positioning result. Considering the possibility of multiple intersections or no intersections, the least squares method is further used to estimate the optimal solution. However, this perceptual positioning method has the security risk of privacy exposure. On the one hand, the user's location information and movement trajectory may be exposed during the interactive calculation process, causing privacy problems for the user; on the other hand, the disclosure of the reference point location information will also leak the privacy of the communication device holder and reduce the user's enthusiasm for providing perception capabilities. Therefore, how to achieve perceptual positioning under the premise of privacy security of communication equipment is a key issue in this field.

[0052] To achieve privacy protection, relevant technologies mainly include homomorphic encryption, secure multi-party computing, differential privacy, zero-sum noise and other means. Generally speaking, privacy protection is divided into three levels: (1) Level-IPrivacy, the reference node does not know the exact location of other nodes and the target object, but can make a rough estimate of the location of the target object; (2) Level-IIPrivacy, the reference node does not know the exact location of other nodes and the target object, but can make a rough estimate of the location of the non-colluded node by colluding with other nodes; (3) Level-IIIPrivacy, the reference node does not know the exact location of other nodes and the target object, and cannot estimate the location of the non-colluded node even if it colludes with other nodes.

[0053] Among them, the privacy protection schemes at the Level-IPrivacy and Level-IIPrivacy levels cannot protect the location privacy of the reference node. Among them, the scheme based on information hiding cannot resist collusion attacks, and the scheme based on differential privacy significantly affects the positioning accuracy. Although the Level-IIIPrivacy level can protect the location privacy of the reference node and the target object at the same time, it often requires multi-party interaction and collaboration, that is, it relies on multiple rounds of interaction between reference nodes or multiple rounds of interaction between the server and the positioning demand party to achieve. For example, in the positioning algorithm that implements Level-IIIPrivacy, some technologies are performed by the target user (i.e., the target object in the previous text) to perform ranging operations, and the reference node redescribes the least squares estimate, calculates the relevant intermediate calculation amount in the ciphertext space using the homomorphic encryption algorithm, and collaborates to obtain the location estimate of the target user; some technologies are based on partial homomorphic encryption, and each reference node encrypts the measurement information twice using the user public key and the cloud public key, and then sends it to the cloud environment. The latter applies the gradient descent algorithm to the ciphertext data after decryption with the assistance of the user to obtain the ciphertext of the location estimation result. These Level-III Privacy positioning algorithms require multi-party interaction and collaboration, have high communication overhead and rely on the relevant participants to remain online and respond.

[0054] In addition, the relevant technologies further require the capabilities of the target object. Specifically, the above technologies require the target object to have the ability to receive and process signals and obtain location information in the interaction with the reference node, which is not friendly when there is no target positioning device or when there is a need for target positioning by a third party.

[0055] Based on the above problems, the present disclosure provides a new design concept: the communication terminal uses its own private key to encrypt data, and reports the encrypted data to the cloud server; the cloud server is responsible for implementing multi-key homomorphic encryption processing and proxy re-encryption processing, and finally obtains an intermediate result encrypted with the initiator's public key, and finally provides this result to the initiator, so that only the initiator can decrypt the intermediate result with its own private key and implement the processing of the final result.

[0056] This technical concept can be applied to any scenario involving reprocessing of multi-key encrypted data and providing it to a third party. Exemplarily, for the synaesthesia integrated positioning scenario mentioned in the previous background technology, the technical solution provided by the present disclosure can solve the problem. Specifically, in this scenario, the terminal realizes the perception measurement of the target object and reports it to the cloud server after encryption, which is processed by the cloud server, and the processed intermediate result (encrypted by the public key of the initiating device) is provided to the initiating device, which is then decrypted by the initiating device and finally locates the target object. In this way, the safe and accurate positioning of the target object can be achieved without complex multi-party interaction under the premise of ensuring the privacy and security of multiple parties, and the process has no restrictions on the ability of the target object and has a wide range of adaptability.

[0057] The specific instructions are as follows.

[0058] First, the present disclosure provides an information processing system, which includes: a cloud server, an initiator device, and a terminal.

[0059] Among them, the cloud server, which can also be called the cloud, cloud server, cloud processor, cloud node, etc., has no special restrictions on the name. It has cloud computing processing capabilities. Specifically in this solution, it further has multi-key homomorphic encryption processing capabilities and proxy re-encryption processing capabilities. The specific implementation methods of these capabilities are not limited and will be explained in detail later.

[0060] The initiating device has the ability to communicate with the terminal and the cloud server. Furthermore, the initiating device has a pair of public and private keys (also referred to as a public-private key pair or an asymmetric key pair). The public key can be notified to the cloud server by pre-setting in advance, communicating in advance (multicast or one-to-one communication, etc.), etc., so that the cloud server can realize its proxy re-encryption capability; and the private key of the initiating device can be maintained exclusively by the initiating device itself. In the actual implementation scenario, the initiating device, as the positioning demand party (expressed as Auth), can actually be any device in the scenario. Generally, in certain fixed scenarios, the initiating device can be fixed as one or more devices. For example, in the synaesthesia integrated positioning scenario, the initiating device can be specifically an authorization center or a third-party authorization center. It should be understood that the number of initiating devices can be one or more. The following text will take one as an example for specific explanation. The situation of multiple initiating devices is similar and will not be repeated.

[0061] Terminal, may also be referred to as terminal equipment, user equipment (UE), mobile station, mobile terminal, etc. The terminal in the present disclosure may be any electronic device with communication capability in the prior art or related scenarios. Further, in the synaesthesia integrated positioning scenario, the terminal may also have a perception measurement capability, i.e., the ability to send a perception signal to the target object and receive an echo signal. At this point, the communication perception capability (also referred to as synaesthesia integration capability, perception capability) of the existing terminal may still be reused to realize the perception measurement capability. In the present disclosure, each terminal may also have a pair of public-private key pairs, or may have a private key, and the present disclosure has no particular restrictions on this. In addition, each terminal may also have a public computing key, which may be disclosed between the cloud server and other necessary devices (or may be disclosed only on the cloud server side), and the computing key may act on the multi-key homomorphic encryption processing process on the cloud server side, which will be described in detail later.

[0062] Specifically, the terminal can be widely used in various scenarios, for example, device-to-device (D2D), vehicle to everything (V2X) communication, machine-type communication (MTC), Internet of Things (IOT), virtual reality, augmented reality, industrial control, autonomous driving, telemedicine, smart grid, smart furniture, smart office, smart wear, smart transportation, smart city, etc. Based on this, the terminal can be but not limited to: mobile phone, tablet computer, computer with wireless transceiver function, wearable device, vehicle, drone, helicopter, airplane, ship, robot, mechanical arm, smart home device, etc. The embodiments of the present application have no special restrictions on the specific technology and specific device form adopted by the terminal.

[0063] In order to achieve effective privacy protection for each participant, this solution requires that the cloud server (Cloud) and the initiating device (Auth) do not collude with each other, and each UE does not collude with each other. Among them, Cloud is a semi-honest participant, that is, Cloud can comply with the protocol process, but may try to extract private data from the intermediate results generated during the execution process. This disclosure has no special restrictions on this.

[0064] For example, please refer to Figure 1 , Figure 1 The following is a schematic diagram of the architecture of an information processing system provided by an embodiment of the present disclosure. Figure 1 As shown, the information processing system includes: a cloud server ( Figure 1In the actual implementation scenario, the number of terminals involved in the present disclosure is at least two; in the synaesthesia integrated positioning scenario, such as Figure 1 As shown, in order to meet the demand for positioning based on position and distance, the number of terminals can be at least three (it should be understood that there can be more in actual scenarios). Figure 1 The target object (ie, Target, Figure 1 It should be understood that Figure 1 The UE, Cloud, and Auth shown also meet the relevant requirements of the information processing system mentioned above and will not be repeated here.

[0065] also, Figure 1 The relevant process of a privacy protection positioning method in the synaesthesia integrated positioning scenario is also specifically shown.

[0066] The present disclosure provides an information processing method. Figure 2 , Figure 2 The following is a flow chart of an information processing method provided by an embodiment of the present disclosure. Figure 2 As shown, the method involves an interaction process between a cloud server, a terminal, and an initiating device, including:

[0067] S202: The terminal encrypts the second information using the private key of the terminal to obtain the first information.

[0068] Specifically, the second information is the content that the terminal actually needs to send to the cloud server. In different scenarios, the information content actually interacted between the two is different, and the present disclosure has no special restrictions on this.

[0069] For example, in the synaesthesia positioning scenario, the second information may specifically be at least one of the distance information obtained by the terminal sensing measurement and the terminal's own positioning information. Figure 1 As an example, the second information may be specifically the distance ( Figure 1 Indicated as d i , where i = 1, 2, 3), the terminal's own location data ( Figure 1 The coordinates of the terminal (x i ,y i ), i=1,2,3). like Figure 1 As shown, for any UE, d i and / or (x i ,y i ) can be used as the second information, and the UE can use its own private key to encrypt the second information to obtain the first information, and send the first information (i.e., di and / or (x i ,y i )) is sent to the cloud server.

[0070] In this step, the terminal does not directly send the plain text (i.e., the second information) to the outside, but encrypts it and then sends the cipher text (i.e., the first information) to the outside, which can ensure the security of the plain text content to a certain extent. Especially when the plain text information involves the terminal's own information, the privacy security of the terminal itself is further guaranteed. For example, in the above-mentioned synaesthesia positioning scenario, the plain text involves the terminal's own location. By encrypting it and sending it, it can be ensured that the terminal's location is not exposed to the outside, the terminal's location privacy security is guaranteed, and it can also further isolate and promote ubiquitous terminals to provide services. In addition, in the above-mentioned synaesthesia positioning scenario, since the second information also implies the location information of the located target, the encryption processing of the second information also helps to protect the location privacy of the located target.

[0071] S204, the terminal sends first information to the cloud server.

[0072] The first information is used by the cloud service to perform multi-key homomorphic encryption processing and proxy re-encryption processing to obtain a second intermediate result.

[0073] Specifically, in the specific implementation of the present disclosure, the cloud server is not the final demander of the information (i.e., not the initiating device), but exists as an intermediate processing node for intermediate processing of information between the terminal and the initiating device. Therefore, after determining the first information, the terminal does not directly send it to the initiating device, but performs intermediate processing via the cloud server to ensure the privacy security between the terminal and the initiating device.

[0074] It should be understood that S202 and S204 are actions performed by the terminal side, and any terminal can perform these two steps to transmit privacy-protected security data to the cloud server. Figure 1 In the scenario shown, UE1, UE2, and UE3 all transmit the distance measured by synaesthesia and their own coordinates to the cloud server in a privacy-preserving manner.

[0075] S206, the cloud server receives first information from multiple terminals.

[0076] The first information is obtained by encrypting the second information using the private key of the terminal. Please refer to the previous two steps, which will not be described here.

[0077] S208, the cloud server performs multi-key homomorphic encryption on each first information to obtain a first intermediate result.

[0078] Homomorphic encryption is a special encryption method. The advantage of this encryption method is that result 1 is the same as result 2, where result 1 refers to the result of directly processing the ciphertext (i.e., the information obtained by encrypting the plaintext with a key), and result 2 refers to the result obtained by performing the same processing on the plaintext and then encrypting it with the key. Multi-key homomorphic encryption further includes the situation of multiple keys on this basis, and the same effect as result 1 and result 2 is still achieved. Result 1 refers to the result of directly processing multiple ciphertexts, where there are at least two ciphertexts and at least two keys involved; similarly, result 2 refers to the result obtained by performing the same processing on multiple plaintexts and then encrypting them with at least two secret keys.

[0079] The technical solution provided by the present disclosure adopts multi-key homomorphic encryption processing. Specifically, based on the principle that result 1 and result 2 are the same after multi-key homomorphic encryption processing, there is no need to obtain result 2 (that is, there is no need to decrypt the first information), and multiple first information (that is, multiple secret keys) are directly processed to obtain the first intermediate information (that is, result 1). In this process, each first information is encrypted using the private key of the terminal to which it belongs, and is encrypted privacy data. On this basis, the multi-key homomorphic encryption of this step means that without decrypting each first information, encryption processing is directly performed based on the first information after privacy encryption, so as to obtain the first intermediate result.

[0080] It should be noted that the actual processing method of multi-key homomorphic encryption processing may also be different based on at least one of the different information types, processing methods, and processing scenarios of the information processing process. In other words, in the present disclosure, the processing method of multi-key homomorphic encryption processing can be customized, which can be any algorithm or custom formula without limitation. For example, in the multi-key homomorphic encryption state, each first information is processed by at least one of the following: mathematical processing (for example, at least one of addition, subtraction, multiplication, division, calculus, averaging, linear transformation, etc.), preset algorithm processing (for example, least squares method, etc.), neural network model processing or other custom data processing methods, etc., not to be exhaustive. Give an example. For example, in other possible multi-party privacy and security processing processes, the multi-key homomorphic confidentiality processing method can also be to perform mathematical processing on multiple first information separately according to preset mathematical processing steps, for example, to perform at least one of weighted averaging and weighted sum processing on multiple first information. Not to be exhaustive. For another example, in the synaesthesia positioning scenario, the least square method can be used to locate the target position. Therefore, in this step, the multi-key homomorphic encryption processing method may specifically include but is not limited to: processing the first information (the distance and coordinates of the privacy state of multiple UEs) based on the least square method to obtain the intermediate information (hereinafter referred to as Figure 1 Specific instructions).

[0081] S210, the cloud server performs proxy re-encryption processing on the first intermediate result based on the public key of the initiating device to obtain a second intermediate result.

[0082] After processing in S208, the first intermediate result obtained by the cloud service is actually a comprehensive result of the private keys of each terminal. On this basis, if the first intermediate result is sent directly to the initiating device, the initiating device cannot decrypt the first intermediate result, and it is necessary to interact with multiple terminals separately to obtain the public keys of each terminal and then decrypt them before continuing the subsequent information processing process. However, as mentioned above, this method is cumbersome and complicated, requires multi-party interaction, has hidden dangers in information security, and will also cause waste of communication resources to a certain extent, low information processing efficiency and other problems. Based on this, in the present disclosure, the cloud server further performs proxy re-encryption processing on the first intermediate result.

[0083] In the present disclosure, the purpose of the proxy re-encryption process is to proxy re-encrypt the information encrypted with key A into information encrypted with key B. In this process, the cloud server does not know the decryption keys of key A and key B. In other words, the cloud server only processes the ciphertext information in this process, but cannot specifically decrypt the ciphertext information, and cannot know the content of the plaintext information. Therefore, it can also avoid the possible private data extraction behavior of the cloud server (as a semi-honest participant) to a certain extent, and further protect the privacy security of multiple parties.

[0084] In this solution, the first intermediate result is an intermediate result that is encrypted with the private keys of multiple terminals, while the second intermediate result is an intermediate result that is encrypted with the public key of the initiating device, and the plaintext content of the two intermediate results after processing is actually the same. In other words, the proxy re-encryption process is equivalent to replacing the encryption method of the plaintext corresponding to the intermediate result, so that the first intermediate result that requires the public keys of multiple terminals to decrypt is replaced by the second intermediate result that can only be decrypted by the private key of the initiating device. In this way, the initiating device becomes the only entity that can decrypt the second intermediate result, thus ensuring the privacy and security of multiple parties such as the initiating device, cloud server, terminal, and target location.

[0085] Based on proxy re-encryption processing, the multi-key ciphertext is converted into a result that can be decrypted by the initiating device without the need for the initiating device to interact with multiple terminals, or the cloud server to interact with multiple terminals. In this process, there is no need for interaction between the terminals, and the first information obtained after the terminal processing does not directly interact with the initiating device, so the communication burden is relatively small.

[0086] S212, the cloud server sends the second intermediate result to the initiating device.

[0087] That is, the cloud server sends the ciphertext that can be decrypted by the initiating device to the initiating device, so that the initiating device can decrypt it to obtain the processing result or perform further subsequent processing.

[0088] In the present disclosure, the powerful computing power and storage resources of the cloud server are reused, and the cloud server is used as the main processor of the information processing process. The cloud server undertakes the main homomorphic computing tasks. The terminal and the initiating device only need to perform a small amount of processing or calculation to allow the initiating device to obtain the relevant processing results.

[0089] S214, the initiating device receives the second intermediate result from the cloud server.

[0090] S216: The initiating device decrypts the second intermediate result using the private key of the initiating device.

[0091] The second intermediate result is obtained by proxy re-encrypting the first intermediate result based on the public key of the initiating device, the first intermediate result is obtained by multi-key homomorphic encryption of multiple first information, and the first information is obtained by encrypting the second information using the private key of the terminal. Please refer to the previous text here and do not repeat it.

[0092] Since the second intermediate result is encrypted by the public key of the initiating device, in this case, the private key of the initiating device is only owned by the initiating device, and only the initiating device can successfully decrypt the second intermediate information and obtain the decrypted information processing result. On this basis, the initiating device can further process the plaintext information after decryption of the second intermediate result, or apply the decrypted plaintext information to other scenarios or functions, which is not particularly limited and not exhaustive in the present disclosure.

[0093] In summary, in the present disclosure, multiple terminals can use their own private keys to encrypt the content to be transmitted (i.e., the second information) to obtain the first information. In this way, other participants cannot decrypt their information, which ensures the communication security and privacy protection between the terminal and the cloud server; and after receiving multiple first information, the cloud server can perform homomorphic calculations on the ciphertext (i.e., the first information) encrypted by different terminal private keys, and the present disclosure further performs targeted homomorphic proxy re-encryption processing on its first intermediate result, and converts the multi-key ciphertext (i.e., the first intermediate result obtained by homomorphic encryption processing with multiple terminal private keys) into a result that can only be decrypted by the initiating device (i.e., the second intermediate result encrypted with the public key of the initiating device) without the need for device-to-device interaction with multiple terminals and initiating devices. In summary, the technical solution provided by the present disclosure can realize homomorphic processing and homomorphic proxy re-encryption of multi-key ciphertext without interaction, thereby realizing secure processing of information under the premise of ensuring the privacy security of multiple parties; further, when the present solution is applied to the synaesthesia positioning scenario, it can also realize secure and accurate positioning of the located target under the premise of ensuring the location privacy of the terminals participating in the positioning task and the location privacy of the located target.

[0094] For ease of understanding, combined Figure 1 The synaesthesia positioning scenario shown in the figure specifically illustrates the specific implementation method of this solution. It should be noted that Figure 1 Only the two-dimensional position of three UEs is used as an example for explanation. In actual scenarios, there may be more UEs, and the calculation of three-dimensional position (or higher) may also be implemented based on this solution. That is, this solution can be applied to the synaesthesia positioning scenario with k≥3 UEs and n≥2-dimensional position.

[0095] In the synaesthesia positioning scenario, the target location can be located by using the location of multiple terminals themselves and the distance between the terminal and the target location. Specifically, the second information may include but is not limited to: the distance between the terminal and the target location, and the coordinates of the terminal. For example, Figure 1 UE1 reports d to Cloud 1 and (x 1 ,y 1 ), UE2 reports to Cloud 2 and (x 2 ,y 2 ), UE3 reports to Cloud 3 and (x 3 ,y 3 ). It should be noted that Figure 1 The information represented in is the plain text information between different parties, not the encrypted information. In other words, Figure 1 The first information reported by each terminal is the second information encrypted by the private key of each terminal, which will not be repeated.

[0096] Among them, the distance (i.e., d i ) can be obtained by the terminal sensing the distance to the target position. Sensing ranging can also be called sensing measurement, which refers to sending a sensing measurement signal (or sensing signal) to the target position (or target object) and receiving the echo signal of the sensing signal. The distance between the terminal and the target position can be obtained through the sending and receiving time of the echo signal and the signal transmission speed. This sensing measurement method has no special restrictions on the target (i.e., Tar), does not require Tar to respond, and does not require Tar to send and receive any signals or communication schemes, that is, there is no need for Tar to carry equipment. In other words, this scheme has no special restrictions on whether the target Tar has communication capabilities or other capabilities. In actual scenarios, the target object Tar can be a device with communication capabilities or a physical object without communication capabilities, such as buildings, numbers, pedestrians, etc., without restrictions. In addition, the sensing measurement scheme can be imperceptible to the target Tar, and for malicious Tar, this positioning method will not expose the positioning task.

[0097] Among them, the location of the terminal can be represented by coordinates or other forms. For ease of explanation, coordinates are taken as an example. The coordinates can be world coordinates or virtual coordinates in a specific space (for example, coordinates in a customized coordinate system), and the present disclosure has no particular restrictions on this. The location of the terminal can be achieved by the positioning function of the terminal or the communication between the terminal and the network. For example, Beidou positioning, GPS positioning methods, etc., are not exhaustive.

[0098] For ease of explanation, the private key of the i-th UE is denoted as sk i , where sk i There are many ways to generate sk. For example, you can randomly select a value in the polynomial quotient ring as sk i , that is, satisfying: sk i ←Rq, where Rq represents a polynomial quotient ring. In addition, the computation key of the i-th UE is denoted as evk i , where evk i It can be generated based on the calculation key generation method in the related art, such as MK-CKKS, or evk i It can also be obtained by other means, such as custom configuration. In addition, the public and private key pair of the initiating device is recorded as: (sk * ,pk * ), where sk * is the private key of the initiating device, pk * is the public key of the initiating device, pk * Shared in cloud server.

[0099] Based on this, the second information is specifically the d i and (x i ,y i ). The first information can be specifically expressed as: in, Indicates the use of sk i Perform privacy encryption.

[0100] In an exemplary embodiment, using sk i After privacy encryption, the second information (denoted as m) and the first information can satisfy the following relationship:

[0101]

[0102] Wherein, m represents the second information, Indicates the first information, which means using CKKS encryption algorithm to use sk i The second information is encrypted to obtain, where a is the q The random number selected from can be expressed as: a←R q , e represents noise.

[0103] Target positioning based on multiple UE coordinates and the distance between UE and Tar can be achieved through the least squares method. In this way, the intermediate results processed by the cloud server can also be specifically two intermediate results of the least squares method.

[0104] That is, in an exemplary embodiment, when this step is implemented specifically, multi-key homomorphic encryption processing can be performed on each of the first information based on the least squares principle to obtain the first intermediate result; wherein, the first intermediate result is used to determine the target position.

[0105] Specifically, based on the least squares method, the intermediate result required for positioning calculation in plain text is: A T A and A T b, such as Figure 1 Based on this, the first intermediate result can be recorded as ct 1 With ct 2 ,in, in, Indicates the use of sk i Perform privacy encryption processing, in other words, ct 1 With ct 2 To use sk i The ciphertext after privacy protection. Accordingly, the second intermediate result can be recorded as and in, in, Indicates the use of pk* To perform privacy encryption, in other words, and To use pk * The ciphertext after privacy protection. Specifically, the A, b and the first information involved satisfy the following relationship respectively:

[0106]

[0107] Furthermore, A T A and A T b can also satisfy the following relationship:

[0108]

[0109]

[0110] As mentioned above, multi-key homomorphic encryption means processing ciphertext and plaintext in the same way. The plaintext processing method described above is the same as the ciphertext processing method. i Replace with cd i , x i Replace with cx i , y i Replace with cy i , and bring it into the above formula for specific processing to get the first intermediate result, which will not be repeated here.

[0111] Based on this, the first intermediate result needs to be redirected to the second intermediate result later, and its specific processing method is described in detail later. On this basis, the cloud server can send the second intermediate result to the initiating device Auth, that is, and

[0112] For the initiating device, after receiving the second intermediate result, the initiating device can use its own private key sk * right and Decrypted to get M 1 =A T A and m 2 =A T b.

[0113] In the specific implementation, based on the principle of multi-key homomorphic encryption, the ciphertext obtained (i.e. and ) can be expressed as: ct = (a, b), in this case, the decryption result can be obtained (It specifically means using sk * The plain text obtained by decrypting the ciphertext ct encrypted by the CKKS algorithm) is: ct and sk * The following relationship is satisfied:

[0114]

[0115] Specifically, M 1 =b 1 +a 1 ·sk * ,in, And m 2 =b 2 +a 2 ·sk * ,in,

[0116] On this basis, the initiating device can further process the decrypted plaintext information. In the synaesthesia positioning scenario, the method can also include the following steps: based on the least squares principle, using the third information obtained by decryption, determine the target position.

[0117] At this time, based on the least squares principle, the initiating device can finally determine the target position, and the target position (coordinates) and the plain text of the second intermediate result satisfy the following relationship:

[0118]

[0119] Based on this, the initiator can finally locate the target. Figure 1 The synaesthesia localization scheme shown.

[0120] In addition, illustratively, the present disclosure also provides a possible implementation method of proxy re-encryption processing, which may specifically include the following steps:

[0121] Step 1: Determine a re-encryption key based on the private key of the terminal and the public key of the initiating device.

[0122] Step 2: Re-encrypt the first intermediate result using the re-encryption key to obtain the second intermediate result.

[0123] In this embodiment, the re-encryption key is used to redirect the key between the private key of the terminal and the public key of the initiating device. Therefore, the re-encryption key is closely related to the two and can be generated based on the two.

[0124] In a specific implementation, a candidate key set can be randomly generated based on the private key of the terminal and the public key of the initiating device, and then the re-encryption key can be determined in the candidate key set. In this embodiment, the candidate key set can generally include multiple candidate keys, and the generation of each candidate key can be implemented based on a random algorithm. In the present disclosure, multi-key homomorphic encryption processing is adopted to process intermediate data. Therefore, the random algorithm can also adopt (but not limited to) the CKKS random algorithm. At this time, in a possible embodiment, for the i-th terminal, its re-encryption key prk i Satisfies the following formula:

[0125]

[0126] Among them, CKKS.Enc represents a random algorithm, q is the coefficient of the polynomial quotient ring; ← represents random selection.

[0127] It should be noted that for the cloud server, when performing proxy re-encryption processing, there are two possible ways to obtain the re-encryption key of each terminal: Method 1: The terminal generates its own re-encryption key based on the above method and shares it with the cloud server; or, Method 2: The cloud server generates the re-encryption key of each terminal based on the above method. In this process, since the re-encryption key needs to be processed in combination with the terminal key and the public key of the initiating device, in actual scenarios, method 1 can be preferred to implement this solution to avoid privacy and security issues caused by the leakage of the terminal private key.

[0128] In addition, when implementing this solution in method 1, the public key of the initiating device can be shared with each terminal in advance, so that each terminal can generate its own re-encryption key and at least disclose it to the cloud server. Therefore, in this embodiment, there are two ways to implement the above step 1: in one way, each terminal sends its own re-encryption key to the cloud server (for example, it can be sent together with the first information or sent separately), and the cloud server receives the re-encryption key from the terminal; or, in another way, the cloud server receives the re-encryption key from the terminal before the proxy redirection processing, and maintains the information (for example, correspondingly stores each terminal and its re-encryption key). In this way, when the cloud server executes the above step 1, it can directly obtain the re-encryption key of each terminal from the information maintained by itself.

[0129] When the above step 2 is implemented specifically, it can be implemented as follows:

[0130] Obtaining a sum of inner products of the re-encryption key and each first vector; wherein the first vector is decomposed based on the first element;

[0131] Obtaining the sum of the inner products and the sum of the second vector to obtain the second intermediate result, wherein the second vector is composed of second elements;

[0132] The first element and the second element are two polynomial elements in the first intermediate result. 1 With ct 2 ), its mathematical expression can be expressed as: ct = (a 1 ,a 2 ,a 3 ,b * ), so for the sake of convenience, a 1 ,a 2 ,a 3 Denoted as the first element, with a i characterize, i = 1, 2, 3; and b * Thus, proxy re-encryption processing can be performed based on the polynomial structure and the re-encryption key of each terminal.

[0133] Specifically, after the above-mentioned proxy re-encryption process, the second intermediate result ct * The first intermediate result ct satisfies the following relationship:

[0134]

[0135] Among them, ct * represents the second intermediate result, ct represents the first intermediate result, prk i represents the re-encryption key of the i-th terminal; Indicates the use of prk i Perform proxy re-encryption on ct; where ct = (a 1 ,a 2 ,a 3 ,b * ), a i represents the first element, b * Represents the second element, g -1 Denotes the decomposition algorithm. g -1 (a i ) represents the first vector.

[0136] Through the above method, it is possible to achieve powerful computing power and storage resources with the help of the computing power of cloud servers without the need for multi-party interaction, and realize proxy re-encryption of the intermediate results of multi-key homomorphic encryption processing, so that the intermediate results after proxy re-encryption processing can only be decrypted and obtained by the initiating device, thereby ensuring the privacy and security of multiple parties.

[0137] In addition, it should be noted that in the implementation scheme provided by the present disclosure, the information obtained after the cloud server performs relevant processing is named as intermediate results, which does not mean that these results are all intermediate steps. They may be final results. This is only a simple explanation of the naming and is not used to limit the application form of data or information in actual scenarios.

[0138] In addition, the information processing method provided by the present disclosure can be actively triggered by the initiating device. Figure 1 and Figure 3 , Figure 3 A flowchart of another information processing method provided by an embodiment of the present disclosure is provided. Figure 3 The method shown in Figure 2 Prior to the method shown, the following steps may also be included:

[0139] S302: The initiating device sends a first message to multiple terminals, where the first message is used to request positioning of a target position.

[0140] The implementation process of this embodiment can refer to Figure 1 For example, Figure 1 As shown, when the initiating device needs to locate the target Tar, it initiates a first request to the terminal, that is, Figure 1 After that, the terminal performs sensing ranging to obtain distance information, and then encrypts the second information and reports it to the cloud server; after that, it undergoes intermediate processing by the cloud server (multi-key homomorphic encryption processing and proxy re-encryption processing), and finally the cloud server transmits the second processing result to the initiating device, and finally the initiating device parses it to implement the entire positioning solution.

[0141] The present disclosure has no particular restrictions on the triggering conditions based on which the initiating device sends the first message to the terminal, and the design can be customized based on the actual scenario requirements. For example, the initiating device can locate the position of one or more targets based on business requirements, or the initiating device can execute S302 upon receiving a positioning instruction, or the initiating device can continuously monitor the position of one or more targets, thereby triggering the execution of S302.

[0142] In the specific implementation of this step, when the initiating device sends the first message to multiple terminals, it can be sent to certain terminals in a targeted manner or to multiple terminals indiscriminately. For example, when the initiating device knows the approximate area where the target is located, it can send the first message to the terminals in the area in a targeted manner to request the terminals in the area to help locate the target. For another example, the initiating terminal can also send the first message to all terminals indiscriminately.

[0143] In an exemplary embodiment, the multiple terminals include: multiple terminals within a target range. The target range can be customized, or it can be expanded (for example, when the number of terminals within the initially defined target range is less than 3, it is necessary to expand the area range or send a first message to other terminals) or reduced (for example, when there are too many terminals in the area and the calculation is too complicated, the range can be appropriately reduced or the first message can be sent to some terminals in the area) based on actual conditions. In this embodiment, the initiating device can request terminals within a certain range to assist in positioning. At this time, a request can be sent to all terminals within the target range, or a first message can be sent to some of the terminals.

[0144] Specifically, the first message may be sent in any manner, and may be a broadcast message or a unicast message. That is, the initiating device may send the first message indiscriminately to the terminals in the broadcast area by sending a broadcast message, or may send the first message to each terminal separately in a targeted manner. The implementation method is not limited and can be adjusted based on the actual scenario.

[0145] S304, the terminal receives a first message from the initiating device, where the first message is used to request positioning of the target position.

[0146] S306: The terminal senses and measures the target location based on the first message to obtain second information.

[0147] In this embodiment, the terminal receives the first message, and can perform sensing and ranging, and obtain the second information. Figure 2 The relevant processes shown are used to achieve target positioning.

[0148] Further, in a possible embodiment of the present disclosure, as Figure 3 As shown, before S306, the method may further include the following steps:

[0149] S305: The terminal determines whether to accept the positioning task indicated by the first message based on the state information of the terminal.

[0150] In the actual implementation scenario, S305 is an optional step, so Figure 3 Indicated by a dotted box.

[0151] In the embodiment including S305, after the terminal receives the first message, it is not necessary to accept the perception ranging task. For example, when the terminal currently occupies a large amount of memory and has few resources, there is no need to require the terminal to join the perception ranging task, so as not to adversely affect the realization of the current function of the terminal. In other words, in this embodiment, the initiating device does not force the terminal to assist in perception positioning, but gives the terminal a certain right of choice. The terminal can decide whether to accept the task based on its own status. Of course, if the terminal accepts the task, S306 and subsequent processes are executed directly; or, if the terminal does not accept the task, the process can be ended directly after S305 is executed. In this process, there is no need to send a response message to the initiating device to reject the task (it can also be sent, there is no restriction on this).

[0152] In summary, in the scenario of synaesthesia fusion, ubiquitous communication devices (i.e., the terminals mentioned above, also referred to as reference nodes) have the ability to provide perception services. In instances such as intrusion detection and personnel positioning, there is a demand for the target to be located by the demander (i.e., the initiating device mentioned above, for example, a third-party authorization center, which can serve as the positioning demander). When the initiating device initiates a positioning request, devices with surplus resources in the target area can respond and participate in the positioning task, but at the same time they do not want to disclose their location privacy. After the task starts, the UE sends radio waves to the target (i.e., Tar) and receives echo signals. After processing the collected signals, it calculates the target distance and encrypts and transmits it to the cloud server (i.e., Cloud). The cloud server has rich computing power, can complete the target positioning calculation in a secret state, and re-encrypts the result and sends it to the initiating device. With the participation of no less than three UEs, the positioning task can be completed.

[0153] In addition, it should be noted that the technical solution provided by the present disclosure can be applied to the continuous positioning of the target in addition to the instant positioning of the target. For example, when the UE and Tar are in a moving state, the UE can continuously measure the distance during the movement and encrypt the measurement information and transmit it to the cloud server, so that the authorization center can finally obtain the moving trajectory of the target.

[0154] It is understandable that the target trajectory can actually be composed of multiple position coordinates in series, thus,

[0155] In actual scenarios, when the terminal performs the above-mentioned S306 perception ranging, it can be implemented in a continuous measurement manner, so that multiple second information (or called second information sets, second information groups) can be obtained, and its actual expression can be: a set of self-coordinate sets and a set of distance sets of each terminal.

[0156] In this case, the terminal can encrypt and transmit the second information to the cloud server separately and continuously.i and / or (x i ,y i ), it is encrypted and transmitted to the cloud server once. When the UE and Tar are in a mobile state, this encrypted transmission method requires continuous transmission of a large amount of data, and requires a stable connection between the terminal and the cloud server.

[0157] Alternatively, in another more preferred implementation, the terminal may encrypt and transmit multiple second information in batches to the cloud server at one time. At this time, the first information sent by the terminal to the cloud server may include multiple second information obtained by the terminal through continuous sensing and ranging.

[0158] In this embodiment, before encrypting the plurality of second information, the terminal may further package the second information, that is, package the batches of second data into a group of data. The present disclosure has no limitation on the packaging method, and the actual scenario may include but is not limited to the CKKS method.

[0159] Then, in the trajectory measurement task, if each UE performs ranging at multiple consecutive times {j} simultaneously to obtain {d i,j} j , and the terminal also obtains {x i,j} j With {y i,j} j Then, in this case, the terminal can collect the second information (ie, {d i,j} j 、{x i,j} j With {y i,j} j ) is packaged, and the packaged second information can be expressed as: i , x i ,y i , then the following relationship is satisfied:

[0160] d i ←Ecd({d i,j} j )

[0161] x i ←Ecd({x i,j} j )

[0162] y i ←Ecd({y i,j} j )

[0163] Among them, ← indicates the result pointing relationship of the packaging processing.

[0164] In this embodiment, the cloud server decrypts the second intermediate result and further performs positioning calculation to obtain the following coordinate trajectory of the target position at multiple consecutive moments {j}, which can be specifically expressed as follows:

[0165] {x j} j ←Dcd(x)

[0166] {y j} j ←Dcd(y)

[0167] In the continuous trajectory measurement scenario, the processing performed by the cloud server is consistent with the above, and will not be repeated. Through this solution, it is possible to realize the perception and measurement of the moving trajectory of at least one of the UE and Tar in the moving process, and the implementation method is simple and safe.

[0168] In summary, the present disclosure provides a positioning method for synaesthesia integration scenarios, which has the characteristics of privacy protection. On the one hand, the location coordinates of each communication device UE are encrypted by its private key, and any other participant cannot decrypt it, so the location privacy is protected, and ubiquitous UE is encouraged and promoted to provide services; on the other hand, the initiating device Auth has the only authority to obtain the target location, and Tar's location privacy is protected.

[0169] In addition, the present disclosure utilizes multi-key homomorphic encryption to implement homomorphic computation of ciphertexts encrypted with different keys for each UE, and generally multi-key ciphertexts require the participating parties to jointly complete the decryption protocol. However, the present disclosure further designs targeted homomorphic proxy re-encryption processing, which converts multi-key ciphertexts into results that can be decrypted by Auth without the need for interaction.

[0170] In this process, no interaction is required between the UEs, and the first information such as the UE-perceived measurement results does not directly interact with the Auth, so the communication burden is small. The present disclosure uses the cloud server Cloud with powerful computing power and storage resources to undertake the main homomorphic computing tasks, and the UE and Auth only need to perform a small amount of calculations. Tar does not need to respond in the whole process, that is, Tar does not need to carry equipment, and will not expose the positioning task to malicious Tar.

[0171] In addition to positioning, the present disclosure also supports the calculation of continuous trajectories, allowing each UE and Tar to be in a mobile state. Only lightweight encoding and decoding operations need to be performed additionally, and batch operations can be implemented to complete the trajectory characterization of tens of millions of points in a time similar to that of a single positioning.

[0172] The present disclosure also provides a cloud server. Figure 4 A structural block diagram of a cloud server provided in an embodiment of the present disclosure, such as Figure 4 As shown, the cloud server 400 includes:

[0173] The transceiver unit 410 is configured to receive first information from a plurality of terminals, where the first information is obtained by encrypting second information using a private key of the terminal;

[0174] A first processing unit 420 is used to perform multi-key homomorphic encryption processing on each of the first information to obtain a first intermediate result;

[0175] A second processing unit 430 is used to perform proxy re-encryption processing on the first intermediate result based on the public key of the initiating device to obtain a second intermediate result;

[0176] The transceiver unit 410 is further configured to send the second intermediate result to the initiating device.

[0177] In an exemplary embodiment, the second processing unit 430 is specifically configured to:

[0178] Determining a re-encryption key based on a private key of the terminal and a public key of the initiating device;

[0179] The first intermediate result is re-encrypted using the re-encryption key to obtain the second intermediate result.

[0180] In an exemplary embodiment, the second processing unit 430 is specifically configured to:

[0181] Randomly generate a candidate key set based on the private key of the terminal and the public key of the initiating device;

[0182] The re-encryption key is determined from the set of candidate keys.

[0183] In an exemplary embodiment, the second processing unit 430 is specifically configured to:

[0184] Obtaining a sum of inner products of the re-encryption key and each first vector; wherein the first vector is decomposed based on the first element;

[0185] Obtaining the sum of the inner products and the sum of the second vector to obtain the second intermediate result, wherein the second vector is composed of second elements;

[0186] The first element and the second element are two polynomial elements in the first intermediate result.

[0187] In an exemplary embodiment, the second intermediate result and the first intermediate result satisfy the following relationship:

[0188]

[0189] Among them, ct *represents the second intermediate result, ct represents the first intermediate result, prk i represents the re-encryption key of the i-th terminal; Indicates the use of prk i Perform proxy re-encryption on ct; where ct = (a 1 ,a 2 ,a 3 ,b * ), a i represents the first element, b * Represents the second element, g -1 represents the decomposition algorithm; CKKS.Enc represents the random algorithm, q is the coefficient of the polynomial quotient ring; ← represents random selection.

[0190] In an exemplary embodiment, the second information includes: the distance between the terminal and the target location, and the coordinates of the terminal;

[0191] The distance is obtained by sensing and measuring the target position by the terminal.

[0192] In an exemplary embodiment, the first information includes a plurality of second information obtained by the terminal through continuous sensing and ranging.

[0193] In an exemplary embodiment, the first processing unit 420 is specifically configured to:

[0194] Based on the least squares principle, multi-key homomorphic encryption is performed on each of the first information to obtain the first intermediate result; wherein the first intermediate result is used to determine the target position.

[0195] The present disclosure also provides an initiating device. Figure 5 A structural block diagram of an initiator device provided in an embodiment of the present disclosure, such as Figure 5 As shown, the initiator device 500 includes:

[0196] The transceiver unit 510 is used to receive the second intermediate result from the cloud server;

[0197] The processing unit 520 is configured to decrypt the second intermediate result using the private key of the initiating device;

[0198] Among them, the second intermediate result is obtained by proxy re-encrypting the first intermediate result based on the public key of the initiating device, the first intermediate result is obtained based on multi-key homomorphic encryption of multiple first information, and the first information is obtained by encrypting the second information using the private key of the terminal.

[0199] In an exemplary embodiment, the transceiver unit 510 is further configured to send a first message to multiple terminals, where the first message is used to request positioning of a target location;

[0200] The multiple terminals include: multiple terminals within a target range.

[0201] In an exemplary embodiment, the processing unit 520 is further configured to determine the target location based on the least squares principle and using the third information obtained by decryption.

[0202] The present disclosure also provides a terminal. Figure 6 A structural block diagram of a terminal provided in an embodiment of the present disclosure, such as Figure 6 As shown, the terminal 600 includes:

[0203] The processing unit 610 is configured to encrypt the second information using the private key of the terminal to obtain the first information;

[0204] The transceiver unit 620 is used to send the first information to the cloud server; wherein, the first information is used by the cloud service to perform multi-key homomorphic encryption processing and proxy re-encryption processing to obtain a second intermediate result.

[0205] In an exemplary embodiment, the second information includes: the distance between the terminal and the target location, and the coordinates of the terminal;

[0206] The distance is obtained by sensing and measuring the target position by the terminal.

[0207] In an exemplary embodiment, the first information includes a plurality of second information obtained by the terminal through continuous sensing and ranging.

[0208] In an exemplary embodiment, the transceiver unit 620 is further configured to receive a first message from an initiating device, wherein the first message is used to request positioning of a target location;

[0209] The processing unit 610 is further configured to perform sensing and ranging on the target position based on the first message to obtain the second information.

[0210] In an exemplary embodiment, the processing unit 610 is further configured to determine whether to accept the positioning task indicated by the first message based on the state information of the terminal before sensing and measuring the distance to the target position based on the first message.

[0211] The present disclosure also provides an information processing system. Figure 7 A structural block diagram of an information processing system provided by an embodiment of the present disclosure, such as Figure 7 As shown, the information processing system 700 includes:

[0212] The cloud server 400 is used to implement the information processing method described in any embodiment executed by the cloud server side;

[0213] An initiating device 500, configured to implement the information processing method described in any embodiment executed by the initiating device side;

[0214] Terminal 600 is used to implement the information processing method described in any embodiment executed on the terminal side.

[0215] For any incomplete details, please refer to the above specific embodiments and no further details will be given.

[0216] Figure 8 The electronic device 800 according to the embodiment of the present disclosure includes at least a memory, a processor and a computer program stored in the memory, and the processor executes the computer program to implement the information processing method described in any of the above embodiments.

[0217] Figure 8 The electronic device 800 shown specifically includes: a central processing unit (CPU) 801, a graphics processing unit (GPU) 802 and a memory 803. These units are interconnected via a bus 804. The central processing unit (CPU) 801 and / or the graphics processing unit (GPU) 802 can be used as the above-mentioned processor, and the memory 803 can be used as the above-mentioned memory for storing computer-readable instructions. In addition, the electronic device 800 may also include a communication unit 805, a storage unit 806, an output unit 807, an input unit 808 and an external device 809, which are also connected to the bus 804.

[0218] Fig. 9 A schematic diagram of a computer-readable storage medium provided in an embodiment of the present disclosure. Fig. 9 As shown, a computer-readable storage medium 900 according to an embodiment of the present disclosure has a computer program / instruction 901 stored thereon. When the computer program / instruction 901 is executed by a processor, the information processing method described in any of the foregoing embodiments of the present disclosure is implemented. The computer-readable storage medium includes, but is not limited to, for example, volatile memory and / or non-volatile memory. Volatile memory may include, for example, random access memory (RAM) and / or cache memory (cache), etc. Non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, optical disk, magnetic disk, etc.

[0219] The present disclosure further provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the information processing method described in any of the foregoing embodiments of the present disclosure.

[0220] The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, and are not limitations. The above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.

[0221] The block diagrams of the devices, apparatuses, equipment, and systems involved in this disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagrams. As will be appreciated by those skilled in the art, these devices, apparatuses, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including," "comprising," "having," and the like are open words, referring to "including but not limited to," and can be used interchangeably therewith. The words "or" and "and" used herein refer to the words "and / or," and can be used interchangeably therewith, unless the context clearly indicates otherwise. The word "such as" used herein refers to the phrase "such as but not limited to," and can be used interchangeably therewith.

[0222] Additionally, as used herein, "or" used in a list of items beginning with "at least one" indicates a separate list, so that, for example, a list of "at least one of A, B, or C" means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Furthermore, the word "exemplary" does not mean that the example described is preferred or better than other examples.

[0223] It should also be noted that in the system and method of the present disclosure, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present disclosure.

[0224] Various changes, substitutions, and modifications of the techniques described herein may be made without departing from the teachings defined by the appended claims. Furthermore, the scope of the claims of the present disclosure is not limited to the specific aspects of the processes, machines, manufactures, compositions of events, means, methods, and actions described above. Currently existing or later to be developed processes, machines, manufactures, compositions of events, means, methods, or actions that perform substantially the same functions or achieve substantially the same results as the corresponding aspects described herein may be utilized. Thus, the appended claims include such processes, machines, manufactures, compositions of events, means, methods, or actions within their scope.

[0225] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

[0226] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims

1. An information processing method, characterized in that: Applied to a cloud server, the method comprises: Receiving first information from a plurality of terminals, wherein the first information is obtained by encrypting second information using a private key of the terminal; Performing multi-key homomorphic encryption processing on each of the first information to obtain a first intermediate result; Based on the public key of the initiating device, perform proxy re-encryption processing on the first intermediate result to obtain a second intermediate result; The second intermediate result is sent to the initiating device.

2. The method according to claim 1, characterized in that: The step of performing proxy re-encryption processing on the first intermediate result based on the public key of the positioning initiating device to obtain the second intermediate result includes: Determining a re-encryption key based on a private key of the terminal and a public key of the initiating device; The first intermediate result is re-encrypted using the re-encryption key to obtain the second intermediate result.

3. The method according to claim 2, characterized in that The determining of the re-encryption key based on the private key of the terminal and the public key of the initiating device includes: Randomly generate a candidate key set based on the private key of the terminal and the public key of the initiating device; The re-encryption key is determined from the set of candidate keys.

4. The method according to claim 2, characterized in that: The re-encrypting the first intermediate result by using the re-encryption key to obtain the second intermediate result includes: Obtaining a sum of inner products of the re-encryption key and each first vector; wherein the first vector is decomposed based on the first element; Obtaining the sum of the inner products and the sum of the second vector to obtain the second intermediate result, wherein the second vector is composed of second elements; The first element and the second element are two polynomial elements in the first intermediate result.

5. The method according to claim 2, characterized in that: The second intermediate result and the first intermediate result satisfy the following relationship: prk i ={prk i,j ←CKKS.Enc pk* (2 j sk i )} 0≤j<log q Among them, ct * represents the second intermediate result, ct represents the first intermediate result, prk i represents the re-encryption key of the i-th terminal; Indicates the use of prk i Perform proxy re-encryption on ct; where ct = (a1, a2, a3, b * ), a i represents the first element, b * Represents the second element, g -1 represents the decomposition algorithm; CKKS.Enc represents the random algorithm, q is the coefficient of the polynomial quotient ring; ← represents random selection.

6. The method according to any one of claims 1 to 5, characterized in that: The second information includes: the distance between the terminal and the target location, and the coordinates of the terminal; The distance is obtained by sensing and measuring the target position by the terminal.

7. The method according to any one of claims 1 to 5, characterized in that: The first information includes a plurality of second information obtained by the terminal through continuous sensing and ranging.

8. The method according to any one of claims 1 to 5, characterized in that: The performing multi-key homomorphic encryption processing on each of the first information to obtain a first intermediate result includes: Based on the least squares principle, multi-key homomorphic encryption is performed on each of the first information to obtain the first intermediate result; wherein the first intermediate result is used to determine the target position.

9. An information processing method, characterized in that: Applied to an initiating device, the method comprises: receiving a second intermediate result from the cloud server; Decrypting the second intermediate result using the private key of the initiating device; Among them, the second intermediate result is obtained by proxy re-encrypting the first intermediate result based on the public key of the initiating device, the first intermediate result is obtained based on multi-key homomorphic encryption of multiple first information, and the first information is obtained by encrypting the second information using the private key of the terminal.

10. The method according to claim 9, characterized in that The method further comprises: Sending a first message to multiple terminals, where the first message is used to request positioning of a target position; The multiple terminals include: multiple terminals within a target range.

11. The method according to claim 9 or 10, characterized in that: The method further comprises: Based on the least squares principle, the target location is determined using the third information obtained by decryption.

12. An information processing method, characterized in that: Applied to a terminal, the method comprises: Encrypting the second information using the private key of the terminal to obtain the first information; The first information is sent to a cloud server; wherein the first information is used by the cloud service to perform multi-key homomorphic encryption processing and proxy re-encryption processing to obtain a second intermediate result.

13. The method according to claim 12, characterized in that The second information includes: the distance between the terminal and the target location, and the coordinates of the terminal; The distance is obtained by sensing and measuring the target position by the terminal.

14. The method according to claim 12 or 13, characterized in that The first information includes a plurality of second information obtained by the terminal through continuous sensing and ranging.

15. The method according to claim 12 or 13, characterized in that The method further comprises: Receiving a first message from an initiating device, wherein the first message is used to request positioning of a target position; Based on the first message, the target position is sensed and measured to obtain the second information.

16. The method according to claim 15, characterized in that Before performing sensing and ranging on the target position based on the first message, the method further includes: Based on the status information of the terminal, determine whether to accept the positioning task indicated by the first message.

17. A cloud server, characterized in that: include: A transceiver unit, configured to receive first information from a plurality of terminals, wherein the first information is obtained by encrypting second information using a private key of the terminal; A first processing unit, configured to perform multi-key homomorphic encryption processing on each of the first information to obtain a first intermediate result; A second processing unit, configured to perform proxy re-encryption processing on the first intermediate result based on a public key of an initiating device to obtain a second intermediate result; The transceiver unit is further configured to send the second intermediate result to the initiating device.

18. An initiating device, characterized in that: include: A transceiver unit, configured to receive a second intermediate result from a cloud server; a processing unit, configured to decrypt the second intermediate result using a private key of the initiating device; Among them, the second intermediate result is obtained by proxy re-encrypting the first intermediate result based on the public key of the initiating device, the first intermediate result is obtained based on multi-key homomorphic encryption of multiple first information, and the first information is obtained by encrypting the second information using the private key of the terminal.

19. A terminal, characterized in that: include: A processing unit, configured to encrypt the second information using the private key of the terminal to obtain the first information; A transceiver unit is used to send the first information to a cloud server; wherein the first information is used by the cloud service to perform multi-key homomorphic encryption processing and proxy re-encryption processing to obtain a second intermediate result.

20. An information processing system, characterized in that: include: A cloud server, used to implement the method according to any one of claims 1 to 8; An initiating device, configured to implement the method according to any one of claims 9 to 11; A terminal, used to implement the method described in any one of claims 12-16.

21. An electronic device comprising a memory, a processor and a computer program stored in the memory, characterized in that: The processor executes the computer program to implement the method according to any one of claims 1 to 16.

22. A computer-readable storage medium having a computer program / instruction stored thereon, characterized in that: When the computer program / instructions are executed by a processor, the method according to any one of claims 1 to 16 is implemented.

23. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the method according to any one of claims 1 to 16 is implemented.

Images