Privacy protection method, device and system based on implicit associated data identity

Abstract

The invention discloses a privacy protection method, device and system based on implicit associated data identity, and the method comprises the steps: generating a random security prime number in response to an obtaining request for implicit associated data label parameters when identity authentication is passed, the target terminal and the authentication and production equipment side generate corresponding label parameters based on the random security prime number, the authentication and production equipment side and the target terminal can generate implicit association labels through different label parameters for matching, and if matching succeeds, association between the privacy data and the non-privacy data can be established. Parameters provided by the terminal participate in calculation of the implicit associated data labels so as to achieve the authorization effect of access and use of private data. The security of the privacy data resources is effectively improved, even if the non-privacy data resources and the privacy data resources are mastered, the corresponding relationship between the two data resources cannot be directly established, and the possibility of deducing the associated privacy data resources through the non-privacy data resources is avoided.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a privacy protection method, device and system based on implicitly associated data identity. Background Art

[0002] With the rapid development of mobile communication technology, wireless networks and mobile smart terminal devices, mobile applications have deeply penetrated into various industries such as mobile financial payment, mobile collaborative office, and mobile government services. The electronic and data-based application model has built an efficient and smooth mobile Internet application system, significantly improving the office and service efficiency in various fields of society.

[0003] However, while mobile applications offer convenient services, they also pose serious risks to personal privacy and information security. In these business scenarios, users are required to submit a large amount of sensitive personal data to the third-party platform's business application system, including mobile phone numbers, mobile device identification codes, location information, spending records, account passwords, and more. The privacy protection of this data is highly dependent on the security mechanisms of the third-party platform. If the platform's security protection system is breached, a large amount of public private information is at risk of being leaked.

[0004] Currently, the protection of personal privacy data primarily relies on the data security mechanisms of third-party platforms. These platforms store user-submitted data fields and process them through table queries when used. To reduce the risk of privacy data leakage, some platforms adopt a separate table storage strategy: non-private data is stored in a master table, while private data (such as identity information and biometrics) is separated from core business tables and stored in associated tables. The master and associated tables are linked using unique identifiers (such as user IDs). This approach prevents private data from being directly exposed in core tables. Even if a core table is compromised, attackers cannot directly access sensitive information in associated tables, making it difficult to misuse the data. If the associated tables are accessed separately, the data cannot be directly linked to the user's identity, rendering the information invalid. This design reduces the risk of privacy leakage by making it more difficult to attack by compromising multiple tables and establishing connections.

[0005] In addition, the partitioned table storage strategy also plays a role in data utilization and sharing scenarios: for example, in the medical field, the patient's real identity information is desensitized to generate a unique identifier, which is associated with the desensitized medical record data and stored in an associated table. This not only supports identifier-based data analysis within medical institutions, but also protects patient privacy. When multiple parties share data, different institutions can establish associated tables based on unified identification rules and only share desensitized associated data, thereby promoting data circulation while ensuring privacy and security.

[0006] However, it should be noted that the existing sharding storage mechanism still focuses on the third-party platform's own security protection. By obtaining the associated identifier, as well as the status of the master data table and the privacy data table, and combining the data of multiple tables based on the associated identifier, the privacy data carrying the user's identity can be restored, resulting in personal privacy leakage. Therefore, privacy data still has the risk of being stolen in batches and abused by association, and the security and reliability of personal privacy protection still have room for improvement. Summary of the Invention

[0007] Based on this, it is necessary to provide a privacy protection method, device and system based on implicit associated data identity to address the above technical issues, so as to solve at least one problem existing in the above-mentioned prior art.

[0008] In a first aspect, a privacy protection method based on implicit linked data identity is provided, comprising: When the identity authentication is passed, in response to a request to obtain the implicitly associated data tag parameter, a random security prime number is generated and sent to the target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; Based on the random secure prime number, generate a first server application resource tag parameter and a second server application resource tag parameter; Generate a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter, forward the non-privacy business data to the first data resource end through the business application resource end, and forward the privacy data and the first implicit association tag to the second data resource end through the business application resource end; When business data association is performed, the second server-side application resource tag parameter is forwarded to the target terminal through the business application resource end, so that the second implicit association tag calculated by the target terminal is matched with the first implicit association tag through the business application resource end. If the match is successful, the matched non-privacy data and privacy data are associated, wherein the first implicit association tag is calculated through the second terminal tag parameter and the first server-side application resource tag parameter.

[0009] In one possible implementation, generating a first server application resource tag parameter and a second server application resource tag parameter based on the random secure prime number includes: Randomly generating a first server-side application resource tag parameter, where the first server-side application resource tag parameter is consistent in size with the random security prime number; The second server-side application resource tag parameter is calculated based on the random security prime number and the first server-side application resource tag parameter.

[0010] In one possible implementation, forwarding the second server application resource tag parameter to the target terminal through the service application resource end, so as to match the second implicit association tag calculated by the target terminal with the first implicit association tag through the service application resource end, includes: Obtaining a query request sent by the business application resource end, wherein the query request includes a second server-side application resource tag parameter index; Based on the second server-side application resource tag parameter index, the second server-side application resource tag parameter is queried and obtained, and the first terminal tag parameter index and the second server-side application resource tag parameter are sent to the target terminal through the business application resource end, so that the target terminal obtains the first terminal tag parameter based on the first terminal tag parameter index query, and calculates the second implicit association tag based on the second server-side application resource tag parameter and the first terminal tag parameter, so that the business application resource end matches the second implicit association tag calculated by the target terminal with the first implicit association tag.

[0011] In a possible implementation, when the identity authentication is passed, before responding to the request for obtaining the implicitly associated data tag parameter, the steps include: When identity authentication is required, obtaining a digital certificate acquisition request sent by the target terminal, the digital certificate acquisition request including identity information; Based on the identity information, the application digital certificate and user digital certificate corresponding to the target terminal are queried and sent to the target terminal, so that the target terminal performs identity authentication on the authentication and production device end based on the application digital certificate. At the same time, the authentication and production device end performs identity authentication on the target terminal based on the user digital certificate.

[0012] In a second aspect, a privacy protection method based on implicitly linked data identity is provided, the method comprising: When the identity authentication is passed, sending an acquisition request for the implicitly associated data tag parameter to the authentication and production device end to obtain a random security prime number generated by the authentication and production device end based on the acquisition request, wherein the authentication and production device end generates a first server-side application resource tag parameter and a second server-side application resource tag parameter based on the random security prime number; Based on the random secure prime number, generating a first terminal tag parameter and a second terminal tag parameter; Sending the second terminal tag parameter and business data to the business application resource end, where the business data includes private data and non-private data, so that the non-private business data is forwarded to the first data resource end through the business application resource end, and the private data and the first implicit association tag are forwarded to the second data resource end through the business application resource end, where the first implicit association tag is calculated by the authentication and production device end based on the first server application resource tag parameter and the second terminal tag parameter; When performing business data association, obtaining a second server application resource tag parameter sent by the authentication and production device, and calculating a second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter; The second implicit association tag is sent to the business application resource end to match the second implicit association tag with the first implicit association tag through the business application resource end. If the match is successful, the matched non-privacy data and privacy data are associated, wherein the second implicit association tag is calculated by the target terminal through the first terminal tag parameter and the second server application resource tag parameter.

[0013] In one possible implementation, generating the first terminal tag parameter and the second terminal tag parameter based on the random secure prime number includes: Randomly generating a first terminal tag parameter, where the first terminal tag parameter is consistent in size with the random security prime number; The second terminal tag parameter is calculated based on the random secure prime number and the first terminal tag parameter.

[0014] In a possible implementation, when the identity authentication is passed, before sending a request for obtaining implicitly associated data tag parameters to the authentication and production device, the following steps are included: When identity authentication is required, obtaining an identity authentication request sent by the business application resource end; Sending a digital certificate acquisition request to the authentication and production device, wherein the digital certificate acquisition request includes identity information; The application digital certificate and user digital certificate sent by the authentication and production device are obtained, and the authentication and production device is authenticated based on the application digital certificate. At the same time, the authentication and production device is authenticated based on the user digital certificate.

[0015] In a third aspect, a privacy protection device based on implicitly linked data identity is provided, comprising: A random security prime number generating unit is configured to generate a random security prime number in response to an acquisition request for an implicitly associated data tag parameter when identity authentication is passed, and send the random security prime number to a target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; A server application resource label parameter generating unit, configured to generate a first server application resource label parameter and a second server application resource label parameter based on the random secure prime number; a first data distribution unit, configured to generate a first implicit association tag based on the second terminal tag parameter and the first server-side application resource tag parameter, and forward the non-privacy business data to the first data resource end through the business application resource end, and forward the privacy data and the first implicit association tag to the second data resource end through the business application resource end, wherein the first implicit association tag is calculated using the second terminal tag parameter and the first server-side application resource tag parameter; The first data association unit is used to forward the second server-side application resource tag parameter to the target terminal through the business application resource end when performing business data association, so as to match the second implicit association tag calculated by the target terminal with the first implicit association tag through the business application resource end, and if the match is successful, associate the matched non-private data and the private data.

[0016] In a fourth aspect, a privacy protection device based on implicitly associated data identity is provided, the device comprising: a tag parameter acquisition request sending unit, configured to, when identity authentication is passed, send an acquisition request for the implicitly associated data tag parameter to the authentication and production device end, so as to obtain a random secure prime number generated by the authentication and production device end based on the acquisition request, wherein the authentication and production device end generates a first server-side application resource tag parameter and a second server-side application resource tag parameter based on the random secure prime number; A terminal tag parameter generating unit, configured to generate a first terminal tag parameter and a second terminal tag parameter based on the random secure prime number; a second data distribution unit, configured to send the second terminal tag parameter and business data to the business application resource end, the business data including private data and non-private data, so as to forward the non-private business data to the first data resource end via the business application resource end, and to forward the private data and the first implicit association tag to the second data resource end via the business application resource end, wherein the first implicit association tag is calculated by the authentication and production device end based on the first server application resource tag parameter and the second terminal tag parameter; a second implicit association tag calculation unit, configured to obtain, when performing business data association, a second server application resource tag parameter sent by the authentication and production device, and calculate a second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter; A second data association unit is used to send the second implicit association tag to the business application resource end, so as to match the second implicit association tag with the first implicit association tag through the business application resource end; if the match is successful, the matched non-privacy data and the privacy data are associated, wherein the second implicit association tag is calculated by the target terminal through the first terminal tag parameter and the second server application resource tag parameter.

[0017] The fifth aspect provides a privacy protection system based on implicit linked data identity, including: The target terminal is used to send an acquisition request for implicitly associated data tag parameters to the authentication and production device; The authentication and production device generates a random security prime number based on the acquisition request and sends it to the target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; The authentication and production device generates a first server application resource tag parameter and a second server application resource tag parameter based on the random security prime number; The authentication and production device obtains the second terminal tag parameter sent by the target terminal, and generates a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter; The target terminal sends business data to the authentication and production device, where the business data includes private data and non-private data. The authentication and production device forwards the non-private business data to the first data resource via the business application resource, and forwards the private data and the first implicit association tag to the second data resource via the business application resource. When the business application resource end performs business data association, the authentication and production device end forwards the second server application resource tag parameter to the target terminal through the business application resource end, so that the target terminal calculates a second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter; The target terminal sends the second implicit association tag to the business application resource end so that the business application resource end matches the second implicit association tag with the first implicit association tag. If the match is successful, the matched non-privacy data and privacy data are associated, wherein the authentication and production device end calculates the first implicit association tag through the second terminal tag parameter and the first server application resource tag parameter, and stores it in the second data resource end.

[0018] The above-mentioned privacy protection method, device and system based on implicit associated data identity, the method of which is implemented include: when identity authentication is passed, in response to a request for obtaining implicit associated data tag parameters, generating a random security prime number and sending it to the target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; generating a first server application resource tag parameter and a second server application resource tag parameter based on the random security prime number; generating a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter, and transmitting non-privacy business data to the target terminal through the business application. The first data resource end is forwarded to the first data resource end by the service application resource end, and the private data and the first implicit association tag are forwarded to the second data resource end via the service application resource end. When business data association is performed, the second implicit association tag parameter of the server application resource end is forwarded to the target terminal via the service application resource end, so that the second implicit association tag calculated by the target terminal is matched with the first implicit association tag via the service application resource end. If the match is successful, the matched non-private data and private data are associated, wherein the first implicit association tag is calculated using the second terminal tag parameter and the first server application resource tag parameter. In this embodiment of the present application, the terminal and the authentication and production device end collaboratively provide calculation parameters, and the association logic exists only in the dynamic calculation. The parameters provided by the mobile smart terminal participate in the calculation of the implicit association data tag, achieving the effect of authorizing access to and use of private data. Important parameters are protected by the security chip, forming a double security guarantee. The security of private data resources is effectively improved. Under the premise of knowing the non-private data resources and private data resources, it is impossible to directly establish a corresponding relationship between the two data resources, thus avoiding the possibility of deducing the associated private data resources from the non-private data resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments of the present application. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0020] Figure 1 This is a schematic diagram of an application environment of a privacy protection method based on implicitly associated data identity in an embodiment of the present application; Figure 2 This is a schematic diagram of an interaction sequence of a privacy protection method based on implicitly associated data identity in one embodiment of the present application; Figure 3 This is a flow chart of a privacy protection method based on implicitly associated data identity in an embodiment of the present application. Figure 1 ; Figure 4 This is a flow chart of a privacy protection method based on implicitly associated data identity in an embodiment of the present application. Figure 2 ; Figure 5 This is a schematic diagram of a privacy protection device based on implicitly associated data identity in an embodiment of the present application. Figure 1 ; Figure 6 This is a schematic diagram of a privacy protection device based on implicitly associated data identity in an embodiment of the present application. Figure 2 ; Figure 7 This is a structural diagram of a privacy protection system based on implicitly associated data identity in one embodiment of the present application; Figure 8 Schematic diagram of a computer device in one embodiment of the present application. DETAILED DESCRIPTION

[0021] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0022] The privacy protection method based on implicitly associated data identity provided in this embodiment can be applied in Figure 1 In the application environment, it includes an implicitly associated data tag authentication and production device end, an implicitly associated data tag authentication and production device end client SDK. A business application resource end and a data resource end (the data resource end includes a first data resource end and a second data resource end, which are used to store private data and non-private data respectively).

[0023] The implicitly associated data tag authentication and production device 1000 (hereinafter referred to as the authentication and production device) includes a processor 1001, memory 1002, a network interface 1003, a security chip interface 1004, and a storage interface 1005. It is connected to a security chip 1006 via the security chip interface. The security chip includes a security control chip, a security computing chip, a dual physical noise source chip, and a non-volatile memory FLASH chip, and is used to generate, calculate, and store security parameters related to implicitly associated data tags. The memory is installed with an operating system 1007 and includes a certificate issuance module, a certificate authentication module, a secure transmission module, an implicitly associated data tag production module, and an implicitly associated data tag management module. These modules are used for certificate issuance and authentication with mobile smart terminals, establishing encrypted TLS connections during transmission, and processing services related to implicitly associated data tag production and management.

[0024] The Implicitly Associated Data Tag Authentication and Production Device Client SDK 2000 (hereinafter referred to as the target terminal) includes secure SDK software integrated with mobile smart terminal business apps, supporting the Implicitly Associated Data Tag Authentication and Production Device. Through integration with business apps, it provides functions such as implicitly associated data tag calculation, implicitly associated data tag parameter management, user certificate application and management, random number generation, TLS connection establishment for encrypted transmission, and API services for business apps. Target terminals include, but are not limited to, various personal computers, laptops, smartphones, tablets, and portable wearable devices.

[0025] Example 1 In one embodiment, if Figure 2 As shown in , a privacy protection method based on implicit linked data identity is provided, such as Figure 3 As shown in the figure, the interactive sequence diagram of the privacy protection method based on implicit linked data identity is provided. Figure 1 The following steps are used as an example to illustrate the authentication and production device side: In step S110, when the identity authentication is passed, in response to the acquisition request for the implicitly associated data tag parameter, a random security prime number is generated and sent to the target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; Optionally, when the target terminal initiates an application access request, the target terminal and the authentication and production device can perform two-way identity authentication. Specifically, the target terminal authenticates the authentication and production device based on the device's application digital certificate, and the authentication and production device authenticates the target terminal based on the target terminal's user digital certificate. If the authentication is successful, the authentication and production device can call a chip that generates a true random number sequence, such as the WNG8 physical noise source chip, to generate a random secure prime number M. M can be 2048, 3072, or 4096 bits. A higher number of bits increases the encryption strength and makes it more difficult to crack. The random secure prime number M is then returned to the SDK (Software Development Kit) integrated into the target terminal's app, a toolkit integrated into the terminal app that handles underlying logic such as encryption and authentication.

[0026] At this time, the SDK can call the random number generation function to generate the first terminal tag parameter A1, which is the same size as M (for example, if M is 2048 bits, A1 is also 2048 bits), and the SDK locally calculates the second terminal tag parameter: A2=2 A1 modM. Finally, the SDK provides A2 to the authentication and production device through the business APP, and A1 is stored locally on the target terminal (such as the terminal's security chip or encrypted storage area). Parameter A1 is only stored locally on the mobile smart terminal and is not transmitted externally. Without A1, a third party cannot infer the correspondence between non-private data and private data through other parameters. After certificate-based authentication by the mobile smart terminal, the calculation result of A1 is called to ensure that private data association and query operations are allowed by the terminal.

[0027] It's important to note that the authentication and production devices can also establish an encrypted transmission channel, TLS (Transport Layer Security). The TLS encryption channel establishment process consists of two key phases: the handshake and the transmission phase. During the handshake phase, both parties negotiate the protocol version and cipher suite and exchange random numbers, which are crucial for generating session keys. Next, two-way authentication is performed using digital certificates. The communicating parties verify the legitimacy of each other's identities, like presenting proof of identity, ensuring that the intended parties are communicating. A session key, valid only for this session, is then generated based on the exchanged random numbers and the key in the certificate. During the transmission phase, both parties use the generated session key to symmetrically encrypt the transmitted data and append a message authentication code (MAC). This acts as a "password lock" and provides an anti-counterfeiting mark. By decrypting and verifying the MAC, the recipient can obtain the correct data and determine whether it has been tampered with. This series of operations enables TLS to effectively ensure confidentiality, integrity, and identity authentication during data transmission, thereby protecting the security of the relevant parameter transmission.

[0028] In step S120, a first server application resource tag parameter and a second server application resource tag parameter are generated based on the random secure prime number; Optionally, the authentication and production device can call a chip that generates a true random number sequence, such as the WNG8 physical noise source chip, to generate the first server-side application resource tag parameter B1. B1 is the same size as M (for example, if M is 2048 bits, B1 is also 2048 bits). Then, based on M and B1, the second server-side application resource tag parameter B2 = 2B1modM can be calculated (this algorithm is logically symmetric with A2 on the terminal side, providing a unified calculation basis for the subsequent generation of implicit association tags), and B2 is stored in the security chip (the security chip has physical tamper-proof features to prevent B2 from being illegally read or tampered with).

[0029] In step S130, a first implicit association tag is generated based on the second terminal tag parameter and the first server application resource tag parameter, and the non-privacy business data is forwarded to the first data resource end through the business application resource end, and the private data and the first implicit association tag are forwarded to the second data resource end through the business application resource end; Optionally, the target terminal can enter / collect business data through the business APP, and then transmit the obtained business data and A1 index to the business application resource end through the TLS encrypted transmission channel of the authentication and production device end. The business application resource end can transmit the non-privacy data and the indexes of A1 and B2 to the first data resource end A. The first data resource end A stores the non-privacy data and the indexes of A1 and B2 related parameters for calculating the implicit association tag. The business application resource end can apply to the authentication and production device end to calculate the first implicit association tag N. The authentication and production device end can calculate the first implicit association tag N of the business data based on the stored B1 and A2, where N=A2 B1 modM, and returns the first implicit association tag N to the business application resource end, and then the business application resource end can send the private data and the first implicit association tag N to the second data resource end B for storage.

[0030] In step S140, when business data association is performed, the second server-side application resource tag parameter is forwarded to the target terminal through the business application resource end, so that the second implicit association tag calculated by the target terminal is matched with the first implicit association tag through the business application resource end. If the match is successful, the matched non-privacy data and privacy data are associated, wherein the first implicit association tag is calculated through the second terminal tag parameter and the first server-side application resource tag parameter.

[0031] Optionally, when a local or third-party business application requests the business application resource end to conduct data statistics and correlation analysis on the stored business data, based on the request of the business application resource end, the authentication and production device end returns the second server application resource tag parameter B2 to the business application resource end. At this time, the application resource end can request the second implicit correlation tag N' from the target terminal, where N'=B2 A1 modM. The business application resource end can apply for data association and match N` with the first implicit association tag N stored in the second data resource end B. If the match is inconsistent, the data association is rejected. If the match is consistent, a consistent private data record is returned. The business application resource end associates the relatively consistent data with the data of the first data resource end A to form complete data. The business application resource end can also provide the associated data locally or to a third party and conduct subsequent data analysis and processing on the associated data. By separating the implicit association data tags of private data and non-private data, it effectively avoids the problem of private data resources and non-private data resources being stolen by attackers at the same time, and then associates data through association tags, thereby reducing the risk of data leakage.

[0032] The embodiment of the present application provides a privacy protection method based on implicit associated data identity, comprising: when identity authentication is passed, in response to a request for obtaining implicit associated data tag parameters, generating a random security prime number and sending it to a target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; generating a first server application resource tag parameter and a second server application resource tag parameter based on the random security prime number; generating a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter, and transmitting non-private business data to the target terminal through the business application resource tag parameter. The source end forwards the data to the first data resource end, and forwards the private data and the first implicit association tag to the second data resource end via the business application resource end. When business data association is performed, the second server-side application resource tag parameter is forwarded to the target terminal via the business application resource end, so that the second implicit association tag calculated by the target terminal is matched with the first implicit association tag via the business application resource end. If the match is successful, the matched non-private data and private data are associated, wherein the first implicit association tag is calculated using the second terminal tag parameter and the first server-side application resource tag parameter. In this embodiment of the present application, the terminal and the authentication and production device end collaboratively provide calculation parameters, and the association logic exists only in dynamic calculations. The parameters provided by the mobile smart terminal participate in the calculation of the implicit association data tag, achieving the effect of authorizing access to and use of private data. Important parameters are protected by the security chip, forming a double security guarantee. The security of private data resources is effectively improved. Under the premise of knowing the non-private data resource and the private data resource, it is impossible to directly establish a corresponding relationship between the two data resources, thus avoiding the possibility of deducing the associated private data resource from the non-private data resource.

[0033] In one embodiment of the present application, generating a first server application resource tag parameter and a second server application resource tag parameter based on the random secure prime number includes: Randomly generating a first server-side application resource tag parameter, where the first server-side application resource tag parameter is consistent in size with the random security prime number; The second server-side application resource tag parameter is calculated based on the random security prime number and the first server-side application resource tag parameter.

[0034] Optionally, the authentication and production device can call a chip that generates a true random number sequence, such as the WNG8 physical noise source chip, to generate the first server application resource tag parameter B1, where B1 is the same size as M (for example, if M is 2048 bits, B1 is also 2048 bits). Then, the authentication and production device calculates the second server application resource tag parameter B2 based on M and B1. B1modM, and store B2 in the security chip (it is called through the encryption interface only when an authenticated association request is received). In this process, B1 is a private parameter of the authentication and production device, just like A1 of the terminal, which ensures security by virtue of its true randomness and non-external transmission characteristics; the generation algorithm of B2 is the same as the generation algorithm of terminal A2 (A2=2 A1 ModM) are consistent and based on the same M, laying the foundation for the subsequent implicit association and mutual verification between the terminal and the authentication and production device. Storing B2 in the security chip further ensures its protection from illegal access or tampering through hardware-level protection. Furthermore, the parameters A1 and A2 generated by the target terminal and B1 and B2 generated by the authentication and production device are calculated to ensure that the tag N` negotiated by A1 + B2 is consistent with the tag N negotiated by A2 + B1. This establishes a correspondence between non-private data resources and private data resources through implicitly associated data tags.

[0035] In one embodiment of the present application, forwarding the second server application resource tag parameter to the target terminal through the service application resource end, so as to match the second implicit association tag calculated by the target terminal with the first implicit association tag through the service application resource end, includes: Obtaining a query request sent by the business application resource end, wherein the query request includes a second server-side application resource tag parameter index; Based on the second server-side application resource tag parameter index, the second server-side application resource tag parameter is queried and obtained, and the first terminal tag parameter index and the second server-side application resource tag parameter are sent to the target terminal through the business application resource end, so that the target terminal obtains the first terminal tag parameter based on the first terminal tag parameter index query, and calculates the second implicit association tag based on the second server-side application resource tag parameter and the first terminal tag parameter, so that the business application resource end matches the second implicit association tag calculated by the target terminal with the first implicit association tag.

[0036] Optionally, when a local or third-party business application requests the business application resource end to conduct data statistics and correlation analysis on the stored business data, the business application resource end can query the A1 and B2 indexes associated with the business data from the first data resource end A, and then forward the queried A1 and B2 indexes to the authentication and production device end. The authentication and production device end queries B2 stored in the security chip based on the B2 index, and returns the queried B2 to the business application resource end. At this time, the business application resource end can forward the queried B2 and A1 indexes to the target terminal business APP. At this time, after the business APP certificate of the target terminal completes the certificate two-way authentication, the A1 parameter can be queried based on the A1 index through the integrated SDK. The SDK calculates the second implicit correlation tag N` through A1 and B2, and N`=B2 A1 modM. The target terminal authorizes and agrees to the privacy data query through the business APP, and transmits the second implicit association tag N` to the business application resource end. The business application resource end can apply for data association, match N` with the first implicit association tag N stored in the second data resource end B. If the match is inconsistent, the data association is rejected. If the match is consistent, a consistent privacy data record is returned. The relatively consistent data is associated with the data of the first data resource end A through the business application resource end to form complete data. The business application resource end can also provide the associated data locally or to a third party, and conduct subsequent data analysis and processing on the associated data. By separating the implicit association data tags of private data and non-private data, it effectively avoids the problem of private data resources and non-private data resources being stolen by attackers at the same time, and then associates the data through data management tags, thereby reducing the risk of data leakage.

[0037] In one embodiment of the present application, when the identity authentication is passed, before responding to the request for obtaining the implicitly associated data tag parameter, the steps include: When identity authentication is required, obtaining a digital certificate acquisition request sent by the target terminal, the digital certificate acquisition request including identity information; Based on the identity information, the application digital certificate and user digital certificate corresponding to the target terminal are queried and sent to the target terminal, so that the target terminal performs identity authentication on the authentication and production device end based on the application digital certificate. At the same time, the authentication and production device end performs identity authentication on the target terminal based on the user digital certificate.

[0038] Optionally, the authentication and production device can issue a digital certificate representing the application identity for the application based on the system name, IP address, CPU information, etc. of the application resource. The private key of the certificate is stored in the security chip of the authentication and production device and is not allowed to be exported in plain text. When the target terminal initiates an access request, the accessed application may require the target terminal to perform identity authentication. At this time, the target terminal can locally query whether the terminal user has applied for a digital certificate through the SDK integrated in the business APP. If a digital certificate has been applied for, two-way identity authentication is performed directly. Otherwise, a digital certificate acquisition request can be sent to the authentication and production device. The request may include identity information. The authentication and production device queries the corresponding digital certificate based on the identity information and feeds it back to the target terminal. The target terminal can authenticate the authentication and production device based on the application digital certificate, and at the same time, authenticate the target terminal based on the user digital certificate. In order to achieve two-way identity authentication, after the authentication is passed, the authentication and production device can build an encrypted transmission channel for transmitting relevant parameters to improve parameter security.

[0039] In the embodiments of this application, the terminal collaborates with the authentication and production devices to provide calculation parameters, and the association logic exists only in dynamic calculations. The parameters provided by the mobile smart terminal participate in the calculation of implicitly associated data tags, thereby authorizing access to and use of private data. Furthermore, important parameters are protected by a security chip, providing a double layer of security. This effectively enhances the security of private data resources. While knowing both non-private and private data resources, it is impossible to directly establish a correspondence between the two, thus preventing the possibility of inferring associated private data resources from non-private data resources.

[0040] Example 2 In one embodiment, if Figure 4 As shown in , a privacy protection method based on implicit linked data identity is provided, such as Figure 3 As shown in the figure, the interactive sequence diagram of the privacy protection method based on implicit linked data identity is provided. Figure 1 The target terminal in is used as an example to illustrate the process, including the following steps: In step S210, when the identity authentication is passed, a request for obtaining the implicitly associated data tag parameter is sent to the authentication and production device to obtain a random secure prime number generated by the authentication and production device based on the acquisition request, wherein the authentication and production device generates a first server-side application resource tag parameter and a second server-side application resource tag parameter based on the random secure prime number; Optionally, after the target terminal and the authentication and production device have mutually authenticated each other, the authentication and production device can establish an encrypted transmission channel TLS for transmitting the parameters that need to be protected. At this point, the target terminal can send a request to the authentication and production device to obtain the implicitly associated data tag parameters, so that the authentication and production device, based on the acquisition request, calls a chip that can be used to generate a true random number sequence, such as a WNG8 physical noise source chip, to generate a random security prime number M. M can be selected as 2048 bits, 3072 bits, or 4096 bits. The higher the number of bits, the higher the encryption strength and the greater the difficulty of cracking. The target terminal can then obtain the random security prime number M sent by the authentication and production device and apply it to the subsequent generation of tag parameters.

[0041] Among them, the authentication and production device can call a chip that generates a true random number sequence, such as the WNG8 physical noise source chip, to generate the first server application resource tag parameter B1. B1 is the same size as M (for example, if M is 2048 bits, B1 is also 2048 bits). Then, the second server application resource tag parameter B2=2 can be calculated based on M and B1. B1 modM and store B2 in the security chip.

[0042] In step S220, a first terminal tag parameter and a second terminal tag parameter are generated based on the random secure prime number; Optionally, the SDK of the target terminal can call a random number generation function to generate the first terminal tag parameter A1, where A1 is the same size as M (for example, if M is 2048 bits, A1 is also 2048 bits), and the SDK locally calculates the second terminal tag parameter: A2=2 A1 modM. Finally, the SDK provides A2 to the authentication and production device through the business app, and stores A1 locally on the target terminal (such as the terminal's security chip or encrypted storage area). Parameter A1 is only saved by the target terminal. Without parameter A1 during the calculation process, the correspondence between non-private data resources and private data resources cannot be established. The calculation result of A1 can only be called after the target terminal passes the certificate authentication, ensuring that private data association and query operations are allowed by the terminal.

[0043] In step S230, the second terminal tag parameter and the business data are sent to the business application resource end, where the business data includes private data and non-private data, so that the non-private business data is forwarded to the first data resource end through the business application resource end, and the private data and the first implicit association tag are forwarded to the second data resource end through the business application resource end, where the first implicit association tag is calculated by the authentication and production device end based on the first server application resource tag parameter and the second terminal tag parameter; Optionally, the target terminal can enter / collect business data through the business APP, and then transmit the obtained business data and the index of the first terminal tag parameter A1 to the business application resource end through the TLS encrypted transmission channel of the authentication and production device end. The business application resource end can transmit the non-privacy data and the first terminal tag parameter A1 and the second server application resource tag parameter B2 index to the first data resource end A. The first data resource end A stores the non-privacy data and the index of the relevant parameters A1 and B2 for calculating the implicit association tag. The business application resource end can apply to the authentication and production device end to calculate the first implicit association tag N. The authentication and production device end can calculate the first implicit association tag N of the business data based on the stored B1 and A2, where N=A2 B1 modM, and returns the first implicit association tag N to the business application resource end, and then the business application resource end can send the private data and the first implicit association tag N to the second data resource end B for storage.

[0044] In step S240, when performing business data association, a second server application resource tag parameter sent by the authentication and production device is obtained, and a second implicit association tag is calculated based on the second server application resource tag parameter and the first terminal tag parameter; Optionally, when a local or third-party business application requests the business application resource end to conduct data statistics and correlation analysis on the stored business data, the business application resource end can query the A1 and B2 indexes associated with the business data from the first data resource end A, and then forward the queried A1 and B2 indexes to the authentication device. The authentication and production device end queries B2 stored in the security chip based on the B2 index, and returns the queried B2 to the business application resource end. At this time, the application resource end can forward the queried B2 and A1 indexes to the target terminal business APP. At this time, after the business APP certificate of the target terminal is authenticated, the A1 parameter can be queried based on the A1 index through the integrated SDK. The SDK calculates the second implicit correlation tag N` through A1 and B2, where N`=B2 A1 modM.

[0045] In step S250, the second implicit association tag is sent to the business application resource end so that the second implicit association tag is matched with the first implicit association tag through the business application resource end. If the match is successful, the matched non-privacy data and privacy data are associated, wherein the second implicit association tag is calculated by the target terminal through the first terminal tag parameter and the second server application resource tag parameter.

[0046] Optionally, the target terminal authorizes and agrees to the privacy data query through the business APP, and transmits the second implicit association tag N' to the business application resource end. The business application resource end can apply for data association, match N' with the first implicit association tag N stored in the second data resource end B. If the match is inconsistent, the data association is rejected. If the match is consistent, a consistent privacy data record is returned. The business application resource end associates the relatively consistent data with the data of the first data resource end A to form complete data, and the business application resource end can also provide the associated data locally or to a third party, and conduct subsequent data analysis and processing on the associated data. By separating the implicit association data tags of private data and non-private data, it effectively avoids the problem of private data resources and non-private data resources being stolen by attackers at the same time, and then associates the data through association tags, thereby reducing the risk of data leakage.

[0047] It should be noted that the business application resource end applies to the authentication and production device end to calculate the first implicit association tag N, and the authentication and production device end calculates the first implicit association tag N of the business data based on the stored B1 and A2, N=A2 B1 modM and returns the first implicit association tag N to the business application resource end. The business application resource end can then transmit the private data and the first implicit association tag N to the second data resource end B for storage. After obtaining the second implicit association tag N', the first implicit association tag N can be retrieved from the second data resource end B to match it with the second implicit association tag N'.

[0048] In the embodiments of this application, the terminal collaborates with the authentication and production devices to provide calculation parameters, and the association logic exists only in dynamic calculations. The parameters provided by the mobile smart terminal participate in the calculation of implicitly associated data tags, thereby authorizing access to and use of private data. Furthermore, important parameters are protected by a security chip, providing a double layer of security. This effectively enhances the security of private data resources. While knowing both non-private and private data resources, it is impossible to directly establish a correspondence between the two, thus preventing the possibility of inferring associated private data resources from non-private data resources.

[0049] In one embodiment of the present application, generating the first terminal tag parameter and the second terminal tag parameter based on the random secure prime number includes: Randomly generating a first terminal tag parameter, where the first terminal tag parameter is consistent in size with the random security prime number; The second terminal tag parameter is calculated based on the random secure prime number and the first terminal tag parameter.

[0050] Optionally, the target terminal can call a random number generation function to generate the first terminal tag parameter A1, where A1 is the same size as M (for example, if M is 2048 bits, A1 is also 2048 bits). Then, based on M and A1, the target terminal calculates the second server application resource tag parameter A2 = 2 A1 modM, and sends A2 to the authentication and production device through an encrypted channel, while storing A1 in the terminal security chip. In this process, A1, as the private parameter of the target terminal, ensures security by virtue of its true randomness and non-external transmission characteristics; the generation algorithm of A2 is the same as the generation algorithm of B2 (B2=2 B1 modM) are consistent and based on the same M, laying the foundation for the subsequent implicit association and interactive verification between the terminal and the authentication and production device. However, A1 is only stored by the target terminal. Without parameter A1 during the calculation process, it is impossible to establish a correspondence between non-private data resources and private data resources. After certificate-based authentication, the mobile smart terminal calls the calculation result of A1 to ensure that private data association and query operations are permitted by the terminal. Furthermore, the parameters A1 and A2 generated by the target terminal and B1 and B2 generated by the authentication and production device are calculated to ensure that the label N` negotiated by A1+B2 is consistent with the label N negotiated by A2+B1. The correspondence between non-private data resources and private data resources is established through implicitly associated data tags. Establishing a digital identity for data based on implicitly associated data tags can effectively confirm data ownership.

[0051] In one embodiment of the present application, when the identity authentication is passed, before sending a request for obtaining the implicitly associated data tag parameter to the authentication and production device, the process further includes: When identity authentication is required, obtaining an identity authentication request sent by the business application resource end; Sending a digital certificate acquisition request to the authentication and production device, wherein the digital certificate acquisition request includes identity information; The application digital certificate and user digital certificate sent by the authentication and production device are obtained, and the authentication and production device is authenticated based on the application digital certificate. At the same time, the authentication and production device is authenticated based on the user digital certificate.

[0052] Optionally, the authentication and production device can issue a digital certificate representing the application's identity based on the system name, IP address, CPU information, etc. of the application resource. The private key of the certificate is stored in the security chip of the authentication and production device and cannot be exported in plain text. When the target terminal initiates an access request, the accessed application may require the target terminal to perform identity authentication. At this time, the target terminal can locally query whether the terminal user has applied for a digital certificate through the SDK integrated in the business APP. If a digital certificate has been applied for, two-way identity authentication is performed directly. Otherwise, a digital certificate acquisition request can be sent to the authentication and production device. The request may include identity information. The authentication and production device queries the corresponding digital certificate based on the identity information and feeds it back to the target terminal. The target terminal can authenticate the authentication and production device based on the application digital certificate. At the same time, the authentication and production device authenticates the target terminal based on the user digital certificate. This achieves two-way identity authentication. After the authentication is passed, the authentication and production device can establish an encrypted transmission channel for transmitting relevant parameters to improve parameter security.

[0053] In the embodiments of this application, the terminal collaborates with the authentication and production devices to provide calculation parameters, and the association logic exists only in dynamic calculations. The parameters provided by the mobile smart terminal participate in the calculation of implicitly associated data tags, thereby authorizing access to and use of private data. Furthermore, important parameters are protected by a security chip, providing a double layer of security. This effectively enhances the security of private data resources. While knowing both non-private and private data resources, it is impossible to directly establish a correspondence between the two, thus preventing the possibility of inferring associated private data resources from non-private data resources.

[0054] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0055] Example 3: In one embodiment, a privacy protection device based on implicitly associated data identity is provided. The privacy protection device based on implicitly associated data identity corresponds one-to-one with the privacy protection method based on implicitly associated data identity in the first embodiment. Figure 5 As shown, the privacy protection device based on implicitly associated data identity includes a random security prime number generation unit 101, a server application resource tag parameter generation unit 102, a first data distribution unit 103 and a first data association unit 104. The functional modules are described in detail as follows: The random security prime number generating unit 101 is used for generating a random security prime number in response to an acquisition request for an implicitly associated data tag parameter when identity authentication is passed, and sending the random security prime number to a target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; The server application resource tag parameter generating unit 102 is configured to generate a first server application resource tag parameter and a second server application resource tag parameter based on the random secure prime number; A first data distribution unit 103 is configured to generate a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter, and forward the non-privacy business data to the first data resource end through the business application resource end, and forward the privacy data and the first implicit association tag to the second data resource end through the business application resource end; The first data association unit 104 is used to forward the second server-side application resource tag parameter to the target terminal through the business application resource end when performing business data association, so as to match the second implicit association tag calculated by the target terminal with the first implicit association tag through the business application resource end, and if the match is successful, associate the matched non-privacy data and privacy data, wherein the first implicit association tag is calculated using the second terminal tag parameter and the first server-side application resource tag parameter.

[0056] In one embodiment of the present application, the server-side application resource tag parameter generation unit 102 is further configured to: Randomly generating a first server-side application resource tag parameter, where the first server-side application resource tag parameter is consistent in size with the random security prime number; The second server-side application resource tag parameter is calculated based on the random security prime number and the first server-side application resource tag parameter.

[0057] In one embodiment of the present application, the first data association unit 104 is further configured to: Obtaining a query request sent by the business application resource end, wherein the query request includes a second server-side application resource tag parameter index; Based on the second server-side application resource tag parameter index, the second server-side application resource tag parameter is queried and obtained, and the first terminal tag parameter index and the second server-side application resource tag parameter are sent to the target terminal through the business application resource end, so that the target terminal obtains the first terminal tag parameter based on the first terminal tag parameter index query, and calculates the second implicit association tag based on the second server-side application resource tag parameter and the first terminal tag parameter, so that the business application resource end matches the second implicit association tag calculated by the target terminal with the first implicit association tag.

[0058] In one embodiment of the present application, the device further includes a first identity authentication unit, configured to: When identity authentication is required, obtaining a digital certificate acquisition request sent by the target terminal, the digital certificate acquisition request including identity information; Based on the identity information, the application digital certificate and user digital certificate corresponding to the target terminal are queried and sent to the target terminal, so that the target terminal performs identity authentication on the authentication and production device end based on the application digital certificate. At the same time, the authentication and production device end performs identity authentication on the target terminal based on the user digital certificate.

[0059] In the embodiments of this application, the terminal collaborates with the authentication and production devices to provide calculation parameters, and the association logic exists only in dynamic calculations. The parameters provided by the mobile smart terminal participate in the calculation of implicitly associated data tags, thereby authorizing access to and use of private data. Furthermore, important parameters are protected by a security chip, providing a double layer of security. This effectively enhances the security of private data resources. While knowing both non-private and private data resources, it is impossible to directly establish a correspondence between the two, thus preventing the possibility of inferring associated private data resources from non-private data resources.

[0060] For the specific limitations of the privacy protection device based on implicitly linked data identities, please refer to the limitations of the privacy protection method based on implicitly linked data identities above and will not be repeated here. The various modules in the aforementioned privacy protection device based on implicitly linked data identities can be implemented in whole or in part through software, hardware, or a combination thereof. Each of the aforementioned modules can be embedded in or independent of a processor in a computer device in hardware form, or can be stored in a memory in a computer device in software form, so that the processor can call and execute the corresponding operations of each of the aforementioned modules.

[0061] Example 4: In one embodiment, a privacy protection device based on implicitly associated data identity is provided. The privacy protection device based on implicitly associated data identity corresponds one-to-one with the privacy protection method based on implicitly associated data identity in the above-mentioned second embodiment. Figure 6 As shown, the privacy protection device based on implicitly associated data identity includes a tag parameter acquisition request sending unit 201, a terminal tag parameter generating unit 202, a second data distribution unit 203, a second implicit associated tag calculating unit 204, and a second data association unit 205. The functional modules are described in detail as follows: The tag parameter acquisition request sending unit 201 is configured to send an acquisition request for the implicitly associated data tag parameter to the authentication and production device end when identity authentication is passed, so as to obtain a random secure prime number generated by the authentication and production device end based on the acquisition request, wherein the authentication and production device end generates a first server-side application resource tag parameter and a second server-side application resource tag parameter based on the random secure prime number; The terminal tag parameter generating unit 202 is configured to generate a first terminal tag parameter and a second terminal tag parameter based on the random secure prime number; a second data distribution unit 203 configured to send the second terminal tag parameter and service data to the service application resource end, the service data including private data and non-private data, so as to forward the non-private service data to the first data resource end via the service application resource end, and to forward the private data and the first implicit association tag to the second data resource end via the service application resource end, wherein the first implicit association tag is calculated by the authentication and production device end based on the first server application resource tag parameter and the second terminal tag parameter; a second implicit association tag calculation unit 204, configured to obtain, when performing business data association, a second server application resource tag parameter sent by the authentication and production device, and calculate a second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter; The second data association unit 205 is used to send the second implicit association tag to the business application resource end so as to match the second implicit association tag with the first implicit association tag through the business application resource end. If the match is successful, the matched non-privacy data and privacy data are associated, wherein the second implicit association tag is calculated by the target terminal through the first terminal tag parameter and the second server application resource tag parameter.

[0062] In one embodiment of the present application, the terminal tag parameter generating unit 202 is further configured to: Randomly generating a first terminal tag parameter, where the first terminal tag parameter is consistent in size with the random security prime number; The second terminal tag parameter is calculated based on the random secure prime number and the first terminal tag parameter.

[0063] In one embodiment of the present application, the device further includes a second identity authentication unit, configured to: When identity authentication is required, obtaining an identity authentication request sent by the business application resource end; Sending a digital certificate acquisition request to the authentication and production device, wherein the digital certificate acquisition request includes identity information; The application digital certificate and user digital certificate sent by the authentication and production device are obtained, and the authentication and production device is authenticated based on the application digital certificate. At the same time, the authentication and production device is authenticated based on the user digital certificate.

[0064] In the embodiments of this application, the terminal collaborates with the authentication and production devices to provide calculation parameters, and the association logic exists only in dynamic calculations. The parameters provided by the mobile smart terminal participate in the calculation of implicitly associated data tags, thereby authorizing access to and use of private data. Furthermore, important parameters are protected by a security chip, providing a double layer of security. This effectively enhances the security of private data resources. While knowing both non-private and private data resources, it is impossible to directly establish a correspondence between the two, thus preventing the possibility of inferring associated private data resources from non-private data resources.

[0065] For the specific limitations of the privacy protection device based on implicitly linked data identities, please refer to the limitations of the privacy protection method based on implicitly linked data identities above and will not be repeated here. The various modules in the aforementioned privacy protection device based on implicitly linked data identities can be implemented in whole or in part through software, hardware, or a combination thereof. Each of the aforementioned modules can be embedded in or independent of a processor in a computer device in hardware form, or can be stored in a memory in a computer device in software form, so that the processor can call and execute the corresponding operations of each of the aforementioned modules.

[0066] Example 5 In one embodiment, a privacy protection system based on implicitly associated data identities is provided. The privacy protection system based on implicitly associated data identities includes the privacy protection apparatus based on implicitly associated data identities shown in the third and fourth embodiments above, and corresponds one-to-one with the privacy protection method based on implicitly associated data identities in the first and second embodiments above. Figure 7The device for privacy protection based on implicit linked data identity includes an implicit linked data tag authentication and production device (authentication and production device) 1000, an implicit linked data tag authentication and production device client SDK (target terminal) 2000, a business application resource terminal 3000, a first data resource terminal 4000, and a second data resource terminal 5000. The functional modules are described in detail as follows: The target terminal is used to send an acquisition request for implicitly associated data tag parameters to the authentication and production device; The authentication and production device generates a random security prime number based on the acquisition request and sends it to the target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; The authentication and production device generates a first server application resource tag parameter and a second server application resource tag parameter based on the random security prime number; The authentication and production device obtains the second terminal tag parameter sent by the target terminal, and generates a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter; The target terminal sends business data to the authentication and production device end, where the business data includes private data and non-private data. The authentication and production device end forwards the non-private business data to the first data resource end through the business application resource end, and forwards the private data and the first implicit association tag to the second data resource end through the business application resource end, where the first implicit association tag is calculated using the second terminal tag parameter and the first server application resource tag parameter. When the business application resource end performs business data association, the authentication and production device end forwards the second server application resource tag parameter to the target terminal through the business application resource end, so that the target terminal calculates a second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter; The target terminal sends the second implicit association tag to the service application resource end, so that the service application resource end matches the second implicit association tag with the first implicit association tag, and if the match is successful, associates the matched non-private data with the private data.

[0067] Optionally, the authentication and production device side issues an application digital certificate based on the application resource information, and the private key is stored in its security chip. When the target terminal initiates an application access request, it needs to submit a user digital certificate. If there is no certificate locally, it will apply to the authentication and production device side. After the certificate is issued, both parties complete two-way identity authentication based on the application and user certificate, and establish a TLS encrypted transmission channel. The target terminal applies to the authentication and production device side for the terminal implicitly associated data label parameters through the SDK. The authentication and production device side calls the WNG8 chip to generate a random secure prime number M and returns it to the SDK; the SDK locally generates the first terminal label parameter A1 and the second terminal label parameter A2, and transmits A2 to the authentication and production device side for storage; at the same time, the authentication and production device side generates the first server-side application resource label parameter B1 and the second server-side application resource label parameter B2, and stores B2 in the security chip. After the target terminal enters / collects data, it transmits the business data and A1 index via an encrypted channel to the business application resource end. The business application resource end stores the non-private data and the A1 and B2 indexes in the first data resource end A (the index is only used to locate the parameter and does not include the parameter itself), and simultaneously requests the first implicit association tag N from the authentication and production device end, and stores the private data and N in the second data resource end B. When local or third-party business applications apply for data statistics and association analysis, the business application resource end obtains the A1 and B2 indexes from the first data resource end A, and after querying B2 from the authentication and production device end, forwards it to the target terminal. The target terminal queries A1 through the SDK and calculates the second implicit association tag N`. After authorization, it transmits N` to the business application resource end. The business application resource end compares N` with the N in the second data resource end B. If it matches, it associates the corresponding data of data resources A and B and provides it to the applicant for subsequent analysis and processing.

[0068] It should be noted that the business application resource side is responsible for receiving business data transmitted by the terminal, coordinating the storage of non-private and private data, requesting implicit association tags from the authentication and production device side, processing local or third-party data analysis requests, and ultimately completing data association and providing results. It is the core execution vehicle for data flow and business logic. The first data resource side, A, is a non-private data repository. It primarily stores non-private business data that does not involve user sensitive information (such as publicly available business transaction numbers and basic operation records). It also stores the indexes of key indexes A1 (terminal private parameters) and B2 (server tag parameters) used for subsequent association. These indexes do not directly contain sensitive information and serve only as "address identifiers" for locating A1 and B2 during subsequent queries. They provide the basic location basis for associating non-private and private data. Because the stored content is non-private, the security requirements are lower than those of data resource B. The second data resource side, B, is a dedicated repository for private data. It specifically stores user sensitive information (such as personal identity information, medical records, financial account details, and other private data) and implicit association tags N (generated by the authentication and production device side based on A2 and B1). N is the "invisible bridge" connecting non-private data and private data. Private data cannot be directly accessed through N alone; it must be matched with the N' generated by the terminal to establish association. This design allows private data to be stored independently, reducing the risk of direct exposure and serving as a core storage medium for privacy protection.

[0069] In one embodiment, a computer device is provided. The computer device may be a terminal device, and its internal structure diagram may be as follows: Figure 8 As shown. The computer device includes a processor, a memory, and a network interface connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a readable storage medium. The readable storage medium stores computer-readable instructions. The network interface of the computer device is used to communicate with an external terminal via a network connection. When the computer-readable instructions are executed by the processor, a privacy protection method based on implicitly associated data identity is implemented. The readable storage medium provided in this embodiment includes a non-volatile readable storage medium and a volatile readable storage medium.

[0070] In an embodiment of the present application, a computer device is provided, including a memory, a processor, and computer-readable instructions stored in the memory and executable on the processor. When the processor executes the computer-readable instructions, the steps of the privacy protection method based on implicitly associated data identity as described above are implemented.

[0071] In an embodiment of the application, a readable storage medium is provided, which stores computer-readable instructions. When the computer-readable instructions are executed by a processor, the steps of the privacy protection method based on implicit associated data identity as described above are implemented.

[0072] Those skilled in the art will understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing related hardware through computer-readable instructions. The computer-readable instructions can be stored in a non-volatile readable storage medium or a volatile readable storage medium. When the computer-readable instructions are executed, they can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in many forms such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), Synchronous Link DRAM (SLDRAM), Rambus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0073] Those skilled in the art will clearly understand that for the sake of convenience and brevity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0074] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present application, and should all be included in the scope of protection of the present application.

Claims

1. A privacy protection method based on implicitly linked data identity, characterized in that: The method comprises: When the identity authentication is passed, in response to a request to obtain the implicitly associated data tag parameter, a random security prime number is generated and sent to the target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; Based on the random secure prime number, generate a first server application resource tag parameter and a second server application resource tag parameter; Generate a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter, forward the non-privacy business data to the first data resource end through the business application resource end, and forward the privacy data and the first implicit association tag to the second data resource end through the business application resource end; When business data association is performed, the second server-side application resource tag parameter is forwarded to the target terminal through the business application resource end, so that the second implicit association tag calculated by the target terminal is matched with the first implicit association tag through the business application resource end. If the match is successful, the matched non-privacy data and privacy data are associated, wherein the first implicit association tag is calculated through the second terminal tag parameter and the first server-side application resource tag parameter.

2. The privacy protection method based on implicitly associated data identity according to claim 1, characterized in that: The generating of a first server application resource tag parameter and a second server application resource tag parameter based on the random secure prime number includes: Randomly generating a first server-side application resource tag parameter, where the first server-side application resource tag parameter is consistent in size with the random security prime number; The second server-side application resource tag parameter is calculated based on the random security prime number and the first server-side application resource tag parameter.

3. The privacy protection method based on implicitly associated data identity according to claim 1, characterized in that: The forwarding the second server application resource tag parameter to the target terminal through the service application resource end, so as to match the second implicit association tag calculated by the target terminal with the first implicit association tag through the service application resource end, includes: Obtaining a query request sent by the business application resource end, wherein the query request includes a second server-side application resource tag parameter index; Based on the second server-side application resource tag parameter index, the second server-side application resource tag parameter is queried and obtained, and the first terminal tag parameter index and the second server-side application resource tag parameter are sent to the target terminal through the business application resource end, so that the target terminal obtains the first terminal tag parameter based on the first terminal tag parameter index query, and calculates the second implicit association tag based on the second server-side application resource tag parameter and the first terminal tag parameter, so that the business application resource end matches the second implicit association tag calculated by the target terminal with the first implicit association tag.

4. The privacy protection method based on implicitly associated data identity according to any one of claims 1 to 3, characterized in that: When the identity authentication is passed, before responding to the request for obtaining the implicitly associated data tag parameter, the method includes: When identity authentication is required, obtaining a digital certificate acquisition request sent by the target terminal, the digital certificate acquisition request including identity information; Based on the identity information, the application digital certificate and user digital certificate corresponding to the target terminal are queried and sent to the target terminal, so that the target terminal performs identity authentication on the authentication and production device end based on the application digital certificate. At the same time, the authentication and production device end performs identity authentication on the target terminal based on the user digital certificate.

5. A privacy protection method based on implicitly linked data identity, characterized in that: The method comprises: When the identity authentication is passed, sending an acquisition request for the implicitly associated data tag parameter to the authentication and production device end to obtain a random security prime number generated by the authentication and production device end based on the acquisition request, wherein the authentication and production device end generates a first server-side application resource tag parameter and a second server-side application resource tag parameter based on the random security prime number; Based on the random secure prime number, generating a first terminal tag parameter and a second terminal tag parameter; Sending the second terminal tag parameter and business data to the business application resource end, the business data including private data and non-private data, so that the non-private business data is forwarded to the first data resource end through the business application resource end, and the private data and the first implicit association tag are forwarded to the second data resource end through the business application resource end, wherein the first implicit association tag is calculated by the authentication and production device end based on the first server application resource tag parameter and the second terminal tag parameter; When performing business data association, obtaining a second server application resource tag parameter sent by the authentication and production device, and calculating a second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter; The second implicit association tag is sent to the business application resource end to match the second implicit association tag with the first implicit association tag through the business application resource end, wherein the second implicit association tag is calculated by the target terminal through the first terminal tag parameter and the second server application resource tag parameter.

6. The privacy protection method based on implicitly associated data identity according to claim 5, characterized in that: The generating of the first terminal tag parameter and the second terminal tag parameter based on the random secure prime number includes: Randomly generating a first terminal tag parameter, where the first terminal tag parameter is consistent in size with the random security prime number; The second terminal tag parameter is calculated based on the random secure prime number and the first terminal tag parameter.

7. The privacy protection method based on implicitly associated data identity according to claim 5 or 6, characterized in that: When the identity authentication is passed, before sending a request for obtaining the implicitly associated data tag parameter to the authentication and production device, the method further includes: When identity authentication is required, obtaining an identity authentication request sent by the business application resource end; Sending a digital certificate acquisition request to the authentication and production device, wherein the digital certificate acquisition request includes identity information; The application digital certificate and user digital certificate sent by the authentication and production device are obtained, and the authentication and production device is authenticated based on the application digital certificate. At the same time, the authentication and production device is authenticated based on the user digital certificate.

8. A privacy protection device based on implicit associated data identity, characterized in that: The device comprises: A random security prime number generating unit is configured to generate a random security prime number in response to an acquisition request for an implicitly associated data tag parameter when identity authentication is passed, and send the random security prime number to a target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; A server application resource label parameter generating unit, configured to generate a first server application resource label parameter and a second server application resource label parameter based on the random secure prime number; a first data distribution unit, configured to generate a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter, and forward the non-privacy business data to the first data resource end through the business application resource end, and forward the privacy data and the first implicit association tag to the second data resource end through the business application resource end; The first data association unit is used to forward the second server-side application resource tag parameter to the target terminal through the business application resource end when performing business data association, so as to match the second implicit association tag calculated by the target terminal with the first implicit association tag through the business application resource end; if the match is successful, the matched non-privacy data and the privacy data are associated, wherein the first implicit association tag is calculated using the second terminal tag parameter and the first server-side application resource tag parameter.

9. A privacy protection device based on implicitly associated data identity, characterized in that: The device comprises: a tag parameter acquisition request sending unit, configured to, when identity authentication is passed, send an acquisition request for the implicitly associated data tag parameter to the authentication and production device end, so as to obtain a random secure prime number generated by the authentication and production device end based on the acquisition request, wherein the authentication and production device end generates a first server-side application resource tag parameter and a second server-side application resource tag parameter based on the random secure prime number; A terminal tag parameter generating unit, configured to generate a first terminal tag parameter and a second terminal tag parameter based on the random secure prime number; a second data distribution unit, configured to send the second terminal tag parameter and business data to a business application resource end, the business data including private data and non-private data, so as to forward the non-private business data to the first data resource end via the business application resource end, and to forward the private data and a first implicit association tag to the second data resource end via the business application resource end, wherein the first implicit association tag is calculated by the authentication and production device end based on the first server application resource tag parameter and the second terminal tag parameter; a second implicit association tag calculation unit, configured to obtain, when performing business data association, a second server application resource tag parameter sent by the authentication and production device, and calculate a second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter; A second data association unit is used to send the second implicit association tag to the business application resource end, so as to match the second implicit association tag with the first implicit association tag through the business application resource end; if the match is successful, the matched non-privacy data and the privacy data are associated, wherein the second implicit association tag is calculated by the target terminal through the first terminal tag parameter and the second server application resource tag parameter.

10. A privacy protection system based on implicit linked data identity, characterized in that: The system comprises: The target terminal is used to send a request for obtaining implicitly associated data tag parameters to the authentication and production device; The authentication and production device generates a random security prime number based on the acquisition request and sends it to the target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; The authentication and production device generates a first server application resource tag parameter and a second server application resource tag parameter based on the random security prime number; The authentication and production device obtains the second terminal tag parameter sent by the target terminal, and generates a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter; The target terminal sends business data to the authentication and production device end, where the business data includes private data and non-private data. The authentication and production device end forwards the non-private business data to the first data resource end through the business application resource end, and forwards the private data and the first implicit association tag to the second data resource end through the business application resource end, where the first implicit association tag is calculated using the second terminal tag parameter and the first server application resource tag parameter. When the business application resource end performs business data association, the authentication and production device end forwards the second server application resource tag parameter to the target terminal through the business application resource end, so that the target terminal calculates a second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter; The target terminal sends the second implicit association tag to the service application resource end, so that the service application resource end matches the second implicit association tag with the first implicit association tag, and if the match is successful, associates the matched non-private data with the private data.

Images