Data secure transmission method, system and related equipment

Abstract

The embodiment of the invention provides a data secure transmission method and system and related equipment. The method comprises the steps that a cloud platform receives user index information and then stores the user index information; when a retrieval request of searching the target user identifier by a second mechanism is received, calculating a target user index, and querying in the stored user index information; if the user index matched with the target user index is queried, index field data corresponding to the user index and a matching state are returned to the second mechanism; when the second institution obtains a matching state, the second institution requests data sharing authorization from the first institution, and sends a public key of the second institution to the first institution after obtaining authorization permission of the first institution; the first mechanism generates an encrypted data packet based on the public key of the second mechanism, and uploads the encrypted data packet to a cloud platform; and the second mechanism downloads the encrypted data packet, and verifies and decrypts the encrypted data packet to obtain original user data corresponding to the target user. According to the invention, the security in the data transmission process can be ensured.

Description

Technical Field

[0001] The embodiments of the present application relate to the technical field of data transmission, and in particular to a data secure transmission method, system and related devices. Background Art

[0002] Smart healthcare is an important innovation in the modern healthcare system. By integrating advanced technologies such as network technology, data analysis, and artificial intelligence, it realizes the intelligence and high efficiency of medical services. The core of smart healthcare lies in realizing the collection, storage, analysis, and sharing of medical data through a digital information system, thereby improving the quality and efficiency of medical services. Among them, data transmission is an important part of smart healthcare, which is responsible for transmitting various medical data from data sources (such as user terminals, medical devices, etc.) to data destinations (such as data servers, cloud platforms, etc.) to achieve data sharing and utilization.

[0003] Currently, the data transmission in smart healthcare directly uploads users' information. Since medical data involves users' personal privacy and sensitive information, some medical institutions lack investment in information security, resulting in imperfect security protection measures and often the risk of data leakage. Therefore, there is an urgent need to provide a data secure transmission method to at least ensure the security during the data transmission process. Summary of the Invention

[0004] In view of this, the embodiments of the present application provide a data secure transmission method, system and related devices to ensure the security during the data transmission process.

[0005] To achieve the above object, in a first aspect, the embodiments of the present application provide a data secure transmission method, including the following steps:

[0006] The cloud platform receives the user index information uploaded by the first institution. The user index information includes a user index generated by the first institution using an irreversible encryption algorithm for user identification data, and index field data obtained by performing desensitization masking processing on the user identification data; the cloud platform stores the user index information;

[0007] When the cloud platform receives a retrieval request from the second institution to search for a target user identification, the cloud platform calculates a target user index based on the target user identification and queries it in the stored user index information; if a user index matching the target user index is found, the cloud platform returns the index field data corresponding to the user index and the matching status to the second institution;

[0008] When the second institution obtains a matching status of matching, it requests data sharing authorization from the first institution, and after obtaining the authorization permission from the first institution, it sends the public key of the second institution to the first institution;

[0009] The first institution generates an encrypted data packet based on the public key of the second institution and uploads the encrypted data packet to the cloud platform, where the encrypted data includes a data ciphertext, a key ciphertext, a session timestamp, an authentication tag, and a zero-knowledge proof;

[0010] The second institution downloads the encrypted data packet from the cloud platform and verifies and decrypts it to obtain the original user data corresponding to the target user.

[0011] Optionally, the user index information is generated by the first institution, and the generation process is as follows:

[0012] Encrypt the original value of the user identification data using an irreversible encryption algorithm to generate a user index;

[0013] Perform desensitization masking on the user identification data to generate index field data;

[0014] Retain the user index and the index field data as user index information and upload them to the cloud platform for associated storage.

[0015] Optionally, the public-private key pair of the second institution is generated based on the elliptic curve cryptography algorithm. The generation of the public-private key pair of the second institution based on the elliptic curve cryptography algorithm includes:

[0016] Select standard elliptic curve parameters, where the elliptic curve parameters include a curve equation, a prime field, a base point, and an order;

[0017] Randomly select an integer within a preset range as the private key;

[0018] Based on the private key, calculate the public key through the point doubling operation on the elliptic curve.

[0019] Optionally, the first institution generates an encrypted data packet based on the public key of the second institution, including:

[0020] Randomly select and generate a first random number and calculate the elliptic curve point corresponding to the first random number;

[0021] Use the random number and the received public key of the second institution to derive a temporary symmetric key and an initialization vector through key negotiation and applying a key derivation function;

[0022] Based on the temporary symmetric key and the initialization vector, use a symmetric encryption algorithm to encrypt the original user data to generate a data ciphertext and an authentication tag;

[0023] Use the elliptic curve integrated encryption algorithm to encrypt the temporary symmetric key using the public key of the second institution to generate a key ciphertext;

[0024] Generate a zero-knowledge proof based on the key negotiation process, and the zero-knowledge proof is used to prove that the temporary symmetric key is legally generated for the public key of the second institution;

[0025] Combine the data ciphertext, key ciphertext, session timestamp, authentication tag, and zero-knowledge proof to form an encrypted data packet, where the session timestamp is the system timestamp bound during the generation of the zero-knowledge proof.

[0026] Optionally, the first institution generates a zero-knowledge proof based on a key negotiation process, including:

[0027] Randomly select a second random number, and calculate a commitment value based on the second random number and the standard elliptic curve generator;

[0028] Obtain the current system timestamp as the session timestamp;

[0029] Based on the commitment value, bind the session timestamp, and use a collision-resistant hash function to calculate and generate a challenge;

[0030] Based on the challenge, the second random number, and the first random number generated by the key, calculate and generate a response value through modular arithmetic;

[0031] Use the response value and the commitment value together as the zero-knowledge proof.

[0032] Optionally, the second institution downloads the encrypted data packet from the cloud platform and verifies and decrypts to obtain the original user data corresponding to the target user, including:

[0033] Verify whether the zero-knowledge proof holds;

[0034] If it does not hold, reject the encrypted data packet and alarm;

[0035] If it holds, use the private key of the second institution to decrypt the key ciphertext in the encrypted data packet to obtain a temporary symmetric key, and use the temporary symmetric key, the initialization vector in the data packet, and the authentication tag to decrypt and verify the integrity of the data ciphertext. If the integrity verification passes, obtain the original user data; if the integrity verification fails, reject the encrypted data packet.

[0036] In a second aspect, an embodiment of the present application provides a data security transmission system, including a cloud platform, as well as a first institution and a second institution;

[0037] The cloud platform is used to receive user index information uploaded by a first institution. The user index information includes a user index generated by the first institution using an irreversible encryption algorithm for user identification data, and index field data obtained by performing desensitization masking on the user identification data. The cloud platform stores the user index information. When the cloud platform receives a retrieval request from a second institution to search for a target user identification, the cloud platform calculates a target user index based on the target user identification and queries it in the stored user index information. If a user index matching the target user index is found, the cloud platform returns the index field data corresponding to the user index and the matching status to the second institution;

[0038] When the second institution obtains a matching status, it requests data sharing authorization from the first institution, and after obtaining the authorization permission from the first institution, it sends the public key of the second institution to the first institution;

[0039] The first institution is used to generate an encrypted data packet based on the public key of the second institution and upload the encrypted data packet to the cloud platform, where the encrypted data includes a data ciphertext, a key ciphertext, a session timestamp, an authentication tag, and a zero-knowledge proof;

[0040] The second institution is further used to download the encrypted data packet from the cloud platform and verify and decrypt to obtain the original user data corresponding to the target user.

[0041] In a third aspect, an embodiment of the present application provides a cloud platform, including:

[0042] A receiving module, configured to receive user index information uploaded by a first institution. The user index information includes a user index generated by the first institution using an irreversible encryption algorithm for user identification data, and index field data obtained by performing desensitization masking on the user identification data; and is further configured to transmit the user index information to a secure storage module;

[0043] A processing module, configured to, when receiving a retrieval request from a second institution to search for a target user identification, calculate a target user index based on the target user identification and query it in the stored user index information. If a user index matching the target user index is found, return the index field data corresponding to the user index and the matching status to the second institution; when the second institution obtains a matching status, it requests data sharing authorization from the first institution, and after obtaining the authorization permission from the first institution, sends the public key of the second institution to the first institution through the cloud platform; the first institution generates an encrypted data packet based on the public key of the second institution and uploads the encrypted data packet to the secure storage module; the second institution downloads the encrypted data packet from the secure storage module and verifies and decrypts to obtain the original user data corresponding to the target user;

[0044] A secure storage module is used to store user index information and encrypted data packets, where the encrypted data packets include data ciphertext, key ciphertext, session timestamp, authentication tag, and zero-knowledge proof.

[0045] It can be seen that this application enhances security by separating index processing from core data encryption. The cloud platform only processes index information and performs user query matching, while the encryption and decryption processes of the core original user data are completely completed locally at the first and second institutions, and a temporary symmetric key dynamically generated for this transmission and encrypted and protected with the public key of the second institution is used. This design ensures that even if an attacker attacks the cloud platform, they cannot directly obtain the original user data or its encryption key, ensuring the transmission security of the original user data.

[0046] In addition, this solution ensures data access compliance in the process by requiring the second institution to request and obtain explicit authorization from the first institution before obtaining any sensitive data. After obtaining authorization, the first institution generates and uploads the encrypted data. Subsequently, when the second institution receives the encrypted data packet, by verifying the zero-knowledge proof, it can cryptographically confirm that the key ciphertext was indeed legally generated by the authorized first institution and for its public key, effectively preventing key or source forgery. At the same time, by verifying the authentication tag, it ensures that the data ciphertext has not been tampered with during transmission and storage. This combination of authorization and cryptographic verification not only controls access rights but also guarantees the authenticity and integrity of the transmitted data, further enhancing the security of cross-institutional data transmission. Brief Description of the Drawings

[0047] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only the embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on the provided drawings.

[0048] Figure 1 It is a schematic diagram of the data security transmission system provided by the embodiment of the present application.

[0049] Figure 2 It is an interaction schematic diagram of the data security transmission method provided by the embodiment of the present application.

[0050] Figure 3 It is an optional block diagram of the cloud platform provided by the embodiment of the present application. Detailed Embodiments

[0051] The following will clearly and completely describe the technical solutions in the embodiments of the present application with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present application without creative efforts shall fall within the protection scope of the present application.

[0052] Figure 1 A data security transmission system provided for the embodiments of the present application may specifically include a cloud platform, as well as a first institution and a second institution. The cloud platform, the first institution, and the second institution can cooperate to execute the data security transmission method.

[0053] It should be noted that the first institution may specifically be a first institution device end, which is a local device capable of collecting user data. It can provide data for other device ends and can also be referred to as a data providing end. This local device includes an operation interface, a configuration module, a processing module, a communication module (not shown in the figure), and a Hardware Security Module (HSM), etc.; the first institution device end can generate user index information, and the user index information includes a user index and index field data. The user index is generated using an irreversible encryption algorithm based on user identification data, and the index field data is obtained by performing a desensitization masking process on the user identification data.

[0054] The second institution may specifically be a second institution device end, which can be a local device requesting user data. The module composition thereof can refer to the specific composition of the first institution device end. It can request data from the first institution to obtain a sharing authorization and can also be referred to as a data obtaining end; after the second institution obtains the authorization permission from the first institution, the second institution sends its public key to the first institution; the first institution generates an encrypted data packet based on the public key of the second institution and uploads the encrypted data packet to the cloud platform; the second institution downloads the encrypted data packet from the cloud platform and verifies and decrypts it to obtain the original user data.

[0055] Certainly, the present application only takes the first institution and the second institution as examples. In other alternative implementations, a third institution and a fourth institution can also be used as data providing ends to provide original user data, and a fifth institution can be used as a data obtaining end. The fifth institution requests from the third institution and the fourth institution to obtain the original user data, which will not be listed here.

[0056] Specifically, the steps of the data security transmission method may include:

[0057] Receive the user index information uploaded by the first institution, where the user index information includes a user index generated by the first institution using an irreversible encryption algorithm for user identification data, and index field data obtained by performing desensitization masking on the user identification data;

[0058] When receiving a retrieval request from the second institution to find a target user identification, calculate the target user index based on the target user identification and query it in the stored user index information; if a user index matching the target user index is found, return the index field data corresponding to the user index and the matching status to the second institution.

[0059] When the second institution obtains a matching status of matching, request data sharing authorization from the first institution, and after obtaining the authorization permission from the first institution, send the public key of the second institution to the first institution; the first institution generates an encrypted data packet based on the public key of the second institution and uploads the encrypted data packet to the cloud platform; the second institution downloads the encrypted data packet from the cloud platform and verifies and decrypts it to obtain the original user data corresponding to the target user.

[0060] It can be seen that this application enhances security by separating index processing and core data encryption. The cloud platform only processes index information and performs user query matching, while the encryption and decryption processes of the core original user data are completely completed locally by the first and second institutions, and a temporary symmetric key dynamically generated for this transmission and encrypted and protected with the public key of the second institution is used. This design ensures that even if an attacker attacks the cloud platform, they cannot directly obtain the original user data or its encryption key, ensuring the transmission security of the original user data.

[0061] In addition, this application ensures the compliance of data access in the process by requiring the second institution to request and obtain explicit authorization from the first institution before requesting the original user data. After obtaining the authorization, the first institution generates and uploads an encrypted data packet carrying the original user data. Subsequently, when the second institution receives the encrypted data packet, it can cryptographically confirm that the key ciphertext is indeed legally generated by the authorized first institution using the public key of the second institution by verifying the zero-knowledge proof, effectively preventing the risk of information leakage caused by key or source forgery. At the same time, by verifying the authentication tag, it ensures that the data ciphertext has not been tampered with during transmission and storage. This combination of single-request authorization and cryptographic verification not only controls access rights but also ensures the authenticity and integrity of the transmitted data, further enhancing the security of cross-institutional data secure transmission.

[0062] Furthermore, the data secure transmission process can refer to Figure 2 as shown, which is an interaction schematic diagram of the data secure transmission method provided by the embodiment of this application. Specifically:

[0063] Step S21: The first institutional device transmits user index information to the cloud platform;

[0064] In an alternative embodiment, the user index information is generated by the first institution, and the generation process is as follows:

[0065] Step S211: Use an irreversible encryption algorithm to encrypt the original value of the user identification data to generate a user index;

[0066] Among them, the calculation formula for generating the user index is:

[0067] Index = HMAC - SHA256(IndexKey, “PatientID:***” || Salt || VersionID)

[0068] Among them, the HMAC (Hash - based Message Authentication Code) algorithm is an enhanced hash algorithm based on a key, which combines the encryption key IndexKey with a hash function (such as SHA - 256) to generate a message authentication with a key.

[0069] SHA - 256 is a method for improving password security. By introducing a randomly generated string (referred to as the salt value Salt) during the password hashing process, the same password generates different hash values in different situations, thereby increasing the difficulty of cracking.

[0070] Step S212: Perform desensitization masking on the user identification data to generate index field data;

[0071] Optionally, the local device of the first institution receives user data and performs desensitization masking on the index fields. For example, after desensitization processing of the primary index (ID number), it becomes the form of 370******020, and after desensitization processing of the secondary indexes (name, mobile phone number), it becomes the form of Zhang**, 150****3810.

[0072] Step S213: Retain the user index and the index field data as user index information and upload them to the cloud platform for associated storage.

[0073] Step S22: When the cloud platform receives a retrieval request from the second institution to search for the target user identification, calculate the target user index based on the target user identification and query it in the stored user index information;

[0074] Step S23: If a user index matching the target user index is found, the cloud platform returns the index field data corresponding to the user index and the matching status to the second institution;

[0075] Step S24: When the second institution obtains a matching status of match, it requests data sharing authorization from the first institution;

[0076] Step S25: After obtaining the authorization permission from the first institution, send the public key of the second institution to the first institution;

[0077] Step S26: The first institution generates an encrypted data packet based on the public key of the second institution and uploads the encrypted data packet to the cloud platform;

[0078] Step S27: The second institution downloads the encrypted data packet from the cloud platform and verifies and decrypts it to obtain the original user data corresponding to the target user.

[0079] Specifically, the step of the first institution generating an encrypted data packet based on the public key of the second institution may include:

[0080] Step S31: Randomly select and generate a first random number and calculate the elliptic curve point corresponding to the first random number;

[0081] Step S32: Use the random number and the received public key of the second institution, through key negotiation and applying a key derivation function, to derive a temporary symmetric key and an initialization vector;

[0082] Step S33: Based on the temporary symmetric key and the initialization vector, use a symmetric encryption algorithm to encrypt the original user data to generate a data ciphertext and an authentication tag;

[0083] Step S34: Use the elliptic curve integrated encryption algorithm to encrypt the temporary symmetric key with the public key of the second institution to generate a key ciphertext;

[0084] Step S35: Generate a zero-knowledge proof based on the key negotiation process, and the zero-knowledge proof is used to prove that the temporary symmetric key is legally generated for the public key of the second institution;

[0085] Step S36: Combine the data ciphertext, the key ciphertext, the session timestamp, the authentication tag, and the zero-knowledge proof to form an encrypted data packet, where the session timestamp is the system timestamp bound during the generation of the zero-knowledge proof.

[0086] As an alternative embodiment, the specific implementation of the first institution generating an encrypted data packet based on the public key of the second institution may be as follows:

[0087] Step S41: Generate a first random number r and calculate the elliptic curve point R = r·G corresponding to the first random number

[0088] Step S42: Use the random number r and the received public key PK_B of the second institution to calculate the shared key SharedKey = r·PK_B through key negotiation

[0089] Step S43: Apply a key derivation function to derive a temporary symmetric key TempKey and an initialization vector IV from the shared key;

[0090] Specifically, the key derivation function can be the HKDF algorithm (HMAC-based Extract-and-Expand Key Derivation Function) to derive the temporary symmetric key TempKey and the initialization vector IV from the shared key.

[0091] Specifically, the derivation of the temporary symmetric key TempKey and the initialization vector IV can be:

[0092] (TempKey,IV)=HKDF-SHA3(SharedKey,Salt,Nonce=Timestamp),

[0093] where IV represents the initialization vector (Initialization Vector), Salt is a randomly generated random number, and Nonce is the session timestamp (the system timestamp bound to the current session is called the session timestamp to prevent replay attacks).

[0094] The core role of IV is to provide randomness for the encryption algorithm, ensure that the same plaintext generates different ciphertexts each time it is encrypted, reduce the possibility of being reused, and thus enhance security.

[0095] Step S44: Based on the temporary symmetric key and the initialization vector, use a symmetric encryption algorithm to encrypt the original user data to generate a data ciphertext (CT) and an authentication tag (AuthTag);

[0096] The calculation process for generating the data ciphertext (CT) and the authentication tag (AuthTag) can be:

[0097] CT,AuthTag=AES-256-GCM.Encrypt(TempKey,IV,Data)

[0098] The above formula represents the process of simultaneously encrypting (using the counter mode CTR) and authenticating (using the Galois message authentication code GMAC algorithm) the original user data Data using the AES-256-GCM encryption algorithm, achieving double protection of confidentiality and integrity. Here, TempKey is the aforementioned temporary symmetric key, and IV is the initialization vector.

[0099] The process of generating data ciphertext can be specifically as follows: Input TempKey and IV, initialize the counter (CTR) and the internal state related to authentication; generate the key stream block by block, and perform XOR operation between the key stream and the original user data block by block to generate the data ciphertext CT.

[0100] The process of generating the authentication tag can be specifically as follows: Process the generated data ciphertext CT through the GHASH function. The GHASH function performs multiplication operation in the Galois field GF(2 128 ), and calculates an authentication value. Perform XOR operation between the authentication value and the initial counter block to obtain the authentication tag AuthTag.

[0101] Step S45: Use the Elliptic Curve Integrated Encryption Scheme (ECIES algorithm) to encrypt the temporary symmetric key (TempKey) using the public key of the second institution, and generate the key ciphertext (CK):

[0102] The calculation formula for the key ciphertext CK is:

[0103] CK = ECIES_Encrypt(PK_B, TempKey)

[0104] Where ECIES_Encrypt is the ECIES algorithm, and this formula means encrypting the temporary symmetric key TempKey using the public key PK_B of the second institution to generate the key ciphertext CK.

[0105] Step S46: Generate a Zero-Knowledge Proof (ZKP) based on the key negotiation process, so as to realize verifying the legitimacy of the key source only through mathematical proof.

[0106] Optionally, the first institution generating a zero-knowledge proof based on the key negotiation process includes:

[0107] Step S51: Randomly select a second random number, and calculate the commitment value based on the second random number and the standard elliptic curve generator;

[0108] Optionally, the first institution selects a random number k ∈ [1, n - 1] (n is the order of the elliptic curve).

[0109] Calculate the commitment value: K = k·G

[0110] Step S52: Obtain the current system timestamp as the session timestamp;

[0111] Step S53: Bind the session timestamp based on the commitment value, and calculate and generate a challenge using a collision-resistant hash function. Specifically, it can be: concatenate the commitment value K, the elliptic curve point R corresponding to the first random number generated during the key generation process, and the session timestamp Nonce, and calculate and generate the challenge c using a collision-resistant hash function;

[0112] c = HASH(K||R||Nonce)

[0113] Among them, Nonce is the session timestamp, and the binding with the system timestamp can be achieved through the above calculation formula.

[0114] Step S54: Calculate and generate a response value through modular arithmetic based on the challenge, the second random number, and the first random number generated by the key;

[0115] The process of obtaining the response value can also be considered as: using the challenge c, the first random number r during key generation, and the ZKP random number k, calculate the response value s;

[0116] s = k + c·r mod n

[0117] Among them, n is the order of the elliptic curve, and mod is modular arithmetic, that is, the response value can be obtained as the remainder of calculating c*r divided by n.

[0118] Step S54: Use the commitment K and the response value s together as the zero-knowledge proof ZKP.

[0119] ZKP = (K, s)

[0120] Optionally, the first institution uploads (CT, CK, Nonce, AuthTag, ZKP=(K, s)) to the cloud platform based on the secure transmission protocol.

[0121] In a further optional implementation, after receiving the encrypted data packet, the second institution verifies the zero-knowledge proof ZKP. If the ZKP verification passes, the second institution uses its own private key sk_B to decrypt the key ciphertext CK to obtain the temporary symmetric key TempKey; the second institution uses TempKey, the initialization vector IV in the data packet, and the authentication tag AuthTag to decrypt the data ciphertext CT and verify the integrity. If the verification passes, the original user data is obtained.

[0122] The second institution downloads the encrypted data packet from the cloud platform and verifies the decrypted original user data corresponding to the target user, including:

[0123] Step S61: The second institution downloads the encrypted data packet (CT, CK, Nonce, AuthTag, ZKP=(K, s)) from the cloud platform;

[0124] Step S62: Parse the elliptic curve point R corresponding to the first random number from the key ciphertext CK;

[0125] Step S63: Use the commitment value K, response value s, the elliptic curve point R corresponding to the first random number, timestamp Nonce in the encrypted data packet, and the same hash function as that of the first institution to calculate the verification challenge c' = HASH(K||R||Nonce);

[0126] Step S64: Verify whether the zero - knowledge proof holds. If it does not hold, reject the data packet and alarm;

[0127] In an alternative implementation, by checking whether the equation s·G = K + c'·R holds. If it holds, the zero - knowledge proof ZKP holds.

[0128] If the ZKP verification holds, use the private key sk_B of the second institution to decrypt the key ciphertext CK to obtain the temporary decryption key;

[0129] Use the temporary decryption key TempKey, initialization vector IV, and authentication tag AuthTag to decrypt the data ciphertext CT and verify its integrity. If the verification passes, obtain the original user data; otherwise, the data is tampered with and the encrypted data packet is rejected.

[0130] In an alternative implementation, the process of data decryption and integrity verification is completed simultaneously through the AES - 256 - GCM encryption algorithm. The process of data decryption and integrity verification can be expressed as:

[0131] Data = AES - 256 - GCM.Decrypt(TempKey,IV,CT,AuthTag)

[0132] It can be seen that this application enhances security by separating index processing and core data encryption. The cloud platform only processes index information and performs query matching for users, while the encryption and decryption processes of the core original user data are completely completed locally at the first and second institutions, and a temporary symmetric key dynamically generated for this transmission and encrypted and protected by the public key of the second institution is used. This design ensures that even if an attacker attacks the cloud platform, they cannot directly obtain the original user data or its encryption key, ensuring the transmission security of the original user data.

[0133] In addition, in order to obtain the target user data, the cloud platform only needs to process and match the mutual verification of the indexes and does not need to decrypt any sensitive data, ensuring the confidentiality of the query process; moreover, the second institution needs to request confirmation from the first institution again before obtaining the data to achieve the acquisition of the data, guaranteeing the permission status of the data from the source and further enhancing the security of data secure transmission.

[0134] Finally, in the present application, the second institution can use zero-knowledge proof to verify the legitimacy of the key source. The second institution only confirms through mathematical proof that the encryption key is generated specifically for its public key, preventing man-in-the-middle forgery, and without relying on the trustworthiness of the cloud platform, enhancing the security of data processing through cryptographic proof.

[0135] As an optional implementation of the disclosed content of the embodiments of the present invention, referring to Figure 3 , the embodiments of the present invention further provide a cloud platform, which may specifically include:

[0136] A receiving module 310, configured to receive user index information uploaded by the first institution. The user index information includes a user index generated by the first institution using an irreversible encryption algorithm for user identification data, and index field data obtained by performing a desensitization masking process on the user identification data; and is further configured to transmit the user index information to the secure storage module;

[0137] A processing module 320, configured to, when receiving a retrieval request from the second institution to search for a target user identification, calculate a target user index based on the target user identification and query in the stored user index information; if a user index matching the target user index is found, return the index field data corresponding to the user index and the matching status to the second institution; when the second institution obtains a matching status of matching, request data sharing authorization from the first institution, and after obtaining the authorization permission of the first institution, send the public key of the second institution to the first institution through the cloud platform; the first institution generates an encrypted data packet based on the public key of the second institution and uploads the encrypted data packet to the secure storage module; the second institution downloads the encrypted data packet from the secure storage module and verifies and decrypts to obtain the original user data corresponding to the target user;

[0138] A secure storage module 330, configured to store user index information and encrypted data packets. The encrypted data packets include data ciphertext, key ciphertext, session timestamp, authentication tag, and zero-knowledge proof.

[0139] Optionally, the user index information is generated by the first institution, and the generation process is as follows:

[0140] Encrypt the original value of the user identification data using an irreversible encryption algorithm to generate a user index;

[0141] Perform a desensitization masking process on the user identification data to generate index field data;

[0142] Retain the user index and the index field data as user index information and upload them to the cloud platform for associated storage.

[0143] Optionally, the public-private key pair of the second institution is generated based on the elliptic curve cryptography algorithm. The generation of the public-private key pair of the second institution based on the elliptic curve cryptography algorithm includes:

[0144] Select standard elliptic curve parameters, where the elliptic curve parameters include curve equation, prime field, base point, and order;

[0145] Randomly select an integer within a preset range as the private key;

[0146] Based on the private key, calculate the public key through the point multiplication operation on the elliptic curve.

[0147] Optionally, the first institution generates an encrypted data packet based on the public key of the second institution, including:

[0148] Randomly generate a first random number and calculate the corresponding elliptic curve point of the first random number;

[0149] Use the random number and the received public key of the second institution, and through key negotiation and applying a key derivation function, derive a temporary symmetric key and an initialization vector;

[0150] Based on the temporary symmetric key and the initialization vector, use a symmetric encryption algorithm to encrypt the original user data to generate a data ciphertext and an authentication tag;

[0151] Use the elliptic curve integrated encryption algorithm to encrypt the temporary symmetric key with the public key of the second institution to generate a key ciphertext;

[0152] Generate a zero-knowledge proof based on the key negotiation process, and the zero-knowledge proof is used to prove that the temporary symmetric key is legally generated for the public key of the second institution;

[0153] Combine the data ciphertext, the key ciphertext, the session timestamp, the authentication tag, and the zero-knowledge proof to form an encrypted data packet, where the session timestamp is the system timestamp bound during the generation of the zero-knowledge proof.

[0154] Optionally, the first institution generates a zero-knowledge proof based on the key negotiation process, including:

[0155] Randomly select a second random number, and calculate a commitment value based on the second random number and the standard elliptic curve generator;

[0156] Obtain the current system timestamp as the session timestamp;

[0157] Based on the commitment value, bind the session timestamp, and use a collision-resistant hash function to calculate and generate a challenge;

[0158] Based on the challenge, the second random number, and the first random number generated by the key, calculate and generate a response value through modular arithmetic;

[0159] Use the response value and the commitment value together as a zero - knowledge proof.

[0160] Optionally, the first institution uploads the encrypted data packet to the cloud platform based on a secure transmission protocol.

[0161] Optionally, the second institution downloads the encrypted data packet from the cloud platform and verifies and decrypts to obtain the original user data corresponding to the target user, including:

[0162] Verify whether the zero - knowledge proof holds;

[0163] If it does not hold, reject the encrypted data packet and alarm.

[0164] If it holds, use the private key of the second institution to decrypt the key ciphertext in the encrypted data packet to obtain a temporary symmetric key, and use the temporary symmetric key, the initialization vector in the data packet, and the authentication tag to decrypt the data ciphertext and verify its integrity. If the integrity verification passes, obtain the original user data; if the integrity verification fails, reject the encrypted data packet.

[0165] As an optional implementation of the disclosed content of the embodiments of the present invention, refer to Figure 1 , the embodiments of the present invention also provide a data security transmission system, which may specifically include: a cloud platform, and a first institution and a second institution. The cloud platform, the first institution, and the second institution respectively execute each step in the data security transmission method described above.

[0166] The above - described embodiments of the present application provide multiple embodiment solutions. The optional methods described in each embodiment solution can be combined and cross - referenced with each other without conflict, so as to extend multiple possible embodiment solutions, and all of these can be considered as the embodiment solutions disclosed and made public in the embodiments of the present application.

[0167] Although the embodiments of the present application are disclosed as above, the present application is not limited thereto. Any person skilled in the art can make various changes and modifications without departing from the spirit and scope of the present application. Therefore, the protection scope of the present application should be subject to the scope defined by the claims.

Claims

1. A data security transmission method, characterized in that: The following steps are involved: The cloud platform receives user index information uploaded by the first institution, the user index information including a user index generated by the first institution using an irreversible encryption algorithm on user identification data, and index field data obtained by performing a desensitization mask process on the user identification data; the cloud platform stores the user index information; When the cloud platform receives a search request from the second institution to find a target user identifier, the cloud platform calculates the target user index based on the target user identifier and searches the stored user index information; if a user index matching the target user index is found, the cloud platform returns the index field data and matching status corresponding to the user index to the second institution; When the second institution obtains the matching status as a match, it requests data sharing authorization from the first institution, and after obtaining the authorization from the first institution, it sends the public key of the second institution to the first institution; The first institution generates an encrypted data packet based on the public key of the second institution, and uploads the encrypted data packet to the cloud platform, wherein the encrypted data packet includes data ciphertext, key ciphertext, session timestamp, authentication tag and zero-knowledge proof; The second organization downloads the encrypted data packet from the cloud platform and verifies and decrypts the data to obtain the original user data corresponding to the target user.

2. The data security transmission method according to claim 1, characterized in that: The user index information is generated by the first organization, and the generation process is as follows: Encrypt the original value of the user identification data using an irreversible encryption algorithm to generate a user index; Perform desensitization masking on user identification data to generate index field data; The user index and index field data are retained as user index information and uploaded to the cloud platform for associated storage.

3. The data security transmission method according to claim 1, characterized in that: The public-private key pair of the second institution is generated based on an elliptic curve cryptographic algorithm, and the public-private key pair of the second institution is generated based on an elliptic curve cryptographic algorithm, including: Select standard elliptic curve parameters, which include curve equation, prime field, base point and order; Randomly select an integer from a preset range as the private key; Based on the private key, the public key is calculated through point doubling operation on the elliptic curve.

4. The data security transmission method according to claim 1, characterized in that: The first institution generates an encrypted data packet based on the public key of the second institution, including: Randomly select and generate a first random number, and calculate the elliptic curve point corresponding to the first random number; Using the random number and the received second institution public key, deriving a temporary symmetric key and an initialization vector through key negotiation and applying a key derivation function; Based on the temporary symmetric key and initialization vector, the original user data is encrypted using a symmetric encryption algorithm to generate data ciphertext and authentication tag; Using the elliptic curve integrated encryption algorithm, encrypt the temporary symmetric key with the public key of the second institution to generate a key ciphertext; Generate a zero-knowledge proof based on the key agreement process, where the zero-knowledge proof is used to prove that the temporary symmetric key is legally generated for the public key of the second institution; The data ciphertext, key ciphertext, session timestamp, authentication tag and zero-knowledge proof are combined to form an encrypted data packet, wherein the session timestamp is a system timestamp bound in the process of generating the zero-knowledge proof.

5. The data security transmission method according to claim 4, characterized in that: The first institution generates a zero-knowledge proof based on a key agreement process, including: Randomly selecting a second random number, and calculating a commitment value based on the second random number and a standard elliptic curve generator; Get the current system timestamp as the session timestamp; Based on the commitment value, bound to the session timestamp, a challenge is generated using a collision-resistant hash function; Generate a response value by modular calculation based on the challenge, the second random number and the first random number generated by the key; The response value and the commitment value are used together as zero-knowledge proof.

6. The data security transmission method according to claim 1, characterized in that: The second mechanism downloads the encrypted data packet from the cloud platform and verifies and decrypts the data packet to obtain the original user data corresponding to the target user, including: Verify whether the zero-knowledge proof is established; If not, the encrypted data packet will be rejected and an alarm will be issued; If so, the private key of the second institution is used to decrypt the key ciphertext in the encrypted data packet to obtain a temporary symmetric key, and the temporary symmetric key, the initialization vector in the data packet, and the authentication tag are used to decrypt and verify the integrity of the data ciphertext. If the integrity verification passes, the original user data is obtained; if the integrity verification fails, the encrypted data packet is rejected.

7. A data security transmission system, characterized in that: Including, cloud platform, as well as first institution and second institution; The cloud platform is used to receive user index information uploaded by the first institution, the user index information including the user index generated by the first institution using an irreversible encryption algorithm on the user identification data, and the index field data obtained by desensitizing and masking the user identification data; the cloud platform stores the user index information; when the cloud platform receives a search request from the second institution to find a target user identification, the cloud platform calculates the target user index based on the target user identification, and searches the stored user index information; if a user index matching the target user index is found, the cloud platform returns the index field data corresponding to the user index and the matching status to the second institution; The second institution is used to request data sharing authorization from the first institution when the matching status is matched, and after obtaining the authorization license from the first institution, send the public key of the second institution to the first institution; The first institution is used to generate an encrypted data packet based on the public key of the second institution, and upload the encrypted data packet to the cloud platform, wherein the encrypted data includes data ciphertext, key ciphertext, session timestamp, authentication tag and zero-knowledge proof; The second mechanism is also used to download the encrypted data packet from the cloud platform and verify and decrypt the original user data corresponding to the target user.

8. A cloud platform, characterized in that: include: A receiving module, used to receive user index information uploaded by the first institution, the user index information including a user index generated by the first institution using an irreversible encryption algorithm on user identification data, and index field data obtained by performing a desensitization mask process on the user identification data; and also used to transmit the user index information to a secure storage module; A processing module, for, when receiving a search request from a second institution to search for a target user identifier, calculating a target user index based on the target user identifier and searching in the stored user index information; if a user index matching the target user index is found, returning the index field data corresponding to the user index and the matching status to the second institution; when the second institution obtains a matching status as a match, requesting data sharing authorization from the first institution, and after obtaining the authorization license from the first institution, sending the public key of the second institution to the first institution through the cloud platform; the first institution generates an encrypted data packet based on the public key of the second institution, and uploads the encrypted data packet to the secure storage module; The second mechanism downloads the encrypted data packet from the secure storage module and verifies and decrypts the data packet to obtain the original user data corresponding to the target user; The secure storage module is used to store user index information and encrypted data packets, wherein the encrypted data packets include data ciphertext, key ciphertext, session timestamp, authentication tag and zero-knowledge proof.

Images