Data circulation control device and method, storage medium and computer program product

Abstract

The invention provides a data flow control device and method, a storage medium and a computer program product. The device comprises a strategy control network element; the strategy control network element is used for determining a data use strategy corresponding to the first data according to the data demand information of the first data; and deploying the data use strategy on the data flow network element corresponding to the first data, so that the data flow network element uses the first data based on the data use strategy.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a data flow control device, method, storage medium and computer program product. Background Art

[0002] In related technologies, Data Switching Service Networks (DSSN) technology is usually used for data transactions. However, DSSN technology is mainly based on privacy computing to realize data transactions, delivery and other services. However, the data circulation method based on privacy computing has low computing efficiency and high cost. However, if the data is circulated out of the domain, the data security is low. Summary of the invention

[0003] In view of this, the present application hopes to provide a data flow control device, method, storage medium and computer program product that can improve data security.

[0004] The technical solution of this application is implemented as follows:

[0005] In a first aspect, the present application provides a data flow control device, the device comprising: a policy control network element;

[0006] The policy control network element is used to determine the data usage policy corresponding to the first data according to the data demand information of the first data; and deploy the data usage policy on the data circulation network element corresponding to the first data, so that the data circulation network element uses the first data based on the data usage policy.

[0007] In a second aspect, the present application provides a data flow control method, which is applied to a data flow control device, wherein the device includes a policy control network element; the method includes:

[0008] Determining, by the policy control network element, a data usage policy corresponding to the first data according to the data demand information of the first data;

[0009] The data usage policy is deployed on the data circulation network element corresponding to the first data, so that the data circulation network element uses the first data based on the data usage policy.

[0010] In a third aspect, the present application provides a storage medium having a computer program stored thereon, which implements the above-mentioned data flow control method when executed by a processor.

[0011] In a fourth aspect, the present application provides a computer program product, including a computer program, which implements the above-mentioned data flow control method when executed by a processor.

[0012] The present application provides a data flow control device, method, storage medium and computer program product, the device includes a policy control network element; the policy control network element is used to determine the data usage policy corresponding to the first data according to the data demand information of the first data; and the data usage policy is deployed on the data flow network element corresponding to the first data, so that the data flow network element can use the first data based on the data usage policy. Using the above implementation scheme, the policy control network element first determines the data usage policy corresponding to the data demand information according to the data demand information, and deploys the corresponding data usage policy on the data flow network element during the first data flow process. After the deployment is completed, the use of the first data will be based on the corresponding data usage policy. Because the use of the first data is restricted by the data usage policy, when the data flow network element uses the first data based on the data usage policy, the first data is protected by the usage restriction of the data usage policy, thereby ensuring the security of the first data. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 A technical architecture diagram of DSSN data flow control;

[0014] Figure 2 A schematic diagram of a data flow control device provided in an embodiment of the present application Figure 1 ;

[0015] Figure 3 A schematic diagram of a data flow control device provided in an embodiment of the present application Figure 2 ;

[0016] Figure 4 A schematic diagram of the composition of a policy control network element provided in an embodiment of the present application;

[0017] Figure 5 An example diagram of a point-to-point data circulation method provided in an embodiment of the present application;

[0018] Figure 6 An example diagram of a method of data circulation through a third party provided in an embodiment of the present application;

[0019] Figure 7 A schematic diagram of a data flow control method provided in an embodiment of the present application;

[0020] Figure 8 A schematic diagram of the overall flow of a data flow control method provided in an embodiment of the present application;

[0021] Fig. 9 An example diagram of a data flow control method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0022] In order to enable a more detailed understanding of the features and technical contents of the embodiments of the present application, the technical solution of the present application is further elaborated in detail below in combination with the drawings and specific embodiments of the specification. The attached drawings are for reference only and are not used to limit the embodiments of the present application.

[0023] Unless otherwise defined, all technical and scientific terms used in the embodiments of the present application have the same meaning as those commonly understood by those skilled in the art to which the present application belongs. The terms used in the embodiments of the present application are only for the purpose of describing the embodiments of the present application and are not intended to limit the present application.

[0024] In the following description, reference is made to "some embodiments", which describe a subset of all possible embodiments, but it is understood that "some embodiments" may be the same subset or different subsets of all possible embodiments, and may be combined with each other without conflict. It should also be noted that the terms "first / second / third" involved in the embodiments of the present application are only used to distinguish similar objects and do not represent a specific ordering of the objects. It is understandable that "first / second / third" may be interchanged in a specific order or sequence where permitted, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein.

[0025] In order to further improve transaction circulation efficiency, create a safe and reliable circulation environment, enrich data security products and cultivate data security services, China Mobile has innovatively proposed the DSSN solution for the next-generation data circulation market. By creating a cross-domain, cross-industry, and cross-entity "data logistics network", it connects multiple data suppliers / demanders / transaction providers and other entities to provide "data logistics" services for data products.

[0026] like Figure 1 As shown, a technical architecture diagram of DSSN data flow control is shown. Figure 1 It mainly includes the following parts:

[0027] The Data Sharing Platform (DSP) provides services such as data access management, trusted data delivery, private network scheduling, reliable transmission, security management and control, and open supervision.

[0028] DSSN private network is a data-sharing virtual private network built based on network facilities in related technologies to ensure the security of data transmission and service quality.

[0029] Data Service Node (DSN) is deployed at the data provider to implement core functions such as data source docking, DSSN private network access, and data security computing, and can provide different forms of products according to customer needs.

[0030] Data Requirement Node (DRN) is deployed on the data demand side to realize core functions such as business system docking, DSSN private network access, visualization development, and data security computing. It can provide different forms of products according to customer needs.

[0031] The implementation of the above-mentioned DSSN technical solution is mainly based on privacy computing to realize data transactions, delivery and other services. However, the data circulation based on privacy computing faces the situation of being difficult to promote and popularize on a large scale due to problems such as low computing efficiency and high cost, which restricts the improvement of the activity of the data trading market.

[0032] To solve the above problems, the embodiment of the present application proposes a method to add support for non-privacy computing data circulation based on the original privacy computing-based technical architecture of DSSN. Because privacy computing is based on the core data security design of data not leaving the domain, how to provide a trusted and controllable data out-of-domain circulation transaction and delivery solution under the non-privacy computing mode is of great significance to the security of data transaction circulation.

[0033] The technical solutions of the embodiments of the present application are as follows:

[0034] The present application embodiment provides a data flow control device 1, such as Figure 2 As shown, the data flow control device 1 includes: a policy control network element 10; the policy control network element 10 is used to determine the data usage policy corresponding to the first data according to the data demand information of the first data; and deploy the data usage policy on the data flow network element corresponding to the first data, so that the data flow network element uses the first data based on the data usage policy.

[0035] In an embodiment of the present application, the data circulation network element may include a first network element and a second network element, or the data circulation network element may include a second network element and a third network element.

[0036] It should be noted that the specific network elements included in the data circulation network elements need to be determined according to the data circulation method.

[0037] In an embodiment of the present application, the first network element may be a data provider, the second network element may be a data demander, and the third network element may be a data processing lake network element (abbreviated as DCP).

[0038] In the embodiment of the present application, the first data may be data packaged for a certain commodity-related data, such as packaged data of a certain commodity displayed on a shopping website. The first data may also be other data, which is not specifically limited in the embodiment of the present application.

[0039] In the embodiment of the present application, the data demand information may be commodity demand information, such as what commodity to purchase, or may be other data demand information, which is not specifically limited in the embodiment of the present application.

[0040] In the embodiment of the present application, the policy control network element determines the data usage policy corresponding to the first data according to the data demand information of the first data, which can be implemented through the following process:

[0041] 1. The data demander / data provider logs into the data circulation system through the authentication network element.

[0042] 2. The data demander browses the commodity data catalog through the data trading platform (abbreviated as DEP) and selects commodity data from the commodity data catalog. The commodity data catalog in DEP is the data set published by the data provider through DEP; DEP notifies the data provider of the commodity data demand information of the data demander.

[0043] 3. The data provider and the data demander negotiate the data usage policy of the commodity data online through the policy control network element, where the data usage policy may include usage conditions, usage methods, prices, etc.

[0044] For example, the usage conditions may include the connection under which the device is used, the application under which the device is used, the security level under which the device is used, etc.; the usage method may include the time of use, the number of times of use, etc.

[0045] In an embodiment of the present application, after the policy control network element determines the data usage policy for the first data based on the data demand information during the negotiation between the data demander and the data provider, the data usage policy is configured and deployed on the data provider and the data demander, or deployed on the data demander and the DCP network element. In this way, the data demander can use the first data provided by the data provider according to the data usage policy.

[0046] In an embodiment of the present application, in order to complete the use of the first data by the data circulation network element based on the data usage policy, it is also necessary that after the policy control network element configures and deploys the determined data usage policy, the policy control network element notifies the DEP of the determined data usage policy, which includes price information, etc. The DEP saves the determined data usage policy and notifies the DSP.

[0047] It should be noted that after the data provider and the data demander have negotiated on the determined data usage strategy, the data demander and the data provider adopt the same data usage strategy.

[0048] In one embodiment of the present application, the data flow control device also includes: a fourth network element; the fourth network element is used to schedule the first network element and the second network element to perform authentication connection related configuration; or, schedule the first network element, the second network element and the third network element to perform authentication connection related configuration.

[0049] In the embodiment of the present application, the fourth network element is a DSP.

[0050] In the embodiment of the present application, further, the DSP performs scheduling configuration of relevant data circulation network elements according to the data usage policy notified by the DEP, and after the scheduling configuration is completed, the data demander enables the data demander to use the first data provided by the data provider.

[0051] In the embodiment of the present application, the data usage policy may also include a data circulation method, which includes a point-to-point circulation method and a data circulation method through a third party.

[0052] In the embodiment of the present application, if the data flow is point-to-point, when the DSP performs scheduling configuration of the data flow network element according to the data usage policy, mutual authentication is required. The DSP will configure the authentication protocol, connection information, etc. for both network elements (such as the data demander and the data provider).

[0053] In the embodiment of the present application, if the data circulation method is through a third party, when the DSP performs scheduling configuration of the data circulation network element according to the data usage policy, mutual authentication of the three parties is required. The DSP will configure the authentication protocol, connection information, authorization information, etc. for the DCP network element, the data demander, and the data provider.

[0054] It should be noted that the authentication protocol, connection information, etc. may be a connection such as Transport Layer Security (TLS).

[0055] In one embodiment of the present application, if the data flow mode is a point-to-point data flow mode, the data flow network element includes a first network element and a second network element; the second network element is used to receive the data usage policy sent by the first network element, and after confirming the data usage policy, use the first data in the first network element based on the data usage policy.

[0056] In an embodiment of the present application, the first network element may be a data provider, and the second network element may be a data demander.

[0057] In the embodiment of the present application, the first data is stored in the data provider.

[0058] In an embodiment of the present application, the data provider notifies the policy control network element of the configuration information of the data usage policy that has been configured, that is, the data usage policy has taken effect on the data provider, and then sends the effective data usage policy to the data demander through the policy control network element, and notifies the data demander to confirm the effective data usage policy.

[0059] In the embodiment of the present application, the data demander receives the data usage policy sent by the first network element through the policy control network element and confirms the data usage policy. The specific confirmation method can be to compare whether the data usage policy sent by the data provider is the same as the data usage policy configured by the data provider itself.

[0060] In an embodiment of the present application, after the data demander confirms the data usage policy sent by the data sender, the data demander and the data provider perform point-to-point data transmission and use according to the established data usage policy, that is, the data demander can use the data in the data provider according to the established data usage policy.

[0061] It should be noted that the data in the embodiments of the present application are not limited to files, structured data joint calculations, etc., and can be selected according to actual conditions, and no specific limitation is made in the embodiments of the present application.

[0062] In an embodiment of the present application, after the data demander confirms the data usage policy sent by the data provider, the confirmed data usage policy will monitor the data usage in the data provider through deployment on the data provider and the data demander (such as through control clients, operating system interception, hardware and other security methods).

[0063] In an embodiment of the present application, before the data demander uses the first data of the data provider, the data provider performs initialization processing such as desensitization / watermarking / anonymization on the first data, and then the first data can be used out of the domain in accordance with the corresponding data usage policy.

[0064] In one embodiment of the present application, the data circulation network element includes a first network element and a second network element; the policy control network element is also used to perform data processing corresponding to the usage restriction information on the first data based on the usage restriction information pre-determined by the first network element and the second network element for the first data.

[0065] In the embodiments of the present application, data processing may include time limit, duration limit, self-destruction after reading, risk chain break prevention and control, etc.

[0066] In the embodiment of the present application, the usage restriction information may be determined by the first network element and the second network element during the data usage policy negotiation process, that is, it may be determined through negotiation between the two.

[0067] In an embodiment of the present application, the policy control network element performs corresponding limitations on the first data according to the negotiation result. Specifically, after the data usage policy is executed, relevant read-and-burn, risk disconnection prevention and control and other processing may be performed according to the pre-negotiated usage restriction information.

[0068] In one embodiment of the present application, if the data circulation method is through a third party's data circulation method, the data circulation network element includes a second network element and a third network element; at this time, the data circulation control device also includes: a first network element that stores first data; wherein the first network element is used to send the first data and the data usage policy to the third network element; the third network element is used to receive the data usage policy and the first data sent by the first network element; and based on the data usage policy, control the second network element to use the first data in the third network element.

[0069] In the embodiment of the present application, the second network element is the data demander.

[0070] In the embodiment of the present application, the third network element is a DCP.

[0071] In the embodiment of the present application, before the data provider sends the first data and the data usage policy to the DCP, the data provider may also perform the following operations:

[0072] The data provider selects the DCP assigned by the DSP and performs corresponding processing on the first data (such as performing initialization operations such as desensitization / watermarking / anonymization on the first data).

[0073] In the embodiment of the present application, after the initialization operation is performed on the first data, the processed first data is transmitted to the assigned DCP, so that the first data can be used out of the domain according to the data use policy.

[0074] In an embodiment of the present application, after the data provider sends the processed first data and data usage policy to the DCP, the DCP receives the processed first data and data usage policy sent by the data provider, and the DCP further selects a container / software / TEE with a corresponding security level to process and store (such as memory / file / hardware) the data usage policy and the first data based on the data usage policy.

[0075] In the embodiment of the present application, the DCP notifies the data demander to use the first data and notifies the data demander to confirm the corresponding data usage policy and usage restriction information.

[0076] In an embodiment of the present application, after the data demander confirms the data usage policy and usage restriction information, the data demander uses the data through the DCP (such as browsing files, data joint calculations, etc.), and the DCP controls and guarantees the first data based on the data usage policy.

[0077] In one embodiment of the present application, the policy control network element is also used to monitor the execution result of the data usage policy executed by the third network element; when the execution result is abnormal, the first network element and the third network element are disconnected.

[0078] In an embodiment of the present application, the data usage policy of the DCP is monitored by the policy control network element. If the policy control network element finds that the execution result is abnormal (or a risk is found) during the process of monitoring the data usage policy of the DCP, the policy control network element will perform operations such as disconnecting the data demander and the DCP.

[0079] In one embodiment of the present application, the policy control network element is also used to receive a first execution log sent by the first network element and a second execution log sent by the second network element when the use of the first data is completed; based on the first execution log and the second execution log, determine whether the relevant execution behavior of the data usage policy is abnormal, and report the abnormal behavior when the relevant execution behavior is abnormal.

[0080] In an embodiment of the present application, whether through a point-to-point data flow method or a third-party data flow method, after the data flow is completed, the policy control network element will also receive the first execution log and the second execution log of the data usage policy uploaded by the data demander and the data provider respectively. The first execution log and the second execution log include but are not limited to the software and hardware environment configuration before and after the first data is used, authentication certificate authentication information, data usage policy execution process flags, etc.

[0081] In the embodiment of the present application, the policy control network element evaluates whether the execution of the data usage policy complies with the pre-configuration based on the first execution log and the second execution log. If an alarm message appears, it indicates that it does not comply with the pre-configuration.

[0082] In an embodiment of the present application, the policy control network element will further issue an evaluation report based on the evaluation results to notify the DEP data demander and data provider of the specific implementation of the data usage policy.

[0083] In one embodiment of the present application, if the data demander and the data provider negotiate a method of downloading data circulation software through the APP Store to control data usage policy, the data demander / data provider also needs to download the relevant APP for tool configuration and use according to the negotiation situation. If data segmentation and encryption are required, the data provider needs to download the relevant authorized APP for corresponding data processing.

[0084] It should be noted that this process is only executed when an APP needs to be specified for data processing during the negotiation between the data demander and the data provider.

[0085] It can be understood that a data flow control device provided in an embodiment of the present application first determines the data usage policy corresponding to the data demand information based on the data demand information through a policy control network element, and deploys the corresponding data usage policy on the data flow network element during the first data flow process. After the deployment is completed, the use of the first data will be based on the corresponding data usage policy. Because the use of the first data is restricted by the data usage policy, when the data flow network element uses the first data based on the data usage policy, the first data is protected by the usage restriction of the data usage policy, thereby ensuring the security of the first data.

[0086] Based on the above embodiments, a data flow control device is also provided in the embodiments of the present application. The data flow control device demonstrates the hierarchical deployment plan of each network element included, that is, the DSSN technical architecture in the related technology is updated, and a hierarchical design idea is adopted. It is constructed according to the DSSN business layer, DSSN core network and DSSN trusted node, which can solve the problems of trustworthiness and security of data out-of-domain control in the data transaction process.

[0087] In the embodiment of the present application, the data flow control device is as follows: Figure 3 As shown in the figure, the following introduces the network elements contained in each layer and the functions of each network element:

[0088] DSSN business layer: includes network elements such as data transactions, application stores, development environments, and vocabulary centers.

[0089] Among them, data transactions include data catalog, contract negotiation, contracts and orders, strategy coordination and other functions.

[0090] Application store: An important network element in building the DSSN ecosystem, responsible for introducing data application software, data processing software, data control software, etc. from internal and external technologies and service providers.

[0091] Development environment: Provides open tools and components for DSSN data development for developers / software / application system providers.

[0092] Vocabulary Center: Data standards and formatting units for various fields, used to unify the standard format of data exchange in the DSSN ecosystem.

[0093] DSSN core network layer: Based on the current DSP network elements, new core control network elements, authentication network elements, policy control network elements, billing & settlement, Certificate Authority (CA) center, DCP (data processing lake) and other functions are added.

[0094] Among them, authentication and authorization: responsible for authenticating and authorizing network element entities, user entities, data, etc. entering the DSSN environment, and interacting with the CA center for identity verification.

[0095] Policy control network element: including policy negotiation, policy configuration, policy deployment, policy execution and other functions before, during and after data use, monitoring of policy use and exception handling, etc.

[0096] Billing & Settlement: Billing statistics, clearing and settlement are carried out between partners based on data contracts, orders, and usage.

[0097] CA center: A national / industry certified CA system responsible for issuing certificates for network element entities, user entities, data, etc.

[0098] DSP: Based on the current DSP, new functions such as scheduling and controlling network elements and engines related to data usage control strategies are added.

[0099] DCP (Data Processing Lake): Responsible for cloud data control and processing, and performs centralized data and policy usage control based on data interaction requirements.

[0100] DSSN trusted node: Based on the current DSN / DRN nodes, that is, the privacy computing engine, new functions are added for non-privacy computing engines, including scheduling, adaptation, data directory view guidance, and other functions for unstructured data (such as file processing) and structured data (such as joint computing, query, etc.).

[0101] Among them, the privacy computing engine includes the FL engine, that is, the federated learning engine. FL can be expressed in English as Federated Learning.

[0102] MPC engine: that is, multi-party secure computing engine. MPC can be expressed in English as Secure Multi-Party Computation.

[0103] PSI Engine: Private Set Intersection Engine, PSI can be expressed in English as Private Set Intersection, PSI

[0104] PIR engine: Anonymous query engine, also known as privacy information retrieval engine. PIR can be expressed in English as Private Information Retrieval.

[0105] Based on the above embodiments, in order to implement the technical solutions in the embodiments of the present application, the above Figure 3 The architecture of the policy control network element shown in the figure requires the design of at least the following six functional modules: Figure 4As shown, it mainly includes data policy negotiation module, data policy execution module, data policy management module, data policy monitoring module, data policy deployment module and data policy use evaluation module. The six functional modules will be deployed on the platform side or the node side. The specific selection will be made according to the actual situation. The specific functions of each functional module will be introduced below:

[0106] Data policy negotiation module: It is the entry point for data usage policies and is used to create and manage policy resources, scopes, permissions, and policy content. This module provides users with a visual editing interface / policy template (such as allowing data users to perform specified operations on data, such as display, printing, calculation, etc., or prohibiting the specified operations, etc.). It supports the signing of user policy contracts, multiple rounds of negotiation, revision, confirmation, and other functions.

[0107] Data policy management module: manages related usage restrictions, policy usage cycles, etc., and will also instantiate usage restriction policies, evaluate data usage policies, perform related conflict detection and resolution, revocation and other operations; responsible for making authorization decisions based on data usage policies to ensure the execution of data usage policies.

[0108] Data policy deployment module: responsible for converting (or translating) the negotiated policy into a machine-readable code format (such as an executable program) to deploy the policy. In a point-to-point data flow scenario, this module communicates with the node side to implement node-side deployment of the policy; in a scenario where data flows through an intermediary, the node not only communicates with the node side to implement node-side deployment of the policy, but also needs to deploy the policy on the DCP.

[0109] Data policy execution module: After the policy is deployed and loaded, it is necessary to perform corresponding operations according to the policy rules (such as sending emails or writing to a specific log system when using data, desensitizing data before leaving the domain, and burning it after reading, etc.). There are many ways to implement policy execution: you can use APP software to obtain and intercept the corresponding data stream for processing / adapt to operating system related functions (such as limiting the number of uses and time limits of the file system) / trusted environment (such as TEE, TPM, data sandbox and other secure environments that burn after reading, etc.). When the policy is executed, it is necessary to obtain decision information about data operations from the policy management module (such as a file is only allowed to be opened 3 times, and each time it is opened, the decision information is obtained to determine whether the file opening operation can be performed) before performing data operations.

[0110] Data policy monitoring module: The policy monitoring module ensures that data is always used within the scope of authorization in accordance with the agreement between the two interacting parties (i.e., data demanders and data providers), and that data is not leaked, tampered with, or used beyond the limit (e.g., sensitive data cannot be forwarded to nodes that have not obtained permission, important data cannot be modified by nodes that have not obtained permission, and data must be deleted from memory after a period of time, etc.). Monitoring methods and strategies include but are not limited to the following: regular dynamic monitoring of the software list of data-using nodes, the latest information on the dynamic properties of components, and the ability to prove compliance with the latest status of the current properties and the software stack used; when excessive or abnormal data operations occur (e.g., not limiting use, time intervals, or times when specific users, specific locations, specific purposes, or specific events are not in accordance with the agreement), abnormal chain disconnection, risk blocking, and other measures are taken.

[0111] Data policy usage evaluation module: responsible for matching and evaluating the consistency of the data usage policy configuration negotiated before data circulation, the data usage policy execution monitoring during the circulation process, and the data usage policy execution log feedback after the circulation (such as whether it is executed according to the agreed data set fields, limited scenarios, and limited times), and providing comprehensive policy usage evaluation results, including policy evaluation degree, execution differences, risk point evaluation and other information, which are used to provide subsequent billing vouchers to the DEP order module. At the same time, it will also serve as the basis for subsequent iterative optimization of policy execution, management and other modules.

[0112] In the embodiment of the present application, an example diagram of a point-to-point data flow method is also provided, such as Figure 5 As shown in the figure, and an example diagram of how data flows through a third party, such as Figure 6 As shown. Figure 5 It can be seen from the figure that the data provider and the data demander correspond to the trusted nodes, and the deployment strategy control network elements in each functional module, and the two parties directly transmit and use data. Figure 6 In this process, data providers and data demanders need to rely on third-party DCP to exchange and use data.

[0113] In the embodiment of the present application, a new DSSN technical architecture is proposed, which adopts the idea of ​​layered design and is constructed according to the DSSN business layer, DSSN core network, and DSSN trusted nodes to solve the problems of trust and security of data out-of-domain control in the data transaction process. It also builds a method and process for trusted data circulation for data providers and data demanders, is compatible with the existing privacy computing architecture, and solves new strategies for the circulation of non-privacy computing data, providing more dimensional technical guarantees for data transactions. The device can monitor and evaluate the entire process of data circulation based on data circulation strategies on the cloud and node side according to user needs.

[0114] Compared with the related art, the embodiments of the present application have the following technical advantages:

[0115] 1. Propose a new DSSN technical architecture to achieve a three-layer separation of data transaction business development, transaction circulation control, and transaction data flow, which can more flexibly adapt to various scenarios and various types of confidential data circulation business.

[0116] 2. When data is circulated between data demanders and data providers using non-privacy computing methods, the problems of trustworthiness and controllability in the circulation transaction process are solved.

[0117] Based on the above embodiment, a data flow control method is also provided in another embodiment of the present application, such as Figure 7 As shown, the method is applied to a data flow control device, the device includes a policy control network element, and the method may include:

[0118] S701. Determine, through a policy control network element, a data usage policy corresponding to first data according to data demand information of first data.

[0119] In the embodiment of the present application, the first data may be data packaged for a certain commodity-related data, such as packaged data of a certain commodity displayed on a shopping website. The first data may also be other data, which is not specifically limited in the embodiment of the present application.

[0120] In the embodiment of the present application, the data demand information may be commodity demand information or other data demand information, which is not specifically limited in the embodiment of the present application.

[0121] In the embodiment of the present application, the data usage policy corresponding to the first data is determined according to the data demand information of the first data through the policy control network element, which can be implemented through the following process:

[0122] 1. The data demander / data provider logs into the data circulation system through the authentication network element.

[0123] 2. The data demander browses the commodity data catalog through DEP and selects commodity data from the commodity data catalog. The commodity data catalog in DEP is the data set published by the data provider through DEP; DEP notifies the data provider of the commodity data demand information of the data demander.

[0124] 3. The data provider and the data demander negotiate the data usage policy of the commodity data online through the policy control network element, where the data usage policy may include usage conditions, usage methods, prices, etc.

[0125] S702: Deploy a data usage policy on a data circulation network element corresponding to the first data, so that the data circulation network element uses the first data based on the data usage policy.

[0126] In an embodiment of the present application, the data circulation network element may include a first network element and a second network element, or the data circulation network element may include a second network element and a third network element.

[0127] It should be noted that the network elements specifically included in the data circulation network elements need to be determined according to the data circulation method.

[0128] In an embodiment of the present application, the first network element may be a data provider, the second network element may be a data demander, and the third network element may be a data processing lake (abbreviated as DCP).

[0129] In an embodiment of the present application, after determining the data usage policy of the first data through the policy control network element, the data usage policy is configured and deployed on the data provider and the data demander, or configured and deployed on the data demander and the DCP network element through the policy control network element. In this way, the data demander can use the first data provided by the data provider according to the data usage policy.

[0130] It can be understood that a data flow control method provided by an embodiment of the present application first determines the data usage policy corresponding to the data demand information based on the data demand information through a policy control network element, and deploys the corresponding data usage policy on the data flow network element during the first data flow process. After the deployment is completed, the use of the first data will be based on the corresponding data usage policy. Because the use of the first data is restricted by the data usage policy, when the data flow network element uses the first data based on the data usage policy, the first data is protected by the usage restriction of the data usage policy, thereby ensuring the security of the first data.

[0131] In an embodiment of the present application, in order to complete the use of the first data by the data circulation network element based on the data usage policy, it is also necessary to configure and deploy the determined data usage policy through the policy control network element, and then notify the DEP of the determined data usage policy, including price information, etc. The DEP saves the determined data usage policy and notifies the DSP.

[0132] In one embodiment of the present application, the data flow control device also includes: a fourth network element; through the fourth network element, scheduling the first network element and the second network element to perform authentication connection related configuration; or, scheduling the first network element, the second network element and the third network element to perform authentication connection related configuration.

[0133] In the embodiment of the present application, the fourth network element is a DSP.

[0134] In the embodiment of the present application, the DSP is used to perform scheduling configuration of relevant data flow network elements according to the data usage policy notified by the DEP. After the scheduling configuration is completed, the data demander can use the first data provided by the data provider.

[0135] In the embodiment of the present application, the data usage policy may also include a data circulation method, which includes a point-to-point circulation method and a data circulation method through a third party.

[0136] In the embodiment of the present application, if the data flow is point-to-point, when the DSP performs scheduling configuration of the data flow network element according to the data usage policy, only two-way authentication is required, and the DSP configures the authentication protocol, connection information, etc. of both network elements (such as the data demander and the data provider).

[0137] In the embodiment of the present application, if the data flow is through a third party, when the DSP performs scheduling configuration of the data flow network element according to the data usage policy, mutual authentication of the three parties is required, and the DSP configures the authentication protocol, connection information, authorization information, etc. of the DCP network element, the data demander, and the data provider.

[0138] In one embodiment of the present application, if the data flow mode is a point-to-point data flow mode, the data flow network elements include a first network element and a second network element; the data usage policy sent by the first network element is received by the second network element, and when the second network element confirms the data usage policy, the first data in the first network element is used based on the data usage policy.

[0139] In the embodiment of the present application, receiving the data usage policy sent by the first network element by the second network element can be implemented in the following manner:

[0140] The data provider first notifies the policy control network element of the configuration information of the data usage policy that has been configured, that is, the data usage policy has taken effect on the data provider, and then sends the effective data usage policy to the data demander through the policy control network element, and notifies the data demander to confirm the effective data usage policy.

[0141] In the embodiment of the present application, when the data demander receives the data usage policy sent by the data provider through the policy control network element, the data usage policy is confirmed by comparing whether the data usage policy sent by the data provider is the same as the data usage policy configured by the data demander.

[0142] In an embodiment of the present application, after the data demander confirms the data usage policy sent by the data provider, the data demander and the data provider perform point-to-point data transmission and use according to the established data usage policy, that is, the data demander uses the data in the data provider according to the established data usage policy.

[0143] It should be noted that the data in the embodiments of the present application are not limited to files, structured data joint calculations, etc., and can be selected according to actual conditions, and no specific limitation is made in the embodiments of the present application.

[0144] In an embodiment of the present application, after the data demander confirms the data usage policy sent by the data provider, the confirmed data usage policy will monitor the data usage in the first network element through deployment on the data provider and the data demander (such as through control clients, operating system interception, hardware and other security methods).

[0145] In an embodiment of the present application, before the data demander uses the first data from the data provider, the data provider needs to perform initialization processing such as desensitization / watermarking / anonymization on the first data before the first data can be used out of the domain in accordance with the corresponding data usage policy.

[0146] In one embodiment of the present application, the data circulation network element includes a first network element and a second network element; based on the usage restriction information pre-determined for the first data by the first network element and the second network element, the policy control network element performs data processing corresponding to the usage restriction information on the first data.

[0147] In the embodiments of the present application, data processing may include time limit, duration limit, self-destruction after reading, risk chain break prevention and control, etc.

[0148] In the embodiment of the present application, the usage restriction information may be determined by the first network element and the second network element during the data usage policy negotiation process, that is, it may be determined through negotiation between the two.

[0149] In an embodiment of the present application, the first data is correspondingly limited according to the negotiation result through the policy control network element. Specifically, after the data usage policy is executed, relevant read-and-burn, risk disconnection prevention and control and other processing may be performed according to the pre-negotiated usage restriction information.

[0150] In one embodiment of the present application, if the data circulation method is through a third party's data circulation method, the data circulation network elements include a second network element and a third network element; at this time, the data circulation control device also includes: a first network element that stores first data; sending the first data and the data usage policy to the third network element through the first network element; receiving the data usage policy and the first data sent by the first network element through the third network element; and based on the data usage policy, controlling the second network element to use the first data in the third network element through the third network element.

[0151] In the embodiment of the present application, the second network element is the data demander.

[0152] In the embodiment of the present application, the third network element is a DCP.

[0153] In the embodiment of the present application, before the data provider sends the first data and the data usage policy to the DCP, the following operations may be performed:

[0154] The data provider selects the DCP assigned by the DSP and performs corresponding processing on the first data (such as performing initialization operations such as desensitization / watermarking / anonymization on the first data).

[0155] In the embodiment of the present application, after the initialization operation is performed on the first data, the processed first data is transmitted to the assigned DCP through the data provider, so that the first data can be used out of the domain according to the data usage policy.

[0156] In an embodiment of the present application, after the data provider sends the processed first data and data usage policy to the DCP, the DCP receives the processed first data and data usage policy sent by the data provider, and the DCP further selects a container / software / TEE with a corresponding security level to process and store (such as memory / file / hardware) the data usage policy and the first data based on the data usage policy.

[0157] In the embodiment of the present application, the data demander is notified through the DCP to use the first data, and is notified to confirm the corresponding data usage policy and usage restriction information.

[0158] In an embodiment of the present application, after the data demander confirms the data usage policy and usage restriction information, the data demander uses the data (such as file browsing, data joint calculation, etc.) through the DCP, and the DCP controls and guarantees the first data based on the data usage policy.

[0159] In one embodiment of the present application, the policy control network element can also monitor the execution result of the data usage policy executed by the third network element; when the execution result is abnormal, the first network element and the third network element are disconnected.

[0160] In an embodiment of the present application, the data usage policy of the DCP is monitored by the policy control network element. If the policy control network element finds that the execution result is abnormal (or a risk is found) during the process of monitoring the data usage policy of the DCP, the policy control network element will perform operations such as disconnecting the data demander and the DCP.

[0161] In one embodiment of the present application, when the use of the first data is completed, a first execution log sent by the first network element and a second execution log sent by the second network element are received through a policy control network element; based on the first execution log and the second execution log, it is determined whether the relevant execution behavior of the data usage policy is abnormal, and if the relevant execution behavior is abnormal, the abnormal behavior is reported.

[0162] In an embodiment of the present application, whether the data flow is through a point-to-point method or through a third-party method, after the data flow is completed, the first execution log and the second execution log of the data usage policy uploaded by the data demander and the data provider are received through the policy control network element. The first execution log and the second execution log include but are not limited to the software and hardware environment configuration before and after the first data is used, authentication certificate authentication information, data usage policy execution process flags, etc.

[0163] In the embodiment of the present application, the policy control network element evaluates whether the execution of the data usage policy complies with the pre-configuration according to the first execution log and the second execution log. For example, if an alarm message appears, it indicates that the pre-configuration is not met. The policy control network element further issues an evaluation report based on the evaluation results, and notifies the DEP data demander and data provider of the specific execution of the data usage policy.

[0164] In one embodiment of the present application, if the data demander and the data provider negotiate a method of downloading data circulation software through the APP Store to control data usage policy, the data demander / data provider also needs to download the relevant APP for tool configuration and use according to the negotiation situation. If data segmentation and encryption are required, the data provider needs to download the relevant authorized APP for corresponding data processing.

[0165] It should be noted that this process is only executed when an APP needs to be specified for data processing during the negotiation between the data demander and the data provider.

[0166] Based on the above embodiments, the present application also provides an overall flow chart of a method for controlling data flow between network elements, such as Figure 8 As shown, the specific steps include:

[0167] First, the data demander / data provider logs into the data circulation system through authentication and authorization, including:

[0168] 1. The data demander logs in to the account.

[0169] 2. Authentication and authorization network elements perform security authentication, such as CA verification, etc.

[0170] 3. The authentication network element sends an authentication success response to the data requester.

[0171] After the authentication is passed, continue with the following steps:

[0172] 4. The data demander browses the commodity data catalog through DEP and selects commodity data. The commodity data catalog in DEP is the data set published by the data provider through DEP.

[0173] 5. DEP notifies data providers of product data demand information.

[0174] 6. The data demander and the data provider negotiate the data usage policy of the commodity data online through the policy control network element, where the data usage policy includes usage conditions, usage methods, prices, etc., and confirm them.

[0175] 7. The policy control network element configures and deploys the negotiated data usage policy and notifies the DEP of the data usage policy, including price information.

[0176] 8. DEP saves the confirmed data usage policy and notifies DSP.

[0177] 9. DSP performs relevant data flow network element scheduling configuration based on data usage strategy.

[0178] Among them, if it is a point-to-point data flow method, DSP will configure the authentication protocol, connection information, etc. of both network elements (i.e., data demander and data provider).

[0179] If data flows through a third party, DSP will configure authentication protocols, connection information, authorization information, etc. for the DCP network element, data demander, and data provider.

[0180] It should be noted that the data circulation method is also included in the negotiated data usage strategy.

[0181] 9'. If the data demander and the data provider negotiate to download the data circulation software through the APP Store for policy control, the data demander / data provider will download the relevant APP to configure and use the tool according to the negotiation situation.

[0182] If data segmentation and encryption are required, the data provider needs to download the relevant authorized APP to perform corresponding data processing.

[0183] It should be noted that the APP is specified in step 9' to process and use the data. This process will only be performed if the data use policy negotiated in step 6 requires the APP.

[0184] After configuring the relevant data flow network elements, if the data flow mode is point-to-point, perform steps 10-14 as follows:

[0185] 10. The data provider performs initial processing such as desensitization / watermarking / anonymization on the first data. Only in this way can the first data be allowed to be used outside the domain according to the data use policy.

[0186] 11. The data provider notifies the policy control network element of the configuration information of the data usage policy and the first data, such as the policy control network element imposing corresponding restrictions on the first data (such as time limit, duration, self-destruction, etc.) according to the data usage policy negotiated during the contract signing.

[0187] 12. The policy control network element notifies the data demander to confirm the data usage policy. The confirmed data usage policy will be deployed by the data demander and the data provider to monitor data usage.

[0188] Such as through control clients, operating system interception, hardware and other security methods.

[0189] 13. Data demanders and data providers conduct point-to-point data transmission and use (files, joint computing of structured data, etc.) according to established data usage strategies.

[0190] 14. After the data usage strategy is executed, relevant operations such as read-and-burn and risk chain disconnection prevention and control will be performed according to the pre-negotiated first data usage restrictions.

[0191] If the data is circulated through a third party, execute 10'-14' as follows:

[0192] 10', the data provider selects the DCP assigned by the DSP, processes the first data accordingly (such as performing initialization processing such as desensitization / watermarking / anonymization on the first data) and then transmits it to the DCP. In this way, the first data can be allowed to be used out of the domain according to the corresponding data use policy.

[0193] 11'. The DCP selects a container / software / TEE with a corresponding security level according to the data usage policy to process and store the data usage policy and the first data (such as memory / file / hardware).

[0194] 12'. The DCP notifies the data demander to use the first data, and notifies the data demander to confirm the corresponding data use policy and use restriction information.

[0195] 13'. After the data demander confirms the usage restriction information and the data usage policy, the data demander uses the first data through the DCP (such as browsing files, data joint calculation, etc.), and the DCP performs usage control and guarantee.

[0196] 14'. The policy control network element monitors the data usage policy of the DCP and takes actions such as disconnecting the link if risks are found.

[0197] 15. After the data circulation is completed, the data demander and data provider shall upload the execution log of the relevant data usage policy. The content of the execution log includes but is not limited to the hardware and software environment configuration before and after the data is used, certificate authentication information, data policy execution process flag, etc.;

[0198] 16. The policy control network element evaluates whether the execution of the data usage policy complies with the pre-configuration based on the execution log, and issues an evaluation report and notifies the DEP of the relevant execution status.

[0199] Based on the above embodiments, an example of a data flow control method is also provided in the embodiments of the present application, such as Fig. 9 As shown, this can be achieved through the following process:

[0200] 1. The authentication network element (including CA center, authentication authority, etc.) issues user certificates, node certificates, application certificates, etc. to each participant (such as data demander a, data provider, etc.), node (such as TEE node), and application (such as APP).

[0201] Among them, the CA center identity CA issues user certificates to ensure a two-way verified secure communication connection between legitimate users. The node certificate is used for secure verification and transmission between trusted nodes, and provides dynamic trusted identity management for nodes (application components). The identity CA private key signs the application image file hash (which can be expressed as hash in English) to ensure the legitimacy and integrity of the source. Identity CA verification is required during deployment. Application certificates are used for dynamic application instance trusted identity management. During deployment, the computing node will verify the application signature certificate, and the CA center will issue an identity certificate for the application.

[0202] 2. The data provider confirms the control rules of the negotiated data usage policy and performs specified data operations on the specified user (data demander a) in the specified area (TEE node DCP) (performs corresponding processing on the specified data through the application APP).

[0203] 3. The data demander and the data provider perform user authentication. Specifically, when data demander a sends a request to the data provider to use the data, the data provider and data demander a perform two-way authentication, and the two parties exchange certificates, negotiate encryption algorithms, generate session keys, etc. (the data provider will verify whether the certificate of data demander a is complete and valid, and use the data provider's public key to encrypt random numbers. Similarly, data demander a will also verify whether the provided certificate is complete and valid, and use the data demander's public key to encrypt random numbers).

[0204] 4. Operate and use data in designated APP and nodes. Specifically, after both parties pass the authentication, data demander a follows the above control rules to the designated DCP (TEE node) and uses the designated application APP to use the data of the data provider.

[0205] 5. The data demander and DCP perform node authentication. Specifically, when the data demander and DCP interact, they need to provide credibility proof data for the other party to verify the credibility of their system, including exchanging the following information:

[0206] Software stack measurement: including software stack measurement data metadata (MetaData in English) (referring to the list and description information of all software in the software stack) and dynamic attribute flags (TOKEN in English) (DAT) (authorized access TOKEN, used to authorize trusted nodes to access other nodes). Among them, the key link is that the data demander and the DCP trusted node request remote proof from each other and exchange a non-repetitive random number (Number once, Nonce) that is used once. The nodes of both parties generate measurement data and Metadata based on the DAT applied to the CA system and sign them, and send them to each other (including data demander a and DCP) together with the DAT. The nodes of both parties verify the signatures of the measurement data and Metadata. After the node authentication is passed, the DCP node verifies the application APP software before it can be used.

[0207] 6. Data application APP authentication. Specifically, when the data demander starts the application APP (running in the DCP TEE node), the application APP requests remote authentication from the data provider based on the application certificate issued by the CA, confirms that the application APP is running in the designated trusted node DCP TEE environment, and the code has not been tampered with, and checks the application APP and data users in the authorization list according to the data usage policy set by the data provider, and uses the data according to the preset application APP.

[0208] Based on the above embodiments, the embodiments of the present application provide a storage medium on which a computer program is stored, the above computer-readable storage medium stores one or more programs, the above one or more programs can be executed by one or more processors, and applied to a data flow control device, and the computer program implements the above data flow control method. The processor can be at least one of an application-specific integrated circuit (ASIC, Application Specific Integrated Circuit), a digital signal processor (DSP, Digital Signal Processor), a digital signal processing image processing device (DSPD, Digital Signal Processing Device), a programmable logic image processing device (PLD, Programmable Logic Device), a field programmable gate array (FPGA, Field Programmable Gate Array), a CPU, a controller, a microcontroller, and a microprocessor. It can be understood that for different devices, the electronic device used to implement the above processor function can also be other, and the embodiments of the present application are not specifically limited.

[0209] Based on the above embodiments, the embodiments of the present application provide a computer program product, including a computer program. The computer program can be executed by one or more processors and applied to a data flow control device. The computer program implements the data flow control method as described above.

[0210] It should be noted that in the embodiments of the present application, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "includes a ..." does not exclude the presence of other identical elements in the process, method, article or device including the element.

[0211] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the relevant technology can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, disk, CD), including a number of instructions for an image display device (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the method described in each embodiment of the embodiment of the present application.

[0212] The above is only a specific implementation of the embodiment of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A data flow control device, characterized in that: The device comprises: a policy control network element; The policy control network element is used to determine the data usage policy corresponding to the first data according to the data demand information of the first data; and deploy the data usage policy on the data circulation network element corresponding to the first data, so that the data circulation network element uses the first data based on the data usage policy.

2. The device according to claim 1, characterized in that The data circulation network element includes a first network element and a second network element; The second network element is used to receive the data usage policy sent by the first network element, and after confirming the data usage policy, use the first data in the first network element based on the data usage policy.

3. The device according to claim 1, characterized in that The data circulation network element includes a first network element and a second network element; The policy control network element is further used to perform data processing corresponding to the usage restriction information on the first data based on the usage restriction information pre-determined by the first network element and the second network element for the first data.

4. The device according to claim 1, characterized in that The data circulation network element includes a second network element and a third network element; the device also includes: a first network element storing the first data; The first network element is used to send the first data and the data usage policy to a third network element; The third network element is used to receive the data usage policy and the first data sent by the first network element; and based on the data usage policy, control the second network element to use the first data in the third network element.

5. The device according to claim 4, characterized in that The policy control network element is further used to monitor the execution result of the data usage policy executed by the third network element; when the execution result is abnormal, the first network element and the third network element are disconnected.

6. The device according to claim 1, characterized in that: The policy control network element is also used to receive a first execution log sent by the first network element and a second execution log sent by the second network element when the use of the first data is completed; based on the first execution log and the second execution log, determine whether the relevant execution behavior of the data usage policy is abnormal, and report the abnormal behavior when the relevant execution behavior is abnormal.

7. The device according to claim 1, characterized in that The apparatus further includes: a fourth network element; The fourth network element is used to schedule the first network element and the second network element to perform authentication connection related configuration; Alternatively, the first network element, the second network element and the third network element are scheduled to perform authentication connection related configurations.

8. A data flow control method, characterized in that: Applied to a data flow control device, the device includes a policy control network element, and the method includes: determining, by the policy control network element, a data usage policy corresponding to the first data according to the data demand information of the first data; The data usage policy is deployed on a data circulation network element corresponding to the first data, so that the data circulation network element uses the first data based on the data usage policy.

9. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to claim 8 is implemented.

10. A computer program product, comprising a computer program, characterized in that The computer program implements the method according to claim 8 when executed by a processor.

Images