Data processing method, data management device, data processing device and storage medium

Abstract

The embodiment of the invention provides a data processing method, data management equipment, data processing equipment and a storage medium, and relates to the technical field of communication. The method comprises the following steps: sending corresponding secret key data to each data processing device in an interaction group so as to determine data interaction integrity according to a first signature verification result generated by all the data processing devices in the interaction group during data interaction; converting the data processing algorithm into a corresponding prover and a verifier, obtaining a data calculation result calculated by the target data processing equipment based on the prover, verifying the data calculation result based on the verifier to obtain a data verification result, and determining data calculation integrity according to the data verification result; and determining the data reliability according to the data interaction integrity and the data calculation integrity. The embodiment of the invention aims to ensure the integrity of interactive data and the reliability of related operation processes and results at a lower cost, so that the purpose of safely and reliably performing data management is achieved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a data processing method, a data management device, a data processing device and a storage medium. Background Art

[0002] With the continuous development of information technology, the amount of data generated by people in their daily lives is becoming increasingly huge. Effectively supervising and auditing data, and collecting and mining reliable and effective information from the data have become increasingly urgent needs for management agencies at all levels.

[0003] However, the current data governance situation is difficult to meet the above goals. The main reason is that data processors (such as enterprises) have too much control over data compared with data subjects (such as consumers) and management agencies (such as the National Data Bureau). Data processors can tamper with data during the interaction or calculation process, thereby affecting the data processing results.

[0004] Therefore, there is an urgent need for a method to process interactive data that can ensure data integrity and computing process integrity, as well as the reliability of computing results. Summary of the invention

[0005] The main purpose of the embodiments of the present application is to provide a data processing method, a data management device, a data processing device and a storage medium, aiming to ensure the integrity of interactive data and the reliability of related calculation processes and results at a lower cost, so as to achieve the purpose of safe and reliable data governance.

[0006] In a first aspect, an embodiment of the present application provides a data processing method, which is applied to a data management device, and the method includes:

[0007] Sending the corresponding secret key data to each data processing device in the interaction group, so that each data processing device verifies the acquired signature data according to the corresponding secret key data to obtain a first signature verification result when performing data interaction, and determining the data interaction integrity according to the first signature verification result generated by all data processing devices in the interaction group;

[0008] Obtaining a data processing algorithm and converting the data processing algorithm into a corresponding prover and verifier;

[0009] Sending the prover to a target data processing device so that the target data processing device calculates the interaction data based on the prover to obtain a data calculation result;

[0010] Acquire the data calculation result, and verify the data calculation result based on the verifier to obtain a data verification result, and determine the data calculation integrity according to the data verification result;

[0011] The data reliability is determined based on the data interaction integrity and the data calculation integrity.

[0012] In a second aspect, an embodiment of the present application provides a data processing method, which is applied to a data processing device, and the method includes:

[0013] Receive the secret key data sent by the data management device, and when interacting with the remaining data processing devices in the interaction group, obtain the signature data corresponding to the remaining data processing devices;

[0014] Verifying the signature data according to the secret key data to obtain a first signature verification result, and determining data interaction integrity according to the first signature verification results generated by all data processing devices in the interaction group;

[0015] Obtaining a prover sent by the data management device, and calculating the interaction data based on the prover to obtain a data calculation result;

[0016] Sending the data calculation result to the data management device, so that the data management device verifies the data calculation result based on the verifier to obtain a data verification result, and determines the data calculation integrity according to the data verification result;

[0017] The data reliability is determined based on the data interaction integrity and the data calculation integrity.

[0018] In a third aspect, an embodiment of the present application provides a data management device, the data management device comprising:

[0019] A processor, a memory, a computer program stored in the memory and executable by the processor, and a data bus for realizing connection and communication between the processor and the memory, wherein when the computer program is executed by the processor, the steps of the data processing method as applied to the data management device as described above are realized.

[0020] In a fourth aspect, an embodiment of the present application provides a data processing device, wherein the data management device includes:

[0021] A processor, a memory, a computer program stored in the memory and executable by the processor, and a data bus for realizing connection and communication between the processor and the memory, wherein when the computer program is executed by the processor, the steps of the data processing method as applied to the data processing device as described above are realized.

[0022] In a fifth aspect, an embodiment of the present application provides a storage medium for computer-readable storage, wherein the storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the data processing method as applied to the data management device or the steps of the data processing method as applied to the data processing device as described above.

[0023] The embodiments of the present application provide a data processing method, a data management device, a data processing device and a storage medium. The data management device sends the corresponding secret key data to each data processing device in the interaction group, so that each data processing device determines the integrity of the data interaction according to the corresponding secret key data when performing data interaction; and obtains the data processing algorithm, and converts the data processing algorithm into the corresponding prover and verifier; then obtains the data calculation result generated by the target data processing device based on the prover, and determines the data calculation integrity according to the data calculation result; thereby determining the data reliability according to the data interaction integrity and the data calculation integrity. Therefore, by utilizing digital signatures and zero-knowledge proof technology, the management agency can ensure the integrity of the original data and the reliability of the related operation processes and results at a lower cost, and can effectively discover the improper behavior of the data processor, ensure the credibility of the data governance results, and thus achieve the purpose of data governance. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0025] Figure 1 A flowchart of a data processing system provided in an embodiment of the present application;

[0026] Figure 2 A flowchart of a data processing method applied to a data management device provided in an embodiment of the present application;

[0027] Figure 3 A schematic diagram of a structure of an output structure of a prover program provided in an embodiment of the present application;

[0028] Figure 4 A flowchart of a data processing method applied to a data processing device provided in an embodiment of the present application;

[0029] Figure 5 A schematic diagram of the structure of a signature data provided in an embodiment of the present application;

[0030] Figure 6A flowchart of a registration process provided in an embodiment of the present application;

[0031] Figure 7 A flowchart of an identity verification process provided in an embodiment of the present application;

[0032] Figure 8 A schematic diagram of a process flow of a delegated computing process provided in an embodiment of the present application;

[0033] Fig. 9 A flow chart of a data interaction process provided in an embodiment of the present application

[0034] Fig.10 A schematic diagram of a proxy computing process provided in an embodiment of the present application;

[0035] Fig.11 A flowchart of a historical data verification process provided in an embodiment of the present application;

[0036] Fig.12 A schematic diagram of an e-commerce application scenario provided in an embodiment of the present application;

[0037] Fig.13 A schematic block diagram of the structure of a data management device provided in an embodiment of the present application;

[0038] Fig.14 A schematic block diagram of the structure of a data processing device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0039] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0040] The flowcharts shown in the accompanying drawings are only examples and do not necessarily include all the contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps may also be decomposed, combined or partially merged, so the actual execution order may change according to actual conditions.

[0041] It should be understood that the terms used in this application specification are only for the purpose of describing specific embodiments and are not intended to limit the application. As used in this application specification and the appended claims, unless the context clearly indicates otherwise, the singular forms "a", "an" and "the" are intended to include plural forms.

[0042] In the current data governance situation, data processors (such as enterprises) have too much control over data compared with data subjects (such as consumers) and management agencies (such as the National Data Bureau), which is mainly manifested in the following ways:

[0043] (1) Compared with data subjects and management agencies, data processors are often able to first obtain and preserve more complete original data.

[0044] (2) In most cases, data processors have the ability to change original data without the knowledge of the data subject and the management agency.

[0045] (3) Currently, there is no effective method to enforce constraints on the data processing process of data processors. In most cases, data processors have the ability to adjust the data processing process at any time according to their own needs without the knowledge of the data subject and the management agency, thereby affecting the data processing results.

[0046] Excessive control over data by data processors will lead to a series of adverse consequences:

[0047] (1) Due to factors such as cost, data subjects generally do not record complete historical interaction data (even if there is a record, it is often recorded on a software terminal controlled by the data processor). Therefore, data processors can damage the interests of data subjects by tampering with, deleting or falsifying historical data.

[0048] (2) When the management agency wishes to perform specific operations on the data stored by the data processor (such as auditing or industry indicator statistics), the data processor can affect the final calculation results and benefit itself by tampering with, deleting or falsifying specific historical data. If the specific calculation process is performed in an environment controlled by the data processor (such as self-examination and self-correction or entrusted calculation, etc.), it can directly tamper with the calculation process or even the calculation result.

[0049] At present, data subjects (such as consumers) are generally in a weak position and have no ability to directly intervene in or restrict the above-mentioned violations or illegal behaviors of data processors (such as enterprises). The response measures taken by the management agency mainly include:

[0050] (1) Directly assign management personnel to data processors to supervise the entire data lifecycle. Although this method can enforce all violations or illegal behaviors of data processors, effectively ensure that data integrity and the integrity of the calculation process are not destroyed, and ensure the reliability of the calculation results, this method has high management costs and has a significant impact on the operation and management of data processors. The management agency needs to bear some of the risks that originally belonged to the data processor.

[0051] (2) Require data processors to save all data images to devices controlled by the management agency. Although this method can greatly reduce the risk of data integrity being compromised, the management agency needs to bear the additional software, hardware and operation and maintenance costs of the data storage equipment, the data processor needs to bear the additional data transmission costs, and the management agency needs to bear the additional risk of data leakage.

[0052] (3) Under the premise of the previous measure, the management agency runs a specific computing process in the equipment under its control and obtains the results. Although this method can greatly reduce the risk of data integrity being damaged, can ensure the integrity of the computing process, and ensure the reliability of the computing results, the management agency needs to bear the additional software and hardware and operation and maintenance costs of the data storage equipment, the data processor needs to bear the additional data transmission costs, the management agency needs to bear the additional data leakage risks, and the management agency needs to bear the additional computing costs.

[0053] (4) Formulate relevant laws or industry regulations. Although this method provides a basis for punishing data processors when violations or illegal acts are discovered, and the management agency does not need to invest additional costs, it cannot enforce all violations or illegal acts of data processors, cannot effectively ensure that data integrity and the integrity of the calculation process are not destroyed, and cannot ensure the reliability of the calculation results.

[0054] The embodiments of the present application provide a data processing method, a data management device, a data processing device and a storage medium. Among them, the method can be applied to a data management device or a data processing device, wherein the data management device can be a server or terminal device corresponding to a management agency, and the data processing device can be a server or terminal device corresponding to a data subject or a data processor. The server can be an independent server, or it can be a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content distribution networks (Content Delivery Network, CDN), and big data and artificial intelligence platforms. The terminal device can be a smart phone, a tablet computer, a laptop, a desktop computer, a smart speaker, a smart watch, etc., but is not limited to this.

[0055] Please refer to Figure 1 , Figure 1 The present invention provides a flow chart of a data processing system provided in an embodiment of the present invention. The data processing system can be applied in application scenarios such as e-commerce scenarios, financial service scenarios, and medical service scenarios.

[0056] like Figure 1As shown, an interactive group includes two data processing devices (data subject and data processor) as an example. The data processing system may include a management agency, a data subject and a data processor. The management agency may include an algorithm management module, a zero-knowledge proof module and an identity information and key management module; the data subject may include a data processing module; the data processor may include a data processing module, a computing module and a data storage module.

[0057] The algorithm management module of the management agency is responsible for processing the data operation algorithms that the management agency wants to execute. Data governance often involves many different types of data operation algorithms, such as financial auditing, credit analysis, industry data statistics, etc. Managers need to accurately define the processing flow of these algorithms and input them into this module for saving for subsequent processing.

[0058] The zero-knowledge proof module of the management agency is responsible for the zero-knowledge proof conversion of the data algorithm, the distribution of the prover, and the verification of the calculation results. Whenever the management agency needs to execute a certain data algorithm, this module will obtain the algorithm from the algorithm management module and convert it into a pair of verifiers and provers using the zero-knowledge proof library. The prover will be distributed to the data processor where the data is located for operation (through the data processor's calculation module). After receiving the calculation result and receipt returned by it, this module will call the corresponding verifier to verify the receipt. After the verification passes, the calculation result will be fed back to the algorithm management module.

[0059] The identity information and key management module of the management agency is responsible for managing and distributing the key data and identity information of all interacting parties (data subjects and data processors). At the beginning, all interacting parties need to provide their own information to the management agency and register. After the management agency reviews and approves the applicant, it will generate and distribute a key data for the applicant, and save the key data and identity information, as well as the relationship between the two.

[0060] The data processing module of the data subject is responsible for the interactive data processing related to the data subject. The secret key data distributed by the identity information and key management module to the data subject will be saved by this module. Whenever the data subject interacts with the outside world to generate new interactive data, this module will use the secret key data to add and sign the data to protect the integrity of the data. This module can also check whether the identity and signature information contained in specific data is legal (data integrity check).

[0061] The data processing module of the data processor is responsible for the interactive data processing related to the data processor. The secret key data distributed by the identity information and key management module to the data processor will be saved by this module. Whenever the data processor interacts with the outside world to generate new interactive data, this module will use the secret key data to add and sign the data to protect the integrity of the data. This module can also check whether the identity and signature information contained in specific data is legal (data integrity check). Finally, this module also needs to send the interactive data it has handled to the data storage module for archiving.

[0062] The data processor's computing module is responsible for receiving and running the prover program sent by the zero-knowledge proof module, and returning the calculation results and receipt output by the prover.

[0063] The data storage module of the data processor is responsible for saving and managing the historical interaction data handled by the data processor. The prover program running locally through the calculation module will read the required data through this module. The data processor can also query the content of historical data through this module.

[0064] Please refer to Figure 2 , Figure 2 A flow chart of a data processing method provided in an embodiment of the present application. The data processing method is applied to data management equipment, and can enable management agencies to ensure the integrity of original data and the reliability of related operation processes and results at a lower cost by utilizing digital signatures and zero-knowledge proof technology, and can effectively detect improper behavior of data processors, thereby ensuring the credibility of data governance results, thereby achieving its data governance purpose.

[0065] like Figure 2 As shown, the data processing method applied in the data management device may include S101 to S105.

[0066] S101. Sending the corresponding secret key data to each data processing device in the interaction group, so that each data processing device can verify the acquired signature data according to its corresponding secret key data to obtain a first signature verification result when performing data interaction, and determine the data interaction integrity according to the first signature verification result generated by all data processing devices in the interaction group.

[0067] Among them, the interaction group is a group composed of multiple data processing devices (interaction parties) that need to interact with data. The secret key data may include public keys and private keys, wherein the public key can be obtained by any data processing device and is used for identity authentication and signature verification operations; the private key will be stored in its corresponding data processing device and cannot be obtained by other data processing devices, and is used to sign the interaction data. The signature data is generated after each data processing device signs the interaction data. The first signature verification result is generated after each data processing device verifies the signature data of the remaining data processing devices. Data interaction integrity is used to indicate the integrity of data during the interaction process.

[0068] Specifically, all data processing devices in the interactive group hold their own secret key data, which is generated using asymmetric encryption technology and includes a public key and a private key. Digital signature is an encryption technology that uses asymmetric encryption algorithms to verify the authenticity and integrity of data. It can prevent tampering and forgery, because any data tampering will cause the original signature to fail to pass verification. Therefore, it is widely used in online transactions, digital certificates, emails, and identity authentication.

[0069] In some embodiments, before sending the corresponding secret key data to each data processing device in the interaction group, a registration request sent by each data processing device in the interaction group is obtained, and the registration request includes the identity information corresponding to each data processing device; the identity of each data processing device is verified according to the identity information corresponding to each data processing device; if the identity verification of each data processing device is successful, the secret key data corresponding to each data processing device is generated. In this way, the secret key data can be generated for each data processing device through the data management device, thereby ensuring the security of the secret key data.

[0070] The registration request includes the identity information of the corresponding data processing device, which may include the actual processor, credit rating, and other information corresponding to the data processing device.

[0071] Specifically, the data management device receives a registration request initiated by a data processing device, wherein the registration request needs to contain necessary identity data for the data management device to review. The data management device reviews the registration data. If the review is passed, it can use an asymmetric encryption algorithm (such as ED25519, etc.) combined with a random number to generate key data, and feedback the registration success to the data processing device, and distribute the key data to it. The data management device saves the generated key data and its corresponding registration data, as well as the relationship between the two; if the review is not passed, the registration failure is fed back to the data processing device, ending the entire registration process.

[0072] It should be noted that the key data of each data processing device can be uniformly generated, registered and distributed by the data management device, or can be generated by each data processing device based on the rules specified by the data management device and the information provided, which is not specifically limited here.

[0073] In some embodiments, after sending the corresponding secret key data to each data processing device in the interaction group, an identity authentication request sent by each data processing device in the interaction group is obtained, and the identity authentication request includes the secret key data corresponding to each data processing device; the identity authentication of each data processing device is performed according to the secret key data, and the identity authentication result corresponding to each data processing device is generated. In this way, the corresponding data processing device can be accurately authenticated, thereby ensuring that the identities of both parties in the interaction are credible.

[0074] The identity authentication request includes the key data corresponding to the data processing device that needs to be authenticated, and the identity authentication result is used to indicate whether the identity authentication of the data processing device is successful.

[0075] Specifically, since the interaction data contains the public keys of all data processing devices in the interaction group, any data processing device can initiate an identity authentication process to the data management device to confirm whether a public key is legal (for example, whether it has been registered, whether it is allowed to participate in a specific interaction process, etc.).

[0076] Exemplarily, if the interaction group includes data processing device A and data processing device B, before data processing device A and data processing device B interact with each other, data processing device A sends an identity authentication request for data processing device B to the data management device, and the identity authentication request includes the public key corresponding to data processing device B. The data management device can authenticate the data processing device B based on the secret key data, thereby generating an identity authentication result corresponding to data processing device B, and feeding back the identity authentication result to data processing device A; at the same time, data processing device B also sends an identity authentication request for data processing device A to the data management device, and the identity authentication request includes the public key corresponding to data processing device A. The data management device can authenticate the data processing device A based on the secret key data, thereby generating an identity authentication result corresponding to data processing device A, and feeding back the identity authentication result to data processing device B.

[0077] In some embodiments, it is determined whether the key data is the preset key data; if the key data is the preset key data, it is determined that the data processing device identity authentication is successful; if the key data is not the preset key data, it is determined that the data processing device identity authentication is unsuccessful. Thus, it is possible to accurately determine whether the data processing device identity authentication is successful by comparing the key data.

[0078] The preset key data is the key data stored in the data management device, that is, the key data generated by each data processing device when registering.

[0079] Specifically, the data management device matches the public key corresponding to the data processing device in its corresponding key database. If a matching public key is found in the key database, it is determined that the identity authentication of the data processing device is successful; if no matching public key is found in the key database, it is fed back that the public key is not registered, and it is determined that the identity authentication of the data processing device is unsuccessful.

[0080] In some embodiments, after the secret key data is the preset secret key data, the target interaction information in the identity authentication request is obtained, and the legitimacy of the data processing device is checked according to the target interaction information; if the legitimacy check of the data processing device passes, it is determined that the identity authentication of the data processing device is successful; if the legitimacy check of the data processing device fails, it is determined that the identity authentication of the data processing device is unsuccessful. In this way, by comparing the secret key data and performing the identity legitimacy check at the same time, it can be accurately determined whether the identity authentication of the data processing device is successful.

[0081] The target interaction information is context information for interaction between data processing devices, and may be stored in the identity authentication request.

[0082] Specifically, if the identity authentication request includes target interaction information, the data management device can perform a legitimacy review based on the target interaction information combined with the matched identity data. If the review passes, the data management device will feedback to the corresponding data processing device that the identity verification has passed, and the entire process will be terminated; if the review fails, the data management device will feedback to the corresponding data processing device that the identity of the data processing device corresponding to the public key in the specific interaction context is illegal, and the entire process will be terminated.

[0083] Exemplarily, the interaction context information can be used to determine whether the credit rating of the data processing device allows it to purchase specific goods. For example, the interaction context information can be used to determine that the credit rating of the data processing device is poor and cannot purchase specific goods such as tobacco and alcohol, thereby determining that the data processing device has failed the review and providing feedback to the data processing device that the identity of the data processing device corresponding to the public key is illegal in the specific interaction context.

[0084] S102: Obtain a data processing algorithm, and convert the data processing algorithm into a corresponding prover and verifier.

[0085] Among them, the data processing algorithm can be pre-set for the data management device according to its own needs.

[0086] Specifically, the data management device converts the algorithm into a pair of prover and verifier programs using a zero-knowledge proof library.

[0087] Among them, zero-knowledge proof is a mathematical proof system that converts a series of computational steps (including intermediate results and final results) into a probabilistically verifiable proof (PCP: Probabilistically-CheckableProofs) by using technologies such as arithmetic (Arithmetization), polynomial constraints (Polynomial Constraint), Merkle Tree, Micali construction, and interactive oracle proofs (IOP: Interactive Oracle Proofs). After obtaining this proof, the verifier can verify whether the proof is true or false with extremely low computational cost and extremely high accuracy. If it is false, it means that the prover did not really strictly execute all the computational logic (or a certain computational result has been tampered with); if it is true, it means that the prover did strictly execute all the computational logic, and the input, intermediate output, and final output content match.

[0088] The mechanism used by zero-knowledge proof mathematically guarantees that any attempt by a Prover (the prover, which is the program that actually performs the calculation) to forge a legitimate proof (using different calculation steps, tampering with intermediate results, tampering with final results, etc.) will be discovered with a very high probability by a Verifier (the verification program of the proof).

[0089] Exemplarily, take the scenario involved in this proposal as an example: the data management device hopes that the operation process performed on the data can be converted into a pair of provers and verifiers by the zero-knowledge proof library, where the prover is deployed in an environment controlled by a remote untrusted data processing device, responsible for reading the data locally and performing specific operations. The prover will verify the integrity of the data and perform the established operation to obtain the operation result and a receipt (proof); the verifier is held by the data management device and is responsible for verifying the operation result and receipt. Regardless of the environment and conditions in which the prover runs, as long as its calculation process and calculation results are not interfered with, the results and receipts it generates will be verified by the corresponding verifier (indicating that the results are reliable); conversely, if the prover's calculation process or calculation results have been tampered with for any reason, then the results and receipts it generates will not be able to pass the verification of the verifier (indicating that the results are unreliable). Therefore, by utilizing zero-knowledge proof technology, the data management device itself does not need to bear the actual computing overhead, but instead lets the untrusted data processing device be responsible for the calculation. At the same time, it has the ability to detect possible cheating behavior of the data processing device during the calculation process at a very low cost, thereby effectively constraining the data processing device and ensuring the reliability of the calculation results.

[0090] S103: Send the prover to the target data processing device, so that the target data processing device calculates the interactive data based on the prover to obtain a data calculation result.

[0091] The target data processing device is the data processing device that needs to perform the entrusted calculation. For example, a data processing device with strong computing power or idle data processing device can be selected as the target data processing device, which is not specifically limited here. The data calculation result is generated after the data processing device runs the prover, which can specifically include the algorithm operation result, the proof receipt and the second signature verification result. The algorithm operation result is the result obtained by the prover after calculating the interactive data.

[0092] Specifically, the prover may be sent to a target data processing device, so that the target data processing device runs the prover and executes an algorithm preset in the prover to calculate the interactive data, thereby obtaining a data calculation result.

[0093] S104: Acquire data calculation results, and verify the data calculation results based on the verifier to obtain data verification results, and determine data calculation integrity based on the data verification results.

[0094] The data verification result is used to indicate the verification result corresponding to the data calculation result, and the data verification result may include the verification result of the receipt verification result and the second signature verification result. The data calculation integrity is used to indicate the integrity of the data calculation process and results.

[0095] In some embodiments, the proof receipt is verified based on the verifier to obtain the receipt verification result; if the receipt verification result is successful, the second signature verification result is verified; if the second signature verification result is successful, the data verification result is determined to be successful, and the algorithm operation result is applied. In this way, the data verification result can be accurately obtained.

[0096] Among them, the receipt verification result can be used to determine whether the calculation process or calculation result has been tampered with, and the second signature verification result is used to determine the data integrity before and after the entrusted calculation process; the algorithm operation result is the result calculated after the prover runs the algorithm.

[0097] like Figure 3 As shown, the data calculation result includes at least the algorithm operation result, the certification receipt and the second signature verification result, and may also include the public key and timestamp corresponding to each data processing device.

[0098] Specifically, the data management device receives the algorithm operation result, the proof receipt and the second signature verification result returned by the target data processing device. The data management device uses the verifier to verify the proof receipt. If the proof receipt verification passes, it means that the calculation process and the calculation result are credible. The data management device confirms whether all the signature verification results contained in the second signature verification result are passed. If all the signatures are verified, it means that the integrity of the data involved in the calculation has not been destroyed, the calculation result is credible, and the algorithm operation result is applied. If the proof receipt verification fails, it means that the calculation process or the calculation result has been tampered with, and accountability is initiated to the target data processing device, and the entire process ends. If there is a signature verification failure, it means that the integrity of the data involved in the calculation is destroyed (it may be tampered with or forged), so the calculation result is unreliable, and accountability is initiated to the target data processing device, and the entire process ends.

[0099] Specifically, if the certification receipt verification passes and all signatures are verified, the data calculation integrity is determined to be complete; if the certification receipt verification fails or there is a signature verification failure, the data calculation integrity is determined to be incomplete.

[0100] S105. Determine data reliability based on data interaction integrity and data calculation integrity.

[0101] Among them, data reliability is used to indicate the reliability of data interaction and the reliability of data operation. The reliability of data interaction can be determined by the data interaction integrity, and the reliability of data operation can be determined by the data calculation integrity.

[0102] Specifically, when the data interaction integrity is complete and the data calculation integrity is complete, the data reliability corresponding to the interaction data can be considered reliable. When the data interaction integrity is incomplete or the data calculation integrity is incomplete, the data reliability corresponding to the interaction data can be considered unreliable.

[0103] Please refer to Figure 4 , Figure 4 A flow chart of a data processing method provided in an embodiment of the present application. The data processing method is applied to data processing equipment, and can enable management agencies to ensure the integrity of original data and the reliability of related operation processes and results at a lower cost by utilizing digital signatures and zero-knowledge proof technology, and can effectively detect improper behavior of data processors, thereby ensuring the credibility of data governance results, thereby achieving its data governance purpose.

[0104] like Figure 4 As shown, the data processing method applied in the data processing device may include S201 to S205.

[0105] S201. Receive key data sent by a data management device, and when interacting with other data processing devices in an interaction group, obtain signature data corresponding to other data processing devices.

[0106] The signature data is generated after the data processing device signs the interaction data.

[0107] Specifically, the data processing device sends a registration request to the data management device, and the registration request includes the identity information corresponding to each data processing device; so that the data management device performs identity verification based on the identity information; when the identity verification is successful, the secret key data corresponding to the data processing device is generated, and finally the data processing device receives the secret key data sent by the data management device.

[0108] In some embodiments, before acquiring the signature data corresponding to the remaining data processing devices, the timestamp information corresponding to each data processing device in the interaction group is acquired, and each timestamp information is verified; if the timestamp information corresponding to all data processing devices in the interaction group is successfully verified and the identity authentication of all data processing devices in the interaction group is successful, the signature data corresponding to the remaining data processing devices is acquired. In this way, it is possible to accurately determine whether the public key and timestamp information of each data processing device are incorrect before data interaction.

[0109] The timestamp information is used to indicate the generation time of the interaction data.

[0110] Specifically, when data interaction occurs, each data processing device first needs to reach an agreement on the original content of the interactive data, such as the terms of the contract, the price and quantity list of goods in the order, etc. Based on the original content of the interactive data, each data processing device adds its own public key and timestamp information in turn. Each data processing device confirms that the public key and timestamp information are correct (whether there are omissions or errors). Each data processing device can initiate an identity authentication process to the data management device to confirm whether a specific public key is legal, and determine whether the corresponding timestamp information is incorrect. If the corresponding public key is confirmed to be legal and the corresponding timestamp information is correct, the data signing process is executed. If some public keys or timestamp information are confirmed to be incorrect, the relevant data processing device needs to re-add the public key and timestamp information and confirm again.

[0111] For example, if the interactive data is contract data, for example, when signing a contract, each interactive party needs to confirm the date in the contract so that each interactive party can reach a consensus on the effective date of the contract.

[0112] In some embodiments, before acquiring signature data corresponding to other data processing devices, the interaction data is acquired and signed to generate signature data, and after all data processing devices in the interaction group generate signature data, the signature data corresponding to other data processing devices is acquired. In this way, the interaction data can be signed to ensure that the data cannot be easily tampered with.

[0113] The interactive data is generated when a data processing device interacts with other data processing devices.

[0114] Specifically, each data processing device signs the interaction data using its own corresponding private key, and adds the signature to the interaction data in sequence to generate corresponding signature data.

[0115] like Figure 5 As shown, if the interaction group includes data processing device A (interaction party A) and data processing device B (interaction party B), data processing device A first adds its corresponding public key and timestamp information under the original data content of the interaction data, and after confirming that the public key and timestamp information are correct, signs the interaction data to generate signature data corresponding to data processing device A; data processing device B first adds its corresponding public key and timestamp information under the original data content of the interaction data, and after confirming that the public key and timestamp information are correct, signs the interaction data to generate signature data corresponding to data processing device B.

[0116] It should be noted that the scope of signature calculation is the original data plus all attached public keys and timestamp information, and the order in which signatures are added needs to be the same as the order in which identity public keys are added.

[0117] For example, if the interaction group includes data processing device A, data processing device B and data processing device C, data processing device A will obtain the signature data corresponding to data processing device B and data processing device C, data processing device B will obtain the signature data corresponding to data processing device A and data processing device C, and data processing device C will obtain the signature data corresponding to data processing device A and data processing device B.

[0118] S202: Verify the signature data according to the secret key data to obtain a first signature verification result, and determine the data interaction integrity according to the first signature verification result generated by the data processing device in the interaction group.

[0119] The first signature verification result is generated after each data processing device verifies the signature data of other data processing devices. Data interaction integrity is used to indicate the integrity of data during the interaction process.

[0120] In some embodiments, a preset signature verification algorithm is obtained; based on the signature verification algorithm, the signature data corresponding to the other data processing devices is verified according to the interactive data and the secret key data corresponding to the other data processing devices, and the first signature verification result corresponding to the other data processing devices is obtained. In this way, the signature data corresponding to the other data processing devices can be accurately verified and the first signature verification result can be obtained.

[0121] The signature verification algorithm and the corresponding key algorithm and format are preset by the data management device, and each data processing device directly uses the algorithm. It should be noted that different types of keys have different signature calculation and verification algorithms.

[0122] Specifically, if the data processing device obtains the signature data and the public key and interaction data corresponding to the signature data, the data processing device can confirm that the signature data is indeed obtained by signing the interaction data using the private key paired with the public key through the signature data and its corresponding public key, interaction data and the public algorithm. If the private key is not paired with the public key, or there is a content difference between the interaction poem and the signature, then the data processing device will inevitably be able to find the abnormality.

[0123] Specifically, if the first signature verification results corresponding to all data processing devices in the interaction group are successful, the data will be used; if the first signature verification result corresponding to any data processing device in the interaction group is unsuccessful, the relevant data processing device is required to re-sign and verify again.

[0124] Specifically, if the first signature verification results corresponding to all data processing devices in the interaction group are successful, the data interaction integrity is determined to be complete; if the first signature verification result corresponding to any data processing device in the interaction group is unsuccessful, the data interaction integrity is determined to be incomplete.

[0125] S203: Obtain the prover sent by the data management device, and calculate the interaction data based on the prover to obtain a data calculation result.

[0126] The data calculation result is generated after the data processing device runs the prover, and can specifically include the algorithm operation result, the proof receipt and the second signature verification result. The algorithm operation result is the result obtained after the prover calculates the interactive data. The receipt verification result can be used to determine whether the calculation process or calculation result has been tampered with. The second signature verification result is used to determine the data integrity before and after the entrusted calculation process.

[0127] In some embodiments, the signature data corresponding to each data processing device in the interaction group is obtained; the signature data corresponding to each data processing device in the interaction group is verified to obtain the second signature verification result corresponding to each data processing device; if the second signature verification results corresponding to all data processing devices in the interaction group are verified successfully, the interaction data is calculated based on the prover to generate an algorithm operation result and a proof receipt. In this way, the algorithm operation result, the proof receipt and the second signature verification result can be accurately generated.

[0128] like Figure 3 As shown, specifically, the data processing device receives the prover program from the data management device, and the data processing device deploys and runs the prover program. Step 3: The prover program first reads the additional content of the interactive data, writes the public key and timestamp information into the specified field of the output structure, and then verifies all signatures to obtain the second signature verification result corresponding to each data processing device. If all signatures are verified, it means that there is no problem with the data integrity. The signature verification result field in the output structure is filled in, and the prover continues to execute the established data calculation process and fills the calculation result into the corresponding field of the output structure; during the execution process, the prover will synchronously generate a proof receipt, and when the operation ends and returns, the proof receipt will be output together with the algorithm operation result. The data processing device detects that the prover program stops running, obtains the data calculation result of the prover, and sends the data calculation result to the data management device. If any signature verification fails, it means that the data integrity is destroyed, the subsequent calculation is terminated, the signature verification result field in the output structure is filled in as unsuccessful, and the calculation result field is filled in blank.

[0129] The operation logic of the prover program is determined by the data management device. The data processing device does not need to and is not allowed to interfere with the prover's calculation process and output content. Any interference will be discovered by the data management device. The proof receipt is similar to the integrity signature of the entire calculation process and calculation results. Any tampering with the calculation process, results or receipt will cause the subsequent verification process initiated by the management agency to fail.

[0130] S204: Send the data calculation result to the data management device, so that the data management device verifies the data calculation result based on the verifier to obtain a data verification result, and determines the data calculation integrity according to the data verification result.

[0131] The data verification result is used to indicate the verification result corresponding to the data calculation result, and the data verification result may include the verification result of the receipt verification result and the second signature verification result. The data calculation integrity is used to indicate the integrity of the data calculation process and results.

[0132] In some embodiments, the key data and historical interaction data corresponding to any data processing device in the interaction group are obtained, and the historical interaction data are traversed to determine whether the historical interaction data includes the key data; if the historical interaction data includes the key data, the signature data is extracted from the historical interaction data, and the signature data is verified to obtain a third signature verification result; if the third signature verification result is successful, the historical interaction data is applied. In this way, the data reliability of the historical interaction data can be accurately determined.

[0133] The historical interaction data is the interaction data generated by the previous data interaction process. The third signature verification result is used to determine the data integrity of the historical interaction data.

[0134] Since any party involved in data interaction may conduct some analysis and application based on historical data afterwards (for example, a natural person as the data subject may want to count his or her income and expenditure in the past month, and an enterprise as a data processor may want to conduct statistical analysis on the data of the previous fiscal year, or an enterprise may help a natural person count his or her income and expenditure in the past month, etc., without specific limitation here), it is necessary to ensure that the integrity of the data is not damaged before using it.

[0135] For example, the data processing device corresponding to the entity that wishes to use the data must first obtain its corresponding historical interaction data. For data subjects (such as natural persons) who do not save historical interaction data, the historical interaction data may need to be requested from relevant data processors (such as enterprises); while for data processors that save historical interaction data, they may only need to query and access it locally.

[0136] Exemplarily, after obtaining the historical interaction data, first read the additional content of the historical interaction data, and look for your own public key in the additional content of the data. If the public key corresponding to itself is found, all public keys in the additional content of the historical interaction data are traversed, and all signature data are verified to obtain the third signature verification result. If all the third signature verification results corresponding to the historical interaction data are successful, it means that the data integrity is not destroyed, and the historical interaction data is applied, such as using the data to complete the established processing flow (such as personal income and expenditure analysis or corporate financial audit, etc.). If some third signature verification results are verification failures, it means that the data content has been tampered with. The entire process should be terminated at this time. If the public key corresponding to itself is not found, it means that the historical interaction data has nothing to do with itself, which means that either there is an error in the access or transmission of the data, or it has been tampered with, and the entire process should be terminated at this time.

[0137] S205. Determine data reliability based on data interaction integrity and data calculation integrity.

[0138] Among them, data reliability is used to indicate the reliability of data interaction and the reliability of data operation. The reliability of data interaction can be determined by the data interaction integrity, and the reliability of data operation can be determined by the data calculation integrity.

[0139] Specifically, when the data interaction integrity is complete and the data calculation integrity is complete, the data reliability corresponding to the interaction data can be considered reliable. When the data interaction integrity is incomplete or the data calculation integrity is incomplete, the data reliability corresponding to the interaction data can be considered unreliable.

[0140] The following uses an example in which an interaction group in a data processing system includes two data processing devices (a data subject and a data processor) to illustrate various data processing flows.

[0141] like Figure 6 As shown, Figure 6 A flowchart of a registration process provided in an embodiment of the present application, specifically including S301-S306.

[0142] S301: The data management device receives a registration request.

[0143] S302: The data management device reviews the registration data.

[0144] S303, the data management device determines whether the registration data audit is passed, if so, go to S304, if not, go to S306.

[0145] S304: The data management device generates a corresponding public key and private key, and sends them to a corresponding data processing device.

[0146] S305: The data management device saves the public key and associates it with the registration data.

[0147] S306: The data management device sends a feedback to the corresponding data processing device indicating that the registration has failed.

[0148] like Figure 7 As shown, Figure 7 A flowchart of an identity authentication process provided in an embodiment of the present application, specifically including S401-S408.

[0149] S401: The data management device receives an identity authentication request.

[0150] S402: The data management device reads the public key corresponding to the data processing device to be verified contained in the request.

[0151] S403: The data management device searches the database for a public key that meets the conditions.

[0152] S404: Does the data management device find a matching public key? If so, go to S405; if not, go to S407.

[0153] S405. The data management device reads the interaction context information included in the request to determine whether the identity corresponding to the key is legal. If so, go to S406; if not, go to S408.

[0154] S406: The data management device sends a feedback to the corresponding data processing device indicating that the identity authentication is successful.

[0155] S407: The data management device feeds back to the corresponding data processing device that the public key is not registered.

[0156] S408. The data management device feeds back to the corresponding data processing device that the identity corresponding to the key is illegal.

[0157] like Figure 8 As shown, Figure 8 A schematic diagram of a process flow of a delegated computing process provided in an embodiment of the present application, specifically including S501-S509.

[0158] S501. The data management device determines a data processing algorithm.

[0159] S502: The data management device converts the data processing algorithm into corresponding provers and verifiers.

[0160] S503: The data management device sends a prover to the target data processing device.

[0161] S504: The data management device waits for and receives the returned data calculation result.

[0162] S505. The data management device verifies whether the proof receipt is passed through the verifier. If passed, go to S506. If not, go to S508.

[0163] S506. The data management device confirms whether the second signature verification results included in the data calculation results are all verified successfully. If so, go to S507; if not, go to S509.

[0164] S507: The data management device uses the algorithm to calculate the result.

[0165] S508: The data management device determines that the calculation process or result has been tampered with, and initiates accountability to the corresponding data processing device.

[0166] S509: The data management device determines that the data integrity is destroyed and initiates accountability to the corresponding data processing device.

[0167] like Fig. 9 As shown, Fig. 9A flow chart of a data interaction process provided in an embodiment of the present application, specifically including S601-S610.

[0168] S601. Each data processing device (interacting party) determines the original content of the interaction data.

[0169] S602: Each data processing device adds a public key and timestamp information to the interactive data in sequence.

[0170] S603. Each data processing device determines whether all public keys and timestamp information are legal. If so, go to S604. If not, go to S608.

[0171] S604: Each data processing device calculates and signs the interaction data to generate signature data.

[0172] S605: Determine whether all data processing devices have completed signing. If so, go to S606; if not, go to S604.

[0173] S606: Verify the signature data to obtain a first signature verification result.

[0174] S607: Are all first signature verification results successfully verified? If so, go to S607; if not, go to S609.

[0175] S608: Use the interaction data.

[0176] S609: Request the relevant data processing device to re-add the public key and timestamp information.

[0177] S610: Request relevant data processing equipment to recalculate and generate signature data.

[0178] like Fig.10 As shown, Fig.10 A schematic diagram of a proxy computing process provided in an embodiment of the present application, specifically including S701-S708.

[0179] S701. The data processing device receives the certifier program sent by the data management device.

[0180] S702: The data processing device deploys and runs the prover program.

[0181] S703: The prover program reads the interactive data and verifies all signature data to obtain second signature verification data.

[0182] S704. The prover program determines whether all second signature verification data are successfully verified. If so, go to S705; if not, go to S706.

[0183] S705. The prover program executes the algorithm operation, fills in the operation result, and fills in the signature verification result as passed.

[0184] S706, fill in the blanks for the calculation result, and fill in the signature verification result as failed.

[0185] S707. The prover program outputs the algorithm operation result and the proof receipt.

[0186] S708. The data processing device sends the second signature verification data, the algorithm operation result and the certification receipt to the data management device.

[0187] It should be noted that S703-S707 are the execution processes corresponding to the prover program.

[0188] like Fig.11 As shown, Fig.11 A flowchart of a historical data verification process provided in an embodiment of the present application, specifically including S801-S808.

[0189] S801. The data processing device obtains relevant historical interaction data.

[0190] S802: The data processing device reads additional content of the historical interaction data.

[0191] S803: Does the data processing device find its own corresponding public key in the additional content? If so, go to S804; if not, go to S807.

[0192] S804: The data processing device traverses the public key list and verifies all signature data to obtain third signature verification data.

[0193] S805. The data processing device determines whether all the third signature verification data are successfully verified. If so, go to S806; if not, go to S808.

[0194] S806: The data integrity verification is passed, and the historical interaction data is applied.

[0195] S807: The data processing device determines that the historical interaction data is irrelevant to itself or has been tampered with.

[0196] S808: The data processing device determines that the historical interaction data has been tampered with.

[0197] like Fig.12 As shown, the data processing method provided in the embodiment of the present application is described below using a certain e-commerce data governance scenario as an example.

[0198] like Fig.12As shown in the figure, the National Data Bureau can act as a management agency, consumers can act as data subjects, and enterprises can act as data processors. Enterprises can provide consumers with a digital product. Consumers have a certain chance of obtaining the product each time they interact. Interactions require funds, and enterprises need to disclose the probability of obtaining the product to the public.

[0199] Since the random number generator that controls the probability of obtaining a product is completely controlled by the enterprise, the enterprise has a strong motivation to tamper with it for profit considerations. As a regulator, the Data Bureau hopes to regularly audit the archived interaction data of enterprises to calculate whether the actual probability of obtaining a product is consistent with the enterprise's claims.

[0200] The embodiment of the present application provides a data processing method, which enables the data management device to send its corresponding secret key data to each data processing device in the interaction group, so that each data processing device can determine the integrity of the data interaction according to its corresponding secret key data when performing data interaction; and obtain the data processing algorithm, and convert the data processing algorithm into a corresponding prover and verifier; then obtain the data calculation result generated by the target data processing device based on the prover, and determine the data calculation integrity according to the data calculation result; thereby determining the data reliability according to the data interaction integrity and the data calculation integrity. Therefore, by utilizing digital signatures and zero-knowledge proof technology, the management agency can ensure the integrity of the original data and the reliability of the related operation process and results at a lower cost, and can effectively discover the improper behavior of the data processor, ensure the credibility of the data governance results, and thus achieve the purpose of data governance.

[0201] At the same time, the data processing method provided by this application does not rely on the blockchain architecture, and the traditional network architecture can be applied to the data processing method provided by this application without modification. This application processes data through a centralized management mechanism. Unlike the decentralized management model of blockchain, the solution of this application will have a central management node, which is more in line with the current actual management scenario.

[0202] See also Fig.13 , Fig.13 A schematic block diagram of the structure of a data management device provided in an embodiment of the present application.

[0203] like Fig.13 As shown, the data management device 900 may include a processor 901 and a memory 902 , and the processor 901 and the memory 902 are connected via a bus 903 , such as an I2C (Inter-integrated Circuit) bus.

[0204] In an exemplary embodiment, the processor 901 can be used to provide computing and control capabilities to support the operation of the entire network device. The processor 901 can be a central processing unit (CPU), and the processor 901 can also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc.

[0205] Specifically, the memory 902 may be a Flash chip, a read-only memory (ROM) disk, an optical disk, a USB flash drive, or a mobile hard disk.

[0206] Those skilled in the art will understand that Fig.13 The structure shown in the figure is only a block diagram of a partial structure related to the embodiment of the present application, and does not constitute a limitation on the network device to which the embodiment of the present application is applied. The specific server may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0207] The processor 901 is used to run a computer program stored in the memory, and implement any data processing method provided in the embodiments of the present application when executing the computer program.

[0208] In one embodiment, the processor 901 is used to run a computer program stored in a memory, and implement the following steps when executing the computer program: sending the corresponding key data to each data processing device in the interaction group, so that each data processing device verifies the signature data obtained according to the corresponding key data when performing data interaction to obtain a first signature verification result, and determines the data interaction integrity according to the first signature verification result generated by all data processing devices in the interaction group; obtaining a data processing algorithm, and converting the data processing algorithm into a corresponding prover and verifier; sending the prover to a target data processing device, so that the target data processing device calculates the interaction data based on the prover to obtain a data calculation result; obtaining the data calculation result, and verifying the data calculation result based on the verifier to obtain a data verification result, and determining the data calculation integrity according to the data verification result; determining the data reliability according to the data interaction integrity and the data calculation integrity.

[0209] In one embodiment, the data calculation result includes an algorithm operation result, a proof receipt and a second signature verification result. When the processor 901 verifies the data calculation result based on the verifier to obtain the data verification result, it is used to implement: verifying the proof receipt based on the verifier to obtain the receipt verification result; if the receipt verification result is successful, verifying the second signature verification result; if the second signature verification result is successfully verified, determining that the data verification result is successfully verified, and applying the algorithm operation result.

[0210] In one embodiment, before the processor 901 sends the corresponding key data to each data processing device in the interaction group, it is used to implement: obtaining a registration request sent by each data processing device in the interaction group, the registration request including identity information corresponding to each data processing device; performing identity verification on each data processing device according to the identity information corresponding to each data processing device; if the identity verification of each data processing device is successful, generating key data corresponding to each data processing device.

[0211] In one embodiment, after sending the corresponding key data to each data processing device in the interaction group, the processor 901 is used to: obtain the identity authentication request sent by each data processing device in the interaction group, the identity authentication request including the key data corresponding to each data processing device; authenticate each data processing device according to the key data, and generate an identity authentication result corresponding to each data processing device.

[0212] In one embodiment, when the processor 901 implements the authentication of each of the data processing devices according to the key data and generates an authentication result corresponding to each of the data processing devices, it is used to implement: determining whether the key data is preset key data; if the key data is the preset key data, determining that the identity authentication of the data processing device is successful; if the key data is not the preset key data, determining that the identity authentication of the data processing device is unsuccessful.

[0213] It should be noted that those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the data management device described above can refer to the corresponding process in the aforementioned data mathematical method embodiment, and will not be repeated here.

[0214] See also Fig.14 , Fig.14 A schematic block diagram of the structure of a data processing device provided in an embodiment of the present application.

[0215] like Fig.14 As shown, the data processing device 1000 may include a processor 1001 and a memory 1002 , and the processor 1001 and the memory 1002 are connected via a bus 1003 , such as an I2C (Inter-integrated Circuit) bus.

[0216] In an exemplary embodiment, the processor 1001 can be used to provide computing and control capabilities to support the operation of the entire network device. The processor 1001 can be a central processing unit (CPU), and the processor 901 can also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc.

[0217] Specifically, the memory 1002 may be a Flash chip, a read-only memory (ROM) disk, an optical disk, a USB flash drive, or a mobile hard disk.

[0218] Those skilled in the art will understand that Fig.14The structure shown in the figure is only a block diagram of a partial structure related to the embodiment of the present application, and does not constitute a limitation on the network device to which the embodiment of the present application is applied. The specific server may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0219] The processor 1001 is used to run a computer program stored in the memory, and implement any data processing method provided in the embodiments of the present application when executing the computer program.

[0220] In one embodiment, the processor 1001 is used to run a computer program stored in a memory, and implement the following steps when executing the computer program: receive secret key data sent by a data management device, and when performing data interaction with other data processing devices in an interaction group, obtain signature data corresponding to the other data processing devices; verify the signature data according to the secret key data to obtain a first signature verification result, and determine the data interaction integrity according to the first signature verification result generated by all data processing devices in the interaction group; obtain a prover sent by a data management device, and calculate the interaction data based on the prover to obtain a data calculation result; send the data calculation result to the data management device, so that the data management device verifies the data calculation result based on the verifier to obtain a data verification result, and determines the data calculation integrity according to the data verification result; determine the data reliability according to the data interaction integrity and the data calculation integrity.

[0221] In one embodiment, before obtaining the signature data corresponding to the remaining data processing devices, the processor 1001 is used to obtain the interaction data, sign the interaction data to generate signature data, and obtain the signature data corresponding to the remaining data processing devices after all data processing devices in the interaction group have generated signature data.

[0222] In one embodiment, before obtaining the signature data corresponding to the remaining data processing devices, the processor 1001 is used to: obtain the timestamp information corresponding to each data processing device in the interaction group, and verify each of the timestamp information; if the timestamp information corresponding to all the data processing devices in the interaction group is successfully verified and all the data processing devices in the interaction group are successfully authenticated, then obtain the signature data corresponding to the remaining data processing devices.

[0223] In one embodiment, when the processor 1001 verifies the signature data according to the secret key data to obtain a first signature verification result, it is used to implement: obtaining a preset signature verification algorithm; based on the signature verification algorithm, according to the interaction data and the secret key data corresponding to the remaining data processing devices, verifying the signature data corresponding to the remaining data processing devices to obtain the first signature verification results corresponding to the remaining data processing devices.

[0224] In one embodiment, when the processor 1001 implements the calculation of the interaction data based on the prover to obtain the data calculation result, it is used to implement: obtaining the signature data corresponding to each data processing device in the interaction group; verifying the signature data corresponding to each data processing device in the interaction group to obtain the second signature verification result corresponding to each data processing device; if the second signature verification results corresponding to all data processing devices in the interaction group are successful, then calculating the interaction data based on the prover to generate an algorithm operation result and a proof receipt.

[0225] In one embodiment, the processor 1001 is also used to implement: obtaining the key data and historical interaction data corresponding to any data processing device in the interaction group, and traversing the historical interaction data to determine whether the historical interaction data includes the key data; if the historical interaction data includes the key data, extracting the signature data from the historical interaction data, and verifying the signature data to obtain a third signature verification result; if the third signature verification result is a successful verification, applying the historical interaction data.

[0226] It should be noted that those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the data management device described above can refer to the corresponding process in the aforementioned data mathematical method embodiment, and will not be repeated here.

[0227] An embodiment of the present application also provides a storage medium for computer-readable storage, wherein the storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of any data processing method provided in the description of the embodiment of the present application.

[0228] The storage medium may be an internal storage unit of the network device described in the foregoing embodiment, such as a hard disk or memory of the network device. The storage medium may also be an external storage device of the network device, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (SecureDigital, SD) card, a flash card (Flash Card), etc., provided on the network device.

[0229] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In a hardware embodiment, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those of ordinary skill in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0230] It should be understood that the term "and / or" used in the present specification and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, including these combinations. It should be noted that, in this article, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "including a..." does not exclude the presence of other identical elements in the process, method, article or system including the element.

[0231] The serial numbers of the embodiments of the present application are only for description and do not represent the advantages and disadvantages of the embodiments. The above are only specific embodiments of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present application, and these modifications or replacements should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A data processing method, characterized in that: Applied to a data management device, the method comprises: Sending the corresponding secret key data to each data processing device in the interaction group, so that each data processing device verifies the acquired signature data according to the corresponding secret key data to obtain a first signature verification result when performing data interaction, and determining the data interaction integrity according to the first signature verification result generated by all data processing devices in the interaction group; Obtaining a data processing algorithm and converting the data processing algorithm into a corresponding prover and verifier; Sending the prover to a target data processing device so that the target data processing device calculates the interaction data based on the prover to obtain a data calculation result; Acquire the data calculation result, and verify the data calculation result based on the verifier to obtain a data verification result, and determine the data calculation integrity according to the data verification result; The data reliability is determined based on the data interaction integrity and the data calculation integrity.

2. The method according to claim 1, characterized in that The data calculation result includes an algorithm operation result, a proof receipt, and a second signature verification result, and the data calculation result is verified based on the verifier to obtain a data verification result, including: Verifying the certification receipt based on the verifier to obtain a receipt verification result; If the receipt verification result is successful, verifying the second signature verification result; If the second signature verification result is successfully verified, it is determined that the data verification result is successfully verified, and the algorithm operation result is applied.

3. The method according to claim 1, before sending the corresponding key data to each data processing device in the interaction group, further comprising: Acquire a registration request sent by each data processing device in the interaction group, wherein the registration request includes identity information corresponding to each data processing device; Performing identity verification on each of the data processing devices according to the identity information corresponding to each of the data processing devices; If the identity verification of each of the data processing devices is successful, secret key data corresponding to each of the data processing devices is generated.

4. The method according to claim 1, characterized in that After sending the corresponding key data to each data processing device in the interaction group, the method includes: Obtaining an identity authentication request sent by each data processing device in the interaction group, wherein the identity authentication request includes secret key data corresponding to each data processing device; Authentication is performed on each of the data processing devices according to the secret key data, and an authentication result corresponding to each of the data processing devices is generated.

5. The method according to claim 4, characterized in that The performing identity authentication on each of the data processing devices according to the secret key data to generate an identity authentication result corresponding to each of the data processing devices includes: Determining whether the key data is preset key data; If the secret key data is the preset secret key data, determining that the identity authentication of the data processing device is successful; If the key data is not the preset key data, it is determined that the identity authentication of the data processing device is unsuccessful.

6. A data processing method, characterized in that: Applied to a data processing device, the method comprises: Receive the secret key data sent by the data management device, and when interacting with the remaining data processing devices in the interaction group, obtain the signature data corresponding to the remaining data processing devices; Verifying the signature data according to the secret key data to obtain a first signature verification result, and determining data interaction integrity according to the first signature verification results generated by all data processing devices in the interaction group; Obtaining a prover sent by the data management device, and calculating the interaction data based on the prover to obtain a data calculation result; Sending the data calculation result to the data management device, so that the data management device verifies the data calculation result based on the verifier to obtain a data verification result, and determines the data calculation integrity according to the data verification result; The data reliability is determined based on the data interaction integrity and the data calculation integrity.

7. The method according to claim 6, characterized in that Before acquiring the signature data corresponding to the remaining data processing devices, the method further includes: The interactive data is obtained, and the interactive data is signed to generate signature data, and after all the data processing devices in the interactive group have generated signature data, the signature data corresponding to the remaining data processing devices is obtained.

8. The method according to claim 6, characterized in that Before acquiring the signature data corresponding to the remaining data processing devices, the method further includes: Obtaining timestamp information corresponding to each data processing device in the interaction group, and verifying each of the timestamp information; If the timestamp information corresponding to all the data processing devices in the interaction group are successfully verified and the identity authentication of all the data processing devices in the interaction group is successfully completed, the signature data corresponding to the remaining data processing devices are obtained.

9. The method according to claim 6, characterized in that The verifying the signature data according to the secret key data to obtain a first signature verification result includes: Get the preset signature verification algorithm; Based on the signature verification algorithm, the signature data corresponding to the remaining data processing devices are verified according to the interactive data and the secret key data corresponding to the remaining data processing devices to obtain a first signature verification result corresponding to the remaining data processing devices.

10. The method according to claim 6, characterized in that The computing the interactive data based on the prover to obtain the data computing result includes: Obtaining signature data corresponding to each data processing device in the interaction group; Verifying the signature data corresponding to each data processing device in the interaction group to obtain a second signature verification result corresponding to each data processing device; If the second signature verification results corresponding to all data processing devices in the interaction group are successful, the interaction data is calculated based on the prover to generate an algorithm operation result and a proof receipt.

11. The method according to claim 6, characterized in that The method further comprises: Acquire key data and historical interaction data corresponding to any data processing device in the interaction group, and traverse the historical interaction data to determine whether the key data is included in the historical interaction data; If the historical interaction data includes the secret key data, extracting signature data from the historical interaction data, and verifying the signature data to obtain a third signature verification result; If the third signature verification result is successful, the historical interaction data is applied.

12. A data management device, characterized in that: The data management device comprises: A processor, a memory, a computer program stored in the memory and executable by the processor, and a data bus for realizing connection and communication between the processor and the memory, wherein when the computer program is executed by the processor, the steps of the data processing method according to any one of claims 1 to 5 are realized.

13. A data processing device, characterized in that: The data processing device comprises: A processor, a memory, a computer program stored in the memory and executable by the processor, and a data bus for realizing connection and communication between the processor and the memory, wherein when the computer program is executed by the processor, the steps of the data processing method as described in any one of claims 6 to 11 are realized.

14. A storage medium for computer-readable storage, characterized in that: The storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the data processing method as described in any one of claims 1 to 5 or to implement the steps of the data processing method as described in any one of claims 6 to 11.

Images