Enterprise talent portrait generation method and device, equipment and storage medium

Through the dual-layer encryption mechanism of public and private keys and homomorphic encryption technology, the problem of employee personal privacy data leakage that enterprises may cause when generating talent portraits is solved, and efficient and secure talent portrait generation is achieved.

CN119728161APending Publication Date: 2025-03-28湖北省信产通信服务有限公司
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411643660.1
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-11-18
Publication Date
2025-03-28

AI Technical Summary

Technical Problem

When enterprises analyze massive personnel information to generate talent portraits, they can easily lead to employee personal privacy data leaks, which in turn brings data management risks.

Method used

The two-layer encryption mechanism of public and private keys is adopted to encrypt the job name through a symmetric key, and then the encrypted ciphertext is secondaryly encrypted to generate the talent portrait ciphertext. This ciphertext is only decrypted by the server during transmission to avoid direct contact with the original talent information.

Benefits of technology

Ensure the security of job names and personal information during the transmission process, prevent data leakage, and improve the data security of enterprise information systems. At the same time, through homomorphic encryption technology, the server can perform calculations without decrypting the original data, which improves the accuracy and efficiency of talent portrait generation.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119728161A_ABST
    Figure CN119728161A_ABST
Patent Text Reader

Abstract

The invention relates to an enterprise talent portrait generation method and device, equipment and a storage medium, and belongs to the technical field of user portrays.The method applied to a client comprises the steps that a talent portrait generation request is obtained in response to a triggering action of a user for enterprise talent portrait generation, and the talent portrait generation request comprises a post name; encrypting the post name based on a symmetric key to obtain a first post name ciphertext; encrypting the first post name ciphertext based on a public key to obtain a second post name ciphertext; sending the second post name ciphertext to a server; obtaining a talent portrait ciphertext generated by the server based on the second post name ciphertext and a homomorphic encryption technology; and decrypting the talent portrait ciphertext based on the symmetric key to obtain talent portrait information corresponding to the talent portrait generation request. The method has the effects of improving the personnel information security in the enterprise and reducing the leakage of the personal privacy data of the enterprise employees.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of user portraits, and in particular to a method, device, equipment and storage medium for generating enterprise talent portraits. Background Art

[0002] With the acceleration of global economic integration and increasingly fierce market competition, companies are paying more and more attention to the discovery and management of talents. In order to maintain long-term competitiveness in the fierce market competition, companies often need to analyze and construct talent portraits from massive amounts of personnel information to select talents efficiently.

[0003] However, the massive amount of personnel information in an enterprise often contains users' personal privacy data. In the process of analyzing these personnel data to draw talent portraits, it is inevitable that the personal privacy data of the company's employees will be leaked, which will ultimately bring huge risks to the company's internal data management.

[0004] Therefore, there is an urgent need for a technology for generating corporate talent portraits that can not only effectively ensure the security of personnel information in the enterprise, but also enable the enterprise to accurately analyze employee data. Summary of the invention

[0005] The technical problem to be solved by the present invention is to provide a method, device, equipment and storage medium for generating enterprise talent portraits, aiming to solve at least one of the above-mentioned technical problems.

[0006] The technical solution of the present invention to solve the above technical problems is as follows:

[0007] In the first aspect, the present application provides a method for generating a corporate talent profile, which adopts the following technical solution:

[0008] A method for generating a corporate talent portrait, applied to a client, the method comprising:

[0009] In response to a user's triggering action for generating a talent portrait for an enterprise, obtaining a talent portrait generation request, wherein the talent portrait generation request includes a job title;

[0010] Encrypt the job title based on the symmetric key to obtain a first job title ciphertext;

[0011] Encrypt the first job title ciphertext based on the public key to obtain a second job title ciphertext;

[0012] Sending the second job title ciphertext to the server, so that the server generates a talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information sent through the data center, and a preset homomorphic encryption technology, wherein the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and the personnel information corresponding to each job title;

[0013] Obtaining the talent portrait ciphertext sent by the server;

[0014] The talent portrait ciphertext is decrypted based on the symmetric key to obtain the talent portrait information corresponding to the talent portrait generation request.

[0015] The beneficial effects of the present invention are: through the double-layer encryption mechanism of public key and private key, the security of job titles during transmission is ensured, the leakage of data during transmission is prevented, and the data security of the enterprise information system is greatly improved.

[0016] Since the talent portrait ciphertext is generated through homomorphic encryption technology, the server can perform calculations without decryption when processing data, which avoids the server from directly contacting the original talent information, thereby reducing the risk of privacy leakage. It improves the accuracy and efficiency of talent portrait generation. It saves the time of enterprise managers to manually screen data, reduces the workload of the enterprise's human resources department, and improves work efficiency.

[0017] Based on the above technical solution, the present invention can also be improved as follows.

[0018] Furthermore, before obtaining the talent portrait generation request, the method further includes:

[0019] Get the public key sent by the server and the symmetric key sent by the data center.

[0020] The beneficial effect of adopting the above further solution is that by obtaining the public key sent by the server and the symmetric key sent by the data center in advance, the data security in the subsequent data transmission and processing process is ensured. The dual encryption mechanism of public key and symmetric key prevents the risk of man-in-the-middle attack and data leakage, and ensures the security of internal personnel information of the enterprise.

[0021] Furthermore, before obtaining the talent portrait generation request, the method further includes:

[0022] Obtaining the personnel position information of the enterprise, wherein the personnel position information includes all the position titles of the enterprise and the personnel information corresponding to each position title;

[0023] Encrypting the personnel position information based on the symmetric key to obtain the first personnel position ciphertext information;

[0024] Encrypting the first personnel position ciphertext information based on the public key to obtain the second personnel position ciphertext information;

[0025] The encrypted position information of the second personnel is sent to the data center so that the data center stores the encrypted position information of the second personnel.

[0026] The beneficial effect of adopting the above further solution is: all personnel information is encrypted by using symmetric encryption and public key encryption, and the encrypted personnel position information is sent to the data center for storage. The overall security of the enterprise personnel data is guaranteed, that is, neither the server nor the client can unilaterally decrypt the real personal information data completely, eliminating the possibility of privacy leakage.

[0027] In the second aspect, the present application provides a method for generating a corporate talent portrait, which adopts the following technical solution:

[0028] A method for generating a corporate talent portrait, applied to a server, the method comprising:

[0029] Obtaining a second job title ciphertext sent by the client and a second personnel job ciphertext information sent by the data center, wherein the second job title ciphertext is a job title that has been encrypted twice, and the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and personnel information corresponding to each job title;

[0030] Generate a talent portrait ciphertext based on the ciphertext of the second job title, the ciphertext information of the second person’s job title, and a preset homomorphic encryption technology;

[0031] The talent portrait ciphertext is sent to the client, so that the client decrypts the talent portrait ciphertext to obtain the talent portrait information.

[0032] The beneficial effects of the present invention are: through the double-layer encryption mechanism of public key and private key, the security of job title and personal information during transmission is ensured, the leakage of data during transmission is prevented, and the data security of the enterprise information system is greatly improved.

[0033] Homomorphic encryption technology can efficiently process encrypted personnel information and complete statistical analysis without decrypting the original data, ensuring data security, achieving accurate matching of job titles and personnel information, and improving the accuracy and efficiency of talent portrait generation. This greatly saves the time of enterprise managers in manually screening data, reduces the workload of the enterprise's human resources department, and improves work efficiency.

[0034] Based on the above technical solution, the present invention can also be improved as follows.

[0035] Furthermore, before obtaining the second job title ciphertext sent by the client and the second personnel job ciphertext information sent by the data center, the method further includes:

[0036] Generate a public-private key pair based on a preset public-key encryption algorithm, wherein the public-private key pair includes a public key and a private key;

[0037] The public key is sent to the client and the data center respectively.

[0038] The beneficial effect of adopting the above further scheme is that the public-private key pair generated by the method in the initialization phase provides a basic guarantee for subsequent data encryption and decryption, and the public key is sent to the client and the data center respectively, ensuring the communication security between the client and the data center. The distribution of public keys ensures that the client and the data center can exchange data safely without being intercepted or tampered with by a third party, thereby effectively preventing the leakage of personal privacy data and providing a reliable foundation for subsequent personnel information storage and talent portrait generation.

[0039] Further, the generating of the talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information and the preset homomorphic encryption technology includes:

[0040] Decrypt the second job title ciphertext and the second personnel job ciphertext information respectively based on the private key to obtain the third job title ciphertext and the third personnel job ciphertext information;

[0041] Based on the preset homomorphic encryption technology, searching the third personnel position ciphertext information for multiple personnel ciphertext information that matches the third position name ciphertext;

[0042] Based on the preset categories and all the ciphertext information of the personnel, the frequency of different attributes under each category is calculated, the categories include gender, job title, education, political status and certificate, and each category corresponds to multiple attributes;

[0043] Based on the attributes corresponding to the highest frequency of each of the categories, a ciphertext of the talent profile matching the job title is constructed.

[0044] The beneficial effect of adopting the above further scheme is that the server uses the private key to decrypt the encrypted second job title ciphertext and the second personnel job ciphertext information, eliminating the possibility of privacy leakage in the client and data center. Through the properties of homomorphic encryption, the encrypted data set of personnel matching the selected job title is purposefully screened out, and the data statistics of various personnel attributes in the set are performed to quickly obtain the job attribute set, which is the talent portrait.

[0045] By calculating the frequency of different attributes under each category and selecting high-frequency attributes to construct a talent profile ciphertext that matches the job title, we can ensure data security and privacy protection while improving the accuracy and efficiency of talent profile generation. This approach not only avoids the inefficiency and privacy leakage caused by manual screening in traditional methods, but also significantly improves the data security of enterprise information systems.

[0046] In the third aspect, the present application provides a device for generating a corporate talent portrait, which adopts the following technical solution:

[0047] A device for generating a corporate talent portrait, applied to a client, comprising:

[0048] A first acquisition module is used to obtain a talent portrait generation request in response to a user's triggering action for enterprise talent portrait generation, wherein the talent portrait generation request includes a job title;

[0049] A first encryption module, used to encrypt the job title based on a symmetric key to obtain a first job title ciphertext;

[0050] A second encryption module, used to encrypt the first job title ciphertext based on a public key to obtain a second job title ciphertext;

[0051] A first sending module is used to send the second job title ciphertext to a server, so that the server generates a talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information sent through the data center, and a preset homomorphic encryption technology, wherein the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and the personnel information corresponding to each job title;

[0052] A second acquisition module is used to acquire the talent portrait ciphertext sent by the server;

[0053] The first decryption module is used to decrypt the talent portrait ciphertext based on the symmetric key to obtain the talent portrait information corresponding to the talent portrait generation request.

[0054] In a fourth aspect, the present application provides a device for generating a corporate talent portrait, which adopts the following technical solution:

[0055] A device for generating a corporate talent portrait, applied to a server, comprising:

[0056] A third acquisition module is used to obtain a second job title ciphertext sent by the client and a second personnel job ciphertext information sent by the data center, wherein the second job title ciphertext is a job title that has been encrypted twice, and the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and personnel information corresponding to each job title;

[0057] A generation module, used to generate a talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information and a preset homomorphic encryption technology;

[0058] The second sending module is used to send the talent portrait ciphertext to the client, so that the client can decrypt the talent portrait ciphertext to obtain the talent portrait information.

[0059] In a fifth aspect, the present application provides an electronic device, which adopts the following technical solution:

[0060] An electronic device comprises a memory and a processor, wherein the memory stores a computer program that can be loaded by the processor and executes the enterprise talent portrait generation method described in any one of the first aspects.

[0061] In a sixth aspect, the present application provides a computer-readable storage medium, which adopts the following technical solution:

[0062] A computer-readable storage medium stores a computer program that can be loaded by a processor and execute the enterprise talent portrait generation method described in any one of the first aspects.

[0063] Additional aspects and advantages of the present application will be partially given in the following description, which will become apparent from the following description, or will be understood through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] Figure 1 A schematic diagram of a process of applying a method for generating a corporate talent portrait provided by an embodiment of the present invention to a client;

[0065] Figure 2 A flow chart of a method for generating a corporate talent portrait provided by an embodiment of the present invention and applied to a server;

[0066] Figure 3 A structural block diagram of an enterprise talent portrait generation device provided by an embodiment of the present invention applied to a client;

[0067] Figure 4 A structural block diagram of an enterprise talent portrait generation device provided by an embodiment of the present invention applied to a server;

[0068] Figure 5 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0069] The present application is further described in detail below in conjunction with the accompanying drawings.

[0070] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0071] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of the present invention, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0072] Figure 1 A schematic diagram of a process of applying a method for generating a corporate talent portrait provided by an embodiment of the present invention to a client;

[0073] like Figure 1 As shown, the main process of the method is described as follows (steps S11 to S16):

[0074] Step S11, in response to a user's triggering action for generating a talent portrait for an enterprise, obtaining a talent portrait generation request, wherein the talent portrait generation request includes a job title;

[0075] In one embodiment, the trigger action refers to an operation performed by a user in a client, which is intended to start the talent profile generation process. The user can trigger the talent profile generation button through a touch screen, a button, etc. to generate a trigger action for the enterprise talent profile generation. The talent profile generation request includes a job title, which specifies the specific position of the required talent.

[0076] The user can input the job title in the client so that the client can obtain the job title. The client can also provide the user with a list of job titles for the user to choose from. After the user selects, the client records the selected job title.

[0077] In one implementation, before the client obtains the talent portrait generation request, the method further includes:

[0078] Get the public key sent by the server and the symmetric key sent by the data center.

[0079] The server performs an initialization operation, generates a public-private key pair based on a preset public key encryption algorithm, and sends the public key to the client and the data center respectively, wherein the public-private key includes a public key and a private key.

[0080] The server can send the generated public key to the client and data center through a secure channel, which can be HTTPS. After receiving the public key sent by the server, the client stores it in the local secure storage area.

[0081] The data center selects the same symmetric encryption algorithm as the client in advance and negotiates the symmetric key. The data center sends the generated symmetric key to the client through a secure channel. After the client receives the symmetric key sent by the data center, it also stores it in the local secure storage area.

[0082] Furthermore, before obtaining the talent portrait generation request, the method further includes:

[0083] Obtaining the personnel position information of the enterprise, wherein the personnel position information includes all the position titles of the enterprise and the personnel information corresponding to each position title;

[0084] Encrypting the personnel position information based on the symmetric key to obtain the first personnel position ciphertext information;

[0085] Encrypting the first personnel position ciphertext information based on the public key to obtain the second personnel position ciphertext information;

[0086] The encrypted position information of the second personnel is sent to the data center so that the data center stores the encrypted position information of the second personnel.

[0087] In one implementation, personnel position information is extracted from the company's internal databases such as the HR system and employee management system, and for each position title, the corresponding personnel information is listed, such as employee name, gender, age, education, work experience, skills, etc.

[0088] The symmetric key obtained from the data center is used to encrypt the personnel position information to obtain the first personnel position ciphertext information. The encryption process should ensure the integrity and confidentiality of the information to prevent it from being stolen or tampered with during transmission. The symmetric key is generated by a symmetric encryption algorithm.

[0089] The public key obtained from the server is used to encrypt the first person's position ciphertext information twice to obtain the second person's position ciphertext information.

[0090] The second person's position ciphertext information is sent to the data center for storage through a secure network channel (such as HTTPS, VPN, etc.). The dual encryption mechanism of public key and symmetric key prevents the risk of man-in-the-middle attacks and data leakage, and ensures the overall security of corporate personnel data. That is, neither the server nor the client can unilaterally decrypt the real personal information data completely, eliminating the possibility of privacy leakage.

[0091] Step S12, encrypting the job title based on the symmetric key to obtain a first job title ciphertext;

[0092] In one implementation, the symmetric key is sent by the data center through a secure channel, and the symmetric key encryption algorithm used by the data center may be an AES symmetric encryption algorithm, a DES symmetric encryption algorithm, or the like.

[0093] Step S13, encrypting the first job title ciphertext based on the public key to obtain a second job title ciphertext;

[0094] In one implementation, the public key is sent by the server through a secure channel, and the public key encryption algorithm used by the server may be an RSA encryption algorithm, an ECC encryption algorithm, or the like.

[0095] Step S14, sending the second job title ciphertext to the server, so that the server generates a talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information sent through the data center, and the preset homomorphic encryption technology, wherein the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and the personnel information corresponding to each job title;

[0096] Step S15, obtaining the talent portrait ciphertext sent by the server;

[0097] In one embodiment, when the client sends the second job title ciphertext to the server, the data center also sends the second personnel position ciphertext information to the server. The server obtains the second job title ciphertext sent by the client and the second personnel position ciphertext information sent by the data center, and uses the private key to decrypt the second job title ciphertext and the second personnel position ciphertext information respectively, and then uses homomorphic encryption technology to process the decrypted second job title ciphertext and the second personnel position ciphertext information to generate the talent portrait ciphertext. After that, the server sends the generated talent portrait ciphertext to the client. Homomorphic encryption technology allows specific mathematical operations to be performed on the ciphertext without decryption, thereby protecting the privacy of the data.

[0098] Step S16, decrypt the talent portrait ciphertext based on the symmetric key to obtain the talent portrait information corresponding to the talent portrait generation request.

[0099] In one implementation, the client uses the previously stored symmetric key to decrypt the talent portrait ciphertext, obtains the talent portrait plaintext, and displays the decrypted talent portrait information to the user for reference and decision-making. Since neither the server nor the client can unilaterally decrypt the real personal information data, the possibility of privacy leakage is eliminated, and the security of internal personnel information of the enterprise is guaranteed.

[0100] Figure 2 A flow chart of a method for generating a corporate talent portrait provided by an embodiment of the present invention and applied to a server;

[0101] like Figure 2 As shown, the main process of the method is described as follows (steps S21 to S25):

[0102] Step S21, obtaining a second job title ciphertext sent by the client and a second personnel job ciphertext information sent by the data center, wherein the second job title ciphertext is a job title that has been encrypted twice, and the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and personnel information corresponding to each job title;

[0103] In one implementation, before obtaining the second job title ciphertext sent by the client and the second personnel job ciphertext information sent by the data center, the method further includes:

[0104] The server generates a public-private key pair based on a preset public key encryption algorithm, wherein the public-private key includes a public key and a private key; the public key is sent to the client and the data center respectively, so that the client uses the received public key to perform a second encryption on the input job title, generate a second job title ciphertext, and send it to the server.

[0105] The data center will also send all job titles and the personnel information corresponding to each job title after double encryption using the public key to the server.

[0106] Step S22, generating a talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information and a preset homomorphic encryption technology;

[0107] In one implementation, specifically, step S22 mainly includes:

[0108] Step S221, decrypting the second job title ciphertext and the second personnel job ciphertext information respectively based on the private key to obtain the third job title ciphertext and the third personnel job ciphertext information;

[0109] In one implementation, since the server generates a public key using a preset public key encryption algorithm and sends it to the client and the data center in advance, the private key is used to decrypt the second job title ciphertext and the second personnel job ciphertext information to obtain the third job title ciphertext and the third personnel job ciphertext information respectively. The third job title ciphertext here is the result of one encryption, and the third personnel job ciphertext information includes the first encryption information of all job titles and their corresponding personnel.

[0110] Step S222: searching the third personnel position ciphertext information for multiple personnel ciphertext information that matches the third position name ciphertext based on the preset homomorphic encryption technology;

[0111] In one implementation, a search operation is performed directly on the ciphertext without decrypting the ciphertext information of the third person's position, to find multiple ciphertext information of personnel that match the ciphertext of the third position name. Homomorphic encryption allows specific mathematical operations to be performed on the ciphertext and obtains an encrypted result of the same operation performed on the plaintext.

[0112] Step S223, based on the preset categories and all the encrypted information of the personnel, calculate the frequency of different attributes under each category, the categories include gender, title, education, political status and certificate, each category corresponds to multiple attributes; for example, count the number of males and females among all matching personnel, the number of different titles, etc.

[0113] Step S224, based on the attributes corresponding to the highest frequencies of each of the categories, construct a ciphertext of the talent portrait that matches the job title.

[0114] In one implementation, for each category, the attribute with the highest frequency is selected as the representative feature of the talent profile under that category. These representative features are combined to construct a ciphertext of the talent profile that matches the job title. The construction process is performed in a ciphertext state and does not directly expose any sensitive information.

[0115] Step S23, sending the talent portrait ciphertext to the client, so that the client decrypts the talent portrait ciphertext to obtain the talent portrait information.

[0116] In one implementation, the server sends the constructed talent portrait ciphertext back to the client. The client uses the symmetric key it holds to decrypt the talent portrait ciphertext and obtain the talent portrait information. This information can be used for subsequent analysis, display or decision support.

[0117] The above implementation modes are described below with examples.

[0118] First, the server uses the pai llier public key encryption algorithm to generate a public-private key pair, with the public key as pk and the private key as sk, and publishes the public key to the data center and the client. The data center and the client select the same AES symmetric encryption algorithm and negotiate the symmetric key.

[0119] Specifically, the specific process of using the pail ier public key encryption algorithm to generate a public-private key pair is as follows:

[0120] Step Sa, the server randomly selects two independent large prime numbers p and q, satisfying gcd(pq,(p-1)(q-1))=1;

[0121] Step Sb, calculate n = pq, λ = lcm(p-1,q-1), randomly select

[0122] Step Sc, set Calculate μ = (L (g λ mod n 2 )) -1 mod n, we get the public key pk = (n, g) and the private key sk = (λ, μ).

[0123] Afterwards, the company's human resources staff will decompose the obtained personnel position information data into position names, personnel categories and attributes. Personnel categories include gender, education, political status, length of employment, professional titles, certificates and other key information, and input the personnel position information into the client.

[0124] After that, the client first uses the AES symmetric encryption algorithm and the symmetric key key to encrypt the personnel information as follows:

[0125] A=[E(key, job title), E(key, gender), ..., E(key, certificate)]; where the encryption set A is the encrypted information of the first person’s job title;

[0126] Then, the public key pk published by the server is used to encrypt the set A using the pailliar algorithm:

[0127] E pk (A)={E pk (E(key, job title)),E pk (E(key,gender)),...,E pk (E(key,certificate))};

[0128] The specific encryption process is: select a random number r, and use the public key pk to encrypt the elements in the set A one by one:

[0129] in, Finally, we get the encrypted set E pk (A)={E pk (E(key, job title)),E pk (E(key,gender)),...,E pk (E(key,certificate))}.

[0130] E pk(A) It is sent to the data center for storage, and the data center will store the encrypted information of the input personnel position information.

[0131] When a corporate talent portrait needs to be generated, the user enters a job title x from the client, and the client encrypts the input job title into E using the AES symmetric encryption algorithm and the pailliar public key encryption algorithm. pk (E(key,-x)) is sent to the server. At the same time, the data center also sends the encrypted data of the personnel position information including all personnel information stored in itself to the server. At this time, the encrypted data of the data center can be expressed as a ciphertext matrix:

[0132]

[0133] The server then uses the private key sk to compare each item in the first column of the ciphertext matrix with the ciphertext E pk (E(key,x)) calculates:

[0134] d=D sk (E pk (E(key,-x))×E pk (E(key, job title)));

[0135] Right now:

[0136]

[0137] According to the additive homomorphic property of the pailliar encryption algorithm, when the calculated d of an item in the first column of the matrix C is equal to 0, it can be said that the data in this item matches the position data entered by the client. Then, all the matching data are decrypted and filtered out to obtain the matrix R through this method:

[0138]

[0139] The server then screens the data in the matrix R and counts the number of times different data in each column appear. Special statistical schemes can be customized by the human resources department. Non-special statistical schemes select the encrypted attributes with the largest number of occurrences by default. The encrypted category attribute set T is:

[0140] T = {E(key, gender), ..., E(key, certificate)};

[0141] All the category attributes in T are the results of the server statistics. Finally, the server sends T to the client. After the client obtains the set T, it uses the key to decrypt each element in the set T and obtains the secretly generated talent profile information, that is, the talent category attribute set {target gender, target education, ..., target certificate}. Therefore, the talent profile information of the enterprise is automatically generated through this method, which greatly improves the data security of enterprise information.

[0142] In this method, the client uses a double-layer encryption mechanism of public key and private key to ensure the security of job titles during transmission, prevent data leakage during transmission, and greatly improve the data security of the enterprise information system.

[0143] Since the talent portrait ciphertext is generated through homomorphic encryption technology, the server can perform calculations without decryption when processing data, which avoids the server from directly contacting the original talent information, thereby reducing the risk of privacy leakage, ensuring data security, and achieving accurate matching of job titles and personnel information. It improves the accuracy and efficiency of talent portrait generation, saves the time of enterprise managers to screen data manually, reduces the workload of the enterprise's human resources department, and improves work efficiency.

[0144] Figure 3 A structural block diagram of an enterprise talent portrait generation device 300 provided by an embodiment of the present invention applied to a client;

[0145] like Figure 3 As shown, a device 300 for generating a corporate talent portrait mainly includes:

[0146] The first acquisition module 301 is used to obtain a talent portrait generation request in response to a user's triggering action for enterprise talent portrait generation, wherein the talent portrait generation request includes a job title;

[0147] A first encryption module 302, used to encrypt the job title based on a symmetric key to obtain a first job title ciphertext;

[0148] The second encryption module 303 is used to encrypt the first job title ciphertext based on the public key to obtain a second job title ciphertext;

[0149] The first sending module 304 is used to send the second job title ciphertext to the server, so that the server generates a talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information sent by the data center, and the preset homomorphic encryption technology, wherein the second personnel job ciphertext information is all the job titles of the enterprise that have been encrypted twice and the personnel information corresponding to each job title;

[0150] The second acquisition module 305 is used to acquire the talent portrait ciphertext sent by the server;

[0151] The first decryption module 306 is used to decrypt the talent portrait ciphertext based on the symmetric key to obtain the talent portrait information corresponding to the talent portrait generation request.

[0152] Optionally, an enterprise talent portrait generation device 300 further includes a key acquisition module, which is specifically used to: before obtaining the talent portrait generation request, obtain a public key sent by a server and a symmetric key sent by a data center.

[0153] Optionally, an enterprise talent portrait generation device 300 further includes a secondary encryption module, which is specifically used to: before obtaining the talent portrait generation request, obtain the enterprise's personnel position information, the personnel position information including all the position titles of the enterprise and the personnel information corresponding to each position title;

[0154] Encrypting the personnel position information based on the symmetric key to obtain the first personnel position ciphertext information;

[0155] Encrypting the first personnel position ciphertext information based on the public key to obtain the second personnel position ciphertext information;

[0156] The encrypted position information of the second personnel is sent to the data center so that the data center stores the encrypted position information of the second personnel.

[0157] Figure 4 A structural block diagram of an enterprise talent portrait generation device 400 provided by an embodiment of the present invention applied to a server;

[0158] like Figure 4 As shown, a device 400 for generating a corporate talent portrait mainly includes:

[0159] The third acquisition module 401 is used to obtain the second job title ciphertext sent by the client and the second personnel job ciphertext information sent by the data center, wherein the second job title ciphertext is the job title that has been encrypted twice, and the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and the personnel information corresponding to each job title;

[0160] A generating module 402, configured to generate a talent portrait ciphertext based on the second position name ciphertext, the second personnel position ciphertext information and a preset homomorphic encryption technology;

[0161] The second sending module 403 is used to send the talent portrait ciphertext to the client, so that the client can decrypt the talent portrait ciphertext to obtain the talent portrait information.

[0162] Optionally, the enterprise talent portrait generation device 400 further includes a key generation module, which is specifically used to:

[0163] Before obtaining the second job title ciphertext sent by the client and the second personnel job ciphertext information sent by the data center, generating a public-private key pair based on a preset public key encryption algorithm, wherein the public-private key pair includes a public key and a private key;

[0164] The public key is sent to the client and the data center respectively.

[0165] Optionally, the generating module 402 is specifically used for:

[0166] Decrypt the second job title ciphertext and the second personnel job ciphertext information respectively based on the private key to obtain the third job title ciphertext and the third personnel job ciphertext information;

[0167] Based on the preset homomorphic encryption technology, searching the third personnel position ciphertext information for multiple personnel ciphertext information that matches the third position name ciphertext;

[0168] Based on the preset categories and all the ciphertext information of the personnel, the frequency of different attributes under each category is calculated, the categories include gender, job title, education, political status and certificate, and each category corresponds to multiple attributes;

[0169] Based on the attributes corresponding to the highest frequency of each of the categories, a ciphertext of the talent profile matching the job title is constructed.

[0170] In one example, the module in any of the above devices can be one or more integrated circuits configured to implement the above methods, such as: one or more application specific integrated circuits (ASICs), or, one or more digital signal processors (DSPs), or, one or more field programmable gate arrays (FPGAs), or a combination of at least two of these integrated circuit forms.

[0171] For another example, when the modules in the device can be implemented in the form of a processing element scheduling program, the processing element can be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call a program. For another example, these modules can be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0172] Various objects such as various messages / information / equipment / network elements / systems / devices / actions / operations / processes / concepts that may appear in this application are named. It can be understood that these specific names do not constitute a limitation on the relevant objects. The names assigned may change with factors such as scenarios, contexts or usage habits. The understanding of the technical meaning of the technical terms in this application should be mainly determined from the functions and technical effects embodied / executed in the technical scheme.

[0173] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and modules described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0174] Those of ordinary skill in the art will appreciate that the modules and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0175] Figure 5 This is a structural block diagram of an electronic device 500 according to an embodiment of the present application.

[0176] like Figure 5 As shown, the electronic device 500 includes a processor 501 and a memory 502 , and may further include one or more of an information input / information output (I / O) interface 503 , a communication component 504 , and a communication bus 505 .

[0177] The processor 501 is used to control the overall operation of the electronic device 500 to complete all or part of the steps in the above-mentioned enterprise talent portrait generation method; the memory 502 is used to store various types of data to support the operation of the electronic device 500, and these data may include, for example, instructions for any application or method operated on the electronic device 500, and data related to the application. The memory 502 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0178] The I / O interface 503 provides an interface between the processor 501 and other interface modules, and the above-mentioned other interface modules can be keyboards, mice, buttons, etc. These buttons can be virtual buttons or physical buttons. The communication component 504 is used to test the wired or wireless communication between the electronic device 500 and other devices. Wireless communication, such as Wi-Fi, Bluetooth, Near Field Communication (NFC), 2G, 3G or 4G, or a combination of one or more of them, so the corresponding communication component 504 can include: Wi-Fi components, Bluetooth components, NFC components.

[0179] The communication bus 505 may include a path to transmit information between the above components. The communication bus 505 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus, etc. The communication bus 505 may be divided into an address bus, a data bus, a control bus, etc.

[0180] The electronic device 500 can be implemented by one or more application specific integrated circuits (ASIC), digital signal processors (DSP), digital signal processing devices (DSPD), programmable logic devices (PLD), field programmable gate arrays (FPGA), controllers, microcontrollers, microprocessors or other electronic components to execute the enterprise talent portrait generation method given in the above embodiment.

[0181] The computer-readable storage medium provided in the embodiment of the present application is introduced below. The computer-readable storage medium described below and the enterprise talent portrait generation method described above can be referenced to each other.

[0182] The present application also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned method for generating enterprise talent portraits are implemented.

[0183] The computer-readable storage medium may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0184] The terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion such that a process, method, article, or apparatus that includes a list of elements includes not only those elements but also other elements not expressly listed, or also includes elements inherent to such process, method, article, or apparatus.

[0185] The above description is only a preferred embodiment of the present application and an explanation of the technical principles used. Those skilled in the art should understand that the scope of application involved in the present application is not limited to the technical solution formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the aforementioned application concept. For example, the above features are replaced with (but not limited to) technical features with similar functions applied in the present application.

Claims

1. A method for generating a corporate talent portrait, characterized in that: Applied to a client, the method comprises: In response to a user's triggering action for generating a talent portrait for an enterprise, obtaining a talent portrait generation request, wherein the talent portrait generation request includes a job title; Encrypt the job title based on the symmetric key to obtain a first job title ciphertext; Encrypt the first job title ciphertext based on the public key to obtain a second job title ciphertext; Sending the second job title ciphertext to the server, so that the server generates a talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information sent through the data center, and a preset homomorphic encryption technology, wherein the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and the personnel information corresponding to each job title; Obtaining the talent portrait ciphertext sent by the server; The talent portrait ciphertext is decrypted based on the symmetric key to obtain the talent portrait information corresponding to the talent portrait generation request.

2. The method for generating a corporate talent portrait according to claim 1, characterized in that: Before obtaining the talent portrait generation request, it also includes: Get the public key sent by the server and the symmetric key sent by the data center.

3. The method for generating a corporate talent portrait according to claim 2, characterized in that: Before obtaining the talent portrait generation request, it also includes: Obtaining the personnel position information of the enterprise, wherein the personnel position information includes all the position titles of the enterprise and the personnel information corresponding to each position title; Encrypting the personnel position information based on the symmetric key to obtain the first personnel position ciphertext information; Encrypting the first personnel position ciphertext information based on the public key to obtain the second personnel position ciphertext information; The encrypted position information of the second personnel is sent to the data center so that the data center stores the encrypted position information of the second personnel.

4. A method for generating a corporate talent portrait, characterized in that: Applied to a server, the method comprises: Obtaining a second job title ciphertext sent by the client and a second personnel job ciphertext information sent by the data center, wherein the second job title ciphertext is a job title that has been encrypted twice, and the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and personnel information corresponding to each job title; Generate a talent portrait ciphertext based on the ciphertext of the second job title, the ciphertext information of the second person’s job title, and a preset homomorphic encryption technology; The talent portrait ciphertext is sent to the client, so that the client decrypts the talent portrait ciphertext to obtain the talent portrait information.

5. The method for generating a corporate talent portrait according to claim 4, characterized in that: Before obtaining the second job title ciphertext sent by the client and the second personnel job ciphertext information sent by the data center, the method further includes: Generate a public-private key pair based on a preset public-key encryption algorithm, wherein the public-private key pair includes a public key and a private key; The public key is sent to the client and the data center respectively.

6. A method for generating a corporate talent portrait according to claim 5, characterized in that: The generating of the talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information and the preset homomorphic encryption technology includes: Decrypt the second job title ciphertext and the second personnel job ciphertext information respectively based on the private key to obtain the third job title ciphertext and the third personnel job ciphertext information; Based on the preset homomorphic encryption technology, searching the third personnel position ciphertext information for multiple personnel ciphertext information that matches the third position name ciphertext; Based on the preset categories and all the ciphertext information of the personnel, the frequency of different attributes under each category is calculated, the categories include gender, job title, education, political status and certificate, and each category corresponds to multiple attributes; Based on the attributes corresponding to the highest frequency of each of the categories, a ciphertext of the talent profile matching the job title is constructed.

7. An enterprise talent portrait production device, characterized in that: Applied to a client, the device comprises: A first acquisition module is used to obtain a talent portrait generation request in response to a user's triggering action for enterprise talent portrait generation, wherein the talent portrait generation request includes a job title; A first encryption module, used to encrypt the job title based on a symmetric key to obtain a first job title ciphertext; A second encryption module, used to encrypt the first job title ciphertext based on a public key to obtain a second job title ciphertext; A first sending module is used to send the second job title ciphertext to a server, so that the server generates a talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information sent through the data center, and a preset homomorphic encryption technology, wherein the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and the personnel information corresponding to each job title; A second acquisition module is used to acquire the talent portrait ciphertext sent by the server; The first decryption module is used to decrypt the talent portrait ciphertext based on the symmetric key to obtain the talent portrait information corresponding to the talent portrait generation request.

8. An enterprise talent portrait production device, characterized in that: Applied to a server, the device comprises: A third acquisition module is used to obtain a second job title ciphertext sent by the client and a second personnel job ciphertext information sent by the data center, wherein the second job title ciphertext is a job title that has been encrypted twice, and the second personnel job ciphertext information is all job titles of the enterprise that have been encrypted twice and personnel information corresponding to each job title; A generation module, used to generate a talent portrait ciphertext based on the second job title ciphertext, the second personnel job ciphertext information and a preset homomorphic encryption technology; The second sending module is used to send the talent portrait ciphertext to the client, so that the client can decrypt the talent portrait ciphertext to obtain the talent portrait information.

9. An electronic device, characterized in that: comprising a processor coupled to a memory; The processor is configured to execute a computer program stored in the memory, so that the electronic device executes the method according to any one of claims 1 to 6.

10. A computer-readable storage medium, characterized in that: The method comprises a computer program or an instruction, which, when executed on a computer, causes the computer to execute the method according to any one of claims 1 to 6.