Private data management method and system

Abstract

The invention belongs to the technical field of data management, and discloses a private data management method and system. The method comprises the following steps: encrypting and signing privacy data based on a first terminal device to obtain encrypted privacy data, and uploading the encrypted privacy data to a cloud data center; based on the cloud data center, decryption is carried out, and privacy key information and a secret-related level are generated; carrying out distributed storage on the decrypted privacy data, and recording the decrypted privacy data in a distributed account book; uploading the query key information to a cloud data center based on a second terminal device; based on the cloud data center, retrieving in a distributed account book according to the query key information, and extracting matched and decrypted privacy data; and sending the matched and decrypted privacy data to a corresponding second terminal device. According to the invention, the problems of high cost investment, low data storage reliability, low data transmission security and insufficient key information protection in the prior art are solved.

Description

Technical Field

[0001] The present invention belongs to the technical field of data management, and in particular relates to a privacy data management method and system. Background Art

[0002] Privacy data is strictly protected by laws and confidentiality regulations. When managing privacy data, including data transmission, storage, and query, strict protection and restrictions are required. However, with the rapid development of information technology, privacy data security issues are becoming increasingly prominent.

[0003] Existing privacy data management technologies have the following defects: 1) Existing privacy data management often uses centralized storage, which has high requirements for data center hardware, high costs, and is prone to hardware crashes leading to data loss, resulting in low data storage reliability; 2) Existing privacy data management is often carried out in plain text during data transmission, which is easily intercepted by malicious parties and leads to data leakage, and the data transmission security is low; 3) Existing privacy data management fails to completely isolate sensitive key information when querying privacy data, provides insufficient protection for key information, and does not strictly control permissions, which may result in unauthorized users accessing sensitive information. Summary of the invention

[0004] In order to solve the problems of high cost investment, low data storage reliability, low data transmission security and insufficient protection of key information in the prior art, the present invention aims to provide a privacy data management method and system.

[0005] The technical solution adopted by the present invention is: A privacy data management method comprises the following steps: Based on the first terminal device as the data provider, the private data is encrypted and signed to obtain the encrypted private data, and uploaded to the cloud data center; Based on the cloud data center, the encrypted private data is decrypted to obtain the decrypted private data, and the corresponding key privacy information and confidentiality level are generated; Based on the cloud data center, the decrypted private data is distributedly stored, and the storage address of the decrypted private data, as well as the corresponding privacy key information and confidentiality level are recorded in the distributed ledger; Based on the second terminal device as the data query party, connect to the cloud data center, log in as a user, obtain the corresponding confidential authority, and upload the query key information to the cloud data center; Based on the cloud data center, according to the query key information, search in the distributed ledger to obtain the matching privacy key information, and extract the corresponding matching decrypted privacy data and matching confidentiality level; Based on the cloud data center, if the matching confidentiality level exceeds the confidentiality authority, the data query is terminated, otherwise, the matched decrypted privacy data is sent to the corresponding second terminal device.

[0006] Furthermore, it also includes: based on the trusted institution, performing key generation and identity registration for the terminal device, and performing key generation for the cloud data center, including the following steps: Based on a trusted institution, key generation and identity registration are performed for all terminal devices to obtain the public-private key pair and signature information of each terminal device; Generate a key for the cloud data center to obtain a cloud key; The private key and signature information in the public-private key pair are returned to the corresponding terminal device, and the public key and cloud key in the public-private key pair are stored in the controlled database of the cloud data center.

[0007] Furthermore, based on the first terminal device as the data provider, the private data is encrypted and signed to obtain the encrypted private data, and uploaded to the cloud data center, including the following steps: Based on a first terminal device as a data provider, obtaining a first data feature hash value of the private data; Generate a first hybrid encryption key according to the first data characteristic hash value and the first private key; Encrypting the private data according to the first hybrid encryption key to obtain encrypted private data; Sign the encrypted private data according to the first signature information to obtain first signature data; The first data feature hash value, the encrypted private data, and the first signature data are uploaded to the cloud data center.

[0008] Furthermore, based on the cloud data center, the encrypted private data is decrypted to obtain the decrypted private data, and the corresponding key privacy information and confidentiality level are generated, including the following steps: Based on the cloud data center, a trusted institution is called to perform signature verification on the first signature data. If the signature verification passes, the next step is entered; otherwise, the data storage is terminated; Generate a first mixed decryption key according to the first data feature hash value and the first public key of the first terminal device in the controlled database; Decrypt the encrypted private data according to the first mixed decryption key to obtain the decrypted private data, and acquire a second data feature hash value of the decrypted private data; Perform integrity verification based on the second data feature hash value and the first data feature hash value. If the integrity verification passes, proceed to the next step; otherwise, end data storage. Use the key information extraction model to extract the privacy key information of the decrypted private data, and use the pre-trained confidential classification model to classify the decrypted private data into confidential levels to obtain the confidentiality level.

[0009] Furthermore, based on the cloud data center, the decrypted private data is distributedly stored, and the storage address of the decrypted private data, as well as the corresponding privacy key information and confidentiality level are recorded in the distributed ledger, including the following steps: Based on the cloud data center, the decrypted private data is sharded according to the replica mechanism to obtain a number of private data shards including the replica private shards; Encrypt all private data shards according to the cloud key in the controlled database to obtain several encrypted private data shards; Sending several encrypted private data shards to several nodes in the blockchain network, using the nodes to locally store the received encrypted private data shards and obtain the corresponding storage addresses; The storage address of each encrypted private data shard in the blockchain network, as well as the corresponding privacy key information and confidentiality level are recorded in the distributed ledger.

[0010] Furthermore, based on the second terminal device as the data query party, connecting to the cloud data center, logging in as a user, obtaining the corresponding confidential authority, and uploading the query key information to the cloud data center, the following steps are included: Based on the second terminal device as the data query party, connect to the cloud data center and upload the user login information to the cloud data center; Based on the cloud data center, user login information is verified. If the user passes the verification, the corresponding confidential authority is obtained and the next step is entered. Otherwise, the data query is terminated. Based on the second terminal device, encrypting the query key information according to the second private key to obtain the encrypted query key information; The encrypted query key information is signed according to the second signature information to obtain the second signature data, and the encrypted query key information and the second signature data are uploaded to the cloud data center.

[0011] Furthermore, based on the cloud data center, according to the query key information, the distributed ledger is searched to obtain the matching privacy key information, and the corresponding matching decrypted privacy data and matching confidentiality level are extracted, including the following steps: Based on the cloud data center, the second signature data is signature verified. If the signature verification passes, the next step is entered; otherwise, the data storage is terminated; Decrypting the encrypted query key information according to the second public key of the corresponding second terminal device stored in the controlled database to obtain the decrypted query key information; Obtain the similarity between the decrypted query key information and several privacy key information in the distributed ledger, use the privacy key information with the highest similarity as the matching privacy key information, and extract the matching confidentiality level; According to the matching storage address of the matching privacy key information in the distributed ledger, the matching encrypted privacy data shards are extracted from the corresponding nodes in the blockchain network; According to the cloud key in the controlled database, all matching encrypted private data shards are decrypted to obtain several decrypted private data shards, which are aggregated to obtain matching decrypted private data.

[0012] Further, based on the cloud data center, if the matching confidentiality level exceeds the confidentiality authority, the data query is terminated, otherwise, the matched decrypted private data is sent to the corresponding second terminal device, including the following steps: Based on the cloud data center, if the matching confidentiality level exceeds the confidentiality authority of the second terminal device, the data query is terminated, otherwise, the next step is entered; According to the decrypted query key information and the matching privacy key information, converting the matching decrypted privacy data into masked privacy data, and sending the masked privacy data to the corresponding second terminal device; If the cloud data center receives confirmation information from the second terminal device, extracting a third data feature hash value that matches the decrypted private data; Generate a second hybrid encryption key based on the third data characteristic hash value and the second public key; Encrypting the matched decrypted private data according to the second hybrid encryption key to obtain the matched encrypted private data; The matched encrypted private data and the third data feature hash value are sent to the corresponding second terminal device.

[0013] Furthermore, the key information extraction model is built based on the LSTM-CRF algorithm; The confidential classification model is built based on the LSTM-RF algorithm.

[0014] A privacy data management system, used to implement a privacy data management method, the system includes a cloud data center, a trusted institution and a plurality of terminal devices, the trusted institution is respectively connected to the plurality of terminal devices for communication, and the cloud data center is respectively connected to the trusted institution and the plurality of terminal devices for communication; The cloud data center is equipped with a data decryption unit, a distributed storage unit, an information retrieval unit and a data sending unit.

[0015] The beneficial effects of the present invention are: The present invention discloses a privacy data management method and system, which combines an asymmetric encryption algorithm and a digital identity authentication technology, strengthens the security of privacy data in the process of data transmission, and prevents data leakage; adopts a strict authority control mechanism and a key information isolation strategy to ensure that only authorized personnel can access sensitive information, thereby improving information protection during data query; through a deep learning algorithm model, privacy key information is extracted and classified into confidential levels, and efficient query and retrieval functions are realized, which greatly shortens the response time, improves user experience and work efficiency, and can effectively improve the accuracy and efficiency of data processing; a cloud data center is used to uniformly and efficiently manage privacy data, and a decentralized, tamper-proof and highly transparent distributed storage technology of blockchain is used to provide an additional security layer for data storage, ensure that data cannot be tampered with, and can trace the source of data. Compared with traditional centralized storage, distributed storage reduces the risk of single point failures and hardware cost investment, and improves the reliability and robustness of data storage.

[0016] Other beneficial effects of the present invention will be further described in the specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 It is a flowchart of the privacy data management method in the present invention.

[0018] Figure 2 It is a structural block diagram of the privacy data management system in the present invention. DETAILED DESCRIPTION

[0019] The present invention will be further explained below in conjunction with the accompanying drawings and specific embodiments.

[0020] Embodiment 1: like Figure 1 As shown, this embodiment provides a privacy data management method, including the following steps: S0: Based on the trusted institution, key generation and identity registration are performed for the terminal device, and key generation is performed for the cloud data center, including the following steps: S0-1: Based on a trusted institution, perform key generation and identity registration for all terminal devices to obtain the public-private key pair and signature information of each terminal device, including the following steps: S0-1-1: Perform key initialization based on a trusted institution to obtain public parameters, master key and initial key;

[0021] In the formula, is a public parameter; is the master key; is the initial key; Integer domain A random number; Both are target hash functions; Both are cyclic groups The random number of the generator; is a random number Bilinear mapping of ; S0-1-2: Collect the attribute information and device ID of the terminal device, and , public parameters, master key and initial key, use asymmetric encryption algorithm to generate keys for terminal devices and obtain corresponding public-private key pairs; The formula is:

[0022] In the formula, For terminal devices The private key of Integer domain A random number; For terminal devices The second private key parameter; Public parameters The target hash hash function; Indicator quantity for terminal equipment; is the master key; is the initial key; For terminal devices 's public key; Cyclic group The random number of the generator; For terminal devices Attribute information of S0-1-3: Use the digital identity authentication method to register the identity based on the public-private key pair and the corresponding device ID, and obtain the signature information of the corresponding terminal device; The formula is:

[0023] In the formula, is a random number; For terminal devices Registration parameters; For terminal devices Registration ID; and the corresponding Signature information ; Hash function for target hash; For terminal devices Device ID; is a prime number order; It is the base point of the prime domain; To find the remainder function; S0-2: Generate a key for the cloud data center to obtain a cloud key; The formula is:

[0024] In the formula, The cloud key for the cloud data center; Integer domain A random number; is the cloud key parameter of the cloud data center; Public parameters The target hash hash function; Indicator for cloud data center; is the master key; is the initial key; Cyclic group The random number of the generator; is the attribute information of the cloud data center; S0-3: Return the private key and signature information in the public-private key pair to the corresponding terminal device, and store the public key and cloud key in the public-private key pair in the controlled database of the cloud data center; S1: Based on the first terminal device as the data provider, encrypt and sign the private data to obtain the encrypted private data and upload it to the cloud data center, including the following steps: S1-1: Based on the first terminal device as the data provider, use the SHA-3 algorithm to obtain a first data feature hash value of the private data; In this embodiment, the application scenario is the data management of retired soldiers. Due to the special status of retired soldiers, their private data contains confidential information such as military rank, theater of operations, military merits, and service unit information. Therefore, it is necessary to strictly manage the private data of retired soldiers. S1-2: Generate a first hybrid encryption key according to the first data feature hash value and the first private key, generally by concatenating the first several digits and the last several digits of the first data feature hash value with the first private key; S1-3: Encrypt the private data according to the first mixed encryption key to obtain encrypted private data; The formula is:

[0025] In the formula, It is encrypted private data; is an asymmetric encryption function; For private data; First terminal device The first private key of is the first hash feature value; is a first hybrid encryption key; An indication quantity of the first terminal device; S1-4: Sign the encrypted private data according to the first signature information to obtain first signature data; The formula is:

[0026] In the formula, is a random number; is a prime number order; It is the base point of the prime domain; Hash function for target hash; First signature information The first terminal device Registration parameters; The first terminal device in the first signature information Registration ID; First terminal device The device ID of ; First terminal device The signature parameters of S1-5: Upload the first data feature hash value, the encrypted private data, and the first signature data to the cloud data center; S2: Based on the cloud data center, the encrypted private data is decrypted to obtain the decrypted private data, and the corresponding privacy key information and confidentiality level are generated. Otherwise, the data storage is terminated, including the following steps: S2-1: Based on the cloud data center, call the trusted institution to perform signature verification on the first signature data. If the signature verification passes, proceed to the next step; The formula is:

[0027] If the left formula is equal to the right formula, the signature verification is successful; S2-2: Generate a first mixed decryption key according to the first data feature hash value and the first public key of the first terminal device in the controlled database, and concatenate the first several digits and the last several digits of the first data feature hash value with the first public key according to the rule of the first mixed encryption key; S2-3: decrypt the encrypted private data according to the first mixed decryption key to obtain the decrypted private data, and use the SHA-3 algorithm to obtain a second data feature hash value of the decrypted private data; The formula is:

[0028] In the formula, It is the decrypted private data; is an asymmetric decryption function; It is encrypted private data; is the second hash feature value; is a first mixed decryption key; First terminal device The first public key of S2-4: Perform integrity verification based on the second data feature hash value and the first data feature hash value. If the integrity verification passes, proceed to the next step; otherwise, end data storage. S2-5: Use the key information extraction model to extract the key privacy information of the decrypted private data, and use the pre-trained confidentiality classification model to classify the decrypted private data to obtain the confidentiality level; The key information extraction model is built based on the Long Short-Term Memory (LSTM)-Conditional Random Field (CRF) algorithm; The first LSTM network extracts the features of the text sequence through its internal deep structure, which can capture the long-distance dependencies in the text and improve the accuracy of key information extraction. The CRF module is a commonly used sequence labeling module. It learns the transition probability of the labeling on the output of the first LSTM network, thereby improving the accuracy in the sequence labeling task and realizing the extraction of key information in the decrypted private data, such as name, address, telephone number and other information entities; The confidential classification model is built based on the LSTM-Random Forest (RF) algorithm; The second LSTM network extracts the text sequence features annotated with key information tags output by the key information extraction model, and merges them with other features that may be helpful for classification (such as the part-of-speech tagging of each information entity, the position features of each information entity in the text sequence, etc.), to obtain data features related to confidential classification. The Classification and Regression Tree (CART) trained in the RF module is used to screen and classify key features to achieve confidential classification prediction. S3: Based on the cloud data center, the decrypted private data is distributedly stored, and the storage address of the decrypted private data, as well as the corresponding privacy key information and confidentiality level are recorded in the distributed ledger, including the following steps: S3-1: Based on the cloud data center, the decrypted private data is sharded according to the replica mechanism to obtain a number of private data shards including the replica private shards; S3-2: Encrypt all private data shards according to the cloud key in the controlled database to obtain several encrypted private data shards; The formula is:

[0029] In the formula, Shard the encrypted private data; Sharding for private data; S3-3: Send several encrypted private data shards to several nodes in the blockchain network, use the nodes to locally store the received encrypted private data shards, and obtain the corresponding storage addresses; S3-4: Record the storage address of each encrypted private data shard in the blockchain network, as well as the corresponding privacy key information and confidentiality level in the distributed ledger; S4: Based on the second terminal device as the data query party, connect to the cloud data center, log in as a user, obtain the corresponding confidential authority, and upload the query key information to the cloud data center, including the following steps: S4-1: Based on the second terminal device as the data query party, connect to the cloud data center and upload the user login information to the cloud data center; S4-2: Based on the cloud data center, the user login information is verified. If the user verification is passed, the corresponding confidential authority is obtained and the next step is entered. Otherwise, the data query is terminated; S4-3: Based on the second terminal device, encrypt the query key information according to the second private key to obtain the encrypted query key information; The formula is:

[0030] In the formula, To query key information after encryption; is an asymmetric encryption function; To query key information; For the second terminal device The second private key; Indicator quantity for the second terminal device; S4-4: Sign the encrypted query key information according to the second signature information to obtain second signature data, and upload the encrypted query key information and the second signature data to the cloud data center; The formula is:

[0031] In the formula, First signature information Second terminal device Registration parameters; The second terminal device in the second signature information Registration ID; For the second terminal device The device ID of the second signature data is ; Second terminal device The signature parameters of S5: Based on the cloud data center, according to the query key information, search in the distributed ledger to obtain matching privacy key information, and extract the corresponding matching decrypted privacy data and matching confidentiality level, including the following steps: S5-1: Based on the cloud data center, the second signature data is signature verified. If the signature verification passes, the next step is entered; otherwise, the data storage is terminated; S5-2: decrypting the encrypted query key information according to the second public key of the corresponding second terminal device stored in the controlled database to obtain the decrypted query key information; The formula is:

[0032] In the formula, To query key information after decryption; is an asymmetric decryption function; For the second terminal device The second public key of S5-3: Obtain the similarity between the decrypted query key information and several privacy key information in the distributed ledger, use the privacy key information with the highest similarity as the matching privacy key information, and extract the matching confidentiality level; S5-4: Extract the matching encrypted private data shards in the corresponding nodes in the blockchain network according to the matching storage addresses of the matching privacy key information in the distributed ledger; S5-5: Decrypt all matching encrypted private data shards according to the cloud key in the controlled database to obtain several decrypted private data shards, and aggregate them to obtain matching decrypted private data; The formula is:

[0033] In the formula, Shard the encrypted private data; Shard the decrypted private data; S6: Based on the cloud data center, if the matching confidentiality level exceeds the confidentiality authority, the data query is terminated; otherwise, the matched decrypted private data is sent to the corresponding second terminal device, including the following steps: S6-1: Based on the cloud data center, if the matching confidentiality level exceeds the confidentiality authority of the second terminal device, the data query is terminated, otherwise, the next step is entered; S6-2: converting the matched decrypted private data into masked private data according to the decrypted query key information and the matched private key information, and sending the masked private data to the corresponding second terminal device; In this implementation, the query key information includes information entities such as name: Zhang San, address: XX street, XX city, XX province, telephone number: 184XXXX1234, and the privacy key information includes information entities such as military rank: XXX, theater: XXX, military merit: XXX, and service unit information: XXX. By converting the matched decrypted privacy data into masked privacy data, the information entities used for query are retained, and the obtained masked privacy data are: name: Zhang San, address: XX street, XX city, XX province, telephone number: 184XXXX1234, military rank: ***, theater: ***, military merit: ***, and service unit information: ***; S6-3: If the cloud data center receives confirmation information from the second terminal device, extracting a third data feature hash value that matches the decrypted private data; S6-4: Generate a second hybrid encryption key according to the third data characteristic hash value and the second public key; S6-5: Encrypt the matching decrypted private data according to the second hybrid encryption key to obtain matching encrypted private data; The formula is:

[0034] In the formula, To match encrypted private data; is an asymmetric encryption function; To match the decrypted private data; For the second terminal device The second public key of is the third hash feature value; is a second mixed encryption key; S6-6: Send the matched encrypted private data and the third data feature hash value to the corresponding second terminal device.

[0035] Embodiment 2: like Figure 2 As shown, this embodiment provides a privacy data management system for implementing a privacy data management method. The system includes a cloud data center, a trusted institution, and a plurality of terminal devices. The trusted institution is respectively connected to the plurality of terminal devices for communication, and the cloud data center is respectively connected to the trusted institution and the plurality of terminal devices for communication; Trusted institutions are used to generate keys and register identities for terminal devices, and to generate keys for cloud data centers; Terminal device: When acting as a data provider, it encrypts and signs the private data, obtains the encrypted private data, and uploads it to the cloud data center; when acting as a data query party, it connects to the cloud data center, logs in as a user, obtains the corresponding confidential permissions, and uploads the query key information to the cloud data center; The cloud data center is equipped with a data decryption unit, a distributed storage unit, an information retrieval unit, and a data sending unit; A data decryption unit, used to decrypt the encrypted private data, obtain the decrypted private data, and generate corresponding key privacy information and confidentiality level; A distributed storage unit is used to store the decrypted private data in a distributed manner, and record the storage address of the decrypted private data, as well as the corresponding privacy key information and confidentiality level in a distributed ledger; An information retrieval unit, used to search the distributed ledger according to the query key information, obtain matching privacy key information, and extract the corresponding matching decrypted privacy data and matching confidentiality level; The data sending unit is used to send the matched decrypted private data to the corresponding second terminal device when the confidentiality authority of the terminal device as the data query party meets the matching confidentiality level.

[0036] The present invention discloses a privacy data management method and system, which combines an asymmetric encryption algorithm and a digital identity authentication technology, strengthens the security of privacy data in the process of data transmission, and prevents data leakage; adopts a strict authority control mechanism and a key information isolation strategy to ensure that only authorized personnel can access sensitive information, thereby improving information protection during data query; through a deep learning algorithm model, privacy key information is extracted and classified into confidential levels, and efficient query and retrieval functions are realized, which greatly shortens the response time, improves user experience and work efficiency, and can effectively improve the accuracy and efficiency of data processing; a cloud data center is used to uniformly and efficiently manage privacy data, and a decentralized, tamper-proof and highly transparent distributed storage technology of blockchain is used to provide an additional security layer for data storage, ensure that data cannot be tampered with, and can trace the source of data. Compared with traditional centralized storage, distributed storage reduces the risk of single point failures and hardware cost investment, and improves the reliability and robustness of data storage.

[0037] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A privacy data management method, characterized in that: The steps include: Based on the first terminal device as the data provider, the private data is encrypted and signed to obtain the encrypted private data, and uploaded to the cloud data center; Based on the cloud data center, the encrypted private data is decrypted to obtain the decrypted private data, and the corresponding key privacy information and confidentiality level are generated; Based on the cloud data center, the decrypted private data is distributedly stored, and the storage address of the decrypted private data, as well as the corresponding privacy key information and confidentiality level are recorded in the distributed ledger; Based on the second terminal device as the data query party, connect to the cloud data center, log in as a user, obtain the corresponding confidential authority, and upload the query key information to the cloud data center; Based on the cloud data center, according to the query key information, search in the distributed ledger to obtain the matching privacy key information, and extract the corresponding matching decrypted privacy data and matching confidentiality level; Based on the cloud data center, if the matching confidentiality level exceeds the confidentiality authority, the data query is terminated, otherwise, the matched decrypted privacy data is sent to the corresponding second terminal device.

2. A privacy data management method according to claim 1, characterized in that: Also includes: Based on the trusted institution, key generation and identity registration are performed for the terminal device, and key generation is performed for the cloud data center, including the following steps: Based on a trusted institution, key generation and identity registration are performed for all terminal devices to obtain the public-private key pair and signature information of each terminal device; Generate a key for the cloud data center to obtain a cloud key; The private key and signature information in the public-private key pair are returned to the corresponding terminal device, and the public key and cloud key in the public-private key pair are stored in the controlled database of the cloud data center.

3. A privacy data management method according to claim 2, characterized in that: Based on the first terminal device as the data provider, the private data is encrypted and signed to obtain the encrypted private data, and uploaded to the cloud data center, including the following steps: Based on a first terminal device as a data provider, obtaining a first data feature hash value of the private data; Generate a first hybrid encryption key according to the first data characteristic hash value and the first private key; Encrypting the private data according to the first hybrid encryption key to obtain encrypted private data; Sign the encrypted private data according to the first signature information to obtain first signature data; The first data feature hash value, the encrypted private data, and the first signature data are uploaded to the cloud data center.

4. A privacy data management method according to claim 3, characterized in that: Based on the cloud data center, the encrypted private data is decrypted to obtain the decrypted private data, and the corresponding key privacy information and confidentiality level are generated, including the following steps: Based on the cloud data center, a trusted institution is called to perform signature verification on the first signature data. If the signature verification passes, the next step is entered; otherwise, the data storage is terminated; Generate a first mixed decryption key according to the first data feature hash value and the first public key of the first terminal device in the controlled database; Decrypt the encrypted private data according to the first mixed decryption key to obtain the decrypted private data, and acquire a second data feature hash value of the decrypted private data; Perform integrity verification based on the second data feature hash value and the first data feature hash value. If the integrity verification passes, proceed to the next step; otherwise, end data storage. Use the key information extraction model to extract the privacy key information of the decrypted private data, and use the pre-trained confidential classification model to classify the decrypted private data into confidential levels to obtain the confidentiality level.

5. A privacy data management method according to claim 4, characterized in that: Based on the cloud data center, the decrypted private data is distributedly stored, and the storage address of the decrypted private data, as well as the corresponding privacy key information and confidentiality level are recorded in the distributed ledger, including the following steps: Based on the cloud data center, the decrypted private data is sharded according to the replica mechanism to obtain a number of private data shards including the replica private shards; Encrypt all private data shards according to the cloud key in the controlled database to obtain several encrypted private data shards; Sending several encrypted private data shards to several nodes in the blockchain network, using the nodes to locally store the received encrypted private data shards and obtain the corresponding storage addresses; The storage address of each encrypted private data shard in the blockchain network, as well as the corresponding privacy key information and confidentiality level are recorded in the distributed ledger.

6. A privacy data management method according to claim 5, characterized in that: Based on the second terminal device as the data query party, connect to the cloud data center, log in as a user, obtain the corresponding confidential authority, and upload the query key information to the cloud data center, including the following steps: Based on the second terminal device as the data query party, connect to the cloud data center and upload the user login information to the cloud data center; Based on the cloud data center, user login information is verified. If the user passes the verification, the corresponding confidential authority is obtained and the next step is entered. Otherwise, the data query is terminated. Based on the second terminal device, encrypting the query key information according to the second private key to obtain the encrypted query key information; The encrypted query key information is signed according to the second signature information to obtain the second signature data, and the encrypted query key information and the second signature data are uploaded to the cloud data center.

7. A privacy data management method according to claim 6, characterized in that: Based on the cloud data center, according to the query key information, the distributed ledger is searched to obtain the matching privacy key information, and the corresponding matching decrypted privacy data and matching confidentiality level are extracted, including the following steps: Based on the cloud data center, the second signature data is signature verified. If the signature verification passes, the next step is entered; otherwise, the data storage is terminated; Decrypting the encrypted query key information according to the second public key of the corresponding second terminal device stored in the controlled database to obtain the decrypted query key information; Obtain the similarity between the decrypted query key information and several privacy key information in the distributed ledger, use the privacy key information with the highest similarity as the matching privacy key information, and extract the matching confidentiality level; According to the matching storage address of the matching privacy key information in the distributed ledger, the matching encrypted privacy data shards are extracted from the corresponding nodes in the blockchain network; According to the cloud key in the controlled database, all matching encrypted private data shards are decrypted to obtain several decrypted private data shards, which are aggregated to obtain matching decrypted private data.

8. A privacy data management method according to claim 7, characterized in that: Based on the cloud data center, if the matching confidentiality level exceeds the confidentiality authority, the data query is terminated, otherwise, the matched decrypted private data is sent to the corresponding second terminal device, including the following steps: Based on the cloud data center, if the matching confidentiality level exceeds the confidentiality authority of the second terminal device, the data query is terminated, otherwise, the next step is entered; According to the decrypted query key information and the matching privacy key information, converting the matching decrypted privacy data into masked privacy data, and sending the masked privacy data to the corresponding second terminal device; If the cloud data center receives confirmation information from the second terminal device, extracting a third data feature hash value that matches the decrypted private data; Generate a second hybrid encryption key based on the third data characteristic hash value and the second public key; Encrypting the matched decrypted private data according to the second hybrid encryption key to obtain the matched encrypted private data; The matched encrypted private data and the third data feature hash value are sent to the corresponding second terminal device.

9. A privacy data management method according to claim 4, characterized in that: The key information extraction model is built based on the LSTM-CRF algorithm; The confidential classification model is built based on the LSTM-RF algorithm.

10. A privacy data management system, used to implement the privacy data management method according to any one of claims 1 to 9, characterized in that: The system includes a cloud data center, a trusted institution and a plurality of terminal devices, wherein the trusted institution is respectively connected to the plurality of terminal devices for communication, and the cloud data center is respectively connected to the trusted institution and the plurality of terminal devices for communication; The cloud data center is equipped with a data decryption unit, a distributed storage unit, an information retrieval unit and a data sending unit.

Images