Cloud control data processing method based on homomorphic encryption, electronic equipment and readable medium

Abstract

The embodiment of the invention relates to the technical field of data encryption, and discloses a cloud control data processing method based on homomorphic encryption, electronic equipment and a readable medium. The method comprises the following steps: receiving original cloud control data to a cloud control trusted domain, wherein the original cloud control data comprises vehicle report data at a vehicle side and road test sensing data at a road side; selecting data needing to participate in calculation and a calculation method from the original cloud control data, and performing homomorphic encryption processing on the selected data needing to participate in calculation to obtain ciphertext data; entrusting the ciphertext data and the calculation method from the cloud control trusted domain to a cloud control calculation domain, and performing calculation to obtain a ciphertext result; and performing homomorphic inverse transformation on the ciphertext result returned from the computing domain to the cloud control trusted domain, and decrypting to obtain a plaintext result. The technical problems that a traditional encryption method is complex in calculation, fuzzy in credible domain distinguishing, complex in key management, prone to data content leakage and the like can be at least solved.

Description

Technical Field

[0001] The present application relates to the field of data encryption technology, and in particular to a cloud control data processing method, electronic device and readable medium based on homomorphic encryption. Background Art

[0002] With the rapid development of cloud computing and autonomous driving technologies, cloud control systems have generated a large amount of data that needs to be transmitted and calculated across modules and regions. In order to ensure data security and computing privacy, traditional encryption methods often require data to be encrypted before data transmission and calculated after decryption at the receiving end. This method not only increases the complexity of the calculation, but may also leak data content. Existing technologies such as CN117688595A propose a solution to distinguish between the request end and the encryption calculation server. The request end encrypts the data and completes the encryption calculation based on nonlinear calculation on the server end. However, there are still problems such as fuzzy trusted domain distinction and complex key management.

[0003] Therefore, there is an urgent need for a method to protect the computing process of cloud-controlled data to simplify key management and data processing procedures and ensure the privacy of data content. Summary of the invention

[0004] One purpose of the present application is to provide a cloud-controlled data processing method, electronic device and computer-readable medium based on homomorphic encryption, at least to solve the technical problems of the computational complexity of traditional encryption methods and the possible leakage of data content.

[0005] To achieve the above objectives, some embodiments of the present application provide the following aspects:

[0006] In a first aspect, some embodiments of the present application provide a cloud control data processing method based on homomorphic encryption, including:

[0007] Receiving original cloud control data to the cloud control trusted domain, the original cloud control data including: vehicle reporting data on the vehicle side and road test perception data on the road side;

[0008] Selecting data and a calculation method that need to be calculated from the original cloud control data, and performing homomorphic encryption on the selected data that need to be calculated to obtain ciphertext data;

[0009] Delegating the ciphertext data and the calculation method from the cloud control trusted domain to the cloud control calculation domain and performing calculations to obtain ciphertext results;

[0010] Perform a homomorphic inverse transformation on the ciphertext result returned from the computing domain to the cloud control trusted domain, and decrypt it to obtain a plaintext result.

[0011] Further, the homomorphic encryption method is a partial homomorphic encryption algorithm or a fully homomorphic encryption algorithm.

[0012] Further, the homomorphic encryption method includes:

[0013] Input: E(X), E(Y), @

[0014] Output: E-1(E(X) @ E(Y))

[0015] Wherein, X and Y represent plaintext data, E() and E-1() are homomorphic functions, and @ represents a calculation method, satisfying E(X) @ E(Y) = E(X @ Y).

[0016] Further, the homomorphic encryption method is a partial homomorphic encryption algorithm, and the homomorphic encryption process includes: key generation, encryption process, calculation process, and decryption process.

[0017] Further, the key generation includes:

[0018] Select two prime numbers p and q, calculate n = pq and λ = lcm(p - 1, q - 1);

[0019] Select an integer g less than n such that gcd(L(g λ mod n 2 ), n) = 1, where

[0020]

[0021] The public key is (g, n), and the private key is (λ, μ), where μ = (L(g λ mod n 2 )) -1 mod n.

[0022] Further, the encryption process, which is used to encrypt the traffic flow data in the original cloud control data, includes:

[0023] For each traffic flow data m, where m is a non-negative integer, select a random number r < n, and calculate the ciphertext c = g m ·r n mod n 2 ;

[0024] Send all the encrypted traffic flow data to the cloud control computing domain.

[0025] Further, the calculation process includes: performing modular exponentiation multiplication on the encrypted traffic flow data for two time periods in the cloud control computing domain to obtain a ciphertext result.

[0026] Furthermore, the decryption process includes: sending the calculated ciphertext result back to the cloud control trusted domain, and using the private key (λ, μ) to decrypt the ciphertext result to obtain a plaintext result, that is, the sum of the vehicle flow.

[0027] In a second aspect, some embodiments of the present application further provide an electronic device, comprising: one or more processors; and a memory storing computer program instructions, wherein the computer program instructions, when executed, cause the processor to perform the steps of the method described above.

[0028] In a third aspect, some embodiments of the present application further provide a computer-readable medium having computer program instructions stored thereon, wherein the computer program instructions can be executed by a processor to implement the method as described above.

[0029] Compared with the related art, in the solution provided in the embodiment of the present application, the beneficial effects of the present invention are:

[0030] 1. Strong data privacy protection: This invention combines the actual business application characteristics of cloud control to clearly distinguish between the trusted domain and the computing domain in the privacy computing process. It uses homomorphic encryption technology to ensure that the data content in the data transmission and computing process is not leaked, thereby improving privacy.

[0031] 2. High computing efficiency: Calculation is performed directly on encrypted data, reducing the time overhead of data transmission and decryption;

[0032] 3. Clear system architecture: Clearly distinguish between the trusted domain and the computing domain, simplifying the key management and data processing process. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] One or more embodiments are exemplarily described by pictures in the corresponding drawings, and these exemplified descriptions do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings represent similar elements, and unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0034] Figure 1 This is an exemplary flow chart of a cloud control data processing method based on homomorphic encryption according to some embodiments of the present application;

[0035] Figure 2 A data flow diagram of cloud control data computing based on homomorphic encryption according to some embodiments of the present application;

[0036] Figure 3 This is a schematic diagram of an exemplary structure of an electronic device provided according to some embodiments of the present application. DETAILED DESCRIPTION

[0037] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0038] The following terms are used in this article.

[0039] The present invention aims to combine the actual situation of cloud-controlled data computing and study how to ensure that the information content is not exposed, based on homomorphic encryption technology, to encrypt the computing tasks from the trusted domain to the computing domain, and then return to the trusted domain to restore the computing results to plain text after the calculation is completed safely.

[0040] First embodiment

[0041] Figure 1 A schematic diagram of a process flow of a cloud control data processing method based on homomorphic encryption provided by an embodiment of the present invention; Figure 2 Schematic diagram of data flow of cloud control data calculation based on homomorphic encryption in an embodiment of the present invention. Figure 1 and Figure 2 As shown, the first embodiment of the present application relates to a cloud control data processing method based on homomorphic encryption. Figure 1 As shown, the method may include the following steps:

[0042] S101: receiving original cloud control data to the cloud control trusted domain, where the original cloud control data includes: vehicle reporting data on the vehicle side and road test perception data on the road side, and of course may also include other data.

[0043] S102: Select data and calculation methods that need to be calculated from the original cloud control data, and perform homomorphic encryption on the selected data that need to be calculated to obtain ciphertext data.

[0044] Specifically, in step S102, according to business requirements, the data and calculation methods required for calculation are selected, such as Figure 2 As shown in , the encrypted data E(X) and E(Y) are calculated using the method @, thereby achieving data task privacy.

[0045] S103: entrusting the ciphertext data and the calculation method from the cloud control trusted domain to the cloud control calculation domain and performing calculation to obtain a ciphertext result.

[0046] Specifically, in step S103, the calculation entrustment module entrusts the encrypted ciphertext data and the calculation method to the cloud control calculation domain for calculation, such as Figure 2As shown in , the ciphertext data is E(X), E(Y), and the calculation method is @, thereby realizing the data calculation task delegation.

[0047] In the cloud control computing domain, the computing control module schedules each computing unit to perform calculations, such as Figure 2 As shown, the computing task is E(X)@E(Y), thereby realizing data privacy computing.

[0048] S104: Performing a homomorphic inverse transformation on the ciphertext result returned from the computing domain to the cloud control trusted domain, and decrypting the result to obtain a plaintext result.

[0049] Specifically, in step S104, the ciphertext result formed by the calculation is returned to the cloud control trusted domain, and is homomorphically inversely transformed into a plaintext result according to actual needs, such as Figure 2 As shown, the calculation result is X@Y, and the settlement result is obtained.

[0050] Optionally, in some embodiments, the homomorphic encryption method is a partial homomorphic encryption algorithm or a fully homomorphic encryption algorithm. The homomorphic encryption method includes:

[0051] Input: E(X), E(Y), @

[0052] Output: E-1(E(X)@E(Y))

[0053] Among them, X and Y represent plaintext data, E() and E-1() are homomorphic functions, and @ represents the calculation method, satisfying E(X)@E(Y)=E(X@Y).

[0054] Preferably, in some embodiments, the homomorphic encryption method uses a partially homomorphic encryption algorithm to protect data privacy while allowing necessary calculations. In an embodiment of the present invention, the Paillier encryption algorithm is used as an example to illustrate how to implement it: the homomorphic encryption process includes: key generation, encryption process, calculation process and decryption process.

[0055] Among them, key generation includes:

[0056] Choose two large prime numbers p and q, and calculate n = pq and λ = lcm(p-1,q-1);

[0057] Choose an integer g less than n such that gcd(L(g λ mod n 2 ),n)=1, where

[0058] The public key is (g,n), and the private key is (λ,μ), where μ=(L(g λ mod n 2 )) -1 mod n.

[0059] Among them, the encryption process is used to encrypt the traffic flow data in the original cloud control data, including:

[0060] For each traffic flow data m, where m is a non-negative integer, select a random number r < n, and calculate the ciphertext c = g m ·r n mod n 2 ;

[0061] Send all the encrypted traffic flow data to the cloud control computing domain.

[0062] Among them, the calculation process includes: performing modular exponentiation multiplication on the encrypted traffic flow data of two time periods in the cloud control computing domain to obtain the ciphertext result. Specifically, it includes:

[0063] Assume that it is necessary to calculate the sum of the traffic flows in two time periods. The modular exponentiation multiplication can be directly performed on the encrypted traffic flow data of these two time periods (utilizing the additive homomorphism of Paillier).

[0064] For example, if there are two encrypted data and Then the encrypted representation of their "sum" is

[0065]

[0066] Among them, the decryption process includes: sending the calculated ciphertext result c sum back to the cloud control trusted domain, and decrypting this ciphertext result using the private key (λ, μ), and calculating to obtain the plaintext result, that is, the sum of the traffic flows.

[0067] The Paillier encryption algorithm used in this embodiment only supports additive homomorphism and does not support multiplicative homomorphism (unless more complex techniques or algorithms are adopted, such as fully homomorphic encryption). For scenarios that require multiplication, other algorithms may need to be considered or a hybrid encryption scheme may be adopted. In addition, factors such as the efficiency, security, and key management of the algorithm, as well as how to handle the encryption and decryption operations of a large amount of data, also need to be considered in practical applications. When deploying a homomorphic encryption scheme, the impacts of these aspects should be carefully evaluated.

[0068] Taking the above Paillier encryption algorithm as an example, the traffic flow statistics are illustrated as follows:

[0069] Taking the hourly traffic flow at a certain intersection on a single day as an example, the input plaintext:

[0070] The hourly traffic volume of a certain intersection per day [872,901,391,625,340,458,498,542,396,537,322,589,458,732,360,741,971,619,355,348,894,174,403,573]

[0071] Traffic flow data after homomorphic encryption:

[0072] Encrypted traffic flow in the first hour (ciphertext): 61422147538773915864282988420432743902748493010951717580557 527613753512590368237423480865364179797733813049779322885080090 187891240748780907512858312245187382493859398381132044986147138 995598164164951463075199644939617691481138167120201581380536592 311444042789983149839985502192236994255820504407538279051615238 435846680991340241434333878013751537304449152583759965880717607 420730667975562242273178297960994326417440047215742508812340927 491426405079467735262605610900446489930863252067802700208332539 811499913179496763052505857580264512348826840054414715573137523 722252685278513008599475863055779955702907459182738071395142840 476855824515379664774578482457623994503330334013351733618211011 137232411276606198787958111308777001001755762093222897284900854 268095635287508453936312055073681129459978134594598322631632177088127469899712808520096330645294518921216615728362778996291854 249436038403813666969446920840625724183053483555737600035471095447041775359969592799414923688556873846834151113134721069837017 551093131644490984814440194061564657378559405577166732786679982 549808213651008774509244880396922459432498426643742792498224144 366390081906834232078911610242028263979928945436256963277750125 689129043260144777703766575230484434020970166006669348962261079 799602614969046763799012202086245772976761948782592419066143979 323010061147373977753621017027668494895183266380964200375685489 728651133752903956897985514342770928501360136000371809355384529 618407573997125770300131559901531108542200915455220971591246319 787095798674536987200931208809407995195629499679624473865271833 282858466172967708741058845310488093785840118262087777682389421 451867513090380175989106179143972202106401839096356622933296022 321991227946828779496068852238595122268040443699508401636846245 434204786473166974383622382517043081784978021017073664016414792 60259318018629843977194173

[0074] Encrypted traffic flow in the second hour (ciphertext): 19732468655000929127457497668216021482080493457590721170570 592012057581028264436937606126258894325705991973699748585965317 679348143584879919209633083607604132676400466512745468876604687 253657091910903510012071386100648942956015987248344722451413334 200623256220918133488132753504365560441801984702845121113216671 022467227731263163138865887067709270060257756806760491282967880 065917805274971790158513023235748165502403658288803618327414783 377443448901418337530777080767778990254559660747373001743175264 007995472782325395278627397877171153392344040604071784382183903 549989093131714438513740190109908679729229146179430851556922094 508896157585525300680504514287203913002783065031521157138979169 996121878416616382195338527131978903368212045506848748448612010 137287678454957193023789231599067255516256495911203948860234453699747511159471989822101311357356248935669082437163463210097398 416093904797194942519985045774089478410500762614543190268231653769064485694762886022307159837576871742737317562738307710300750 246763193306499157121490614453301023288743937124339296426267164 458268841947853532220198869311379058449457030757637871314713870 911028585665539040377265770768518600364209142813049141041875614 703474795097600135510990977267560852057303976441611498690827003 112347037004673335787271257151609792311235576033666185532093866 410241056110193017369298707223741794124823453630735479186348712 683746940514650469019026248714141750035052544478671213173542177 878033233579276202941910071254520751583310820919561502880271957 471805496398548060842379681007474886139508560016160337334748408 553001801542050558539767971139473608133683340781334749413752823 831773949767346917419639481088149550056858585774955899232383240 548298832678509296726336356653265361172238152382005398378501180 208462822331323069905648603698444983038056665485993074218699424 30324476978345787179056666

[0076] Encrypted traffic flow in the third hour (ciphertext): 15099358173387157879584289982755777657356320422588535455606 577175557412983680133027734436918240545119960691786497184760855 940215995531426277388073276016007450972575929803969792123936233 644038228989810469493449610083204680754722891912113743148631808 810173236335479775287447101120850842426695230236147995883814132 457374630561963583555469744423644782605035991574558058503336972 449546371599619778206432621166318706570043075646594392520595549 409273870141204698479416298703835288709914884897173360096110244 574855556845622128131744271385696242171739035368673561918646837 585812700674998592009386324379478381820354081310995556225245642 811652927520870873640931011688083906036759910759554514223092013 681483460614282858289964947742471499645454442792671674389798209 771693648065505113238719725111849546996093787879562710291428451006763019026727607307181676130512818411094035694780565155238490 351616131833466129815971676936555178138598993594385354206020274131287371921448711701784174184843095331114778738321425326044725 788118117714157720113362527878458066471473160304388735555826107 200358444688368007706014492699261682210812593211931702483764109 733712747045828376831642028003983813851020072960095169370579113 841109588946337487854070372451906341992053707789877365805312715 333338875427193855721086097906215591987637425382619690254457956 139934748687997748055412760187509388282588949375151116073481593 301888356131722235766336391207640017925735556767452794892875123 765226247260300764454206255801808318101625840208705505286519774 578063857831421355137322158893484574413894016835753125128482405 532994575407934027769000528197963189523060749660684123443224780 182805155196566694696944691314937296139828524895431205543831168 091458321006051340640264824816041983583075971538815889270532011 139402901126401254126240740461425699221211135672110989241429598 80405315584831700685096692

[0078] Encrypted traffic flow in the 4th hour (ciphertext): 12654239599266594283246716249796626979614394786676818789608 670067955405088492307901177899512506589975443213664666708312582 665354439930039504502437560247328701916288930484171412450181528 072933978469751704383138252961339012635039237726290715411576168 905096516820473048836768243059502300166133833258577849279712979 016019937132377166891250609582198450920774523657788424538118489 417523174455708835731375833174646039528461885016461681465093029 686405067906742768738167700588899089035639191083102029461911858 270252672935953027934067841873025287960246391310622656027727701 834375163792503497817965668754644765989845069638712175937000136 641028017412305730006023117605568155213207694817049870093119847 519961724208094657575734368855572954818033439041786758309899125 437064283826074297813661973299380548980550366222331152199904776474661133365988162263638696326710784606810873121977797055717721 442086801087746086566002993800015706958460807003469443819830361779852100441155269813812858775297870963416207650908203836400538 412152565068259673632771273213294056371540608735620101382641960 495244100259774882690284691040367054499006296661682108815759368 105529499059060617192761070616360967409425573208430190442049272 163610113933146690150334786470061990207023188680631419772518368 923966753883952933107889852856198299545358483752033948727787155 747930335901240207859171765203907022241693868867927053330069270 278781310807454516229024042109580428715122408968782075215794155 334070592445297366861567187297018176831151255441205255723908029 983987047848136003426217209539629215213522235245224909348763339 430604141246651831936985238487193657805356297219209933583061302 449817997977937137816480169005041985137836645772443437560241212 740833092714531114811553980562374525370838339789447023455368021 523710449320159589056898946799997902102952190255486169954778587 532460265689150084763748564

[0080] Encrypted traffic flow in the 5th hour (ciphertext): 94142352778150934558121968366588188924265238102877178185374 940504574353713359600738405928012922000901143891479670705070743 395061037822534072811479752003995405545490139028585919845663757 905855119708905282083790987839981030218083580175489917909767159 569253182313343703419785518029699457676551565126510044166639888 789867887967786377365689861755279840826170057764634336019193537 869519609131790285688220616243717572339725941231363294058051462 034634163943650284707291965501498857642122043377484390425432118 704714736984006727890200866176598496175675670530420111740725246 156177357405530990814648312329453182197049105239894774790066400 310338603589199167169392681403139146576053179178876778776815438 286283824622696566799599008889180714146370409100566451781318310 133708227814816941464900512330138831535163925545401275323310331674147013513843093175253518936909266526149151597708968208863447 857006112640034848433885864553976505792687736883300330258796669163862958283252001396407204371325609610096921488651120009406342 937673577661952890242578284259747445941220963837789074771098263 882346518722107534858431426254321281256358473481766735379274192 324888672206872368355430243326435336238679027648684663766663016 968477421815591061490747709723010843694073936282298511331973073 898193402308588104419135902577954630146357158792506465034997329 710076217284969096321280754458170096965029858885356308197375506 582041410851377046976882429938213677037541077539561288521174512 718553241741682261838968434781474125578013138648560359801774672 728194000598161892682799967435931075202963570327970312733018329 292535253305286114154368191329014118173244477480087707002263535 064803060540088360777097086111635938729406270357300857869855550 494482108214187562399768111080844477458059210895899724277597907 911938386344985619185855729913760084549557582430078987503499601 34167285952833028288812601

[0082] Encrypted traffic flow in the 6th hour (ciphertext):

[0084] ……

[0085] Encrypted traffic flow in the 24th hour (ciphertext): 146817874904560942006734723177261113544278777485275985840043777 348964509013888274017194037483169770651112970845664733481990345 875175264080441559732451115130974920120145872566399914858173590578423504478568455126960471613146701582368892613788238996011953 585386033151969460210237157374176481867403469830260746334863763 890238401122509555185465848221356871989474393354698754411028265 876147078944213114764154968615942731261690405217354101450170810 240002502403993592541419684490136395061830544426088150362204923 420299546956806728171545671048053460346874943022455265193898628 017811251451187388961202970750515838972023215619803114723398150 124564858128822247606457944881506813272624781128933189368742203 818797380514765532920741073070415905471346357364634172171303647 723635394742002292248522806568847534205225870587500960142814616 547710024496495198614593420541493681253519760285733320113923383 029768776754353856121283337598324650656999834118444316035651001309235608285708848913538865921605583566212954651161983176337835 265468621904435233680488400235998234475340157082756149656639665 540362489167752193724582490606873732055947737369841455281414311 484597532193542226012498443510807513246869654661123987172973069 724379085825462678146954558419479820448471203267484942908166658 886952737001834249816689378755177912358794912976390963689017819 580661822348695396517387138563850999498677889168466235318407049659886988958167682787084988208017985926564557661350867851758470 247939203491963148322717238778826117769856685431081174010145451 540788651629368670216998458025315271670065811598479465064039741 595089689634491158550828035326349543400574541820883099259640449 815511620325341865539353825972668532153685131905996561369439797 163896251201523482907695200337535509471282081520514689134251895 66837681426348149366074950821056114412306307266301262714240417594789919541478795964

[0086] Final total traffic volume (ciphertext): 11533892566923215063921708423587868971649450553929530027122 004075983123140658168835915495325044890852826705243475115896993 703004081231109992133391444711490562526490764149139177362400217 336380087469678862254747209483827518152140274253810375298940312 226013355732735564540684791990685144596138536554478866511462338 959958915572352906665604051822117202654974034577135881304972215 395265884659794632715147146147969727951088169438060907577089434 833019103870092170366072516650523593444192609012686421030198622 819345858338918738980150202663761970279685736041068393952390165 352612696922257723249240661677752987609677380722259144369628654 134078043896942413105958524457711570943402300490404610808531558 303610140596095426183335076259111744179473386761155544610174129 842655363223194064139311466785738370897180698629394659445483271930145527710763309423436183970951435289314131728817894402516115 468520473243813287305820257820393226051113821469990945802319709221112039099958890908469594320400629770850287323365879346307620 866137576556421422353523739438546817607600114419409255292915726 329704487919698997915909897983822286272414596289043408758776936 142788830029654940969522990221907310714394567159909417798956128 290127809259224305466706746390386608634346608887136135008794535 920521364587883272248486378560918406195545057664127820977071687 961263714124818047729652275780690779672496411722779692150589406 018705203835195575959116353447920583647036457873701527972078827 506615765731669876156887303334165473174072367023521721217410714 479559081937778376602528551828140496416817468916185717654925986 094323604619128410075906603572172533677937485284756932893099743 532841836603936756224873993986589011553423506833774417992559500 538417840330653194486205761744002595146055272292006655482783377 705532565320452626392820371341463247385733885687154103003705026 704615879961919564210505028

[0088] Calculation result: Total traffic volume (plain text): 13099

[0089] In an embodiment of the present invention, through the homomorphic encryption method of the present invention, the vehicle flow data can be encrypted and calculated in the cloud control computing domain, and finally the encrypted calculation result is returned to the trusted domain for decryption to obtain the final vehicle flow statistics result without exposing the original data.

[0090] It is not difficult to find that compared with the related technology, in the solution provided in the embodiment of the present application, based on the homomorphic encryption technology, the computing task is encrypted and delegated from the trusted domain to the computing domain. After the calculation is completed safely, it returns to the trusted domain to restore the calculation result to plain text.

[0091] The step division of the above methods is only for the purpose of clear description. When implemented, they can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this patent; adding insignificant modifications to the algorithm or process or introducing insignificant designs without changing the core design of the algorithm and process are all within the scope of protection of this patent.

[0092] In addition, some embodiments of the present application also provide an electronic device. The electronic device may be a digital computer in various forms, such as a laptop computer, a desktop computer, a workbench, a personal digital assistant, a server, a blade server, a mainframe computer, etc. The electronic device may also be a mobile device in various forms, such as a personal digital processing, a cellular phone, a smart phone, a wearable device, and other similar computing devices.

[0093] The electronic device includes: one or more processors; and a memory storing computer program instructions, wherein when the computer program instructions are executed, the processor executes the steps of the method provided in any one or more of the above embodiments. Figure 3 An exemplary structural diagram of the electronic device is disclosed. Figure 3As shown, the electronic device includes: one or more processors 1101, memory 1102, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. The various components are connected to each other using different buses, and can be installed on a common mainboard or installed in other ways as needed. The processor can process instructions executed in the electronic device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as a display device coupled to the interface). In some other embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple electronic devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Among them, the components shown in this article, their connections and relationships, and their functions are only used as examples, and are not intended to limit the implementation of the present application described and / or required herein.

[0094] The electronic device may further include: an input device 1103 and an output device 1104. The processor 1101, the memory 1102, the input device 1103 and the output device 1104 may be connected via a bus or other means. Figure 3 The example of connecting through bus is taken in the following.

[0095] The input device 1103 can receive input digital or character information, and generate key signal input related to the user settings and function control of the electronic device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick and other input devices. The output device 1104 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The display device may include, but is not limited to, a liquid crystal display (LCD), a light emitting diode (LED) display and a plasma display. In some embodiments, the display device may be a touch screen.

[0096] To provide interaction with a user, the electronic device may be a computer. The computer has: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball), through which the user can provide input to the computer. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0097] In the embodiments of the present application, a computer program / instruction is stored on a computer-readable medium, and when the computer program / instruction is executed by a processor, the steps of the method provided by any one or more of the above embodiments are implemented. The computer-readable medium may be included in the electronic device described in the above embodiments; or it may exist independently without being assembled into the device. The above computer-readable medium carries one or more computer-readable instructions.

[0098] The memory 1102 can be used as a non-transient computer-readable storage medium, which can be used to store non-transient software programs, non-transient computer executable programs and modules. The processor 1101 executes various functional applications and data processing of the server by running the non-transient software programs, instructions and modules stored in the memory 1102, so as to implement the program instructions / modules corresponding to the method provided by any one or more embodiments in the embodiments of the present application.

[0099] The memory 1102 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the electronic device, etc. In addition, the memory 1102 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory 1102 may optionally include a memory remotely arranged relative to the processor 1101, and these remote memories may be connected to the electronic device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0100] It should be noted that the computer-readable medium described in the present application may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, a computer-readable medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device.

[0101] Computer readable media include permanent and non-permanent, removable and non-removable media, and can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, modules of programs or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission medium that can be used to store information that can be accessed by a computing device.

[0102] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" language or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as an independent software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., using an Internet service provider to connect via the Internet).

[0103] In the above-described embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. For example, it can be implemented by using an application specific integrated circuit (ASIC), a general-purpose computer or any other similar hardware device. In certain embodiments, the software program of the present application can be executed by a processor to implement the above steps or functions. Similarly, the software program of the present application (including relevant data structures) can be stored in a computer-readable recording medium, for example, a RAM memory, a magnetic or optical drive or a floppy disk and similar devices. In addition, some steps or functions of the present application can be implemented by hardware, for example, as a circuit that cooperates with a processor to perform each step or function.

[0104] The computer program product provided in the embodiment of the present application includes one or more computer programs / instructions, and when the computer program / instructions are executed by the processor, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium, or transmitted from a computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website site, a computer, a server or a data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or a data center that includes one or more available media integrations. The available medium may be a magnetic medium, (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state drive so lid state di sk (SSD)), etc.

[0105] The flow chart or block diagram in the accompanying drawings shows the possible architecture, function and operation of the equipment, method and computer program product according to various embodiments of the present application. In this regard, each box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of the boxes in the block diagram and / or flow chart can be implemented with a dedicated system for hardware that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0106] The scope of the present application is defined by the appended claims rather than the above description, and it is intended that all changes that fall within the meaning and scope of the equivalent elements of the claims are included in the present application. Any figure mark in the claims should not be regarded as limiting the claims involved. In addition, it is clear that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or devices stated in the device claim may also be implemented by one unit or device through software or hardware. The words "first", "second", etc. are only used to distinguish the description, and do not indicate any particular order, nor can they be understood as indicating or implying relative importance.

[0107] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily mention changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims, and the above embodiments should be regarded as exemplary and non-restrictive.

Claims

1. A cloud control data processing method based on homomorphic encryption, characterized in that: include: Receiving original cloud control data to the cloud control trusted domain, the original cloud control data including: vehicle reporting data on the vehicle side and road test perception data on the road side; Selecting data and a calculation method that need to be calculated from the original cloud control data, and performing homomorphic encryption on the selected data that need to be calculated to obtain ciphertext data; Delegating the ciphertext data and the calculation method from the cloud control trusted domain to the cloud control calculation domain and performing calculations to obtain ciphertext results; Perform a homomorphic inverse transformation on the ciphertext result returned from the computing domain to the cloud control trusted domain, and decrypt it to obtain a plaintext result.

2. The method according to claim 1, characterized in that in, The homomorphic encryption method is a partially homomorphic encryption algorithm or a fully homomorphic encryption algorithm.

3. The method according to claim 2, characterized in that in, The homomorphic encryption method comprises: Input: E(X), E(Y), @ Output: E -1 (E(X)@E(Y)) Among them, X and Y represent the data plain text, E() and E -1 () is a homomorphic function, @ represents the calculation method, and it satisfies E(X)@E(Y)=E(X@Y).

4. The method according to claim 3, characterized in that in, The homomorphic encryption method is a partially homomorphic encryption algorithm, and the homomorphic encryption process includes: key generation, encryption process, calculation process and decryption process.

5. The method according to claim 4, characterized in that in, The key generation comprises: Select two prime numbers p and q, calculate n = pq and λ = lcm(p-1,q-1); Choose an integer g less than n such that gcd(L(g λ mod n 2 ),n)=1, where The public key is (g,n), and the private key is (λ,μ), where μ=(L(g λ mod n 2 )) -1 mod n.

6. The method according to claim 5, characterized in that in, The encryption process is used to encrypt the vehicle flow data in the original cloud control data, including: For each traffic flow data m, where m is a non - negative integer, select a random number r < n, and calculate the ciphertext c = g m ·r n mod n 2 ; Send all encrypted traffic flow data to the cloud control computing domain.

7. The method according to claim 6, characterized in that in, The calculation process includes: performing modular exponentiation multiplication operation on the encrypted vehicle flow data of two time periods in the cloud control computing domain to obtain a ciphertext result.

8. The method according to claim 7, characterized in that in, The decryption process includes: sending the calculated ciphertext result back to the cloud control trusted domain, and using the private key (λ, μ) to decrypt the ciphertext result to obtain a plaintext result, that is, the sum of the vehicle flow.

9. An electronic device, characterized in that: The electronic device comprises: one or more processors; and A memory storing computer program instructions, which, when executed, cause the processor to perform the steps of the method as claimed in any one of claims 1 to 8.

10. A computer readable medium having a computer program / instructions stored thereon, characterized in that: When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

Images