Distributed data aggregation verification method and device, equipment and storage medium

Abstract

The invention discloses a distributed data aggregation verification method, device and equipment and a computer readable storage medium. The method comprises the steps of obtaining data of participants; according to the obtained signature values and the key signature values of the participants, carrying out effective verification on the encrypted information of each participant to obtain a target online participant set and a target offline participant set; calculating an aggregation result according to the encrypted information of the target online participant in the target online participant set and the shared key seed and the self-mask seed of the target offline participant in the target offline participant set; and performing security verification on the signature value of each participant according to the aggregation result, and obtaining a security verification result, thereby solving the technical problem that it is difficult to ensure that an aggregator can execute aggregation operation in honesty in related technologies, ensuring data privacy and correctness of the aggregation result, and preventing a malicious aggregator from tampering with the result.

Description

Technical Field

[0001] The present application relates to the field of data security protection, and specifically to a distributed data aggregation verification method, device and computer-readable storage medium. Background Art

[0002] Distributed data aggregation is a crucial technology in modern computing systems, especially in cloud and edge computing environments. These systems are often used to process large amounts of data generated by diverse sources, such as finance, social media, healthcare, education, and voting. Protecting the privacy of personal data in this process is not only crucial but often required by law.

[0003] For example, healthcare organizations must ensure data privacy and integrity when aggregating patient records and diagnostic results. Similarly, educational institutions must pay particular attention to protecting student confidentiality when collecting student data to evaluate course effectiveness. Furthermore, encryption technologies are widely used in AI fields such as federated learning to prevent attackers from gaining access to data privacy through inference attacks.

[0004] Despite the significant advantages of distributed data aggregation technology, ensuring its privacy and security remains a key challenge. Due to the sensitive nature of the data and the distributed architecture of the system, data faces potential risks such as unauthorized access, data leakage, and malicious interference. Existing secure aggregation methods only focus on how to aggregate encrypted data. However, when the input data of participants is encrypted, how to ensure the integrity of the aggregation operation by the aggregator remains an unresolved problem. Summary of the Invention

[0005] The present application provides a distributed data aggregation verification method, device, equipment and computer-readable storage medium, which can solve the technical problem in the prior art that it is difficult to ensure that the aggregator performs aggregation operations in good faith.

[0006] In a first aspect, an embodiment of the present application provides a distributed data aggregation verification method, characterized in that the distributed data aggregation verification method includes: Acquire participant data, wherein the participant data includes the encrypted information, signature value, and key signature value of each online participant, and the shared key seed, self-masking seed, encrypted information, signature value, and key signature value of each offline participant; Based on the acquired signature value and key signature value of the participant, the encrypted information of each participant is effectively verified to obtain a target online participant set and a target offline participant set; Calculating an aggregation result based on the encrypted information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set; Perform security verification on the signature value of each participant according to the aggregation result, and obtain a security verification result.

[0007] In conjunction with the first aspect, in one embodiment, the valid verification of the encrypted information of each participant based on the acquired signature value and key signature value of the participant to obtain a target online participant set and a target offline participant set includes: Obtaining a first preset formula, the signature value and key signature value of the participant, wherein the signature value and key signature value of the participant include the signature value and key signature value of each online participant and the signature value and key signature value of each offline participant; Calculating a valid verification result for each online participant and a valid verification result for each offline participant based on the first preset formula, the signature value and key signature value of each online participant, and the signature value and key signature value of each offline participant; If the valid verification result of the online participant is verification failure, the online participant who failed the verification is added to the offline participants, and a target offline participant set is generated; If the valid verification result of the online participant is successful, the online participants who have successfully been verified are generated into a target online participant set.

[0008] In conjunction with the first aspect, in one embodiment, calculating the aggregation result based on the encrypted information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set includes: Obtain a second preset formula; The encryption information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set are calculated based on the second preset formula to calculate an aggregation result.

[0009] In conjunction with the first aspect, in one embodiment, performing security verification on the signature value of each participant according to the aggregation result and obtaining the verification result includes: Get the third preset formula; Based on the third preset formula and the aggregation result, the signature value of each participant is security verified to obtain the security verification result of each participant, wherein the security verification result of each participant includes the security verification result of each online participant and the security verification result of each offline participant.

[0010] In conjunction with the first aspect, in one embodiment, after obtaining the security verification result, the method further includes: The security verification results of each online participant and the security verification results of each offline participant are counted separately, and the security verification results are reported.

[0011] In conjunction with the first aspect, in one embodiment, the encrypted information of each online participant is obtained by encrypting the target information using the key of each online participant, and the key of each online participant is obtained based on the self-masking seed of each online participant and a shared key seed, and the shared key seed is generated by each online participant and any one or more participants using the Diffie-Hellman protocol; The encrypted information of each offline participant is obtained by encrypting the target information according to the key of each offline participant, and the key of each offline participant is obtained according to the self-masking seed and shared key seed of each offline participant. The shared key seed is generated by each offline participant and any one or more participants using the Diffie-Hellman protocol.

[0012] In conjunction with the first aspect, in one embodiment, the key signature value of each online participant is obtained by signing the key of each online participant with each online participant; The key signature value of each offline participant is obtained by signing the key of each offline participant.

[0013] In a second aspect, an embodiment of the present application provides a distributed data aggregation verification device, the distributed data aggregation verification device comprising: A first acquisition module is configured to acquire participant data, wherein the participant data includes the encryption information, signature value, and key signature value of each online participant, and the shared key seed, self-masking seed, encryption information, signature value, and key signature value of each offline participant; A second acquisition module is used to effectively verify the encrypted information of each participant based on the acquired signature value and key signature value of the participant, so as to obtain a target online participant set and a target offline participant set; a calculation module, configured to calculate an aggregation result based on the encryption information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set; The third acquisition module is used to perform security verification on the signature value of each participant according to the aggregation result and obtain the security verification result.

[0014] In a third aspect, an embodiment of the present application provides a distributed data aggregation verification device, the distributed data aggregation verification device comprising a processor, a memory, and a distributed data aggregation verification program stored on the memory and executable by the processor, wherein when the distributed data aggregation verification program is executed by the processor, the steps of the distributed data aggregation verification method as described above are implemented. In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a distributed data aggregation verification program is stored, wherein when the distributed data aggregation verification program is executed by a processor, the steps of the distributed data aggregation verification method as described above are implemented.

[0015] The beneficial effects of the technical solutions provided in the embodiments of the present application include: By obtaining the data of the participants, wherein the data of the participants includes the encryption information, signature value and key signature value of each online participant, and the shared key seed, self-masking seed, encryption information, signature value and key signature value of each offline participant; based on the acquired signature value and key signature value of the participant, the encryption information of each participant is effectively verified to obtain the target online participant set and the target offline participant set; based on the encryption information of the target online participant in the target online participant set and the shared key seed and self-masking seed of the target offline participant in the target offline participant set, the aggregation result is calculated; based on the aggregation result, the signature value of each participant is securely verified and the security verification result is obtained, thereby solving the technical problem in the related art that it is difficult to ensure the integrity of the aggregator in performing the aggregation operation, ensuring data privacy, the correctness of the aggregation results, and preventing malicious aggregators from tampering with the results. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 This is a flow chart of the first embodiment of the distributed data aggregation verification method of the present application; Figure 2 This is a functional module diagram of an embodiment of the distributed data aggregation verification device of the present application; Figure 3 This is a schematic diagram of the hardware structure of the distributed data aggregation verification device involved in the embodiment of the present application. DETAILED DESCRIPTION

[0017] In order to enable those skilled in the art to better understand the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0018] First, some technical terms in this application are explained to facilitate those skilled in the art to understand this application.

[0019] In order to make the objectives, technical solutions and advantages of this application clearer, the implementation methods of this application will be further described in detail below with reference to the accompanying drawings.

[0020] In a first aspect, an embodiment of the present application provides a method for aggregate verification of distributed data.

[0021] In one embodiment, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the distributed data aggregation verification method of this application. Figure 1 As shown, the aggregation verification method of distributed data includes: Step S10: Acquire participant data, wherein the participant data includes the encryption information, signature value, and key signature value of each online participant, and the shared key seed, self-masking seed, encryption information, signature value, and key signature value of each offline participant; Exemplarily, the data of the participants is obtained, wherein the data of the participants includes the encryption information, signature value and key signature value of each online participant, and the shared key seed, self-masking seed, encryption information, signature value and key signature value of each offline participant.

[0022] The encrypted information of each online participant is obtained by encrypting the target information based on the key of each online participant. The key of each online participant is obtained based on the self-masking seed and shared key seed of each online participant. The shared key seed is generated by each online participant and any one or more participants using the Diffie-Hellman protocol. The key signature value of each online participant is obtained by signing the key of each online participant. For example, the participant randomly generates the self-masking seed with his or her ID ,in, Participants have different expectations about the messages they need to send. Sign and generate signature value .For example, , where g is the generator, It's news The jth element of It is the signature value of the participant for the message to be sent. The participant and any one or more participants use the Diffie-Hellman protocol to generate a shared key seed. . Based on the generated shared key seed and self-masking seeds , participants calculate their secret keys ,For example, , , where PRG is a pseudo-random generator. Participants use the key For messages that need to be sent Encrypt and get the encrypted message { }. Participants' key Generate key signature value , the participants will encrypt the message { },sign and key signature Send to aggregator.

[0023] The encryption information of each offline participant is obtained by encrypting the target information according to the key of each offline participant, and the key of each offline participant is obtained according to the self-masking seed and shared key seed of each offline participant. The shared key seed is generated by each offline participant and any one or more participants using the Diffie-Hellman protocol. The key signature value of each offline participant is obtained by signing the key of each offline participant. For example, the participant randomly generates a self-masking seed with his or her ID. ,in, Participants have different expectations about the messages they need to send. Sign and generate signature value .For example, , where g is the generator, It's news The jth element of It is the signature value of the participant for the message to be sent. The participant and any one or more participants use the Diffie-Hellman protocol to generate a shared key seed. . Based on the generated shared key seed and self-masking seeds , participants calculate their secret keys ,For example, , , where PRG is a pseudo-random generator. Participants use the key For messages that need to be sent Encrypt and get the encrypted message { }. Participants' key Generate key signature value , the participants will encrypt the message { },sign and key signature Send to aggregator.

[0024] Step S20: validly verifying the encrypted information of each participant based on the acquired signature value and key signature value of the participant to obtain a target online participant set and a target offline participant set; Exemplarily, based on the acquired signature values and key signature values of each online participant, the encrypted information of each online participant is effectively verified. Furthermore, the encrypted information, signature values, and key signature values of each offline participant are effectively verified to obtain a target set of online participants and a target set of offline participants. The shared key seed, self-masking seed, encrypted information, signature value, and key signature value of each offline participant are shared among all online participants. For example, the encrypted information of each online participant is effectively verified using the acquired signature values and key signature values. If the verification fails, the online participant is considered an offline participant; if the verification succeeds, the target set of online participants is generated with the successfully verified online participants. The encrypted information, signature values, and key signature values of each offline participant are used to effectively verify the encrypted information of each offline participant. Regardless of whether the verification succeeds, the target set of offline participants is generated.

[0025] Specifically, the method of validly verifying the encrypted information of each participant based on the acquired signature value and key signature value of the participant to obtain a target online participant set and a target offline participant set includes: obtaining a first preset formula, the signature value and key signature value of the participant, wherein the signature value and key signature value of the participant include the signature value and key signature value of each online participant and the signature value and key signature value of each offline participant; calculating the valid verification result of each online participant and the valid verification result of each offline participant respectively according to the first preset formula, the signature value and key signature value of each online participant, and the signature value and key signature value of each offline participant; if the valid verification result of the online participant is verification failure, adding the online participant that failed verification to the offline participants and generating a target offline participant set; if the valid verification result of the online participant is verification success, generating a target online participant set with the online participant that succeeded verification.

[0026] Exemplarily, obtain the first preset formula , the signature value and key signature value of the participant, wherein the signature value and key signature value of the participant include the signature value and key signature value of each online participant and the signature value and key signature value of each offline participant. According to the first preset formula , the signature value and key signature value of each online participant, as well as the signature value and key signature value of the offline participant, respectively calculate the valid verification result of each online participant and the valid verification result of each offline participant; if the valid verification result of the online participant is verification failure, the online participant who failed the verification is added to the offline participants, and the offline participants, regardless of whether the valid verification result is success or failure, are all offline participants, and a target offline participant set is generated; if the valid verification result of the online participant is verification success, the online participants who successfully verified are added to the target online participant set.

[0027] Step S30: calculating an aggregation result based on the encryption information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set; Exemplarily, a second preset formula is obtained; based on the second preset formula, the target online participant set is Encrypted information of target online participants, target offline participants set The shared key seed and self-masking seed of the target offline participant are calculated to calculate the aggregate result. For example, the second preset formula is obtained , for the target set of online participants The encrypted information of the target online participant { }, the shared key seed of the target offline participant in the target offline participant set and self-masking seeds , calculate the aggregation result y.

[0028] Step S40: Perform security verification on the signature value of each participant according to the aggregation result, and obtain the security verification result.

[0029] For example, a third preset formula is obtained; based on the third preset formula and the aggregation result, the signature value of each participant is securely verified to obtain the security verification results of each participant, wherein the security verification results of each participant include the security verification results of each online participant and the security verification results of each offline participant. For example, the third preset formula is obtained , where the left side is the signature product of all participants, and the right side is the verification expression of the aggregation result, based on the third preset formula , the signature value of each participant of the aggregation result Perform security verification and obtain the security verification results of each participant. If both sides are equal, the aggregation result verification passes and the aggregator's result is considered correct; if the two sides are not equal, the verification fails and the aggregator is considered to have tampered.

[0030] Specifically, after obtaining the security verification result, the method further includes: separately counting the security verification results of each online participant and the security verification results of each offline participant, and reporting the security verification results.

[0031] Exemplarily, the security verification results of each online participant and each offline participant are counted separately, and the security verification results are reported. The reporting method is not limited to text and early warning information.

[0032] In this embodiment, the data of the participants are obtained, wherein the data of the participants include the encryption information, signature value and key signature value of each online participant, and the shared key seed, self-masking seed, encryption information, signature value and key signature value of each offline participant; the encryption information of each participant is effectively verified based on the acquired signature value and key signature value of the participant to obtain a target online participant set and a target offline participant set; the aggregation result is calculated based on the encryption information of the target online participant in the target online participant set and the shared key seed and self-masking seed of the target offline participant in the target offline participant set; the signature value of each participant is securely verified based on the aggregation result, and a security verification result is obtained. This solves the technical problem in the related art that it is difficult to ensure that the aggregator performs the aggregation operation in good faith, and ensures data privacy, the correctness of the aggregation result, and prevents malicious aggregators from tampering with the result.

[0033] In a second aspect, an embodiment of the present application also provides an aggregation verification device for distributed data.

[0034] In one embodiment, referring to Figure 2 , Figure 2 This is a functional module diagram of an embodiment of the distributed data aggregation verification device of this application. Figure 2 As shown, the distributed data aggregation verification device includes: A first acquisition module 10 is configured to acquire participant data, wherein the participant data includes the encryption information, signature value, and key signature value of each online participant, and the shared key seed, self-masking seed, encryption information, signature value, and key signature value of each offline participant; The second acquisition module 20 is used to effectively verify the encrypted information of each participant based on the acquired signature value and key signature value of the participant to obtain a target online participant set and a target offline participant set; A calculation module 30, configured to calculate an aggregation result based on the encryption information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set; The third acquisition module 40 is configured to perform security verification on the signature value of each participant according to the aggregation result, and obtain a security verification result.

[0035] Furthermore, in one embodiment, the second acquisition module 20 is configured to: Obtaining a first preset formula, the signature value and key signature value of the participant, wherein the signature value and key signature value of the participant include the signature value and key signature value of each online participant and the signature value and key signature value of each offline participant; Calculating a valid verification result for each online participant and a valid verification result for each offline participant based on the first preset formula, the signature value and key signature value of each online participant, and the signature value and key signature value of each offline participant; If the valid verification result of the online participant is verification failure, the online participant who failed the verification is added to the offline participants, and a target offline participant set is generated; If the valid verification result of the online participant is successful, the online participants who have successfully been verified are generated into a target online participant set.

[0036] Furthermore, in one embodiment, the calculation module 30 is configured to: Obtain a second preset formula; The encryption information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set are calculated based on the second preset formula to calculate an aggregation result.

[0037] Furthermore, in one embodiment, the third acquisition module 40 is configured to: Get the third preset formula; Based on the third preset formula and the aggregation result, the signature value of each participant is security verified to obtain the security verification result of each participant, wherein the security verification result of each participant includes the security verification result of each online participant and the security verification result of each offline participant.

[0038] Furthermore, in one embodiment, the distributed data aggregation verification apparatus further includes a new module for: The security verification results of each online participant and the security verification results of each offline participant are counted separately, and the security verification results are reported.

[0039] Furthermore, in one embodiment, the distributed data aggregation verification apparatus further includes a new module for: The encrypted information of each online participant is obtained by encrypting the target information according to the key of each online participant, and the key of each online participant is obtained according to the self-masking seed of each online participant and a shared key seed, and the shared key seed is generated by each online participant and any one or more participants using the Diffie-Hellman protocol; The encrypted information of each offline participant is obtained by encrypting the target information according to the key of each offline participant, and the key of each offline participant is obtained according to the self-masking seed and shared key seed of each offline participant. The shared key seed is generated by each offline participant and any one or more participants using the Diffie-Hellman protocol.

[0040] Furthermore, in one embodiment, the distributed data aggregation verification apparatus further includes a new module for: The key signature value of each online participant is obtained by signing the key of each online participant; The key signature value of each offline participant is obtained by signing the key of each offline participant.

[0041] Among them, the functional implementation of each module in the above-mentioned distributed data aggregation verification device corresponds to the various steps in the above-mentioned distributed data aggregation verification method embodiment, and its functions and implementation processes will not be repeated here one by one.

[0042] On the third aspect, an embodiment of the present application provides an aggregation verification device for distributed data. The aggregation verification device for distributed data can be a personal computer (PC), a laptop computer, a server, or other device with data processing capabilities.

[0043] Reference Figure 3 , Figure 3 Schematic diagram of the hardware structure of the distributed data aggregation verification device involved in the embodiment of the present application. In the embodiment of the present application, the distributed data aggregation verification device may include a processor, a memory, a communication interface and a communication bus.

[0044] The communication bus may be of any type and is used to interconnect the processor, memory, and communication interface.

[0045] Communication interfaces include input / output (I / O) interfaces, physical interfaces, and logical interfaces. These interfaces interconnect components within the distributed data aggregation verification device, as well as interfaces that connect the distributed data aggregation verification device to other devices (such as other computing devices or user devices). Physical interfaces can include Ethernet, fiber, or ATM interfaces; user devices can include displays and keyboards.

[0046] The memory can be various types of storage media, such as random access memory (RAM), read-only memory (ROM), non-volatile RAM (NVRAM), flash memory, optical storage, hard disk, programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), etc.

[0047] The processor may be a general-purpose processor that can invoke a distributed data aggregation verification program stored in a memory and execute the distributed data aggregation verification method provided in the embodiments of the present application. For example, the general-purpose processor may be a central processing unit (CPU). The method executed when the distributed data aggregation verification program is invoked can be referenced to the various embodiments of the distributed data aggregation verification method of the present application and will not be further described here.

[0048] Those skilled in the art will understand that Figure 3 The hardware structure shown in the figure does not constitute a limitation to the present application and may include more or fewer components than shown in the figure, or a combination of certain components, or a different arrangement of components.

[0049] In a fourth aspect, an embodiment of the present application also provides a computer-readable storage medium.

[0050] The computer-readable storage medium of the present application stores an aggregation verification program for distributed data, wherein when the aggregation verification program for distributed data is executed by a processor, the steps of the above-mentioned aggregation verification method for distributed data are implemented.

[0051] Among them, the method implemented when the distributed data aggregation verification program is executed can refer to the various embodiments of the distributed data aggregation verification method of this application, and will not be repeated here.

[0052] It should be noted that the serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0053] The terms "including" and "having" and any variations thereof in the specification and claims of this application and the above-mentioned drawings are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices. The terms "first", "second" and "third" are used to distinguish different objects, etc., and do not represent a sequence, nor do they limit the "first", "second" and "third" to different types.

[0054] In the description of the embodiments of this application, the words "exemplary," "for example," or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as "exemplary," "for example," or "for example" in the embodiments of this application should not be construed as being preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary," "for example," or "for example" is intended to present the relevant concepts in a concrete manner.

[0055] In the description of the embodiments of the present application, unless otherwise specified, “ / ” means or, for example, A / B can mean A or B; “and / or” in the text is merely a description of the association relationship of associated objects, indicating that three relationships may exist, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, in the description of the embodiments of the present application, “multiple” refers to two or more than two.

[0056] In some processes described in the embodiments of the present application, multiple operations or steps are included that appear in a specific order. However, it should be understood that these operations or steps may not be performed in the order in which they appear in the embodiments of the present application or may be performed in parallel. The sequence numbers of the operations are only used to distinguish between different operations, and the sequence numbers themselves do not represent any order of execution. In addition, these processes may include more or fewer operations, and these operations or steps may be performed in sequence or in parallel, and these operations or steps may be combined.

[0057] Through the description of the above embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, or the part that contributes to the existing technology, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) as described above and includes a number of instructions for enabling a terminal device to execute the methods described in each embodiment of this application.

[0058] The above are only preferred embodiments of the present application and do not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A distributed data aggregation verification method, characterized in that: The distributed data aggregation verification method includes: Acquire participant data, wherein the participant data includes the encrypted information, signature value, and key signature value of each online participant, and the shared key seed, self-masking seed, encrypted information, signature value, and key signature value of each offline participant; Based on the acquired signature value and key signature value of the participant, the encrypted information of each participant is effectively verified to obtain a target online participant set and a target offline participant set; Calculating an aggregation result based on the encrypted information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set; Perform security verification on the signature value of each participant according to the aggregation result, and obtain a security verification result.

2. The distributed data aggregation verification method according to claim 1, characterized in that: The step of validly verifying the encrypted information of each participant based on the acquired signature value and key signature value of the participant to obtain a target online participant set and a target offline participant set includes: Obtaining a first preset formula, the signature value and key signature value of the participant, wherein the signature value and key signature value of the participant include the signature value and key signature value of each online participant and the signature value and key signature value of each offline participant; Calculating a valid verification result for each online participant and a valid verification result for each offline participant based on the first preset formula, the signature value and key signature value of each online participant, and the signature value and key signature value of each offline participant; If the valid verification result of the online participant is verification failure, the online participant who failed the verification is added to the offline participants, and a target offline participant set is generated; If the valid verification result of the online participant is successful, the online participants who have successfully been verified are generated into a target online participant set.

3. The distributed data aggregation verification method according to claim 1, characterized in that: The calculating of the aggregation result according to the encryption information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set includes: Obtain a second preset formula; The encryption information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set are calculated based on the second preset formula to calculate an aggregation result.

4. The distributed data aggregation verification method according to claim 1, characterized in that: The performing security verification on the signature value of each participant according to the aggregation result and obtaining the verification result includes: Get the third preset formula; Based on the third preset formula and the aggregation result, the signature value of each participant is security verified to obtain the security verification result of each participant, wherein the security verification result of each participant includes the security verification result of each online participant and the security verification result of each offline participant.

5. The distributed data aggregation verification method according to claim 1, characterized in that: After obtaining the security verification result, the method further includes: The security verification results of each online participant and the security verification results of each offline participant are counted separately, and the security verification results are reported.

6. The distributed data aggregation verification method according to claim 1, characterized in that: The encrypted information of each online participant is obtained by encrypting the target information according to the key of each online participant, and the key of each online participant is obtained according to the self-masking seed of each online participant and a shared key seed, and the shared key seed is generated by each online participant and any one or more participants using the Diffie-Hellman protocol; The encrypted information of each offline participant is obtained by encrypting the target information according to the key of each offline participant, and the key of each offline participant is obtained according to the self-masking seed and shared key seed of each offline participant. The shared key seed is generated by each offline participant and any one or more participants using the Diffie-Hellman protocol.

7. The distributed data aggregation verification method according to claim 1, characterized in that: The key signature value of each online participant is obtained by signing the key of each online participant; The key signature value of each offline participant is obtained by signing the key of each offline participant.

8. A distributed data aggregation verification device, characterized in that: The distributed data aggregation verification device includes: A first acquisition module is configured to acquire participant data, wherein the participant data includes the encryption information, signature value, and key signature value of each online participant, and the shared key seed, self-masking seed, encryption information, signature value, and key signature value of each offline participant; A second acquisition module is used to effectively verify the encrypted information of each participant based on the acquired signature value and key signature value of the participant, so as to obtain a target online participant set and a target offline participant set; a calculation module, configured to calculate an aggregation result based on the encryption information of the target online participants in the target online participant set and the shared key seeds and self-masking seeds of the target offline participants in the target offline participant set; The third acquisition module is used to perform security verification on the signature value of each participant according to the aggregation result and obtain the security verification result.

9. A distributed data aggregation verification device, characterized in that: The distributed data aggregation verification device includes a processor, a memory, and a distributed data aggregation verification program stored on the memory and executable by the processor, wherein when the distributed data aggregation verification program is executed by the processor, the steps of the distributed data aggregation verification method as described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a distributed data aggregation verification program, wherein when the distributed data aggregation verification program is executed by a processor, the steps of the distributed data aggregation verification method according to any one of claims 1 to 7 are implemented.

Images