Private data processing method, processing equipment, processing device and storage medium

Abstract

The invention discloses a privacy data processing method, processing equipment, a processing device and a storage medium, the privacy data processing method is applied to the privacy data processing equipment, and the method comprises the following steps: under the condition that a current data processing mode is a first mode, obtaining a first data access request corresponding to a first process; in response to the first data access request, obtaining first real data corresponding to the first process and at least one piece of pseudo data corresponding to the at least one simulation participant; performing data protection processing on the first real data according to the at least one piece of pseudo data to obtain desensitized data corresponding to the first real data; and returning the desensitized data to the first process.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a method, a processing device, a processing apparatus and a storage medium for processing privacy data. Background Art

[0002] Currently, the security-enhanced system in Android is Linux (operating system). As part of the Android security model, Android uses Security Enhanced Linux (SELinux) to enforce MAC (Mandatory Access Control) on all processes, even those running with root / superuser privileges. Many companies and organizations have contributed to Android's SELinux implementation. With SELinux, Android can better protect and restrict system services, control access to application data and system logs, reduce the impact of malware, and protect users from possible flaws in the code on their mobile devices.

[0003] However, when different users' access to driver devices is controlled through permissions, when malicious users obtain ROOT permissions, they can bypass the restrictions and protections on the system, making it impossible to effectively protect privacy data and reducing data security. Summary of the invention

[0004] The embodiments of the present application provide a method, a processing device, a processing apparatus, and a storage medium for processing privacy data, which protect the user's privacy data through a security mode in a specific scenario.

[0005] The technical solution of the embodiment of the present application is implemented as follows:

[0006] In a first aspect, an embodiment of the present application provides a method for processing private data, the method for processing private data being applied to a private data processing device, the method comprising:

[0007] When the current data processing mode is the first mode, obtaining a first data access request corresponding to the first process;

[0008] In response to the first data access request, obtaining first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant;

[0009] Performing data protection processing on the first real data according to the at least one pseudo data to obtain desensitized data corresponding to the first real data;

[0010] Return the desensitized data to the first process.

[0011] In a second aspect, an embodiment of the present application provides a privacy data processing device, the privacy data processing device comprising: an acquisition unit, a processing unit, and a feedback unit.

[0012] The acquisition unit is configured to acquire, when the current data processing mode is the first mode, a first data access request corresponding to the first process; and in response to the first data access request, acquire first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant;

[0013] The processing unit is configured to perform data protection processing on the first real data according to the at least one pseudo data to obtain desensitized data corresponding to the first real data;

[0014] The feedback unit is used to return the desensitized data to the first process.

[0015] In a third aspect, an embodiment of the present application provides a device for processing privacy data, which includes a processor and a memory storing instructions executable by the processor. When the instructions are executed by the processor, the method described in the first aspect is implemented.

[0016] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium having a program stored thereon, and when the program is executed by a processor, the method described in the first aspect above is implemented.

[0017] The embodiment of the present application provides a method for processing privacy data, a processing device, a processing apparatus and a storage medium. The method for processing privacy data is applied to the processing device for privacy data, and the method includes: when the current data processing mode is the first mode, obtaining a first data access request corresponding to the first process; in response to the first data access request, obtaining the first real data corresponding to the first process, and at least one pseudo data corresponding to at least one simulated participant; performing data protection processing on the first real data according to the at least one pseudo data, and obtaining desensitized data corresponding to the first real data; returning the desensitized data to the first process. It can be seen that in the embodiment of the present application, when the data processing mode is the first mode, after obtaining the first data access request corresponding to the first process, the real data corresponding to the first process can be obtained, and at the same time, the pseudo data corresponding to the simulated participant needs to be obtained, and then the pseudo data is used to protect the real data to obtain the corresponding desensitized data, and finally the desensitized data can be returned to the first process, so that the privacy data can be effectively protected, which greatly improves the data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 Schematic diagram of the implementation process of the privacy data processing method proposed in this application embodiment Figure 1;

[0019] Figure 2 A schematic diagram of the structure of a privacy data processing device proposed in an embodiment of the present application;

[0020] Figure 3 A schematic diagram of responding to a data access request proposed in an embodiment of the present application;

[0021] Figure 4 A schematic diagram of a process flow for implementing a method for processing privacy data in the first mode proposed in an embodiment of the present application;

[0022] Figure 5 Schematic diagram of the implementation process of the privacy data processing method proposed in this application embodiment Figure 2 ;

[0023] Figure 6 A schematic diagram of the mode switching proposed in the embodiment of the present application;

[0024] Figure 7 A schematic diagram of the workflow of the second mode proposed in the embodiment of the present application;

[0025] Figure 8 A schematic diagram of the structure of the privacy data processing device proposed in the embodiment of the present application;

[0026] Fig. 9 Schematic diagram of the implementation process of the privacy data processing method proposed in this application embodiment Figure 3 ;

[0027] Fig.10 A schematic diagram of the implementation framework of the privacy data processing method proposed in the embodiment of the present application;

[0028] Fig.11 Schematic diagram of the composition structure of the privacy data processing device proposed in the embodiment of the present application Figure 1 ;

[0029] Fig.12 Schematic diagram of the composition structure of the privacy data processing device proposed in the embodiment of the present application Figure 2 . DETAILED DESCRIPTION

[0030] The following will be combined with the accompanying drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. It is understood that the specific embodiments described herein are only used to explain the related applications, rather than to limit the applications. It should also be noted that, for ease of description, only the parts related to the related applications are shown in the accompanying drawings.

[0031] As the privacy and security protection features in mobile phones are becoming more and more important, users often feel that malicious applications are monitoring them in the background and obtaining personal privacy data such as audio, video, and location. In common technologies, permissions are used to control the access of different users to driver devices to protect user privacy data. However, when malicious users obtain the root permissions for Android / Linux (ROOT), they can bypass the restrictions and protections on the system, which cannot meet the protection requirements for privacy data.

[0032] In order to solve the above problems, the embodiments of the present application provide a method for processing privacy data, a processing device, a processing apparatus and a storage medium. The method for processing privacy data is applied to the processing device for privacy data, and the method includes: when the current data processing mode is the first mode, obtaining a first data access request corresponding to the first process; in response to the first data access request, obtaining the first real data corresponding to the first process, and at least one pseudo data corresponding to at least one simulated participant; performing data protection processing on the first real data according to the at least one pseudo data, and obtaining desensitized data corresponding to the first real data; returning the desensitized data to the first process. It can be seen that in the embodiments of the present application, when the data processing mode is the first mode, after obtaining the first data access request corresponding to the first process, the real data corresponding to the first process can be obtained, and at the same time, the pseudo data corresponding to the simulated participant needs to be obtained, and then the pseudo data is used to protect the real data to obtain the corresponding desensitized data, and finally the desensitized data can be returned to the first process, so that the privacy data can be effectively protected, which greatly improves the data security.

[0033] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application.

[0034] An embodiment of the present application provides a method for processing privacy data, which can be applied to a privacy data processing device or a privacy data processing apparatus, and can also be applied to any terminal device including a privacy data processing device or a privacy data processing apparatus.

[0035] Below, taking a privacy data processing device as an example, the privacy data processing method proposed in the embodiment of the present application is explained.

[0036] Furthermore, in the embodiments of the present application, Figure 1 Schematic diagram of the implementation process of the privacy data processing method proposed in this application embodiment Figure 1 ,like Figure 1 As shown, the method for processing privacy data may include the following steps:

[0037] Step 101: When the current data processing mode is a first mode, obtain a first data access request corresponding to a first process.

[0038] In an embodiment of the present application, when the current data processing mode is the first mode, the privacy data processing device can obtain a first data access request corresponding to the first process through a driving device.

[0039] It should be noted that, in an embodiment of the present application, the data processing mode may include a first mode and a second mode. The first mode is a mode for protecting privacy data, and the second mode is a data transmission mode of an Android / Linux system device under normal circumstances, that is, the second mode is a mode that does not require privacy data protection.

[0040] Furthermore, in the embodiments of the present application, Figure 2 This is a schematic diagram of the structure of the privacy data processing device proposed in the embodiment of the present application, such as Figure 2 As shown, the privacy data processing device can be composed of a driving device, a mode switch and a multi-party computing module.

[0041] It should be noted that, in an embodiment of the present application, the privacy data processing device can obtain the first data access request corresponding to the first process through a driving device, and the multi-party computing module can be a kernel layer multi-party computing module.

[0042] It should be noted that in the embodiments of the present application, the kernel layer is the core part of the Linux kernel, providing many core functions, such as process management, memory management, file system, network protocol stack, etc. The kernel layer contains various subsystems, each of which is responsible for processing specific functions. The goal of the multi-party computing module is to calculate a target result for a group of participants in the calculation, each of whom has his own data and does not trust other participants and any third party. Under this premise, how to calculate a target result for each private data. Hyper (Virtual Machine Monitor) is a powerful open source virtualization solution that can provide the highest performance, using it to save costs and improve scalability. In addition, Hyper can also support multiple operating systems, and its friendly graphical management interface makes operation simple and easy, while the customizable API (Application Programming Interface) can quickly program the virtualization environment. TEE (trusted execution environment) is a software-based construction implemented within the normal range of the runtime context. The Hyper / TEE switch is used to control the mode switching between "normal mode" and "specific mode".

[0043] It should be noted that in the embodiments of the present application, a mode switch is configured in the privacy data processing device, and the mode switch is located in the Hyper / TEE (virtual machine monitor) / (trusted execution environment) with higher authority than EL0, and the data processing mode can be switched through the mode switch. In some important occasions, the data processing mode is switched to the first mode through the mode switch.

[0044] Illustratively, in an embodiment of the present application, the mode switch is located in Hyper / TEE with higher authority than EL0. In certain important occasions, the mode switch is used to control the current data processing mode to be the first mode. When the current data processing mode is the first mode, the privacy data processing device can obtain the first data access request corresponding to the first process through the driving device.

[0045] It should be noted that in the embodiments of the present application, in the prior art, when a malicious user obtains ROOT privileges, any restrictions in EL0 will be invalid because ROOT has too high privileges in EL0. At this time, protection will be bypassed and the user's privacy data cannot be protected. Therefore, in order to better protect the user's privacy data, the mode switch in the present application is located in Hyper / TEE with higher privileges than EL0, thereby preventing malicious users from obtaining ROOT privileges and bypassing system restrictions and protections to steal user privacy data.

[0046] Step 102: In response to the first data access request, obtain first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant.

[0047] In an embodiment of the present application, when the current data processing mode is the first mode, after obtaining the first data access request corresponding to the first process, the privacy data processing device can respond to the first data access request, obtain the first real data corresponding to the first process through the driving device, and can also obtain at least one pseudo data corresponding to at least one simulated participant.

[0048] It should be noted that, in the embodiment of the present application, the first real data may be obtained by a privacy data processing device through a driving device, wherein the first real data is the actual data that the first process needs to access.

[0049] It should be noted that in the embodiments of the present application, the simulated participant is a simulated user introduced into the multi-party computing module, and is a simulated user introduced for the purpose of obfuscating and protecting the private data. The private data processing device can obtain the pseudo data generated by the simulated participant through the multi-party computing module.

[0050] It can be understood that in the embodiments of the present application, the number of simulated participants can be any integer value greater than or equal to 1. For example, the number of simulated participants can be 1 or 3, and the embodiments of the present application do not specifically limit this.

[0051] It should be noted that, in the embodiments of the present application, pseudo data is obfuscated data for protecting real data, and the pseudo data is generated pseudo-randomly by simulating the participating parties.

[0052] Furthermore, in an embodiment of the present application, when responding to a first data access request, the privacy data processing device obtains first real data corresponding to a first process through a driving device, and at the same time obtains at least one pseudo data corresponding to at least one simulated participant through a multi-party computing module.

[0053] It should be noted that, in the embodiments of the present application, the pseudo data is pseudo-randomly generated by simulating the participating parties according to a preset length.

[0054] Further, in an embodiment of the present application, the data length of the dummy data is the same as the data length of the first real data.

[0055] Furthermore, in an embodiment of the present application, the data length of the pseudo data and the data length of the first real data are both preset lengths corresponding to the driving device. The preset length corresponding to the driving device can be any integer value greater than or equal to 0. For example, the value of the preset length can be 1 or 100, which is not specifically limited in the embodiment of the present application.

[0056] It can be seen that in the embodiment of the present application, after the privacy data processing device controls the current data processing mode to the first mode through the mode switch, the privacy data processing device can obtain the first data access request corresponding to the first process through the driving device, and respond to the first data access request, and simultaneously obtain the first real data corresponding to the first process, and at least one pseudo data corresponding to at least one simulated participant. That is to say, when the data processing mode is the first mode, the privacy data processing device will respond to the first data access request corresponding to the first process through the driving device, and simultaneously obtain the first real data and at least one pseudo data corresponding to at least one simulated participant through the driving device, wherein the length of the obtained first real data and the length of the at least one pseudo data meet the preset length, and at least one simulated participant generates pseudo data of the preset length by pseudo-randomness.

[0057] For example, in the embodiments of the present application, Figure 3 This is a schematic diagram of responding to a data access request proposed in an embodiment of the present application, such as Figure 3 As shown, when the privacy data processing device responds to the first data access request, the first real data corresponding to the first process is obtained by the driving device, and the first real data corresponding to the first process obtained by the driving device is input into the multi-party computing module. At the same time, two simulated users can be introduced to participate in the multi-party computing module, such as multi-party computing simulated user A and multi-party computing simulated user B. Two different sets of pseudo data are generated by multi-party computing simulated user A and multi-party computing simulated user B, and the two different sets of pseudo data are input into the multi-party computing module.

[0058] Step 103: Perform data protection processing on the first real data according to at least one pseudo data to obtain desensitized data corresponding to the first real data.

[0059] In an embodiment of the present application, after responding to a first data access request and obtaining the first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant, the privacy data processing device can perform data protection processing on the first real data based on the at least one pseudo data, thereby obtaining desensitized data corresponding to the first real data.

[0060] Furthermore, in an embodiment of the present application, when data protection processing is performed on the first real data based on at least one pseudo data to obtain desensitized data corresponding to the first real data, it is necessary to first determine the privacy data and non-privacy data in the first real data, and then use at least one pseudo data to perform obfuscation protection processing on the privacy data to obtain obfuscated data; finally, the desensitized data can be determined based on the non-privacy data and the obfuscated data.

[0061] It should be noted that in the embodiment of the present application, when determining the private data and non-private data in the first real data, the private data in the first real data can be identified through a pre-stored sensitive data information library. The private data identification is to discover the sensitive data in the first real data.

[0062] It can be understood that in the embodiments of the present application, sensitive data includes personal privacy data, such as name, ID number, address, telephone number, bank account number, email address, password, medical information, educational background, etc., and also includes data that is not suitable for disclosure by enterprises or social organizations, such as the business conditions of the enterprise, the network structure of the enterprise, IP (Internet Protocol) address list, etc.

[0063] Further, in an embodiment of the present application, after determining the private data and the non-private data in the first real data, the private data device may use at least one pseudo data to perform obfuscation protection processing on the private data to obtain obfuscated data. In other words, the private data device may confuse at least one pseudo data corresponding to at least one simulated participant with the private data in the first real data, thereby performing protection processing on the private data to obtain obfuscated data.

[0064] Exemplarily, in some embodiments, assuming that the identified privacy data is the user's account information, and the generated pseudo information is "***", when the pseudo data is used to perform obfuscation protection processing on the privacy data, "***" can be used to mask or replace the privacy data to obtain the obfuscated data.

[0065] Furthermore, in an embodiment of the present application, after the privacy data is obfuscated and protected using the at least one pseudo data to obtain the obfuscated data, the privacy data processing device can determine the desensitized data based on the non-private data and the obfuscated data.

[0066] It can be understood that in the embodiments of the present application, the desensitized data may consist of non-privacy data and obfuscated data.

[0067] It should be noted that, in an embodiment of the present application, the process of performing data protection processing on the first real data based on the at least one pseudo data to obtain desensitized data corresponding to the first real data is the de-privacy process of the first real data pair, for example, replacing the original privacy data with obfuscated data to generate corresponding desensitized data.

[0068] It can be seen that in an embodiment of the present application, the privacy data processing device responds to the first data access request, obtains the first real data corresponding to the first process and the at least one pseudo data corresponding to the at least one simulated participant through the driving device, and then performs data protection processing on the first real data according to the at least one pseudo data to obtain the desensitized data corresponding to the first real data. That is to say, the privacy data can be obtained by identifying the pre-stored sensitive information database, dividing the first real data into privacy data and non-privacy data, and then confusing it with the at least one pseudo data corresponding to the at least one simulated participant, so as to protect the first real data and obtain the desensitized data corresponding to the first real data.

[0069] Step 104: Return the desensitized data to the first process.

[0070] In an embodiment of the present application, after performing data protection processing on the first real data according to at least one pseudo data to obtain desensitized data corresponding to the first real data, the privacy data processing device can return the desensitized data to the first process.

[0071] Furthermore, in an embodiment of the present application, the privacy data processing device may return the obtained desensitized data to the first process, thereby ensuring that the first process in the first mode cannot obtain the user's real privacy data.

[0072] Furthermore, in the embodiments of the present application, Figure 4 This is a schematic diagram of a process flow for implementing a method for processing privacy data in the first mode proposed in an embodiment of the present application. Figure 4 As shown, when the data processing mode is the first mode, when a first data access request from the first process is received, the privacy data processing device obtains the first real data corresponding to the first process through the driving device in response to the first data access request, and inputs the first real data corresponding to the first process obtained by the driving device into the multi-party computing module. At the same time, two simulated users can be introduced to participate in the multi-party computing module, such as multi-party computing simulated user A and multi-party computing simulated user B. Two different sets of pseudo data are generated by multi-party computing simulated user A and multi-party computing simulated user B, and the two different sets of pseudo data are input into the multi-party computing module. After obtaining the desensitized data corresponding to the first real data through calculation, the desensitized data is returned to the first process.

[0073] Furthermore, in the embodiments of the present application, Figure 5 Schematic diagram of the implementation process of the privacy data processing method proposed in this application embodiment Figure 2 ,like Figure 5 As shown, the method for processing privacy data may further include the following steps:

[0074] Step 105: When the current data processing mode is the second mode, obtain a second data access request corresponding to the second process.

[0075] In an embodiment of the present application, when the current data processing mode is the second mode, the privacy data processing device obtains a second data access request corresponding to the second process.

[0076] It should be noted that, in an embodiment of the present application, the data processing mode may include a first mode and a second mode, the first mode is a mode for protecting privacy data, and the second mode is a data transmission mode of an Android / Linux system device under normal circumstances.

[0077] It should be noted that in an embodiment of the present application, a mode switch is configured in the privacy data processing device. The mode switch is located in the Hyper / TEE with higher authority than EL0. At the same time, the data processing mode can be switched through the mode switch.

[0078] Exemplarily, in an embodiment of the present application, the mode switch is located in a Hyper / TEE with higher authority than EL0. In non-important situations, the mode switch is used to control the current data processing mode to be the second mode. When the current data processing mode is the second mode, a second data access request corresponding to the second process is obtained.

[0079] It should be noted that in the embodiments of the present application, in the prior art, when a malicious user obtains ROOT privileges, any restrictions in EL0 will be invalid because ROOT has too high privileges in EL0. At this time, protection will be bypassed and the user's privacy data cannot be protected. Therefore, in order to better protect the user's privacy data, the mode switch in the present application is located in Hyper / TEE with higher privileges than EL0, thereby preventing malicious users from obtaining ROOT privileges and bypassing system restrictions and protections to steal user privacy data.

[0080] Furthermore, in the embodiments of the present application, Figure 6 This is a schematic diagram of the mode switching proposed in the embodiment of the present application, such as Figure 6 As shown, the driving device receives a mode switching instruction, that is, controls the Hyper / TEE switch (mode switch) to switch from the first mode to the second mode. If the previous mode is the second mode, the current data processing mode is maintained, that is, the data processing mode is the second mode.

[0081] Step 106: In response to the second data access request, obtain second real data corresponding to the second process.

[0082] In an embodiment of the present application, when the current data processing mode is the second mode, after obtaining the second data access request corresponding to the second process, the privacy data processing device can respond to the second data access request and obtain the second real data corresponding to the second process.

[0083] It should be noted that, in the embodiment of the present application, the second real data may be obtained by the privacy data processing device through the driving device, wherein the second real data is the actual data that the second process needs to access.

[0084] Step 107: Return the second real data to the second process.

[0085] In an embodiment of the present application, after the second real data corresponding to the second process is acquired in response to the second data access request, the second real data is returned to the second process.

[0086] Furthermore, in an embodiment of the present application, the obtained second real data is returned to the second process, thereby ensuring that in the second mode, after obtaining an access request for the second data, the privacy data processing device can normally pass data to the second process.

[0087] It should be noted that in the embodiment of the present application, since the second mode is a mode that does not require privacy data protection, no subsequent obfuscation protection processing is performed on the data. Instead, the real data is directly obtained through the driving device and returned to the second process.

[0088] Furthermore, in the embodiments of the present application, Figure 7 This is a schematic diagram of the workflow of the second mode proposed in the embodiment of the present application, as shown in Figure 7 As shown, when it is confirmed that the data processing mode is the second mode, the privacy data processing device obtains the second data access request corresponding to the second process, responds to the second data access request, and finally obtains the second real data corresponding to the second process, and returns the second real data to the second process.

[0089] To summarize, the privacy data processing method proposed through steps 101 to 107 is applied to a privacy data processing device, and the privacy data processing device includes a Hyper / TEE switch (mode switch), a multi-party computing module, and a driving device. The method includes: when the current data processing mode is the first mode, obtaining a first data access request corresponding to the first process; in response to the first data access request, obtaining first real data corresponding to the first process, and at least one pseudo data corresponding to at least one simulated participant; performing data protection processing on the first real data according to the at least one pseudo data, and obtaining desensitized data corresponding to the first real data; returning the desensitized data to the first process; when the current data processing mode is the second mode, obtaining a second data access request corresponding to the second process; in response to the second data access request, obtaining second real data corresponding to the second process; and returning the second real data to the second process. It can be seen that in an embodiment of the present application, the current data processing mode is first determined by the Hyper / TEE switch. In a specific scenario, the Hyper / TEE switch switches the data processing mode to the first mode. After determining that the data processing mode is the first mode, the privacy data processing device can obtain a first data access request corresponding to the first process through a driving device, and respond to the first data access request, and simultaneously obtain the first real data corresponding to the first process, and at least one pseudo data corresponding to at least one simulated participant, and calculate the first real data and the at least one pseudo data through a multi-party computing module. Desensitized data corresponding to the first real data, and finally return the desensitized data to the first process. When the Hyper / TEE switch switches the data processing mode to the second mode, the privacy data processing device obtains a second data access request corresponding to the second process, and responds to the second data access request, and simultaneously obtains the second real data corresponding to the second process, and finally returns the second real data to the second process. By switching between these two different data processing modes, the problem of user privacy leakage can be solved, thereby protecting the user's privacy data.

[0090] The embodiment of the present application provides a method for processing privacy data, and the method for processing privacy data is applied to a processing device for privacy data. The processing device for privacy data includes a mode switch, a multi-party computing module, and a driving device. The current data processing mode is determined by the Hyper / TEE switch (mode switch). When the current data processing mode is the first mode, a first data access request corresponding to the first process is obtained; in response to the first data access request, the first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant are obtained; data protection processing is performed on the first real data according to the at least one pseudo data to obtain desensitized data corresponding to the first real data; and the desensitized data is returned to the first process. It can be seen that in the embodiment of the present application, when the data processing mode is the first mode, after obtaining the first data access request corresponding to the first process, the real data corresponding to the first process can be obtained, and the pseudo data corresponding to the simulated participant needs to be obtained at the same time, and then the pseudo data is used to protect the real data to obtain the corresponding desensitized data, and finally the desensitized data can be returned to the first process, so that the privacy data can be effectively protected, which greatly improves the data security.

[0091] Based on the above embodiments, another embodiment of the present application provides a method for processing privacy data, which is applied to a privacy data processing device. In some important occasions, in order to prevent the user's privacy data from being leaked, the Hyper / TEE switch (mode switch) controls the data processing mode to the first mode. The switch is located in the Hyper / TEE with higher authority than EL0. When the data processing mode is in the first mode, the real data is obfuscated by introducing at least one pseudo data corresponding to at least one simulated participant, and the first real data and the at least one pseudo data are input into the kernel layer multi-party computing module. The desensitized data corresponding to the first real data is obtained through the kernel layer multi-party computing module, and the desensitized data is returned to the first process; under normal circumstances, the Hyper / TEE switch controls the data processing mode to the second mode, and the privacy data processing device obtains a second data access request corresponding to the second process; and in response to the second data access request, obtains the second real data corresponding to the second process; the second real data is returned to the second process, and the user's privacy data is protected by switching between these two different data processing modes.

[0092] Furthermore, in the embodiments of the present application, Figure 8 This is a schematic diagram of the structure of the privacy data processing device proposed in the embodiment of the present application, such as Figure 8As shown, the processing device for privacy data may include a driving device, a mode switch and a multi-party computing module. In some important occasions, it is necessary to start the multi-party computing module placed in the kernel layer and introduce simulated users to participate in multi-party computing. The mode switch may be a Hyper / TEE switch. Furthermore, in an embodiment of the present application, when determining the current data processing mode, the data processing mode switching is controlled by the Hyper / TEE switch. Under normal circumstances, the Hyper / TEE switch controls the data processing mode to the second mode. In the second mode, the processing device for privacy data obtains a second data access request corresponding to the second process; in response to the second data access request, obtains the second real data corresponding to the second process; and returns the second real data to the second process.

[0093] Furthermore, in an embodiment of the present application, in some important occasions, the driving device obtains a mode switching instruction; in response to the mode switching instruction, the control mode switch switches the second mode to the first mode; at this time, the data processing mode is the first mode, and the privacy data device can obtain a first data access request corresponding to the first process through the driving device; in response to the first data access request, obtain the first real data corresponding to the first process, and at least one pseudo data corresponding to at least one simulated participant; perform data protection processing on the first real data according to the at least one pseudo data, and obtain desensitized data corresponding to the first real data; return the desensitized data to the first process, and switch the mode between the first mode and the second mode by controlling the mode switch, so that the user's privacy data can be protected.

[0094] Furthermore, in the embodiments of the present application, Fig. 9 Schematic diagram of the implementation process of the privacy data processing method proposed in this application embodiment Figure 3 ,like Fig. 9 As shown, the method for processing privacy data may include the following steps:

[0095] Step 201: Obtain a mode switching instruction.

[0096] In the embodiments of the present application, in some important occasions, the mode switch obtains a mode switching instruction to switch the data processing mode.

[0097] Step 202: In response to a mode switching instruction, control a mode switch to switch between a first mode and the second mode.

[0098] It should be noted that in the embodiments of the present application, a mode switch is configured in the privacy data processing device, and the mode switch is located in the Hyper / TEE with higher authority than EL0, and the data processing mode can be switched through the mode switch. In some important occasions, the mode switch obtains a mode switching instruction to switch the data processing mode to the first mode, and in unimportant occasions, the mode switch obtains a mode switching instruction to switch the data processing mode to the second mode.

[0099] Exemplarily, in an embodiment of the present application, if the previous data processing mode is the second mode, some personal privacy data may be at risk of being leaked. In some important occasions, after the driving device obtains the mode switching instruction, it switches the data processing mode to the first mode in response to the mode switching instruction. If the previous data processing mode is the first mode, in non-important occasions, after the driving device obtains the mode switching instruction, it switches the data processing mode from the first mode to the second mode.

[0100] Step 203: When the current data processing mode is the first mode, obtain a first data access request corresponding to the first process.

[0101] In an embodiment of the present application, when the current data processing mode is the first mode, the privacy data processing apparatus may obtain a first data access request corresponding to the first process through a driving device.

[0102] It should be noted that, in an embodiment of the present application, the data processing mode may include a first mode and a second mode. The first mode is a mode for protecting privacy data, and the second mode is a data transmission mode of an Android / Linux system device under normal circumstances, that is, the second mode is a mode that does not require privacy data protection.

[0103] It should be noted that, in an embodiment of the present application, the privacy data processing device can obtain the first data access request corresponding to the first process through the driving device, and the multi-party computing module is a kernel layer multi-party computing module.

[0104] It should be noted that in the embodiments of the present application, the kernel layer is the core part of the Linux kernel, providing many core functions, such as process management, memory management, file system, network protocol stack, etc. The kernel layer contains various subsystems, each of which is responsible for processing specific functions. The goal of the multi-party computing module is to calculate a target result for a group of participants in the calculation, each of whom has his own data and does not trust other participants and any third party. Under this premise, how to calculate a target result for each private data. Hyper (Virtual Machine Monitor) is a powerful open source virtualization solution that can provide the highest performance, using it to save costs and improve scalability. In addition, Hyper can also support multiple operating systems, and its friendly graphical management interface makes operation simple and easy, while the customizable API (Application Programming Interface) can quickly program the virtualization environment. TEE (trusted execution environment) is a software-based construction implemented within the normal range of the runtime context. The Hyper / TEE switch is used to control the mode switching between "normal mode" and "specific mode".

[0105] It should be noted that in the embodiments of the present application, a mode switch is configured in the privacy data processing device, and the mode switch is located in the Hyper / TEE with higher authority than EL0, and the data processing mode can be switched through the mode switch. In some important occasions, the data processing mode is switched to the first mode through the mode switch.

[0106] Illustratively, in an embodiment of the present application, the mode switch is located in Hyper / TEE with higher authority than EL0. In certain important occasions, the mode switch is used to control the current data processing mode to be the first mode. When the current data processing mode is the first mode, the privacy data processing device can obtain the first data access request corresponding to the first process through the driving device.

[0107] It should be noted that in the embodiments of the present application, in the prior art, when a malicious user obtains ROOT privileges, any restrictions in EL0 will be invalid because ROOT has too high privileges in EL0. At this time, protection will be bypassed and the user's privacy data cannot be protected. Therefore, in order to better protect the user's privacy data, the mode switch in the present application is located in Hyper / TEE with higher privileges than EL0, thereby preventing malicious users from obtaining ROOT privileges and bypassing system restrictions and protections to steal user privacy data.

[0108] Step 204: In response to the first data access request, obtain first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant.

[0109] In an embodiment of the present application, when the current data processing mode is the first mode, after obtaining the first data access request corresponding to the first process, the privacy data processing device can respond to the first data access request, obtain the first real data corresponding to the first process through the driving device, and can also obtain at least one pseudo data corresponding to at least one simulated participant.

[0110] It should be noted that, in the embodiment of the present application, the first real data may be obtained by a privacy data processing device through a driving device, wherein the first real data is the actual data that the first process needs to access.

[0111] It should be noted that in the embodiments of the present application, the simulated participant is a simulated user introduced into the multi-party computing module, and is a simulated user introduced for the purpose of obfuscating and protecting the private data. The private data processing device can obtain the pseudo data generated by the simulated participant through the multi-party computing module.

[0112] It can be understood that in the embodiments of the present application, the number of simulated participants can be any integer value greater than or equal to 1. For example, the number of simulated participants can be 1 or 3, and the embodiments of the present application do not specifically limit this.

[0113] It should be noted that, in the embodiments of the present application, pseudo data is obfuscated data for protecting real data, and the pseudo data is generated pseudo-randomly by simulating the participating parties.

[0114] Furthermore, in an embodiment of the present application, when responding to a first data access request, the privacy data processing device obtains first real data corresponding to a first process through a driving device, and at the same time obtains at least one pseudo data corresponding to at least one simulated participant through a multi-party computing module.

[0115] It should be noted that, in the embodiments of the present application, the pseudo data is pseudo-randomly generated by simulating the participating parties according to a preset length.

[0116] Further, in an embodiment of the present application, the data length of the dummy data is the same as the data length of the first real data.

[0117] Furthermore, in an embodiment of the present application, the data length of the pseudo data and the data length of the first real data are both preset lengths corresponding to the driving device. The preset length corresponding to the driving device can be any integer value greater than or equal to 0. For example, the value of the preset length can be 1 or 100, which is not specifically limited in the embodiment of the present application.

[0118] It can be seen that in the embodiment of the present application, after the privacy data processing device controls the current data processing mode to the first mode through the mode switch, the privacy data processing device can obtain the first data access request corresponding to the first process through the driving device, and respond to the first data access request, and at the same time obtain the first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant through the driving device. That is to say, when the data processing mode is the first mode, the privacy data processing device will respond to the first data access request corresponding to the first process, and at the same time drive the device to obtain the first real data and at least one pseudo data corresponding to at least one simulated participant, wherein the length of the acquired first real data and the length of the at least one pseudo data meet the preset length, and at least one simulated participant generates pseudo data of the preset length by pseudo-randomness.

[0119] Step 205: Perform data protection processing on the first real data according to at least one pseudo data to obtain desensitized data corresponding to the first real data.

[0120] In an embodiment of the present application, after responding to a first data access request and obtaining the first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant, the privacy data processing device can perform data protection processing on the first real data based on the at least one pseudo data, thereby obtaining desensitized data corresponding to the first real data.

[0121] Furthermore, in an embodiment of the present application, when data protection processing is performed on the first real data based on at least one pseudo data to obtain desensitized data corresponding to the first real data, it is necessary to first determine the privacy data and non-privacy data in the first real data, and then use at least one pseudo data to perform obfuscation protection processing on the privacy data to obtain obfuscated data; finally, the desensitized data can be determined based on the non-privacy data and the obfuscated data.

[0122] It should be noted that in the embodiment of the present application, when determining the private data and non-private data in the first real data, the private data in the first real data can be identified through a pre-stored sensitive data information library. The private data identification is to discover the sensitive data in the first real data.

[0123] It can be understood that in the embodiments of the present application, sensitive data includes personal privacy data, such as name, ID number, address, telephone number, bank account number, email address, password, medical information, educational background, etc., and also includes data that is not suitable for disclosure by enterprises or social organizations, such as the business conditions of the enterprise, the network structure of the enterprise, IP (Internet Protocol) address list, etc.

[0124] Further, in an embodiment of the present application, after determining the private data and the non-private data in the first real data, the private data device may use at least one pseudo data to perform obfuscation protection processing on the private data to obtain obfuscated data. In other words, the private data device may confuse at least one pseudo data corresponding to at least one simulated participant with the private data in the first real data, thereby performing protection processing on the private data to obtain obfuscated data.

[0125] Exemplarily, in some embodiments, assuming that the identified privacy data is the user's account information, and the generated pseudo information is "***", when the pseudo data is used to perform obfuscation protection processing on the privacy data, "***" can be used to mask or replace the privacy data to obtain the obfuscated data.

[0126] Furthermore, in an embodiment of the present application, after the privacy data is obfuscated and protected using the at least one pseudo data to obtain the obfuscated data, the privacy data processing device can determine the desensitized data based on the non-private data and the obfuscated data.

[0127] It can be understood that in the embodiments of the present application, the desensitized data may consist of non-privacy data and obfuscated data.

[0128] It should be noted that, in an embodiment of the present application, the process of performing data protection processing on the first real data based on the at least one pseudo data to obtain desensitized data corresponding to the first real data is the de-privacy process of the first real data pair, for example, replacing the original privacy data with obfuscated data to generate corresponding desensitized data.

[0129] It can be seen that in an embodiment of the present application, after the privacy data processing device responds to the first data access request, obtains the first real data corresponding to the first process and the at least one pseudo data corresponding to the at least one simulated participant through the driving device, and then performs data protection processing on the first real data according to the at least one pseudo data to obtain the desensitized data corresponding to the first real data. That is to say, the privacy data can be obtained by identifying the pre-stored sensitive information database, dividing the first real data into privacy data and non-privacy data, and then confusing it with the at least one pseudo data corresponding to the at least one simulated participant, so as to protect the first real data and obtain the desensitized data corresponding to the first real data.

[0130] Step 206: Return the desensitized data to the first process.

[0131] In an embodiment of the present application, after performing data protection processing on the first real data according to at least one pseudo data to obtain desensitized data corresponding to the first real data, the privacy data processing device can return the desensitized data to the first process.

[0132] Furthermore, in an embodiment of the present application, the obtained desensitized data is returned to the first process, thereby ensuring that the first process in the first mode cannot obtain the user's real privacy data.

[0133] Step 207: When the current data processing mode is the second mode, obtain a second data access request corresponding to the second process.

[0134] In an embodiment of the present application, when the current data processing mode is the second mode, the privacy data processing device obtains a second data access request corresponding to the second process.

[0135] It should be noted that, in an embodiment of the present application, the data processing mode may include a first mode and a second mode. The first mode is a mode for protecting privacy data, and the second mode is a data transmission mode of an Android / Linux system device under normal circumstances, that is, the second mode is a mode that does not require privacy data protection.

[0136] It should be noted that, in an embodiment of the present application, a mode switch is configured in the privacy data processing device, and the mode switch is located in the Hyper / TEE with higher authority than EL0. At the same time, the data processing mode can be switched through the mode switch.

[0137] Exemplarily, in an embodiment of the present application, the mode switch is located in a Hyper / TEE with higher authority than EL0. In non-important situations, the mode switch is used to control the current data processing mode to be the second mode. When the current data processing mode is the second mode, a second data access request corresponding to the second process is obtained.

[0138] It should be noted that in the embodiments of the present application, in the prior art, when a malicious user obtains ROOT privileges, any restrictions in EL0 will be invalid because ROOT has too high privileges in EL0. At this time, protection will be bypassed and the user's privacy data cannot be protected. Therefore, in order to better protect the user's privacy data, the mode switch in the present application is located in Hyper / TEE with higher privileges than EL0, thereby preventing malicious users from obtaining ROOT privileges and bypassing system restrictions and protections to steal user privacy data.

[0139] Step 208: In response to the second data access request, obtain second real data corresponding to the second process.

[0140] In an embodiment of the present application, when the current data processing mode is the second mode, after obtaining the second data access request corresponding to the second process, the privacy data processing device can respond to the second data access request and obtain the second real data corresponding to the second process.

[0141] It should be noted that, in the embodiment of the present application, the second real data may be obtained by the privacy data processing device through the driving device, wherein the second real data is the actual data that the second process needs to access.

[0142] Step 209: Return the second real data to the second process.

[0143] Further, in an embodiment of the present application, after finally acquiring the second real data corresponding to the second process in response to the second data access request, the second real data is returned to the second process.

[0144] It should be noted that in the embodiment of the present application, since the second mode is a mode that does not require privacy data protection, no subsequent obfuscation protection processing is performed on the data. Instead, the real data is directly obtained through the driving device and returned to the second process.

[0145] The embodiment of the present application provides a method for processing privacy data, which is applied to a privacy data processing device, the privacy data processing device including a mode switch, a multi-party computing module, and a driving device, the method including: the driving device obtains a mode switching instruction in some important occasions, and controls the mode switch to switch between a first mode and a second mode in response to the mode switching instruction; wherein the mode switch is located in a Hyper / TEE with a higher authority than EL0, and if the previous data processing mode is the first mode, it is not necessary to switch the data processing mode; if the previous data processing mode is the second mode, it is necessary to switch the data processing mode, and the switching of the data The processing mode is the first mode. When it is determined that the data processing mode is the first mode, a first data access request corresponding to the first process is obtained; in response to the first data access request, first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant are obtained; data protection processing is performed on the first real data according to the at least one pseudo data to obtain desensitized data corresponding to the first real data; the desensitized data is returned to the first process; when the current data processing mode is the second mode, a second data access request corresponding to the second process is obtained; in response to the second data access request, second real data corresponding to the second process is obtained; and the second real data is returned to the second process. It can be seen that in an embodiment of the present application, the current data processing mode is first determined by the Hyper / TEE switch. In a specific scenario, the Hyper / TEE switch switches the data processing mode to the first mode. After determining that the data processing mode is the first mode, the privacy data processing device can obtain a first data access request corresponding to the first process through a driving device, and respond to the first data access request. At the same time, it obtains the first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant through the driving device, and calculates the desensitized data corresponding to the first real data through the multi-party computing module using the first real data and the at least one pseudo data, and finally returns the desensitized data to the first process. When the Hyper / TEE switch switches the data processing mode to the second mode, the privacy data processing device obtains a second data access request corresponding to the second process, and responds to the second data access request. At the same time, it obtains the second real data corresponding to the second process, and finally returns the second real data to the second process. By switching between these two different data processing modes, the problem of user privacy leakage can be solved, thereby protecting the user's privacy data.

[0146] Based on the above embodiments, another embodiment of the present application proposes a method for processing privacy data, which can be applied to a privacy data processing device. The privacy data processing device includes a Hyper / TEE switch (mode switch), a kernel layer multi-party computing module, and a driver device. The Hyper / TEE switch is used to control the switching between "normal mode" (second mode) and "specific mode" (first mode). In order to ensure that it is not controlled by malicious ROOT in the EL0 environment, the switch is located in the Hyper / TEE with higher authority than EL0. When the Hyper / TEE switch switches the mode to "normal mode", normal return data (second normal data) is obtained through normal system function calls, which is consistent with the normal situation. The driver data transmission method of Android / Linux system devices under the scene is the same. When switching to a specific mode (first mode), the multi-party computing module placed in the kernel layer is started, and simulated user A (simulated participant) and simulated user B (simulated participant) are introduced to participate in the multi-party computing. Simulated user A (simulated participant) and simulated user B (simulated participant) respectively input pseudo data of the same length as the driver module to the multi-party computing module through pseudo-random, and the real driver device data is protected by obfuscation. The multi-party computing module calculates the desensitized data through an algorithm, and returns the calculation result to the user process (first process) that accesses the data, to ensure that the user process (first process) in the specific mode (first mode) cannot obtain the user's real privacy data.

[0147] For example, in the embodiments of the present application, Fig.10 This is a schematic diagram of the implementation framework of the privacy data processing method proposed in the embodiment of the present application, such as Fig.10 As shown. The Hyper / TEE switch can be used to control the switching between "normal mode" (second mode) and "specific mode" (first mode). In the specific mode, multi-party computing is enabled, and real data is obtained by driving the device, and the real data obtained by the driving device is input into the multi-party computing module. At the same time, two simulated users can be introduced to participate in the multi-party computing module, such as multi-party computing simulated user A and multi-party computing simulated user B. Two different sets of pseudo data are generated by multi-party computing simulated user A and multi-party computing simulated user B, and the two different sets of pseudo data are input into the multi-party computing module. The output is the desensitized data calculated by the multi-party computing module through the algorithm, and the calculation result is returned to the user process that accesses the data, ensuring that the user process in the specific mode cannot obtain the user's real privacy data.

[0148] It can be seen that the privacy data processing method provided by the embodiment of the present application can control the switching between "normal mode" (second mode) and "specific mode" (first mode) through the Hyper / TEE switch, and start multi-party computing in the specific mode. The input of the multi-party computing module includes: the real data of the driving device and the pseudo-data of the same length as the driving module generated by pseudo-random, and the output is the desensitized data calculated by the multi-party computing module through the algorithm, and the calculation result is returned to the user process accessing the data, ensuring that the user process in the specific mode cannot obtain the user's real privacy data. In non-important scenarios, when the Hyper / TEE switch switches the mode to "normal mode", the normal return data (second normal data) is obtained through a normal system function call, which is the same as the driving data transmission method of the Android / Linux system device in the normal scenario. The switching between "normal mode" (second mode) and "specific mode" (first mode) is controlled by the Hyper / TEE switch. In some important occasions, the device protects the privacy data of these users through a security mode.

[0149] The embodiment of the present application provides a method for processing privacy data, a processing device, a processing apparatus and a storage medium. The method for processing privacy data is applied to the processing device for privacy data, and the method includes: when the current data processing mode is the first mode, obtaining a first data access request corresponding to the first process; in response to the first data access request, obtaining the first real data corresponding to the first process, and at least one pseudo data corresponding to at least one simulated participant; performing data protection processing on the first real data according to the at least one pseudo data, and obtaining desensitized data corresponding to the first real data; returning the desensitized data to the first process. It can be seen that in the embodiment of the present application, when the data processing mode is the first mode, after obtaining the first data access request corresponding to the first process, the real data corresponding to the first process can be obtained, and at the same time, the pseudo data corresponding to the simulated participant needs to be obtained, and then the pseudo data is used to protect the real data to obtain the corresponding desensitized data, and finally the desensitized data can be returned to the first process, so that the privacy data can be effectively protected, which greatly improves the data security.

[0150] Based on the above embodiment, in another embodiment of the present application, Fig.11 Schematic diagram of the composition structure of the privacy data processing device proposed in the embodiment of the present application Figure 1 ,like Fig.11 As shown, the privacy data processing device 11 proposed in the embodiment of the present application may include an acquisition unit 111, a processing unit 112, and a feedback unit 113, wherein:

[0151] The acquisition unit 111 is used to acquire a first data access request corresponding to the first process when the current data processing mode is the first mode; in response to the first data access request, acquire first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant; the processing unit 112 is used to perform data protection processing on the first real data according to the at least one pseudo data to obtain desensitized data corresponding to the first real data;

[0152] The feedback unit 113 is used to return the desensitized data to the first process.

[0153] In the embodiments of the present application, further, Fig.12 Schematic diagram of the composition structure of the privacy data processing device proposed in the embodiment of the present application Figure 2 ,like Fig.12 As shown, the privacy data processing device 12 proposed in the embodiment of the present application may also include a processor 121, a memory 122, a communication interface 123, and a bus 124 for connecting the processor 121, the memory 122 and the communication interface 123.

[0154] In the embodiment of the present application, the processor 121 can be at least one of an application-specific integrated circuit (ASIC), a digital signal processor (DSP), a digital signal processing device (DSPD), a programmable logic device (PLD), a field programmable gate array (FPGA), a central processing unit (CPU), a controller, a microcontroller, and a microprocessor. It can be understood that for different devices, the electronic device used to implement the function of the processor can also be other, and the embodiment of the present application is not specifically limited. The control device 11 can also include a memory 122, which can be connected to the processor 121, wherein the memory 122 is used to store executable program code, the program code includes computer operation instructions, and the memory 122 may include a high-speed RAM memory, and may also include a non-volatile memory, for example, at least two disk memories.

[0155] In the embodiment of the present application, the bus 124 is used to connect the communication interface 123, the processor 121 and the memory 122, and the mutual communication between these devices.

[0156] In practical applications, the memory 122 may be a volatile memory, such as a random access memory (RAM); or a non-volatile memory, such as a read-only memory (ROM), a flash memory, a hard disk drive (HDD) or a solid-state drive (SSD); or a combination of the above types of memories, and provide instructions and data to the processor 121.

[0157] Further, in an embodiment of the present application, the processor 121, when the current data processing mode is the first mode, obtains a first data access request corresponding to the first process; in response to the first data access request, obtains first real data corresponding to the first process, and at least one pseudo data corresponding to at least one simulated participant; performs data protection processing on the first real data according to the at least one pseudo data, and obtains desensitized data corresponding to the first real data; and returns the desensitized data to the first process.

[0158] The memory 122 is used to store a computer program that can be executed on the processor.

[0159] In addition, each functional module in this embodiment can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The above integrated unit can be implemented in the form of hardware or software functional modules.

[0160] If the integrated unit is implemented in the form of a software function module and is not sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this embodiment is essentially or the part that contributes to the prior art or the whole or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) or a processor to perform all or part of the steps of the method of this embodiment. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc., various media that can store program codes.

[0161] An embodiment of the present application provides a computer-readable storage medium on which a program is stored. When the program is executed by a processor, the method for processing privacy data as described above is implemented.

[0162] Specifically, the program instructions corresponding to a method for processing privacy data in this embodiment may be stored on a storage medium such as a CD, a hard disk, or a USB flash drive. When the program instructions corresponding to a method for processing privacy data in the storage medium are read or executed by an electronic device, the following steps are included:

[0163] When the current data processing mode is the first mode, obtaining a first data access request corresponding to the first process;

[0164] In response to the first data access request, obtaining first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant;

[0165] Performing data protection processing on the first real data according to the at least one pseudo data to obtain desensitized data corresponding to the first real data;

[0166] Return the desensitized data to the first process.

[0167] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of hardware embodiments, software embodiments, or embodiments in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) that contain computer-usable program code.

[0168] The present application is described with reference to implementation flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the process in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0169] These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which is implemented in the implementation flow diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0170] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operation steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing the steps in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0171] The above description is only a preferred embodiment of the present application and is not intended to limit the protection scope of the present application.

Claims

1. A method for processing private data, characterized in that: The method comprises: When the current data processing mode is the first mode, obtaining a first data access request corresponding to the first process; In response to the first data access request, obtaining first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant; Performing data protection processing on the first real data according to the at least one pseudo data to obtain desensitized data corresponding to the first real data; Return the desensitized data to the first process.

2. The method according to claim 1, characterized in that The performing data protection processing on the first real data according to the at least one pseudo data to obtain desensitized data corresponding to the first real data includes: Determine private data and non-private data in the first real data; Using the at least one pseudo data to perform obfuscation protection processing on the private data to obtain obfuscated data; The desensitized data is determined according to the non-privacy data and the obfuscated data.

3. The method according to claim 1 or 2, characterized in that: The method further comprises: When the current data processing mode is the second mode, obtaining a second data access request corresponding to the second process; In response to the second data access request, acquiring second real data corresponding to the second process; The second real data is returned to the second process.

4. The method according to claim 1 or 2, characterized in that: The method further comprises: The first real data is acquired by driving the device.

5. The method according to claim 4, characterized in that The data lengths of the at least one pseudo data, the first real data, and the desensitized data are all preset lengths corresponding to the driving device.

6. The method according to claim 5, characterized in that The pseudo data is pseudo-randomly generated by the simulated participant according to the preset length.

7. The method according to claim 3, characterized in that Get mode switching instructions; In response to the mode switching instruction, the mode switch is controlled to switch between the first mode and the second mode; wherein the mode switch is located in a Hyper / TEE with a higher authority than EL0.

8. A device for processing private data, characterized in that: The privacy data processing device includes: an acquisition unit, a processing unit, and a feedback unit. The acquisition unit is configured to acquire, when the current data processing mode is the first mode, a first data access request corresponding to the first process; and in response to the first data access request, acquire first real data corresponding to the first process and at least one pseudo data corresponding to at least one simulated participant; The processing unit is configured to perform data protection processing on the first real data according to the at least one pseudo data to obtain desensitized data corresponding to the first real data; The feedback unit is used to return the desensitized data to the first process.

9. A device for processing private data, characterized in that: The privacy data processing device includes a processor and a memory storing instructions executable by the processor. When the instructions are executed by the processor, the method according to any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium having a program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images