Data monitoring method, electronic equipment and computer readable storage medium

Abstract

The invention discloses a data monitoring method, electronic equipment and a computer readable storage medium, and the data monitoring method comprises the steps: responding to a local terminal to obtain to-be-monitored data and matched reference data, obtaining a target key, encrypting the to-be-monitored data through the target key to obtain a first ciphertext, and transmitting the first ciphertext to a server; encrypting the reference data by using the target key to obtain a second ciphertext, and transmitting the first ciphertext and the second ciphertext to the first cloud; encrypting the first ciphertext and the second ciphertext by using the target key and the disturbance parameter to obtain a target ciphertext, and transmitting the target ciphertext to a second cloud; decrypting the target ciphertext by using the decryption key to obtain decrypted data and transmitting the decrypted data to the first cloud; wherein the decryption key corresponds to the target key; and obtaining a monitoring result corresponding to the to-be-monitored data based on the decrypted data and the disturbance parameter. In this way, the security of data monitoring can be improved.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a data monitoring method, an electronic device and a computer-readable storage medium. Background Art

[0002] With the continuous development of intelligence, data monitoring is being used in more and more fields. At present, one way to monitor data is to use smart terminals to store and analyze the collected data to be monitored. This method requires the storage space of smart terminals and consumes a lot of computing costs of smart terminals; or, another way is to send the collected data to be monitored to a cloud server, and the monitoring model deployed on the cloud server stores and monitors the data to be monitored. However, this method is prone to data leakage in the process of uploading the data to be monitored to the cloud server, and has poor security.

[0003] In view of this, how to propose a data monitoring method with high monitoring efficiency and high security has become an urgent problem to be solved. Summary of the invention

[0004] The main technical problem solved by the present application is to provide a data monitoring method, an electronic device and a computer-readable storage medium, which can improve the security of data monitoring.

[0005] To solve the above technical problems, a technical solution adopted in the present application is: to provide a data monitoring method, which is applied to a data monitoring system, and the data monitoring system includes a local terminal, a first cloud and a second cloud, and the data monitoring method includes: in response to the local terminal obtaining the data to be monitored and the reference data matched thereto, obtaining a target key, encrypting the data to be monitored using the target key to obtain a first ciphertext, encrypting the reference data using the target key to obtain a second ciphertext, and transmitting the first ciphertext and the second ciphertext to the first cloud; encrypting the first ciphertext and the second ciphertext using the target key and a disturbance parameter to obtain a target ciphertext and transmitting it to the second cloud; decrypting the target ciphertext using a decryption key to obtain decrypted data and transmitting it to the first cloud; wherein the decryption key corresponds to the target key; based on the decrypted data and the disturbance parameter, obtaining a monitoring result corresponding to the data to be monitored.

[0006] To solve the above technical problems, another technical solution adopted in the present application is: to provide an electronic device, comprising: a memory and a processor coupled to each other, the memory storing program instructions, and the processor being used to execute the program instructions to implement the data monitoring method mentioned in the above technical solution.

[0007] In order to solve the above technical problems, another technical solution adopted in the present application is: providing a computer-readable storage medium on which program instructions are stored, and when the program instructions are executed by a processor, the data monitoring method mentioned in the above technical solution is implemented.

[0008] The beneficial effects of the present application are as follows: Different from the prior art, the data monitoring method proposed in the present application is that the local terminal sends the target key and the encrypted first ciphertext and the second ciphertext to the first cloud, so that the first cloud performs a further round of encryption on the first ciphertext and the second ciphertext using the disturbance parameter to obtain the target ciphertext containing the comparison relationship between the data to be monitored and the reference data. The target ciphertext is sent from the first cloud to the second cloud, so that the second cloud decrypts the target ciphertext to obtain decrypted data containing the disturbance parameter. The decrypted data is processed using the first cloud to obtain the monitoring result. This method makes it impossible for the first cloud and the second cloud to obtain the specific information of the data to be monitored and the reference data during the data monitoring process, which improves the security of data monitoring while saving the cost of data storage and data processing of the local terminal. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. Among them:

[0010] Figure 1 It is a structural schematic diagram of an implementation method of the data monitoring system of the present application;

[0011] Figure 2 It is a flow chart of an implementation method of the data monitoring method of the present application;

[0012] Figure 3 yes Figure 1 Step S101 corresponds to a flow chart of another implementation method;

[0013] Figure 4 yes Figure 1 Step S101 corresponds to a flowchart of another implementation method;

[0014] Figure 5 yes Figure 1 Step S102 corresponds to a flow chart of another implementation method;

[0015] Figure 6 It is a structural schematic diagram of an embodiment of the electronic device of the present application;

[0016] Figure 7It is a structural schematic diagram of an implementation method of a computer-readable storage medium of the present application. DETAILED DESCRIPTION

[0017] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments, and different embodiments can be adaptively combined. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0018] See also Figure 1 , Figure 1 1 is a schematic diagram of a data monitoring system according to an embodiment of the present invention. The data monitoring system includes a local terminal, a first cloud and a second cloud coupled to each other.

[0019] In one implementation scenario, the local terminal includes a collection device and a processing device coupled to each other, the collection device is used to collect the data to be monitored and send the collected data to be monitored to the processing device. The processing device is used to determine matching reference data according to the received data to be monitored.

[0020] The processing device may be a mobile phone, a tablet or a tablet computer, etc. The acquisition device may be a sensor or a smart bracelet, etc.

[0021] In a specific application scenario, the reference data is automatically determined by the processing device according to the data type of the data to be monitored. For example, when the data to be monitored is the actual temperature collected, the reference data is the threshold temperature. Alternatively, the reference data can also be set by the relevant object on the processing device.

[0022] See also Figure 2 , Figure 2 This is a flow chart of an implementation method of the data monitoring method of the present application. The method is applied to a data monitoring system. The specific implementation process includes:

[0023] S101: In response to the local terminal obtaining the data to be monitored and the reference data matched thereto, a target key is obtained, the data to be monitored is encrypted using the target key to obtain a first ciphertext, the reference data is encrypted using the target key to obtain a second ciphertext, and the first ciphertext and the second ciphertext are transmitted to the first cloud.

[0024] In one embodiment, after the local terminal obtains the data to be monitored and the reference data matched thereto, a target key for encrypting the data to be monitored and the reference data is obtained on the processing device. The data to be monitored is encrypted using the target key to obtain a corresponding first ciphertext. And, the reference data is encrypted using the target key to obtain a corresponding second ciphertext. The target key is obtained based on the encryption of multiple target parameters.

[0025] In one implementation scenario, an encryption key is pre-generated on a local terminal, and the encryption key is used to encrypt multiple target parameters to generate the above-mentioned target key.

[0026] Furthermore, the process of obtaining the first ciphertext and the second ciphertext in response to encryption is implemented in the local terminal. After obtaining the first ciphertext and the second ciphertext, the local terminal transmits the first ciphertext, the second ciphertext and the target key to the first cloud.

[0027] In another embodiment, after obtaining the data to be detected and the reference data matched thereto, the local terminal preprocesses the data to be detected and the reference data matched thereto, and encrypts the preprocessed data to be detected and the reference data matched thereto using the target key to obtain the corresponding first ciphertext and second ciphertext. The preprocessing process includes converting the data to be detected and the reference data matched thereto into integers.

[0028] In a specific application scenario, in response to the data to be monitored being 37.5 and its matching reference data being 37.0, in order to facilitate subsequent calculations and improve the accuracy of subsequent data monitoring, the data to be monitored and the reference data are multiplied by 10 respectively, that is, the preprocessed data to be monitored is 375 and the preprocessed reference data is 370.

[0029] S102: Encrypt the first ciphertext and the second ciphertext using the target key and the perturbation parameter to obtain the target ciphertext and transmit it to the second cloud.

[0030] In one embodiment, on the first cloud, a perturbation parameter is determined based on the first ciphertext and the second ciphertext. The first ciphertext and the second ciphertext are jointly encrypted using the target key and the perturbation parameter to obtain a corresponding target ciphertext.

[0031] Furthermore, the generated target ciphertext is sent to the second cloud using the first cloud.

[0032] It should be noted that the target key only encrypts the data, but does not support decryption of the encrypted data; therefore, even if the first cloud obtains the target key, the first ciphertext and the second ciphertext sent by the processing device, it cannot use the target key to decrypt the first ciphertext or the second ciphertext to obtain the corresponding monitored data or reference data.

[0033] S103: Decrypt the target ciphertext using the decryption key to obtain decrypted data and transmit it to the first cloud; wherein the decryption key corresponds to the target key.

[0034] In one embodiment, on the second cloud, the target ciphertext sent by the first cloud is decrypted according to the decryption key to obtain corresponding decrypted data, wherein the decryption key is determined based on the encryption key used to generate the target key, and the decrypted data includes amplitude information between the data to be monitored and the reference data.

[0035] Furthermore, the decrypted data is transmitted to the first cloud using the second cloud.

[0036] S104: Based on the decrypted data and the disturbance parameters, a monitoring result corresponding to the data to be monitored is obtained.

[0037] In one implementation, the first cloud receives the decrypted data sent by the second cloud, and uses the first cloud to analyze the decrypted data according to the disturbance parameters to determine the corresponding monitoring results.

[0038] In one implementation scenario, in response to the decrypted data including amplitude information between the data to be monitored and the reference data, the first cloud is used to analyze the decrypted data according to the disturbance parameters to determine the correspondence of the amplitude information, thereby obtaining a monitoring result based on the amplitude information.

[0039] Furthermore, after obtaining the monitoring result, the first cloud is used to determine whether the monitoring result meets the preset alarm condition.

[0040] Specifically, in response to the monitoring result meeting the preset alarm condition, the first cloud sends the monitoring result to the processing device; and after receiving the monitoring result, the processing device issues an alarm according to the monitoring result. Alternatively, in response to the monitoring result not meeting the preset alarm condition, the processing device continues to acquire the data to be monitored collected by the collection device, and the subsequent steps are performed in sequence to determine whether the subsequently collected data to be monitored meets the preset alarm condition.

[0041] The data monitoring method proposed in the present application is that the local terminal sends the target key and the encrypted first ciphertext and the second ciphertext to the first cloud, so that the first cloud performs a further round of encryption on the first ciphertext and the second ciphertext using the disturbance parameter to obtain the target ciphertext containing the comparison relationship between the data to be monitored and the reference data. The target ciphertext is sent from the first cloud to the second cloud, so that the second cloud decrypts the target ciphertext to obtain decrypted data containing the disturbance parameter. The decrypted data is processed using the first cloud to obtain the monitoring result. This method makes it impossible for the first cloud and the second cloud to obtain the specific information of the data to be monitored and the reference data during the data monitoring process, which saves the cost of data storage and data processing of the local terminal and improves the security of data monitoring.

[0042] See also Figure 3 , Figure 3 yes Figure 1 Step S101 in the flowchart corresponds to another embodiment. Specifically, in response to the local terminal including a collection device and a processing device, the process of obtaining the target key in step S101 includes:

[0043] S201: Acquire a first target parameter and a second target parameter.

[0044] In one embodiment, a first target parameter and a second target parameter are obtained on a processing device, wherein the second target parameter is used to determine a comparison relationship between the data to be monitored and the reference data.

[0045] In a specific application scenario, the first target parameter is 0 and the second target parameter is -1.

[0046] S202: encrypting the first target parameter multiple times using a processing device to obtain multiple first weights; and encrypting the second target parameter using a processing device to obtain a second weight.

[0047] In one embodiment, on a processing device, a first target parameter is encrypted multiple times using a symmetric homomorphic encryption (SHE) algorithm, and a corresponding first weight is obtained after each encryption; and a second target parameter is encrypted using the symmetric homomorphic encryption algorithm to obtain a corresponding second weight.

[0048] In one implementation scenario, an encryption key corresponding to a symmetric homomorphic encryption algorithm is pre-determined using a processing device, and a first target parameter is encrypted using the encryption key to obtain a corresponding first weight; and a second target parameter is encrypted using the encryption key to obtain a corresponding second weight.

[0049] Specifically, multiple initial parameters matching the above symmetric homomorphic encryption algorithm are predetermined, and the initial parameters include security parameters (k0, k1, k2), and the security parameters satisfy k0<<k1<k2. In addition, the above initial parameters also include two reference prime numbers and a random coefficient. According to the reference prime number and the random coefficient, the encryption key corresponding to the symmetric homomorphic encryption algorithm is determined. Among them, p and q are two reference prime numbers, and the bit lengths of p and q are both k0. is a random number with a bit length of k2.

[0050] In a specific implementation scenario, the specific calculation formula for the first target parameter or the second target parameter using the encryption key is as follows:

[0051]

[0052] Wherein, x represents the first target parameter or the second target parameter, and when x represents the first target parameter, E(x) represents the first weight obtained after encryption; r and r′ represent random coefficients, and represents the product of the reference prime number p and the reference prime number q; mo d represents the remainder function.

[0053] It should be noted that due to the difference in random coefficients in different encryption rounds, even if the same data is encrypted, the weights obtained are different. For example, when the first target parameter is 0, the first target parameter is encrypted multiple times using the above encryption key, and the first weights obtained are different.

[0054] In addition, after the encryption key is determined on the processing device, the encryption key is sent to the second cloud as a decryption key by the processing device to help the second cloud to decrypt related data according to the decryption key.

[0055] S203: Determine a target key based on the first weight and the second weight.

[0056] In one implementation, the first weight and the second weight obtained after encryption are used as the target key.

[0057] In a specific application scenario, in step S202, the first target parameter is 0, the second target parameter is -1, and the first target parameter is encrypted twice using the encryption key to obtain the first weight E(0)1 and the first weight E(0)2; and the second target parameter is encrypted once using the encryption key to obtain the second weight E(-1). Based on the obtained first weight and second weight, the target key is determined to be pk=[E(0)1, E(0)2, E(-1)].

[0058] The above scheme determines different first weights according to the first target parameter 0 and determines the second weights according to the second target parameter -1, so that the relevant data is subsequently encrypted according to the first weights, and the comparison relationship between the data to be monitored and the reference data is determined by the second weights, thereby avoiding the leakage of the data to be monitored during the data monitoring process and improving the security of data monitoring.

[0059] See also Figure 4 , Figure 4 yes Figure 1 Step S101 in the flowchart corresponds to another embodiment. Specifically, the implementation process of encrypting the monitored data on the processing device to obtain the first ciphertext in step S101 includes:

[0060] S301: Obtain a first encryption parameter and a second encryption parameter, and use a processing device to obtain a first reference sub-ciphertext based on the first encryption parameter and a current first weight; and use a processing device to obtain a second reference sub-ciphertext based on the second encryption parameter and other first weights.

[0061] In one embodiment, after determining the target key, the first encryption parameter and the second encryption parameter are determined, and the first weight, the first encryption parameter and the second encryption parameter in the target key are used to obtain the first reference sub-ciphertext and the second reference sub-ciphertext.

[0062] Specifically, in response to encrypting the first target parameter twice and obtaining the corresponding first weights respectively through the steps mentioned in the above corresponding implementation mode, the product of the first encryption parameter and one of the first weights is obtained and used as the first reference sub-ciphertext; and, the product of the second encryption parameter and the other first weight is obtained, and the second reference sub-ciphertext is determined according to the product.

[0063] S302: Enable the processing device to obtain a first ciphertext according to the data to be monitored, the first reference sub-ciphertext and the second reference sub-ciphertext.

[0064] In one implementation, the processing device uses the sum of the data to be monitored, the first reference sub-ciphertext, and the second reference sub-ciphertext as the first ciphertext.

[0065] In a specific application scenario, the specific calculation formula of the first ciphertext is as follows:

[0066]

[0067] Wherein, m1 represents the data to be monitored, E(m1) represents the first ciphertext, r1 represents the first encryption parameter, and r2 represents the second encryption parameter, and k2 and The value of can refer to the value of the relevant parameters in the above step S202. Among them, since the symmetric homomorphic encryption algorithm satisfies multiple operational properties, such as: E(m1)+E(m2)=E(m1+m2); E(m1)*E(m2)=E(m1*m2); E(m1)+m2=E(m1+m2); E(m1)*m2=E(m1*m2), therefore, the first ciphertext encrypted by the above process will not affect the monitoring data itself.

[0068] In addition, the process of encrypting the reference data on the processing device in step S101 to obtain the second ciphertext is similar to the process of obtaining the first ciphertext. The detailed process can refer to the above steps S301 to S302, and will not be explained in detail here.

[0069] See also Figure 5 , Figure 5 yes Figure 1 Step S102 in the flowchart corresponds to another implementation. The disturbance parameter includes a first random parameter and at least one second random parameter, and the first random parameter is selected from the first candidate parameter and the second candidate parameter. The specific implementation process of step S102 includes:

[0070] S401: Obtain a variation range ciphertext based on a target key, a first ciphertext and a second ciphertext.

[0071] In one implementation, on the first cloud, a first product of the second weight and the second ciphertext is obtained.

[0072] Furthermore, the sum of the first ciphertext and the first product is used as the variation range ciphertext by using the first cloud, wherein the variation range ciphertext is used to represent the difference between the encrypted data to be monitored and the reference data.

[0073] In a specific application scenario, in order to realize the monitoring of the monitored data, it is necessary to determine the comparison relationship between the monitored data and the reference data. Since the second weight is obtained by encrypting the second target parameter -1, the specific calculation formula of the change range ciphertext is as follows:

[0074] f=E(T)+E(H)·E(-1)

[0075] Among them, f represents the change amplitude ciphertext, E(T) represents the first ciphertext, E(H) represents the second weight, and E(-1) represents the second ciphertext.

[0076] S402: For any second random parameter, based on the first random parameter, the second random parameter and the target key, obtain a target encryption weight.

[0077] In one embodiment, the perturbation parameter includes a first random parameter and at least one second random parameter, and the first random parameter is selected from a first candidate parameter and a second candidate parameter that are opposite to each other. For each second random parameter, the first cloud is used to obtain a second product of the first random parameter and the second random parameter, and the first cloud is used to encrypt the second product using the first weight to obtain a target encryption weight.

[0078] In one implementation scenario, the perturbation parameters include a first random parameter and two predetermined second random parameters, and the first random parameter is randomly determined from the first candidate parameter -1 and the second candidate parameter 1, that is, the first random parameter is -1 or 1. For each second random parameter, the specific calculation formula of the target encryption weight is as follows:

[0079]

[0080] Wherein, s represents a first random parameter, t1 represents one of the second random parameters, and t2 represents another second random parameter. And t1>t2>0; E(s·t1) and E(s·t2) respectively represent the target encryption weights obtained according to the corresponding second random parameters.

[0081] S403: Based on the change range ciphertext and the target encryption weight, the target ciphertext is obtained, and the target ciphertext is transmitted to the second cloud.

[0082] In one embodiment, in response to obtaining the target encryption weights corresponding to two different second random parameters respectively through step S402, a third product of one of the target encryption weights and the variation amplitude ciphertext is obtained, the sum of the third product and the other target encryption weight is taken as the target ciphertext, and the target ciphertext is transmitted to the second cloud.

[0083] Specifically, the specific calculation formula of the target ciphertext is as follows:

[0084] E(λ)=E(s·t1)·(E(T)+E(H)·E(-1))+E(s·t2)

[0085] Where E(λ) represents the target ciphertext.

[0086] In another embodiment, the number of the second random parameters may be other numbers, such as three or four.

[0087] In the above solution, by selecting any one of two candidate parameters that are opposite to each other as the first random parameter, after the subsequent second cloud decrypts the target ciphertext, without knowing the specific value of the first random parameter, it is impossible to determine the magnitude relationship between the data to be monitored and the reference data, thereby ensuring the security during the data monitoring process. Additionally, by setting multiple second random parameters, the difficulty of encrypting the first ciphertext and the second ciphertext is increased, which helps to improve the security of data monitoring.

[0088] In one embodiment, in response to obtaining the target ciphertext through steps S401 to S403 and transmitting it to the second cloud, then Figure 1 The specific implementation process of step S103 in [document] includes: On the second cloud, according to the decryption key received by the second cloud and various operation properties satisfied by the symmetric homomorphic encryption algorithm mentioned in the above corresponding embodiments, decrypt the target ciphertext obtained in step S403 to obtain the corresponding decrypted data, and transmit the decrypted data to the first cloud. Among them, the specific expression formula of the decrypted data obtained after decryption is as follows:

[0089] λ = s·t1·(T - H) + s·t2

[0090] Where λ represents the decrypted data. Since the first cloud does not transmit the perturbation parameter to the second cloud when transmitting the target ciphertext to the second cloud, even if the second cloud decrypts the target ciphertext to obtain the decrypted data, it is impossible to determine the specific value of the data to be monitored or the reference data through the decrypted data, nor can it determine the specific value of the difference between the data to be monitored and the reference data, improving the security of data transmission in the cloud.

[0091] Furthermore, after transmitting the decrypted data to the first cloud, Figure 1 The specific implementation process of step S104 in [document] includes: enabling the first cloud to determine the monitoring result according to the amplitude information in the first random parameter and the decrypted data. Among them, the amplitude information is used to represent the difference between the data to be monitored and the reference data.

[0092] Specifically, since t1 > t2 > 0, the first cloud determines the comparison relationship between the data to be monitored and the reference data according to the specific value of the first random parameter, that is, determines the magnitude relationship between the data to be monitored and the reference value. For example, when the first random parameter is -1, if λ is greater than 0, it indicates that T < H; if λ is less than 0, then T ≥ H. Or, when the first random parameter is 1, if λ is greater than 0, it indicates that T ≥ H; if λ is less than 0, then T < H. This method enables the first cloud to determine whether (T - H) is 0, a positive number, or a negative number according to the first random parameter and the decrypted data, so as to realize the judgment of the magnitude relationship between the two without determining the specific values of the data to be monitored and the reference data, reducing the risk of leakage during data transmission.

[0093] In one implementation scenario, T≥H in the monitoring result is used as satisfying the preset alarm condition. In response to the monitoring result satisfying the preset alarm condition, it indicates that the value of the data to be monitored is high, so that the first cloud sends the monitoring result to the processing device and issues an alarm through the processing device.

[0094] In a specific application scenario, the monitored data T is temperature, and the reference data H is the threshold temperature. When the monitoring result shows that the monitored data T is greater than the reference data H, it is determined that the monitoring result meets the preset alarm condition, so that the first cloud sends the monitoring result to the processing device, and the processing device sends an alarm signal. The processing device can transmit the alarm signal by emitting a corresponding alarm audio; or the processing device can display relevant information on the display interface to transmit the alarm signal.

[0095] In another embodiment, the first target parameter may be encrypted multiple times using an encryption key to obtain a corresponding number of first weights, and the second target parameter may be encrypted once using the encryption key to obtain a second weight. For example, the first target parameter is encrypted three times, and the target key obtained is pk=[E(0)1, E(0)2, E(0)3, E(-1)]. Based on this, the specific calculation formula of the first ciphertext in step S302 can be as follows:

[0096]

[0097] The above scheme obtains multiple first weights by encrypting the first target parameter multiple times to increase the encryption difficulty, thereby improving the security of data monitoring.

[0098] In another embodiment, the disturbance parameter includes a first random parameter and a second random parameter, and the second random parameter is selected from the first candidate parameter and the second candidate parameter, and the specific implementation process of step S102 includes: obtaining a variation amplitude ciphertext based on the target key, the first ciphertext and the second ciphertext. The specific implementation process can refer to the above corresponding embodiment.

[0099] Further, based on the first random parameter, the second random parameter and the target key, a target encryption weight is obtained. Based on the variation range ciphertext and the target encryption weight, a target ciphertext is obtained, and the target ciphertext is transmitted to the second cloud.

[0100] Specifically, the product of the target encryption weight and the change amplitude ciphertext is obtained, the product is used as the target ciphertext, and the target ciphertext is transmitted to the second cloud. Among them, the specific calculation formula of the target ciphertext in this embodiment is as follows:

[0101] E(λ)=E(s·t1)·(E(T)+E(H)·E(-1))

[0102] In the above solution, only one determined second random parameter is used to encrypt the first ciphertext and the second ciphertext to obtain the target ciphertext, which helps to improve the acquisition efficiency of the target ciphertext.

[0103] In another embodiment, to improve the data monitoring efficiency and save the consumption of computing resources, the above perturbation parameter may also only include the first random parameter. Based on this, the specific implementation process of step S102 includes: obtaining the change amplitude ciphertext based on the target key, the first ciphertext, and the second ciphertext. The specific implementation process may refer to the corresponding above embodiment.

[0104] Further, based on the first random parameter, obtain the target encryption weight. Where when the target key is pk = [E(0)1, E(0)2, E(-1)|, the specific calculation formula of the target encryption weight is as follows:

[0105]

[0106] Further, based on the change amplitude ciphertext and the target encryption weight, obtain the target ciphertext, and transmit the target ciphertext to the second cloud. Where the specific calculation formula of the target ciphertext is as follows:

[0107] E(λ) = E(s)·(E(T)+E(H)·E(-1))

[0108] Further, the second cloud decrypts the target ciphertext, and the expression formula of the decrypted data after decryption is λ = s.(T - H). Transmit this decrypted data to the first cloud. Enable the first cloud to determine the monitoring result according to the first random parameter and the amplitude information in the decrypted data. For example, when the first random parameter is -1, if λ is greater than 0, it indicates that T < H; if λ is less than or equal to 0, then T ≥ H. Or, when the first random parameter is 1, if λ is greater than or equal to 0, it indicates that T ≥ H; if λ is less than 0, then T < H.

[0109] Please refer to Figure 6 , Figure 61 is a schematic diagram of the structure of an embodiment of an electronic device of the present application. The electronic device comprises: a memory 10 and a processor 20 coupled to each other. The memory 10 stores program instructions, and the processor 20 is used to execute the program instructions to implement the data monitoring method mentioned in any of the above embodiments. Specifically, the electronic device includes but is not limited to: a desktop computer, a laptop computer, a tablet computer, a server, etc., which are not limited here. In addition, the processor 20 can also be referred to as a CPU (Center Processing Unit). The processor 20 may be an integrated circuit chip with signal processing capabilities. The processor 20 may also be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field-programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. In addition, the processor 20 may be implemented by an integrated circuit chip.

[0110] See also Figure 7 , Figure 7 The storage medium 30 stores program instructions 40 that can be executed by a processor, and when the program instructions 40 are executed by the processor, the data monitoring method mentioned in any of the above embodiments is implemented.

[0111] In the several embodiments provided in the present application, it should be understood that the disclosed methods and devices can be implemented in other ways. For example, the device implementation described above is only schematic. For example, the division of modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

[0112] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0113] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0114] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) or a processor (processor) to perform all or part of the steps of each implementation method of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program code.

[0115] The above description is only an implementation method of the present application, and does not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly used in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A data monitoring method, characterized in that: The data monitoring method is applied to a data monitoring system, the data monitoring system includes a local terminal, a first cloud and a second cloud, and the data monitoring method includes: In response to the local terminal obtaining the data to be monitored and the reference data matched thereto, obtaining a target key, encrypting the data to be monitored using the target key to obtain a first ciphertext, encrypting the reference data using the target key to obtain a second ciphertext, and transmitting the first ciphertext and the second ciphertext to the first cloud; Using the target key and the perturbation parameter, encrypt the first ciphertext and the second ciphertext to obtain the target ciphertext and transmit it to the second cloud; Decrypting the target ciphertext using a decryption key to obtain decrypted data and transmitting the decrypted data to the first cloud; wherein the decryption key corresponds to the target key; Based on the decrypted data and the disturbance parameter, a monitoring result corresponding to the data to be monitored is obtained.

2. The method according to claim 1, characterized in that The local terminal includes a collection device and a processing device, and the obtaining of the target key includes: Obtaining a first target parameter and a second target parameter; encrypting the first target parameter multiple times using the processing device to obtain multiple first weights; and encrypting the second target parameter using the processing device to obtain a second weight; Based on the first weight and the second weight, the target key is determined.

3. The method according to claim 2, characterized in that The step of encrypting the data to be monitored by using the target key to obtain a first ciphertext includes: Obtaining a first encryption parameter and a second encryption parameter, obtaining a first reference sub-ciphertext using the processing device according to the first encryption parameter and a current first weight; and obtaining a second reference sub-ciphertext using the processing device according to the second encryption parameter and other first weights; The processing device is enabled to obtain the first ciphertext according to the data to be monitored, the first reference sub-ciphertext and the second reference sub-ciphertext.

4. The method according to claim 2, characterized in that: The perturbation parameter includes a first random parameter and at least one second random parameter, the first random parameter is selected from a first candidate parameter and a second candidate parameter, and the first ciphertext and the second ciphertext are encrypting by using the target key and the perturbation parameter to obtain the target ciphertext and transmit it to the second cloud, including: Based on the target key, the first ciphertext and the second ciphertext, obtaining a variation range ciphertext; and For any of the second random parameters, obtaining a target encryption weight based on the first random parameter, the second random parameter and the target key; Based on the change amplitude ciphertext and the target encryption weight, the target ciphertext is obtained, and the target ciphertext is transmitted to the second cloud.

5. The method according to claim 4, characterized in that The obtaining the variation range ciphertext based on the target key, the first ciphertext and the second ciphertext includes: Obtaining, using the first cloud, a first product of the second weight and the second ciphertext; The first cloud is used to calculate the sum of the first ciphertext and the first product as the variation amplitude ciphertext.

6. The method according to claim 4, characterized in that The acquiring, for any of the second random parameters, a target encryption weight based on the first random parameter, the second random parameter and the target key, comprises: Obtaining, using the first cloud, a second product of the first random parameter and the second random parameter; The first cloud is enabled to encrypt the second product using the first weight to obtain the target encryption weight.

7. The method according to claim 4, characterized in that The obtaining, based on the decrypted data and the disturbance parameter, a monitoring result corresponding to the data to be monitored, comprises: The first cloud determines the monitoring result according to the first random parameter and the amplitude information in the decrypted data; wherein the amplitude information is used to characterize the difference between the data to be monitored and the reference data.

8. The method according to claim 7, characterized in that After obtaining the monitoring result corresponding to the data to be monitored based on the decrypted data and the disturbance parameter, the method further comprises: In response to the monitoring result satisfying a preset alarm condition, the first cloud sends the monitoring result to the processing device.

9. An electronic device, characterized in that: include: A memory and a processor coupled to each other, wherein the memory stores program instructions, and the processor is used to execute the program instructions to implement the data monitoring method as described in any one of claims 1-8.

10. A computer-readable storage medium having program instructions stored thereon, characterized in that: When the program instructions are executed by a processor, the data monitoring method according to any one of claims 1 to 8 is implemented.

Images