Method and device for operating privacy calculation based on browser

Abstract

The embodiment of the invention provides a method and device for running privacy computing based on a browser. The method is executed by a first computing party. A specific implementation mode of the method comprises the steps that a target webpage is opened in a first browser operated by a first computing party, a target program in a target format is embedded in the target webpage, the target program is obtained by compiling a computing logic program corresponding to a privacy computing protocol, and the computing logic program corresponds to the privacy computing protocol; the target format is a format executable by a browser; first data input by a user is received through the target webpage, and the first data is plaintext data to be calculated; the first browser interacts with a second calculation party with second data based on the target program, privacy calculation between the first data and the second data is executed, and the second calculation party comprises a second program corresponding to the target program.

Description

Technical Field

[0001] The embodiments of this specification relate to the technical field of privacy computing, and in particular, to a method and device for running privacy computing based on a browser. Background Art

[0002] Privacy-Preserving Computation is a technology for data analysis and computation while protecting data privacy. Its goal is to achieve data sharing, analysis, and utilization without revealing the original data. Privacy computing has extensive applications in fields such as finance, healthcare, and government affairs, especially in scenarios where data is sensitive and multi-party collaboration is required. Existing privacy computing usually requires installing or downloading programs, either deploying nodes on the server or installing programs on the client and then performing calculations through a public network connection, which has a high usage cost and complex operation and maintenance. Summary of the Invention

[0003] The embodiments of this specification describe a method for running privacy computing based on a browser, which can compile the computing logic program corresponding to the privacy computing protocol into a target program in a target format executable by the browser, and embed the target program into the target web page. Based on this, the first computing party can open the target web page in the running first browser, receive the first data input by the user through the target web page, where the first data is the plaintext data to be calculated. Then, the first browser interacts with the second computing party having the second data based on the target program to perform the privacy computing between the first data and the second data. Thus, the first computing party can perform privacy computing with the second computing party through the first browser without installing a program, reducing the installation and operation and maintenance costs, and being simple and efficient.

[0004] According to a first aspect, there is provided a method for running privacy computing based on a browser, which is executed by a first computing party and includes: opening a target web page in a first browser running on the first computing party, where the target web page embeds a target program in a target format, and the target program is obtained by compiling a computing logic program corresponding to a privacy computing protocol, and the target format is a format executable by the browser; receiving, through the target web page, first data input by the user, where the first data is the plaintext data to be calculated; and the first browser interacting with a second computing party having the second data based on the target program to perform the privacy computing between the first data and the second data, where the second computing party includes a second program corresponding to the target program.

[0005] According to a second aspect, there is provided a device for running privacy computing based on a browser, which is deployed in a first computing party and includes: an opening unit configured to open a target web page in a first browser running in the first computing party, where the target web page embeds a target program in a target format, the target program is obtained by compiling a computing logic program corresponding to a privacy computing protocol, and the target format is a format executable by the browser; an input unit configured to receive first data input by a user through the target web page, where the first data is plaintext data to be calculated; and a computing unit configured to interact with a second computing party having second data based on the target program by the first browser, and perform privacy computing between the first data and the second data, where the second computing party includes a second program corresponding to the target program.

[0006] According to a third aspect, there is provided a computer-readable storage medium having a computer program stored thereon. When the computer program is executed in a computer, the computer is caused to execute the method described in any implementation manner of the first aspect.

[0007] According to a fourth aspect, there is provided a computing device including a memory and a processor, characterized in that an executable code is stored in the memory, and when the processor executes the executable code, the method described in any implementation manner of the first aspect is implemented.

[0008] According to the method for running privacy computing based on a browser provided in the embodiments of the present specification, a computing logic program corresponding to a privacy computing protocol can be compiled into a target program in a target format executable by the browser, and the target program is embedded in the target web page. Based on this, a first computing party can open the target web page in a running first browser, receive first data input by a user through the target web page, and the first data is plaintext data to be calculated. After that, the first browser interacts with a second computing party having second data based on the target program, and performs privacy computing between the first data and the second data. Thus, the first computing party can perform privacy computing with the second computing party through the first browser without installing a program, reducing installation and operation and maintenance costs, and being simple and efficient. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 A schematic diagram showing an application scenario to which the embodiments of the present specification can be applied;

[0010] Figure 2 A flowchart showing a method for running privacy computing based on a browser according to an embodiment;

[0011] Figure 3 A schematic diagram showing an example of separately implementing computing logic and network communication;

[0012] Figure 4 It shows a schematic diagram of the communication connection between the first browser of the first computing party and the server when the second computing party is the server;

[0013] Figure 5 It shows a schematic diagram of the first browser and the second browser establishing peer - to - peer communication using the STUN protocol;

[0014] Figure 6 It shows a schematic diagram of communication between the first browser and the third browser through the TURN server;

[0015] Figure 7 It shows a schematic block diagram of a device for running privacy computing based on a browser according to an embodiment. Detailed implementation manners

[0016] Next, in combination with the accompanying drawings and embodiments, the technical solutions provided in this specification will be further described in detail. It can be understood that the specific embodiments described herein are only used to explain the related invention, rather than limiting the invention. Additionally, it should be noted that for the sake of description, only parts related to the relevant invention are shown in the drawings. It should be noted that, without conflict, the embodiments of this specification and the features in the embodiments can be combined with each other.

[0017] As mentioned above, existing privacy computing usually requires installing or downloading programs. Either nodes need to be deployed on the server, or programs need to be installed on the client, and then calculations are performed through a public network connection, resulting in relatively high usage costs and complex operation and maintenance.

[0018] Therefore, the embodiments of this specification provide a method for running privacy computing based on a browser. When performing privacy computing, this method includes at least two computing parties, where at least one computing party can run a browser, and the other computing parties can be any device, equipment, platform, device cluster, etc. with computing and processing capabilities. In this application, taking the example of including two computing parties, the specific process of privacy computing is described. Specifically, taking the first computing party as a PC (Personal Computer), the user of the first computing party as Bob, the second computing party as a server, and the user of the second computing party as Alice as an example, Figure 1 It shows a schematic diagram of an application scenario to which the embodiments of this specification can be applied. In Figure 1In the application scenario shown, to implement privacy computing, the computing logic program corresponding to the privacy computing protocol can be compiled into a target program in a target format executable by a browser, and the target program can be embedded in the target web page. At the same time, the server can include a second program corresponding to the target program, and the second program is also obtained by compiling the computing logic program corresponding to the privacy computing protocol, and the format can be the same as or different from the target program. The target program and the second program can interact with each other to complete privacy computing. Based on this, user Bob can open the target web page in the browser running on the first computing party. After that, user Bob can submit the first data bob.csv through the target web page. Here, the first data bob.csv can be the plaintext data to be calculated. User Alice can upload the second data alice.csv to the second computing party (in this example, the server). Here, the second data alice.csv can be the plaintext data to be calculated. Then, the first computing party can interact with the second computing party that has the second data based on the target program in the browser to perform privacy computing between the first data bob.csv and the second data alice.csv. During the interaction process, the execution of the target program depends on the computing power of the browser of the first computing party. The first data bob.csv provided by user Bob and the second data alice.csv provided by user Alice are calculated after being encrypted according to the privacy computing protocol. The plaintext of the first data bob.csv does not leave the first computing party during the entire computing process, and the plaintext of the second data alice.csv does not leave the second computing party, thereby ensuring the security of the data of each participating party. It can be understood that communication interfaces for establishing communication connections can be deployed in both the first computing party and the second computing party. Through the communication interfaces, a communication connection can be established between the first computing party and the second computing party, thereby realizing data interaction.

[0019] Continue to refer to Figure 2 , Figure 2 shows a flowchart of a method for running privacy computing based on a browser according to an embodiment. It can be understood that this method can be executed by the first computing party, and the first computing party can be any computing device capable of running a browser, such as a personal computer, a smart phone, a tablet computer, etc. As Figure 2 shown, the method for running privacy computing based on a browser can include the following steps 201, 202, and 203. Specifically:

[0020] Step 201, open the target web page in the first browser running on the first computing party.

[0021] In this embodiment, the first computing party can run a first browser, and through this first browser, a target web page can be opened. A target program in a target format can be embedded in the above-mentioned target web page. Among them, the above-mentioned target format can be various formats executable by the browser. For example, the target format can be the.js file format. A.js file is a program format that can be run by the browser, and JavaScript is the language to implement this format. For another example, the target format can also be WASM (WebAssembly). WASM is a portable binary bytecode that can run in the browser with high efficiency. In practice, the browser can directly load the.wasm file and execute it without a plugin. Here, the above-mentioned target program can be obtained by compiling the computing logic program corresponding to the privacy computing protocol. Taking the target format as WASM as an example, the computing logic program corresponding to the privacy computing protocol can be written in computer programming languages such as C language and C++ language. Then, the computing logic can be compiled into a WASM program through the emcc compiler.

[0022] Step 202: Receive the first data input by the user through the target web page.

[0023] In this embodiment, the above-mentioned target web page can be used to receive the data input by the user. Thus, the user can input the first data for privacy computing through the target web page, and the first data can be the plaintext data to be calculated.

[0024] Step 203: The first browser, based on the target program, interacts with the second computing party that has the second data, and performs privacy computing between the first data and the second data.

[0025] In this embodiment, in addition to the first computing party, the computing parties participating in the privacy computing may further include a second computing party, and the second computing party has the second data for privacy computing. The first computing party can interact with the second computing party based on the target program by the first browser, and perform privacy computing between the first data and the second data. Here, the second computing party may include a second program corresponding to the target program. The privacy computing protocols corresponding to the target program and the second program are the same. The target program and the second program can interact with each other to complete the privacy computing together.

[0026] In this example, the privacy computing protocol for implementing multi-party secure computing can separate the computing logic from the network communication. Among them, the computing logic can be used for privacy computing, and the network communication can be used for data transmission. As Figure 3 shown, Figure 3 shows a schematic diagram of an example of separating the computing logic from the network communication. Figure 3The example shown includes two computing parties, namely the first computing party and the second computing party. Among them, the first computing party can be any computing device capable of running a browser, and the second computing party is a server. In Figure 3 In the example shown, the source program written for the privacy computing protocol includes computing logic.cpp and network communication interfaces (send and recv interfaces). For computing logic.cpp, it can be compiled into a computing logic.wasm program through the emcc compiler. For the network communication interfaces, they can be implemented as.js files. Specifically, in the browser of the first computing party, it is implemented as a browser communication program.js, and in the second computing party, it is implemented as a server communication program.js. For the browser environment of the first computing party, the computing logic.wasm program can run directly, and the browser communication program.js can implement the send and recv interfaces. In practice, in the browser, a long connection can use the websocket protocol. Therefore, the implementation of the send and recv interfaces in the browser can be the send and recv interfaces of the websocket client version. For the second computing party (in this example, the server), the computing logic.wasm program can be started through Node.js. At the same time, the server communication program.js can also be implemented based on the websocket protocol, and what is started is a websocket server.

[0027] In some implementation manners, the first browser interacts with the second computing party having the second data based on the target program. Specifically, it may include: the first browser invokes the first communication interface of the first browser based on the target program to interact with the second computing party, where the invocation of the first communication interface of the first browser by the target program is generated based on the privacy computing protocol.

[0028] In this implementation manner, the first communication interface of the first browser may include the send and recv interfaces in the browser.

[0029] In some implementation manners, the second computing party may include a server. Based on this, in step 203, the interaction between the first browser and the second computing party having the second data based on the target program can be specifically implemented as follows: The first browser interacts with the second computing party by establishing a long connection with the server.

[0030] In this implementation manner, the long connection between the first browser and the server may include a websocket long connection. In the websocket long connection, a persistent and two-way communication channel can be established, enabling continuous data sending and receiving between the browser and the server. As Figure 4 shown, Figure 4It shows a schematic diagram of the communication connection between the first browser of the first computing party and the server when the second computing party is the server. In Figure 4 In the shown example, a websocket long connection can be established between the communication interface of the first browser of the first computing party and the communication interface of the server to achieve information interaction during the privacy computing process. In addition, in Figure 4 In the shown example, the second computing party can adopt the B / S (Browser / Server) architecture. That is, user Alice requires a server and provides a public network port. The B / S architecture is a distributed architecture model of a software system. In this mode, the application program is divided into two parts: the client side and the server side. The client side is mainly the user interface part, and the user interacts with the system through the browser. All operations are completed in the browser, such as data display, form filling, etc. These pages are usually constructed by front-end technologies such as HTML, CSS, and JavaScript. The server side is responsible for processing business logic, data storage, and other functions. When the user submits a request on the browser, the request is sent to the server, and after the server processes the request, the result is returned to the browser side for presentation to the user.

[0031] It can be understood that in the implementation where the second computing party is the server, the computing logic in the server can be a.wasm program or a program in other formats. For example, it can also be in.js format. In this implementation, for the computing logic.cpp in the source program written for the privacy computing protocol, it can be compiled into code executable by the server through the gcc compiler and deployed in the server.

[0032] In some implementations, the second computing party can include a second browser, and the second program included in the second computing party can include a target program. That is, in the implementation where the second computing party includes a second browser, privacy computing can be achieved between the first browser of the first computing party and the second browser of the second computing party. At this time, both the first computing party and the second computing party include target programs executable by the browser. Point-to-point communication occurs between the first browser and the second browser. In practice, point-to-point communication between the two browsers can be achieved in various ways. For example, WebRTC (Web Real-Time Communication) can be used to achieve point-to-point communication between the two browsers.

[0033] Optionally, the STUN (Session Traversal Utilities for NAT) protocol can be used to establish a point-to-point connection between the first browser and the second browser.

[0034] When it comes to network communication, especially when direct communication is carried out between devices in a NAT (Network Address Translation) environment, using a STUN (Session Traversal Utilities for NAT) server to punch holes is a common technique. Using a STUN server to punch holes can achieve multiple functions. For example, using a STUN server to punch holes can obtain a public IP (Internet Protocol) and port mapping. Specifically, the STUN server can help the client determine its public network mapping information behind the NAT, including the public IP address and port number. This is very important for devices located in a private network because they are usually not directly accessible from the outside. Another example is that using a STUN server to punch holes can achieve NAT traversal. Specifically, in a peer-to-peer communication scenario, two clients may both be behind different NATs. By sending requests to the same STUN server, both parties can exchange their public network mapping information and attempt to establish a direct connection. This process is called "punching holes". Punching holes takes advantage of the behavior characteristics of certain types of NATs, that is, for packets with a specific source address and port combination, the NAT will maintain port mapping consistency, thus allowing the response data from the outside to be correctly delivered to the internal host. Another example is that using a STUN server to punch holes can facilitate direct communication. Specifically, once both ends know their externally visible addresses and ports through the STUN server and successfully create a path through their respective NATs, they can bypass the intermediate server and directly perform UDP data exchange, reducing latency and saving bandwidth resources.

[0035] Among them, UDP (User Datagram Protocol) is a connectionless protocol. It does not need to establish a connection before data transmission and there is no connection to release when the data transmission ends, which can reduce overhead and the latency before sending data. Although UDP is called "connection", the UDP connection does not actually establish a reliable connection between the two communication ends, but only sets the peer protocol address. This "connection" is more logical than physical. In short, UDP provides a method to send encapsulated IP packets without establishing a connection, and has characteristics such as connectionless, unreliable, message-oriented, no congestion control, supporting multiple communication methods, and small header overhead, and is suitable for application programs with low requirements for reliability or application programs that can guarantee reliability.

[0036] Taking browser A and browser B as examples, the process of punching holes using a STUN server may include: 1), browser A and browser B each obtain their respective public network addresses through the STUN server; 2), browser A and browser B exchange their respective public network addresses through a signaling server (for example, WebSocket); 3), browser A attempts to send data to the public network address of browser B, triggering NAT hole punching; 4), browser B also attempts to send data to the public network address of A to further confirm the connection; 5), if both parties can receive the data of the other party, a P2P (peer-to-peer) connection is established. It can be understood that using a STUN server to punch holes is an existing technology widely used at present and will not be described in detail here.

[0037] As Figure 5 shown, Figure 5 it shows a schematic diagram of a first browser and a second browser establishing peer-to-peer communication using the STUN protocol. In Figure 5 the example shown, in step 1, a STUN server is used for handshaking. Here, handshaking may refer to the process of the first browser and the second browser establishing a connection. In step 2, once the handshaking is completed, subsequently, the first browser and the second browser can implement data transmission through webrtc (based on UDP), and the subsequent communication process does not require the parameters of the STUN server, thereby realizing peer-to-peer communication.

[0038] In some cases, the STUN protocol may not work properly. For example, in the case where the NAT gateway is an IP-restricted cone NAT, a Port-restricted cone NAT, a symmetric NAT, etc., the STUN protocol may not work properly. At this time, a TURN (Traversal Using Relays around NAT) server can be deployed for relaying. The TURN server is a protocol and server implementation used to solve the communication problems of devices in complex networks. When a device cannot directly establish a peer-to-peer (P2P) connection due to network restrictions, the TURN server can act as a "relay node" to ensure smooth communication by forwarding data. In short, the TURN server can solve the connection problems in complex network environments through the relay mechanism and is an essential infrastructure in the field of real-time communication. The TURN server can complement the STUN server, etc., to jointly build a complete NAT penetration solution and play a key role especially in ensuring communication stability.

[0039] Based on this, in some implementation manners, the second computing party may include a third browser, and communication between the first browser and the third browser is carried out through a relay server, where the relay server may include a TURN server. As Figure 6 shown,Figure 6 A schematic diagram showing communication between a first browser and a third browser via a TURN server is shown. As an example, data for privacy computing interaction between the first browser and the third browser can be directly relayed through a relay server. In this case, the relay server can see the data packets transmitted during the privacy computing process of both parties. The data packets may include ciphertext data for privacy computing, and may also include some plaintext control information, such as the task ID of the privacy computing task, the participant ID, the current amount of data transmitted, and so on. To further ensure security, in some implementation manners, the interaction data between the first browser and the third browser can be encrypted for communication. For example, the two parties can pre-negotiate a key, and then use this key to encrypt and decrypt the data during the data interaction process.

[0040] In actual use, the method for running privacy computing based on a browser in this embodiment can be applicable to various privacy computing protocols. For example, the privacy computing protocol can include a first computing protocol for performing Private Set Intersection (PSI). The computing logic corresponding to the first computing protocol can be compiled into a first target program in a target format. Based on this, the above step 203 can be specifically implemented as follows: The first browser interacts with a second computing party having second data based on the first target program to calculate the intersection between the first data and the second data.

[0041] Again, for example, the privacy computing protocol can also include a second computing protocol for performing joint modeling. The computing logic corresponding to the second computing protocol can be compiled into a second target program in a target format. Based on this, the above step 203 can be specifically implemented as follows: The first browser interacts with a second computing party having second data based on the second target program to perform joint machine learning modeling using the first data and the second data.

[0042] Looking back on the above process, in the embodiments of this specification, the computing logic program corresponding to the privacy computing protocol is compiled into a target program in a target format executable by the browser, and the target program is embedded in the target web page. Based on this, the first computing party can open the target web page in the running first browser, receive the first data input by the user through the target web page. The first data is the plaintext data to be calculated. After that, the first browser interacts with the second computing party having second data based on the target program to perform the privacy computing between the first data and the second data. Thus, the first computing party can perform privacy computing with the second computing party through the first browser without installing a program, reducing the installation and operation and maintenance costs, which is simple and efficient.

[0043] According to an embodiment of another aspect, a device for running privacy computing based on a browser is provided, which is deployed on a first computing party. The first computing party can be any computing device capable of running a browser.

[0044] Figure 7 A schematic block diagram of a device for running privacy computing based on a browser according to an embodiment is shown. As Figure 7 shown, the device 700 for running privacy computing based on a browser includes: an opening unit 701 configured to open a target web page in a first browser running on the first computing party, where the target web page embeds a target program in a target format, the target program is obtained by compiling a computing logic program corresponding to a privacy computing protocol, and the target format is a format executable by the browser; an input unit 702 configured to receive first data input by a user through the target web page, where the first data is plaintext data to be calculated; a computing unit 703 configured to, based on the target program by the first browser, interact with a second computing party having second data and perform privacy computing between the first data and the second data, where the second computing party includes a second program corresponding to the target program.

[0045] In some optional implementation manners of this embodiment, the target format is WASM.

[0046] In some optional implementation manners of this embodiment, the computing unit 703 is further configured to interact with the second computing party by the first browser's call of a first communication interface of the first browser based on the target program, and the call of the first communication interface of the first browser by the target program is generated based on the privacy computing protocol.

[0047] In some optional implementation manners of this embodiment, the second computing party includes a server; and the computing unit 703 is further configured to interact with the second computing party by the first browser establishing a long connection with the server.

[0048] In some optional implementation manners of this embodiment, the second computing party includes a second browser, the second program includes the target program, and peer-to-peer communication is performed between the first browser and the second browser.

[0049] In some optional implementation manners of this embodiment, a peer-to-peer connection is established between the first browser and the second browser using the STUN protocol.

[0050] In some optional implementation manners of this embodiment, the second computing party includes a third browser, and communication is performed between the first browser and the third browser through a relay server.

[0051] In some alternative implementation manners of this embodiment, the interaction data between the first browser and the third browser is encrypted for communication.

[0052] In some alternative implementation manners of this embodiment, the privacy computing protocol includes a first computing protocol for performing a private set intersection. The computing logic corresponding to the first computing protocol is compiled into a first target program in the target format. Further, the computing unit 703 is configured such that the first browser interacts with the second computing party having the second data based on the first target program to calculate the intersection between the first data and the second data.

[0053] According to an embodiment of another aspect, there is also provided a computer-readable storage medium, on which a computer program is stored. When the computer program is executed on a computer, the computer is made to execute Figure 2 the described method.

[0054] According to an embodiment of still another aspect, there is also provided a computing device, including a memory and a processor. It is characterized in that an executable code is stored in the memory, and when the processor executes the executable code, the Figure 2 described method is implemented.

[0055] Those of ordinary skill in the art should further realize that the units and algorithm steps of each example described in combination with the embodiments disclosed herein can be implemented by electronic hardware, computer software, or a combination of the two. To clearly illustrate the interchangeability of hardware and software, the components and steps of each example have been generally described according to their functions in the above description. Whether these functions are executed in a hardware or software manner depends on the specific application and design constraints of the technical solution. Those of ordinary skill in the art can use different methods for each specific application to implement the described functions, but such implementation should not be considered to exceed the scope of this application.

[0056] The steps of the methods or algorithms described in combination with the embodiments disclosed herein can be implemented by hardware, software modules executed by a processor, or a combination of the two. The software modules can be placed in a random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium well-known in the technical field.

[0057] The specific embodiments described above further elaborate on the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above description is only for the specific embodiments of the present invention and is not intended to limit the protection scope of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims

1. A method for running privacy computing based on a browser, which is executed by a first computing party, includes: Open a target web page in a first browser running on the first computing party, where the target web page embeds a target program in a target format, the target program is obtained by compiling a computing logic program corresponding to a privacy computing protocol, and the target format is a format executable by the browser; Receive first data input by a user through the target web page, where the first data is plaintext data to be computed; Based on the target program, the first browser interacts with a second computing party having second data to perform privacy computing between the first data and the second data, where the second computing party includes a second program corresponding to the target program.

2. The method according to claim 1, wherein, The target format is WASM.

3. The method according to claim 1, wherein, The interaction between the first browser and the second computing party having second data based on the target program includes: Based on the target program's invocation of a first communication interface of the first browser, the first browser interacts with the second computing party, and the target program's invocation of the first communication interface of the first browser is generated based on the privacy computing protocol.

4. The method according to claim 1, wherein The second computing party includes a server; and the interaction between the first browser and the second computing party having second data based on the target program includes: The first browser interacts with the second computing party by establishing a long connection with the server.

5. The method according to claim 1, wherein The second computing party includes a second browser, the second program includes the target program, and peer-to-peer communication is performed between the first browser and the second browser.

6. The method according to claim 5, wherein A peer-to-peer connection is established between the first browser and the second browser using the STUN protocol.

7. The method according to claim 1, wherein The second computing party includes a third browser, and communication is performed between the first browser and the third browser through a relay server.

8. The method according to claim 7, wherein Encrypted communication is performed on the interaction data between the first browser and the third browser.

9. The method according to claim 1, wherein The privacy computing protocol includes a first computing protocol for performing intersection of privacy sets, and the computing logic corresponding to the first computing protocol is compiled into a first target program in the target format; And, The interaction between the first browser and the second computing party having second data based on the target program to perform privacy computing between the first data and the second data includes: Based on the first target program, the first browser interacts with the second computing party having second data to compute the intersection between the first data and the second data.

10. A device for running privacy computing based on a browser, deployed in a first computing party, includes: An opening unit configured to open a target web page in a first browser running on the first computing party, where the target web page embeds a target program in a target format, the target program is obtained by compiling a computing logic program corresponding to a privacy computing protocol, and the target format is a format executable by the browser; An input unit, configured to receive first data input by a user through the target web page, where the first data is plaintext data to be calculated; A calculation unit, configured to enable the first browser to interact with a second calculation party having second data based on the target program, and perform privacy calculation between the first data and the second data, where the second calculation party includes a second program corresponding to the target program.

11. A computer-readable storage medium, on which a computer program is stored. When the computer program is executed on a computer, the computer is made to execute the method according to any one of claims 1-9.

12. A computing device, comprising a memory and a processor, characterized in that, Executable code is stored in the memory. When the processor executes the executable code, the method according to any one of claims 1-9 is implemented.

Images