Privacy protection method, device and system based on implicit association data identity

Abstract

The application discloses a privacy protection method, device and system based on implicit association data identity, and a method thereof, comprising: when identity authentication is passed, in response to an acquisition request for an implicit association data label parameter, a random security prime number is generated, a target terminal and an authentication and manufacturing device end generate corresponding label parameters based on the random security prime number respectively, and the authentication and manufacturing device end and the target terminal can generate an implicit association label through different label parameters for matching, and if the matching is successful, the association between privacy data and non-privacy data can be established. The parameters provided by the terminal are used in the calculation of the implicit association data label, so that the authorization effect of privacy data access and use is realized. The security of the privacy data resource is effectively improved, even if the non-privacy data resource and the privacy data resource are mastered, the corresponding relationship between the two kinds of data resources cannot be directly established, and the possibility of deducing the associated privacy data resource through the non-privacy data resource is avoided.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data security, and particularly relates to a privacy protection method, device and system based on implicit association data identity. BACKGROUND

[0002] With the rapid development of mobile communication technology, wireless network and mobile intelligent terminal equipment, mobile application has penetrated into mobile financial payment, mobile collaborative office, mobile government service and other industries. The electronic and data application mode has built an efficient and smooth mobile Internet application system, which has significantly improved the office and service efficiency in various fields of society.

[0003] However, while providing convenient services, mobile application also brings serious risks of personal privacy information security. In the above business scenarios, users need to submit a large amount of personal sensitive data to the business application system of the third-party platform, including mobile phone number, mobile device identification code, location information, consumption record, account password and the like. The privacy protection of such data highly depends on the security mechanism of the third-party platform. Once the platform security protection system is broken, a large amount of public privacy information will be at risk of leakage.

[0004] At present, the protection of personal privacy data mainly depends on the data security mechanism of the third-party platform. The platform stores the data fields submitted by the user and processes them according to the table query when using. In order to reduce the risk of privacy data leakage, some platforms use the table storage strategy: non-private data is stored in the main table, and private data (such as identity information and biological characteristics) is separated from the core business table and stored in the association table. The main table and the association table are associated through a unique identifier (such as user ID). This method can avoid direct exposure of private data in the core table. Even if the core table is invaded, the attacker will find it difficult to misuse the data because he cannot directly obtain the sensitive information in the association table. If the association table is obtained alone, the information will be invalid because the data cannot be directly associated with the user identity. This design improves the difficulty of "breaking multiple tables and establishing association" attack, and to some extent, reduces the risk of privacy leakage.

[0005] In addition, the table storage strategy also plays a role in the data utilization and sharing scenarios: for example, in the medical field, the real identity information of the patient is generated after being desensitized to generate a unique identifier, which is stored in the association table together with the desensitized medical record data. This supports data analysis based on the identifier within the medical institution, and protects the privacy of patients. In the sharing of multi-party data, different institutions can establish an association table based on a unified identification rule, and only share the desensitized association data, so as to promote the circulation of data on the premise of ensuring privacy security.

[0006] But need to note that the existing sub-table storage mechanism still takes the third party platform itself security protection as the core, and gets the associated identifier, and the main data table, the privacy data table, through the combination of the data of multiple tables based on the associated identifier, the privacy data carrying the user identity can be restored, causing personal privacy leakage, so the privacy data still exists the risk of being stolen and associated abuse, the security and reliability of personal privacy protection still have room for improvement. SUMMARY

[0007] Based on this, it is necessary to provide a privacy protection method, device and system based on implicit associated data identity to solve at least one problem existing in the above-mentioned prior art.

[0008] In a first aspect, a privacy protection method based on implicit associated data identity is provided, comprising:

[0009] When the identity authentication is passed, in response to an acquisition request for an implicit associated data tag parameter, a random secure prime number is generated and sent to a target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random secure prime number;

[0010] Based on the random secure prime number, a first server application resource tag parameter and a second server application resource tag parameter are generated;

[0011] Based on the second terminal tag parameter and the first server application resource tag parameter, a first implicit association tag is generated, and non-private business data is forwarded to a first data resource end through a business application resource end, and private data and the first implicit association tag are forwarded to a second data resource end through the business application resource end;

[0012] When the business data association is performed, the second server application resource tag parameter is forwarded to the target terminal through the business application resource end, so that the target terminal calculates the second implicit association tag, and the first implicit association tag is matched through the business application resource end, if the matching is successful, the matching non-private data and private data are associated, wherein the first implicit association tag is calculated through the second terminal tag parameter and the first server application resource tag parameter.

[0013] In a possible implementation, the generating of the first server application resource tag parameter and the second server application resource tag parameter based on the random secure prime number comprises:

[0014] The first server application resource tag parameter is randomly generated, and the first server application resource tag parameter is consistent with the random secure prime number in size;

[0015] calculating the second service-side application resource tag parameter based on the random secure prime number and the first service-side application resource tag parameter.

[0016] In a possible implementation, the forwarding of the second service-side application resource tag parameter to the target terminal through the service application resource end includes:

[0017] obtaining a query request sent by the service application resource end, the query request including a second service-side application resource tag parameter index;

[0018] querying the second service-side application resource tag parameter based on the second service-side application resource tag parameter index, and sending the first terminal tag parameter index and the second service-side application resource tag parameter to the target terminal through the service application resource end, so that the target terminal queries the first terminal tag parameter based on the first terminal tag parameter index, and calculates a second implicit association tag based on the second service-side application resource tag parameter and the first terminal tag parameter, for matching the second implicit association tag calculated by the target terminal with the first implicit association tag by the service application resource end.

[0019] In a possible implementation, the obtaining of the acquisition request for the implicit association data tag parameter before the identity authentication passes includes:

[0020] when identity authentication is needed, obtaining a digital certificate acquisition request sent by the target terminal, the digital certificate acquisition request including identity information;

[0021] querying an application digital certificate and a user digital certificate corresponding to the target terminal based on the identity information, and sending the application digital certificate and the user digital certificate to the target terminal, so that the target terminal performs identity authentication on the authentication and manufacturing device end based on the application digital certificate, and the authentication and manufacturing device end performs identity authentication on the target terminal based on the user digital certificate.

[0022] In a second aspect, a privacy protection method based on implicit association data identity is provided, and the method includes:

[0023] when identity authentication passes, sending an acquisition request for an implicit association data tag parameter to an authentication and manufacturing device end, to obtain a random secure prime number generated by the authentication and manufacturing device end based on the acquisition request, wherein the authentication and manufacturing device end generates a first service-side application resource tag parameter and a second service-side application resource tag parameter based on the random secure prime number;

[0024] generate a first terminal tag parameter and a second terminal tag parameter based on the random secure prime number;

[0025] send the second terminal tag parameter and service data to the service application resource end, the service data including privacy data and non-privacy data, to forward non-privacy service data to the first data resource end through the service application resource end and forward privacy data and a first implicit association tag to the second data resource end through the service application resource end, wherein the first implicit association tag is calculated by the authentication and manufacturing device end based on the first service end application resource tag parameter and the second terminal tag parameter;

[0026] when performing service data association, obtain the second service end application resource tag parameter sent by the authentication and manufacturing device end, and calculate a second implicit association tag based on the second service end application resource tag parameter and the first terminal tag parameter;

[0027] send the second implicit association tag to the service application resource end to match the second implicit association tag with the first implicit association tag through the service application resource end, and if the matching is successful, associate the matched non-privacy data and privacy data, wherein the second implicit association tag is calculated by a target terminal based on the first terminal tag parameter and the second service end application resource tag parameter.

[0028] In a possible implementation, the generating a first terminal tag parameter and a second terminal tag parameter based on the random secure prime number comprises:

[0029] randomly generating a first terminal tag parameter, the first terminal tag parameter being consistent with the random secure prime number in size;

[0030] calculating the second terminal tag parameter based on the random secure prime number and the first terminal tag parameter.

[0031] In a possible implementation, before the sending, to the authentication and manufacturing device end, of an acquisition request for an implicit association data tag parameter when identity authentication is passed, the method further comprises:

[0032] when identity authentication is needed, obtaining an identity authentication request sent by the service application resource end;

[0033] sending a digital certificate acquisition request to the authentication and manufacturing device end, the digital certificate acquisition request including identity information;

[0034] Obtain the application digital certificate and the user digital certificate sent by the authentication and manufacturing device end, perform identity authentication on the authentication and manufacturing device end based on the application digital certificate, and meanwhile, the authentication and manufacturing device end performs identity authentication on the target terminal based on the user digital certificate.

[0035] In a third aspect, a privacy protection device based on implicit association data identity is provided, which comprises:

[0036] A random secure prime number generating unit is configured to, when the identity authentication is passed, generate a random secure prime number in response to an acquisition request for an implicit association data label parameter, and send the random secure prime number to the target terminal, so that the target terminal generates a first terminal label parameter and a second terminal label parameter based on the random secure prime number.

[0037] A server application resource label parameter generating unit is configured to generate a first server application resource label parameter and a second server application resource label parameter based on the random secure prime number.

[0038] A first data distributing unit is configured to generate a first implicit association label based on the second terminal label parameter and the first server application resource label parameter, forward non-private service data to a first data resource end through a service application resource end, and forward private data and the first implicit association label to a second data resource end through the service application resource end, wherein the first implicit association label is calculated based on the second terminal label parameter and the first server application resource label parameter.

[0039] A first data associating unit is configured to, when performing service data association, forward the second server application resource label parameter to the target terminal through the service application resource end, so as to match the second implicit association label calculated by the target terminal with the first implicit association label through the service application resource end, and if the matching is successful, associate the matched non-private data and private data.

[0040] In a fourth aspect, a privacy protection device based on implicit association data identity is provided, which comprises:

[0041] A label parameter acquisition request sending unit is configured to, when the identity authentication is passed, send an acquisition request for an implicit association data label parameter to an authentication and manufacturing device end, so as to obtain a random secure prime number generated by the authentication and manufacturing device end based on the acquisition request, wherein the authentication and manufacturing device end generates a first server application resource label parameter and a second server application resource label parameter based on the random secure prime number.

[0042] a terminal label parameter generating unit configured to generate a first terminal label parameter and a second terminal label parameter based on the random secure prime number;

[0043] a second data distributing unit configured to send the second terminal label parameter and service data to the service application resource end, the service data including privacy data and non-privacy data, so as to forward the non-privacy service data to the first data resource end through the service application resource end, and forward the privacy data and the first implicit association label to the second data resource end through the service application resource end, wherein the first implicit association label is calculated by the authentication and manufacturing device end based on the first service end application resource label parameter and the second terminal label parameter;

[0044] a second implicit association label calculating unit configured to, when performing service data association, acquire the second service end application resource label parameter sent by the authentication and manufacturing device end, and calculate a second implicit association label based on the second service end application resource label parameter and the first terminal label parameter;

[0045] a second data associating unit configured to send the second implicit association label to the service application resource end, so as to match the second implicit association label with the first implicit association label through the service application resource end, and if the matching is successful, associate the matched non-privacy data and privacy data, wherein the second implicit association label is calculated by the target terminal based on the first terminal label parameter and the second service end application resource label parameter.

[0046] In a fifth aspect, a privacy protection system based on implicit association data identity is provided, comprising:

[0047] a target terminal configured to send an acquisition request for an implicit association data label parameter to the authentication and manufacturing device end;

[0048] the authentication and manufacturing device end generates a random secure prime number based on the acquisition request, and sends the random secure prime number to the target terminal, so that the target terminal generates a first terminal label parameter and a second terminal label parameter based on the random secure prime number;

[0049] the authentication and manufacturing device end generates a first service end application resource label parameter and a second service end application resource label parameter based on the random secure prime number;

[0050] the authentication and manufacturing device end acquires the second terminal label parameter sent by the target terminal, and generates a first implicit association label based on the second terminal label parameter and the first service end application resource label parameter;

[0051] The target terminal sends service data to the authentication and manufacturing device end, the service data includes privacy data and non-privacy data, the authentication and manufacturing device end forwards non-privacy service data to the first data resource end through the service application resource end, and forwards privacy data and the first implicit association label to the second data resource end through the service application resource end;

[0052] When the service application resource end performs service data association, the authentication and manufacturing device end forwards the second service end application resource label parameter to the target terminal through the service application resource end, so that the target terminal calculates a second implicit association label based on the second service end application resource label parameter and the first terminal label parameter;

[0053] The target terminal sends the second implicit association label to the service application resource end, so that the service application resource end matches the second implicit association label with the first implicit association label, and if the matching is successful, the matched non-privacy data and privacy data are associated, wherein the authentication and manufacturing device end calculates the first implicit association label through the second terminal label parameter and the first service end application resource label parameter, and stores it in the second data resource end.

[0054] The privacy protection method, device and system based on the implicit association data identity, the method comprises the following steps: when the identity authentication is passed, in response to an acquisition request for an implicit association data label parameter, a random security prime number is generated and sent to a target terminal, so that the target terminal generates a first terminal label parameter and a second terminal label parameter based on the random security prime number; a first server application resource label parameter and a second server application resource label parameter are generated based on the random security prime number; a first implicit association label is generated based on the second terminal label parameter and the first server application resource label parameter, and non-private business data is forwarded to a first data resource end through a business application resource end, and private data and the first implicit association label are forwarded to a second data resource end through the business application resource end; when business data association is performed, the second server application resource label parameter is forwarded to the target terminal through the business application resource end, so that the target terminal calculates a second implicit association label, and the second implicit association label is matched with the first implicit association label through the business application resource end, if the matching is successful, the matched non-private business data and private data are associated, wherein the first implicit association label is calculated based on the second terminal label parameter and the first server application resource label parameter. In the embodiment of the application, the calculation parameters are provided by the terminal and the authentication and manufacturing device end, and the association logic only exists in dynamic calculation. The parameters provided by the mobile intelligent terminal participate in the calculation of the implicit association data label, so that the access and use authorization of the private data is achieved. Important parameters are protected by a security chip, forming double security protection. The security of the private data resource is effectively improved, and the corresponding relationship between the non-private data resource and the private data resource cannot be directly established on the premise of mastering the non-private data resource and the private data resource, so that the possibility of deriving the associated private data resource from the non-private data resource is avoided. BRIEF DESCRIPTION OF DRAWINGS

[0055] In order to more clearly illustrate the technical solutions of the embodiments of the application, the following will briefly introduce the drawings needed to be used in the description of the embodiments of the application. Obviously, the drawings in the following description are only some embodiments of the application, and other drawings can be obtained by those skilled in the art without creative labor.

[0056] Figure 1 is an application environment diagram of the privacy protection method based on the implicit association data identity in an embodiment of the application;

[0057] Figure 2 is an interaction timing diagram of the privacy protection method based on the implicit association data identity in an embodiment of the application;

[0058] Figure 3is a flowchart of a privacy protection method based on implicit association data identity in an embodiment of the present application Figure 1 ;

[0059] Figure 4 is a flowchart of a privacy protection method based on implicit association data identity in an embodiment of the present application Figure 2 ;

[0060] Figure 5 is a structural diagram of a privacy protection device based on implicit association data identity in an embodiment of the present application Figure 1 ;

[0061] Figure 6 is a structural diagram of a privacy protection device based on implicit association data identity in an embodiment of the present application Figure 2 ;

[0062] Figure 7 is a structural diagram of a privacy protection system based on implicit association data identity in an embodiment of the present application

[0063] Figure 8 is a schematic diagram of a computer device in an embodiment of the present application. DETAILED DESCRIPTION

[0064] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some of the embodiments of the present application, but not all the embodiments of the present application. Based on the embodiments in the present application, all the other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of protection of the present application.

[0065] The privacy protection method based on implicit association data identity provided in the embodiments of the present application can be applied in an application environment such as Figure 1 application environment, which includes an implicit association data label authentication and manufacturing device end, an implicit association data label authentication and manufacturing device end client SDK, a business application resource end, and a data resource end (the data resource end includes a first data resource end and a second data resource end, and is respectively used for storing private data and non-private data).

[0066] The implicit association data tag authentication and manufacturing device end 1000 (hereinafter referred to as the authentication and manufacturing device end) comprises a processor 1001, a memory 1002, a network interface 1003, a security chip interface 1004 and a storage interface 1005, and is connected with a security chip 1006 through the security chip interface. The security chip comprises a security control chip, a security calculation chip, a double-physical-noise-source chip and a non-volatile memory FLASH chip, and is used for generating, calculating and storing security parameters of the implicit association data tag. The storage is installed with an operating system 1007, and comprises a certificate issuing module, a certificate authentication module, a secure transmission module, an implicit association data tag manufacturing module and an implicit association data tag management module, and is used for certificate issuing and authentication with a mobile intelligent terminal, TLS connection establishment in a transmission process, and business processing related to implicit association data tag manufacturing and management.

[0067] The implicit association data tag authentication and manufacturing device end client SDK 2000 (hereinafter referred to as the target terminal) comprises a security SDK software integrated with a mobile intelligent terminal business APP and matched with the implicit association data tag authentication and manufacturing device end. The security SDK software is applied by being integrated with the business APP, and provides functions such as implicit association data tag calculation, implicit association data tag parameter management, user certificate application, user certificate management, random number generation, TLS connection establishment in a transmission process, and API service for the business APP. The target terminal comprises, but is not limited to, various personal computers, notebook computers, smart phones, tablet computers and portable wearable devices.

[0068] Embodiment one,

[0069] In an embodiment, as shown in Figure 2 , a privacy protection method based on implicit association data identity is provided, as shown in Figure 3 , an interaction timing diagram of the privacy protection method based on implicit association data identity is provided, and the method is applied to the authentication and manufacturing device end in Figure 1 , and the method comprises the following steps:

[0070] In step S110, when the identity authentication is passed, a random security prime number is generated in response to an acquisition request for an implicit association data tag parameter, and is sent to a target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number.

[0071] Optionally, if the target terminal initiates an application access request, the target terminal and the authentication and manufacturing device can perform mutual identity authentication, that is, the target terminal performs identity authentication on the authentication and manufacturing device based on the application digital certificate of the authentication and manufacturing device, and the authentication and manufacturing device performs identity authentication on the target terminal based on the user digital certificate of the target terminal, if the identity authentication is passed, the authentication and manufacturing device can call a chip for generating a true random number sequence, such as a WNG8 physical noise source chip to generate a random security prime number M, M can be selected as 2048 bits, 3072 bits or 4096 bits, the higher the bit number, the higher the encryption strength, and the more difficult to crack. Then the random security prime number M is returned to the SDK (Software Development Kit, a tool package integrated in the terminal APP, responsible for processing encryption, authentication and other underlying logic) integrated in the target terminal APP.

[0072] At this time, the SDK can call a random number generation function to generate a first terminal label parameter A1, A1 is consistent with M in size (for example, M is 2048 bits, and A1 is also 2048 bits), and the SDK locally calculates a second terminal label parameter: A2=2 A1 Finally, the SDK provides A2 to the authentication and manufacturing device through the business APP, and A1 is stored in the target terminal locally (such as the security chip, encrypted storage area of the terminal), the parameter A1 is only saved by the mobile intelligent terminal locally, and is not transmitted externally; if A1 is not mastered, a third party cannot reverse the corresponding relationship between non-private data and private data through other parameters, and by calling the calculation result of A1 based on the certificate authentication of the mobile intelligent terminal, it is ensured that the private data association and query operation is an allowed behavior by the terminal.

[0073] It should be noted that the authentication and manufacturing device end can also build a TLS (Transport Layer Security, Transport Layer Security) encrypted transmission channel. The process of building an encrypted channel by TLS mainly includes two key stages of handshake and transmission. In the handshake stage, both parties first negotiate the protocol version and encryption suite, and exchange random numbers. These random numbers will provide important assistance for the generation of subsequent session keys. Next, two-way identity authentication is completed by means of digital certificates. The communication parties verify the legitimacy of each other's identity, just like showing "identity cards" to each other, to ensure that the intended legal object participates in the communication. Then, based on the exchanged random numbers, key information in the certificate, and other information, a session key valid only for this session is generated. In the transmission stage, both parties use the generated session key to symmetrically encrypt the transmission data, and add a message authentication code (MAC). This is like adding a "password lock" and a "anti-fake mark" to the data. The receiving party can obtain accurate data and judge whether the data has been tampered with by decrypting and checking the MAC. This series of operations enables TLS to effectively realize the confidentiality, integrity and identity credibility of data transmission, thereby protecting the security of related parameter transmission.

[0074] In step S120, based on the random security prime number, a first service end application resource tag parameter and a second service end application resource tag parameter are generated;

[0075] Optionally, the authentication and manufacturing device end can call a chip that generates a true random number sequence, such as a WNG8 physical noise source chip, to generate the first service end application resource tag parameter B1. B1 is consistent in size with M (for example, M is 2048 bits, and B1 is also 2048 bits). Then, the second service end application resource tag parameter B2 = 2B1 mod M can be calculated based on M and B1 (the algorithm is logically symmetrical to the terminal side A2, and provides a unified calculation benchmark for the generation of subsequent implicit association tags), and B2 is stored in a secure chip (the secure chip has physical tamper-proofing characteristics, and can prevent B2 from being illegally read or tampered with).

[0076] In step S130, a first implicit association tag is generated based on the second terminal tag parameter and the first service end application resource tag parameter, non-private business data is forwarded to the first data resource end through the business application resource end, and private data and the first implicit association tag are forwarded to the second data resource end through the business application resource end;

[0077] Optionally, the target terminal can enter / acquire business data through the business APP, and then transmit the obtained business data and A1 index to the business application resource end through the TLS encryption transmission channel of the authentication and manufacturing device end. The business application resource end can transmit the non-private data and the indexes of A1 and B2 to the first data resource end A, and the first data resource end A stores the non-private data and the indexes of the related parameters A1 and B2 for calculating the implicit association label. The business application resource end can apply to the authentication and manufacturing device end for calculating the first implicit association label N, and the authentication and manufacturing device end can calculate the first implicit association label N of the business data according to the stored B1 and A2, N=A2 B1 modM, and return the first implicit association label N to the business application resource end. Then, the business application resource end can send the private data and the first implicit association label N to the second data resource end B for storage.

[0078] In step S140, when the business data is associated, the second service end application resource label parameter is forwarded to the target terminal through the business application resource end, so that the second implicit association label calculated by the target terminal is matched with the first implicit association label through the business application resource end. If the matching is successful, the matched non-private data and private data are associated, wherein the first implicit association label is calculated through the second terminal label parameter and the first service end application resource label parameter.

[0079] Optionally, when the local or third-party business application applies to the business application resource end for data statistics and association analysis on the stored business data, based on the request of the business application resource end, the authentication and manufacturing device end returns the second service end application resource label parameter B2 to the business application resource end. At this time, the application resource end can request the second implicit association label N` from the target terminal, N`=B2 A1 modM. The business application resource end can apply for data association, match N` with the first implicit association label N stored by the second data resource end B, and if the matching is inconsistent, refuse the data association. If the matching is consistent, return the consistent private data record. Through the business application resource end, the consistent data is associated with the data of the first data resource end A to form complete data. In addition, the business application resource end can also provide the associated data locally or to a third party, and perform subsequent data analysis and processing on the associated data. By separating the implicit association data labels of the private data and the non-private data, the problem of data association through the association labels is effectively avoided, and the risk of data leakage is reduced.

[0080] The embodiment of the present application provides a privacy protection method based on implicit association data identity, comprising the following steps: when identity authentication is passed, in response to an acquisition request for an implicit association data label parameter, a random security prime number is generated and sent to a target terminal, so that the target terminal generates a first terminal label parameter and a second terminal label parameter based on the random security prime number; a first server application resource label parameter and a second server application resource label parameter are generated based on the random security prime number; a first implicit association label is generated based on the second terminal label parameter and the first server application resource label parameter, and non-private service data is forwarded to a first data resource end through a service application resource end, and private data and the first implicit association label are forwarded to a second data resource end through the service application resource end; when service data association is performed, the second server application resource label parameter is forwarded to the target terminal through the service application resource end, so that the target terminal calculates a second implicit association label, and the second implicit association label is matched with the first implicit association label through the service application resource end, if the matching is successful, the matched non-private data and private data are associated, wherein the first implicit association label is calculated through the second terminal label parameter and the first server application resource label parameter. In the embodiment of the present application, the computing parameters are provided by the terminal and the authentication and manufacturing device end cooperatively, and the association logic only exists in dynamic calculation. The parameters provided by the mobile intelligent terminal participate in the calculation of the implicit association data label, so that the effect of access and use authorization of the private data is achieved. And important parameters are protected by a security chip, forming double security protection. The security of the private data resource is effectively improved, on the premise of mastering non-private data resources and private data resources, the corresponding relationship between the two kinds of data resources cannot be directly established, and the possibility of deducing the associated private data resource through the non-private data resource is avoided.

[0081] In an embodiment of the present application, the first server application resource label parameter and the second server application resource label parameter are generated based on the random security prime number, comprising:

[0082] The first server application resource label parameter is randomly generated, and the first server application resource label parameter is consistent with the random security prime number in size;

[0083] The second server application resource label parameter is calculated based on the random security prime number and the first server application resource label parameter.

[0084] Optionally, the authentication and manufacturing device end can call a chip that generates a true random number sequence, such as a WNG8 physical noise source chip, to generate a first server application resource tag parameter B1, which is the same size as M (for example, M is 2048 bits, and B1 is also 2048 bits). Then, the authentication and manufacturing device end calculates a second server application resource tag parameter B2 = 2 B1 modM based on M and B1, and stores B2 in a secure chip (only when an authenticated association request is received, the B2 is called through an encrypted interface). In this process, B1 is a private parameter of the authentication and manufacturing device end, like the terminal's A1, which guarantees security by virtue of the true random characteristics and the feature of not being transmitted externally; the generation algorithm of B2 is consistent with that of the terminal A2 (A2 = 2 A1 modM), and is based on the same M, which lays a foundation for subsequent establishment of implicit association and interactive verification between the terminal and the authentication and manufacturing device end, and storing B2 in a secure chip further ensures that it cannot be illegally obtained or tampered with through hardware-level protection. Moreover, the parameters A1 and A2 generated by the target terminal and the parameters B1 and B2 generated by the authentication and manufacturing device end are calculated to make the label N` negotiated by A1+B2 consistent with the label N negotiated by A2+B1, and the corresponding relationship between the non-private data resource and the private data resource is established through the implicit association data label.

[0085] In an embodiment of the present application, the second server application resource tag parameter is forwarded to the target terminal through the business application resource end, so that the second implicit association label calculated by the target terminal is matched with the first implicit association label through the business application resource end, including:

[0086] Obtaining a query request sent by the business application resource end, the query request including a second server application resource tag parameter index;

[0087] Based on the second server application resource tag parameter index, the second server application resource tag parameter is queried, and the first terminal tag parameter index and the second server application resource tag parameter are sent to the target terminal through the business application resource end, so that the target terminal queries the first terminal tag parameter based on the first terminal tag parameter index, and calculates the second implicit association label based on the second server application resource tag parameter and the first terminal tag parameter, so that the business application resource end matches the second implicit association label calculated by the target terminal with the first implicit association label.

[0088] Optionally, when the local or third-party business application applies to the business application resource end for data statistics and correlation analysis on the stored business data, the business application resource end can query the A1 and B2 indexes associated with the business data to the first data resource end A, and then forward the queried A1 and B2 indexes to the authentication and manufacturing device end. The authentication and manufacturing device end queries the B2 stored in the security chip according to the B2 index, and returns the queried B2 to the business application resource end. At this time, the business application resource end can forward the queried B2 and A1 index to the target terminal business APP. After the target terminal business APP certificate completes the certificate bidirectional authentication, the target terminal business APP can query the A1 parameter according to the A1 index through the integrated SDK, and the SDK calculates the second implicit correlation label N` through A1 and B2, N`=B2 A1 The target terminal agrees to the privacy data query through the business APP authorization, and transmits the second implicit correlation label N` to the business application resource end. The business application resource end can apply for data correlation, match N` with the first implicit correlation label N stored in the second data resource end B, and if the match is inconsistent, reject the data correlation. If the match is consistent, return the consistent privacy data record. The business application resource end associates the consistent data with the data of the first data resource end A to form complete data, and can also provide the associated data locally or to a third party for subsequent data analysis and processing. By separating the implicit correlation data labels of privacy data and non-privacy data, the problem of associating data through data management labels is effectively avoided, and the risk of data leakage is reduced.

[0089] In an embodiment of the present application, before the identity authentication is passed, in response to the acquisition request for the implicit correlation data label parameter, the method comprises the following steps:

[0090] When identity authentication is required, acquire the digital certificate acquisition request sent by the target terminal, wherein the digital certificate acquisition request comprises identity information;

[0091] Based on the identity information, query the application digital certificate and the user digital certificate corresponding to the target terminal, and send them to the target terminal, so that the target terminal performs identity authentication on the authentication and manufacturing device end based on the application digital certificate, and the authentication and manufacturing device end performs identity authentication on the target terminal based on the user digital certificate.

[0092] Optionally, the authentication and manufacturing device end can issue a digital certificate representing the identity of the application based on the system name, IP address, CPU information, etc. of the application resource. The private key of the certificate is stored by the security chip of the authentication and manufacturing device end and is not allowed to be exported in plaintext form. When the target terminal initiates an access request, the accessed application can require the target terminal to perform identity authentication. At this time, the target terminal can query whether the terminal user has applied for a digital certificate through the local query of the SDK integrated by the business APP. If the digital certificate has been applied for, the two-way identity authentication is directly performed. Otherwise, a digital certificate acquisition request can be sent to the authentication and manufacturing device end. The request can include identity information. The authentication and manufacturing device end queries the corresponding digital certificate based on the identity information and feeds back to the target terminal. The target terminal can perform identity authentication on the authentication and manufacturing device end based on the application digital certificate, and at the same time, perform identity authentication on the target terminal based on the user digital certificate. To achieve two-way identity authentication, after the authentication is passed, the authentication and manufacturing device end can construct an encrypted transmission channel for transmitting related parameters to improve the security of the parameters.

[0093] In the embodiment of the application, the terminal and the authentication and manufacturing device end cooperatively provide the calculation parameters, and the association logic only exists in dynamic calculation. The parameters provided by the mobile intelligent terminal participate in the calculation of the implicit association data tag, achieving the effect of authorization of access and use of the private data. And the important parameters are protected by the security chip, forming a double security guarantee. The security of the private data resource is effectively improved. On the premise of mastering the non-private data resource and the private data resource, it is impossible to directly establish the corresponding relationship between the two kinds of data resources, avoiding the possibility of deriving the associated private data resource through the non-private data resource.

[0094] Embodiment two,

[0095] In an embodiment, as shown in Figure 4 , a privacy protection method based on implicit association data identity is provided, as shown in Figure 3 , an interaction timing diagram of the privacy protection method based on implicit association data identity is provided. Taking the target terminal in Figure 1 as an example, the method is described as follows:

[0096] In step S210, when the identity authentication is passed, a request for implicit association data tag parameters is sent to the authentication and manufacturing device end to obtain a random security prime number generated by the authentication and manufacturing device end based on the request. The authentication and manufacturing device end generates first and second server application resource tag parameters based on the random security prime number.

[0097] Optionally, when the target terminal and the authentication and manufacturing device end mutual identity authentication passes, the authentication and manufacturing device end can build an encrypted transmission channel TLS for transmitting each parameter needing protection. At this time, the target terminal can send an acquisition request for the implicit association data label parameter to the authentication and manufacturing device end, so that the authentication and manufacturing device end calls a chip capable of generating a true random number sequence, such as a WNG8 physical noise source chip, to generate a random security prime number M. M can be selected as 2048 bits, 3072 bits or 4096 bits. The higher the bit number, the higher the encryption strength, and the more difficult the cracking. Then the target terminal can obtain the random security prime number M sent by the authentication and manufacturing device end, and apply it to the generation of subsequent label parameters.

[0098] Wherein, the authentication and manufacturing device end can call a chip capable of generating a true random number sequence, such as a WNG8 physical noise source chip, to generate a first service end application resource label parameter B1, B1 is consistent with M in size (for example, M is 2048 bits, and B1 is also 2048 bits). Then, the second service end application resource label parameter B2 = 2 B1 modM can be calculated based on M and B1, and B2 is stored in the secure chip.

[0099] In step S220, based on the random security prime number, a first terminal label parameter and a second terminal label parameter are generated.

[0100] Optionally, the SDK of the target terminal can call a random number generation function to generate a first terminal label parameter A1, A1 is consistent with M in size (for example, M is 2048 bits, and A1 is also 2048 bits), and the SDK locally calculates a second terminal label parameter: A2 = 2 A1 modM, finally, the SDK provides A2 to the authentication and manufacturing device end through the business APP, and A1 is stored in the target terminal locally (such as the secure chip of the terminal, the encrypted storage area). Parameter A1 is only saved by the target terminal, and the corresponding relationship between the non-private data resource and the private data resource cannot be established in the calculation process. The calculation result of A1 can be called after the target terminal is authenticated by the certificate, so as to ensure that the private data association and query operation is the behavior allowed by the terminal.

[0101] In step S230, the second terminal label parameter and the business data are sent to the business application resource end, the business data includes private data and non-private data, so as to forward the non-private business data to the first data resource end through the business application resource end, and forward the private data and the first implicit association label to the second data resource end through the business application resource end, wherein the first implicit association label is calculated by the authentication and manufacturing device end based on the first service end application resource label parameter and the second terminal label parameter.

[0102] Optionally, the target terminal can enter / acquire business data through the business APP, and then transmit the obtained business data and the index of the first terminal tag parameter A1 to the business application resource end through the TLS encryption transmission channel of the authentication and manufacturing device end. The business application resource end can transmit the non-private data and the first terminal tag parameter A1 and the second service end application resource tag parameter B2 index to the first data resource end A, and the first data resource end A stores the non-private data and the index of the related parameters A1 and B2 for calculating the implicit association tag. The business application resource end can apply to the authentication and manufacturing device end for calculating the first implicit association tag N, and the authentication and manufacturing device end can calculate the first implicit association tag N of the business data according to the stored B1 and A2, N=A2 B1 modM, and return the first implicit association tag N to the business application resource end, and then the business application resource end can send the private data and the first implicit association tag N to the second data resource end B for storage.

[0103] In step S240, when the business data is associated, the second service end application resource tag parameter sent by the authentication and manufacturing device end is obtained, and the second implicit association tag is calculated based on the second service end application resource tag parameter and the first terminal tag parameter;

[0104] Optionally, when the local or third-party business application applies to the business application resource end for carrying out data statistics and association analysis on the stored business data, the business application resource end can query the A1 and B2 indexes of the business data association from the first data resource end A, and then forward the queried A1 and B2 indexes to the authentication device. The authentication and manufacturing device end queries the stored B2 from the security chip according to the B2 index, and returns the queried B2 to the business application resource end. At this time, the application resource end can forward the queried B2 and A1 index to the target terminal business APP, and after the business APP certificate of the target terminal is authenticated, the second implicit association tag N` can be calculated according to the A1 index through the integrated SDK, N`=B2 A1 modM.

[0105] In step S250, the second implicit association tag is sent to the business application resource end, so that the business application resource end matches the second implicit association tag with the first implicit association tag. If the matching is successful, the matched non-private data and private data are associated. The second implicit association tag is calculated by the target terminal through the first terminal tag parameter and the second service end application resource tag parameter.

[0106] Optionally, the target terminal transmits a second implicit association tag N' to the business application resource end by authorizing the privacy data query through the business APP. The business application resource end can apply for data association, match N' with the first implicit association tag N stored by the second data resource end B, reject data association if the match is inconsistent, return consistent privacy data records if the match is consistent, associate the consistent data with the data of the first data resource end A through the business application resource end, form complete data, and the business application resource end can also provide the associated data locally or to a third party, and carry out subsequent data analysis and processing on the associated data. By separating the implicit association data tags of privacy data and non-privacy data, the problem of associating data through association tags is effectively avoided, and the risk of data leakage is reduced.

[0107] It should be noted that the business application resource end applies to the authentication and manufacturing device end for calculating the first implicit association tag N, and the authentication and manufacturing device end calculates the first implicit association tag N of the business data according to the stored B1 and A2, N=A2 B1 modM, and returns the first implicit association tag N to the business application resource end, and then the business application resource end can transmit the privacy data and the first implicit association tag N to the second data resource end B for storage. When the second implicit association tag N' is obtained, the first implicit association tag N can be called in the second data resource end B to match the second implicit association tag N'.

[0108] In the embodiment of the application, the computing parameters are provided by the terminal and the authentication and manufacturing device end in cooperation, and the association logic only exists in dynamic calculation. The parameters provided by the mobile intelligent terminal participate in the calculation of the implicit association data tag, achieving the effect of access and use authorization of the privacy data. And the important parameters are protected by the security chip, forming double security protection. The security of the privacy data resource is effectively improved. On the premise of mastering the non-privacy data resource and the privacy data resource, it is impossible to directly establish the corresponding relationship between the two kinds of data resources, avoiding the possibility of deriving the associated privacy data resource through the non-privacy data resource.

[0109] In an embodiment of the application, the first terminal tag parameter and the second terminal tag parameter are generated based on the random security prime number, and the generating includes:

[0110] The first terminal tag parameter is randomly generated, and the first terminal tag parameter is consistent with the random security prime number in size;

[0111] The second terminal tag parameter is calculated based on the random security prime number and the first terminal tag parameter.

[0112] Optionally, the target terminal can call a random number generation function to generate a first terminal tag parameter A1, A1 being consistent with M in size (for example, M is 2048 bits, and A1 is also 2048 bits). Then, the target terminal calculates a second service end application resource tag parameter A2 = 2 A1 mod M based on M and A1, and sends A2 to the authentication and manufacturing device end through an encrypted channel, while storing A1 in the terminal security chip. In this process, A1, as a private parameter of the target terminal, guarantees security by virtue of the true random characteristics and the characteristics of not being transmitted externally; A2 is generated by the same algorithm as the generation algorithm of B2 (B2 = 2 B1 mod M) and is based on the same M, laying a foundation for the terminal and the authentication and manufacturing device end to subsequently establish an implicit association and perform interactive verification, while A1 is only saved by the target terminal, and the corresponding relationship between non-private data resources and private data resources cannot be established by not mastering parameter A1 during the calculation process. After the mobile intelligent terminal is authenticated based on a certificate, the calculation result of A1 is called to ensure that the private data association and query operation is an allowed behavior by the terminal. Moreover, the parameters A1 and A2 generated by the target terminal, and the parameters B1 and B2 generated by the authentication and manufacturing device end, make the tag N' negotiated by A1 + B2 consistent with the tag N negotiated by A2 + B1 through a calculation method, and establish the corresponding relationship between non-private data resources and private data resources through the implicit association data tag. Based on the implicit association data tag, a digital identity is established for data, which can effectively authenticate the data membership.

[0113] In an embodiment of the present application, before the identity authentication passes, the sending of the acquisition request for the implicit association data tag parameter to the authentication and manufacturing device end further includes:

[0114] When identity authentication is needed, an identity authentication request sent by the business application resource end is acquired.

[0115] A digital certificate acquisition request is sent to the authentication and manufacturing device end, and the digital certificate acquisition request includes identity information.

[0116] An application digital certificate and a user digital certificate sent by the authentication and manufacturing device end are acquired, identity authentication of the authentication and manufacturing device end is performed based on the application digital certificate, and the authentication and manufacturing device end performs identity authentication of the target terminal based on the user digital certificate.

[0117] Optionally, the authentication and production device can issue a digital certificate representing the application's identity based on the system name, IP address, CPU information, etc. of the application resource. The private key of the certificate is stored in the security chip of the authentication and production device and cannot be exported in plain text. When the target terminal initiates an access request, the accessed application may require the target terminal to perform identity authentication. At this time, the target terminal can locally query whether the terminal user has applied for a digital certificate through the SDK integrated in the business APP. If a digital certificate has been applied for, two-way identity authentication is performed directly. Otherwise, a digital certificate acquisition request can be sent to the authentication and production device. The request may include identity information. The authentication and production device queries the corresponding digital certificate based on the identity information and feeds it back to the target terminal. The target terminal can authenticate the authentication and production device based on the application digital certificate. At the same time, the authentication and production device authenticates the target terminal based on the user digital certificate. This achieves two-way identity authentication. After the authentication is passed, the authentication and production device can establish an encrypted transmission channel for transmitting relevant parameters to improve parameter security.

[0118] In the embodiments of this application, the terminal collaborates with the authentication and production devices to provide calculation parameters, and the association logic exists only in dynamic calculations. The parameters provided by the mobile smart terminal participate in the calculation of implicitly associated data tags, thereby authorizing access to and use of private data. Furthermore, important parameters are protected by a security chip, providing a double layer of security. This effectively enhances the security of private data resources. While knowing both non-private and private data resources, it is impossible to directly establish a correspondence between the two, thus preventing the possibility of inferring associated private data resources from non-private data resources.

[0119] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0120] Example 3:

[0121] In one embodiment, a privacy protection device based on implicitly associated data identity is provided. The privacy protection device based on implicitly associated data identity corresponds to the privacy protection method based on implicitly associated data identity in the first embodiment. Figure 5 As shown, the privacy protection device based on implicitly associated data identity includes a random security prime number generation unit 101, a server application resource tag parameter generation unit 102, a first data distribution unit 103 and a first data association unit 104. The functional modules are described in detail as follows:

[0122] The random security prime number generating unit 101 is configured to generate a random security prime number in response to an acquisition request for the implicit association data label parameter when identity authentication is passed, and send the random security prime number to the target terminal, so that the target terminal generates a first terminal label parameter and a second terminal label parameter based on the random security prime number;

[0123] The server application resource label parameter generating unit 102 is configured to generate a first server application resource label parameter and a second server application resource label parameter based on the random security prime number;

[0124] The first data distributing unit 103 is configured to generate a first implicit association label based on the second terminal label parameter and the first server application resource label parameter, and forward non-private service data to a first data resource end through a service application resource end, and forward private data and the first implicit association label to a second data resource end through the service application resource end.

[0125] The first data association unit 104 is configured to forward the second server application resource label parameter to the target terminal through the service application resource end when service data association is performed, so that the target terminal calculates a second implicit association label, and the first implicit association label is matched with the second implicit association label through the service application resource end, and if the matching is successful, the matched non-private data and private data are associated, wherein the first implicit association label is calculated based on the second terminal label parameter and the first server application resource label parameter.

[0126] In an embodiment of the present application, the server application resource label parameter generating unit 102 is further configured to:

[0127] randomly generate a first server application resource label parameter, the first server application resource label parameter being consistent with the random security prime number in size;

[0128] calculate the second server application resource label parameter based on the random security prime number and the first server application resource label parameter.

[0129] In an embodiment of the present application, the first data association unit 104 is further configured to:

[0130] acquire a query request sent by the service application resource end, the query request including a second server application resource label parameter index;

[0131] Based on the second service end application resource label parameter index, a second service end application resource label parameter is obtained by querying, and the first terminal label parameter index and the second service end application resource label parameter are sent to the target terminal through the business application resource end, so that the target terminal obtains a first terminal label parameter based on the first terminal label parameter index, and calculates a second implicit correlation label based on the second service end application resource label parameter and the first terminal label parameter, so that the business application resource end matches the second implicit correlation label calculated by the target terminal with the first implicit correlation label.

[0132] In an embodiment of the present application, the device further comprises a first identity authentication unit, configured to:

[0133] When identity authentication is required, a digital certificate acquisition request sent by the target terminal is acquired, and the digital certificate acquisition request comprises identity information;

[0134] Based on the identity information, an application digital certificate and a user digital certificate corresponding to the target terminal are queried and sent to the target terminal, so that the target terminal performs identity authentication on the authentication and manufacturing device end based on the application digital certificate, and the authentication and manufacturing device end performs identity authentication on the target terminal based on the user digital certificate.

[0135] In the embodiment of the present application, the computing parameters are provided by the terminal and the authentication and manufacturing device end in cooperation, and the association logic only exists in dynamic calculation. The parameters provided by the mobile intelligent terminal participate in the calculation of the implicit correlation data label, achieving the effect of authorization of access and use of private data. And important parameters are protected by a secure chip, forming a double security guarantee. The security of private data resources is effectively improved. On the premise of mastering non-private data resources and private data resources, it is impossible to directly establish the corresponding relationship between the two kinds of data resources, avoiding the possibility of deducing the associated private data resources through non-private data resources.

[0136] The specific limitations of the privacy protection device based on implicit correlation data identity can be referred to the limitations of the privacy protection method based on implicit correlation data identity in the above, which will not be repeated here. Each module in the above privacy protection device based on implicit correlation data identity can be realized by software, hardware and their combinations in whole or in part. The above modules can be embedded in or independent of the processor in the computer device in hardware form, or can be stored in the memory in the computer device in software form, so as to be called and executed by the processor to perform the operations corresponding to each module.

[0137] Embodiment four,

[0138] In an embodiment, a privacy protection device based on implicit association data identity is provided, which corresponds to the privacy protection method based on implicit association data identity in the above-mentioned embodiment two. As shown in the following figure, the privacy protection device based on implicit association data identity includes a label parameter acquisition request sending unit 201, a terminal label parameter generation unit 202, a second data distribution unit 203, a second implicit association label calculation unit 204, and a second data association unit 205. The detailed description of each functional module is as follows: Figure 6

[0139] The label parameter acquisition request sending unit 201 is configured to send an acquisition request for an implicit association data label parameter to an authentication and manufacturing device end when the identity authentication is passed, so as to acquire a random security prime number generated by the authentication and manufacturing device end based on the acquisition request. The authentication and manufacturing device end generates a first service end application resource label parameter and a second service end application resource label parameter based on the random security prime number.

[0140] The terminal label parameter generation unit 202 is configured to generate a first terminal label parameter and a second terminal label parameter based on the random security prime number.

[0141] The second data distribution unit 203 is configured to send the second terminal label parameter and business data to the business application resource end, wherein the business data includes privacy data and non-privacy data. The non-privacy business data is forwarded to the first data resource end through the business application resource end, and the privacy data and the first implicit association label are forwarded to the second data resource end through the business application resource end. The first implicit association label is calculated by the authentication and manufacturing device end based on the first service end application resource label parameter and the second terminal label parameter.

[0142] The second implicit association label calculation unit 204 is configured to acquire the second service end application resource label parameter sent by the authentication and manufacturing device end when the business data association is performed, and calculate a second implicit association label based on the second service end application resource label parameter and the first terminal label parameter.

[0143] The second data association unit 205 is configured to send the second implicit association label to the business application resource end, so as to match the second implicit association label with the first implicit association label through the business application resource end. If the matching is successful, the matched non-privacy data and privacy data are associated. The second implicit association label is calculated by the target terminal based on the first terminal label parameter and the second service end application resource label parameter.

[0144] ​In an embodiment of the present application, the terminal tag parameter generating unit 202 is further configured to:

[0145] randomly generate a first terminal tag parameter, the first terminal tag parameter being consistent with the random secure prime number size;

[0146] calculate the second terminal tag parameter based on the random secure prime number and the first terminal tag parameter.

[0147] In an embodiment of the present application, the device further comprises a second identity authentication unit configured to:

[0148] when identity authentication is required, obtain an identity authentication request sent by the service application resource end;

[0149] send a digital certificate obtaining request to the authentication and manufacturing device end, the digital certificate obtaining request comprising identity information;

[0150] obtain an application digital certificate and a user digital certificate sent by the authentication and manufacturing device end, perform identity authentication on the authentication and manufacturing device end based on the application digital certificate, and simultaneously, the authentication and manufacturing device end performs identity authentication on the target terminal based on the user digital certificate.

[0151] In the embodiments of the present application, the computing parameters are provided by the terminal and the authentication and manufacturing device end in cooperation, and the association logic only exists in dynamic calculation. The parameters provided by the mobile intelligent terminal participate in the calculation of the implicit association data tag, achieving the effect of authorization of access and use of private data. And important parameters are protected by a secure chip, forming a double security guarantee. The security of private data resources is effectively improved. On the premise of mastering non-private data resources and private data resources, it is impossible to directly establish the corresponding relationship between the two kinds of data resources, avoiding the possibility of deducing the associated private data resources through non-private data resources.

[0152] The specific limitations of the privacy protection device based on the implicit association data identity can be referred to the limitations of the privacy protection method based on the implicit association data identity in the above, which will not be repeated here. Each module in the above privacy protection device based on the implicit association data identity can be realized by software, hardware and their combinations in whole or in part. The above modules can be embedded in or independent of the processor in the computer device in hardware form, or can be stored in the memory in the computer device in software form, so as to call and execute the operations corresponding to the above modules by the processor.

[0153] Embodiment five,

[0154] In an embodiment, a privacy protection system based on implicit association data identity is provided, which comprises the privacy protection device based on implicit association data identity shown in embodiment three and embodiment four, and corresponds to the privacy protection method based on implicit association data identity in embodiment one and embodiment two. As shown in the figure, the privacy protection device based on implicit association data identity comprises an implicit association data tag authentication and manufacturing device end (authentication and manufacturing device end) 1000, an implicit association data tag authentication and manufacturing device end client SDK (target terminal) 2000, a business application resource end 3000, a first data resource end 4000, and a second data resource end 5000. The detailed description of each functional module is as follows: Figure 7

[0155] The target terminal is configured to send an acquisition request for an implicit association data tag parameter to the authentication and manufacturing device end.

[0156] The authentication and manufacturing device end generates a random secure prime number based on the acquisition request and sends it to the target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random secure prime number.

[0157] The authentication and manufacturing device end generates a first service end application resource tag parameter and a second service end application resource tag parameter based on the random secure prime number.

[0158] The authentication and manufacturing device end acquires the second terminal tag parameter sent by the target terminal and generates a first implicit association tag based on the second terminal tag parameter and the first service end application resource tag parameter.

[0159] The target terminal sends business data to the authentication and manufacturing device end, and the business data includes private data and non-private data. The authentication and manufacturing device end forwards non-private business data to the first data resource end through the business application resource end, and forwards private data and the first implicit association tag to the second data resource end through the business application resource end, wherein the first implicit association tag is calculated based on the second terminal tag parameter and the first service end application resource tag parameter.

[0160] When the business application resource end associates business data, the authentication and manufacturing device end forwards the second service end application resource tag parameter to the target terminal through the business application resource end, so that the target terminal calculates a second implicit association tag based on the second service end application resource tag parameter and the first terminal tag parameter.

[0161] ​The target terminal sends the second implicit association label to the service application resource end, so that the service application resource end matches the second implicit association label with the first implicit association label, and if the matching is successful, the matched non-private data and private data are associated.

[0162] Optionally, the authentication and manufacturing device end issues an application digital certificate based on application resource information, and a private key is stored by its secure chip. When the target terminal initiates an application access request, the user digital certificate needs to be submitted. If there is no certificate locally, the authentication and manufacturing device end is applied for, and after the certificate is issued, the two parties complete two-way identity authentication based on the application and user certificate, and establish a TLS encrypted transmission channel. The target terminal applies for terminal implicit association data label parameters to the authentication and manufacturing device end through the SDK. The authentication and manufacturing device end calls the WNG8 chip to generate a random secure prime number M and returns it to the SDK; the SDK locally generates a first terminal label parameter A1 and a second terminal label parameter A2, and transmits A2 to the authentication and manufacturing device end for storage; at the same time, the authentication and manufacturing device end generates a first service end application resource label parameter B1 and a second service end application resource label parameter B2, and stores B2 into the secure chip. After the target terminal enters / captures data, the business data and A1 index are transmitted to the service application resource end through the encrypted channel; the service application resource end stores the non-private data and A1, B2 index into the first data resource end A (the index is only used for positioning parameters, and does not contain the parameters themselves), and at the same time, applies for a first implicit association label N to the authentication and manufacturing device end, and stores the private data and N into the second data resource end B. When a local or third-party business application applies for data statistics and association analysis, the service application resource end obtains A1 and B2 index from the first data resource end A, queries B2 through the authentication and manufacturing device end, and forwards it to the target terminal; the target terminal queries A1 through the SDK and calculates the second implicit association label N`, and after authorization, transmits N` to the service application resource end; the service application resource end matches N` with N in the second data resource end B, and if they are consistent, the corresponding data of the data resources A and B are associated, and provided to the applicant for subsequent analysis and processing.

[0163] It should be noted that the business application resource end is used to receive the service data transmitted by the terminal, coordinate the storage of non-private data and private data, apply for the implicit association tag to the authentication and manufacturing device end, process the data analysis request of the local or third party, and finally complete the data association and provide the result, which is the core execution carrier of data flow and business logic. The first data resource end A is a non-private data storage library, mainly storing non-private business data (such as public business serial numbers, basic operation records, etc.) not involving user sensitive information, and storing the indexes of key indexes A1 (terminal private parameters) and B2 (service end tag parameters) for subsequent association. These indexes do not directly contain sensitive information, and only serve as the "address identification" of A1 and B2 in subsequent queries, which provides a basic positioning basis for the association of non-private data and private data, and the security requirement is relatively lower than that of the data resource B because the storage content is non-private. The second data resource end B is a private data exclusive storage library, which specially stores user sensitive information (such as personal identity information, medical records, financial account details, etc.), and stores the implicit association tag N (generated by the authentication and manufacturing device end based on A2 and B1). N is a "invisible bridge" connecting non-private data and private data, and the private data content cannot be directly obtained through N, and the association can be realized only by comparing N with N` generated by the terminal. This design allows private data to be stored independently, reducing the risk of direct exposure, and is the core storage carrier of privacy protection.

[0164] In one embodiment, a computer device, which can be a terminal device, has an internal structure as shown in Figure 8 The computer device includes a processor, a memory, and a network interface connected by a system bus. The processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a readable storage medium. The readable storage medium stores computer readable instructions. The network interface of the computer device is configured to communicate with an external terminal through a network connection. The computer readable instructions are executed by the processor to implement a privacy protection method based on implicit association data identity. The readable storage medium provided in the embodiment includes a non-volatile readable storage medium and a volatile readable storage medium.

[0165] In the embodiments of the present application, a computer device is provided, which includes a memory, a processor, and computer readable instructions stored in the memory and executable on the processor. When the processor executes the computer readable instructions, the steps of the privacy protection method based on implicit association data identity are implemented.

[0166] In the embodiments of the present application, a readable storage medium is provided, which stores computer readable instructions. When the computer readable instructions are executed by the processor, the steps of the privacy protection method based on implicit association data identity are implemented.

[0167] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through computer readable instructions, and the computer readable instructions can be stored in a non-volatile readable storage medium or a volatile readable storage medium. When the computer readable instructions are executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, storage, database or other medium used in the embodiments provided by the present application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration but not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0168] Those skilled in the art can clearly understand that, for the convenience and brevity of description, only the above-mentioned division of functional units and modules is exemplified, and in actual application, the above-mentioned functions can be completed by different functional units and modules according to needs, that is, the internal structure of the device is divided into different functional units or modules to complete all or part of the functions described above.

[0169] The above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement for part of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application.

Claims

1. A privacy protection method based on implicit association data identity, characterized in that, The method comprises: When the identity authentication is passed, in response to an acquisition request for an implicit association data tag parameter, a random security prime number is generated and sent to a target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; Based on the random security prime number, a first server application resource tag parameter and a second server application resource tag parameter are generated; Based on the second terminal tag parameter and the first server application resource tag parameter, a first implicit association tag is generated, and non-private business data is forwarded to a first data resource end through a business application resource end, and private data is forwarded to a second data resource end through the business application resource end with the first implicit association tag; When the business data association is performed, the second server application resource tag parameter is forwarded to the target terminal through the business application resource end, so that the target terminal calculates a second implicit association tag through the second server application resource tag parameter and the first terminal tag parameter, and the second implicit association tag is matched with the first implicit association tag through the business application resource end, if the matching is successful, the matched non-private business data and private data are associated, wherein the first implicit association tag is calculated through the second terminal tag parameter and the first server application resource tag parameter.

2. The privacy protection method based on implicit association data identity according to claim 1, characterized in that, The first server application resource tag parameter is randomly generated, and the first server application resource tag parameter is consistent with the random security prime number in size; The second server application resource tag parameter is calculated based on the random security prime number and the first server application resource tag parameter. The second server application resource tag parameter is forwarded to the target terminal through the business application resource end, so that the target terminal calculates a second implicit association tag, and the second implicit association tag is matched with the first implicit association tag through the business application resource end, comprising:

3. The privacy protection method based on implicit association data identity according to claim 1, characterized in that, The query request sent by the business application resource end is acquired, and the query request comprises a second server application resource tag parameter index; Based on the second server application resource tag parameter index, the second server application resource tag parameter is queried, and the first terminal tag parameter index and the second server application resource tag parameter are sent to the target terminal through the business application resource end, so that the target terminal queries the first terminal tag parameter based on the first terminal tag parameter index, and calculates the second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter, so that the business application resource end matches the second implicit association tag calculated by the target terminal with the first implicit association tag. Before the identity authentication is passed, in response to the acquisition request for the implicit association data tag parameter, comprising:

4. The privacy protection method based on tacit relationship data identity according to any one of claims 1-3, characterized in that, When identity authentication is needed, a digital certificate acquisition request sent by the target terminal is acquired, and the digital certificate acquisition request comprises identity information; ​ Based on the identity information, the application digital certificate and the user digital certificate corresponding to the target terminal are queried and sent to the target terminal, so that the target terminal performs identity authentication on the authentication and manufacturing device end based on the application digital certificate, and the authentication and manufacturing device end performs identity authentication on the target terminal based on the user digital certificate.

5. A privacy protection method based on implicit association data identity, characterized in that, The method comprises: When the identity authentication is passed, an acquisition request for the implicit association data label parameter is sent to the authentication and manufacturing device end to acquire a random security prime number generated by the authentication and manufacturing device end based on the acquisition request, wherein the authentication and manufacturing device end generates a first service end application resource label parameter and a second service end application resource label parameter based on the random security prime number; Based on the random security prime number, a first terminal label parameter and a second terminal label parameter are generated; The second terminal label parameter and the business data are sent to the business application resource end, and the business data includes privacy data and non-privacy data, so that the non-privacy business data is forwarded to the first data resource end through the business application resource end, and the privacy data and the first implicit association label are forwarded to the second data resource end through the business application resource end, wherein the first implicit association label is calculated by the authentication and manufacturing device end based on the first service end application resource label parameter and the second terminal label parameter; When the business data association is performed, the second service end application resource label parameter sent by the authentication and manufacturing device end is acquired, and a second implicit association label is calculated based on the second service end application resource label parameter and the first terminal label parameter; The second implicit association label is sent to the business application resource end to match the second implicit association label with the first implicit association label through the business application resource end.

6. The privacy protection method based on tacit relationship data identity as claimed in claim 5, characterized in that, The method comprises: The first terminal label parameter is randomly generated, and the first terminal label parameter is consistent with the random security prime number in size; The second terminal label parameter is calculated based on the random security prime number and the first terminal label parameter.

7. The privacy protection method based on implicit association data identity according to claim 5 or 6, characterized in that, Before the acquisition request for the implicit association data label parameter is sent to the authentication and manufacturing device end when the identity authentication is passed, the method further comprises: When identity authentication is required, an identity authentication request sent by the business application resource end is acquired; A digital certificate acquisition request is sent to the authentication and manufacturing device end, and the digital certificate acquisition request includes identity information; The application digital certificate and the user digital certificate sent by the authentication and manufacturing device end are acquired, and the authentication and manufacturing device end is authenticated based on the application digital certificate, and the target terminal is authenticated based on the user digital certificate.

8. A privacy protection apparatus based on implicit association data identity, characterized in that, The device comprises: a random security prime number generating unit configured to generate a random security prime number in response to an acquisition request for an implicit association data tag parameter when identity authentication is passed, and send the random security prime number to a target terminal, so that the target terminal generates a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; a server application resource tag parameter generating unit configured to generate a first server application resource tag parameter and a second server application resource tag parameter based on the random security prime number; a first data distributing unit configured to generate a first implicit association tag based on the second terminal tag parameter and the first server application resource tag parameter, and forward non-private service data to a first data resource end through a service application resource end, and forward private data and the first implicit association tag to a second data resource end through the service application resource end; a first data association unit configured to, when service data association is performed, forward the second server application resource tag parameter to the target terminal through the service application resource end, so that the target terminal matches a second implicit association tag calculated based on the second server application resource tag parameter and the first terminal tag parameter with the first implicit association tag through the service application resource end, and if the matching is successful, associates the matched non-private data and private data, wherein the first implicit association tag is calculated based on the second terminal tag parameter and the first server application resource tag parameter.

9. A privacy protection apparatus based on implicit association data identity, characterized in that, The device comprises: a tag parameter acquisition request sending unit configured to send an acquisition request for an implicit association data tag parameter to an authentication and manufacturing device end when identity authentication is passed, so as to acquire a random security prime number generated by the authentication and manufacturing device end based on the acquisition request, wherein the authentication and manufacturing device end generates a first server application resource tag parameter and a second server application resource tag parameter based on the random security prime number; a terminal tag parameter generating unit configured to generate a first terminal tag parameter and a second terminal tag parameter based on the random security prime number; a second data distributing unit configured to send the second terminal tag parameter and service data to a service application resource end, the service data comprising private data and non-private data, so as to forward non-private service data to a first data resource end through a service application resource end, and forward private data and a first implicit association tag to a second data resource end through the service application resource end, wherein the first implicit association tag is calculated by the authentication and manufacturing device end based on the first server application resource tag parameter and the second terminal tag parameter; a second implicit association tag calculating unit configured to, when service data association is performed, acquire the second server application resource tag parameter sent by the authentication and manufacturing device end, and calculate a second implicit association tag based on the second server application resource tag parameter and the first terminal tag parameter. A second data association unit is configured to send the second implicit association label to the service application resource end, so as to match the second implicit association label with the first implicit association label through the service application resource end, and if the matching is successful, associate the matched non-private data and private data.

10. A privacy protection system based on implicit association data identity, characterized in that, The system comprises: A target terminal configured to send an acquisition request for an implicit association data label parameter to an authentication and manufacturing device end; The authentication and manufacturing device end generates a random secure prime number based on the acquisition request and sends it to the target terminal, so that the target terminal generates a first terminal label parameter and a second terminal label parameter based on the random secure prime number; The authentication and manufacturing device end generates a first service end application resource label parameter and a second service end application resource label parameter based on the random secure prime number; The authentication and manufacturing device end acquires the second terminal label parameter sent by the target terminal and generates a first implicit association label based on the second terminal label parameter and the first service end application resource label parameter; The target terminal sends service data to the authentication and manufacturing device end, wherein the service data comprises private data and non-private data, the authentication and manufacturing device end forwards the non-private service data to a first data resource end through a service application resource end, and forwards the private data and the first implicit association label to a second data resource end through the service application resource end; When the service application resource end performs service data association, the authentication and manufacturing device end forwards the second service end application resource label parameter to the target terminal through the service application resource end, so that the target terminal calculates a second implicit association label based on the second service end application resource label parameter and the first terminal label parameter; The target terminal sends the second implicit association label to the service application resource end, so that the service application resource end matches the second implicit association label with the first implicit association label, and if the matching is successful, associates the matched non-private data and private data.

Images