Privacy calculation method based on physical isolation, data sharing system and electronic equipment

Abstract

The invention provides a privacy calculation method based on physical isolation, a data sharing system and electronic equipment, which are applied to data exchange platforms, each domain is configured with one data exchange platform, each domain is physically isolated based on isolation gatekeeper equipment, and each data exchange platform comprises a privacy calculation module and a data transmission interface. The privacy calculation module comprises a configuration unit, a synchronization unit and an execution unit, and creates a privacy calculation task based on the configuration unit; the privacy computing task comprises participants of a plurality of domains; according to participants in the privacy computing task, the privacy computing task is synchronized to data exchange platforms of other domains through a synchronization unit; performing privacy calculation on target business data involved in the privacy calculation task based on the execution unit to obtain a privacy calculation result; and transmitting the privacy calculation result to the data exchange platform of the target isolation network domain through the isolation gatekeeper equipment. According to the invention, the security in the data sharing process and the data sharing efficiency are improved at the same time.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a privacy computing method, a data sharing system and an electronic device based on physical isolation. Background Art

[0002] With the acceleration of the digitalization process, cross-network data exchange has become the norm. Therefore, it is necessary to perform privacy calculations on shared data during the sharing process of sensitive information such as government data, commercial data, etc. between different data domains of large enterprises and government departments to ensure data security and privacy.

[0003] At present, data exchange and data sharing privacy computing require synchronizing data from different domains to the other side through data exchange before realizing data privacy computing sharing. During the data exchange and data use process, it is not only easy to cause the risk of data leakage, but also because the data needs to be exchanged to the other side before privacy computing is performed, which leads to low efficiency of data sharing.

[0004] Therefore, it is particularly important to develop a data exchange method that can ensure data security and achieve efficient sharing. Summary of the invention

[0005] In view of this, an object of the present invention is to provide a privacy computing method, a data sharing system and an electronic device based on physical isolation, so as to simultaneously improve the security and sharing efficiency in the data sharing process.

[0006] In a first aspect, a privacy computing method based on physical isolation is provided, which is applied to a data exchange platform. Each isolated network domain is configured with a data exchange platform. Each isolated network domain is physically isolated based on an isolation network gateway device. The data exchange platform includes a privacy computing module and a data transmission interface. The privacy computing module includes a configuration unit, a synchronization unit, and an execution unit. The method includes:

[0007] Create a privacy computing task based on the configuration unit; the privacy computing task includes participants in multiple isolated domains;

[0008] According to the participants in the privacy computing task, the privacy computing task is synchronized to the data exchange platform of other isolated domains through the synchronization unit, so that the data exchange platform of other isolated domains can synchronously perform the privacy computing task;

[0009] Based on the execution unit, privacy computing is performed on the target business data involved in the privacy computing task to obtain the privacy computing result;

[0010] Based on the data transmission interface, the privacy calculation results are transmitted to the data exchange platform of the target isolated network domain through the isolation network gateway device, so that the data exchange platform of the target isolated network domain determines the final privacy calculation results based on the privacy calculation results transmitted by the data exchange platforms of each isolated network domain.

[0011] Optionally, when the privacy computing task is a privacy intersection task, each data exchange platform performs privacy computing on the target business data involved in the privacy computing task based on the execution unit, and obtains the privacy computing results including:

[0012] Based on the execution unit, a privacy calculation is performed on the business data of the participants in each domain to obtain a first privacy calculation result, and a privacy intersection calculation is performed based on the first privacy calculation results received from other domains to obtain a second privacy calculation result;

[0013] Correspondingly, the data exchange platform that transmits the privacy computing result to the target isolated network domain through the isolated network gate device based on the data transmission interface includes:

[0014] Based on the data transmission interface, the first privacy calculation result and the second privacy calculation result are respectively transmitted to the data exchange platform of the target isolated network domain through the isolation network gateway device; the target isolated network domain is the domain where the intersection participants in the privacy intersection task are located.

[0015] Optionally, before transmitting the privacy computing result to the data exchange platform of the target isolated network domain through the isolated network gate device based on the data transmission interface, the method further includes:

[0016] Obtain the data format type and current network quality of the business data of the participants in their respective domains;

[0017] Determine a data compression type based on the data format type, where the data compression type includes lossy compression and lossless compression;

[0018] Determine the compression ratio based on the current network quality;

[0019] The first privacy calculation result is lossily compressed or losslessly compressed based on the compression ratio.

[0020] Optionally, performing privacy intersection calculation based on the received first privacy calculation results of other domains to obtain a second privacy calculation result includes:

[0021] Receiving a compressed first privacy calculation result from another domain through a data transmission interface;

[0022] Decompressing the first privacy calculation results of other domains;

[0023] The intersection of the decompressed first privacy calculation result and the first privacy calculation result of each domain is calculated to obtain a second privacy calculation result.

[0024] Optionally, before transmitting the first privacy computing result and the second privacy computing result to the data exchange platform of the target isolated network domain through the isolated network gate device based on the data transmission interface, the method further includes:

[0025] Deploy smart contracts on the blockchain network;

[0026] Upload the first privacy calculation result and the second privacy calculation result of each participant to the storage location specified by the smart contract respectively;

[0027] Verify the validity of privacy calculation results according to the preset rules of smart contracts;

[0028] The second privacy calculation results that have passed the validity test will be recorded on the blockchain and distributed to the data exchange platform of each participant.

[0029] Optionally, after the data exchange platform where the target isolated network domain is located receives the second privacy calculation result, the method further includes:

[0030] Verifying the consistency between the received second privacy result and the second privacy calculation results calculated in the respective domains;

[0031] If the consistency is passed, the received second privacy calculation result is determined as the final privacy intersection result, otherwise the second privacy calculation result is recalculated.

[0032] Optionally, the method further comprises:

[0033] When the number of participants in the privacy intersection task exceeds a preset number, the first privacy calculation results of their respective domains and the first privacy calculation results of some other domains are sent to the intermediate processing server, and the intermediate processing server calculates the intermediate privacy intersection result;

[0034] The second privacy calculation result is determined according to the intermediate privacy intersection result and the privacy intersection results calculated in the respective domains.

[0035] In a second aspect, a data sharing system is provided, including: a data exchange platform arranged in each isolation domain and an isolation network gateway device arranged between the isolation domains, the data exchange platform including a privacy computing module and a data transmission interface, the privacy computing module including a configuration unit, a synchronization unit and an execution unit;

[0036] The configuration unit is used to create a privacy computing task; the privacy computing task includes participants from multiple domains;

[0037] The synchronization unit is used to synchronize the privacy computing task to the data exchange platform of other domains according to the participants in the privacy computing task, so that the data exchange platform of other isolated domains can synchronously perform the privacy computing task;

[0038] The execution unit is used to perform privacy computing on the target business data involved in the privacy computing task and obtain the privacy computing result;

[0039] The data transmission interface is used to transmit the privacy calculation results to the data exchange platform of the target isolated network domain through the isolation network gateway device, so that the data exchange platform of the target isolated network domain determines the final privacy calculation results based on the privacy calculation results transmitted by the data exchange platforms of each isolated network domain.

[0040] In a third aspect, an electronic device is provided, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus;

[0041] Memory, used to store computer programs;

[0042] The processor is used to implement any method step described in the first aspect when executing the program stored in the memory.

[0043] According to a fourth aspect, a computer-readable storage medium is provided, wherein a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, any method step described in the first aspect is implemented.

[0044] The embodiments of the present invention provide a privacy computing method, data sharing system and electronic device based on physical isolation, which creates a privacy computing task based on a configuration unit; the privacy computing task includes participants in multiple isolated network domains; according to the participants in the privacy computing task, the privacy computing task is synchronized to the data exchange platform of other isolated network domains through a synchronization unit; each data exchange platform performs privacy computing on the target business data involved in the privacy computing task based on the execution unit to obtain the privacy computing result; based on the data transmission interface, the privacy computing result is transmitted to the data exchange platform of the target isolated network domain through an isolated network gate device. The present invention greatly improves the security of the data sharing process by performing privacy computing on the business data involved in the privacy computing task without leaving the domain, and transmitting the privacy computing result after privacy computing in combination with the isolated network gate device, and through the synchronization unit, the privacy computing task can be synchronized to the data exchange platform of the domain where other participants are located at the same time, so that each participant can start the privacy computing task synchronously according to the privacy computing task, thereby improving the efficiency of data sharing.

[0045] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0047] Figure 1 A schematic diagram showing the structure of a data sharing system provided by an embodiment of the present invention is shown;

[0048] Figure 2 A flowchart of a privacy computing method based on physical isolation provided by an embodiment of the present invention is shown;

[0049] Figure 3 A schematic structural diagram of an electronic device provided by an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0050] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. The components of the embodiments of the present invention generally described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present invention provided in the drawings is not intended to limit the scope of the claimed invention, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making creative work belong to the scope of protection of the present invention.

[0051] Considering that currently, data exchange and data sharing privacy computing require data from different domains to be synchronized to the other side through data exchange before implementing data privacy computing sharing, it is not only easy to cause data leakage risks during data exchange and data use, but also the need to exchange data to the other side before performing privacy computing leads to low efficiency of data sharing. Based on this, an embodiment of the present invention provides a privacy computing method based on physical isolation, which is described below through an embodiment.

[0052] The embodiment of the present invention provides a privacy computing method based on physical isolation, which is applied to a data exchange platform, such as Figure 1As shown, each isolated network domain is configured with a data exchange platform 101, and each isolated network domain is physically isolated based on an isolation network gateway device 102. The data exchange platform 101 includes a privacy computing module 101A and a data transmission interface 101B. The privacy computing module 101A includes a configuration unit 101A1, a synchronization unit 101A2 and an execution unit 101A3.

[0053] The privacy computing method based on physical isolation in an embodiment of the present invention is described in detail below. Figure 2 As shown, the following steps are included:

[0054] Step S201: Create a privacy computing task based on the configuration unit; the privacy computing task includes participants in multiple isolated network domains.

[0055] In the embodiment of the present application, the privacy computing task is, for example, a privacy intersection task, an anonymous query task, etc. The privacy intersection task is used for two or more participants to determine the intersection elements in the sets they own without revealing any additional information.

[0056] In a specific business scenario, for example, advertisers and websites can find common user groups through privacy intersection, and thus conduct precision marketing without exposing specific user information. The advertisers and websites are in two domains, the advertisers are one participant, and the websites are the other participant.

[0057] Stealth query task, which allows one party (sender) to send information to another party (receiver), but the sender does not know which information the receiver has selected, and the receiver does not know what other information is available besides the information he has selected. In short, the stealth query ensures that the receiver can only obtain the information he requested, while the sender does not know which specific information has been requested.

[0058] In a specific business scenario, for example, a user can obtain information from a server anonymously, and the server does not know who requested the information.

[0059] Step S202: According to the participants in the privacy computing task, the privacy computing task is synchronized to the data exchange platform of other isolated network domains through the synchronization unit, so that the data exchange platform of other isolated network domains synchronously performs the privacy computing task.

[0060] In this step, when a privacy computing task involves multiple parties, a privacy computing task is created in the domain where one party is located, and the privacy computing task is synchronized to the data exchange platform in the domains of other parties through the synchronization unit, so that each party can start the privacy computing task synchronously according to the privacy computing task, which not only improves the efficiency of data sharing, but also ensures the consistency of the privacy computing task configuration of the data exchange platforms in different domains.

[0061] Step S203: Based on the execution unit, privacy computing is performed on the target business data involved in the privacy computing task to obtain a privacy computing result.

[0062] In an embodiment of the present invention, the target business data is data related to the privacy computing task. For example, if the privacy computing task is to find the intersection of business data A and business data B, then the target business data is business data A and business data B.

[0063] Among them, the privacy computing needs to perform different privacy computing processes according to the specific content of the privacy computing task to obtain the corresponding privacy computing results.

[0064] Step S204: Based on the data transmission interface, the privacy calculation result is transmitted to the data exchange platform of the target isolated network domain through the isolation network gate device, so that the data exchange platform of the target isolated network domain determines the final privacy calculation result based on the privacy calculation results transmitted by the data exchange platforms of each isolated network domain.

[0065] In the embodiments of the present invention, data in each domain can only be transmitted to other domains after being encrypted by privacy computing, thereby realizing privacy computing of data without leaving the isolated domain, and realizing security and privacy protection in the data sharing process. In addition, physical isolation is achieved between domains through isolation network devices, and isolation is achieved by cutting off physical connections, ensuring absolute isolation between networks. Physical isolation provides the highest level of security, and it is almost impossible to break through isolation through conventional network attacks. This further improves the security of the data sharing process.

[0066] The embodiment of the present invention performs privacy computing on the business data involved in the privacy computing task without leaving the domain, and transmits the privacy computing results after privacy computing in combination with the isolation network device, thereby greatly improving the security of the data sharing process. In addition, through the synchronization unit, the privacy computing task can be synchronized to the data exchange platform in the domain where other participants are located, so that each participant can start the privacy computing task synchronously according to the privacy computing task, thereby improving the efficiency of data sharing.

[0067] In a specific embodiment, when the privacy computing task is a privacy intersection task, each data exchange platform performs privacy computing on the target business data involved in the privacy computing task based on the execution unit, and obtains the privacy computing results including:

[0068] Step S203A: Based on the execution unit, a privacy calculation is performed on the business data of the participants in each domain to obtain a first privacy calculation result, and a privacy intersection calculation is performed based on the first privacy calculation results received from other domains to obtain a second privacy calculation result.

[0069] In a specific example, for example, the data of isolation domain A needs to be intersected with the data of isolation domain B, and isolation domain A and isolation domain B respectively have data sets E(X) = {e(x1), e(x2), e(x3)} and E(Y) = {e(y1), e(y2), e(y3)};

[0070] First, isolated domain A and isolated domain B perform the first privacy calculation on their respective data sets at the same time. The calculation process includes:

[0071] The first step is to generate random values ​​and isolate domain A for each element e(x i )∈E(X) generates a random number r i , and calculate the first privacy calculation result h i =H(r i ); Isolate domain B for each element e(y j )∈E(Y) generates a random number s j , and calculate the first privacy calculation result g j =H(s j ).

[0072] The second step is to make the hash value public and isolate domain A to make all h i Send to isolated domain B; isolated domain B will send all g j Sent to isolation domain A.

[0073] The third step is to calculate the intersection. Isolation domain A and isolation domain B use the received hash values ​​to find a match. i =g j , then the corresponding e(x i ) and e(y j ) are likely to belong to the same original data (because the probability of hash collision is very small). Therefore, by comparing these matching hash values, both parties can determine which data items belong to the intersection E(X∩Y). By comparing the matching hash values ​​to determine the intersection, an encrypted version of the intersection is generated.

[0074] The above method can securely calculate the intersection of two data sets without either party revealing the original data.

[0075] Correspondingly, the data exchange platform that transmits the privacy computing result to the target isolated network domain through the isolated network gate device based on the data transmission interface includes:

[0076] Step S204A: Based on the data transmission interface, the first privacy calculation result and the second privacy calculation result are respectively transmitted to the data exchange platform of the target isolated domain through the isolation network gateway device; the target isolated domain is the domain where the intersection participant in the privacy intersection task is located.

[0077] Based on the above example, if participant A in isolation domain A, as the initiator, wants to obtain the same data as participant B in isolation domain B, then a privacy intersection task is configured in the data interaction platform on the A side and synchronized to isolation domain B at the same time. Isolation domain A and isolation domain B simultaneously perform privacy calculations on their own business data to obtain a first privacy calculation result, and send the calculated privacy calculation results to each other. The two parties then calculate the intersection based on the received first privacy calculation result to obtain a second privacy calculation result. The two parties can send the second privacy calculation result to each other or to one of them according to actual task requirements.

[0078] It is worth noting that when there are more than two participants, for example, three participants A, B, and C, it is necessary to determine which isolation domain the first privacy calculation result is sent to based on the specific task requirements in the privacy intersection task. For example, if the privacy intersection task requires calculating the common data intersection between the three participants A, B, and C, then each participant needs to send its first privacy calculation result to the other two parties. If the privacy intersection task requires calculating the common intersection between participant A and participants B and C, then participants B and C do not need to calculate the intersection, so participants B and C do not need to send their first privacy calculation results to each other. Similarly, the second privacy calculation result can also be determined according to the specific task requirements to determine which isolation domain to send it to.

[0079] Based on the above embodiment, before transmitting the privacy computing result to the data exchange platform of the target isolated network domain through the isolated network gate device based on the data transmission interface, the method further includes:

[0080] Step S203A1: Acquire the data format type and current network quality of the service data of the participants in the respective domains.

[0081] In this step, the data format type includes text type, audio type, video stream, etc. The network quality can be characterized by network bandwidth, etc.

[0082] Step S203A2: Determine the data compression type based on the data format type, where the data compression type includes lossy compression and lossless compression.

[0083] In this step, lossless compression needs to maintain the integrity of the original data, while lossy compression allows a certain degree of distortion. For text files, database records, etc., lossless compression algorithms can be used to compress data, such as LZ77, LZ78, Huffman coding, etc. For audio and video streams, the resolution can be reduced to a certain extent without affecting the integrity of the data, so lossy compression can be used to compress the data.

[0084] Step S203A3: Determine the compression ratio based on the current network quality.

[0085] When it is detected that the network bandwidth is low, a higher compression ratio can be selected to reduce the size of the data packet, thereby speeding up the transmission speed. Conversely, when it is detected that the network bandwidth is high, a smaller compression ratio can be selected to compress the data.

[0086] Step S203A4: Perform lossy compression or lossless compression on the first privacy calculation result based on the compression ratio.

[0087] Since the first privacy calculation result is encrypted based on the original data and the data packet is large, it can be transmitted through compression to improve data sharing efficiency. The second privacy calculation result is already the result after intersection, and data storage is greatly reduced, so there is no need for compression.

[0088] Based on the above-mentioned privacy calculation, the embodiment of the present invention further performs adaptive data compression on the first privacy calculation result, and automatically adjusts the compression ratio and compression type according to the characteristics of the data and changes in the network environment, thereby improving transmission efficiency while ensuring data security.

[0089] Based on the above embodiment, a privacy intersection calculation is performed based on the received first privacy calculation results of other domains to obtain a second privacy calculation result including:

[0090] Receiving a compressed first privacy calculation result from another domain through a data transmission interface;

[0091] Decompressing the first privacy calculation results of other domains;

[0092] The intersection of the decompressed first privacy calculation result and the first privacy calculation result of each domain is calculated to obtain a second privacy calculation result.

[0093] In the embodiment of the present invention, since the first privacy calculation result is compressed, when it is transmitted to other domains, the privacy intersection calculation can be performed after decompression.

[0094] Based on the above embodiment, before transmitting the first privacy computing result and the second privacy computing result to the data exchange platform of the target isolated network domain through the isolated network gate device based on the data transmission interface, the method further includes:

[0095] Smart contract deployment: deploy smart contracts on the blockchain network;

[0096] Data encryption upload: upload the first privacy calculation result and the second privacy calculation result of each participant to the storage location specified by the smart contract respectively;

[0097] Validity verification: Verify the validity of privacy calculation results according to the preset rules of the smart contract;

[0098] Result distribution: The second privacy calculation results that have passed validity will be recorded on the blockchain and distributed to the data exchange platform of each participant.

[0099] The embodiment of the present invention combines smart contracts with privacy computing to ensure the privacy of data and the correctness of calculation results, while recording them on the blockchain to ensure the transparency and non-tamperability of the calculation process.

[0100] Based on the above embodiment, after the data exchange platform where the target isolated network domain is located receives the second privacy calculation result, the method further includes:

[0101] Verify the consistency between the received second privacy result and the second privacy calculation results calculated in the respective domains.

[0102] In one example, for Party A and Party B, after both parties calculate the second privacy calculation result, they can send it to each other. For example, Party A can perform consistency verification based on the second privacy calculation result calculated on its own end and the second privacy calculation result sent by Party B.

[0103] Specifically, the checksum of the data can be calculated by using a hash function (such as MD5, SHA-1, SHA-256, etc.). If the checksums of two data are the same, it means that they are likely to be consistent.

[0104] If the consistency is passed, the received second privacy calculation result is determined as the final privacy intersection result, otherwise the second privacy calculation result is recalculated.

[0105] It should be noted that the number of second privacy calculation results received is at least one, and may be multiple. If there are multiple second privacy calculation results, there are two cases. One is that the multiple second privacy calculation results received are the common intersection of multiple participants, such as the common intersection of participants A, B, C, and D. In this case, participant A only calculates one second privacy calculation result, and verifies the consistency of the second privacy calculation result calculated by itself with the second privacy calculation results of the other three participants respectively. The other is the intersection between some participants. For example, the common data of participant A with B, C, and D respectively, then on the end of participant A, three second privacy calculation results are calculated, namely, the second privacy calculation results of A and B, A and C, and A and D. These three privacy calculation results are respectively corresponded to the second privacy calculation results sent by participant B, the second privacy calculation results sent by participant C, and the second privacy calculation results sent by participant D for consistency verification. If the consistency fails, the one will be recalculated. For example, when calculating the consistency of the second privacy calculation results of A and B, if it fails, only the second privacy calculation results of A and B need to be recalculated.

[0106] By verifying consistency, the accuracy of privacy computing results can be improved.

[0107] Based on the above embodiment, the method further includes:

[0108] When the number of participants in the privacy intersection task exceeds a preset number, the first privacy calculation results of their respective domains and the first privacy calculation results of some other domains are sent to the intermediate processing server, and the intermediate processing server calculates the intermediate privacy intersection result;

[0109] The second privacy calculation result is determined according to the intermediate privacy intersection result and the privacy intersection results calculated in the respective domains.

[0110] In one example, for example, there are four participants A, B, C, and D who want to perform privacy intersection, and the task is to calculate the common data between participant A and B, C, and D respectively. Then, after receiving the first privacy result sent by participants B, C, and D, participant A can send the first privacy calculation result of A and B and C to the intermediate processing server, and the intermediate processing server will calculate the common data between participant A and B and C respectively. The data exchange platform where participant A is located can only calculate the common data with participant D. The intermediate processing server sends the calculated intermediate privacy intersection result to participant A, and participant A only needs to determine the sum of the received intermediate privacy intersection result and the privacy intersection result of its own domain as the second privacy result, thereby greatly reducing the calculation burden and improving the calculation efficiency.

[0111] It is worth noting that if the privacy computing task is to calculate the common data of four participants A, B, C, and D, then it is necessary to further calculate the intersection of the privacy intersection result and the privacy intersection result of its own domain to determine the final second privacy result.

[0112] As the number of participants increases, the computational complexity increases, the computation time required increases, and the efficiency decreases. Therefore, the introduction of an intermediate processing server can effectively help coordinate data processing, thereby reducing the burden on a single node. This can improve the efficiency of privacy computing and the overall performance and reliability of the data sharing system.

[0113] Based on the same inventive concept, a data sharing system is provided, such as Figure 1 As shown, it includes: a data exchange platform 101 set in each isolated network domain and an isolated network gate device 102 set between the isolated network domains, the data exchange platform 101 includes a privacy computing module 101A and a data transmission interface 101B, and the privacy computing module 101A includes a configuration unit 101A1, a synchronization unit 101A2 and an execution unit 101A3;

[0114] The configuration unit 101A1 is used to create a privacy computing task; the privacy computing task includes participants in multiple isolated network domains;

[0115] The synchronization unit 101A2 is used to synchronize the privacy computing task to the data exchange platform of other isolated network domains according to the participants in the privacy computing task, so that the data exchange platform of other isolated network domains synchronously performs the privacy computing task;

[0116] The execution unit 101A3 is used to perform privacy computing on the target business data involved in the privacy computing task to obtain a privacy computing result;

[0117] The data transmission interface 101B is used to transmit the privacy calculation result to the data exchange platform of the target isolated network domain through the isolated network gateway device, so that the data exchange platform of the target isolated network domain determines the final privacy calculation result based on the privacy calculation results transmitted by the data exchange platforms of each isolated network domain.

[0118] Optionally, the data sharing system also includes an intermediate processing server, which is used to send the first privacy calculation results of their respective domains and the first privacy calculation results of some other domains to the intermediate processing server when the number of participants in the privacy intersection task exceeds a preset number, and the intermediate processing server calculates the intermediate privacy intersection results.

[0119] Based on the same technical concept, an embodiment of the present invention further provides an electronic device, such as Figure 3 As shown, it includes a processor 301 , a communication interface 302 , a memory 303 and a communication bus 304 , wherein the processor 301 , the communication interface 302 , and the memory 303 communicate with each other via the communication bus 304 .

[0120] Memory 303, used for storing computer programs;

[0121] The processor 301 is used to implement the steps of the privacy computing method based on physical isolation when executing the program stored in the memory 303.

[0122] The communication bus mentioned in the above electronic device can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0123] The communication interface is used for communication between the above electronic device and other devices.

[0124] The memory may include a random access memory (RAM) or a non-volatile memory (NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

[0125] The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0126] The computer program product for performing a privacy computing method based on physical isolation provided in an embodiment of the present invention includes a computer-readable storage medium storing program code. The instructions included in the program code can be used to execute the method described in the previous method embodiment. The specific implementation can be found in the method embodiment, which will not be repeated here.

[0127] The device of the privacy computing method based on physical isolation provided in the embodiment of the present invention can be specific hardware on the device or software or firmware installed on the device. The device provided in the embodiment of the present invention has the same implementation principle and technical effects as the aforementioned method embodiment. For the sake of brief description, the parts not mentioned in the device embodiment can refer to the corresponding contents in the aforementioned method embodiment. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, devices and units described above can all refer to the corresponding processes in the aforementioned method embodiment, and will not be repeated here.

[0128] In the embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

[0129] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0130] In addition, each functional unit in the embodiment provided by the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0131] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program codes.

[0132] It should be noted that similar numbers and letters represent similar items in the following figures. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures. In addition, the terms "first", "second", "third", etc. are only used to distinguish the description and are not to be understood as indicating or implying relative importance.

[0133] Finally, it should be noted that the above-described embodiments are only specific implementations of the present invention, which are used to illustrate the technical solutions of the present invention, rather than to limit them. The protection scope of the present invention is not limited thereto. Although the present invention is described in detail with reference to the above-described embodiments, those skilled in the art should understand that any person skilled in the art can still modify the technical solutions described in the above-described embodiments within the technical scope disclosed by the present invention, or can easily think of changes, or perform equivalent replacements on some of the technical features thereof; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention. They should all be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A privacy computing method based on physical isolation, characterized in that: Applied to a data exchange platform, each isolated network domain is configured with a data exchange platform, each isolated network domain is physically isolated based on an isolation network gateway device, the data exchange platform includes a privacy computing module and a data transmission interface, the privacy computing module includes a configuration unit, a synchronization unit and an execution unit, and the method includes: Creating a privacy computing task based on the configuration unit; the privacy computing task includes participants in multiple isolated network domains; According to the participants in the privacy computing task, the privacy computing task is synchronized to the data exchange platform of other isolated network domains through the synchronization unit, so that the data exchange platform of other isolated network domains synchronously performs the privacy computing task; Performing privacy computing on the target business data involved in the privacy computing task based on the execution unit to obtain a privacy computing result; Based on the data transmission interface, the privacy calculation result is transmitted to the data exchange platform of the target isolated network domain through the isolation network gateway device, so that the data exchange platform of the target isolated network domain determines the final privacy calculation result based on the privacy calculation results transmitted by the data exchange platforms of each isolated network domain.

2. The method according to claim 1, characterized in that When the privacy computing task is a privacy intersection task, each data exchange platform performs privacy computing on the target business data involved in the privacy computing task based on the execution unit, and obtains the privacy computing results including: Based on the execution unit, a privacy calculation is performed on the business data of the participants in the respective domains to obtain a first privacy calculation result, and a privacy intersection calculation is performed based on the first privacy calculation results received from other domains to obtain a second privacy calculation result; Correspondingly, the method of transmitting the privacy computing result to the data exchange platform of the target isolated network domain through the isolated network gate device based on the data transmission interface includes: Based on the data transmission interface, the first privacy calculation result and the second privacy calculation result are respectively transmitted to the data exchange platform of the target isolated network domain through the isolation network gateway device; the target isolated network domain is the domain where the intersection participants in the privacy intersection task are located.

3. The method according to claim 2, characterized in that Before transmitting the privacy computing result to the data exchange platform of the target isolated network domain through the isolated network gate device based on the data transmission interface, the method further includes: Obtain the data format type and current network quality of the business data of the participants in their respective domains; Determine a data compression type based on the data format type, the data compression type including lossy compression and lossless compression; Determine the compression ratio based on the current network quality; The first privacy calculation result is lossily compressed or losslessly compressed based on the compression ratio.

4. The method according to claim 3, characterized in that The performing privacy intersection calculation based on the received first privacy calculation results of other domains to obtain the second privacy calculation result includes: Receiving a compressed first privacy calculation result from another domain through a data transmission interface; Decompressing the first privacy calculation results of other domains; The intersection of the decompressed first privacy calculation result and the first privacy calculation result of each domain is calculated to obtain a second privacy calculation result.

5. The method according to claim 2, characterized in that: Before transmitting the first privacy computing result and the second privacy computing result to the data exchange platform of the target isolated network domain through the isolated network gatekeeper device based on the data transmission interface, the method further includes: Deploy smart contracts on the blockchain network; Upload the first privacy calculation result and the second privacy calculation result of each participant to the storage location specified by the smart contract respectively; Verify the validity of privacy calculation results according to the preset rules of smart contracts; The second privacy calculation results that have passed the validity test will be recorded on the blockchain and distributed to the data exchange platform of each participant.

6. The method according to claim 1, characterized in that After the data exchange platform where the target isolated network domain is located receives the second privacy calculation result, the method further includes: Verifying the consistency between the received second privacy result and the second privacy calculation results calculated in the respective domains; If the consistency is passed, the received second privacy calculation result is determined as the final privacy intersection result, otherwise the second privacy calculation result is recalculated.

7. The method according to claim 2, characterized in that The method further comprises: When the number of participants in the privacy intersection task exceeds a preset number, the first privacy calculation results of their respective domains and the first privacy calculation results of some other domains are sent to the intermediate processing server, and the intermediate processing server calculates the intermediate privacy intersection result; A second privacy calculation result is determined according to the intermediate privacy intersection result and the privacy intersection results of the respective domain calculations.

8. A data sharing system constructed based on the privacy computing method based on physical isolation according to any one of claims 1 to 7, characterized in that: include: A data exchange platform set up in each isolated network domain and an isolation network gateway device set up between isolated network domains, the data exchange platform includes a privacy computing module and a data transmission interface, the privacy computing module includes a configuration unit, a synchronization unit and an execution unit; The configuration unit is used to create a privacy computing task; the privacy computing task includes participants in multiple domains; The synchronization unit is used to synchronize the privacy computing task to the data exchange platform of other isolated network domains according to the participants in the privacy computing task, so that the data exchange platform of other isolated network domains synchronously performs the privacy computing task; The execution unit is used to perform privacy computing on the target business data involved in the privacy computing task to obtain a privacy computing result; The data transmission interface is used to transmit the privacy calculation result to the data exchange platform of the target isolated network domain through the isolated network gateway device, so that the data exchange platform of the target isolated network domain determines the final privacy calculation result based on the privacy calculation results transmitted by the data exchange platforms of each isolated network domain.

9. An electronic device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus; Memory, used to store computer programs; A processor, for implementing the method steps described in any one of claims 1 to 7 when executing a program stored in a memory.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method steps described in any one of claims 1 to 7 are implemented.

Images