Multi-source data privacy protection method and system based on data transmission security

Abstract

The invention relates to the technical field of data privacy protection, and discloses a multi-source data privacy protection method and system based on data transmission security. According to the method, all users in a system are registered and verified and encrypted based on a controllable anonymous certificate technology, information data generated in a data interaction process are collected, an information space is established based on the collected information data, and the collected sample information data are stored in the information space; information data in the information space is preprocessed, identity verification is conducted on a user needing to be sent on the basis of the controllable anonymous certificate technology in the data interaction process of the preprocessed information data, and after verification is passed, the user needs to be sent. And after the user receives the preprocessed information data and the key, the hidden tracing query is carried out through a hidden tracing query technology, so that the security of multi-source data privacy protection is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data privacy protection, and in particular to a multi-source data privacy protection method and system based on data transmission security. Background Art

[0002] With the development of the digital economy, the importance of data as a key production factor has become increasingly prominent. However, in the process of data transactions and queries, it has become an urgent problem to protect the data security of data providers and the privacy of query parties. For existing anonymous certificate schemes, it is difficult to achieve effective and necessary regulatory functions, and there is a lack of efficient certificate status verification mechanisms. For anonymous query schemes, the existing privacy-preserving data query methods based on homomorphic encryption have high computational overhead, low query efficiency, and are difficult to support complex query operations; the privacy-preserving data query system based on a trusted execution environment relies on a specific hardware platform and may still leak query patterns; the data query method based on differential privacy protection requires a trade-off between utility and privacy, and cannot completely hide the identity of the queryer.

[0003] The existing open patent application CN110443068A collects original data tables related to user sensitive information and merges the key values ​​associated between the original data tables; groups the data records in the merged table according to the key value name of the sensitive attribute in the merged table, and decomposes the merged table according to the grouping result to obtain multiple published data tables. However, since it is just a single merger of sensitive attributes in different tables, it cannot fully protect privacy data and has great limitations. Summary of the invention

[0004] 1. Technical issues to be resolved

[0005] In view of the shortcomings of the prior art, the present invention provides a multi-source data privacy protection method and system based on data transmission security, which has the advantages of security, accuracy, real-time and privacy, and solves the problem of lack of a unified and complete protection mechanism for privacy protection.

[0006] (II) Technical solution

[0007] In order to solve the above technical problem of lack of a unified and complete privacy protection mechanism, the present invention provides the following technical solutions:

[0008] The present invention discloses a multi-source data privacy protection method based on data transmission security, which specifically includes the following steps:

[0009] S1. Register all users in the system and perform verification encryption based on controllable anonymous certificate technology;

[0010] S2. Collect information data generated during the data interaction process, establish an information space based on the collected information data, and save the collected sample information data in the information space;

[0011] S3, preprocessing the information data in the information space to obtain preprocessed information data;

[0012] S4. During the data interaction process, the pre-processed information data is authenticated by the user who needs to send it based on the controllable anonymous certificate technology;

[0013] S5. After verification, the user receives the pre-processed information data and key and then performs an anonymous query using anonymous query technology.

[0014] The present invention registers and verifies and encrypts all users in the system based on controllable anonymous certificate technology, collects information data generated during data interaction, establishes an information space based on the collected information data, and stores the collected sample information data in the information space, and then pre-processes the information data in the information space. At the same time, during the data interaction process of the pre-processed information data, the identity of the user who needs to send the information is authenticated based on the controllable anonymous certificate technology. After the verification is passed, the user receives the pre-processed information data and the key and performs an anonymous query through the anonymous query technology, thereby improving the security of multi-source data privacy protection.

[0015] Preferably, the process of registering all users in the system and performing verification encryption based on the controllable anonymous certificate technology includes the following steps:

[0016] S11, system initialization;

[0017] Choose a bilinear group G and a bilinear map e:G×G→G T ;

[0018] Among them, G T The orders of and G are both prime numbers, and e represents a bilinear mapping;

[0019] Let p, g be the generators of the bilinear group G, Z p The set of all prime numbers, choose two sets of collision-resistant hash functions;

[0020] H:{0,1} * →G;

[0021] H':{0,1} * →Z p ;

[0022] Among them, {0,1} * Represents a string of any length composed of 0 and 1;

[0023] Summarize and generate public parameters PK = [G,G T ,e,p,g,H,H'], and save the generated public parameters in the system before the registration phase;

[0024] S12, regulator RA initialization;

[0025] Choose random numbers α,β∈Z P ;

[0026] Generate a public key RPK based on the selected random number = e(g,g) α 、Private key RSK = g α and attribute private key base K base =g β ;

[0027] Among them, RPK represents the public key generated by RA, RSK represents the private key generated by RA, and K base Represents the attribute private key base;

[0028] Upload the public key and attribute private key base generated by RA to the system, and destroy the selected random numbers α and β after uploading;

[0029] S13, user registration;

[0030] The user enters his or her basic identity information in RA;

[0031] After receiving the basic identity information input by the user, RA selects a random number a∈Z P , and generates the user's globally unique identity uid=H'(baseinfo,RSK·g a );

[0032] Among them, uid represents the user's globally unique identity identifier, and baseinfo represents the basic identity information entered by the user;

[0033] S14, attribute authority initialization;

[0034] S15, user applies for attribute certificate;

[0035] S16. Calculate the attribute private key generated by the regulatory agency;

[0036] S17. Calculate the attribute signature and perform attribute signature verification.

[0037] Preferably, the attribute authority initialization comprises the following steps:

[0038] S141, initialization stage;

[0039] For each user in the attribute authorityi (i∈[1,n]);

[0040] Among them, User i represents the i-th user in the attribute authority, and n represents the number of users in the attribute authority;

[0041] Choose a random number d i ∈Z p As the authority password of the attribute authority, and calculate the final password of the attribute authority;

[0042]

[0043] Where d represents the final password of the attribute authority;

[0044] Randomly select a t-1 order polynomial;

[0045] f(x)=a 0 +a 1 x+a 2 x 2 +...+a t-1 x t-1 ;

[0046] Set f(0) = a 0 =d;

[0047] Calculate the shared secret of each user in the attribute authority based on the selected t-1 order polynomial;

[0048] share ij =f i (uid j )(j∈[1,n],j≠i);

[0049] Among them, share ij represents the shared password between the i-th user and the j-th user, f i represents the t-1th order polynomial randomly selected by the i-th user, uid j represents the globally unique identity of the jth user;

[0050] When the jth user receives the shared password of the ith user, the partial institution private key is calculated And some institutional public keys And calculate the partial institution public key opk j Upload to the system;

[0051] S142, public key generation stage;

[0052] Summarize some of the institution public keys opk generated during the initialization phase j, and randomly select t of them to generate the attribute authority public key;

[0053]

[0054] Among them, OPK is the public key of the authority that generates the attribute;

[0055] S143, calculating the attribute public key of the authority;

[0056] For each user User in the attribute authority for which attributes are to be generated i (i∈[1,n]);

[0057] Choose a random number y i ∈Z p As the attribute password of the attribute authority, and calculate the final attribute password of the attribute authority;

[0058]

[0059] Randomly select a t-1 order polynomial;

[0060] f(x)=a 0 +a 1 x+a 2 x 2 +...+a t-1 x t-1 ;

[0061] Set f(0) = a 0 =d;

[0062] Calculate the shared secret of each user in the attribute authority based on the selected t-1 order polynomial;

[0063] share ij =f i (uid j )(j∈[1,n],j≠i);

[0064] When the jth user receives the shared password of the ith user, he calculates the partial attribute private key And some attribute public keys And calculate the partial attribute public key apk j Upload to the system;

[0065] When all users' apk j After the calculation is completed, t are randomly selected to generate the attribute authorization attribute public key;

[0066]

[0067] Among them, APK represents the generation of attribute authorization attribute public key.

[0068] Preferably, the user applying for attribute credentials includes the following steps:

[0069] When a user applies for an exclusive attribute under an RA attribute authority, the application must be approved by at least t members of the attribute authority;

[0070] User in the attribute authority η (η∈[1,t]), calculate attribute authorization through the uid of the applicant;

[0071] The attribute authorization calculation formula is as follows:

[0072]

[0073] Among them, auth means attribute authorization, Attr x represents the xth exclusive attribute applied for by the user, and oskη represents the ηth partial institution private key;

[0074] The calculated attribute authorization is returned to the applicant. After the user obtains t attribute authorizations, the corresponding attribute vouchers calculated are summarized as follows:

[0075]

[0076] Among them, AC x,uid Indicates the corresponding attribute certificate of the user's uid and the xth exclusive attribute applied for, uid k Represents the kth globally unique identifier.

[0077] Preferably, the computing supervisory agency generates an attribute private key comprising the following steps:

[0078] The regulatory agency verifies whether the user's attribute credentials are valid and issues a corresponding attribute credential AC to each user. x,uid To verify;

[0079] The validation formula is as follows:

[0080] e(g,AC x,uid )=OPK x e(APK x ,H(uid));

[0081] Among them, OPK x Indicates the public key of the xth attribute authority, APK x Represents the attribute public key of the xth authority;

[0082] After verification, select a random number t∈Z p ;

[0083] calculate

[0084] Among them, A, B, and C represent parts of the attribute private key respectively;

[0085] For each property public key APK x , calculate K x =(APK x ) t ;

[0086] Set the final attribute private key to APK S,uid ={A,B,C,{K x} x∈S};

[0087] Among them, S represents the attribute set;

[0088] Set up an identity mapping table Table to record the correspondence between e(g,B) and uid.

[0089] Preferably, the calculating the attribute signature and performing the attribute signature verification comprises the following steps:

[0090] Input transmission data m, attribute private key APK S,uid and signature strategy Γ;

[0091] Γ=(M,ρ);

[0092] Where M represents an l×γ matrix, and ρ represents the mapping function from each row of M to the attribute private key;

[0093] Calculate whether the attribute set S satisfies the signature strategy Γ. If Γ(S) = 1, then calculate the vector ω = (ω 1 ,...,ω l ), so that ωM=(1,0,...,0); in addition, a random vector μ=(μ 1 ,...,μ l ), so that μM=(0,0,...,0);

[0094] Among them, h θ represents the final signature of the θth part;

[0095] Choose a random number r 1 ,r 2 ∈Z p ,calculate

[0096] Among them, S 1 ,S 2 ,S 3 as part of the final signature;

[0097] The final signature is σ=(h 1 ,...,h l ,S 1 ,S 2 ,S 3 );

[0098] Input the final signature σ, select a random vector v = (v 1 ,v 2 ,...,v γ );

[0099] For each i∈[1,l], calculate And verify whether the following equation holds;

[0100]

[0101] If the equation holds, the signature is valid.

[0102] The present invention completes the initialization of the regulatory agency RA, user encryption registration, attribute authorization agency initialization, key generation and attribute signature authentication by using controllable anonymous certificate technology, thereby improving the privacy of multi-source data privacy protection.

[0103] Preferably, the preprocessing of the information data in the information space to obtain the preprocessed information data comprises the following steps:

[0104] Create an array of length ε and select A hash function is used to calculate the collected real-time information data and the calculation results are stored in an array;

[0105] in, represents the number of hash functions, and z represents the amount of real-time information data collected;

[0106] In the process of calculating the collected real-time information data by the hash function, when the calculation results of the two sets of real-time information data are consistent, the two sets of real-time information data are set to be the same real-time information data;

[0107] When two sets of real-time information data are the same, the collection time of the two sets of real-time information data is compared, and the most recent set of real-time information data is retained;

[0108] After the calculation is completed, the real-time information data stored in the array during the calculation process is summarized to obtain the filtered real-time information data;

[0109] The filtered real-time information data is set as the pre-processed information data.

[0110] The present invention pre-processes the information data in the information space, calculates the information data in the information space by using a hash function, and determines whether the information data in the information space contains duplicate data, thereby ensuring the accuracy of the information data in the information space.

[0111] Preferably, during the data interaction process of the pre-processed information data, identity verification of the user to be sent based on the controllable anonymous certificate technology includes the following steps:

[0112] Input the preprocessed information data m and the signature σ under the signature strategy Γ, and select the random vector v = (v 1 ,v 2 ,...,v γ );

[0113] For each i∈[1,l], calculate

[0114] After calculation, RA searches the identity mapping table to find the uid of the corresponding signer, thereby obtaining the corresponding user identity information.

[0115] Preferably, after the verification is passed, the user receives the pre-processed information data and key and then performs a stealth query using a stealth query technology, which includes the following steps:

[0116] S51, pre-processing stage;

[0117] Set anonymous query parameters, perform pseudo-random function calculation on the server data based on the set anonymous query parameters, and obtain a 256-bit output, of which the first 128 bits are intercepted for matching, and the last 128 bits are used for symmetric algorithm key encryption;

[0118] S52, query stage;

[0119] The user requests parameters from the system, and a pseudo-random function protocol is executed between the user and the system;

[0120] The user calculates the ciphertext collection based on the query keywords and uses the key to decrypt the ciphertext returned by the system;

[0121] The decrypted ciphertext is verified, and if the verification is successful, the 128-bit data is decrypted.

[0122] The present invention closely combines controllable anonymous certificate technology with anonymous query technology, which not only ensures high query efficiency, but also realizes all-round privacy protection among customers. It also ensures that the regulatory authorities can effectively perform their regulatory duties and effectively promote data circulation.

[0123] The present invention discloses a multi-source data privacy protection system based on data transmission security, which is used to implement a multi-source data privacy protection method based on data transmission security. The system includes: a data acquisition module, a controllable anonymous certificate module, an anonymous query module, a computing component and a built-in database;

[0124] The data acquisition module is used to collect information data that needs to be transmitted and queried in real time;

[0125] The controllable anonymous certificate module is used to register all users in the system and perform verification encryption;

[0126] The anonymous query module is used to retrieve records containing specific keywords from the database of the server without revealing the actual query keywords of the query party;

[0127] The computing component is used to provide computing support for the controllable anonymous certificate module and the anonymous query module;

[0128] The built-in database is used to store local data.

[0129] (III) Beneficial effects

[0130] Compared with the prior art, the present invention provides a multi-source data privacy protection method and system based on data transmission security, which has the following beneficial effects:

[0131] 1. The invention registers and verifies and encrypts all users in the system based on controllable anonymous certificate technology, collects information data generated during data interaction, establishes an information space based on the collected information data, and stores the collected sample information data in the information space, and then pre-processes the information data in the information space. At the same time, during the data interaction process, the pre-processed information data is authenticated for the user who needs to send the identity based on the controllable anonymous certificate technology. After the verification is passed, the user receives the pre-processed information data and the key and performs an anonymous query through the anonymous query technology, thereby improving the security of multi-source data privacy protection.

[0132] 2. This invention uses controllable anonymous certificate technology to complete the initialization of the regulatory agency RA, user encryption registration, attribute authorization agency initialization, key generation and attribute signature authentication, thereby improving the privacy of multi-source data privacy protection.

[0133] 3. The invention ensures the accuracy of the information data in the information space by preprocessing the information data in the information space, calculating the information data in the information space using a hash function and determining whether there is duplicate data in the information space.

[0134] 4. This invention combines controllable anonymous certificate technology with anonymous query technology, which not only ensures high query efficiency, but also realizes all-round privacy protection among customers. It also ensures that the regulatory authorities can effectively perform their regulatory duties and effectively promote data circulation. BRIEF DESCRIPTION OF THE DRAWINGS

[0135] Figure 1 This is a schematic diagram of the structure of the multi-source data privacy protection process of the present invention;

[0136] Figure 2 It is a schematic diagram of the structure of the multi-source data privacy protection system of the present invention. DETAILED DESCRIPTION

[0137] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0138] Example 1

[0139] See also Figure 1 , Figure 2 This embodiment discloses a multi-source data privacy protection method based on data transmission security, which specifically includes the following steps:

[0140] S1. Register all users in the system and perform verification encryption based on controllable anonymous certificate technology;

[0141] S2. Collect information data generated during the data interaction process, establish an information space based on the collected information data, and save the collected sample information data in the information space;

[0142] S3, preprocessing the information data in the information space to obtain preprocessed information data;

[0143] S4. During the data interaction process, the pre-processed information data is authenticated by the user who needs to send it based on the controllable anonymous certificate technology;

[0144] S5. After the verification is passed, the user receives the pre-processed information data and key and then conducts an anonymous query through anonymous query technology;

[0145] For further information, see Figure 1 , Figure 2 , registering all users in the system and verifying and encrypting them based on controllable anonymous certificate technology includes the following steps:

[0146] S11, system initialization;

[0147] Choose a bilinear group G and a bilinear map e:G×G→G T ;

[0148] Among them, G T The orders of and G are both prime numbers, and e represents a bilinear mapping;

[0149] Let p, g be the generators of the bilinear group G, Z p The set of all prime numbers, choose two sets of collision-resistant hash functions;

[0150] H:{0,1} * →G;

[0151] H':{0,1} * →Z p ;

[0152] Among them, {0,1} * Represents a string of any length composed of 0 and 1;

[0153] Further, the public parameter PK is generated by summarizing T ,e,p,g,H,H'], and save the generated public parameters in the system before the registration phase;

[0154] S12, regulator RA initialization;

[0155] Choose random numbers α,β∈Z P ;

[0156] Further, a public key RPK=e(g,g) is generated based on the selected random number α 、Private key RSK = g α and attribute private key base K base =g β ;

[0157] Among them, RPK represents the public key generated by RA, RSK represents the private key generated by RA, and K base Represents the attribute private key base;

[0158] Furthermore, the public key and attribute private key base generated by RA are uploaded to the system, and the selected random numbers α and β are destroyed after the upload is completed;

[0159] S13, user registration;

[0160] The user enters his or her basic identity information in RA;

[0161] After receiving the basic identity information input by the user, RA selects a random number a∈Z P, and generates the user's globally unique identity uid=H'(baseinfo,RSK·g a );

[0162] Among them, uid represents the user's globally unique identity identifier, and baseinfo represents the basic identity information entered by the user;

[0163] S14, attribute authority initialization;

[0164] S141, initialization stage;

[0165] For each user in the attribute authority i (i∈[1,n]);

[0166] Among them, User i represents the i-th user in the attribute authority, and n represents the number of users in the attribute authority;

[0167] Choose a random number d i ∈Z p As the authority password of the attribute authority, and calculate the final password of the attribute authority;

[0168]

[0169] Where d represents the final password of the attribute authority;

[0170] Furthermore, a t-1 order polynomial is randomly selected;

[0171] f(x)=a 0 +a 1 x+a 2 x 2 +...+a t-1 x t-1 ;

[0172] Set f(0) = a 0 =d;

[0173] Further, a shared password of each user in the attribute authorization mechanism is calculated based on the selected t-1 order polynomial;

[0174] share ij =f i (uid j )(j∈[1,n],j≠i);

[0175] Among them, share ij represents the shared password between the i-th user and the j-th user, f i represents the t-1th order polynomial randomly selected by the i-th user, uidj represents the globally unique identity of the jth user;

[0176] When the jth user receives the shared password of the ith user, the partial institution private key is calculated And some institutional public keys And calculate the partial institution public key opk j Upload to the system;

[0177] S142, public key generation stage;

[0178] Summarize some of the institution public keys opk generated during the initialization phase j , and randomly select t of them to generate the attribute authority public key;

[0179]

[0180] Among them, OPK is the public key of the authority that generates the attribute;

[0181] S143, calculating the attribute public key of the authority;

[0182] For each user User in the attribute authority for which attributes are to be generated i (i∈[1,n]);

[0183] Choose a random number y i ∈Z p As the attribute password of the attribute authority, and calculate the final attribute password of the attribute authority;

[0184]

[0185] Furthermore, a t-1 order polynomial is randomly selected;

[0186] f(x)=a 0 +a 1 x+a 2 x 2 +...+a t-1 x t-1 ;

[0187] Set f(0) = a 0 =d;

[0188] Further, a shared password of each user in the attribute authorization mechanism is calculated based on the selected t-1 order polynomial;

[0189] share ij =f i (uid j )(j∈[1,n],j≠i);

[0190] When the jth user receives the shared password of the ith user, he calculates the partial attribute private key And some attribute public keys And calculate the partial attribute public key apk j Upload to the system;

[0191] Furthermore, when all users' apk j After the calculation is completed, t are randomly selected to generate the attribute authorization attribute public key;

[0192]

[0193] Among them, APK represents the generation of attribute authorization attribute public key;

[0194] S15, user applies for attribute certificate;

[0195] When a user applies for an exclusive attribute under an RA attribute authority, the application must be approved by at least t members of the attribute authority;

[0196] User in the attribute authority η (η∈[1,t]), calculate attribute authorization through the uid of the applicant;

[0197] The attribute authorization calculation formula is as follows:

[0198]

[0199] Among them, auth means attribute authorization, Attr x represents the xth exclusive attribute applied for by the user, and oskη represents the ηth partial institution private key;

[0200] Furthermore, the calculated attribute authorization is returned to the applicant. After the user obtains t attribute authorizations, the corresponding attribute vouchers calculated are summarized as follows:

[0201]

[0202] Among them, AC x,uid Indicates the corresponding attribute certificate of the user's uid and the xth exclusive attribute applied for, uid k represents the kth globally unique identity;

[0203] S16. Calculate the attribute private key generated by the regulatory agency;

[0204] The regulatory agency verifies whether the user's attribute credentials are valid and issues a corresponding attribute credential AC to each user. x,uid To verify;

[0205] The validation formula is as follows:

[0206] e(g,AC x,uid )=OPK x e(APK x ,H(uid));

[0207] Among them, OPK x Indicates the public key of the xth attribute authority, APK x Represents the attribute public key of the xth authority;

[0208] Further, after verification, a random number is selected

[0209] calculate

[0210] Among them, A, B, and C represent parts of the attribute private key respectively;

[0211] Furthermore, for each attribute public key APK x , calculate K x =(APK x ) t ;

[0212] Set the final attribute private key to APK S,uid ={A,B,C,{K x} x∈S};

[0213] Among them, S represents the attribute set;

[0214] Furthermore, an identity mapping table Table is set to record the correspondence between e(g, B) and uid;

[0215] S17, calculate the attribute signature and perform attribute signature verification;

[0216] Input transmission data m, attribute private key APK S,uid and signature strategy Γ;

[0217] Γ=(M,ρ);

[0218] Where M represents an l×γ matrix, and ρ represents the mapping function from each row of M to the attribute private key;

[0219] Further, calculate whether the attribute set S satisfies the signature strategy Γ. If Γ(S) = 1, calculate the vector ω = (ω 1 ,...,ω l ), so that ωM=(1,0,...,0); in addition, a random vector μ=(μ 1 ,...,μ l ), so that μM=(0,0,...,0);

[0220] Furthermore, where h θ represents the final signature of the θth part;

[0221] Choose a random number r 1 ,r 2 ∈Z p ,calculate

[0222] Among them, S 1 ,S 2 ,S 3 as part of the final signature;

[0223] The final signature is σ=(h 1 ,...,h l ,S 1 ,S 2 ,S 3 );

[0224] Input the final signature σ, select a random vector v = (v 1 ,v 2 ,...,v γ );

[0225] For each i∈[1,l], calculate And verify whether the following equation holds;

[0226]

[0227] If the equality holds, the signature is valid;

[0228] For further information, see Figure 1 , Figure 2 , preprocessing the information data in the information space, and obtaining the preprocessed information data includes the following steps:

[0229] Create an array of length ε and select A hash function is used to calculate the collected real-time information data and the calculation results are stored in an array;

[0230] in, represents the number of hash functions, and z represents the amount of real-time information data collected;

[0231] In the process of calculating the collected real-time information data by the hash function, when the calculation results of the two sets of real-time information data are consistent, the two sets of real-time information data are set to be the same real-time information data;

[0232] When two sets of real-time information data are the same, the collection time of the two sets of real-time information data is compared, and the most recent set of real-time information data is retained;

[0233] After the calculation is completed, the real-time information data stored in the array during the calculation process is summarized to obtain the filtered real-time information data;

[0234] Set the filtered real-time information data as the pre-processed information data;

[0235] For further information, see Figure 1 , Figure 2 , during the data interaction process, the pre-processed information data is authenticated for the user who needs to send it based on the controllable anonymous certificate technology, including the following steps:

[0236] Input the preprocessed information data m and the signature σ under the signature strategy Γ, and select the random vector v = (v 1 ,v 2 ,...,v γ );

[0237] For each i∈[1,l], calculate

[0238] After calculation, RA searches the identity mapping table to find the uid of the corresponding signer, thereby obtaining the corresponding user identity information;

[0239] For further information, see Figure 1 , Figure 2 After the verification is passed, the user receives the pre-processed information data and key and performs an anonymous query through anonymous query technology, which includes the following steps:

[0240] S51, pre-processing stage;

[0241] Set anonymous query parameters, perform pseudo-random function calculation on the server data based on the set anonymous query parameters, and obtain a 256-bit output, of which the first 128 bits are intercepted for matching, and the last 128 bits are used for symmetric algorithm key encryption;

[0242] Further, S52, query stage;

[0243] The user requests parameters from the system, and a pseudo-random function protocol is executed between the user and the system;

[0244] The user calculates the ciphertext collection based on the query keywords and uses the key to decrypt the ciphertext returned by the system;

[0245] Furthermore, the decrypted ciphertext is verified, and if the verification is successful, the 128-bit data is decrypted;

[0246] Example 2

[0247] See also Figure 1 , Figure 2 , This embodiment discloses a multi-source data privacy protection system based on data transmission security, which is used to implement a multi-source data privacy protection method based on data transmission security. The system includes: a data acquisition module, a controllable anonymous certificate module, an anonymous query module, a computing component and a built-in database;

[0248] The data acquisition module is used to collect information data that needs to be transmitted and queried in real time;

[0249] The controllable anonymous certificate module is used to register all users in the system and perform verification encryption;

[0250] The anonymous query module is used to retrieve records containing specific keywords from the database of the server without revealing the actual query keywords of the query party;

[0251] The computing component is used to provide computing support for the controllable anonymous certificate module and the anonymous query module;

[0252] The built-in database is used to store local data.

[0253] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A multi-source data privacy protection method based on data transmission security, characterized in that: The following steps are involved: S1. Register all users in the system and perform verification encryption based on controllable anonymous certificate technology; S2. Collect information data generated during the data interaction process, establish an information space based on the collected information data, and save the collected sample information data in the information space; S3, preprocessing the information data in the information space to obtain preprocessed information data; S4. During the data interaction process, the pre-processed information data is authenticated by the user who needs to send it based on the controllable anonymous certificate technology; S5. After verification, the user receives the pre-processed information data and key and then performs an anonymous query using anonymous query technology.

2. According to claim 1, a multi-source data privacy protection method based on data transmission security is characterized in that: The process of registering all users in the system and performing verification encryption based on the controllable anonymous certificate technology includes the following steps: S11, system initialization; Choose a bilinear group G and a bilinear map e:G×G→G T ; Among them, G T The orders of and G are both prime numbers, and e represents a bilinear mapping; Let p, g be the generators of the bilinear group G, Z p The set of all prime numbers, choose two sets of collision-resistant hash functions; H:{0,1} * →G; H':{0,1} * →Z p ; Among them, {0,1} * Represents a string of any length composed of 0 and 1; Summarize and generate public parameters PK = [G,G T ,e,p,g,H,H'], and save the generated public parameters in the system before the registration phase; S12, regulator RA initialization; Choose random numbers α,β∈Z P ; Generate a public key RPK based on the selected random number = e(g,g) α 、Private key RSK = g α and attribute private key base K base =g β ; Among them, RPK represents the public key generated by RA, RSK represents the private key generated by RA, and K base Represents the attribute private key base; Upload the public key and attribute private key base generated by RA to the system, and destroy the selected random numbers α and β after uploading; S13, user registration; The user enters his or her basic identity information in RA; After receiving the basic identity information input by the user, RA selects a random number a∈Z P , and generates the user's globally unique identity uid=H'(baseinfo,RSK·g a ); Among them, uid represents the user's globally unique identity identifier, and baseinfo represents the basic identity information entered by the user; S14, attribute authority initialization; S15, user applies for attribute certificate; S16. Calculate the attribute private key generated by the regulatory agency; S17. Calculate the attribute signature and perform attribute signature verification.

3. A multi-source data privacy protection method based on data transmission security according to claim 2, characterized in that: The attribute authority initialization includes the following steps: S141, initialization stage; For each user in the attribute authority i (i∈[1,n]); Among them, User i represents the i-th user in the attribute authority, and n represents the number of users in the attribute authority; Choose a random number d i ∈Z p As the authority password of the attribute authority, and calculate the final password of the attribute authority; Where d represents the final password of the attribute authority; Randomly select a t-1 order polynomial; f(x)=a0+a1x+a2x 2 +...+a t-1 x t-1 ; Set f(0) = a0 = d; Calculate the shared secret of each user in the attribute authority based on the selected t-1 order polynomial; share ij =f i (uid j )(j∈[1,n],j≠i); Among them, share ij represents the shared password between the i-th user and the j-th user, f i represents the t-1th order polynomial randomly selected by the i-th user, uid j represents the globally unique identity of the jth user; When the jth user receives the shared password of the ith user, the partial institution private key is calculated And some institutional public keys And calculate the partial institution public key opk j Upload to the system; S142, public key generation stage; Summarize some of the institution public keys opk generated during the initialization phase j , and randomly select t of them to generate the attribute authority public key; Among them, OPK is the public key of the authority that generates the attribute; S143, calculating the attribute public key of the authority; For each user User in the attribute authority for which attributes are to be generated i (i∈[1,n]); Choose a random number y i ∈Z p As the attribute password of the attribute authority, and calculate the final attribute password of the attribute authority; Randomly select a t-1 order polynomial; f(x)=a0+a1x+a2x 2 +...+a t-1 x t-1 ; Set f(0) = a0 = d; Calculate the shared secret of each user in the attribute authority based on the selected t-1 order polynomial; share ij =f i (uid j )(j∈[1,n],j≠i); When the jth user receives the shared password of the ith user, he calculates the partial attribute private key And some attribute public keys And calculate the partial attribute public key apk j Upload to the system; When all users' apk j After the calculation is completed, t are randomly selected to generate the attribute authorization attribute public key; Among them, APK represents the generation of attribute authorization attribute public key.

4. A multi-source data privacy protection method based on data transmission security according to claim 2, characterized in that: The user applying for attribute credentials includes the following steps: When a user applies for an exclusive attribute under an RA attribute authority, the application must be approved by at least t members of the attribute authority; User in the attribute authority η (η∈[1,t]), calculate attribute authorization through the uid of the applicant; The attribute authorization calculation formula is as follows: Among them, auth means attribute authorization, Attr x represents the xth exclusive attribute applied for by the user, and oskη represents the ηth partial institution private key; The calculated attribute authorization is returned to the applicant. After the user obtains t attribute authorizations, the corresponding attribute vouchers calculated are summarized as follows: Among them, AC x,uid Indicates the corresponding attribute certificate of the user's uid and the xth exclusive attribute applied for, uid k Represents the kth globally unique identifier.

5. The multi-source data privacy protection method based on data transmission security according to claim 2 is characterized in that: The computing supervisory agency generates an attribute private key comprising the following steps: The regulatory agency verifies whether the user's attribute certificate is valid and issues a corresponding attribute certificate AC to each user. x,uid To verify; The validation formula is as follows: e(g,AC x,uid )=OPK x ·e(APK x ,H(uid); Among them, OPK x Indicates the public key of the xth attribute authority, APK x Represents the attribute public key of the xth authority; After verification, select a random number t∈Z p ; calculate Among them, A, B, and C represent parts of the attribute private key respectively; For each property public key APK x , calculate K x =(APK x ) t ; Set the final attribute private key to APK S,uid ={A,B,C,{K x } x∈S }; Among them, S represents the attribute set; Set up an identity mapping table Table to record the correspondence between e(g,B) and uid.

6. A multi-source data privacy protection method based on data transmission security according to claim 2, characterized in that: The calculation of the attribute signature and the attribute signature verification include the following steps: Input transmission data m, attribute private key APK S,uid and signature strategy Γ; Γ=(M,ρ); Where M represents an l×γ matrix, and ρ represents the mapping function from each row of M to the attribute private key; Calculate whether the attribute set S satisfies the signature strategy Γ. If Γ(S) = 1, then calculate the vector ω = (ω1,...,ω l ), so that ωM=(1,0,...,0); in addition, a random vector μ=(μ1,...,μ l ), so that μM=(0,0,...,0); For each θ∈[1,l], calculate And set Among them, h θ represents the final signature of the θth part; Choose random numbers r1,r2∈Z p ,calculate Among them, S1, S2, and S3 are part of the final signature; The final signature is σ=(h1,...,h l ,S1,S2,S3); Input the final signature σ, select a random vector v = (v1, v2, ..., v γ ); For each i∈[1,l], calculate And verify whether the following equation holds; If the equation holds, the signature is valid.

7. A multi-source data privacy protection method based on data transmission security according to claim 1, characterized in that: The preprocessing of the information data in the information space to obtain the preprocessed information data comprises the following steps: Create an array of length ε and select A hash function is used to calculate the collected real-time information data and the calculation results are stored in an array; in, represents the number of hash functions, and z represents the amount of real-time information data collected; In the process of calculating the collected real-time information data by the hash function, when the calculation results of the two sets of real-time information data are consistent, the two sets of real-time information data are set to be the same real-time information data; When two sets of real-time information data are the same, the collection time of the two sets of real-time information data is compared, and the most recent set of real-time information data is retained; After the calculation is completed, the real-time information data stored in the array during the calculation process is summarized to obtain the filtered real-time information data; The filtered real-time information data is set as the pre-processed information data.

8. The multi-source data privacy protection method based on data transmission security according to claim 1 is characterized in that: During the data interaction process of the pre-processed information data, identity verification of the user to be sent based on the controllable anonymous certificate technology includes the following steps: Input the preprocessed information data m and the signature σ under the signature strategy Γ, and select a random vector v = (v1, v2, ..., v γ ); For each i∈[1,l], calculate After calculation, RA searches the identity mapping table to find the uid of the corresponding signer, thereby obtaining the corresponding user identity information.

9. The multi-source data privacy protection method based on data transmission security according to claim 1 is characterized in that: After the verification is passed, the user receives the pre-processed information data and key and performs an anonymous query through anonymous query technology, including the following steps: S51, pre-processing stage; Set anonymous query parameters, perform pseudo-random function calculation on the server data based on the set anonymous query parameters, and obtain a 256-bit output, of which the first 128 bits are intercepted for matching, and the last 128 bits are used for symmetric algorithm key encryption; S52, query stage; The user requests parameters from the system, and a pseudo-random function protocol is executed between the user and the system; The user calculates the ciphertext collection based on the query keywords and uses the key to decrypt the ciphertext returned by the system; The decrypted ciphertext is verified, and if the verification is successful, the 128-bit data is decrypted.

10. A system for implementing the multi-source data privacy protection method based on data transmission security according to any one of claims 1 to 9, characterized in that: include: Data collection module, controllable anonymous certificate module, anonymous query module, computing component and built-in database; The data acquisition module is used to collect information data that needs to be transmitted and queried in real time; The controllable anonymous certificate module is used to register all users in the system and perform verification encryption; The anonymous query module is used to retrieve records containing specific keywords from the database of the server without revealing the actual query keywords of the query party; The computing component is used to provide computing support for the controllable anonymous certificate module and the anonymous query module; The built-in database is used to store local data.

Images