Data flow control apparatus, method, storage medium and computer program product

Abstract

The application provides a data flow control device, method, storage medium and computer program product. The device comprises: a policy control network element; the policy control network element is configured to determine a data usage policy corresponding to first data according to data requirement information of the first data, and deploy the data usage policy on a data flow network element corresponding to the first data, so that the data flow network element uses the first data based on the data usage policy.

Description

Technical Field

[0001] This application relates to the field of data security technology, and in particular to a data flow control device, method, storage medium, and computer program product. Background Technology

[0002] In related technologies, Data Switching Service Networks (DSSN) technology is usually used when conducting data transactions. However, DSSN technology mainly uses privacy computing to realize data transactions and delivery services. However, the data circulation method based on privacy computing has low computational efficiency and high cost. On the other hand, if the data circulation method that goes out of the domain is used, the data security is low. Summary of the Invention

[0003] In view of this, this application aims to provide a data flow control device, method, storage medium, and computer program product that can improve data security.

[0004] The technical solution of this application is implemented as follows:

[0005] In a first aspect, this application provides a data flow control device, the device comprising: a strategy control network element;

[0006] The strategy control network element is used to determine the data usage strategy corresponding to the first data based on the data requirement information of the first data; and to deploy the data usage strategy on the data circulation network element corresponding to the first data, so that the data circulation network element can use the first data based on the data usage strategy.

[0007] Secondly, this application provides a data flow control method applied to a data flow control device, the device including a policy control network element; the method includes:

[0008] By controlling network elements through policies, the data usage policy corresponding to the first data is determined based on the data requirement information of the first data.

[0009] The data usage strategy is deployed on the data circulation network element corresponding to the first data, so that the data circulation network element can use the first data based on the data usage strategy.

[0010] Thirdly, this application provides a storage medium on which a computer program is stored, which, when executed by a processor, implements the above-described data flow control method.

[0011] Fourthly, this application provides a computer program product, including a computer program that, when executed by a processor, implements the above-described data flow control method.

[0012] This application provides a data flow control device, method, storage medium, and computer program product. The device includes a policy control network element. The policy control network element is used to determine a data usage policy corresponding to the first data based on the data demand information of the first data; and to deploy the data usage policy on the data flow network element corresponding to the first data, so that the data flow network element can use the first data based on the data usage policy. Using the above implementation scheme, the policy control network element first determines the data usage policy corresponding to the data demand information, and during the flow of the first data, deploys the corresponding data usage policy on the data flow network element. After deployment, the use of the first data will be based on the corresponding data usage policy. Because the use of the first data is restricted by the data usage policy, when the data flow network element uses the first data based on the data usage policy, the first data is protected by the usage restrictions of the data usage policy, ensuring the security of the first data. Attached Figure Description

[0013] Figure 1 This is a technical architecture diagram of DSSN data flow control;

[0014] Figure 2 A schematic diagram of the structure of a data flow control device provided in this application embodiment. Figure 1 ;

[0015] Figure 3 A schematic diagram of the structure of a data flow control device provided in this application embodiment. Figure 2 ;

[0016] Figure 4 A schematic diagram illustrating the composition of a policy control network element provided in an embodiment of this application;

[0017] Figure 5 An example diagram illustrating a point-to-point data flow method provided in an embodiment of this application;

[0018] Figure 6 An example diagram illustrating a data transfer method via a third party, provided as an embodiment of this application;

[0019] Figure 7 This is a schematic flowchart of a data flow control method provided in an embodiment of this application;

[0020] Figure 8 This application provides an overall flowchart of a data flow control method.

[0021] Figure 9 This is an example diagram of a data flow control method provided in an embodiment of this application. Detailed Implementation

[0022] In order to gain a more detailed understanding of the features and technical content of the embodiments of this application, the technical solution of this application will be further described in detail below with reference to the accompanying drawings and specific embodiments. The accompanying drawings are for reference only and are not intended to limit the embodiments of this application.

[0023] Unless otherwise defined, all technical and scientific terms used in the embodiments of this application have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used in the embodiments of this application is for the purpose of describing the embodiments of this application only and is not intended to limit this application.

[0024] In the following description, references to "some embodiments" refer to a subset of all possible embodiments. It is understood that "some embodiments" may be the same or different subsets of all possible embodiments and may be combined with each other without conflict. It should also be noted that the terms "first / second / third" used in the embodiments of this application are merely for distinguishing similar objects and do not represent a specific ordering of objects. It is understood that "first / second / third" may be interchanged in a specific order or sequence where permitted, so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein.

[0025] To further improve transaction efficiency, create a safe and reliable circulation environment, enrich data security products, and cultivate data security services, China Mobile has innovatively proposed the DSSN solution for the next-generation data circulation market. By building a cross-domain, cross-industry, and cross-entity "data logistics network," it connects multiple data suppliers, demanders, and transaction providers to provide "data logistics" services for data products.

[0026] like Figure 1 The diagram shown illustrates a technical architecture for DSSN data flow control. Figure 1 The main components include the following:

[0027] The Data Sharing Platform (DSP) provides services such as data access management, trusted data delivery, private network scheduling, reliable transmission, security control, and open supervision.

[0028] DSSN private network is a data sharing virtual private network built on network infrastructure based on related technologies, ensuring the security and quality of service of data transmission.

[0029] Data Service Node (DSN) is deployed at the data provider to realize core functions such as data source connection, DSSN private network access, and secure data computing. Different forms of products can be provided according to customer needs.

[0030] The Data Requirement Node (DRN) is deployed on the data requester and enables core functions such as business system integration, DSSN private network access, visualization development, and data security computing. Different product forms can be provided according to customer needs.

[0031] The aforementioned DSSN technical solution is mainly based on privacy computing to realize data trading and delivery services. However, data circulation based on privacy computing faces difficulties in widespread promotion and popularization due to problems such as low computing efficiency and high cost, which restricts the improvement of the activity of the data trading market.

[0032] To address the aforementioned issues, this application proposes a method to support the flow of non-privacy computation data, building upon the existing privacy-preserving computation-based technical architecture of DSSN. Since privacy computation is designed for core data security based on data not leaving the domain, providing a reliable and controllable data outbound transaction and delivery solution is crucial for ensuring the security of data transaction flow under non-privacy computation models.

[0033] The specific technical solution of this application embodiment is as follows:

[0034] This application provides a data flow control device 1, such as... Figure 2 As shown, the data flow control device 1 includes: a strategy control network element 10; the strategy control network element 10 is used to determine the data usage strategy corresponding to the first data according to the data demand information of the first data; and to deploy the data usage strategy on the data flow network element corresponding to the first data, so that the data flow network element can use the first data based on the data usage strategy.

[0035] In this embodiment of the application, the data circulation network element may include a first network element and a second network element, or the data circulation network element may include a second network element and a third network element.

[0036] It should be noted that the specific network elements included in the data circulation network element need to be determined according to the data circulation method.

[0037] In this embodiment, the first network element can be a data provider, the second network element can be a data demander, and the third network element can be a data processing lake network element (abbreviated as DCP).

[0038] In this embodiment, the first data can be data that has been packaged for a specific product, such as packaged data of a product displayed on a shopping website. The first data can also be other data, and this embodiment does not impose specific limitations.

[0039] In this embodiment of the application, the data demand information can be product demand information, such as what products need to be purchased, or it can be other data demand information. This embodiment of the application does not make specific limitations.

[0040] In this embodiment of the application, the policy control network element determines the data usage policy corresponding to the first data based on the data requirement information of the first data, which can be achieved through the following process:

[0041] 1. Data requesters / data providers log in to the data circulation system through authentication and authorization network elements.

[0042] 2. Data requesters browse the product data catalog through the data trading platform (DEP) and select product data from the catalog. The product data catalog in the DEP is where data providers publish datasets. The DEP notifies the data provider of the data requester's product data request information.

[0043] 3. The data provider and the data demander negotiate the data usage strategy of the commodity data online through the strategy control network element. The data usage strategy may include usage conditions, usage methods, price, etc.

[0044] For example, usage conditions can include the connection under which it is used, the application under which it is used, and the security level under which it is used; usage methods can include the time of use, the number of times it is used, etc.

[0045] In this embodiment of the application, after the policy control network element determines the data usage policy of the first data based on the data demand information during the negotiation process between the data demander and the data provider, the data usage policy is configured and deployed between the data provider and the data demander, or between the data demander and the DCP network element. In this way, the data demander can use the first data provided by the data provider according to the data usage policy.

[0046] In this embodiment of the application, in order for the data circulation network element to use the first data based on the data usage strategy, it is also necessary for the strategy control network element to configure and deploy the determined data usage strategy, and then notify the DEP of the determined data usage strategy, including price information, etc. The DEP saves the determined data usage strategy and notifies the DSP.

[0047] It should be noted that once the data usage strategy is agreed upon by the data provider and the data requester, the data usage strategy adopted by both parties is the same.

[0048] In one embodiment of this application, the data flow control device further includes: a fourth network element; the fourth network element is used to schedule the first network element and the second network element to perform authentication connection related configuration; or, to schedule the first network element, the second network element and the third network element to perform authentication connection related configuration.

[0049] In this embodiment of the application, the fourth network element is a DSP.

[0050] In this embodiment, the DSP further performs scheduling configuration of relevant data circulation network elements according to the data usage strategy notified by the DEP. After the scheduling configuration is completed, the data demander can use the first data provided by the data provider.

[0051] In this embodiment of the application, the data usage strategy may also include a data circulation method, which includes a point-to-point circulation method and a data circulation method through a third party.

[0052] In the embodiments of this application, if it is a point-to-point data circulation mode, when the DSP schedules and configures the data circulation network elements according to the data usage strategy, it needs to perform authentication between the two parties. The DSP will configure the authentication protocol, connection information and other information for the network elements of both parties (such as the data demander and the data provider).

[0053] In this embodiment of the application, if the data circulation is through a third party, when the DSP schedules and configures the data circulation network element according to the data usage strategy, the three parties need to perform mutual authentication. The DSP will configure the DCP network element, the data demander, and the data provider with authentication protocols, connection information, authorization information, etc.

[0054] It should be noted that authentication protocols, connection information, etc., can be connections such as Transport Layer Security (TLS).

[0055] In one embodiment of this application, if the data flow mode is a point-to-point data flow mode, the data flow network element includes a first network element and a second network element; the second network element is used to receive the data usage policy sent by the first network element, and, upon confirmation of the data usage policy, to use the first data in the first network element based on the data usage policy.

[0056] In this embodiment of the application, the first network element can be a data provider and the second network element can be a data demander.

[0057] In this embodiment of the application, the data provider stores the first data.

[0058] In this embodiment of the application, the data provider notifies the policy control network element of the configuration information of the data usage policy that has been configured, that is, the data usage policy has taken effect on the data provider. Then, the policy control network element sends the effective data usage policy to the data demander and notifies the data demander to confirm the effective data usage policy.

[0059] In this embodiment, the data requester receives a data usage policy sent by the first network element through the policy control network element and confirms the data usage policy. Specifically, the confirmation can be performed by comparing the data usage policy sent by the data provider with the data usage policy configured by the data provider itself.

[0060] In this embodiment of the application, after the data requester confirms the data usage strategy sent by the data sender, the data requester and the data provider conduct point-to-point data transmission and usage according to the established data usage strategy. That is, the data requester can use the data in the data provider according to the established data usage strategy.

[0061] It should be noted that the data in the embodiments of this application are not limited to files, structured data joint calculations, etc. Specifically, the data can be selected according to the actual situation, and no specific limitation is made in the embodiments of this application.

[0062] In this embodiment of the application, after the data requester confirms the data usage policy sent by the data provider, the confirmed data usage policy will be used to monitor the data usage in the data provider through deployments in both the data provider and the data requester (e.g., through control clients, operating system interception, hardware, and other security methods).

[0063] In this embodiment of the application, before the data requester uses the first data from the data provider, the data provider performs initialization processing such as desensitization / watermarking / anonymization on the first data before the first data can be used outside the domain according to the corresponding data usage strategy.

[0064] In one embodiment of this application, the data circulation network element includes a first network element and a second network element; the policy control network element is further configured to perform data processing on the first data corresponding to the usage restriction information based on the usage restriction information pre-determined by the first network element and the second network element for the first data.

[0065] In this application embodiment, data processing may include time limit restrictions, duration restrictions, self-destructing messages, and risk prevention and control of data loss.

[0066] In this embodiment of the application, the usage restriction information may be determined by the first network element and the second network element during the data usage strategy negotiation process, that is, it may be determined through negotiation between the two.

[0067] In this embodiment of the application, the policy control network element restricts the first data according to the negotiation result. Specifically, after the data usage policy is executed, relevant processing such as self-destruction after reading and risk disconnection prevention can be carried out according to the pre-negotiated usage restriction information.

[0068] In one embodiment of this application, if the data flow method is through a third party, the data flow network element includes a second network element and a third network element. In this case, the data flow control device further includes a first network element that stores first data. The first network element is used to send the first data and a data usage strategy to the third network element. The third network element is used to receive the data usage strategy and the first data sent by the first network element and, based on the data usage strategy, control the second network element to use the first data in the third network element.

[0069] In this embodiment of the application, the second network element is the data demander.

[0070] In this embodiment of the application, the third network element is a DCP.

[0071] In this embodiment of the application, before the data provider sends the first data and the data usage policy to the DCP, it may first perform the following operations:

[0072] The data provider selects the DCP assigned by the DSP to perform corresponding processing on the first data (such as initialization operations like desensitization / watermarking / anonymization on the first data).

[0073] In this embodiment of the application, after initializing the first data, the processed first data is transmitted to the allocated DCP, so that the first data can be used outside the domain according to the data usage policy.

[0074] In this embodiment of the application, after the data provider sends the processed first data and data usage policy to the DCP, the DCP receives the processed first data and data usage policy sent by the data provider. The DCP further selects a container / software / TEE with the corresponding security level to process and store the data usage policy and the first data (such as memory / file / hardware) according to the data usage policy.

[0075] In this embodiment of the application, the DCP notifies the data requester to use the first data and to confirm the corresponding data usage strategy and usage restriction information.

[0076] In this embodiment of the application, after the data requester confirms the data usage strategy and usage restriction information, the data requester uses the data through DCP (such as browsing files, data joint calculation, etc.), and DCP controls and protects the first data based on the data usage strategy.

[0077] In one embodiment of this application, the policy control network element is further configured to monitor the execution result of the third network element's data using the policy; and to disconnect the first network element and the third network element if the execution result is abnormal.

[0078] In this embodiment of the application, the policy control network element monitors the data usage policy of the DCP. If the policy control network element finds an abnormal execution result (or finds a risk) during the monitoring of the data usage policy of the DCP, the policy control network element will perform operations such as disconnection on the data requester and the DCP.

[0079] In one embodiment of this application, the policy control network element is further configured to receive a first execution log sent by a first network element and a second execution log sent by a second network element when the use of first data is completed; based on the first execution log and the second execution log, determine whether the relevant execution behavior of the data use policy is abnormal, and report the abnormal behavior if the relevant execution behavior is abnormal.

[0080] In this embodiment of the application, regardless of whether the data flow is through a point-to-point method or a third-party method, after the data flow is completed, the policy control network element will also receive the first execution log and the second execution log of the data usage policy uploaded by the data requester and the data provider respectively. The first execution log and the second execution log include, but are not limited to, the hardware and software environment configuration before and after the first data use, authentication certificate authentication information, data usage policy execution process flags, etc.

[0081] In this embodiment of the application, the policy control network element evaluates whether the execution of the data using the policy conforms to the pre-configuration based on the first execution log and the second execution log. If an alarm message appears, it indicates that it does not conform to the pre-configuration.

[0082] In this embodiment of the application, the policy control network element will also issue an evaluation report based on the evaluation results, and notify the DEP data requester and data provider of the specific implementation status of the data usage policy.

[0083] In one embodiment of this application, if the data requester and the data provider agree to control data usage strategies by downloading data circulation software from the App Store, the data requester / data provider also needs to download the relevant APP for tool configuration and use according to the agreement. If data binning or encryption is required, the data provider needs to download the relevant authorized APP for corresponding data processing.

[0084] It should be noted that this process is only executed when the data requester and data provider need to specify the APP to process the data during the negotiation process.

[0085] It is understood that the data flow control device provided in this application embodiment first determines the data usage strategy corresponding to the data demand information based on the data demand information through the strategy control network element, and deploys the corresponding data usage strategy on the data flow network element during the first data flow process. After the deployment is completed, the use of the first data will be carried out according to the corresponding data usage strategy. Since the use of the first data is restricted by the data usage strategy, when the data flow network element uses the first data based on the data usage strategy, the first data is protected by the usage restrictions of the data usage strategy, thus ensuring the security of the first data.

[0086] Based on the above embodiments, this application also provides a data flow control device, which demonstrates a hierarchical deployment plan for each network element. That is, it updates the DSSN technical architecture in related technologies, adopts a hierarchical design approach, and constructs it according to the DSSN service layer, DSSN core network, and DSSN trusted nodes, which can solve the problems of trustworthiness and security in data outbound control during data transaction process.

[0087] In the embodiments of this application, the data flow control device is as follows: Figure 3 As shown, the following describes the network elements contained in each layer and the function of each network element:

[0088] DSSN Business Layer: Includes network elements such as data transaction, application store, development environment, and vocabulary center.

[0089] Data trading includes functions such as data catalog, contract negotiation, contracts and orders, and strategy collaboration.

[0090] Application Store: A crucial network element in building the DSSN ecosystem, responsible for introducing data application software, data processing software, and data control software from internal and external technologies and service providers.

[0091] Development environment: Provides open tools and components for DSSN data development for developers / software / application system providers.

[0092] Vocabulary Center: Data standards and formatting units for various fields, used to unify the data exchange standard format in the DSSN ecosystem.

[0093] DSSN Core Network Layer: Based on the current DSP network elements, new core control network elements, authentication and authorization network elements, policy control network elements, billing & settlement, Certificate Authority (CA) center, DCP (Data Processing Lake) and other functions are added.

[0094] Among them, authentication and authorization: responsible for authenticating and authorizing network element entities, user entities, data, etc. that enter the DSSN environment, and interacting with the CA center to perform identity verification.

[0095] Policy control network element: Includes functions such as policy negotiation, policy configuration, policy deployment, and policy execution before / during / after data use, as well as monitoring the use of policies and handling anomalies.

[0096] Billing & Settlement: Billing statistics and settlement are conducted among partners based on data contracts, orders, and usage.

[0097] CA Center: A national / industry certified CA system responsible for issuing relevant certificates for network element entities, user entities, data, etc.

[0098] DSP: Based on the existing DSP, new functions such as scheduling and control of network elements and engines related to data use control strategies are added.

[0099] DCP (Data Processing Lake): Responsible for cloud-based data control and processing, and centrally controlling the use of data and policies based on data interaction needs.

[0100] DSSN Trusted Node: Based on the existing DSN / DRN nodes, i.e. the privacy computing engine, new functions are added for scheduling, adaptation, and data directory view guidance for non-privacy computing engines, including unstructured data (such as file processing) and structured data (such as federated computation, query, etc.).

[0101] Among them, the privacy computing engine includes the FL engine, which stands for Federated Learning.

[0102] MPC engine: that is, Secure Multi-Party Computation engine.

[0103] PSI Engine: Privacy Set Intersection Engine. PSI stands for Private Set Intersection.

[0104] PIR engine: Anonymous query engine, also known as a privacy information retrieval engine. PIR can be expressed as Private Information Retrieval.

[0105] Based on the above embodiments, in order to achieve the technical solutions in the embodiments of this application, the above... Figure 3 The architecture of the policy control network element shown requires at least the following six functional modules, specifically as follows: Figure 4As shown, the system mainly includes six modules: data policy negotiation, data policy execution, data policy management, data policy monitoring, data policy deployment, and data policy usage evaluation. These modules are deployed on either the platform or node side, depending on the specific requirements. The following describes the specific functions of each module:

[0106] Data Policy Negotiation Module: This module serves as the entry point for data usage policies, used to create and manage policy resources, scopes, permissions, and policy content. It provides a user-friendly visual editing interface / policy templates (such as allowing data users to perform specified operations on data, like displaying, printing, calculating, etc., or prohibiting such specified operations). It also supports the signing, multi-round negotiation, revision, and confirmation of user policy contracts.

[0107] The data policy management module manages related usage restrictions and policy usage periods. It also instantiates usage restriction policies, evaluates data usage policies, performs related conflict detection and resolution, and revocation operations. It is responsible for making authorization decisions based on data usage policies to ensure the execution of data usage policies.

[0108] The Data Policy Deployment Module is responsible for converting (or translating) the negotiated and agreed-upon policy into a machine-readable code format (such as an executable program) and deploying the policy. In point-to-point data flow scenarios, this module communicates with the node side to achieve node-side policy deployment; in scenarios where data flows through an intermediary, this module not only communicates with the node side to achieve node-side policy deployment, but also needs to deploy the policy at the DCP (Data Component Processing Center).

[0109] Data policy execution module: After policy deployment and loading, corresponding operations need to be executed according to the policy rules (such as sending emails or writing to specific log systems when using data, de-identifying data before it leaves the domain, and self-destructing after reading). Policy execution can be implemented in several ways: it can be achieved by intercepting and processing relevant data streams through the APP software; adapting to operating system-related functions (such as limiting the number of times a file can be used, its validity period, etc.); or using trusted environments (such as secure environments like TEE, TPM, data sandboxes, and self-destructing after reading). During policy execution, it needs to obtain decision information for data operations from the policy management module (e.g., a file can only be opened 3 times; each time it is opened, the decision information is obtained to determine whether the file opening operation can be performed) before proceeding with the data operation.

[0110] Data Policy Monitoring Module: This module ensures that data is always used within the authorized scope according to the agreement between the two parties (i.e., the data requester and the data provider), preventing leakage, tampering, or over-limit usage (e.g., sensitive data cannot be forwarded to unauthorized nodes, important data cannot be modified by unauthorized nodes, and data must be deleted from memory after a certain period). Monitoring methods and strategies include, but are not limited to, the following: regularly and dynamically monitoring the latest information on the software inventory of data-using nodes, the dynamic attributes of components, and the latest state of attributes and the software stack used, which can prove compliance; and taking measures such as abnormal connection disconnection and risk blocking when over-limit or abnormal data operations occur (e.g., failure to restrict usage according to the agreement for specific users, specific locations, specific purposes, specific events, time intervals, or frequency).

[0111] The Data Policy Usage Evaluation Module is responsible for consistent matching and evaluation based on information such as the data usage policy configuration negotiated before data circulation, the monitoring of data usage policy execution during circulation, and the data usage policy execution log feedback after circulation. This includes assessing whether the data usage policy is executed according to the negotiated dataset fields, limited scenarios, and limited number of executions. The module provides a comprehensive policy usage evaluation result, including policy evaluation degree, execution differences, and risk point assessment, which is used to provide subsequent billing vouchers to the DEP order module. It also serves as the basis for subsequent iterative optimization of policy execution and management modules.

[0112] In this application embodiment, an example diagram of a point-to-point data flow mode is also provided, such as... Figure 5 As shown, and an example diagram illustrating data flow through a third party, such as... Figure 6 As shown. In Figure 5 As can be seen, the trusted nodes corresponding to the data provider and the data requester contain various functional modules within their deployed policy control network elements, allowing for direct data transmission and use between the two parties. Figure 6 In this context, data providers and data users need to rely on a third-party DCP (Data Processing Center) to exchange and use data.

[0113] This application proposes a novel DSSN technical architecture, employing a layered design approach. It is constructed according to the DSSN service layer, DSSN core network, and DSSN trusted nodes, addressing issues such as the trustworthiness and security of data outbound control during data transactions. Furthermore, it establishes a trusted data flow method and process for data providers and data requesters, compatible with existing privacy computing architectures, and addresses new strategies for non-privacy computing data flow, providing more comprehensive technical safeguards for data transactions. This device can monitor and evaluate the entire data flow process based on data flow strategies at both the cloud and node levels, according to user needs.

[0114] Compared with related technologies, the embodiments of this application have the following technical advantages:

[0115] 1. A new DSSN technical architecture is proposed to realize a three-layer separation of data transaction business development, transaction circulation control, and transaction data flow, which can more flexibly adapt to various scenarios and various types of confidential data circulation business.

[0116] 2. It enables data to circulate between data demanders and data providers using non-privacy computing methods, thus solving the problems of trustworthiness and controllability in the data circulation and transaction process.

[0117] Based on the above embodiments, another embodiment of this application also provides a data flow control method, such as... Figure 7 As shown, this method is applied to a data flow control device, which includes a policy control network element. The method may include:

[0118] S701. By controlling the network element through the policy, the data usage policy corresponding to the first data is determined based on the data requirement information of the first data.

[0119] In this embodiment, the first data can be data that has been packaged for a specific product, such as packaged data of a product displayed on a shopping website. The first data can also be other data, and this embodiment does not impose specific limitations.

[0120] In this embodiment of the application, the data requirement information can be product requirement information or other data requirement information, and no specific limitation is made in this embodiment of the application.

[0121] In this embodiment of the application, the data usage policy corresponding to the first data is determined by the policy control network element based on the data requirement information of the first data. This can be achieved through the following process:

[0122] 1. Data requesters / data providers log in to the data circulation system through authentication and authorization network elements.

[0123] 2. Data requesters browse the product data catalog through DEP and select product data from the catalog. The product data catalog in DEP is used by data providers to publish datasets. DEP notifies data providers of the product data requesters' product data requirements.

[0124] 3. The data provider and the data demander negotiate the data usage strategy of the commodity data online through the strategy control network element. The data usage strategy may include usage conditions, usage methods, price, etc.

[0125] S702. Deploy the data usage strategy on the data circulation network element corresponding to the first data, so that the data circulation network element can use the first data based on the data usage strategy.

[0126] In this embodiment of the application, the data circulation network element may include a first network element and a second network element, or the data circulation network element may include a second network element and a third network element.

[0127] It should be noted that the specific network elements included in the data circulation network element need to be determined according to the data circulation method.

[0128] In this embodiment of the application, the first network element can be a data provider, the second network element can be a data demander, and the third network element can be a data processing lake (abbreviated as DCP).

[0129] In this embodiment of the application, after the data usage policy of the first data is determined by the policy control network element, the data usage policy is configured and deployed on the data provider and the data demander, or configured and deployed on the data demander and the DCP network element, so that the data demander can use the first data provided by the data provider according to the data usage policy.

[0130] It is understood that the data flow control method provided in this application embodiment first determines the data usage policy corresponding to the data demand information through a policy control network element, and deploys the corresponding data usage policy on the data flow network element during the first data flow process. After deployment, the use of the first data will be carried out according to the corresponding data usage policy. Since the use of the first data is restricted by the data usage policy, when the data flow network element uses the first data based on the data usage policy, the first data is protected by the usage restrictions of the data usage policy, thus ensuring the security of the first data.

[0131] In this embodiment of the application, in order to enable the data circulation network element to use the first data based on the data usage strategy, it is also necessary to configure and deploy the determined data usage strategy by the strategy control network element, and then notify the DEP of the determined data usage strategy through the strategy control network element, including price information, etc. The DEP saves the determined data usage strategy and notifies the DSP.

[0132] In one embodiment of this application, the data flow control device further includes: a fourth network element; and through the fourth network element, scheduling the first network element and the second network element to perform authentication connection-related configuration; or, scheduling the first network element, the second network element, and the third network element to perform authentication connection-related configuration.

[0133] In this embodiment of the application, the fourth network element is a DSP.

[0134] In this embodiment, the DSP is used to schedule and configure the relevant data circulation network elements according to the data usage policy notified by the DEP. After the scheduling and configuration are completed, the data demander can use the first data provided by the data provider.

[0135] In this embodiment of the application, the data usage strategy may also include a data circulation method, which includes a point-to-point circulation method and a data circulation method through a third party.

[0136] In this embodiment of the application, if it is a point-to-point data circulation mode, when the DSP schedules and configures the data circulation network elements according to the data usage strategy, it only needs to perform two-party authentication. The DSP configures the authentication protocol, connection information and other information of the two network elements (such as the data demander and the data provider).

[0137] In this application embodiment, if the data circulation is through a third party, when the DSP schedules and configures the data circulation network element according to the data usage strategy, mutual authentication between the three parties is required. The DSP configures the authentication protocol, connection information, authorization information, etc. for the DCP network element, the data requester, and the data provider.

[0138] In one embodiment of this application, if the data flow mode is a point-to-point data flow mode, the data flow network element includes a first network element and a second network element; the second network element receives the data usage policy sent by the first network element, and if the second network element confirms the data usage policy, the first data in the first network element is used based on the data usage policy.

[0139] In this embodiment of the application, the strategy for receiving data sent by the first network element through the second network element can be implemented in the following ways:

[0140] The data provider first notifies the policy control network element of the configuration information of the data usage policy that has been configured, that is, the data usage policy has taken effect on the data provider. Then, the policy control network element sends the effective data usage policy to the data demander and notifies the data demander to confirm the effective data usage policy.

[0141] In this embodiment, when the data requester receives a data usage policy sent by the data provider through a policy control network element, it confirms the data usage policy. Specifically, the confirmation can be performed by comparing the data usage policy sent by the data provider with its own configured data usage policy.

[0142] In this embodiment of the application, after the data requester confirms the data usage strategy sent by the data provider, the data requester and the data provider conduct point-to-point data transmission and usage according to the established data usage strategy, that is, the data requester uses the data in the data provider according to the established data usage strategy.

[0143] It should be noted that the data in the embodiments of this application are not limited to files, structured data joint calculations, etc. Specifically, the data can be selected according to the actual situation, and no specific limitation is made in the embodiments of this application.

[0144] In this embodiment of the application, after the data requester confirms the data usage policy sent by the data provider, the confirmed data usage policy will monitor the data usage in the first network element through the deployment of the data provider and the data requester (such as through control clients, operating system interception, hardware and other security methods).

[0145] In this embodiment of the application, before the data requester uses the first data from the data provider, the first data needs to be initialized by the data provider through desensitization / watermarking / anonymization, etc., before the first data can be used outside the domain according to the corresponding data usage strategy.

[0146] In one embodiment of this application, the data circulation network element includes a first network element and a second network element; based on the usage restriction information pre-determined by the first network element and the second network element for the first data, the network element is controlled by a strategy to perform data processing on the first data corresponding to the usage restriction information.

[0147] In this application embodiment, data processing may include time limit restrictions, duration restrictions, self-destructing messages, and risk prevention and control of data loss.

[0148] In this embodiment of the application, the usage restriction information may be determined by the first network element and the second network element during the data usage strategy negotiation process, that is, it may be determined through negotiation between the two.

[0149] In this embodiment of the application, the policy control network element restricts the first data according to the negotiation result. Specifically, after the data usage policy is executed, relevant processing such as self-destruction after reading and risk disconnection prevention can be carried out according to the pre-negotiated usage restriction information.

[0150] In one embodiment of this application, if the data flow method is through a third party, the data flow network element includes a second network element and a third network element. In this case, the data flow control device further includes: a first network element that stores first data; sending the first data and a data usage strategy to the third network element through the first network element; receiving the data usage strategy and the first data sent by the first network element through the third network element; and controlling the second network element to use the first data in the third network element based on the data usage strategy.

[0151] In this embodiment of the application, the second network element is the data demander.

[0152] In this embodiment of the application, the third network element is a DCP.

[0153] In this embodiment of the application, before the data provider sends the first data and the data usage policy to the DCP, the following operations may be performed first:

[0154] The data provider selects the DCP assigned by the DSP to perform corresponding processing on the first data (such as initialization operations like desensitization / watermarking / anonymization on the first data).

[0155] In this embodiment of the application, after the first data is initialized, the processed first data is transmitted to the allocated DCP by the data provider, so that the first data can be used outside the domain according to the data usage policy.

[0156] In this embodiment, after the data provider sends the processed first data and data usage policy to the DCP, the DCP receives the processed first data and data usage policy sent by the data provider. The DCP then selects a container / software / TEE with the appropriate security level to process and store the data usage policy and the first data (such as memory / file / hardware) according to the data usage policy.

[0157] In this embodiment of the application, the DCP notifies the data requester to use the first data and to confirm the corresponding data usage strategy and usage restriction information.

[0158] In this embodiment of the application, after the data requester confirms the data usage strategy and usage restriction information, the data requester uses the data through DCP (such as browsing files, data joint calculation, etc.), and DCP controls and protects the first data based on the data usage strategy.

[0159] In one embodiment of this application, the policy control network element can also monitor the execution result of the third network element's data using the policy; if the execution result is abnormal, the first network element and the third network element will be disconnected.

[0160] In this embodiment of the application, the policy control network element monitors the data usage policy of the DCP. If the policy control network element finds an abnormal execution result (or finds a risk) during the monitoring of the data usage policy of the DCP, the policy control network element will perform operations such as disconnection on the data requester and the DCP.

[0161] In one embodiment of this application, when the first data is used, the policy control network element receives the first execution log sent by the first network element and the second execution log sent by the second network element; based on the first execution log and the second execution log, it is determined whether the relevant execution behavior of the data use policy is abnormal, and abnormal behavior is reported if the relevant execution behavior is abnormal.

[0162] In this embodiment of the application, regardless of whether the data flow is through a point-to-point method or a third-party method, after the data flow is completed, the policy control network element receives the first execution log and the second execution log of the data usage policy uploaded by the data requester and the data provider, respectively. The first execution log and the second execution log include, but are not limited to, the hardware and software environment configuration before and after the first data use, authentication certificate authentication information, and data usage policy execution process flags.

[0163] In this embodiment, the policy control network element evaluates whether the execution of the data usage policy conforms to the pre-configuration based on the first execution log and the second execution log. For example, if an alarm message appears, it indicates that the pre-configuration is not met. The policy control network element further generates an evaluation report based on the evaluation results and notifies the DEP data requester and data provider of the specific execution status of the data usage policy.

[0164] In one embodiment of this application, if the data requester and the data provider agree to control data usage strategies by downloading data circulation software from the App Store, the data requester / data provider also needs to download the relevant APP for tool configuration and use according to the agreement. If data binning or encryption is required, the data provider needs to download the relevant authorized APP for corresponding data processing.

[0165] It should be noted that this process is only executed when the data requester and data provider need to specify the APP to process the data during the negotiation process.

[0166] Based on the above embodiments, this application also provides an overall flowchart of a data flow control method between network elements, as shown in the following figure. Figure 8 As shown, the specific steps include the following:

[0167] First, data requesters / providers log in to the data circulation system through authentication and authorization, specifically including:

[0168] 1. The data requester logs in with their account.

[0169] 2. Authentication and authorization network elements perform security authentication, such as CA verification.

[0170] 3. The authentication and authorization network element sends an authentication pass response to the data requester.

[0171] After successful authentication, continue with the following steps:

[0172] 4. Data requesters browse the product data catalog through DEP and select product data. The product data catalog within DEP is where data providers publish datasets.

[0173] 5. DEP notification data provider's product data requirement information.

[0174] 6. The data requester and the data provider negotiate the data usage strategy for the commodity data online through the policy control network element. The data usage strategy includes usage conditions, usage methods, prices, etc., and then confirms the data usage strategy.

[0175] 7. Configure and deploy negotiated data usage policies for network elements, and notify DEP of the data usage policies, including pricing information.

[0176] 8. DEP saves the confirmed data usage strategy and notifies DSP.

[0177] 9. The DSP performs relevant data circulation network element scheduling configurations based on the data usage strategy.

[0178] In the case of point-to-point data flow, the DSP will configure the authentication protocol and connection information of both network elements (i.e., the data demander and the data provider).

[0179] If data is circulated through a third party, the DSP will configure authentication protocols, connection information, and authorization information for DCP network elements, data demanders, and data providers.

[0180] It should be noted that the data circulation method is also included in the negotiated data usage strategy.

[0181] 9' If the data requester and data provider agree to use data circulation software downloaded from the App Store for policy control, the data requester / data provider shall download the relevant app and configure and use the tool according to the agreement.

[0182] If data binning or encryption is required, the data provider needs to download the relevant authorized APP to perform the corresponding data processing.

[0183] It should be noted that the APP specified in step 9 is responsible for data processing and use. This process will only be executed if the data usage strategy negotiated in step 6 requires the APP.

[0184] After configuring the relevant data circulation network elements, if it is a point-to-point data circulation method, then execute steps 10-14, as follows:

[0185] 10. The data provider performs initial processing such as desensitization / watermarking / anonymization on the first data. Only in this way can the first data be allowed to be used outside the domain according to the data usage policy.

[0186] 11. The data provider notifies the policy control network element of the configuration information of the data usage policy and the first data. For example, the policy control network element imposes corresponding restrictions on the first data according to the data usage policy negotiated at the time of signing the contract (such as time limit, duration, self-destruction after reading, etc.).

[0187] 12. The policy control network element notifies the data requester to confirm the data usage policy. The confirmed data usage policy will be monitored through deployments by the data requester and the data provider.

[0188] Security methods include controlling client software, operating system interception, and hardware security.

[0189] 13. Data requesters and data providers shall conduct point-to-point data (files, structured data joint computation, etc.) transmission and use in accordance with the established data usage strategy.

[0190] 14. After the data usage strategy is implemented, relevant operations such as "read-once-destroyed" and risk-prevention measures will be carried out according to the pre-negotiated restrictions on the use of the first data.

[0191] If data is transferred through a third party, then execute steps 10'-14' as follows:

[0192] 10' The data provider selects the DCP assigned by the DSP, processes the first data accordingly (such as initializing the first data by desensitizing / watermarking / anonymizing), and then transmits it to the DCP. Only in this way can the first data be allowed to be used outside the domain along with the corresponding data usage policy.

[0193] 11'. Based on the data usage policy, DCP selects containers / software / TEEs with the appropriate security level to process and store the data (such as memory / files / hardware) according to the data usage policy.

[0194] 12'. DCP notifies the data requester to use the data for the first time and requests confirmation of the corresponding data usage strategy and usage restrictions.

[0195] 13' After the data requester confirms the usage restrictions and data usage strategy, the first data usage (such as file browsing, data joint calculation, etc.) is carried out through DCP, and the DCP is responsible for usage control and protection.

[0196] 14' The policy control network element monitors the data usage policy of DCP. If a risk is detected, it performs operations such as disconnecting the link.

[0197] 15. After the data circulation is completed, both the data requester and the data provider shall upload execution logs of the relevant data usage policies. The execution logs shall include, but are not limited to, the hardware and software environment configurations before and after data usage, certificate authentication information, and data policy execution process markers.

[0198] 16. The policy control network element evaluates whether the execution of the data use policy conforms to the pre-configuration based on the execution log, and issues an evaluation report and notifies the DEP of the relevant execution status.

[0199] Based on the above embodiments, this application also provides an example of a data flow control method, such as... Figure 9 As shown, this can be achieved through the following process:

[0200] 1. The authentication and authorization network elements (including CA center, authentication and authorization, etc.) issue user certificates, node certificates, application certificates, etc. to each participant (such as data requester a, data provider, etc.), node (such as TEE node), and application (such as APP).

[0201] Among them, the CA center's identity CA issues user certificates to ensure that legitimate users establish a secure communication connection with two-way verification. Node certificates are used for secure verification and transmission between trusted nodes, and also provide dynamic trusted identity management for nodes (application components). The identity CA's private key signs the application image file hash to ensure the legitimacy and integrity of the source, and the identity CA needs to verify it during deployment. The application certificate is used for dynamic trusted identity management of application instances. During deployment, the compute nodes will verify the application signing certificate, and the CA center issues identity certificates for the application.

[0202] 2. The data provider confirms the agreed-upon data usage policy control rules and performs specified data operations (through the application APP) on specified data in the specified area (TEE node DCP) for the designated user (data requester a).

[0203] 3. User authentication between the data requester and the data provider. Specifically, when data requester A sends a request to the data provider to use data, the data provider and data requester A conduct mutual authentication. Both parties exchange certificates, negotiate encryption algorithms, and generate session keys, etc. (The data provider verifies the completeness and validity of data requester A's certificate and encrypts random numbers using the data provider's public key. Similarly, data requester A also verifies the completeness and validity of the provided certificate and encrypts random numbers using the data requester's public key).

[0204] 4. Data operations and usage are performed on designated apps and nodes. Specifically, after both parties have successfully authenticated, data requester A follows the above control rules to access the data provided by the data provider via the designated DCP (TEE node) and the designated application app.

[0205] 5. Node authentication is performed between the data requester and the DCP. Specifically, when interacting with the DCP, both the data requester and the DCP need to provide credibility proof data for the other party to verify the credibility of their system, including exchanging the following information:

[0206] Software stack metrics include metadata (a list and description of all software in the software stack) and dynamic attribute tokens (DATs) (authorized access tokens used to authorize trusted nodes to access other nodes), encompassing secure boot trust roots, the OS, and applications. A key step involves the data requester and the DCP trusted node mutually requesting remote authentication and exchanging unique, one-time-use random values ​​(Number-once, Nonce). Both nodes generate and sign the metric data and metadata based on the DAT obtained from the CA system, sending them along with the DAT to each other (including data requester A and the DCP). Both nodes verify the signatures of the metric data and metadata. After successful node authentication, the DCP node verifies the application software (APP) before it can be used.

[0207] 6. Data Application APP Authentication. Specifically, when the data requester launches the application APP (running in the DCP TEE node), the application APP requests remote authentication from the data provider based on the application certificate issued by the CA. This verifies that the application APP is running in the specified trusted node DCP TEE environment and that the code has not been tampered with. Based on the data usage policy set by the data provider, the system checks whether the application APP and the data user are in the authorized list and performs data usage operations according to the preset application APP settings.

[0208] Based on the above embodiments, this application provides a storage medium storing a computer program thereon. The computer-readable storage medium stores one or more programs, which can be executed by one or more processors and applied in a data flow control device. The computer program implements the data flow control method described above. The processor can be at least one of an Application Specific Integrated Circuit (ASIC), a Digital Signal Processor (DSP), a Digital Signal Processing Device (DSPD), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a CPU, a controller, a microcontroller, or a microprocessor. It is understood that for different devices, the electronic device used to implement the above processor function can also be other types, and this application does not specifically limit the specific devices used.

[0209] Based on the above embodiments, this application provides a computer program product, including a computer program that can be executed by one or more processors and applied in a data flow control device. The computer program implements the data flow control method described above.

[0210] It should be noted that, in the embodiments of this application, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0211] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solutions of the embodiments of this application, or the parts that contribute to the related technology, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause an image display device (which may be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in the various embodiments of the embodiments of this application.

[0212] The above description is merely a specific implementation of the embodiments of this application, but the protection scope of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the protection scope of this application. Therefore, the protection scope of this application should be determined by the protection scope of the claims.

Claims

1. A data flow control device, characterized in that, The device includes: a Data Network Service SN (DSSN) layer, a DSSN core network, and a DSSN trusted node; The DSSN core network includes a policy control network element, which is used for policy negotiation, policy configuration, policy deployment, and policy execution monitoring before, during, and after data use. It also determines the data use policy corresponding to the first data based on the data requirement information of the first data, and deploys the data use policy on the data circulation network element corresponding to the first data, so that the data circulation network element can use the first data based on the data use policy. The DSSN trusted node includes a non-privacy computing engine, which is used for scheduling, adapting, and guiding data catalog views of unstructured and structured data.

2. The apparatus according to claim 1, characterized in that, The data circulation network element includes a first network element and a second network element; The second network element is used to receive the data usage policy sent by the first network element, and, upon confirmation of the data usage policy, to use the first data in the first network element based on the data usage policy.

3. The apparatus according to claim 1, characterized in that, The data circulation network element includes a first network element and a second network element; The policy control network element is further configured to perform data processing on the first data in accordance with the usage restriction information pre-determined by the first network element and the second network element for the first data.

4. The apparatus according to claim 1, characterized in that, The data circulation network element includes a second network element and a third network element; the device further includes: a first network element that stores the first data; The first network element is used to send the first data and the data to the third network element using a strategy; The third network element is used to receive the data usage policy and the first data sent by the first network element; and based on the data usage policy, to control the second network element to use the first data in the third network element.

5. The apparatus according to claim 4, characterized in that, The policy control network element is also used to monitor the execution result of the data usage policy executed by the third network element; and to disconnect the first network element and the third network element in the event of an abnormal execution result.

6. The apparatus according to claim 1, characterized in that, The policy control network element is further configured to receive a first execution log sent by a first network element and a second execution log sent by a second network element when the first data usage is completed; based on the first execution log and the second execution log, determine whether the relevant execution behavior of the data usage policy is abnormal, and report abnormal behavior if the relevant execution behavior is abnormal.

7. The apparatus according to claim 4 or 5, characterized in that, The device further includes: a fourth network element; The fourth network element is used to schedule the first network element and the second network element to perform authentication connection-related configurations. Alternatively, the first network element, the second network element, and the third network element can be scheduled to perform authentication connection-related configurations.

8. A data flow control method, characterized in that, This is applied to a data circulation control device, which includes a Data Network Service Provider (DSSN) layer, a DSSN core network, and a DSSN trusted node. The DSSN core network includes a policy control network element, which is used for policy negotiation, policy configuration, policy deployment, and policy execution monitoring before, during, and after data use. The DSSN trusted node includes a non-privacy computing engine, which is used for scheduling, adapting, and guiding data catalog views for unstructured and structured data. The method includes: The network element controls the strategy to determine the data usage strategy corresponding to the first data based on the data requirement information of the first data. The data usage strategy is deployed on the data circulation network element corresponding to the first data, so that the data circulation network element can use the first data based on the data usage strategy.

9. A storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the method as described in claim 8.

10. A computer program product, comprising a computer program, characterized in that, The computer program, when executed by a processor, implements the method as described in claim 8.

Images