Online car-hailing privacy protection communication method and device based on differential privacy and key technology

Abstract

The invention discloses an online car-hailing privacy protection communication method and device based on differential privacy and a secret key technology, and the method comprises the steps: obtaining a driver end public key of a target driver according to the first user data through the transmission of the first user data of the differential privacy technology; establishing communication connection with the driver side according to the driver side public key; obtaining a service bill through an authentication server and a bill issuing server; obtaining a target session key according to the service bill; and establishing communication connection with the relatives and friends through the target session key. The method can improve the security of online car-hailing privacy protection communication, and can be widely applied to the technical field of information security.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a privacy protection communication method and device for online car-hailing based on differential privacy and key technology. Background Art

[0002] With the rapid development of the online car-hailing industry, while meeting the needs of users for convenient travel, the platform has also accumulated a massive amount of user data. This data not only contains users' basic personal information, such as name, contact information, payment records, etc., but also includes extremely sensitive travel trajectories, time patterns, and frequently visited places. Once this data is leaked, it may cause serious leakage of user privacy, resulting in economic losses and security risks. However, the current online car-hailing data privacy protection schemes still have major shortcomings, and most of them only rely on traditional encryption technology or simple access control. Although these methods can alleviate the risk of data leakage to a certain extent, it is difficult to fully cope with complex and changing threat scenarios.

[0003] Specifically, traditional encryption technologies ensure the confidentiality of data by encrypting, storing and transmitting data. However, these technologies often have high demands on computing and storage resources. At the same time, the encryption and decryption processes have high computational complexity, which can easily affect system performance and make it difficult to meet the needs of large-scale, high-concurrency online ride-hailing scenarios. In addition, access control-based solutions rely on manually set permission rules, which can easily lead to data leakage in the event of misoperation, abuse of authority or malicious attacks. At the same time, such solutions have poor adaptability to dynamic data sharing scenarios, which limits the flexible use of data. Summary of the invention

[0004] In view of this, the main purpose of the embodiments of the present invention is to provide a method and device for online car-hailing privacy protection communication based on differential privacy and key technology, in order to solve at least one of the problems of the prior art. The present invention can improve the security of online car-hailing privacy protection communication.

[0005] To achieve the above objectives, an embodiment of the present invention provides a privacy protection communication method for online car-hailing based on differential privacy and key technology, the method comprising:

[0006] Sending first user data using differential privacy technology, and obtaining a driver-side public key of a target driver based on the first user data;

[0007] Establishing a communication connection with the driver side according to the driver side public key;

[0008] Obtain service tickets through the authentication server and ticket issuing server;

[0009] According to the service ticket, obtaining a target session key;

[0010] A communication connection with relatives and friends is established through the target session key.

[0011] In some embodiments, sending the first user data obtained through differential privacy technology, and obtaining the driver-side public key of the target driver according to the first user data, includes the following steps:

[0012] Acquiring second user data;

[0013] By using differential privacy technology, Laplace noise is added to the second user data to obtain the first user data;

[0014] The first user data is sent to the platform to obtain the driver-side public key of the target driver.

[0015] In some embodiments, establishing a communication connection with the driver side according to the driver side public key comprises the following steps:

[0016] Acquiring second user data;

[0017] Encrypt the second user data according to the driver's public key to obtain third user data;

[0018] The third user data is sent to the driver side, and then communicated with the driver side.

[0019] In some embodiments, obtaining a service ticket through an authentication server and a ticket issuing server includes the following steps:

[0020] Send an identity authentication request to the authentication server to obtain a TGT and a first session key;

[0021] According to the TGT, a request to access the friends and relatives terminal is sent to the ticket issuing server to obtain the service ticket.

[0022] In some embodiments, obtaining a target session key according to the service ticket comprises the following steps:

[0023] The service ticket is decrypted using the first session key to obtain the target session key.

[0024] In some embodiments, after establishing a communication connection with a friend or relative through the target session key, the following steps are also included:

[0025] The service ticket and the symmetrically encrypted fourth user data are sent to the friend or relative terminal.

[0026] To achieve the above-mentioned purpose, another aspect of an embodiment of the present invention provides a privacy protection communication device for online car-hailing based on differential privacy and key technology, the device comprising:

[0027] The first module is used to send first user data using differential privacy technology, and obtain a driver-side public key of a target driver based on the first user data;

[0028] The second module is used to establish a communication connection with the driver side according to the driver side public key;

[0029] The third module is used to obtain a service ticket through an authentication server and a ticket issuing server;

[0030] A fourth module is used to obtain a target session key according to the service ticket;

[0031] The fifth module is used to establish a communication connection with relatives and friends through the target session key.

[0032] To achieve the above-mentioned purpose, another aspect of an embodiment of the present invention provides an electronic device, which includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, it implements the online car-hailing privacy protection communication method based on differential privacy and key technology as described above.

[0033] To achieve the above-mentioned purpose, another aspect of an embodiment of the present invention provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the online car-hailing privacy protection communication method based on differential privacy and key technology as described above.

[0034] To achieve the above-mentioned purpose, another aspect of an embodiment of the present invention provides a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. A processor of a computer device can read the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes the aforementioned online car-hailing privacy protection communication method based on differential privacy and key technology.

[0035] The embodiments of the present invention include at least the following beneficial effects: The present invention provides a privacy protection communication method and device for online car-hailing based on differential privacy and key technology. The scheme sends the first user data through differential privacy technology, obtains the driver-side public key of the target driver according to the first user data, and can achieve efficient privacy protection through differential privacy technology; establishes a communication connection with the driver-side according to the driver-side public key; obtains the service ticket through the authentication server and the ticket issuing server; obtains the target session key according to the service ticket; establishes a communication connection with the friend-and-relative side through the target session key, and uses the target session key generated by the ticket issuing server for symmetric encrypted communication between the user side and the friend-and-relative side, avoiding the risk of directly transmitting the key on the network, thereby ensuring the security of encrypted communication. The present invention can improve the security of privacy protection communication for online car-hailing. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0037] Figure 1 It is a flow chart of a privacy protection communication method for online car-hailing based on differential privacy and key technology provided by an embodiment of the present invention;

[0038] Figure 2 It is a schematic diagram of the core roles of the online car-hailing privacy protection communication method based on differential privacy and key technology provided by an embodiment of the present invention;

[0039] Figure 3 It is a schematic diagram of the driver-user docking process provided by an embodiment of the present invention;

[0040] Figure 4 is a schematic diagram of a user location information exchange process provided by an embodiment of the present invention;

[0041] Figure 5 It is a schematic diagram of the process of itinerary sharing provided by an embodiment of the present invention;

[0042] Figure 6 is a schematic diagram of a key exchange process provided by an embodiment of the present invention;

[0043] Figure 7 It is a schematic diagram of the hardware structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0044] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the embodiments of the present invention, and they are only examples of devices and methods consistent with some aspects of the embodiments of the present invention as detailed in the attached claims.

[0045] It should be noted that, although the functional modules are divided in the system schematic diagram and the logical order is shown in the flow chart, in some cases, the steps shown or described may be performed in a different order than the module division in the system or the flow chart. The terms "first / S100" and "second / S200" in the specification and claims and the above-mentioned drawings may be used to describe various concepts in this article, but unless otherwise specified, these concepts are not limited by these terms. These terms are only used to distinguish one concept from another. For example, without departing from the scope of the embodiment of the present invention, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the words "if" and "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determination".

[0046] The terms "at least one", "multiple", "each", "any", etc. used in the present invention, at least one includes one, two or more, multiple includes two or more, each refers to each of the corresponding multiple, and any refers to any one of the multiple.

[0047] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which the present invention belongs. The terms used herein are only for the purpose of describing the embodiments of the present invention and are not intended to limit the present invention.

[0048] With the rapid development of privacy protection technology, it is necessary to improve data processing efficiency and security while ensuring user data privacy. At present, the existing online car-hailing privacy protection schemes are mainly implemented in two ways, but both have certain limitations. One is homomorphic encryption technology based on multi-party secure computing. Although this method can effectively protect user privacy, its calculation process is extremely demanding on computing power, and each homomorphic encryption operation requires a lot of computing resources. In the current actual environment with a large number of users and high concurrency of usage scenarios, this method is obviously difficult to balance efficiency and practical application needs. The other is a decentralized solution that improves the level of privacy protection by removing the centralized management of the platform. However, this model weakens the ability to protect user safety and rights while weakening platform supervision. Once a dispute arises, the lack of centralized management may make it difficult to properly resolve the problem, further increasing the implementation risk.

[0049] In view of this, the embodiment of the present invention provides a privacy protection for online car-hailing services based on differential privacy and key technology. The method revolves around multiple core roles, and each role works together to achieve an efficient and secure service process. Figure 2 As shown, these roles can include:

[0050] User end: refers to the direct users of the online car-hailing platform, that is, users who need to book travel services. They initiate requests through the client, interact with the platform, and complete operations such as trip booking and payment.

[0051] Platform side: refers to the management and service provider of the online ride-hailing platform. As the core coordinator of the system, it is responsible for receiving user requests, matching driver resources, monitoring trip status, and maintaining the stable operation of the entire system.

[0052] Driver side: refers to the actual executor of online car-hailing services - online car-hailing drivers. They receive order information through the driver-side application, complete the user's pick-up and drop-off services, and upload the trip status to the platform in real time to ensure transparent and efficient services.

[0053] Friends and family: Friends and family of online ride-hailing users can receive their travel information through the user's authorization. The introduction of this role is mainly used to improve the safety of users' travel, such as timely understanding of users' travel dynamics, providing assistance or calling the police when necessary.

[0054] AC (Authentication Server): The authentication server is a third-party authoritative and trusted institution in the system. It is mainly responsible for the distribution and exchange of keys to ensure the security and confidentiality of the platform and related data transmission processes.

[0055] refer to Figure 1, is an optional flow chart of a privacy protection communication method for online car-hailing based on differential privacy and key technology provided by an embodiment of the present invention, Figure 1 The method may include but is not limited to steps S100 to S500:

[0056] Step S100, sending first user data using differential privacy technology, and obtaining a driver-side public key of a target driver based on the first user data;

[0057] Step S200, establishing a communication connection with the driver side according to the driver side public key;

[0058] Step S300, obtaining a service ticket through an authentication server and a ticket issuing server;

[0059] Step S400, obtaining a target session key according to the service ticket;

[0060] Step S500, establishing a communication connection with relatives and friends through the target session key.

[0061] In steps S100 to S500 of some embodiments, the flexibility of differential privacy and the accuracy of key technology are organically combined, and this technical architecture can protect user privacy and ensure the availability and security of data. While meeting the efficient processing requirements of the online car-hailing platform, it further optimizes the secure storage, access and sharing of user data, providing a more efficient, flexible and secure privacy protection mechanism for the online car-hailing industry.

[0062] In some embodiments, step S100 may include but is not limited to steps S110 to S130:

[0063] Step S110, obtaining second user data;

[0064] Step S120, adding Laplace noise to the second user data by using differential privacy technology to obtain the first user data;

[0065] Step S130, sending the first user data to the platform end to obtain the driver-side public key of the target driver.

[0066] In steps S110 to S120 of some embodiments, when the user terminal initiates a taxi request, the system will obtain the second user data of the user terminal, and the second user data includes the current location information of the user in the user terminal. Through differential privacy technology, the system will add Laplace noise to the current location information of the user terminal, protect the current location information of the user in the user terminal, and obtain the first user data processed by differential privacy technology. Among them, Laplace noise refers to a random variable extracted from the Laplace distribution. Laplace distribution is a continuous probability distribution, and its probability density function is:

[0067]

[0068] Where f(x|μ,b) represents the probability density function of the Laplace distribution; μ represents the location parameter; b represents the scale parameter; and x represents the value of the random variable.

[0069] By perturbing the data with Laplace noise, the privacy of the data can be guaranteed by adding an appropriate amount of noise to the data or query results. Through simple scale control (i.e. scale parameter b), privacy protection can be achieved to a certain standard, i.e. differential privacy, to achieve efficient privacy protection.

[0070] In step S130 of some embodiments, the user end sends the first user data processed by differential privacy technology to the platform end. Through the matching and transmission operations of the platform end, the user end can obtain the public key of the driver end. Exemplarily, the user end sends the current location of the user after disturbance processing, that is, the first user data, to the platform end. The platform end matches and forwards the information to nearby drivers based on the approximate current location information provided by the user to achieve rapid response and service allocation. The target driver who agrees to receive the order returns his public key to the platform end, and the platform end forwards the public key to the user end so that the two parties can conduct subsequent encrypted communication.

[0071] In some embodiments, step S200 may include but is not limited to steps S210 to S230:

[0072] Step S210, obtaining second user data;

[0073] Step S220, encrypting the second user data according to the driver's public key to obtain third user data;

[0074] Step S230, sending the third user data to the driver side, and then communicating with the driver side.

[0075] In steps S210 to S230 of some embodiments, the user end uses the obtained driver end public key to encrypt the acquired user's current location information, and the user end establishes a connection with the driver end, and sends the encrypted location information, i.e., the third user data, to the driver end. After receiving the encrypted information, the driver end can decrypt the encrypted information using the driver end private key, thereby obtaining the user's location information and starting to provide services.

[0076] In steps S300 to S500 of some embodiments, user itinerary sharing and security can be achieved by establishing a communication connection between the user end and the friends and relatives end. Exemplarily, after the driver end starts to provide services, the user end encrypts the user's real-time location information through Fernet and sends it to the platform end. When the platform receives the encrypted data from the user, it will back it up to the platform database. Through the backup, when a dispute occurs between the user, the user can decrypt the data by providing the user's own encryption key to view the itinerary details. At the same time, the platform end will also forward the encrypted itinerary data to the friends and relatives end, thereby achieving user itinerary sharing and security. After obtaining the encrypted itinerary data, the friends and relatives end can use the symmetric key obtained from the user to decrypt the data, thereby obtaining the user's real-time location information and ensuring the transparency and security of the itinerary.

[0077] Among them, Fernet is a symmetric encryption method, which is part of Python's encryption library Cryptography. It is based on the AES (Advanced Encryption Standard) algorithm and combines HMAC (Hash Message Authentication Code) for message integrity verification to ensure the security and non-tamperability of encrypted data. The working principle of Fernet encryption is:

[0078] 1) Key generation:

[0079] Fernet uses a 32-byte key (44 characters after Base64 encoding), which is a symmetric key, that is, the same key is used for encryption and decryption.

[0080] 2) Encryption process:

[0081] Enter a piece of data (plain text) that needs to be encrypted;

[0082] Use the AES algorithm (mode is CBC) to encrypt and generate ciphertext;

[0083] Use HMAC to sign the ciphertext to generate complete encrypted data;

[0084] The final output is a Base64-encoded string containing the encrypted data and signature.

[0085] 3) Decryption process:

[0086] Enter the encrypted string (Base64 format);

[0087] Check the HMAC signature to verify the integrity and legitimacy of the data;

[0088] If the signature verification passes, the same key is used to decrypt the ciphertext and restore the plaintext data.

[0089] In some optional embodiments of the present invention, the Kerberos protocol is used to exchange symmetric keys. Through Kerberos, the user end and the friend end do not directly exchange symmetric encryption keys, but rely on the Kerberos ticket issuance server (TGS) to generate and distribute session keys. This key is used for symmetric encryption communication between the user end and the friend end, ensuring the information security between the two parties. In this process, Kerberos ensures multiple security measures such as identity authentication, secure key exchange, and prevention of replay attacks. Kerberos avoids the risk of directly transmitting keys on the network by using tickets and session keys when implementing key exchange, thereby ensuring the security of encrypted communications.

[0090] In some embodiments, step S300 may include but is not limited to steps S310 to S320:

[0091] Step S310, sending an identity authentication request to the authentication server to obtain a TGT and a first session key;

[0092] Step S320: Send a request to access the friends and relatives terminal to the ticket issuing server according to the TGT to obtain the service ticket.

[0093] In steps S310 to S320 of some embodiments, the Kerberos protocol is used to exchange symmetric keys. First, both parties must pass the Kerberos authentication respectively to obtain a valid TGT (Ticket GrantingTicket) and be able to access the services in the Kerberos system. Exemplarily, the user terminal sends an identity authentication request to the authentication server (AS). After the authentication server verifies the user's identity, it returns a Ticket GrantingTicket (TGT, ticket granting ticket) and a first session key (a key used to communicate with AS) to the user. The user terminal uses the TGT obtained from AS to request a service ticket (Service Ticket) for accessing friends and relatives from the ticket issuing server (TGS). After the ticket issuing server verifies the user's TGT, it returns a service ticket for accessing the friends and relatives end and a second session key (a key used to communicate with TGS) to the user terminal. The service ticket contains an encrypted target session key, which is used for communication between the user terminal and the friends and relatives end. Similarly, the friends and relatives end also needs to submit a request to the AS and pass the identity authentication, and the AS returns the TGT and session key of the friends and relatives end. Similarly, the friend and family end will also request a communication service ticket from the TGS with the user end, so that both parties can authenticate each other and exchange keys through the Kerberos protocol. The Kerberos workflow will use TGS to allow the user and friend and family end to obtain service tickets, which contain session keys related to the communication between the two parties, thereby achieving symmetric encrypted communication between the user and friend and family end.

[0094] In steps S400 to S500 of some embodiments, the service ticket is decrypted by the first session key to obtain the target session key. Exemplarily, after the user terminal obtains the service ticket returned by the TGS, the service ticket is decrypted by the first session key to obtain the target session key, and then the target session key is used to establish a communication connection with the friend and family terminal to communicate with the friend and family terminal.

[0095] After step S500 in some embodiments, it also includes: sending the service ticket and the fourth user data encrypted symmetrically to the friends and relatives side. Exemplarily, after the user side successfully establishes a communication connection with the friends and relatives side, the user side sends an encrypted message to the friends and relatives side, and the user side sends the service ticket and other relevant information (such as timestamp) to the friends and relatives side. After receiving the message, the friends and relatives side uses its own private key (that is, the key provided by TGS) to decrypt the service ticket and obtain the session key sent by the user side. The friends and relatives side uses the session key to verify the identity of the user side, and can start secure communication with the user side through symmetrical encryption. After the communication channel is established, the user side and the friends and relatives side can securely exchange keys for itinerary encryption.

[0096] The embodiment of the present invention provides a privacy protection communication scheme for online car-hailing with both efficiency and security. In view of the privacy protection problem of user location information, differential privacy technology is introduced to process user location data. Through this method, the platform cannot directly obtain the specific location information of the user when matching a driver for the user, but can only access the fuzzy data after disturbance processing, thereby effectively protecting the user's privacy. At present, the mainstream privacy protection methods usually adopt homomorphic encryption or blockchain technology. Although they can provide higher security, these technologies often rely on complex cryptographic calculations and sophisticated system design. In the actual social environment, the online car-hailing platform needs to process a large number of high-frequency orders at the same time. The traditional method is difficult to meet the needs of efficient processing due to the large amount of calculation. The present invention successfully circumvents the above problems through differential privacy technology. Experimental results show that the calculation process of differential privacy is very fast, which can greatly improve the operation efficiency of the scheme while protecting user privacy. This feature makes the privacy protection scheme of the present invention more feasible in practical applications, taking into account both security and practicality, and providing an efficient and scalable solution for the online car-hailing industry. In addition, in the process of user service, the embodiment of the present invention cleverly applies cryptographic technology to protect the travel data to meet the dual requirements of real-time and security. In the actual social environment, user data needs to be updated in real time to ensure the timeliness and accuracy of the travel information. Therefore, this solution adopts symmetric encryption technology to protect the travel data. Compared with other encryption methods, symmetric encryption has the advantage of fast encryption and decryption speed, which can support the user's relatives and friends to view the user's location in real time, while ensuring the privacy and security of the information. The encrypted travel data is securely stored by the platform. When a transaction dispute occurs between the user and the driver, the user can decrypt the data on the platform through the key, and effectively use the platform's intervention mechanism to protect the user's legitimate rights and interests. In view of the key key exchange problem in the symmetric encryption scheme, the embodiment of the present invention introduces the Kerberos protocol. Through the Kerberos Ticket Authorization Service (TGS), the user end and the friend end do not need to directly exchange symmetric encryption keys, but the Kerberos system generates and distributes session keys. The key is used for symmetric encryption communication between the two parties to ensure the security of data transmission.

[0097] Taking the use of differential privacy to complete the three steps of connecting users with drivers, sharing user itineraries and ensuring security, and secure exchange of symmetric keys as an example, the embodiment of the present invention is divided into three parts, and the implementation process is as follows:

[0098] (1) Part I (such as Figure 3 As shown): Using differential privacy to connect users and drivers

[0099] Step 1: When a user initiates a taxi request, the system will add Laplace noise to the user's current location to protect the user's location information.

[0100] Step 2: The user sends the disturbed geographic location information to the platform. The platform matches and forwards it to nearby drivers based on the approximate location information provided by the user to achieve rapid response and service allocation.

[0101] Step 3: The driver who agrees to accept the order returns his public key to the platform, which then forwards the public key to the user so that both parties can conduct subsequent encrypted communication.

[0102] Step 4: The user encrypts his / her location information with the driver's public key, establishes a connection with the driver, and sends the encrypted location information to the driver. After receiving the encrypted information, the driver can decrypt it with his / her private key to obtain the user's location information and start providing services.

[0103] Optionally, refer to Figure 4 , the user location information exchange process has the following steps:

[0104] Step 1: User verifies identity with AC: The user first needs to prove his or her identity to a third-party trusted organization (AC).

[0105] Step 2: The driver verifies his identity with the AC: Similarly, the driver also needs to prove his identity to a third-party trusted agency (AC).

[0106] Step 3: AC assigns a key pair (PK1, SK1) to the user: After verifying the user's identity, AC assigns a pair of public and private keys to the user, where PK1 is the public key and SK1 is the private key.

[0107] Step 4. AC assigns a key pair (PK2, SK2) to the driver: After verifying the driver's identity, AC will assign another pair of public and private keys to the driver, where PK2 is the public key and SK2 is the private key.

[0108] Step 5. The user encrypts his / her location information with the public key PK2: The user uses the driver's public key PK2 obtained from the platform to encrypt his / her location information.

[0109] Step 6: User sends encrypted location information: The user sends the encrypted location information to the driver.

[0110] Step 7: The driver uses his own private key SK2 to decrypt and obtain the location information: After receiving the encrypted location information, the driver uses his own private key SK2 to decrypt the information.

[0111] Step 8: Driver starts serving: Once the driver has decrypted the location information, he can start serving the user.

[0112] Through this user location information exchange process, the secure transmission of location information is ensured, because only the driver with the corresponding private key can decrypt this information. At the same time, through identity authentication and key distribution, the identity security of both parties is also ensured.

[0113] (2) Part II (such as Figure 5 User itinerary sharing and security assurance

[0114] Step 1: After starting the service, users encrypt their real-time information via Fernet and send it to the platform.

[0115] Step 2: When the platform receives the encrypted data from the user, it will back it up to the platform database. At the same time, the platform will also forward the encrypted itinerary data to relatives and friends.

[0116] Step 3: After obtaining the encrypted itinerary data, friends and relatives can use the symmetric key obtained from the user to decrypt the data, thereby obtaining the user's real-time location information and ensuring the transparency and security of the itinerary.

[0117] (3) Part III (such as Figure 6 : Secure exchange of symmetric keys

[0118] Step 1: User Authentication

[0119] First, both parties must pass Kerberos authentication to obtain a valid TGT and access services in the Kerberos system.

[0120] ① The client logs in and requests a TGT:

[0121] The client submits an authentication request to the AS (Authentication Server), and the AS verifies the identity of the client (through a password); the AS returns a TGT and a session key to the client. This session key is known only to the client and the AS.

[0122] ②Friends and relatives log in and request TGT:

[0123] Similarly, the friend submits a request to the AS and is authenticated, and the AS returns the friend's TGT and session key.

[0124] At this point, the user and the friend have their own TGT and session keys, but these keys are only used for communication between the user and AS, and between the friend and AS, and cannot be used directly for encryption between each other.

[0125] Step 2: Obtain a service ticket through TGT

[0126] In order to achieve symmetric encrypted communication between the user and the friends and relatives, the Kerberos workflow uses TGS to allow both parties to obtain service tickets, which contain session keys related to the communication between the two parties.

[0127] ① The user requests TGS to access the services of the friends and relatives:

[0128] The user now wants to establish communication with the friend, so the user needs to request a service ticket from TGS that can be used to access Bob. The user submits the user's TGT and the service request to communicate with the friend (i.e., request to access one of Bob's services) to TGS. Next, TGS uses the user's TGT for verification and generates a new session key, which will be used for communication between the user and the friend. Then, TGS returns an encrypted service ticket and session key to the user.

[0129] ② The friend-client requests the user-client service from TGS:

[0130] Similarly, the friend and family side will also request a communication service ticket with the user side from TGS, so that both parties can authenticate each other and exchange keys through the Kerberos protocol.

[0131] Step 3: Establish communication

[0132] At this point, both the user and the friend have a service ticket containing the encrypted session key, and they can use this session key for symmetrically encrypted communication.

[0133] ① The user sends encrypted messages to friends and relatives:

[0134] After the client receives the service ticket returned by TGS, it decrypts and obtains the session key, and then uses this key to communicate with the friend and family. Then, the client sends the service ticket and other relevant information (such as timestamp) to the friend and family.

[0135] ②Friends and relatives verify and start communication:

[0136] After receiving the message, the friend uses its own private key (the key provided by TGS) to decrypt the service ticket and obtain the session key. The friend uses the session key to verify the identity of the user and can start secure communication with the user through symmetrical encryption.

[0137] After the communication channel is established, the user and friends can securely exchange keys for itinerary encryption.

[0138] It should be noted that in each specific embodiment of the present invention, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0139] The embodiment of the present invention further provides a privacy protection communication device for online car-hailing based on differential privacy and key technology, which can implement the above-mentioned privacy protection communication method for online car-hailing based on differential privacy and key technology. The device includes:

[0140] The first module is used to send first user data using differential privacy technology, and obtain a driver-side public key of a target driver based on the first user data;

[0141] The second module is used to establish a communication connection with the driver side according to the driver side public key;

[0142] The third module is used to obtain a service ticket through an authentication server and a ticket issuing server;

[0143] A fourth module is used to obtain a target session key according to the service ticket;

[0144] The fifth module is used to establish a communication connection with relatives and friends through the target session key.

[0145] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0146] The embodiment of the present invention also provides an electronic device, which includes a processor and a memory, wherein the memory stores a computer program, and when the processor executes the computer program, the above-mentioned online car-hailing privacy protection communication method based on differential privacy and key technology is implemented. The electronic device can be any intelligent terminal including a tablet computer, a car-mounted computer, etc.

[0147] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0148] refer to Figure 7 , Figure 7 The hardware structure of an electronic device of another embodiment is illustrated, and the electronic device includes:

[0149] The processor 601 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided by the embodiments of the present invention.

[0150] The memory 602 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 602 can store an operating system and other applications. When the technical solution provided in the embodiments of this specification is implemented by software or firmware, the relevant program code is stored in the memory 602, and the processor 601 calls and executes the privacy protection communication method for online car-hailing based on differential privacy and key technology in the embodiments of the present invention;

[0151] Input / output interface 603, used to implement information input and output;

[0152] Communication interface 604, used to realize communication interaction between the device and other devices, which can be realized through wired mode (such as USB, network cable, etc.) or wireless mode (such as mobile network, WI FI, Bluetooth, etc.);

[0153] Bus 605 , which transmits information between various components of the device (e.g., processor 601 , memory 602 , input / output interface 603 , and communication interface 604 );

[0154] The processor 601 , the memory 602 , the input / output interface 603 and the communication interface 604 are connected to each other in communication within the device via a bus 605 .

[0155] An embodiment of the present invention also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the above-mentioned online car-hailing privacy protection communication method based on differential privacy and key technology.

[0156] It can be understood that the contents of the above method embodiments are all applicable to the present storage medium embodiments, the functions specifically implemented by the present storage medium embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0157] The embodiment of the present invention also provides a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. The processor of the computer device can read the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes the aforementioned online car-hailing privacy protection communication method based on differential privacy and key technology.

[0158] In summary, the privacy protection communication method and device for online car-hailing based on differential privacy and key technology in the embodiment of the present invention has the following advantages:

[0159] 1. The embodiment of the present invention disturbs the data through Laplace noise, and can ensure the privacy of the data by adding an appropriate amount of noise to the data or query results. Through simple scale control (i.e., scale parameter b), privacy protection can be achieved to a certain standard, i.e., differential privacy, to achieve efficient privacy protection. In addition, it is relatively simple to generate Laplace noise, and its mathematical properties also enable better privacy protection when protecting privacy. Compared with Gaussian noise, Laplace noise is more suitable for certain specific privacy protection models, especially when direct exposure poses a greater risk to user privacy.

[0160] 2. The embodiment of the present invention uses the strong robustness and adaptability of Laplace noise to perturb data. The thick tail of Laplace noise makes it have a greater impact on extreme abnormal data in some scenarios, but it can also prevent data leakage while protecting privacy. In addition, Laplace distribution is applicable to a variety of data types, especially when processing continuous data, and can well balance privacy protection and data authenticity.

[0161] 3. The embodiment of the present invention uses the Fernet symmetric encryption method to encrypt the user's real-time location information on the user side and then sends it to the platform side. Fernet ensures the security and non-tamperability of the encrypted data. The platform side backs up the received encrypted data to the platform database. Through the backup, when a dispute occurs between users, the user's encryption key can be provided to decrypt the data and view the itinerary details. At the same time, the platform side will also forward the encrypted itinerary data to relatives and friends, thereby realizing user itinerary sharing and security protection.

[0162] 4. The embodiment of the present invention adopts the Kerberos protocol to exchange symmetric keys, ensuring multiple security measures such as identity authentication, secure key exchange, and prevention of replay attacks. Kerberos avoids the risk of directly transmitting keys on the network by using tickets and session keys when implementing key exchange, thereby ensuring the security of encrypted communications.

[0163] In some selectable embodiments, the function / operation mentioned in the block diagram may not occur in the order mentioned in the operation diagram. For example, depending on the function / operation involved, the two boxes shown in succession can actually be executed substantially simultaneously or the boxes can sometimes be executed in reverse order. In addition, the embodiment presented and described in the flow chart of the present invention is provided by way of example, for the purpose of providing a more comprehensive understanding of technology. The disclosed method is not limited to the operation and logic flow presented herein. Selectable embodiments are expected, wherein the order of various operations is changed and the sub-operation of a part for which is described as a larger operation is performed independently.

[0164] In addition, although the present invention is described in the context of functional modules, it should be understood that, unless otherwise specified, one or more of the functions and / or features described may be integrated into a single physical device and / or software module, or one or more functions and / or features may be implemented in separate physical devices or software modules. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the present invention. More specifically, in view of the properties, functions, and internal relationships of the various functional modules in the device disclosed herein, the actual implementation of the module will be understood within the conventional skills of the engineer. Therefore, those skilled in the art can implement the present invention set forth in the claims without excessive experimentation using ordinary techniques. It is also understood that the specific concepts disclosed are merely illustrative and are not intended to limit the scope of the present invention, which is determined by the full scope of the appended claims and their equivalents.

[0165] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program codes.

[0166] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0167] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0168] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0169] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0170] Although the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the claims and their equivalents.

[0171] The above is a specific description of the preferred implementation of the present invention, but the present invention is not limited to the described embodiments. Those skilled in the art may make various equivalent modifications or substitutions without violating the spirit of the present invention. These equivalent modifications or substitutions are all included in the scope defined by the claims of the present invention.

Claims

1. A privacy protection communication method for online car-hailing based on differential privacy and key technology, characterized in that: The following steps are involved: Sending first user data using differential privacy technology, and obtaining a driver-side public key of a target driver based on the first user data; Establishing a communication connection with the driver side according to the driver side public key; Obtain service tickets through the authentication server and ticket issuing server; According to the service ticket, obtaining a target session key; A communication connection with relatives and friends is established through the target session key.

2. The method according to claim 1, characterized in that The sending of the first user data using the differential privacy technology and obtaining the driver-side public key of the target driver according to the first user data includes the following steps: Acquiring second user data; By using differential privacy technology, Laplace noise is added to the second user data to obtain the first user data; The first user data is sent to the platform to obtain the driver-side public key of the target driver.

3. The method according to claim 1, characterized in that The step of establishing a communication connection with the driver side according to the driver side public key comprises the following steps: Acquiring second user data; Encrypt the second user data according to the driver's public key to obtain third user data; The third user data is sent to the driver side, and then communicated with the driver side.

4. The method according to claim 1, characterized in that: The process of obtaining a service ticket through an authentication server and a ticket issuing server includes the following steps: Send an identity authentication request to the authentication server to obtain a TGT and a first session key; According to the TGT, a request to access the friends and relatives terminal is sent to the ticket issuing server to obtain the service ticket.

5. The method according to claim 4, characterized in that The step of obtaining a target session key according to the service ticket comprises the following steps: The service ticket is decrypted using the first session key to obtain the target session key.

6. The method according to claim 1, characterized in that After establishing a communication connection with the friend or relative terminal through the target session key, the method further includes the following steps: The service ticket and the symmetrically encrypted fourth user data are sent to the friend or relative terminal.

7. A privacy protection communication device for online car-hailing based on differential privacy and key technology, characterized in that: include: The first module is used to send first user data using differential privacy technology, and obtain a driver-side public key of a target driver based on the first user data; The second module is used to establish a communication connection with the driver side according to the driver side public key; The third module is used to obtain a service ticket through an authentication server and a ticket issuing server; A fourth module is used to obtain a target session key according to the service ticket; The fifth module is used to establish a communication connection with relatives and friends through the target session key.

8. An electronic device, characterized in that: including a processor and a memory; The memory is used to store programs; The processor executes the program to implement the method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The storage medium stores a program, and the program is executed by a processor to implement the method according to any one of claims 1 to 6.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images