Data anonymization transmission method, system and device based on data hosting

Abstract

The invention discloses a data anonymization transmission method, system and device based on data hosting, and relates to the data anonymization transmission system based on data hosting, which comprises a data party privacy computing platform used for hosting data of a data party obtained after data desensitization processing; wherein the data desensitization processing is to clean sensitive data according to an encryption rule of a data party; the data operation trusteeship platform is used for trusteeship of the encryption rule of the data party and pushing the encryption rule of the data party to the demand party privacy computing platform; and the demand side privacy computing platform is used for encrypting sensitive information in data of the demand side according to the encryption rule of the data side, storing a plaintext and ciphertext mapping relation table, decrypting a computing result obtained by the data side privacy computing platform according to the plaintext and ciphertext mapping relation table, and transmitting the decrypted computing result to the demand side privacy computing platform. And the demand side obtains a final decryption result.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a data anonymization transmission method, system and device based on data hosting. Background Art

[0002] With the rapid development of information network technology, a series of large-scale data leakage incidents have occurred, such as personal identity information, credit card data, etc., which have had a negative impact on the reputation of individuals and organizations. This has led to an increasing concern among users about personal privacy. Enterprises and organizations are also increasingly inclined to adopt cloud computing services, which allows data to be stored and processed in the cloud. Cloud security has become a key issue, and it is necessary to consider the protection of data during transmission and storage.

[0003] The existing technical solutions for secure data transmission have the following problems:

[0004] Plain text transmission interaction. When data is transmitted in the form of API calls without desensitization or encryption, data is transmitted in plain text on the network, which is vulnerable to man-in-the-middle attacks. The lack of end-to-end encryption may cause sensitive information to be eavesdropped or tampered with during transmission. At this stage, a series of data leakage problems have already occurred.

[0005] Original data replication. The demander copies the data from the original database of the data provider to the target database. The copied data may contain sensitive information, which results in the data not being unilaterally controllable and a greater risk of data leakage. Currently, this method is no longer in compliance with laws and regulations.

[0006] In view of the above technical problems, the present invention proposes a data anonymization transmission method, system and device based on data hosting. Summary of the invention

[0007] The purpose of the present invention is to address the defects of the prior art and provide a data anonymization transmission method, system and device based on data hosting, which realizes non-plaintext calculation and anonymous transmission of data through data encryption technology and privacy computing platform, and effectively avoids the risk of data leakage in data interaction.

[0008] In order to achieve the above purpose, the present invention adopts the following technical solutions:

[0009] A data anonymization transmission system based on data hosting, including a data party privacy computing platform, a data operation hosting platform, and a demand party privacy computing platform;

[0010] The data party privacy computing platform is used to host the data party's own data after data desensitization processing; data desensitization processing is to clean sensitive data according to the encryption rules of the data party;

[0011] The data operation hosting platform is used to host the encryption rules of the data party and also push the encryption rules of the data party to the privacy computing platform of the demand party;

[0012] The demander's privacy computing platform is used to encrypt the sensitive information in the demander's own data according to the data party's encryption rules, and store the plaintext and ciphertext mapping table. It also decrypts the calculation results obtained by the data party's privacy computing platform according to the plaintext and ciphertext mapping table, and the demander obtains the final decryption result.

[0013] Furthermore, the data party privacy computing platform entrusts the data party's own data obtained after data desensitization processing as follows:

[0014] The data party desensitizes and cleans the sensitive data in its own data based on the data party's encryption rules, and imports the desensitized data into the data party's intermediate library. The data party's intermediate library sends the imported desensitized data to the data party's privacy computing platform, and the data party's privacy computing platform hosts the desensitized data.

[0015] Furthermore, the demander's privacy computing platform is also used to send the demander's privacy computing request to the data operation hosting platform.

[0016] Furthermore, the data operation hosting platform is also used to send the privacy computing request of the demander to the privacy computing platform of the data party.

[0017] Furthermore, the data party privacy computing platform processes the privacy computing request of the demand party and sends the processing calculation results to the data operation hosting platform.

[0018] Furthermore, the data operation hosting platform is also used to send the calculation results to the demand-side privacy computing platform.

[0019] Accordingly, a data anonymization transmission method based on data hosting is also provided, including:

[0020] S1. The data party desensitizes and cleanses the sensitive data in its own data based on the data party's encryption rules, and imports the desensitized data into the data party's intermediate database;

[0021] S2. The data-party privacy computing platform hosts the anonymized data in the data-party intermediate library;

[0022] S3. The data operation hosting platform hosts the encryption rules of the data party;

[0023] S4. When the demander applies to use data, the data operation hosting platform pushes the encryption rules of the data party to the demander's privacy computing platform;

[0024] S5. The demander’s privacy computing platform encrypts the sensitive information in the demander’s own data according to the data party’s encryption rules, and stores a plaintext and ciphertext mapping relationship table.

[0025] Furthermore, after step S5, the following steps are further included:

[0026] S6. The privacy computing of the demand side sends the privacy computing request of the demand side to the data operation hosting platform;

[0027] S7. The data operation hosting platform sends the privacy computing request of the demander to the privacy computing platform of the data party;

[0028] S8. The data party privacy computing platform processes the privacy computing request of the demand party and sends the calculated result to the data operation hosting platform;

[0029] S9. The data operation hosting platform sends the calculation results to the privacy computing platform of the demand side;

[0030] S10. The demander's privacy computing platform decrypts the calculation results according to the plaintext and ciphertext mapping table, and the demander obtains the final decrypted results.

[0031] Correspondingly, a data anonymization transmission device based on data hosting is also provided, comprising a processor, wherein the processor executes the data anonymization transmission system based on data hosting.

[0032] Furthermore, the processor is connected to a memory for storing data or instructions.

[0033] Compared with the prior art, the present invention has the following beneficial effects:

[0034] 1. The privacy computing platform only connects to the intermediate library that stores desensitized and encrypted data. If the privacy computing platform is attacked by a network, the connection information will not be leaked, which will not lead to the leakage of plaintext data.

[0035] 2. Even if a cyber attack occurs, resulting in a database leak, the data stored in the database is not in plain text due to the use of end-to-end encryption and data desensitization solutions during the transmission process. Attackers cannot directly obtain sensitive information because the stored data has been desensitized and encrypted.

[0036] 3. The data and encryption rules in the database are designed as two separate components. Even if an attacker has access to the database, they cannot directly obtain the encryption rules. This design makes it more difficult for attackers to interpret and abuse the leaked data, because understanding the meaning of the data requires understanding the corresponding encryption rules.

[0037] 4. Even if an attacker can obtain the encrypted data in the database, due to the lack of encryption rules, the data cannot be restored to readable plain text for the attacker. The existence of encryption rules is the key to ensuring data security, and these rules are not stored in the same place, making it difficult for attackers to restore encrypted data to meaningful information. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 This is a structural diagram of a data anonymization transmission system based on data hosting provided in Example 1;

[0039] Figure 2 It is a schematic diagram of the data block provided in Example 1;

[0040] Figure 3 This is a schematic diagram of the demand side provided in Example 1;

[0041] Figure 4 This is a schematic diagram of a privacy computing request initiated by a demander provided in Example 1. DETAILED DESCRIPTION

[0042] The following describes the embodiments of the present invention by specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict.

[0043] The purpose of the present invention is to address the defects of the prior art and provide a data anonymization transmission method, system and device based on data hosting.

[0044] Embodiment 1

[0045] This embodiment provides a data anonymization transmission system based on data hosting, such as Figure 1 As shown, it includes data parties, data operation hosting platforms, and demand parties.

[0046] The data cube involves the data cube database, data cube intermediate library, and data cube privacy computing platform, such as Figure 2 As shown; the demand side involves the demand side database and the demand side privacy computing platform, such as Figure 3 shown.

[0047] The data cube database stores the corresponding data. The data cube will desensitize and clean the sensitive data stored in the data cube database according to the encryption rules, and then import it into the data cube intermediate library. The data cube intermediate library only stores the desensitized data and does not store any plaintext data. The encryption rules can be digest algorithms or other algorithms. The encryption rules are used to convert input data into output data that meets certain characteristics. For example, MD5 and SHA256 can convert any data into output of a specific length; for personal identity information, the data cube can use the encryption rules of the SHA256 algorithm to convert the name and ID number into a 256-bit hash value.

[0048] The data party privacy computing platform hosts the anonymized data stored in the data party's intermediate library, and all subsequent data service calculations need to be performed on the data party privacy computing platform.

[0049] The data party re-encrypts its own encryption rules to obtain an encrypted file, and uploads the encrypted file to the data operation hosting platform. The data operation hosting platform hosts the encryption rules of the data party. For example, the data party can define an encryption key for each data field and use the key to encrypt the data; the operator of the data operation hosting platform will push the encrypted file to the privacy computing platform of the demand party as needed. In this embodiment, the encryption rules are encrypted again, for example: the encryption salt value of MD5 is processed by RSA2048, and then the data is encrypted into a non-plaintext data file.

[0050] In this embodiment, the encrypted data and encryption rules are stored on different platforms, that is, the data and encryption rules in the data party database are designed as two separate components, which increases the difficulty for attackers to interpret and abuse the leaked data; even if the attacker can obtain the encrypted data in the database, due to the lack of encryption rules, these data cannot be restored to readable plaintext for the attacker.

[0051] In this embodiment, when the data party privacy computing platform is attacked by a network attack, since the data party privacy computing platform is only connected to the data party intermediate library that stores desensitized encrypted data, the leakage of connection information will not lead to the leakage of plaintext data; and even if the data party database is attacked and causes data leakage, due to the use of end-to-end encryption and data desensitization solutions, the attacker cannot directly obtain sensitive information.

[0052] When the demander applies to use the data of the data owner, the operator of the data operation hosting platform will actively trigger the data operation hosting platform to push the encryption rules of the data owner to the demander, so that the demander can encrypt its own data according to the encryption rules of the data owner to align the labels. Specifically:

[0053] The demander selects the corresponding data party encryption rule in the data operation hosting platform based on the demander's privacy computing platform. The demander's privacy computing platform adopts the data party encryption rule to encrypt the sensitive data stored in the demander's database, so that the labels of the data party and the demander's data are aligned, and the calculation result can be obtained, where the calculation result is the demander's plaintext data encrypted using the same encryption rule as the data party; and the plaintext and ciphertext mapping relationship table is stored locally so that the original value of the label can be replaced after the result is obtained. The data obtained is encrypted data, and the plaintext data needs to be replaced in the plaintext and ciphertext mapping table, that is, the original value.

[0054] In this embodiment, label alignment is to push the encryption rules of the data party to the demand party side, so that the data of the demand party is also encrypted using the same encryption rules, so that the encrypted results of plaintext data with the same value can be the same.

[0055] like Figure 4 The figure shows a schematic diagram of a privacy computing request initiated by a demander.

[0056] The demander initiates a privacy computing request to the data operation hosting platform based on the demander's privacy computing platform.

[0057] The data operation hosting platform forwards the privacy computing request sent by the demand-side privacy computing platform to the data-side privacy computing platform.

[0058] The data party's privacy computing platform performs calculations locally based on privacy computing requests, where local calculations include multi-party secure computing, federated learning computing, etc. performed in the current privacy computing node, and sends the calculation results to the data operation hosting platform. The data operation hosting platform returns the received calculation results to the data party's privacy computing platform. The demander obtains the calculation results, and the demander decrypts the obtained calculation results according to the plaintext and ciphertext mapping table stored locally, that is, replaces the plaintext data results in the plaintext and ciphertext relationship mapping table with the obtained ciphertext data, and the data party can obtain the final calculation results.

[0059] This embodiment has the following beneficial effects:

[0060] 1. The privacy computing platform only connects to the intermediate library that stores desensitized and encrypted data. If the privacy computing platform is attacked by a network, the connection information will not be leaked, which will not lead to the leakage of plaintext data.

[0061] 2. Even if a cyber attack occurs, resulting in a database leak, the data stored in the database is not in plain text due to the use of end-to-end encryption and data desensitization solutions during the transmission process. Attackers cannot directly obtain sensitive information because the stored data has been desensitized and encrypted.

[0062] 3. The data and encryption rules in the database are designed as two separate components. Even if an attacker has access to the database, they cannot directly obtain the encryption rules. This design makes it more difficult for attackers to interpret and abuse the leaked data, because understanding the meaning of the data requires understanding the corresponding encryption rules.

[0063] 4. Even if an attacker can obtain the encrypted data in the database, due to the lack of encryption rules, the data cannot be restored to readable plain text for the attacker. The existence of encryption rules is the key to ensuring data security, and these rules are not stored in the same place, making it difficult for attackers to restore encrypted data to meaningful information.

[0064] Accordingly, this embodiment also provides a data anonymization transmission method based on data hosting, including:

[0065] S1. The data party desensitizes and cleanses the sensitive data in its own data based on the data party's encryption rules, and imports the desensitized data into the data party's intermediate database;

[0066] S2. The data-party privacy computing platform hosts the anonymized data in the data-party intermediate library;

[0067] S3. The data operation hosting platform hosts the encryption rules of the data party;

[0068] S4. When the demander applies to use data, the data operation hosting platform pushes the encryption rules of the data party to the demander's privacy computing platform;

[0069] S5. The privacy computing platform of the demander encrypts the sensitive information in the demander's own data according to the encryption rules of the data party, and stores the plaintext and ciphertext mapping relationship table;

[0070] S6. The privacy computing of the demand side sends the privacy computing request of the demand side to the data operation hosting platform;

[0071] S7. The data operation hosting platform sends the privacy computing request of the demander to the privacy computing platform of the data party;

[0072] S8. The data party privacy computing platform processes the privacy computing request of the demand party and sends the calculated result to the data operation hosting platform;

[0073] S9. The data operation hosting platform sends the calculation results to the privacy computing platform of the demand side;

[0074] S10. The demander's privacy computing platform decrypts the calculation results according to the plaintext and ciphertext mapping table, and the demander obtains the final decrypted results.

[0075] Embodiment 2

[0076] This embodiment provides a data anonymization transmission device based on data hosting, including a processor, and the processor executes a data anonymization transmission system based on data hosting according to the first embodiment.

[0077] The processor described in this embodiment may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0078] The processor described in the present embodiment is connected with a memory for storing data or instructions. The memory may include a large capacity memory for data or instructions. For example, but not limitation, the memory may include a hard disk drive (HDD), a floppy disk drive, a solid state drive (SSD), a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory may be inside or outside the data processing device. In a specific embodiment, the memory is a non-volatile memory. In a specific embodiment, the memory includes a read-only memory (ROM) and a random access memory (RAM). Where appropriate, the ROM may be a mask-programmed ROM, a programmable ROM (Programmable Read-Only Memory, PROM for short), an erasable PROM (Erasable Programmable Read-Only Memory, EPROM for short), an electrically erasable PROM (Electrically Erasable Programmable Read-Only Memory, EEPROM for short), an electrically alterable ROM (Electrically Alterable Read-Only Memory, EAROM for short) or a flash memory (FLASH) or a combination of two or more of these. Under appropriate circumstances, the RAM can be a static random access memory (SRAM) or a dynamic random access memory (DRAM), wherein the DRAM can be a fast page mode dynamic random access memory (FPMDRAM), an extended data output dynamic random access memory (EDODRAM), a synchronous dynamic random access memory (SDRAM), etc.

[0079] The memory can be used to store or cache various data files that need to be processed and / or used for communication, as well as possible computer program instructions executed by the processor. The processor reads and executes the computer program instructions stored in the memory.

[0080] The processor described in this embodiment is connected to a transmission device for transmitting data with an external device. The transmission device can be used to receive or send data via a network. The above-mentioned specific examples of the network may include a wired or wireless network provided by a communication provider of the electronic device. In one example, the transmission device includes a network adapter (Network Interface Controller, referred to as NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device can be a radio frequency (Radio Frequency, referred to as RF) module, which is used to communicate with the Internet wirelessly.

[0081] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A data anonymization transmission system based on data hosting, characterized in that: Including data party privacy computing platform, data operation hosting platform, and demand side privacy computing platform; The data party privacy computing platform is used to host the data party's own data after data desensitization processing; data desensitization processing is to clean sensitive data according to the encryption rules of the data party; The data operation hosting platform is used to host the encryption rules of the data party and also push the encryption rules of the data party to the privacy computing platform of the demand party; The demander's privacy computing platform is used to encrypt the sensitive information in the demander's own data according to the data party's encryption rules, and store the plaintext and ciphertext mapping table. It also decrypts the calculation results obtained by the data party's privacy computing platform according to the plaintext and ciphertext mapping table, and the demander obtains the final decryption result.

2. A data anonymization transmission system based on data hosting according to claim 1, characterized in that: The data party privacy computing platform entrusts the data party's own data obtained after data desensitization processing as follows: The data party desensitizes and cleans the sensitive data in its own data based on the data party's encryption rules, and imports the desensitized data into the data party's intermediate library. The data party's intermediate library sends the imported desensitized data to the data party's privacy computing platform, and the data party's privacy computing platform hosts the desensitized data.

3. A data anonymization transmission system based on data hosting according to claim 1, characterized in that: The demander privacy computing platform is also used to send the demander's privacy computing request to the data operation hosting platform.

4. A data anonymization transmission system based on data hosting according to claim 3, characterized in that: The data operation hosting platform is also used to send the privacy computing request of the demander to the privacy computing platform of the data party.

5. A data anonymization transmission system based on data hosting according to claim 4, characterized in that: The data party privacy computing platform processes the privacy computing request of the demand party and sends the processing calculation results to the data operation hosting platform.

6. A data anonymization transmission system based on data hosting according to claim 5, characterized in that: The data operation hosting platform is also used to send the calculation results to the demand-side privacy computing platform.

7. A transmission method of a data anonymization transmission system based on data hosting according to any one of claims 1 to 6, characterized in that: include: S1. The data party desensitizes and cleanses the sensitive data in its own data based on the data party's encryption rules, and imports the desensitized data into the data party's intermediate database; S2. The data-party privacy computing platform hosts the anonymized data in the data-party intermediate library; S3. The data operation hosting platform hosts the encryption rules of the data party; S4. When the demander applies to use data, the data operation hosting platform pushes the encryption rules of the data party to the demander's privacy computing platform; S5. The demander’s privacy computing platform encrypts the sensitive information in the demander’s own data according to the data party’s encryption rules, and stores a plaintext and ciphertext mapping relationship table.

8. The data anonymization transmission method based on data hosting according to claim 7 is characterized in that: After step S5, the following steps are also included: S6. The privacy computing of the demand side sends the privacy computing request of the demand side to the data operation hosting platform; S7. The data operation hosting platform sends the privacy computing request of the demander to the privacy computing platform of the data party; S8. The data party privacy computing platform processes the privacy computing request of the demand party and sends the calculated result to the data operation hosting platform; S9. The data operation hosting platform sends the calculation results to the privacy computing platform of the demand side; S10. The demander's privacy computing platform decrypts the calculation results according to the plaintext and ciphertext mapping table, and the demander obtains the final decrypted results.

9. A data anonymization transmission device based on data hosting, characterized in that: It includes a processor, which executes the data anonymization transmission system based on data hosting as described in any one of claims 1-6.

10. The data anonymization transmission device based on data hosting according to claim 9, characterized in that: The processor is connected to a memory for storing data or instructions.

Images