Data protection method, electronic equipment and storage medium

Abstract

The invention discloses a data protection method, electronic equipment and a storage medium. The method comprises the following steps: receiving global parameters sent by a central mechanism; on the basis of the global parameters, generating an attribute key of the attribute managed by itself, and feeding back the attribute key to the central mechanism, so that the central mechanism generates a decryption key according to the attribute key and a preset master key and sends the decryption key to the target mechanism; requesting and acquiring a re-encrypted ciphertext obtained by re-encrypting the ciphertext corresponding to the target data in the secrecy system from the cloud; and decrypting the re-encrypted ciphertext according to the global parameter and the decryption key. According to the embodiment of the invention, on the basis of the existing secrecy system, the re-encrypted ciphertext after ciphertext re-encryption is decrypted through the central mechanism and the cloud, so that the target mechanism newly added into the secrecy system can flexibly obtain the target data, the difficulty of overall planning of multiple authoritative mechanisms is reduced, and the security of the data is improved under the condition that the data security is ensured. And the encryption and decryption flexibility of the target data is improved.

Description

Technical Field

[0001] This application relates to the field of data confidentiality technology, and particularly to a data protection method, an electronic device, and a storage medium. Background Art

[0002] With the development of modern information technology, various traditional industries are gradually moving towards the direction of systematization, automation, and intelligence. Especially in the power grid technology, after the concept of smart grid is proposed and applied to the traditional power system, through sensing, communication, computing, and control technologies, the intelligent operation, optimized management, and efficient utilization of the power system are realized.

[0003] Whether it is a smart grid or other intelligent technologies, the protection of data privacy and data security is crucial. In the process of industry intelligence, a large number of software and hardware are networked, resulting in certain risks and threats in the process of data storage, transmission, and sharing. It is particularly critical to protect these data from the influence of unauthorized personnel or organizations. Summary of the Invention

[0004] This application provides a data protection method, an electronic device, and a storage medium to ensure data security while improving the flexibility of overall planning by multiple attribute authorities.

[0005] According to the first aspect of this application, a data protection method is provided, which is applied to a target institution newly added to the confidentiality system. The method includes:

[0006] Receiving global parameters sent by the central institution;

[0007] Based on the global parameters, generating an attribute key for the attributes managed by itself and feeding it back to the central institution, so that the central institution generates a decryption key according to the attribute key and a preset master key and sends it to the target institution;

[0008] Requesting and obtaining from the cloud the re-encrypted ciphertext obtained by re-encrypting the ciphertext corresponding to the target data in the confidentiality system;

[0009] Decrypting the re-encrypted ciphertext according to the global parameters and the decryption key.

[0010] According to the second aspect of this application, a data protection method is provided, which is applied to the central institution. The method includes:

[0011] Sending the preset global parameters to the target institution newly added to the confidentiality system and the cloud, so that the target institution feeds back the attribute keys of the attributes managed by the target institution;

[0012] Generating a decryption key according to the attribute key and the preset master key and sending it to the target institution;

[0013] Generate a re-encryption key based on the decryption key, global parameters, and the target access matrix of the target organization, and send it to the cloud so that the cloud re-encrypts the ciphertext corresponding to the target data in the confidentiality system according to the re-encryption key and global parameters to obtain a re-encrypted ciphertext.

[0014] According to the third aspect of the present application, a data protection method is provided, which is applied to the cloud. The method includes:

[0015] Obtain the ciphertext after encrypting the target data in the confidentiality system, as well as the global parameters and re-encryption key sent by the central organization;

[0016] Re-encrypt the ciphertext according to the global parameters and the re-encryption key to obtain a re-encrypted ciphertext.

[0017] According to the fourth aspect of the present application, a data protection device is provided, which is applied to the target organization newly joined to the confidentiality system. The device includes:

[0018] A global parameter receiving module, configured to receive the global parameters sent by the central organization;

[0019] An attribute key feedback module, configured to generate an attribute key for the attributes managed by itself based on the global parameters, and feedback it to the central organization so that the central organization generates a decryption key according to the attribute key and a preset master key and sends it to the target organization;

[0020] A re-encrypted ciphertext request module, configured to request and obtain the re-encrypted ciphertext obtained by re-encrypting the ciphertext corresponding to the target data in the confidentiality system from the cloud;

[0021] A re-encrypted ciphertext decryption module, configured to decrypt the re-encrypted ciphertext according to the global parameters and the decryption key.

[0022] According to the fifth aspect of the present application, a data protection device is provided, which is applied to the central organization. The device includes:

[0023] A global parameter sending module, configured to send the preset global parameters to the target organization and the cloud newly joined to the confidentiality system so that the target organization feeds back the attribute keys of the attributes managed by the target organization;

[0024] A decryption key generation module, configured to generate a decryption key according to the attribute key and a preset master key and send it to the target organization;

[0025] A re-encryption key generation module, configured to generate a re-encryption key based on the decryption key, global parameters, and the target access matrix of the target organization, and send it to the cloud so that the cloud re-encrypts the ciphertext corresponding to the target data in the confidentiality system according to the re-encryption key and global parameters to obtain a re-encrypted ciphertext.

[0026] According to a sixth aspect of the present application, a data protection device is provided, which is applied to the cloud. The device includes:

[0027] A ciphertext acquisition module, configured to acquire the ciphertext of target data in a secrecy system after encryption, as well as the global parameters and re-encryption keys sent by a central institution;

[0028] A ciphertext encryption module, configured to re-encrypt the ciphertext according to the global parameters and re-encryption keys to obtain a re-encrypted ciphertext.

[0029] According to a seventh aspect of the present application, an electronic device is provided. The electronic device includes:

[0030] At least one processor; and

[0031] A memory communicatively connected to the at least one processor; wherein,

[0032] The memory stores a computer program executable by the at least one processor. When the computer program is executed by the at least one processor, the at least one processor is enabled to execute the data protection method provided in the first aspect embodiment of the present application, or execute the data protection method provided in the second aspect embodiment of the present application, or execute the data protection method provided in the third aspect embodiment of the present application.

[0033] According to another aspect of the present application, a computer-readable storage medium is provided. The computer-readable storage medium stores computer instructions, and when the computer instructions are executed by a processor, they are used to implement the data protection method provided in the first aspect embodiment of the present application, or implement the data protection method provided in the second aspect embodiment of the present application, or implement the data protection method provided in the third aspect embodiment of the present application.

[0034] According to another aspect of the present application, a computer program product is provided. The computer program product includes a computer program, and when the computer program is executed by a processor, it is used to implement the data protection method provided in the first aspect embodiment of the present application, or implement the data protection method provided in the second aspect embodiment of the present application, or implement the data protection method provided in the third aspect embodiment of the present application.

[0035] In the embodiments of the present application, the target institution newly added to the confidentiality system generates its own attribute key by receiving the global parameters of the central institution and feeds it back to the central institution, enabling the central institution to generate the decryption key corresponding to the target institution, and decrypting the re-encrypted ciphertext obtained from the cloud with the global parameters and the decryption key. Based on the existing confidentiality system, the embodiments of the present application add a new authoritative institution, bypassing the complex method of directly decrypting the ciphertext, but decrypting the re-encrypted ciphertext after re-encrypting the ciphertext by the central institution and the cloud, enabling the target institution newly added to the confidentiality system to flexibly obtain the target data. Through this method, not only can the confidentiality system flexibly accept the newly added authoritative institution and coordinate the encryption and decryption of the target data, but also the access policy for applying to access the target data can be adjusted in a timely manner according to the newly added target institution, thus reducing the difficulty of coordinating multiple authoritative institutions and improving the flexibility of encrypting and decrypting the target data while ensuring data security.

[0036] It should be understood that the content described in this part is not intended to identify the key or important features of the embodiments of the present application, nor is it used to limit the scope of the present application. Other features of the present application will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0038] Figure 1 It is a flowchart of a data protection method applied to a target institution newly added to the confidentiality system according to Embodiment 1 of the present application;

[0039] Figure 2 It is a flowchart of a data protection method applied to the central institution according to Embodiment 2 of the present application;

[0040] Figure 3 It is a flowchart of a data protection method applied to the cloud according to Embodiment 3 of the present application;

[0041] Figure 4 It is a schematic diagram of data confidentiality interaction when a new power plant is added to the power system according to Embodiment 4 of the present application;

[0042] Figure 5 It is a schematic structural diagram of a data protection device applied to a target institution newly added to the confidentiality system according to Embodiment 5 of the present application;

[0043] Figure 6It is a schematic structural diagram of a data protection device applied to a central institution according to Embodiment 6 of the present application;

[0044] Figure 7 It is a schematic structural diagram of a data device applied to the cloud according to Embodiment 7 of the present application;

[0045] Figure 8 It is a schematic structural diagram of an electronic device for implementing the data protection method of the embodiments of the present application. Detailed implementation manners

[0046] In order to enable those skilled in the art to better understand the solutions of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

[0047] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above drawings are used to distinguish similar objects, and do not necessarily need to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances so that the embodiments of the present application described here can be implemented in an order other than those illustrated or described here. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units does not necessarily need to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products, or devices.

[0048] Embodiment 1

[0049] Figure 1 The present embodiment provides a flowchart of a data protection method for Embodiment 1 of the present application. This embodiment is applicable to the situation of keeping data such as power information and power supply information in the power system confidential. This method can be applied to a target institution newly added to the confidentiality system. This method can be executed by a data protection device, which can be implemented in the form of hardware and / or software, and the data protection device can be configured in an electronic device. As Figure 1 shown, the method includes:

[0050] S110. Receive the global parameters sent by the central institution.

[0051] First of all, it should be noted that the confidentiality system can be any organizational system that requires data protection. In this organizational system, there are multiple software and / or hardware that can interact with each other, and data is transmitted between them through various interaction forms. During the transmission process, the data needs to be kept confidential to prevent non-system internal personnel from intercepting important and private information. Exemplarily, the power system can be used as a confidentiality system. In the power system, there are institutions such as power companies and power plants. Different power companies and power plants communicate with each other by transmitting encrypted data. For example, a power company can encrypt the information of power demand and transmit it to the power plant, and the staff of the power plant decrypts it and adjusts the power supply strategy according to the specific power consumption demand, etc.

[0052] In S110, the central institution can be any organization or unit that conducts key management in the confidentiality system involved in the embodiments of the present application. During the process of multi-attribute authority encryption, the central institution, as the central institution, generates and distributes keys for other attribute authorities. Correspondingly, the global parameter can be the initial parameter generated by the central institution, which is used to generate various keys subsequently and help other attribute authorities decrypt. The target institution is an additional attribute institution in the case where there are already a central institution and multiple other attribute institutions in the original confidentiality system. It can be understood that the newly added target institution cannot directly decrypt the original ciphertext in the confidentiality system. Therefore, the embodiments and implementation manners of the present application propose solutions.

[0053] S120. Based on the global parameter, generate the attribute key of the attribute managed by itself and feedback it to the central institution, so that the central institution generates a decryption key according to the attribute key and the preset master key and sends it to the target institution.

[0054] Among them, the attribute managed by the target institution itself can be the characteristic information related to the target institution itself. Each target institution can only manage its own attributes. These attributes can include but are not limited to "personnel's affiliated unit", "work level of unit personnel", etc. Exemplarily, taking the power system mentioned in the previous example as an example, a power company, as an attribute institution, can manage its own attribute information. The "personnel's affiliated unit" of the staff in the power company is "XX Power Company", and the "work level of unit personnel" of this staff can be "senior engineer". It can be understood that during the process of attribute authority encryption, decryption verification needs to be carried out through attribute information, that is, the attributes of the person applying for confidential data need to meet the corresponding conditions. For example, if someone applies to access the confidential data of the power grid, then it is necessary to verify whether the person's attributes meet "XX Power Company" and "senior engineer" before being allowed to access the confidential data and decrypt to obtain the plaintext.

[0055] For the target institution, after obtaining the global parameters published by the central institution, based on the global parameters, an attribute key is generated according to a preset cryptographic algorithm. After the attribute key is generated, the target institution needs to feedback it to the central institution so that the central institution can further generate a decryption key based on the attribute key and the preset master key and then return it to the target institution. Among them, the master key is a key preset by the central institution and is used to uniformly generate decryption keys for different authoritative institutions. The decryption key is the key for the staff in each authoritative institution to decrypt the ciphertext. It can be understood that the attributes of different staff are different. Therefore, the decryption keys applied for by different staff in different authoritative institutions are different after being generated by the preset cryptographic algorithm.

[0056] Of course, this article aims to solve how the authoritative institutions newly added to the confidentiality system can perform more efficient confidential data interaction. For the preset cryptographic algorithm, any cryptographic principle or confidentiality algorithm in the related technology can be adopted, and the embodiments of the present application do not limit this.

[0057] S130. Request and obtain the re-encrypted ciphertext obtained by re-encrypting the ciphertext corresponding to the target data in the confidentiality system from the cloud.

[0058] Among them, the cloud can be an existing entity in the confidentiality system. The cloud can be used for cloud storage of any ciphertext and key, which reduces the pressure on the local storage of each authoritative institution. At the same time, encryption or re-encryption operations can also be directly performed on the cloud.

[0059] The target data can be the plaintext requested by the staff in the target institution for access. Continuing the previous example, in the power system, the power demand information is encrypted. After the staff in the power plant applies for access to the power demand information, the plaintext of the power demand is decrypted.

[0060] The ciphertext corresponding to the target data can be the ciphertext obtained by encrypting the plaintext by the authoritative institution and the central institution that originally existed in the confidentiality system before the target institution joined the confidentiality system. Among them, the target data can be power demand information. Continuing the previous example, before power plant A joined the current power system, there were multiple power companies and power plants in the power system itself. Among them, under the encryption cooperation between power company B and the central power plant C, the power demand information of power company B was encrypted, and the encrypted ciphertext was stored in the cloud. After power plant A joined the current power system, it could not directly decrypt this ciphertext. In the prior art, a complex interaction and decryption process was required to complete this situation. However, in the embodiments of the present application, by using the computing power of the cloud and combining the verification information (such as the managed attribute information, etc.) of the central institution and the newly added target institution, the existing ciphertext is re-encrypted. What the cloud obtains after re-encrypting the secret is the re-encrypted ciphertext, and the cloud then sends the re-encrypted ciphertext to the target institution.

[0061] It is understandable that the ciphertext itself is the result of encrypting the plaintext in the original secure system, and the encryption process is the combined result of the central agency and the existing authoritative agency in the secure system. If a target agency newly added to the secure system wants to directly obtain the plaintext, it originally needs to use the access policy in the original secure system. However, the proposed solution in this application is that through the central agency as an intermediary, combined with the newly added target agency, the original ciphertext is re-encrypted, and the re-encrypted ciphertext can enable the staff in the target agency to directly decrypt and obtain the plaintext after applying for access.

[0062] S140. Decrypt the re-encrypted ciphertext according to the global parameters and the decryption key.

[0063] After the target agency obtains the re-encrypted ciphertext, according to the global parameters released by the central agency and the decryption key given to the target agency, based on a preset cryptographic algorithm, the re-encrypted ciphertext is decrypted to obtain the target data.

[0064] Continuing the previous example, in the power system, when the power supply required by the original power demand information cannot be met by the original power plants in the power system, new power plants need to be introduced. At this time, the new power plants cannot directly decrypt the ciphertext corresponding to the power demand information, but the central power plant and the cloud first re-encrypt the ciphertext, and the new power plants use the decryption key given by the central power plant to decrypt the re-encrypted ciphertext to obtain the plaintext of the power demand information.

[0065] In the embodiment of this application, the target agency newly added to the secure system generates its own attribute key by receiving the global parameters of the central agency and feeds it back to the central agency, enabling the central agency to generate the decryption key corresponding to the target agency, and decrypting the re-encrypted ciphertext obtained from the cloud by virtue of the global parameters and the decryption key. The embodiment of this application adds a new authoritative agency on the basis of the existing secure system, bypassing the complex method of directly decrypting the ciphertext, but decrypting the re-encrypted ciphertext after re-encrypting the ciphertext by the central agency and the cloud, enabling the target agency newly added to the secure system to flexibly obtain the target data. Through this method, not only can the secure system flexibly accept the newly added authoritative agency, coordinate the encryption and decryption of the target data, but also can adjust the access policy for applying to access the target data in a timely manner according to the newly added target agency, thereby reducing the difficulty of multi-authoritative agency coordination and improving the flexibility of encryption and decryption of the target data while ensuring data security.

[0066] In an alternative embodiment, generating the attribute key of the attributes managed by itself based on the global parameters in S120 may include:

[0067] S121. Generate the institutional private key of the target institution based on the global parameters.

[0068] It should be noted in advance that for each authoritative institution, the public key and private key can be generated through a preset cryptographic algorithm based on the global parameters issued by the central institution. The public key and private key play different roles in the encryption and decryption processes according to the specific cryptographic algorithm used. Since the main purpose of this case is not to invent the specific content of the cryptographic algorithm, the use of the cryptographic algorithm is not limited here. The institutional private key mentioned here can be the private key of the target institution.

[0069] S122. Generate the attribute key according to the global parameters, the institutional private key, the attribute information managed by the target institution itself, and the user identity identifier for applying for the target data.

[0070] Among them, the user applying for the target data can be a staff member in the target institution who needs to access the target data. Correspondingly, the user's identity identifier can be the identity recognition information of the staff member, such as the ID number or work number, etc., which is not limited here. The global parameters, the institutional private key of the target institution, the attribute information managed by the target institution, and the identity recognition information of the staff member in the target institution who applies to access the target data are used as the elements of the cryptographic algorithm for generating the attribute key, participate in the calculation of the preset cryptographic algorithm, and generate the attribute key corresponding to the attributes of the target institution itself.

[0071] Continuing with the previous example, in a power plant newly added to the power system, the staff member of the power plant needs to generate the attribute key of the new power plant when applying to the power system to access the target data. Then, in addition to the global parameters and the private key of the new power plant itself, the attribute information managed by the new power plant and the identity identifier of the staff member are also required. Based on these four elements, the attribute key is calculated through a preset cryptographic algorithm.

[0072] In the embodiments of the present application, generating the attribute key based on the global parameters, the institutional private key, the attribute information, and the user identity identifier provides the attribute information of the target institution itself and the user identity information of the user applying to access the target data for the newly added target institution during the interaction with the confidentiality system. This enables the information of the target institution and the user to participate in the calculation during the subsequent re-encryption and decryption of the ciphertext, so that the entire confidentiality system can accept newly added authoritative institutions at any time. This not only provides a basis for the target institution to integrate into the confidentiality system and the re-encryption process, but also helps to improve the efficiency of the target institution accessing the target data.

[0073] In a further optional embodiment, the step of generating the attribute key according to the global parameters, the institutional private key, the attribute information managed by the target institution itself, and the user identity identifier of the user applying for the target data in S122 may include:

[0074] S1221. Map the attribute information to a target attribute value through a preset attribute domain.

[0075] Among them, the attribute domain can refer to the range or set of values that an attribute can take. That is, the value range of the attribute is restricted by the domain, and each attribute has a specific data type. It can be understood that an attribute, as an information, cannot directly participate in calculations. Converting the attribute into an attribute value that can participate in calculations is a relatively reliable method. In the embodiments of the present application, a large attribute domain is set in the confidentiality system. Any attribute managed by a newly added authoritative institution can match an attribute value in this attribute domain and then quickly participate in calculations. The target attribute value can be the attribute value obtained by mapping and matching the attribute information of the target institution in the attribute domain.

[0076] S1222. Based on a preset attribute key generation algorithm, calculate the global parameters, institutional private key, target attribute value, and identity identifier to generate an attribute key.

[0077] Among them, the attribute key generation algorithm can be a sub-algorithm for generating attribute keys in any cryptographic algorithm. Through this algorithm, the global parameters, institutional private key, target attribute value, and identity identifier are coordinated in the calculation to generate an attribute key.

[0078] In the above implementation manner, by introducing the attribute domain, the dynamic addition of attributes managed by a newly added target institution is realized, which greatly improves the flexibility of managing newly added institutions.

[0079] In an alternative implementation manner, decrypting the re-encrypted ciphertext in S140 may include:

[0080] In response to the individual attributes of the user applying for the target data conforming to the attribute information managed by the target institution, decrypt the re-encrypted ciphertext to obtain the target data.

[0081] Among them, the individual attributes of the user can be the user's own attribute information, such as the user's affiliation information, position information, etc. Exemplarily, for the staff of a newly added power plant in the power system, their affiliation is the new power plant, and their position may be a senior engineer, etc. Before decrypting the re-encrypted ciphertext for the target data, the user needs to be verified. When the user's individual attributes (there can be multiple attributes) conform to (or belong to) the attribute information (which can also be multiple) managed by the target institution, it proves that the user is indeed an internal member of the target institution, allowing them to obtain the target data, that is, allowing decryption; on the contrary, if the user's individual attributes do not conform to (or do not belong to) the attribute information managed by the target institution, it proves that the user is not an internal member of the target institution and they are not allowed to obtain the target data, that is, they are not allowed to decrypt.

[0082] In the above embodiments, by verifying the attribute information, it is determined whether the user is allowed to decrypt the re-encrypted ciphertext, providing a practical solution for the confidentiality system to verify the decryption permission. Compared with only verifying the identity information, the multi-attribute verification improves the security.

[0083] Embodiment 2

[0084] Figure 2 The flow chart of a data protection method provided by the second embodiment of the present application is applicable to the situation of protecting data such as power information and power supply information in the power system. This method can be applied to the central agency in the confidentiality system. This method can be executed by a data protection device, which can be implemented in the form of hardware and / or software, and the data protection device can be configured in an electronic device. As Figure 2 shown, the method includes:

[0085] S210. Send the preset global parameters to the target agency newly added to the confidentiality system and the cloud, so that the target agency feeds back the attribute keys of the attributes managed by the target agency.

[0086] For the central agency, the preset global parameters are published, and this publishing process sends the global parameters to all members in the confidentiality system, including the target agency newly added to the confidentiality system and the cloud. After obtaining the global parameters, the target agency generates the attribute keys corresponding to the target agency and feeds back the attribute keys to the central agency. This process has been introduced in the foregoing embodiments, and the embodiments of the present application do not limit it here.

[0087] S220. Generate a decryption key according to the attribute key and the preset master key, and send it to the target agency.

[0088] The master key is the basic key belonging to the central agency generated when the central agency generates the global parameters. Based on this master key, combined with the attribute key obtained from the target agency, through a preset cryptographic algorithm, a decryption key is generated. That is to say, the essential elements for generating the decryption key are the attribute key and the master key. The master key represents the information of the central agency, and the attribute key contains the information of the target agency and the information of the user in the target agency who applies to access the target data. For this reason, the target agency can quickly enter the confidentiality system and interact with other agencies in the confidentiality system.

[0089] S230. Generate a re-encryption key according to the decryption key, the global parameters, and the target access matrix of the target agency, and send it to the cloud, so that the cloud re-encrypts the ciphertext corresponding to the target data in the confidentiality system according to the re-encryption key and the global parameters to obtain a re-encrypted ciphertext.

[0090] Among them, the target access matrix can be the application access information of users in the target institution to the target data, which participates in the calculation in the preset cryptographic algorithm in matrix form. In the preset cryptographic algorithm, the decryption key, the global parameter, and the target access matrix are used as three elements required to generate the re-encryption key, and are calculated and / or transformed in the preset cryptographic algorithm to obtain the re-encryption key. The central institution sends the re-encryption key to the cloud, enabling the cloud to re-encrypt the ciphertext that already exists in the security system to obtain the re-encrypted ciphertext. As also mentioned in the foregoing embodiments, the newly added target institution only needs to decrypt the re-encrypted ciphertext to obtain the target data.

[0091] Based on the existing security system, the technical solution of the embodiment of the present application adds a new authoritative institution, bypassing the complex method of directly decrypting the ciphertext. Instead, the central institution and the cloud decrypt the re-encrypted ciphertext after re-encrypting the ciphertext, enabling the target institution newly added to the security system to flexibly obtain the target data. Through this method, not only can the security system flexibly accept newly added authoritative institutions and coordinate the encryption and decryption of target data, but also the access policy for applying to access the target data can be adjusted in a timely manner according to the newly added target institution, thereby reducing the difficulty of coordinating multiple authoritative institutions and improving the flexibility of encrypting and decrypting target data while ensuring data security.

[0092] In an alternative embodiment, the method may further include:

[0093] Sending the preset global parameter to the existing institutions in the security system, so that each existing institution generates its own public key according to the global parameter, and encrypts the target data according to the global parameter, its own public key, and the own access matrix of the existing institution to obtain the ciphertext.

[0094] Among them, the existing institutions can be each authoritative institution that already existed before the target institution joined the security system. Continuing with the previous example, before the new power plant joined the power system, there were already many power plants and power companies in the power system itself. Therefore, these power plants or power companies can all be called existing institutions.

[0095] Correspondingly, the own public key can be the public key of the existing institution. As also mentioned before, for each authoritative institution, based on the global parameter issued by the central institution, a public key and a private key can be generated through a preset cryptographic algorithm. The public key and the private key play different roles in the encryption and decryption processes according to the specific cryptographic algorithm used. Since the main purpose of this case is not to invent the specific content of the cryptographic algorithm, the use of the cryptographic algorithm is not limited. That is to say, in the security system, any authoritative institution other than the central institution needs to generate its own public key and private key according to the global parameter.

[0096] Similar to the target access matrix, the private access matrix is the access request information for users in these existing institutions to apply to the confidentiality system for accessing target data, and participates in calculations and / or transformations in the form of a matrix.

[0097] During the encryption process of the ciphertext, the global parameters, private public key, and private access matrix are the basic elements for encryption. Through a preset cryptographic algorithm, calculations and / or transformations are performed on the target data to obtain the ciphertext.

[0098] Embodiment III

[0099] Figure 3 The present application provides a flowchart of a data protection method for Embodiment III. This embodiment is applicable to the situation of protecting data such as power information and power supply information in the power system. This method can be applied to the cloud in the confidentiality system. This method can be executed by a data protection device, which can be implemented in the form of hardware and / or software, and the data protection device can be configured in an electronic device. As Figure 3 shown, the method includes:

[0100] S310. Obtain the ciphertext after encryption of the target data in the confidentiality system, as well as the global parameters and re-encryption key sent by the central institution.

[0101] For the cloud, the ciphertext obtained after the initial encryption of the target data is uploaded to the cloud, saved by the cloud, and the cloud accepts access requests for the ciphertext from other authoritative institutions. At the same time, the cloud also needs to receive the global parameters and re-encryption key sent by the central institution to re-encrypt the ciphertext stored in the cloud.

[0102] S320. Re-encrypt the ciphertext according to the global parameters and the re-encryption key to obtain a re-encrypted ciphertext.

[0103] The global parameters and the re-encryption key, as two major elements for re-encrypting the ciphertext, participate in the operation of the preset cryptographic algorithm to re-encrypt the ciphertext and obtain the re-encrypted ciphertext.

[0104] Similar to other authoritative institutions applying to the cloud for access to the ciphertext, the newly added target institution applies to the cloud for access to the re-encrypted ciphertext. After passing the verification, the re-encrypted ciphertext can be decrypted to directly obtain the plaintext, that is, the target data.

[0105] Based on the existing confidentiality system, the technical solution of the embodiment of the present application adds a new authoritative institution, bypassing the complex method of directly decrypting ciphertext. Instead, the central institution and the cloud decrypt the re-encrypted ciphertext after re-encrypting the ciphertext, enabling the target institution newly added to the confidentiality system to flexibly obtain the target data. Through this method, not only can the confidentiality system flexibly accept newly added authoritative institutions and coordinate the encryption and decryption of target data, but also adjust the access policy for applying to access target data in a timely manner according to the newly added target institution, thereby reducing the difficulty of coordinating multiple authoritative institutions and improving the flexibility of encryption and decryption of target data while ensuring data security.

[0106] Embodiment 4

[0107] Figure 4 It is a schematic diagram of data confidentiality interaction when a new power plant is added to the power system provided by the embodiment of the present application. The embodiment of the present application is a specific example introduction to the confidentiality interaction process of the power system based on the foregoing embodiments and implementation manners. As Figure 4 shown, specifically as follows:

[0108] First, the power system generates global parameters at the central power plant, and each power plant participating in power supply generates its own public and private keys according to the global parameters. Authorized power plant staff request the decryption key from the power plant.

[0109] Secondly, the power company encrypts sensitive data such as power demand information and uploads it to the cloud. Initially, the staff of the power plants participating in power supply can request to obtain the encrypted data and decrypt the plaintext according to their own decryption keys. If the requesting staff does not meet the access permissions set by the power company, then they cannot decrypt the plaintext.

[0110] Thirdly, when the central power plant cannot meet the power supply demand, the power company can choose to add a new power plant to provide power. At this time, the newly participating power plant sends new access control permissions to the central power plant. The central power plant can generate a re-encryption key according to the new access control permissions and the decryption keys of the authorized staff and send it to the cloud.

[0111] Finally, after receiving the re-encryption key, the cloud can re-encrypt according to the re-encryption key and the initial ciphertext and save the re-encrypted ciphertext in the cloud. The staff of the newly added power plant can request the re-encrypted ciphertext from the cloud and decrypt the re-encrypted ciphertext using the decryption key. If the requesting staff does not meet the new access permissions, then they cannot decrypt the plaintext.

[0112] Embodiment 5

[0113] Figure 5Schematic diagram of a data protection device provided in Embodiment 5 of this application. This data protection device is applied to a target organization newly added to the confidentiality system, such as Figure 5 As shown, the device 500 includes:

[0114] A global parameter receiving module 510, configured to receive global parameters sent by a central organization;

[0115] An attribute key feedback module 520, configured to generate an attribute key for the attributes it manages based on the global parameters, and feedback it to the central organization, so that the central organization can generate a decryption key according to the attribute key and a preset master key, and send it to the target organization;

[0116] A re-encrypted ciphertext request module 530, configured to request and obtain a re-encrypted ciphertext obtained by re-encrypting the ciphertext corresponding to the target data in the confidentiality system from the cloud;

[0117] A re-encrypted ciphertext decryption module 540, configured to decrypt the re-encrypted ciphertext according to the global parameters and the decryption key.

[0118] In the embodiment of this application, a target organization newly added to the confidentiality system generates its own attribute key by receiving the global parameters of the central organization and feeds it back to the central organization, enabling the central organization to generate a decryption key corresponding to the target organization, and decrypting the re-encrypted ciphertext obtained from the cloud with the global parameters and the decryption key. Based on the existing confidentiality system, this embodiment of this application adds a new authoritative organization, bypassing the complex method of directly decrypting the ciphertext, but decrypting the re-encrypted ciphertext after re-encrypting the ciphertext by the central organization and the cloud, enabling the target organization newly added to the confidentiality system to flexibly obtain the target data. Through this method, not only can the confidentiality system flexibly accept newly added authoritative organizations, coordinate the encryption and decryption of target data, but also can adjust the access policy for applying to access the target data in a timely manner according to the newly added target organization, thereby reducing the difficulty of coordinating multiple authoritative organizations and improving the flexibility of encrypting and decrypting target data while ensuring data security.

[0119] In an optional implementation manner, the attribute key feedback module 520 may include:

[0120] An institutional private key generation unit, configured to generate an institutional private key of the target organization based on the global parameters;

[0121] An attribute key generation unit, configured to generate an attribute key according to the global parameters, the institutional private key, the attribute information managed by the target organization itself, and the user identity identifier of the user applying for the target data.

[0122] In a further optional implementation manner, the attribute key generation unit may include:

[0123] An attribute value mapping subunit, configured to map attribute information to a target attribute value through a preset attribute domain;

[0124] An attribute key generation subunit, configured to calculate and generate an attribute key based on a preset attribute key generation algorithm using global parameters, an institutional private key, a target attribute value, and an identity identifier.

[0125] In an alternative embodiment, the re-encrypted ciphertext decryption module 540 may specifically be configured to: in response to the individual attributes of a user applying for target data conforming to the attribute information managed by a target institution, decrypt the re-encrypted ciphertext to obtain the target data.

[0126] In an alternative embodiment, the target data is power demand information.

[0127] The data protection device provided in the embodiments of the present application can execute the data protection method provided in the first aspect embodiments of the present application, and has corresponding functional modules and beneficial effects for executing each data protection method.

[0128] Embodiment Six

[0129] Figure 6 FIG. is a schematic structural diagram of a data protection device provided for Embodiment Six of the present application. This data protection device is applied to a central institution in a secrecy system, such as Figure 6 shown, the device 600 includes:

[0130] A global parameter sending module 610, configured to send preset global parameters to a target institution newly added to the secrecy system and the cloud, so that the target institution feeds back an attribute key of the attributes managed by the target institution;

[0131] A decryption key generation module 620, configured to generate a decryption key according to the attribute key and a preset master key and send it to the target institution;

[0132] A re-encryption key generation module 630, configured to generate a re-encryption key according to the decryption key, global parameters, and a target access matrix of the target institution, and send the re-encryption key to the cloud, so that the cloud re-encrypts the ciphertext corresponding to the target data in the secrecy system according to the re-encryption key and the global parameters to obtain a re-encrypted ciphertext.

[0133] Based on the existing confidentiality system, the technical solution of the embodiment of the present application adds a new authoritative institution, bypassing the complex method of directly decrypting ciphertext. Instead, the re-encrypted ciphertext after re-encrypting the ciphertext by the central institution and the cloud is decrypted, enabling the target institution newly added to the confidentiality system to flexibly obtain the target data. Through this method, not only can the confidentiality system flexibly accept the newly added authoritative institution and coordinate the encryption and decryption of the target data, but also the access policy for applying to access the target data can be adjusted in a timely manner according to the newly added target institution, thereby reducing the difficulty of coordinating multiple authoritative institutions and improving the flexibility of encrypting and decrypting the target data while ensuring data security.

[0134] In an alternative embodiment, the device 600 may further include:

[0135] A parameter global sending unit, configured to send preset global parameters to the existing institutions in the confidentiality system, so that each existing institution generates its own public key according to the global parameters, and encrypts the target data according to the global parameters, its own public key, and the own access matrix of the existing institution to obtain ciphertext.

[0136] The data protection device provided by the embodiment of the present application can execute the data protection method provided by the second aspect embodiment of the present application, and has the corresponding functional modules and beneficial effects for executing each data protection method.

[0137] Embodiment VII

[0138] Figure 7 The following is a schematic structural diagram of a data protection device provided by Embodiment VII of the present application. This data protection device is applied to the cloud in the confidentiality system. As Figure 7 shown, the device 700 includes:

[0139] A ciphertext acquisition module 710, configured to acquire the ciphertext after the target data in the confidentiality system is encrypted, as well as the global parameters and the re-encryption key sent by the central institution;

[0140] A ciphertext encryption module 720, configured to re-encrypt the ciphertext according to the global parameters and the re-encryption key to obtain a re-encrypted ciphertext.

[0141] The data protection device provided by the embodiment of the present application can execute the data protection method provided by the third aspect embodiment of the present application, and has the corresponding functional modules and beneficial effects for executing each data protection method.

[0142] Embodiment VIII

[0143] Figure 8The structural schematic diagram of an electronic device 10 that can be used to implement the embodiments of the present application is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present application described herein and / or claimed.

[0144] As Figure 8 shown, the electronic device 10 includes at least one processor 11 and a memory communicatively connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc. The memory stores a computer program executable by the at least one processor. The processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 into the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. The input / output (I / O) interface 15 is also connected to the bus 14.

[0145] Multiple components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a magnetic disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0146] The processor 11 can be various general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of the processor 11 include but are not limited to a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the data protection method.

[0147] In some embodiments, the data protection method may be implemented as a computer program tangibly embodied in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed onto the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the data protection method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the data protection method by any other suitable means (e.g., by means of firmware).

[0148] The various embodiments of the systems and techniques described above in this document may be implemented in digital electronic circuitry, integrated circuit systems, field programmable gate arrays (FPGA), application specific integrated circuits (ASIC), application specific standard products (ASSP), systems on a chip (SOC), complex programmable logic devices (CPLD), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include: implemented in one or more computer programs that may be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a special-purpose or general-purpose programmable processor that receives data and instructions from a storage system, at least one input device, and at least one output device, and transmits the data and instructions to the storage system, the at least one input device, and the at least one output device.

[0149] The computer programs for implementing the methods of the present application may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus, such that the computer programs, when executed by the processor, cause the functions / operations specified in the flowchart and / or block diagram to be implemented. The computer programs may be executed entirely on the machine, partly on the machine, as a stand-alone software package partly on the machine and partly on a remote machine, or entirely on the remote machine or server.

[0150] In the context of this application, a computer-readable storage medium can be a tangible medium that can contain or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer-readable storage medium can include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. Alternatively, the computer-readable storage medium can be a machine-readable signal medium. More specific examples of the machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0151] To provide for interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) by which the user can provide input to the electronic device. Other kinds of devices can also be used to provide for interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, speech input, or tactile input).

[0152] The systems and techniques described herein can be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer having a graphical user interface or a web browser through which the user can interact with an implementation of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local area network (LAN), wide area network (WAN), blockchain network, and the Internet.

[0153] A computing system may include a client and a server. The client and the server are generally far from each other and usually interact via a communication network. The relationship between the client and the server is created by computer programs running on respective computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or a cloud host, which is a host product in the cloud computing service system, solving the defects of difficult management and weak business scalability existing in traditional physical hosts and VPS services.

[0154] The embodiments of the present application also disclose a computer program product, which includes a computer program that, when executed by a processor, implements the data protection method provided in any embodiment of the present application. This program product and the data protection methods disclosed in the embodiments of the present application belong to the same inventive concept, and thus will not be elaborated herein.

[0155] It should be understood that various forms of the processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in the present application can be executed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present application can be achieved, and no limitation is imposed herein.

[0156] The above specific embodiments do not constitute a limitation to the protection scope of the present application. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present application shall be included within the protection scope of the present application.

Claims

1. A data protection method, characterized in that, Applied to a target institution newly added to a confidentiality system, the method includes: Receiving global parameters sent by a central institution; Based on the global parameters, generating an attribute key for the attributes managed by itself and feeding it back to the central institution, so that the central institution generates a decryption key according to the attribute key and a preset master key and sends it to the target institution; Requesting and obtaining a re-encrypted ciphertext obtained by re-encrypting the ciphertext corresponding to the target data in the confidentiality system from the cloud; Decrypting the re-encrypted ciphertext according to the global parameters and the decryption key.

2. The method according to claim 1, wherein The generating an attribute key for the attributes managed by itself based on the global parameters includes: Generating an institutional private key of the target institution based on the global parameters; Generating the attribute key according to the global parameters, the institutional private key, the attribute information managed by the target institution itself, and the identity identifier of the user applying for the target data.

3. The method according to claim 2, wherein The generating the attribute key according to the global parameters, the institutional private key, the attribute information managed by the target institution itself, and the identity identifier of the user applying for the target data includes: Mapping the attribute information to a target attribute value through a preset attribute domain; Based on a preset attribute key generation algorithm, calculating the global parameters, the institutional private key, the target attribute value, and the identity identifier to generate the attribute key.

4. The method according to any one of claims 1 to 3, characterized in that, The decrypting the re-encrypted ciphertext includes: In response to the individual attributes of the user applying for the target data conforming to the attribute information managed by the target institution, decrypting the re-encrypted ciphertext to obtain the target data.

5. The method according to any one of claims 1 to 3, characterized in that, The target data is power demand information.

6. A data protection method, characterized in that, Applied to a central institution, the method includes: Sending preset global parameters to a target institution newly added to the confidentiality system and the cloud, so that the target institution feeds back an attribute key for the attributes managed by the target institution; Generating a decryption key according to the attribute key and a preset master key and sending it to the target institution; Generating a re-encryption key according to the decryption key, the global parameters, and the target access matrix of the target institution and sending it to the cloud, so that the cloud re-encrypts the ciphertext corresponding to the target data in the confidentiality system according to the re-encryption key and the global parameters to obtain a re-encrypted ciphertext.

7. The method according to claim 6, characterized in that, The method further includes: Sending preset global parameters to existing institutions in the confidentiality system, so that each existing institution generates its own public key according to the global parameters and encrypts the target data according to the global parameters, its own public key, and its own access matrix of the existing institution to obtain the ciphertext.

8. A data protection method, characterized in that Applied to the cloud, the method includes: Obtaining the ciphertext after the target data in the confidentiality system is encrypted, as well as the global parameters and the re-encryption key sent by the central institution; Re-encrypting the ciphertext according to the global parameters and the re-encryption key to obtain a re-encrypted ciphertext.

9. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and when the computer program is executed by the at least one processor, the at least one processor is enabled to execute the data protection method according to any one of claims 1-5; or, execute the data protection method according to any one of claims 6-7; or, execute the data protection method according to claim 8.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions, and when the computer instructions are used to be executed by a processor, the data protection method according to any one of claims 1-5 is implemented; or, the data protection method according to any one of claims 6-7 is implemented; or, the data protection method according to claim 8 is implemented.

Images