Private information encryption transmission method and device

Abstract

The embodiment of the invention provides a privacy information encryption transmission method and device, and the method comprises the steps: carrying out the block coding of each piece of feature information of each piece of user information under a feature dimension through a first device for any feature dimension, and obtaining the coding information of each group; aiming at the coded information of any group, the first equipment splits each coded value in the coded information of the group according to a set principle to obtain a first feature secret fragment and a second feature secret fragment, and sends the second feature secret fragment to second equipment; the first device determines a first fragment of an intermediate ciphertext according to a first tag secret fragment sent by the second device, the first feature secret fragment and a first auxiliary factor; and the first device determines a first result fragment according to the intermediate ciphertext and the first auxiliary factor and sends the first result fragment to the second device.

Description

Technical Field

[0001] The present invention relates to the technical field of data privacy, and in particular to a method and device for encrypting and transmitting privacy information. Background Art

[0002] When building a joint model, the label device needs to provide label values ​​and the feature device needs to provide feature values ​​to jointly train the joint model. Before joint training, since the feature device has many feature values, it is necessary to select feature values ​​with high correlation with the label value from the many feature values ​​to train the joint model.

[0003] Generally speaking, feature devices and tag devices need to determine feature values ​​that are highly correlated with tag values ​​through homomorphic encryption. During the homomorphic encryption process, multiple public key encryption and public key decryption operations are required. Public key encryption and public key decryption are very complex and time-consuming operations, which will make the process of screening feature values ​​very time-consuming and complex.

[0004] In summary, how to quickly screen out feature values ​​that are highly correlated with label values ​​is a technical problem that needs to be solved urgently. Summary of the invention

[0005] The embodiment of the present invention provides a method and device for encrypting and transmitting private information, so as to solve the problem in the prior art that it is time-consuming and complicated to screen out feature values ​​with high correlation with tag values.

[0006] In a first aspect, an embodiment of the present invention provides a method for encrypting and transmitting private information, which is applicable to a first device having user information; the user information includes feature information of at least one feature dimension; the method includes: for any feature dimension, the first device groups and encodes the feature information of each user information under the feature dimension to obtain the encoding information of each group; any group is used to characterize the category of the corresponding feature information; for the encoding information of any group, the first device splits each encoding value in the encoding information of the group according to a set principle to obtain a first feature secret fragment and a second feature secret fragment, and sends the second feature secret fragment to a second device; the second device has label information corresponding to each user information; the first device determines the first label secret fragment, the first feature secret fragment and the first auxiliary factor sent by the second device. The first fragment of the intermediate ciphertext; the first device determines the intermediate ciphertext according to the first fragment of the intermediate ciphertext and the second fragment of the intermediate ciphertext sent by the second device; the second fragment of the intermediate ciphertext is determined by the second device according to the second label secret fragment, the second characteristic secret fragment and the second auxiliary factor; the first device determines the first result fragment according to the intermediate ciphertext and the first auxiliary factor and sends the first result fragment to the second device; the first result fragment is used to determine the label result corresponding to the characteristic information of the group with the second result fragment generated by the second device; wherein, the first label secret fragment and the second label secret fragment are obtained by the second device splitting the label information corresponding to the group according to the set principle; the first auxiliary factor and the second auxiliary factor are obtained by splitting the random number sequence according to the set principle.

[0007] Optionally, the random number sequence is generated by a third device; the first auxiliary factor and the second auxiliary factor are generated by the third device splitting the random number sequence according to the set principle and sending them to the first device and the second device respectively.

[0008] Optionally, the random number sequence includes a first random number a, a second random number b and a third random number c; the first auxiliary factor includes a1 value, b1 value and c1 value; the second auxiliary factor includes a2 value, b2 value and c2 value; the setting principle is that the value of the i-th bit in the split object is equal to the sum of the value of the i-th bit in the first split result and the value of the i-th bit in the second split result.

[0009] Optionally, the first device determines the first fragment of the intermediate ciphertext according to the first label secret fragment, the first characteristic secret fragment and the first auxiliary factor sent by the second device, including: the first device determines the first part of the first fragment of the intermediate ciphertext according to the first characteristic secret fragment and the a1 value; the first device determines the second part of the first fragment of the intermediate ciphertext according to the first label secret fragment and the b1 value sent by the second device; the first device determines the intermediate ciphertext according to the first fragment of the intermediate ciphertext and the second fragment of the intermediate ciphertext sent by the second device, including: the first device sums the first part of the first fragment of the intermediate ciphertext with the first part of the second fragment of the intermediate ciphertext sent by the second device to obtain the first part of the intermediate ciphertext; the first device sums the second part of the first fragment of the intermediate ciphertext with the second part of the second fragment of the intermediate ciphertext to obtain the second part of the intermediate ciphertext.

[0010] Optionally, the third random number c is the product of the first random number a and the second random number b; the first part of the intermediate ciphertext includes a first intermediate ciphertext element corresponding to each user information; the second part of the intermediate ciphertext includes a second intermediate ciphertext element corresponding to each user information; the first device determines a first result shard based on the intermediate ciphertext and the first auxiliary factor, including: the first device performs a multiplication gate calculation based on the first auxiliary factor and the first intermediate ciphertext element and the second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine the first multiplication shard corresponding to the user information; the first device accumulates the first multiplication shards corresponding to each user information to obtain the first result shard.

[0011] Optionally, the first device groups and encodes each feature information of each user information under the feature dimension to obtain the encoding information of each group, including: the first device groups each feature information of each user information under the feature dimension to obtain multiple groups of feature information; for any group of feature information, the first device one-hot encodes the group feature information to obtain the encoding information of the group corresponding to the group feature information, the number of encoding values ​​in the encoding information of the group is the same as the number of the group feature information; the encoding value corresponding to the feature information of the group in the encoding information of the group is a first value, and the encoding value corresponding to the feature information of the group that does not belong to the group in the encoding information of the group is a second value.

[0012] In a second aspect, an embodiment of the present invention provides a method for encrypting and transmitting private information, which is applicable to a second device having tag information corresponding to user information; the method comprises: the second device splits the tag information according to a set principle to obtain a first tag secret fragment and a second tag secret fragment, and sends the first tag secret fragment to the first device; the first device has user information corresponding to the tag information; the user information includes feature information of at least one feature dimension; each feature information under any feature dimension is grouped and encoded to obtain encoding information of each group under any feature dimension; any group is used to characterize the category of the corresponding feature information; the second device generates a private information encryption message according to the second feature secret fragment, the second tag secret fragment and the second auxiliary factor sent by the first device. , determine the second fragment of the intermediate ciphertext and send it to the first device; the second device determines the intermediate ciphertext according to the second fragment of the intermediate ciphertext and the first fragment of the intermediate ciphertext sent by the first device; the first fragment of the intermediate ciphertext is determined by the first device according to the first label information, the first characteristic secret fragment, and the first auxiliary factor; the first characteristic secret fragment and the second characteristic secret fragment are obtained by the first device by splitting each encoding value in the encoding information of any group according to the set principle; the second device determines the second result fragment according to the intermediate ciphertext and the second auxiliary factor and receives the first result fragment sent by the first device; the second device determines the label result corresponding to the characteristic information of the group according to the second result fragment and the first result fragment.

[0013] Optionally, the random number sequence is generated by a third device; the first auxiliary factor and the second auxiliary factor are generated by the third device splitting the random number sequence according to the set principle and sending them to the first device and the second device respectively.

[0014] Optionally, the random number sequence includes a first random number a, a second random number b and a third random number c; the first auxiliary factor includes a1 value, b1 value and c1 value; the second auxiliary factor includes a2 value, b2 value and c2 value; the setting principle is that the value of the i-th bit in the split object is equal to the sum of the value of the i-th bit in the first split result and the value of the i-th bit in the second split result.

[0015] Optionally, the second device determines the second fragment of the intermediate ciphertext according to the second characteristic secret fragment, the second label secret fragment and the second auxiliary factor sent by the first device, including: the second device determines the first part of the second fragment of the intermediate ciphertext according to the second label secret fragment and the b2 value; the second device determines the second part of the second fragment of the intermediate ciphertext according to the second characteristic secret fragment and the a2 value sent by the first device; the second device determines the intermediate ciphertext according to the second fragment of the intermediate ciphertext and the first fragment of the intermediate ciphertext sent by the first device, including: the second device sums the first part of the second fragment of the intermediate ciphertext with the first part of the first fragment of the intermediate ciphertext sent by the first device to obtain the first part of the intermediate ciphertext; the second device sums the second part of the second fragment of the intermediate ciphertext with the second part of the second fragment of the intermediate ciphertext to obtain the second part of the intermediate ciphertext.

[0016] Optionally, the third random number c is the product of the first random number a and the second random number b; the first part of the intermediate ciphertext includes a first intermediate ciphertext element corresponding to each user information; the second part of the intermediate ciphertext includes a second intermediate ciphertext element corresponding to each user information; the second device determines a second result shard based on the intermediate ciphertext and the second auxiliary factor, including: the second device performs a multiplication gate calculation based on the second auxiliary factor and the first intermediate ciphertext element and the second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine the second multiplication shard corresponding to the user information; the second device accumulates the second multiplication shards corresponding to each user information to obtain the second result shard.

[0017] Optionally, the second device receives the number of each feature information under the feature dimension sent by the first device; the second device determines the label result corresponding to the feature information of the group based on the second result slice and the first result slice, including: the second device sums the first result slice and the second result slice to obtain the number of positive samples of the feature information corresponding to the group; the second device determines the number of negative samples of the feature information corresponding to the group based on the number of each feature information under the feature dimension corresponding to the group and the number of positive samples of the feature information corresponding to the group; determines the label result corresponding to the feature information of the group based on the number of positive samples of the feature information in the group and the number of negative samples of the feature information in the group.

[0018] In a third aspect, an embodiment of the present invention provides a privacy information encryption and transmission device, which is applicable to a first device having user information; the user information includes feature information of at least one feature dimension; the device includes: a first acquisition unit is used to: for any feature dimension, the first device groups and encodes the feature information of each user information under the feature dimension to obtain the encoding information of each group; any group is used to characterize the category of the corresponding feature information; a first processing unit is used to: for any group of encoding information, the first device splits each encoding value in the encoding information of the group according to a set principle to obtain a first feature secret slice and a second feature secret slice, and sends the second feature secret slice to a second device; the second device has label information corresponding to the each user information; the first device processes the first label secret slice, the first feature secret slice and the second feature secret slice according to the first label secret slice, the first feature secret slice and the second feature secret slice sent by the second device The first auxiliary factor determines the first fragment of the intermediate ciphertext; the first device determines the intermediate ciphertext according to the first fragment of the intermediate ciphertext and the second fragment of the intermediate ciphertext sent by the second device; the second fragment of the intermediate ciphertext is determined by the second device according to the second label secret fragment, the second characteristic secret fragment and the second auxiliary factor; the first device determines the first result fragment according to the intermediate ciphertext and the first auxiliary factor and sends the first result fragment to the second device; the first result fragment is used to determine the label result corresponding to the characteristic information of the group with the second result fragment generated by the second device; wherein the first label secret fragment and the second label secret fragment are obtained by the second device splitting the label information corresponding to the group according to the set principle; the first auxiliary factor and the second auxiliary factor are obtained by splitting the random number sequence according to the set principle.

[0019] Optionally, the random number sequence is generated by a third device; the first auxiliary factor and the second auxiliary factor are generated by the third device splitting the random number sequence according to the set principle and sending them to the first device and the second device respectively.

[0020] Optionally, the random number sequence includes a first random number a, a second random number b and a third random number c; the first auxiliary factor includes a1 value, b1 value and c1 value; the second auxiliary factor includes a2 value, b2 value and c2 value; the setting principle is that the value of the i-th bit in the split object is equal to the sum of the value of the i-th bit in the first split result and the value of the i-th bit in the second split result.

[0021] Optionally, the first processing unit is specifically used for: the first device determines the first part of the intermediate ciphertext first slice according to the first feature secret slice and the a1 value; the first device determines the second part of the intermediate ciphertext first slice according to the first label secret slice and the b1 value sent by the second device; the first device determines the intermediate ciphertext according to the intermediate ciphertext first slice and the intermediate ciphertext second slice sent by the second device, including: the first device sums the first part of the intermediate ciphertext first slice with the first part of the intermediate ciphertext second slice sent by the second device to obtain the first part of the intermediate ciphertext; the first device sums the second part of the intermediate ciphertext first slice with the second part of the intermediate ciphertext second slice to obtain the second part of the intermediate ciphertext.

[0022] Optionally, the third random number c is the product of the first random number a and the second random number b; the first part of the intermediate ciphertext includes a first intermediate ciphertext element corresponding to each user information; the second part of the intermediate ciphertext includes a second intermediate ciphertext element corresponding to each user information; the first processing unit is specifically used for: the first device performs a multiplication gate calculation according to the first auxiliary factor and the first intermediate ciphertext element and the second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine the first multiplication slice corresponding to the user information; the first device accumulates the first multiplication slices corresponding to each user information to obtain the first result slice.

[0023] Optionally, the first acquisition unit is specifically used for: the first device groups the feature information of each user information under the feature dimension to obtain multiple groups of feature information; for any group of feature information, the first device one-hot encodes the grouped feature information to obtain the grouped coding information corresponding to the grouped feature information, the number of coding values ​​in the grouped coding information is the same as the number of the grouped feature information; the coding value corresponding to the grouped feature information in the grouped coding information is a first value, and the coding value corresponding to the grouped feature information not belonging to the grouped feature information in the grouped coding information is a second value.

[0024] In a fourth aspect, an embodiment of the present invention provides a privacy information encryption transmission device, which is applicable to a second device having tag information corresponding to user information;

[0025] The second acquisition unit is used for: the second device splits the label information according to the set principle to obtain the first label secret fragment and the second label secret fragment, and sends the first label secret fragment to the first device; the first device has user information corresponding to the label information; the user information includes feature information of at least one feature dimension; each feature information under any feature dimension is grouped and encoded to obtain the encoding information of each group under any feature dimension; any group is used to represent the category of the corresponding feature information;

[0026] The second processing unit is used for: the second device determines the second fragment of the intermediate ciphertext according to the second characteristic secret fragment, the second label secret fragment and the second auxiliary factor sent by the first device and sends it to the first device; the second device determines the intermediate ciphertext according to the second fragment of the intermediate ciphertext and the first fragment of the intermediate ciphertext sent by the first device; the first fragment of the intermediate ciphertext is determined by the first device according to the first label information, the first characteristic secret fragment and the first auxiliary factor; the first characteristic secret fragment and the second characteristic secret fragment are obtained by the first device by splitting each encoding value in the encoding information of any group according to the set principle; the second device determines the second result fragment according to the intermediate ciphertext and the second auxiliary factor and receives the first result fragment sent by the first device; the second device determines the label result corresponding to the characteristic information of the group according to the second result fragment and the first result fragment.

[0027] Optionally, the random number sequence is generated by a third device; the first auxiliary factor and the second auxiliary factor are generated by the third device splitting the random number sequence according to the set principle and sending them to the first device and the second device respectively.

[0028] Optionally, the random number sequence includes a first random number a, a second random number b and a third random number c; the first auxiliary factor includes a1 value, b1 value and c1 value; the second auxiliary factor includes a2 value, b2 value and c2 value; the setting principle is that the value of the i-th bit in the split object is equal to the sum of the value of the i-th bit in the first split result and the value of the i-th bit in the second split result.

[0029] Optionally, the second processing unit is specifically used for: the second device determines the first part of the second fragment of the intermediate ciphertext according to the second label secret fragment and the b2 value; the second device determines the second part of the second fragment of the intermediate ciphertext according to the second feature secret fragment and the a2 value sent by the first device; the second processing unit is specifically used for: the second device sums the first part of the second fragment of the intermediate ciphertext with the first part of the first fragment of the intermediate ciphertext sent by the first device to obtain the first part of the intermediate ciphertext; the second device sums the second part of the second fragment of the intermediate ciphertext with the second part of the second fragment of the intermediate ciphertext to obtain the second part of the intermediate ciphertext.

[0030] Optionally, the third random number c is the product of the first random number a and the second random number b; the first part of the intermediate ciphertext includes a first intermediate ciphertext element corresponding to each user information; the second part of the intermediate ciphertext includes a second intermediate ciphertext element corresponding to each user information; the second processing unit is specifically used for: the second device performs a multiplication gate calculation according to the second auxiliary factor and the first intermediate ciphertext element and the second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine the second multiplication slice corresponding to the user information; the second device accumulates the second multiplication slices corresponding to each user information to obtain the second result slice.

[0031] Optionally, the second processing unit is also used for: the second device receives the number of each feature information under the feature dimension sent by the first device; the second processing unit is specifically used for: the second device sums the first result slice and the second result slice to obtain the number of positive samples of the feature information corresponding to the group; the second device determines the number of negative samples of the feature information corresponding to the group according to the number of each feature information under the feature dimension corresponding to the group and the number of positive samples of the feature information corresponding to the group; determines the label result corresponding to the feature information of the group according to the number of positive samples of the feature information in the group and the number of negative samples of the feature information in the group.

[0032] In a fifth aspect, an embodiment of the present application further provides a computing device, comprising: a memory for storing programs; a processor for calling the programs stored in the memory, and executing a method for encrypting and transmitting private information as in the first aspect according to the obtained programs.

[0033] In a sixth aspect, an embodiment of the present application further provides a computer-readable non-volatile storage medium, comprising a computer-readable program. When a computer reads and executes the computer-readable program, the computer executes a method for encrypting and transmitting private information as in the first aspect.

[0034] In the seventh aspect, an embodiment of the present application provides a computer program product, which includes a computer program stored on a computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer device, the computer device executes the steps of a method for encrypting and transmitting private information in the first aspect above. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0036] Figure 1 A data comparison chart of enterprise A and enterprise B provided in an embodiment of the present invention;

[0037] Figure 2 A flow chart of a method for encrypting and transmitting private information provided by an embodiment of the present invention;

[0038] Figure 3 A flow chart of a method for generating a first auxiliary factor and a second auxiliary factor provided by an embodiment of the present invention;

[0039] Figure 4 A flow chart of a method for obtaining coding information of each group provided by an embodiment of the present invention;

[0040] Figure 5 A flow chart of a method for determining a first fragment of an intermediate ciphertext provided by an embodiment of the present invention;

[0041] Figure 6 A flow chart of a method for determining a second fragment of an intermediate ciphertext provided by an embodiment of the present invention;

[0042] Figure 7 A flow chart of a method for determining an intermediate ciphertext provided by an embodiment of the present invention;

[0043] Figure 8 A flow chart of a method for determining a first result slice provided by an embodiment of the present invention;

[0044] Fig. 9 A flow chart of a method for determining a second result slice provided by an embodiment of the present invention;

[0045] Fig.10 A flow chart of a method for determining a label result corresponding to each feature information of a group provided by an embodiment of the present invention;

[0046] Fig.11An interactive diagram of encrypted transmission of private information provided by an embodiment of the present invention;

[0047] Fig.12 A schematic diagram of the structure of a device for encrypting and transmitting private information provided by an embodiment of the present invention;

[0048] Fig.13 A schematic diagram of the structure of a device for encrypting and transmitting private information provided by an embodiment of the present invention;

[0049] Fig.14 A schematic diagram of the structure of a computing device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0050] In order to make the purpose, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0051] In a possible scenario, both enterprise A and enterprise B need to build an evaluation model to evaluate the user's credit. The feature device corresponding to enterprise A has features X1, X2, X3, X4, and X5, but lacks label values, so the evaluation model cannot be built directly. The label device corresponding to enterprise B has feature X6 and label value Y, where Y is the user's credit evaluation. Although the evaluation model can be built independently, the model may not work well due to the small number of features. Figure 1 Therefore, if Enterprise A and Enterprise B cooperate to jointly build an evaluation model, the effect will obviously be better than if Enterprise B builds the model independently.

[0052] Before Enterprise A and Enterprise B jointly build the evaluation model, since there are many features in the feature device corresponding to Enterprise A, but not all features are correlated with the tag value Y, it is necessary to first filter out the features with high correlation with the tag value from the many features in the feature device corresponding to Enterprise A. However, the feature device corresponding to Enterprise A cannot directly send all features to the tag device corresponding to Enterprise B, which will lead to the problem of data leakage of Enterprise A.

[0053] In one possible case, the party with the tag value is determined as the tag device, and the party with only the feature is determined as the feature device. Then, through the homomorphic encryption scheme, that is, the tag device encrypts its own tag, the tag device encrypts its own tag, and then sends it to the feature device. The feature device divides the plaintext into boxes, and then homomorphically calculates the sum of the ciphertext labels based on the binning results, and sends the total number of each group and the aggregated ciphertext label sum to the tag device. Then the tag device can determine which features are related to the tag value based on the data sent by the feature device, so as to select features with high correlation with the tag value from many features. For example, if the number of samples is 1 million, first the tag device needs to calculate 1 million public key encryptions, and then send the 1 million ciphertexts to the feature device; the feature device calculates 1 million homomorphic additions, and then sends the results back to the tag device, and finally the tag device decrypts again, where the number of times is related to the number of bins of the feature device. Among them, public key encryption is a time-consuming operation, which will lead to low efficiency in screening features.

[0054] In summary, the embodiments of the present invention provide a method for encrypting and transmitting private information, so as to solve the problem of low efficiency in screening features.

[0055] like Figure 2 As shown, it is a flow chart of a method for encrypting and transmitting private information provided by an embodiment of the present invention, which includes the following steps:

[0056] Step 201: for any characteristic dimension, the first device performs group encoding on characteristic information of each user information under the characteristic dimension to obtain encoding information of each group.

[0057] In the embodiment of the present invention, the device having user information is the first device, and the device having tag information corresponding to each user information is the second device. For any feature dimension, the first device encodes each feature information of each user information under the feature dimension in groups to obtain the encoded information of each group, thereby blurring the original information of the feature, and then realizing that the feature device sends the encoded information to the second device by encrypting the privacy information without exposing the real data of the feature. Among them, any group is used to characterize the category of the corresponding feature information.

[0058] Step 202: for any group of coded information, the first device splits each coded value in the group of coded information according to a set principle to obtain a first characteristic secret fragment and a second characteristic secret fragment, and sends the second characteristic secret fragment to the second device.

[0059] In the embodiment of the present invention, for any group of coded information, the first device splits each coded value in the group of coded information according to the set principle to obtain the first characteristic secret fragment and the second characteristic secret fragment. In this way, if only the second characteristic secret fragment is sent to the second device, the first device and the second device both have each other's secret fragment, which is convenient for determining the label result corresponding to the group's characteristic information based on the corresponding auxiliary factor and secret fragment. Similarly, the second device will also split the label value according to the set principle to obtain the first label secret fragment and the second label secret fragment, and send the first label secret fragment to the first device.

[0060] Step 203: The first device determines the first fragment of the intermediate ciphertext according to the first tag secret fragment, the first feature secret fragment and the first auxiliary factor sent by the second device.

[0061] In the embodiment of the present invention, the first device determines the first fragment of the intermediate ciphertext according to the first label secret fragment, the first characteristic secret fragment and the first auxiliary factor sent by the second device. Similarly, the second device determines the second fragment of the intermediate ciphertext according to the second characteristic secret fragment, the second label secret fragment and the second auxiliary factor sent by the first device. The first auxiliary factor and the second auxiliary factor are obtained by splitting the random number sequence according to the set principle.

[0062] Step 204: The first device determines the intermediate ciphertext according to the intermediate ciphertext first fragment and the intermediate ciphertext second fragment sent by the second device.

[0063] In the embodiment of the present invention, the first device adds the intermediate ciphertext first fragment and the intermediate ciphertext second fragment sent by the second device to obtain the intermediate ciphertext. Similarly, the second device also receives the intermediate ciphertext first fragment sent by the first device, and then the second device adds the intermediate ciphertext first fragment and the intermediate ciphertext second fragment to obtain the intermediate ciphertext.

[0064] Step 205: The first device determines a first result slice according to the intermediate ciphertext and the first auxiliary factor and sends the first result slice to the second device.

[0065] In an embodiment of the present invention, the first device determines a first result slice based on the intermediate ciphertext and the first auxiliary factor and sends the first result slice to the second device, the second device determines a second result slice based on the intermediate ciphertext and the second auxiliary factor, and then the second device determines a label result corresponding to the characteristic information of the group based on the first result slice and the second result slice.

[0066] It can be seen from the above steps 201 to 205 that the first device is based on the first auxiliary factor, and the second device is based on the second auxiliary factor. By encrypting the privacy information, the first device can send the encrypted data, that is, the first result slice to the second device without exposing its own data, so that the second device can subsequently determine the label result corresponding to the characteristic information of the group according to the first result slice.

[0067] In an embodiment of the present invention, it is first necessary to determine how the first auxiliary factor and the second auxiliary factor are generated. In one possible case, the first auxiliary factor and the second auxiliary factor are generated by mutual agreement between the first device and the second device in a way that the first device and the second device mutually encrypt the private information, but this method is relatively complicated. In another possible case, the first auxiliary factor and the second auxiliary factor are generated by a neutral device, so that the neutral device can directly set the association relationship between the first auxiliary factor and the second auxiliary factor, so that the first device and the second device can subsequently determine the label result corresponding to the characteristic information of the group according to the first auxiliary factor and the second auxiliary factor.

[0068] like Figure 3 FIG. 1 is a flow chart of a method for generating a first auxiliary factor and a second auxiliary factor provided by an embodiment of the present invention, the method comprising the following steps:

[0069] Step 301: The third device splits the random number sequence according to the set principle to obtain a first auxiliary factor and a second auxiliary factor.

[0070] In the embodiment of the present invention, the third device is a neutral device, and the third device generates a random number sequence, wherein the random number sequence includes a first random number a, a second random number b, and a third random number c, and then the random number sequence is split according to the set principle to obtain a first auxiliary factor and a second auxiliary factor, wherein the first auxiliary factor includes a1 value, b1 value, and c1 value. The second auxiliary factor includes a2 value, b2 value, and c2 value. The set principle is that the value of the i-th bit in the split object is equal to the sum of the value of the i-th bit in the first split result and the value of the i-th bit in the second split result. For example, the third device generates a random number sequence including a first random number a, a second random number b, and a third random number c, wherein a=10, b=20, c=a*b=200, and then the random number sequence is split according to the set principle to obtain a first auxiliary factor and a second auxiliary factor, wherein a1=15, b1=12, and c1=90 of the first auxiliary factor. The second auxiliary factor has a2=-5, b2=8, c2=110, where a=a1+a2, b=b1+b2, c=c1+c2.

[0071] Step 302: The third device sends the first auxiliary factor to the first device, and sends the second auxiliary factor to the second device.

[0072] In the embodiment of the present invention, the third device sends the first auxiliary factor to the first device and sends the second auxiliary factor to the second device. If there are N characteristic dimensions, the corresponding third device needs to generate N random number sequences, and needs to generate N groups of first auxiliary factors and second auxiliary factors according to the N random number sequences.

[0073] It can be seen from the above steps 301 to 302 that the generation efficiency of the auxiliary factors is improved by introducing the third device to construct the random number sequence and splitting it according to the set principle to obtain the first auxiliary factor and the second auxiliary factor.

[0074] The following describes how the first device performs group encoding on each feature information under the feature dimension to obtain encoding information of each group.

[0075] like Figure 4 As shown, it is a flow chart of a method for obtaining coding information of each group provided by an embodiment of the present invention, and the method comprises the following steps:

[0076] In step 401, the first device groups each feature information of each user information under a feature dimension to obtain multiple groups of feature information.

[0077] In the embodiment of the present invention, for any feature dimension, the first device bins each feature information of each user information under the feature dimension, wherein the binning may be equal width binning, equal frequency binning, chi-square binning, optimal binning, or other binning methods, which are not limited here. The feature information of the feature device is shown in Table 1:

[0078] Table 1 Feature information table

[0079]

[0080]

[0081] For example, if feature dimension 1 is educational background, then the feature information under feature dimension 1 is (Bachelor, Master, Bachelor, Master). After binning, group 1 is (0,2) and group 2 is (1,3).

[0082] Step 402: For any group of characteristic information, the first device performs one-hot encoding on the group characteristic information to obtain encoding information of the group corresponding to the group characteristic information.

[0083] In the embodiment of the present invention, for any group of feature information, the first device performs one-hot encoding on the group feature information to obtain the encoding information of the group corresponding to the group feature information. Specifically, the number of each feature information under the feature dimension is the same as the number of encoding information, the encoding value corresponding to the feature information of the group in the encoding information of the group is the first value, and the encoding value corresponding to the feature information of the group that does not belong to the feature information of the group in the encoding information of the group is the second value. For example, for feature dimension 1, each feature information under the feature dimension 1 is (bachelor, master, bachelor, master), after binning, group 1 (0,2) is obtained, group 2 is (1,3), where the number of feature information is 4, group 1 is one-hot encoded, specifically, the encoding value corresponding to the feature information of the group is the first value, and the encoding value corresponding to the feature information that does not belong to the group is determined to be the second value, where the first value is 1 and the second value is 0, and the encoding information of group 1 is (1,0,1,0). Similarly, group 2 is one-hot encoded, and the encoding information of group 2 is (0,1,0,1).

[0084] It can be seen from the above steps 401 to 402 that by performing one-hot encoding on the feature bins, it is convenient to obtain the label result corresponding to the feature information of the group based on the inner product sum of the encoding information and the label value.

[0085] In an embodiment of the present invention, the first device performs group encoding on each feature information under the feature dimension, and after obtaining the encoding information of each group, for the encoding information of any group, the first device splits each encoding value of the encoding information according to the set principle to obtain the first feature secret slice and the second feature secret slice. For example, if the encoding information of group 1 is (1, 0, 1, 0), the encoding information of group 1 is split to obtain the first feature secret slice (3, -2, 9, 6) and the second feature secret slice (-2, 2, -8, -6). Then the first device sends the second feature secret slice to the second device. Each encoding value in the first feature secret slice is added to the encoding value of the second feature secret slice at the corresponding position to obtain the encoding information of the instant group 1. Similarly, the second device splits each label value in the label information according to the set principle to obtain the first label secret slice and the second label secret slice. For example, if the tag information is (0, 1, 1, 1), the tag information is split to obtain the first tag secret fragment (-4, -7, 7, 2) and the second tag secret fragment (4, 8, -6, -1). Then the second device sends the first tag secret fragment to the first device. In this way, the first device and the second device both obtain each other's secret fragments. After that, the first device and the second device, based on the corresponding auxiliary factors and secret fragments, encrypt and interact with the private information multiple times, so as to obtain the tag result corresponding to the characteristic information of the group according to the inner product sum of the encoded information and the tag value.

[0086] like Figure 5 As shown, it is a flow chart of a method for determining a first fragment of an intermediate ciphertext provided by an embodiment of the present invention, the method comprising the following steps:

[0087] Step 501: The first device determines the first part of the first slice of the intermediate ciphertext according to the first characteristic secret slice and the a1 value.

[0088] In the embodiment of the present invention, the first device determines the first part of the first fragment of the intermediate ciphertext according to the first characteristic secret fragment minus the value a1. For example, if the first characteristic secret fragment is (h1_1, ..hn_1), then the first part of the first fragment of the intermediate ciphertext is (h1_1-a1, ...hn_1-a1).

[0089] Step 502: The first device determines the second part of the first fragment of the intermediate ciphertext according to the first tag secret fragment and the b1 value sent by the second device.

[0090] In an embodiment of the present invention, the first device determines the second part of the first fragment of the intermediate ciphertext by subtracting the b1 value from the first tag secret fragment sent by the second device. For example, if the first tag secret fragment is y1_1,…yn_1), then the second part of the first fragment of the intermediate ciphertext is (y1_1-b1,…yn_1-b1). The first device determines the first fragment of the intermediate ciphertext based on the first part of the first fragment of the intermediate ciphertext and the second part of the first fragment of the intermediate ciphertext, and then the first device sends the first fragment of the intermediate ciphertext to the second device. For example, if the a1 value is 15, the b1 value is 12, the first feature secret fragment is (3, -2, 9, 6), the first tag secret fragment is (-4, -7, 7, 2), the first part of the first fragment of the intermediate ciphertext is (-12, -17, -6, -9), and the second part of the first fragment of the intermediate ciphertext is (-16, -19, -5, -10). Therefore, the first fragment of the intermediate ciphertext is [(-12, -17, -6, -9), (-16, -19, -5, -10)].

[0091] It can be seen from the above steps 501 to 502 that the first device can determine the first fragment of the intermediate ciphertext according to the a1 value and the b1 value in the first characteristic secret fragment, the first label secret fragment and the first auxiliary factor, so as to facilitate the subsequent determination of the label result corresponding to the characteristic information of the group according to the first fragment of the intermediate ciphertext.

[0092] The above describes how the first device determines the first fragment of the intermediate ciphertext. The following describes how the second device determines the second fragment of the intermediate ciphertext.

[0093] like Figure 6 As shown, it is a flow chart of a method for determining a second fragment of an intermediate ciphertext provided by an embodiment of the present invention, the method comprising the following steps:

[0094] Step 601: The second device determines the first part of the second fragment of the intermediate ciphertext according to the second characteristic secret fragment and the a2 value sent by the first device.

[0095] In the embodiment of the present invention, the second device determines the first part of the second shard of the intermediate ciphertext according to the second characteristic secret shard minus the value a2. For example, if the second characteristic secret shard is (h1_2, ..hn_2), then the first part of the second shard of the intermediate ciphertext is (h1_2-a2, ...hn_2-a2).

[0096] Step 602: The second device determines the second part of the second fragment of the intermediate ciphertext according to the second tag secret fragment and the b2 value.

[0097] In the embodiment of the present invention, the second device determines the second part of the intermediate ciphertext second fragment according to the second label secret fragment minus the b2 value. For example, if the second label secret fragment is (y1_2, ... yn_2), then the second part of the intermediate ciphertext second fragment is (y1_2-b2, ... yn_2-b2). Then the second device generates the intermediate ciphertext second fragment according to the first part of the intermediate ciphertext second fragment and the second part of the intermediate ciphertext second fragment. For example, if the second feature secret fragment is (-2, 2, -8, -6), the second label secret fragment is (4, 8, -6, -1), the a2 value is -5, and the b2 value is 8, then the first part of the intermediate ciphertext second fragment is (3, 7, -3, -1), the second part of the intermediate ciphertext second fragment is (-4, 0, -14, -9), and the intermediate ciphertext second fragment is [(3, 7, -3, -1), (-4, 0, -14, -9)].

[0098] It can be seen from the above steps 601 to 602 that the second device can determine the second fragment of the intermediate ciphertext according to the a2 value and the b2 value in the second characteristic secret fragment, the second label secret fragment and the second auxiliary factor, so as to facilitate the subsequent determination of the label result corresponding to the characteristic information of the group according to the second fragment of the intermediate ciphertext.

[0099] Optionally, the first device sends the first fragment of the intermediate ciphertext to the second device, and the second device sends the second fragment of the intermediate ciphertext to the first device, so that the first device and the second device can subsequently determine the intermediate ciphertext based on the first fragment of the intermediate ciphertext and the second fragment of the intermediate ciphertext.

[0100] The following describes how the first device obtains the intermediate ciphertext according to the intermediate ciphertext first fragment and the intermediate ciphertext second fragment.

[0101] like Figure 7 As shown, it is a flow chart of a method for determining an intermediate ciphertext provided by an embodiment of the present invention, and the method comprises the following steps:

[0102] Step 701: The first device sums the first part of the intermediate ciphertext first fragment with the first part of the intermediate ciphertext second fragment sent by the second device to obtain the first part of the intermediate ciphertext.

[0103] In an embodiment of the present invention, the first device sums the first part of the intermediate ciphertext first fragment and the first part of the intermediate ciphertext second fragment sent by the second device to obtain the first part of the intermediate ciphertext. For example, the first part of the intermediate ciphertext first fragment is (h1_1-a1, ...hn_1-a1), and the first part of the intermediate ciphertext second fragment is (h1_2-a2, ...hn_2-a2). Since h1_1+h1_2=h1, ...hn_1+hn_2=hn; a1+a2=a, the first part of the intermediate ciphertext is (h1-a, ...hn-a). For another example, if the first part of the intermediate ciphertext first fragment is (-12, -17, -6, -9), and the first part of the intermediate ciphertext second fragment is (3, 7, -3, -1), then the first part of the intermediate ciphertext is (-9, -10, -9, -10).

[0104] In step 702, the first device sums the second part of the first fragment of the intermediate ciphertext with the second part of the second fragment of the intermediate ciphertext to obtain the second part of the intermediate ciphertext.

[0105] In an embodiment of the present invention, the first device sums the second part of the first fragment of the intermediate ciphertext with the second part of the second fragment of the intermediate ciphertext to obtain the second part of the intermediate ciphertext. For example, the second part of the first fragment of the intermediate ciphertext is (y1_1-b1, ...yn_1-b1), and the second part of the second fragment of the intermediate ciphertext is (y1_2-b2, ...yn_2-b2). Since y1_1+y1_2=y1, ..., yn_1+yn_2=yn; b1+b2=b, the second part of the intermediate ciphertext is (y1-b, ...yn-b). Therefore, the intermediate ciphertext is [(h1-a, ...hn-a), (y1-b, ...yn-b)]. For example, if the second part of the first fragment of the intermediate ciphertext is (-16, -19, -5, -10), and the second part of the second fragment of the intermediate ciphertext is (-4, 0, -14, -9), then the second part of the intermediate ciphertext is (-20, -19, -19, -19)

[0106] It can be seen from the above steps 701 to 702 that the first device obtains (h1-a, ...hn-a) and (y1-b, ...yn-b) based on the intermediate ciphertext first fragment and the intermediate ciphertext second fragment, which facilitates the subsequent calculation of the inner product sum of the coding value and the label value to determine the label result corresponding to each feature information in the group.

[0107] Optionally, the second device receives the first fragment of the intermediate ciphertext sent by the first device, and then the second device determines the intermediate ciphertext according to the first fragment of the intermediate ciphertext and the second fragment of the intermediate ciphertext. The second device determines the intermediate ciphertext in the same manner as the first device, which is not described in detail here.

[0108] like Figure 8 FIG. 1 is a flow chart of a method for determining a first result slice provided by an embodiment of the present invention, the method comprising the following steps:

[0109] Step 801: The first device performs a multiplication gate calculation according to a first auxiliary factor and a first intermediate ciphertext element and a second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine a first multiplication slice corresponding to the user information.

[0110] In the embodiment of the present invention, since the intermediate ciphertext is [(h1-a, ...hn-a), (y1-b, ...yn-b)], the first part of the intermediate ciphertext includes the first intermediate ciphertext element corresponding to each user information; the second part of the intermediate ciphertext includes the second intermediate ciphertext element corresponding to each user information. For example, the first intermediate ciphertext element is hi-a, and the second intermediate ciphertext element is yi-b.

[0111] The first device performs a multiplication gate calculation based on a1, b1, c1 in the first auxiliary factor and the first intermediate ciphertext element and the second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine the first multiplication shard corresponding to the user information. For example, if the first intermediate ciphertext element is hi-a and the second intermediate ciphertext element is yi-b, then the first multiplication shard can be determined according to formula 1, as shown in formula 1:

[0112] zi_1=c1+(hi-a)*b1+(yi-b)*a1+(hi-a)(yi-b) / 2 Formula 1

[0113] Where zi_1 is the first multiplication slice.

[0114] Step 802: The first device accumulates the first multiplication slices corresponding to each user information to obtain a first result slice.

[0115] In the embodiment of the present invention, for example, if the first result slice is r_1, zi_1, ..., zn_1 can be determined by formula 1, and r_1 can be determined according to formula 2, as shown in formula 2:

[0116] r_1=zi_1+..+zn_1 Formula 2

[0117] It can be seen from the above steps 801 to 802 that the first device can determine the first result slice according to the third random number c and the intermediate ciphertext. In this case, the first device subsequently sends the first result slice to the second device, and the second device determines the label result corresponding to each feature information of the group according to the first result slice.

[0118] Similarly, the following describes how the second device determines the second result fragment.

[0119] like Fig. 9 FIG. 1 is a flow chart of a method for determining a second result slice provided by an embodiment of the present invention, the method comprising the following steps:

[0120] Step 901: The second device performs a multiplication gate calculation based on a second auxiliary factor and a first intermediate ciphertext element and a second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine a second multiplication slice corresponding to the user information.

[0121] In the embodiment of the present invention, the first part of the intermediate ciphertext includes the first intermediate ciphertext element corresponding to each user information; the second part of the intermediate ciphertext includes the second intermediate ciphertext element corresponding to each user information. The second device performs multiplication gate calculation according to a2, b2, c2 in the second auxiliary factor and the first intermediate ciphertext element and the second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext, and determines the second multiplication slice corresponding to the user information.

[0122] For example, if the first intermediate ciphertext element is hi-a and the second intermediate ciphertext element is yi-b, the second multiplication fragment can be determined according to Formula 3, as shown in Formula 3:

[0123] zi_2=c2+(hi-a)*b2+(yi-b)*a2+(hi-a)(yi-b) / 2 Formula 3

[0124] where zi_2 is the second multiplication slice.

[0125] Step 902: The second device accumulates the second multiplication slices corresponding to each user information to obtain a second result slice.

[0126] In the embodiment of the present invention, for example, if the second result slice is r_2, zi_2, ..., zn_2 can be determined by formula 4, and then r_2 can be determined according to formula 4, as shown in formula 4:

[0127] r_2=zi_2+..+zn_2 Formula 4

[0128] It can be seen from the above steps 901 to 902 that the second device can determine the second result shard based on the third random number c and the intermediate ciphertext. In this way, the subsequent second device can more accurately determine the label results corresponding to each feature information of the group based on the first result shard and the second result shard.

[0129] Optionally, after receiving the first result fragment sent by the first device, the second device may determine the label result corresponding to each feature information of the group according to the first result fragment and the second result fragment. The following specifically describes how to determine the label result corresponding to each feature information of the group.

[0130] like Fig.10 FIG. 1 is a flow chart of a method for determining a label result corresponding to each feature information of a group provided by an embodiment of the present invention, the method comprising the following steps:

[0131] Step 1001: The second device sums the first result slice and the second result slice to obtain the number of positive samples of feature information corresponding to the group.

[0132] In the embodiment of the present invention, the second device sums the first result slice and the second result slice to obtain the inner product sum of the coding information and the label information of the group, wherein since the coding value belonging to the group in the coding information is the first value, and the coding value not belonging to the group is the second value, the inner product sum of the coding information and the label information is the number of positive samples of the feature information corresponding to the group. For example, the first result slice r_1, wherein r_1=zi_1+..+zn_1; the second result slice r_2, wherein r_2=zi_2+..+zn_2; if r_1+r_2 is calculated, that is, r_1+r_2=(z1_1+z1_2)+(z2_1+z2_2)+(zi_1+zi_2)..+(zn_1+zn_2).

[0133] The following formula 5 introduces how to calculate zi_1+zi_2.

[0134] zi_1+zi_2=(c1+c2)+(hi-a)*(b1+b2)+(yi-bi)*(a1+a2)+(hi-ai)(yi-bi)=c+hi*ba*b+yi*a–b*a+hi*yi-hi*b-yi*a+a*b=hi*yi Formula 5

[0135] Among them, c=a*b.

[0136] According to Formula 5, since the first result slice and the second result slice are summed, the number of positive samples of the characteristic information corresponding to the group is obtained. In this case, based on the number of positive samples, the second device cannot restore it to obtain the characteristic information corresponding to the group. In addition, since this solution first obtains the first multiplication slice and the second multiplication slice, and then the first device accumulates the first multiplication slice to obtain the first result slice, and the second device accumulates the second multiplication slice to obtain the second result slice, in this case, if the first result slice and the second result slice are calculated again, only an inner product sum is obtained, and it is impossible to deduce what the encoded information in each corresponding multiplication slice is based on the inner product sum, thereby protecting the binning of the group in the first device, thereby determining the number of positive samples of the characteristic information corresponding to the group without exposing the characteristic information of the first device and the binning of the group.

[0137] Step 1002: The second device determines the number of negative samples of the feature information corresponding to the group according to the number of each feature information under the feature dimension corresponding to the group and the number of positive samples of the feature information corresponding to the group.

[0138] In an embodiment of the present invention, the second device also receives the number of each feature information under the feature dimension sent by the first device, and then the second device determines the number of negative samples of the feature information corresponding to the group based on the number of each feature information under the feature dimension corresponding to the group minus the number of positive samples of the feature information corresponding to the group.

[0139] Step 1003: Determine the label result corresponding to the feature information of the group according to the number of positive samples of the feature information in the group and the number of negative samples of the feature information in the group.

[0140] In the embodiment of the present invention, the weight of evidence (WOE) is first introduced. It is often used in the statistics of credit scoring modeling and risk modeling to measure the predictive ability of a variable on the target variable. To calculate WOE, it is necessary to first bin each feature information, which is the specific content of step 401 in this solution, and is not limited here. However, the number of positive samples and the number of negative samples in each group are calculated, and then the WOE is calculated by formula 6. As shown in formula 6:

[0141]

[0142] Where P event is the probability of positive samples in the group, that is, the number of each feature information under the positive sample / feature dimension; P non-event is the probability of negative samples, that is, the number of feature information under the negative sample / feature dimension.

[0143] Then, according to the second device combined with multiple groups of WOE values ​​under the feature dimension, feature values ​​with high correlation with the label value can be screened out more accurately from each feature information under the feature dimension.

[0144] It can be seen from the above steps 1001 to 1003 that the second device calculates the sum of the first result slice and the second result slice to obtain the inner product sum between the encoding information and the label information corresponding to the group, thereby determining the number of positive samples of the feature information corresponding to the group without exposing the feature information of the first device and the binning of the group, and then determining the number of negative samples of the feature information corresponding to the group according to the number of each feature information under the feature dimension, thereby more accurately determining the woe value of the group.

[0145] like Fig.11As shown, an interactive diagram of encrypted transmission of private information provided by an embodiment of the present invention includes the following steps:

[0146] Step 1101: A third device generates a first auxiliary factor and a second auxiliary factor according to a random number sequence.

[0147] In the embodiment of the present invention, step 1101 is an optional step, and the first auxiliary factor and the second auxiliary factor may be generated by a third device according to a random number sequence, and the details may refer to step 301. They may also be obtained by agreement between the first device and the second device according to set conditions, which is not limited again.

[0148] Step 1102: The third device sends the first auxiliary factor to the first device, and sends the second auxiliary factor to the second device.

[0149] In the embodiment of the present invention, the specific content can be found in step 302.

[0150] Step 1103: for any characteristic dimension, the first device performs group encoding on each characteristic information of each user information under the characteristic dimension to obtain encoding information of each group.

[0151] In the embodiment of the present invention, the specific contents may refer to step 401 to step 402.

[0152] Step 1104: for any group of coded information, the first device splits each coded value in the group of coded information according to a set principle to obtain a first characteristic secret fragment and a second characteristic secret fragment, and sends the second characteristic secret fragment to the second device.

[0153] In the embodiment of the present invention, the order of step 1104 and step 1105 is not limited. Step 1104 may precede step 1105, or they may be performed simultaneously, or step 1105 may precede step 1104, which is not limited here.

[0154] Step 1105: The second device splits the tag information according to a set principle to obtain a first tag secret fragment and a second tag secret fragment, and sends the first tag secret fragment to the first device.

[0155] Step 1106: The first device determines an intermediate ciphertext first fragment according to the first tag secret fragment, the first feature secret fragment, and the first auxiliary factor sent by the second device, and sends the intermediate ciphertext first fragment to the second device.

[0156] In the embodiment of the present invention, the specific contents can be found in step 501 to step 502. Step 1106 and step 1107 are not limited in sequence, and can be performed simultaneously, or step 1106 can precede step 1107, or step 1107 can precede step 1106.

[0157] Step 1107: The second device determines the second fragment of the intermediate ciphertext according to the second characteristic secret fragment, the second tag secret fragment and the second auxiliary factor sent by the first device, and sends the second fragment to the first device.

[0158] In the embodiment of the present invention, the specific contents may refer to step 601 to step 602.

[0159] Step 1108: The first device determines the intermediate ciphertext according to the intermediate ciphertext first fragment and the intermediate ciphertext second fragment sent by the second device.

[0160] In the embodiment of the present invention, the specific contents can be found in step 701 to step 702. Step 1108 and step 1109 are not limited in sequence, and can be performed simultaneously, or step 1108 can precede step 1109, or step 1109 can precede step 1108.

[0161] Step 1109: The second device determines the intermediate ciphertext according to the intermediate ciphertext second fragment and the intermediate ciphertext first fragment sent by the first device.

[0162] In the embodiment of the present invention, the specific contents may refer to step 701 to step 702.

[0163] Step 1110: The first device determines a first result slice according to the intermediate ciphertext and the first auxiliary factor and sends the first result slice to the second device.

[0164] In the embodiment of the present invention, the specific contents can be found in step 801 to step 802. Step 1110 and step 1111 are not limited in sequence, and can be performed simultaneously, or step 1110 can precede step 1111, or step 1111 can precede step 1110.

[0165] Step 1111: The second device determines a second result fragment according to the intermediate ciphertext and the second auxiliary factor.

[0166] In the embodiment of the present invention, the specific contents may refer to step 901 to step 902.

[0167] Step 1112: The second device determines a label result corresponding to the characteristic information of the group according to the second result slice and the first result slice.

[0168] In the embodiment of the present invention, the specific contents may refer to step 1001 to step 1003.

[0169] It can be seen from the above steps 1100 to 1112 that, based on the first auxiliary factor and the second auxiliary factor, the first device and the second device simplify the original complex steps into some simple calculations of addition and multiplication by encrypting the privacy information, so that the inner product sum of the encoding information and the label information corresponding to each feature information under the feature dimension is finally determined to be the number of positive samples, so that the label results corresponding to each feature information under the feature dimension can be determined more accurately according to the number of positive samples in the subsequent process.

[0170] Based on the same technical concept, the embodiment of the present application provides a device for encrypting and transmitting private information, such as Fig.12 As shown, it is applicable to a first device having user information; the user information includes feature information of at least one feature dimension; the device 1200 includes: a first acquisition unit 1201 is used for: for any feature dimension, the first device groups and encodes each feature information of each user information under the feature dimension to obtain the encoding information of each group; any group is used to characterize the category of the corresponding feature information; a first processing unit 1202 is used for: for any group of encoding information, the first device splits each encoding value in the grouped encoding information according to a set principle to obtain a first feature secret slice and a second feature secret slice, and sends the second feature secret slice to the second device; the second device has label information corresponding to each user information; the first device divides the first label secret slice, the first feature secret slice and the second feature secret slice according to the first label secret slice and the first feature secret slice sent by the second device The first device determines the intermediate ciphertext according to the first intermediate ciphertext slice and the second intermediate ciphertext slice sent by the second device; the second intermediate ciphertext slice is determined by the second device according to the second label secret slice, the second characteristic secret slice and the second auxiliary factor; the first device determines the first result slice according to the intermediate ciphertext and the first auxiliary factor and sends the first result slice to the second device; the first result slice is used to determine the label result corresponding to the characteristic information of the group with the second result slice generated by the second device; wherein the first label secret slice and the second label secret slice are obtained by the second device splitting the label information corresponding to the group according to the set principle; the first auxiliary factor and the second auxiliary factor are obtained by splitting the random number sequence according to the set principle.

[0171] Optionally, the random number sequence is generated by a third device; the first auxiliary factor and the second auxiliary factor are generated by the third device splitting the random number sequence according to a set principle and then sending them to the first device and the second device respectively.

[0172] Optionally, the random number sequence includes a first random number a, a second random number b and a third random number c; the first auxiliary factor includes a1 value, b1 value and c1 value; the second auxiliary factor includes a2 value, b2 value and c2 value; the setting principle is that the value of the i-th bit in the split object is equal to the sum of the value of the i-th bit in the first split result and the value of the i-th bit in the second split result.

[0173] Optionally, the first processing unit 1202 is specifically used for: the first device determines the first part of the intermediate ciphertext first slice according to the first characteristic secret slice and the a1 value; the first device determines the second part of the intermediate ciphertext first slice according to the first label secret slice and the b1 value sent by the second device; the first device determines the intermediate ciphertext according to the intermediate ciphertext first slice and the intermediate ciphertext second slice sent by the second device, including: the first device sums the first part of the intermediate ciphertext first slice with the first part of the intermediate ciphertext second slice sent by the second device to obtain the first part of the intermediate ciphertext; the first device sums the second part of the intermediate ciphertext first slice with the second part of the intermediate ciphertext second slice to obtain the second part of the intermediate ciphertext.

[0174] Optionally, the third random number c is the product of the first random number a and the second random number b; the first part of the intermediate ciphertext includes the first intermediate ciphertext element corresponding to each user information; the second part of the intermediate ciphertext includes the second intermediate ciphertext element corresponding to each user information; the first processing unit 1202 is specifically used for: the first device performs a multiplication gate calculation according to the first auxiliary factor and the first intermediate ciphertext element and the second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine the first multiplication slice corresponding to the user information; the first device accumulates the first multiplication slices corresponding to each user information to obtain a first result slice.

[0175] Optionally, the first acquisition unit 1201 is specifically used for: the first device groups each feature information of each user information under the feature dimension to obtain multiple groups of feature information; for any group of feature information, the first device one-hot encodes the grouped feature information to obtain grouped coding information corresponding to the grouped feature information, and the number of coding values ​​in the grouped coding information is the same as the number of grouped feature information; the coding value corresponding to the grouped feature information in the grouped coding information is a first value, and the coding value corresponding to the grouped feature information not belonging to the grouped feature information in the grouped coding information is a second value.

[0176] Based on the same technical concept, the embodiment of the present application provides a device for encrypting and transmitting private information, such as Fig.13As shown, it is suitable for a second device having tag information corresponding to user information; the device 1300 includes: a second acquisition unit 1301 is used for: the second device splits the tag information according to the set principle to obtain the first tag secret fragment and the second tag secret fragment, and sends the first tag secret fragment to the first device; the first device has each user information corresponding to the tag information; the user information includes feature information of at least one feature dimension; each feature information under any feature dimension is encoded by grouping, and the encoding information of each group under any feature dimension is obtained; any group is used to characterize the category of the corresponding feature information; the second processing unit 1302 is used for: the second device receives the second feature secret fragment and the second tag secret fragment sent by the first device The second fragment of the intermediate ciphertext is determined by the secret fragment and the second auxiliary factor and sent to the first device; the second device determines the intermediate ciphertext according to the second fragment of the intermediate ciphertext and the first fragment of the intermediate ciphertext sent by the first device; the first fragment of the intermediate ciphertext is determined by the first device according to the first label information, the first characteristic secret fragment and the first auxiliary factor; the first characteristic secret fragment and the second characteristic secret fragment are obtained by the first device by splitting each encoding value in the encoding information of any group according to the set principle; the second device determines the second result fragment according to the intermediate ciphertext and the second auxiliary factor and receives the first result fragment sent by the first device; the second device determines the label result corresponding to the characteristic information of the group according to the second result fragment and the first result fragment.

[0177] Optionally, the random number sequence is generated by a third device; the first auxiliary factor and the second auxiliary factor are generated by the third device splitting the random number sequence according to a set principle and then sending them to the first device and the second device respectively.

[0178] Optionally, the random number sequence includes a first random number a, a second random number b and a third random number c; the first auxiliary factor includes a1 value, b1 value and c1 value; the second auxiliary factor includes a2 value, b2 value and c2 value; the setting principle is that the value of the i-th bit in the split object is equal to the sum of the value of the i-th bit in the first split result and the value of the i-th bit in the second split result.

[0179] Optionally, the second processing unit 1302 is specifically used for: the second device determines the first part of the second slice of the intermediate ciphertext according to the second label secret slice and the b2 value; the second device determines the second part of the second slice of the intermediate ciphertext according to the second feature secret slice and the a2 value sent by the first device; the second processing unit 1302 is specifically used for: the second device sums the first part of the second slice of the intermediate ciphertext with the first part of the first slice of the intermediate ciphertext sent by the first device to obtain the first part of the intermediate ciphertext; the second device sums the second part of the second slice of the intermediate ciphertext with the second part of the second slice of the intermediate ciphertext to obtain the second part of the intermediate ciphertext.

[0180] Optionally, the third random number c is the product of the first random number a and the second random number b; the first part of the intermediate ciphertext includes the first intermediate ciphertext element corresponding to each user information; the second part of the intermediate ciphertext includes the second intermediate ciphertext element corresponding to each user information; the second processing unit 1302 is specifically used for: the second device performs a multiplication gate calculation according to the second auxiliary factor and the first intermediate ciphertext element and the second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext, and determines the second multiplication slice corresponding to the user information; the second device accumulates the second multiplication slices corresponding to each user information to obtain a second result slice.

[0181] Optionally, the second processing unit 1302 is also used for: the second device receives the number of each feature information under the feature dimension sent by the first device; the second processing unit 1302 is specifically used for: the second device sums the first result slice and the second result slice to obtain the number of positive samples of the feature information corresponding to the group; the second device determines the number of negative samples of the feature information corresponding to the group according to the number of each feature information under the feature dimension corresponding to the group and the number of positive samples of the feature information corresponding to the group; determines the label result corresponding to the feature information of the group according to the number of positive samples of the feature information in the group and the number of negative samples of the feature information in the group.

[0182] Based on the same technical concept, the present application embodiment provides a computing device, such as Fig.14 As shown, it includes at least one processor 1401 and a memory 1402 connected to the at least one processor. The specific connection medium between the processor 1401 and the memory 1402 is not limited in the embodiment of the present application. Fig.14 For example, the processor 1401 and the memory 1402 are connected via a bus. The bus can be divided into an address bus, a data bus, a control bus, etc.

[0183] In an embodiment of the present application, the memory 1402 stores instructions that can be executed by at least one processor 1401. The at least one processor 1401 can execute the steps of the above-mentioned private information encryption transmission method by executing the instructions stored in the memory 1402.

[0184] Among them, the processor 1401 is the control center of the computing device, and can use various interfaces and lines to connect various parts of the computing device, and realize the processing of the method of generating code by running or executing instructions stored in the memory 1402 and calling data stored in the memory 1402. Optionally, the processor 1401 may include one or more processing units, and the processor 1401 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface, and application programs, and the modem processor mainly processes wireless communications. It is understandable that the above-mentioned modem processor can also be integrated into the processor 1401. In some embodiments, the processor 1401 and the memory 1402 can be implemented on the same chip, and in some embodiments, they can also be implemented separately on independent chips.

[0185] Processor 1401 can be a general-purpose processor, such as a central processing unit (CPU), a digital signal processor, an application-specific integrated circuit (ASIC), a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, and can implement or execute the methods, steps and logic block diagrams disclosed in the embodiments of the present application. A general-purpose processor can be a microprocessor or any conventional processor, etc. The steps of the method for encrypting and transmitting private information disclosed in the embodiments of the present application can be directly embodied as being executed by a hardware processor, or can be executed by a combination of hardware and software modules in the processor.

[0186] Memory 1402, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer executable programs and modules. Memory 1402 may include at least one type of storage medium, such as flash memory, hard disk, multimedia card, card-type memory, random access memory (RandomAccess Memory, RAM), static random access memory (Static RandomAccess Memory, SRAM), programmable read-only memory (Programmable Read Only Memory, PROM), read-only memory (Read Only Memory, ROM), electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), magnetic memory, disk, optical disk, etc. Memory 1402 is any other medium that can be used to carry or store a desired program code in the form of an instruction or data structure and can be accessed by a computer device, but is not limited thereto. The memory 1402 in the embodiment of the present application can also be a circuit or any other device that can realize a storage function, for storing program instructions and / or data.

[0187] Based on the same inventive concept, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program that can be executed by a computer device. When the program runs on the computer device, the computer device executes the steps of the above-mentioned privacy information encryption transmission method.

[0188] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0189] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0190] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0191] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0192] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A method for encrypting and transmitting private information, characterized in that: Applicable to a first device having user information; the user information includes feature information of at least one feature dimension; the method includes: For any characteristic dimension, the first device encodes each characteristic information of each user information under the characteristic dimension in groups to obtain encoding information of each group; any group is used to represent the category of the corresponding characteristic information; For any group of coded information, the first device splits each coded value in the group of coded information according to a set principle to obtain a first characteristic secret fragment and a second characteristic secret fragment, and sends the second characteristic secret fragment to the second device; the second device has label information corresponding to each user information; The first device determines a first intermediate ciphertext fragment according to the first tag secret fragment, the first feature secret fragment and the first auxiliary factor sent by the second device; The first device determines the intermediate ciphertext according to the intermediate ciphertext first fragment and the intermediate ciphertext second fragment sent by the second device; the intermediate ciphertext second fragment is determined by the second device according to the second tag secret fragment, the second feature secret fragment and the second auxiliary factor; The first device determines a first result slice according to the intermediate ciphertext and the first auxiliary factor and sends the first result slice to the second device; the first result slice is used to determine a label result corresponding to the characteristic information of the group with a second result slice generated by the second device; wherein, The first label secret fragment and the second label secret fragment are obtained by the second device splitting the label information corresponding to the group according to the set principle; the first auxiliary factor and the second auxiliary factor are obtained by splitting the random number sequence according to the set principle.

2. The method according to claim 1, characterized in that The random number sequence is generated by a third device; The first auxiliary factor and the second auxiliary factor are respectively sent to the first device and the second device after the third device splits the random number sequence according to the set principle.

3. The method according to claim 1, characterized in that The random number sequence includes a first random number a, a second random number b and a third random number c; The first auxiliary factor includes an a1 value, a b1 value, and a c1 value; The second auxiliary factor includes an a2 value, a b2 value, and a c2 value; The setting principle is that the value of the i-th position in the split object is equal to the sum of the value of the i-th position in the first split result and the value of the i-th position in the second split result.

4. The method according to claim 3, characterized in that The first device determines a first intermediate ciphertext fragment according to the first tag secret fragment, the first feature secret fragment, and the first auxiliary factor sent by the second device, including: The first device determines a first part of a first slice of an intermediate ciphertext according to the first characteristic secret slice and the a1 value; The first device determines the second part of the first fragment of the intermediate ciphertext according to the first label secret fragment and the b1 value sent by the second device; The first device determines the intermediate ciphertext according to the intermediate ciphertext first fragment and the intermediate ciphertext second fragment sent by the second device, including: The first device sums the first part of the first fragment of the intermediate ciphertext with the first part of the second fragment of the intermediate ciphertext sent by the second device to obtain the first part of the intermediate ciphertext; The first device sums the second part of the first fragment of the intermediate ciphertext with the second part of the second fragment of the intermediate ciphertext to obtain the second part of the intermediate ciphertext.

5. The method according to claim 4, characterized in that The third random number c is the product of the first random number a and the second random number b; The first part of the intermediate ciphertext includes a first intermediate ciphertext element corresponding to each user information; The second part of the intermediate ciphertext includes a second intermediate ciphertext element corresponding to each user information; The first device determines a first result shard according to the intermediate ciphertext and the first auxiliary factor, including: The first device performs a multiplication gate calculation according to the first auxiliary factor and a first intermediate ciphertext element and a second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine a first multiplication slice corresponding to the user information; The first device accumulates the first multiplication slices corresponding to each user information to obtain the first result slice.

6. The method according to any one of claims 1 to 5, characterized in that: The first device encodes each feature information of each user information under the feature dimension in groups to obtain encoding information of each group, including: The first device groups each feature information of each user information under the feature dimension to obtain multiple groups of feature information; For any group of feature information, the first device one-hot encodes the group feature information to obtain the coding information of the group corresponding to the group feature information, and the number of coding values ​​in the coding information of the group is the same as the number of the group feature information; the coding value corresponding to the group feature information in the coding information of the group is a first value, and the coding value corresponding to the group feature information not belonging to the group feature information in the coding information of the group is a second value.

7. A method for encrypting and transmitting private information, characterized in that: Applicable to a second device having tag information corresponding to user information; the method comprises: The second device splits the tag information according to a set principle to obtain a first tag secret fragment and a second tag secret fragment, and sends the first tag secret fragment to the first device; the first device has user information corresponding to the tag information; the user information includes feature information of at least one feature dimension; each feature information under any feature dimension is grouped and encoded to obtain encoding information of each group under any feature dimension; any group is used to represent the category of the corresponding feature information; The second device determines, according to the second characteristic secret fragment, the second tag secret fragment and the second auxiliary factor sent by the first device, a second fragment of the intermediate ciphertext and sends the second fragment to the first device; The second device determines the intermediate ciphertext according to the second fragment of the intermediate ciphertext and the first fragment of the intermediate ciphertext sent by the first device; the first fragment of the intermediate ciphertext is determined by the first device according to the first tag information, the first characteristic secret fragment, and the first auxiliary factor; the first characteristic secret fragment and the second characteristic secret fragment are obtained by the first device splitting each encoding value in the encoding information of any group according to a set principle; The second device determines a second result fragment according to the intermediate ciphertext and the second auxiliary factor and receives the first result fragment sent by the first device; The second device determines a label result corresponding to the feature information of the group according to the second result slice and the first result slice.

8. The method according to claim 7, characterized in that The random number sequence is generated by a third device; The first auxiliary factor and the second auxiliary factor are respectively sent to the first device and the second device after the third device splits the random number sequence according to the set principle.

9. The method according to claim 7, characterized in that The random number sequence includes a first random number a, a second random number b and a third random number c; The first auxiliary factor includes an a1 value, a b1 value, and a c1 value; The second auxiliary factor includes an a2 value, a b2 value, and a c2 value; The setting principle is that the value of the i-th position in the split object is equal to the sum of the value of the i-th position in the first split result and the value of the i-th position in the second split result.

10. The method according to claim 9, characterized in that The second device determines the second fragment of the intermediate ciphertext according to the second characteristic secret fragment, the second tag secret fragment and the second auxiliary factor sent by the first device, including: The second device determines, according to the second tag secret fragment and the b2 value, a first part of the second fragment of the intermediate ciphertext; The second device determines the second part of the second fragment of the intermediate ciphertext according to the second characteristic secret fragment and the a2 value sent by the first device; The second device determines the intermediate ciphertext according to the intermediate ciphertext second fragment and the intermediate ciphertext first fragment sent by the first device, including: The second device sums the first part of the second fragment of the intermediate ciphertext with the first part of the first fragment of the intermediate ciphertext sent by the first device to obtain the first part of the intermediate ciphertext; The second device sums the second part of the second fragment of the intermediate ciphertext with the second part of the second fragment of the intermediate ciphertext to obtain the second part of the intermediate ciphertext.

11. The method according to claim 10, characterized in that The third random number c is the product of the first random number a and the second random number b; The first part of the intermediate ciphertext includes a first intermediate ciphertext element corresponding to each user information; The second part of the intermediate ciphertext includes a second intermediate ciphertext element corresponding to each user information; The second device determines a second result shard according to the intermediate ciphertext and the second auxiliary factor, including: The second device performs a multiplication gate calculation according to the second auxiliary factor and a first intermediate ciphertext element and a second intermediate ciphertext element corresponding to the same user information in the intermediate ciphertext to determine a second multiplication slice corresponding to the user information; The second device accumulates the second multiplication slices corresponding to each user information to obtain the second result slice.

12. The method according to claim 11, characterized in that Also includes: The second device receives the quantity of each piece of feature information under the feature dimension sent by the first device; The second device determines, according to the second result slice and the first result slice, a label result corresponding to the characteristic information of the group, including: The second device sums the first result slice and the second result slice to obtain the number of positive samples of the feature information corresponding to the group; The second device determines the number of negative samples of the feature information corresponding to the group according to the number of each feature information under the feature dimension corresponding to the group and the number of positive samples of the feature information corresponding to the group; According to the number of positive samples of the feature information in the group and the number of negative samples of the feature information in the group, a label result corresponding to the feature information of the group is determined.

13. A device for encrypting and transmitting private information, characterized in that: Applicable to a first device having user information; the user information includes feature information of at least one feature dimension; the device includes: The first acquisition unit is used for: for any characteristic dimension, the first device encodes each characteristic information of each user information under the characteristic dimension in groups to obtain encoding information of each group; any group is used to represent the category of the corresponding characteristic information; The first processing unit is used for: for any group of coded information, the first device splits each coded value in the coded information of the group according to a set principle to obtain a first characteristic secret fragment and a second characteristic secret fragment, and sends the second characteristic secret fragment to the second device; the second device has label information corresponding to each user information; the first device determines the intermediate ciphertext first fragment according to the first label secret fragment, the first characteristic secret fragment and the first auxiliary factor sent by the second device; the first device determines the intermediate ciphertext according to the intermediate ciphertext first fragment and the intermediate ciphertext second fragment sent by the second device; the intermediate ciphertext second fragment is the The second device determines the first result slice according to the second label secret slice, the second characteristic secret slice and the second auxiliary factor; the first device determines the first result slice according to the intermediate ciphertext and the first auxiliary factor and sends the first result slice to the second device; the first result slice is used to determine the label result corresponding to the characteristic information of the group with the second result slice generated by the second device; wherein, the first label secret slice and the second label secret slice are obtained by the second device splitting the label information corresponding to the group according to the set principle; the first auxiliary factor and the second auxiliary factor are obtained by splitting the random number sequence according to the set principle.

14. A device for encrypting and transmitting private information, characterized in that: A second device having tag information corresponding to the user information; The second acquisition unit is used for: the second device splits the label information according to the set principle to obtain the first label secret fragment and the second label secret fragment, and sends the first label secret fragment to the first device; the first device has each user information corresponding to the label information; the user information includes feature information of at least one feature dimension; Each feature information under any feature dimension is encoded by grouping to obtain encoding information of each group under any feature dimension; any group is used to represent the category of the corresponding feature information; The second processing unit is used for: the second device determines the second fragment of the intermediate ciphertext according to the second characteristic secret fragment, the second label secret fragment and the second auxiliary factor sent by the first device, and sends the second fragment to the first device; The second device determines the intermediate ciphertext according to the second fragment of the intermediate ciphertext and the first fragment of the intermediate ciphertext sent by the first device; the first fragment of the intermediate ciphertext is determined by the first device according to the first tag information, the first characteristic secret fragment, and the first auxiliary factor; the first characteristic secret fragment and the second characteristic secret fragment are obtained by the first device splitting each encoding value in the encoding information of any group according to a set principle; The second device determines a second result fragment according to the intermediate ciphertext and the second auxiliary factor and receives the first result fragment sent by the first device; The second device determines a label result corresponding to the feature information of the group according to the second result slice and the first result slice.

15. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a program, and when the program is run on a computer, the computer is enabled to implement the method according to any one of claims 1 to 6.

16. A computing device, characterized in that include: Memory for storing computer programs; A processor, configured to call a computer program stored in the memory, and execute the steps of the method according to any one of claims 1 to 6 according to the obtained program.

17. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the steps of the method according to claim 1 are implemented.

Images