Data anonymity query methods, devices, equipment and media

Abstract

This disclosure proposes a data anonymity query method, apparatus, device, and medium. The method includes: sending a first authorization request to a second device, the first authorization request including first encrypted information obtained by encrypting the object identifier of the query object using a symmetric encryption key; receiving second encrypted information provided by the second device, the second encrypted information being obtained by processing the first encrypted information using a first random number and a homomorphic encryption key; receiving third encrypted information provided by a third device, determining the difference information between the second and third encrypted information and providing it to the second device, the third encrypted information being determined based on the first encrypted information and verification information of the query object; receiving authorization information provided by the second device, the authorization information being generated after successful decryption verification based on the difference information; and sending a data query request to a fourth device based on the authorization information to obtain the target data of the query object. Therefore, the privacy of the authorizing entity can be effectively protected while ensuring the authorization of individual users.

Description

Technical Field

[0001] This disclosure relates to the field of privacy computing technology, specifically to a method, apparatus, device, and medium for data anonymity query. Background Technology

[0002] During data circulation, when a data user requests personal data from a data provider, they may not want the provider to know the person being queried or the query results in order to protect trade secrets. Therefore, the true target of the query needs to be hidden from the data provider. However, according to laws such as the Personal Information Protection Law, the data provider must first obtain the individual's authorization before providing that individual's information. This presents a contradiction: the data provider needs the authorization of the person being queried before providing the data, but the data user doesn't want the provider to know who the person being queried is; however, without knowing the person being queried, the data provider cannot obtain their authorization and therefore cannot provide the data.

[0003] In related technologies, data obfuscation is often used to protect query objects. However, obfuscating data without user authorization and directly using others' data poses challenges in terms of compliance and security. Alternatively, a centralized authorization scheme can be adopted, which only protects query privacy at the data source level. As the central authority, the authorization center knows the query primary key and query object, resulting in insufficient privacy protection. Furthermore, the data source does not obtain authorization and authentication from the authorization center and does not have explicit user authorization, thus its legality and compliance are still challenged. Summary of the Invention

[0004] This disclosure aims to at least partially address one of the technical problems in the related art.

[0005] Therefore, the purpose of this disclosure is to propose a data anonymity query method, device, electronic device, and storage medium. It constructs a multi-layer encryption mechanism through homomorphic encryption and symmetric encryption measures. The consistency and accuracy of data interaction are ensured through multiple encryption mechanisms and differential verification methods, while preventing unauthorized access and thus protecting the privacy of the query object. Ultimately, it achieves privacy protection for the authorization process as well as the privacy protection of the query object and the result.

[0006] To achieve the above objectives, the data anonymity query method proposed in the first aspect of this disclosure is applied to a first device, the method comprising:

[0007] Send a first authorization request to the second device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key;

[0008] The device receives second encrypted information provided by the second device, wherein the second encrypted information is obtained by the second device processing the first encrypted information based on a first random number and a homomorphic encryption key;

[0009] The third device receives third encrypted information provided by a third device and determines the difference information between the second encrypted information and the third encrypted information, which is then provided to the second device. The third device is associated with the query object, and the third encrypted information is determined by the third device based on the first encrypted information and the verification information of the query object.

[0010] Receive authorization information provided by the second device, wherein the authorization information is generated by the second device after the decryption verification based on the difference information is successful;

[0011] Based on the authorization information, a data query request is sent to the fourth device to obtain the target data of the query object.

[0012] To achieve the above objectives, the data anonymity query method proposed in the second aspect of this disclosure is applied to a second device, the method comprising:

[0013] After the queried object completes identity authentication, the second random number is encrypted based on the homomorphic encryption key to obtain verification information, and the verification information is sent to a third device, which is associated with the queried object.

[0014] Receive a first authorization request provided by a first device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key;

[0015] The first encrypted information is processed based on the first random number and the homomorphic encryption key to obtain the second encrypted information, and the second encrypted information is sent to the first device.

[0016] The device receives difference information provided by the first device, wherein the difference information is determined by the first device based on the second encryption information and the third encryption information, and the third encryption information is determined by the third device based on the first encryption information and the verification information;

[0017] Decryption verification is performed based on the difference information, and authorization information is provided to the first device after the verification is successful. The authorization information is used as the first device to obtain the target data corresponding to the query object from the fourth device.

[0018] To achieve the above objectives, the data anonymity query method proposed in the third aspect of this disclosure is applied to a third device, which is associated with the query object, and the method includes:

[0019] The device receives verification information provided by a second device, wherein the verification information is obtained by the second device encrypting a second random number based on a homomorphic encryption key after the queried object has completed identity authentication;

[0020] Receive a second authorization request sent by the first device, wherein the second authorization request includes a symmetric encryption key;

[0021] The first encrypted information is obtained by encrypting the object identifier of the queried object based on the symmetric encryption key.

[0022] The product of the first encrypted information and the verification information is determined as the third encrypted information;

[0023] The third encrypted information is provided to the first device, wherein the first device is used to determine the difference information, the difference information is used by the second device to perform decryption verification, and the second device provides authorization information to the first device after the decryption verification is successful, the authorization information is used by the first device to obtain the target data of the query object.

[0024] To achieve the above objectives, the data anonymity query method proposed in the fourth aspect of this disclosure is applied to a fourth device, the method comprising:

[0025] Receive a data query request sent by a first device, wherein the data query request is generated by the first device based on authorization information;

[0026] Send an authentication request to the second device, wherein the authentication request includes the authorization information;

[0027] The system receives a third random number and target fuzzy matching information provided by the second device, wherein the target fuzzy matching information is generated based on the first encrypted information and the third random number, the first encrypted information is determined based on the authorization information, and the first encrypted information is used to indicate the object identifier of the query object;

[0028] Based on the third random number and the target fuzzy matching information, multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information are determined, wherein the candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object;

[0029] The plurality of candidate fuzzy matching information and the candidate encrypted data corresponding to each candidate fuzzy matching information are provided to the second device, wherein the plurality of candidate encrypted data includes target encrypted data corresponding to the query object.

[0030] To achieve the above objectives, the data anonymity query apparatus proposed in the fifth aspect embodiment of this disclosure is applied to a first device, the apparatus comprising:

[0031] The first sending module is used to send a first authorization request to the second device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key;

[0032] The first receiving module is configured to receive second encrypted information provided by the second device, wherein the second encrypted information is obtained by the second device processing the first encrypted information based on a first random number and a homomorphic encryption key;

[0033] The second receiving module is used to receive third encrypted information provided by the third device, and to determine the difference information between the second encrypted information and the third encrypted information and provide it to the second device, wherein the third device is associated with the query object, and the third encrypted information is determined by the third device based on the first encrypted information and the verification information of the query object;

[0034] The third receiving module is used to receive authorization information provided by the second device, wherein the authorization information is generated by the second device after the decryption verification based on the difference information is successful;

[0035] The second sending module is used to send a data query request to the fourth device based on the authorization information in order to obtain the target data of the query object.

[0036] To achieve the above objectives, the data anonymity query apparatus proposed in the sixth aspect of this disclosure is applied to a second device, the apparatus comprising:

[0037] The third sending module is used to encrypt the second random number based on the homomorphic encryption key to obtain verification information after the query object completes identity authentication, and send the verification information to the third device, which is associated with the query object;

[0038] The fourth receiving module is used to receive a first authorization request provided by the first device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key;

[0039] The fourth sending module is used to process the first encrypted information based on the first random number and the homomorphic encryption key to obtain the second encrypted information, and then send the second encrypted information to the first device;

[0040] The fifth receiving module is used to receive the difference information provided by the first device, wherein the difference information is determined by the first device based on the second encryption information and the third encryption information, and the third encryption information is determined by the third device based on the first encryption information and the verification information;

[0041] The fifth sending module is used to perform decryption verification based on the difference information, and to provide authorization information to the first device after the verification is successful. The authorization information is used as the target data corresponding to the query object obtained by the first device from the fourth device.

[0042] To achieve the above objectives, a data anonymity query apparatus according to a seventh aspect embodiment of this disclosure is applied to a third device, the third device being associated with a query object, the apparatus comprising:

[0043] The eighth receiving module is used to receive verification information provided by the second device, wherein the verification information is obtained by the second device encrypting a second random number based on a homomorphic encryption key after the queried object has completed identity authentication;

[0044] The ninth receiving module is used to receive a second authorization request sent by the first device, wherein the second authorization request includes a symmetric encryption key;

[0045] The processing module is used to encrypt the object identifier of the queried object based on the symmetric encryption key to obtain the first encrypted information;

[0046] The second determining module is used to determine the product of the first encrypted information and the verification information as the third encrypted information;

[0047] The eighth sending module is used to provide the third encrypted information to the first device, wherein the first device is used to determine the difference information, the difference information is used by the second device to perform decryption verification, and the second device provides authorization information to the first device after the decryption verification is successful, the authorization information is used by the first device to obtain the target data of the query object.

[0048] To achieve the above objectives, the data anonymity query apparatus proposed in the eighth aspect embodiment of this disclosure is applied to a fourth device, the apparatus comprising:

[0049] The sixth receiving module is used to receive a data query request sent by the first device, wherein the data query request is generated by the first device based on authorization information;

[0050] The sixth sending module is used to send an authentication request to the second device, wherein the authentication request includes the authorization information;

[0051] The seventh receiving module is used to receive a third random number and target fuzzy matching information provided by the second device, wherein the target fuzzy matching information is generated based on the first encrypted information and the third random number, the first encrypted information is determined based on the authorization information, and the first encrypted information is used to indicate the object identifier of the query object;

[0052] The first determining module is used to determine multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information based on the third random number and the target fuzzy matching information, wherein the candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object;

[0053] The seventh sending module is used to provide the plurality of candidate fuzzy matching information and the candidate encrypted data corresponding to each candidate fuzzy matching information to the second device, wherein the plurality of candidate encrypted data includes target encrypted data corresponding to the query object.

[0054] The electronic device proposed in the ninth aspect embodiment of this disclosure includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the data anonymity query method proposed in the first aspect embodiment of this disclosure.

[0055] The tenth aspect of this disclosure provides a non-transitory computer-readable storage medium having a computer program stored thereon that, when executed by a processor, implements the data anonymity query method as described in the above embodiments of this disclosure.

[0056] The eleventh aspect of this disclosure provides a computer program product that, when instructions in the computer program product are executed by a processor, performs the data anonymity query method as described in the above embodiments of this disclosure.

[0057] The data anonymity query method, apparatus, electronic device, and storage medium disclosed herein involve: sending a first authorization request to a second device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the query object using a symmetric encryption key; receiving second encrypted information provided by the second device, wherein the second encrypted information is obtained by the second device processing the first encrypted information based on a first random number and a homomorphic encryption key; receiving third encrypted information provided by a third device, and determining and providing the difference information between the second and third encrypted information to the second device, wherein the third device is associated with the query object, and the third encrypted information is determined by the third device based on the first encrypted information and the verification information of the query object; receiving authorization information provided by the second device, wherein the authorization information is generated by the second device after decryption verification based on the difference information is successful; and sending a data query request to a fourth device based on the authorization information to obtain the target data of the query object. Thus, a multi-layered encryption mechanism is constructed through homomorphic encryption and symmetric encryption measures. The multiple encryption mechanisms and the difference verification method ensure consistency and accuracy during data interaction, while preventing unauthorized access, thereby protecting the privacy of the query object and ultimately achieving privacy protection for the authorization process, as well as the privacy protection of the query object and the results.

[0058] Additional aspects and advantages of this disclosure will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of this disclosure. Attached Figure Description

[0059] The above and / or additional aspects and advantages of this disclosure will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, in which:

[0060] Figure 1 This is a schematic flowchart of a data anonymity query method proposed in an embodiment of this disclosure;

[0061] Figure 2 This is a flowchart illustrating a data anonymity query method proposed in another embodiment of this disclosure;

[0062] Figure 3 This is a flowchart illustrating a data anonymity query method proposed in another embodiment of this disclosure;

[0063] Figure 4 This is a flowchart illustrating a data anonymity query method proposed in another embodiment of this disclosure;

[0064] Figure 5 This is a flowchart illustrating a data anonymity query method proposed in another embodiment of this disclosure;

[0065] Figure 6 This is a flowchart illustrating a data anonymity query method proposed in another embodiment of this disclosure;

[0066] Figure 7 This is a schematic diagram of the data anonymity query scheme proposed in this disclosure;

[0067] Figure 8 This is a schematic diagram of an embodiment of data anonymity query proposed in this disclosure;

[0068] Figure 9 This is a schematic diagram of the structure of a data anonymity query device according to an embodiment of this disclosure;

[0069] Figure 10 This is a schematic diagram of the structure of a data anonymity query device according to another embodiment of this disclosure;

[0070] Figure 11 This is a schematic diagram of the structure of a data anonymity query device according to another embodiment of this disclosure;

[0071] Figure 12 This is a schematic diagram of the structure of a data anonymity query device according to another embodiment of this disclosure;

[0072] Figure 13 This is a block diagram of an electronic device according to an embodiment of the present application. Detailed Implementation

[0073] Embodiments of this disclosure are described in detail below, examples of which are illustrated in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are used only to explain this disclosure, and should not be construed as limiting this disclosure. Rather, embodiments of this disclosure include all variations, modifications, and equivalents falling within the spirit and scope of the appended claims.

[0074] It should be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, data stored, data displayed, etc.) and signals involved in this disclosure are all authorized by the user or fully authorized by all parties, and the collection, use and processing of related data must comply with the relevant laws, regulations and standards of the relevant countries and regions.

[0075] Figure 1 This is a schematic flowchart of a data anonymity query method proposed in an embodiment of this disclosure.

[0076] It should be noted that the execution subject of the data anonymity query method in this embodiment is a data anonymity query device. This device can be implemented by software and / or hardware. The device can be configured in an electronic device, which may include, but is not limited to, a terminal, a server, etc. For example, the terminal may be a mobile phone, a PDA, etc.

[0077] like Figure 1 As shown, this data anonymity query method is applied to the first device, and the specific steps include:

[0078] S101: Send a first authorization request to the second device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key.

[0079] The first device can refer to the device requesting the data query, i.e., the device of the data querying party. For example, it could be the party wanting to query the credit score of a specific mobile phone number (ID), such as a bank's device.

[0080] The second device can refer to a trusted third-party device that is responsible for coordinating the matching process but does not access the core plaintext data; for example, it could be a device from an authentication center.

[0081] The first authorization request may refer to a request initiated by the first device to the second device to request permission to query the data of the queried object.

[0082] The first encrypted information may refer to the information obtained after encrypting the object identifier of the queried object based on a symmetric encryption key.

[0083] The query object can refer to the owner of the data that the first device needs to query. The object identifier can refer to an identifier associated with the query object, which can be used to identify the query object. For example, when the query object is a user, the object identifier can be the user's mobile phone number.

[0084] Here, the symmetric encryption key refers to the key used in a symmetric encryption algorithm, which is the same during both encryption and decryption. In other words, the same key is used to encrypt data, and the same key is also required for decryption. In this embodiment of the disclosure, the symmetric encryption key can be determined through negotiation between the querying party and the queried party.

[0085] In other words, in this embodiment of the present disclosure, the first device can encrypt the object identifier of the query object based on a symmetric encryption key to obtain the first encrypted information, and generate a first authorization request based on the first encrypted information and provide it to the second device, thereby realizing the encryption of the query object identifier based on symmetric encryption measures to avoid the leakage of the query object's privacy.

[0086] S102: Receive second encrypted information provided by the second device, wherein the second encrypted information is obtained by the second device processing the first encrypted information based on the first random number and the homomorphic encryption key.

[0087] The first random number can refer to a random number generated by the second device for processing the first encrypted information.

[0088] In homomorphic encryption, the key is the key used for encryption and decryption in a homomorphic encryption algorithm. Unlike traditional encryption algorithms, homomorphic encryption allows computation on encrypted data without first decrypting it. This means that operations performed on encrypted data still result in encrypted data, and the decryption result is equivalent to the result of operations performed directly on the original data.

[0089] The second encrypted information refers to the encrypted information obtained after processing the first encrypted information based on the first random number and the homomorphic encryption key.

[0090] For example, in the embodiments of this disclosure, when the second encrypted information is obtained after processing the first encrypted information based on the first random number and the homomorphic encryption key, it can be obtained by multiplying the first encrypted information by the first random number and then encrypting it using the homomorphic encryption key.

[0091] S103: Receive the third encrypted information provided by the third device, and determine the difference information between the second encrypted information and the third encrypted information and provide it to the second device, wherein the third device is associated with the query object, and the third encrypted information is determined by the third device based on the first encrypted information and the verification information of the query object.

[0092] The third device can refer to a device associated with the query object, such as the third device of the query object.

[0093] The third encrypted information may refer to the encrypted information determined based on the first encrypted information and the verification information of the queried object.

[0094] In this embodiment of the disclosure, the third encrypted information can be obtained by processing the first encrypted information and the verification information of the query object based on a preset algorithm, such as subtraction, addition, etc.

[0095] Optionally, in some embodiments, when the first device receives the third encrypted information provided by the third device, it may: send a second authorization request to the third device, wherein the second authorization request includes a symmetric encryption key; and receive the third encrypted information provided by the third device, wherein the third encrypted information is the product of the first encrypted information and verification information, and the first encrypted information is obtained by the third device after encrypting the object identifier based on the symmetric encryption key. Thus, the queried object can encrypt its own object identifier based on a homomorphic encryption key, and multiply it with the verification information to provide the third encrypted information to the first device. This allows for authorization verification based on the ciphertext multiplication of symmetric and homomorphic encryption, ensuring that the object identifier is not exposed during the authorization process and enhancing user privacy protection.

[0096] The verification information can refer to the information used to authorize and verify the data query process of the queried object, such as a unique verification code configured for different users.

[0097] The difference information can refer to the data obtained by subtracting the second and third encrypted information.

[0098] It is understood that the verification information in this embodiment can also be obtained after processing based on a homomorphic encryption key. Therefore, the second and third encrypted information can be directly subtracted without first decrypting them. Furthermore, the resulting difference can be used as the basis for subsequent authorization verification by the second device.

[0099] S104: Receive authorization information provided by the second device, wherein the authorization information is generated by the second device after the decryption verification based on the difference information is successful.

[0100] In other words, in this embodiment of the present disclosure, the second device can obtain the first encrypted information after decryption verification based on the difference information, and provide the authorization information to the first device after the verification is successful, thereby providing a reliable authorization credential for the first device to obtain the target data of the query object from the fourth device.

[0101] S105: Send a data query request to the fourth device based on the authorization information to obtain the target data of the query object.

[0102] The fourth device can refer to a device that stores data related to one or more objects, i.e., the device of the party whose data is being queried. For example, it could be a device belonging to a mobile network operator that stores user data.

[0103] Among them, the data query request is used by the first device to request the target data of the query object from the fourth device.

[0104] The target data can refer to the data that the first device needs to obtain, such as the credit score or location of the queried object, and there are no restrictions on this.

[0105] In this embodiment, a first authorization request is sent to a second device, including first encrypted information, which is obtained by encrypting the object identifier of the query object using a symmetric encryption key. Second encrypted information is received from the second device, which is obtained by processing the first encrypted information using a first random number and a homomorphic encryption key. Third encrypted information is received from a third device, and the difference between the second and third encrypted information is provided to the second device, where the third device is associated with the query object, and the third encrypted information is determined by the third device based on the first encrypted information and the query object's verification information. Authorization information is received from the second device, generated by the second device after successful decryption verification based on the difference information. A data query request is sent to a fourth device based on the authorization information to obtain the target data of the query object. Thus, a multi-layered encryption mechanism is constructed through homomorphic and symmetric encryption measures. The multiple encryption mechanisms and the difference verification method ensure consistency and accuracy during data interaction, while preventing unauthorized access, thereby protecting the privacy of the query object. Ultimately, privacy protection is achieved for the authorization process, as well as for the query object and its results.

[0106] Figure 2 This is a schematic flowchart of a data anonymity query method proposed in another embodiment of this disclosure.

[0107] like Figure 2 As shown, this data anonymity query method is applied to the first device, and the specific method includes:

[0108] S201: Send a first authorization request to the second device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key.

[0109] S202: Receive second encrypted information provided by the second device, wherein the second encrypted information is obtained by the second device processing the first encrypted information based on the first random number and the homomorphic encryption key.

[0110] S203: Receive the third encrypted information provided by the third device, and determine the difference information between the second encrypted information and the third encrypted information and provide it to the second device, wherein the third device is associated with the query object, and the third encrypted information is determined by the third device based on the first encrypted information and the verification information of the query object.

[0111] S204: Receive authorization information provided by the second device, wherein the authorization information is generated by the second device after the decryption verification based on the difference information is successful.

[0112] The descriptions of S201-S204 can be found in the above embodiments, and will not be repeated here.

[0113] S205: Send a data query request to the fourth device, wherein the data query request includes authorization information and a random mask, and the authorization information is used by the fourth device to generate and send an authentication request to the second device.

[0114] The random mask can refer to a mask generated by the first device to initiate a data query request.

[0115] Among them, the authentication request can refer to the information provided by the fourth device to the second device to request verification of whether its authorization information is compliant.

[0116] In other words, in this embodiment of the present disclosure, after obtaining the authorization information, the first device can generate a data query request with the authorization information and a random mask, and provide it to the fourth device, thereby triggering the data query process.

[0117] S206: Receive target encrypted data provided by the second device, wherein the target encrypted data is determined by the second device from multiple candidate encrypted data based on authorization information, and the candidate encrypted data is obtained by the fourth device after encrypting and blinding the candidate data of the candidate object based on a random mask.

[0118] The target encrypted data may refer to the data associated with the query object that the second device determines from multiple candidate encrypted data based on authorization information.

[0119] Candidate encrypted data refers to the data obtained after encrypting and blinding the candidate data of the candidate object.

[0120] In other words, in this embodiment of the present disclosure, after receiving the authentication request sent by the fourth device, the second device can determine the target encrypted data from multiple candidate encrypted data and provide it to the first device when it is certain that the authorization information is correct.

[0121] S207: Obtain the first blinding value corresponding to the query object based on the random mask and the first encryption information.

[0122] Here, the blinding value can refer to the numerical value used to blind the data. The first blinding value can refer to the blinding value obtained based on the random mask and the first encryption information.

[0123] In this embodiment of the disclosure, when the first blinding value corresponding to the query object is obtained based on the random mask and the first encryption information, reliable reference information can be provided for subsequent decryption processing of the target encrypted data.

[0124] S208: Decrypt the target encrypted data based on the symmetric encryption key and the first blinding value to obtain the target data.

[0125] In other words, after obtaining the target encrypted data, the first device of this disclosure can first obtain the corresponding first blinding value, and then use the symmetric encryption key and the first blinding value to decrypt the target encrypted data to obtain the target data. This ensures that the querying party can only decrypt and obtain authorized data content, thereby enhancing the security and protection of the query results.

[0126] In this embodiment, a data query request is sent to a fourth device, including authorization information and a random mask. The authorization information is used by the fourth device to generate and send an authentication request to the second device. The system receives target encrypted data provided by the second device. This target encrypted data is determined by the second device from multiple candidate encrypted data based on the authorization information. The candidate encrypted data is obtained by the fourth device after encrypting and blinding the candidate data of the candidate objects based on the random mask. A first blinding value corresponding to the query object is obtained based on the random mask and the first encryption information. The target encrypted data is decrypted based on the symmetric encryption key and the first blinding value to obtain the target data. Therefore, by combining symmetric encryption and the blinding value, the security and accuracy of the data query process can be effectively improved. Furthermore, it ensures that the querying party can only decrypt and obtain the authorized data content, thereby further enhancing the security and protection of the query results.

[0127] Figure 3 This is a schematic flowchart of a data anonymity query method proposed in another embodiment of this disclosure.

[0128] like Figure 3 As shown, this data anonymity query method is applied to the second device, and the specific method includes:

[0129] S301: After the queried object completes identity authentication, the second random number is encrypted based on the homomorphic encryption key to obtain the verification information, and the verification information is sent to the third device, which is associated with the queried object.

[0130] The second random number can refer to a random number used to generate verification information for the query object. This second random number can maintain a fixed difference from the first random number, thereby providing a reliable basis for the second device to perform decryption verification based on the difference information.

[0131] In other words, in this embodiment of the present disclosure, after the queried object completes identity authentication, the second device can encrypt a second random number based on a homomorphic encryption key to obtain verification information, and then provide the verification information to the third device. Thus, the verification information can be encrypted based on a homomorphic encryption key, thereby effectively improving the security of the obtained verification information.

[0132] S302: Receive a first authorization request provided by the first device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key.

[0133] In this embodiment of the disclosure, when the second device receives the first authorization request provided by the first device, it can provide a reliable triggering basis for triggering the subsequent authorization process, and the first encrypted information in the first authorization request can also provide reliable data support for obtaining the second encrypted information in the future.

[0134] S303: The first encrypted information is processed based on the first random number and the homomorphic encryption key to obtain the second encrypted information, and the second encrypted information is sent to the first device.

[0135] In this embodiment of the disclosure, when the second device processes the first encrypted information based on the first random number and the homomorphic encryption key to obtain the second encrypted information, and sends the second encrypted information to the first device, it can provide reliable data support for the first device to determine the difference information.

[0136] S304: Receive difference information provided by the first device, wherein the difference information is determined by the first device based on the second encryption information and the third encryption information, and the third encryption information is determined by the third device based on the first encryption information and the verification information.

[0137] In this embodiment of the disclosure, both the second and third encrypted information can be obtained through homomorphic encryption. Therefore, the difference between the two can be used as a verification basis. When the second device receives the difference information provided by the first device, it can provide reliable reference information for subsequent authorization verification.

[0138] S305: Decryption verification is performed based on the difference information, and authorization information is provided to the first device after the verification is successful. The authorization information is used by the first device to obtain the target data corresponding to the query object from the fourth device.

[0139] In other words, in this embodiment of the present disclosure, the second device can perform decryption verification based on the difference information (i.e., the difference verification method), and provide authorization information to the first device after the verification is successful.

[0140] In this embodiment, after the query object completes identity authentication, verification information is obtained by encrypting a second random number based on a homomorphic encryption key, and then sent to a third device associated with the query object. The system receives a first authorization request from a first device, which includes first encrypted information obtained by encrypting the query object's object identifier using a symmetric encryption key. Second encrypted information is obtained by processing the first encrypted information using the first random number and the homomorphic encryption key, and then sent to the first device. The system also receives difference information from the first device, determined by the first device based on the second and third encrypted information, and by the third device based on the first encrypted information and the verification information. Decryption verification is performed based on the difference information, and upon successful verification, authorization information is provided to the first device. This authorization information serves as the basis for the first device to obtain the target data corresponding to the query object from a fourth device. Thus, a multi-layered encryption mechanism is constructed using homomorphic and symmetric encryption measures. This multi-layered encryption mechanism, combined with the difference verification method, ensures consistency and accuracy during data interaction, prevents unauthorized access, and protects the privacy of the query object. Ultimately, this achieves privacy protection during the authorization process, as well as privacy protection for the query object and its results.

[0141] Figure 4 This is a schematic flowchart of a data anonymity query method proposed in another embodiment of this disclosure.

[0142] like Figure 4 As shown, this data anonymity query method is applied to the second device, and the specific method includes:

[0143] S401: Receive an authentication request sent by a fourth device, wherein the authentication request includes authorization information.

[0144] In other words, in this embodiment of the present disclosure, the second device can receive the authentication request sent by the fourth device, thereby providing a reliable triggering basis for subsequent processes.

[0145] S402: Obtain first encrypted information based on authorization information, and generate target fuzzy matching information based on the first encrypted information and the third random number.

[0146] The third random number can refer to a randomly generated value used to generate target fuzzy matching information.

[0147] The target fuzzy matching information can refer to the information generated based on the first encrypted information and the third random number for fuzzy matching. For example, when the object identifier of the query object is a mobile phone number, the target fuzzy matching information refers to the fuzzy matching of the mobile phone number.

[0148] In this embodiment of the disclosure, when the first encrypted information is obtained based on the authorization information, and the target fuzzy matching information is generated based on the first encrypted information and the third random number, a reliable matching basis can be provided for determining the target encrypted data from multiple candidate encrypted data.

[0149] S403: Provide the third random number and target fuzzy matching information to the fourth device.

[0150] In this embodiment of the disclosure, when the second device provides the third random number and the target fuzzy matching information to the fourth device, it can provide reliable reference information for the fourth device to obtain multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information.

[0151] S404: Receive multiple candidate fuzzy matching information provided by the fourth device, and candidate encrypted data corresponding to each candidate fuzzy matching information. The candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object.

[0152] In other words, in this embodiment of the present disclosure, the second device can receive multiple candidate fuzzy matching information provided by the fourth device, as well as candidate encrypted data corresponding to each candidate fuzzy matching information, thereby providing data support for the subsequent determination of target encrypted data.

[0153] S405: Determine the candidate fuzzy matching information that matches the target fuzzy matching information, and provide the candidate encrypted data corresponding to the matching candidate fuzzy matching information as the target encrypted data to the first device.

[0154] In other words, in this embodiment of the present disclosure, after the second device obtains the target fuzzy matching information and the candidate fuzzy matching information, it can determine the candidate fuzzy matching information that matches the target fuzzy matching information, and provide the candidate encrypted data corresponding to the matching candidate fuzzy matching information as the target encrypted data to the first device, thereby ensuring that the second device learns the relevant information of the query object during the processing.

[0155] In this embodiment, the process involves receiving an authentication request from a fourth device, which includes authorization information; obtaining first encrypted information based on the authorization information; generating target fuzzy matching information based on the first encrypted information and a third random number; providing the third random number and the target fuzzy matching information to the fourth device; receiving multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information from the fourth device, wherein the candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object; determining the candidate fuzzy matching information that matches the target fuzzy matching information, and providing the candidate encrypted data corresponding to the matching candidate fuzzy matching information as target encrypted data to the first device. Therefore, while ensuring the authorization of the query object, the privacy and security of the query object information during processing can be guaranteed based on fuzzy matching measures.

[0156] Figure 5 This is a schematic flowchart of a data anonymity query method proposed in another embodiment of this disclosure.

[0157] like Figure 5 As shown, this data anonymity query method is applied to a third device, and the specific method includes:

[0158] S501: Receive verification information provided by the second device, wherein the verification information is obtained by the second device encrypting the second random number based on the homomorphic encryption key after the queried object has completed identity authentication.

[0159] In other words, in this embodiment of the present disclosure, the third device can receive verification information provided by the second device, thereby providing data support for subsequently obtaining the third encrypted information.

[0160] S502: Receive a second authorization request sent by the first device, wherein the second authorization request includes a symmetric encryption key.

[0161] In other words, in this embodiment of the disclosure, the third device can receive the second authorization request sent by the first device, thereby providing a reliable triggering basis for triggering subsequent processes, and the symmetric encryption key contained in the second authorization request can provide encryption tools for the third device to obtain the first encrypted information.

[0162] S503: The first encrypted information is obtained by encrypting the object identifier of the queried object based on the symmetric encryption key.

[0163] In other words, the third device (i.e. the query object) can also encrypt the object identifier of the query object based on the symmetric encryption key to obtain the first encrypted information, thereby providing data support for obtaining the third encrypted information in the future.

[0164] S504: Determine the product of the first encrypted information and the verification information as the third encrypted information.

[0165] In other words, in this embodiment of the present disclosure, the product of the first encrypted information and the verification information can be determined as the third encrypted information, thereby ensuring the practicality of the obtained third encrypted information in the data query process.

[0166] S505: Provide the third encrypted information to the first device, wherein the first device is used to determine the difference information, the difference information is used by the second device to perform decryption verification, and the second device provides authorization information to the first device after the decryption verification is successful. The authorization information is used by the first device to obtain the target data of the query object.

[0167] In other words, in this embodiment of the present disclosure, after obtaining the third encrypted information, the third device can provide it to the first device, thereby providing reliable data support for the first device's data query authorization verification process.

[0168] In this embodiment, the system receives verification information provided by a second device, which is obtained by encrypting a second random number using a homomorphic encryption key after the queried object completes identity authentication. It then receives a second authorization request from a first device, which includes a symmetric encryption key. First encrypted information is obtained by encrypting the object identifier of the queried object using the symmetric encryption key. The product of the first encrypted information and the verification information is determined as third encrypted information. This third encrypted information is then provided to the first device, whereby the first device uses it to determine a difference information, which is used by the second device for decryption verification. After successful decryption verification, the second device provides authorization information to the first device, which is used by the first device to obtain the target data of the queried object. Thus, a multi-layered encryption mechanism is constructed using homomorphic and symmetric encryption measures. This multi-layered encryption mechanism, combined with the difference verification method, ensures consistency and accuracy during data interaction, prevents unauthorized access, and protects the privacy of the queried object. Ultimately, this achieves privacy protection during the authorization process, as well as for the privacy of the queried object and its results.

[0169] Figure 6 This is a schematic flowchart of a data anonymity query method proposed in another embodiment of this disclosure.

[0170] like Figure 6 As shown, this data anonymity query method is applied to the fourth device, and the specific method includes:

[0171] S601: Receive a data query request sent by the first device, wherein the data query request is generated by the first device based on authorization information.

[0172] In other words, in this embodiment of the disclosure, the fourth device (i.e., the device of the data being queried) can receive the data query request sent by the first device, thereby providing a reliable triggering basis for triggering the subsequent generation of authentication requests.

[0173] S602: Send an authentication request to the second device, wherein the authentication request includes authorization information.

[0174] In this embodiment of the disclosure, when the fourth device generates an authentication request based on the authorization information and provides it to the second device, it can provide a reliable triggering basis for the second device to obtain the third random number and the target fuzzy matching information.

[0175] S603: Receive a third random number and target fuzzy matching information provided by the second device, wherein the target fuzzy matching information is generated based on the first encrypted information and the third random number, the first encrypted information is determined based on the authorization information, and the first encrypted information is used to indicate the object identifier of the queried object.

[0176] In this embodiment of the disclosure, the third random number and target fuzzy matching information received by the fourth device from the second device can provide reliable reference information for subsequently determining multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information.

[0177] S604: Based on the third random number and the target fuzzy matching information, determine multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information. The candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object.

[0178] In this embodiment of the disclosure, when determining multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information based on the third random number and the target fuzzy matching information, it can be based on a pre-trained machine learning model, or a third-party device can determine multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information based on the third random number and the target fuzzy matching information, without any limitation.

[0179] Optionally, in some embodiments, the data query request further includes a random mask. When determining multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information based on a third random number and target fuzzy matching information, the process may involve: encrypting the object identifier corresponding to the candidate object based on a symmetric encryption key to obtain candidate encrypted information; generating candidate fuzzy matching information corresponding to the candidate encrypted information based on the third random number; performing matching processing based on the target fuzzy matching information to obtain batch candidate encrypted information and candidate data corresponding to the candidate encrypted information; obtaining a second blinding value corresponding to the candidate object based on the random mask and candidate encrypted information; and encrypting the candidate data corresponding to the candidate encrypted information based on the symmetric encryption key and the second blinding value to obtain candidate encrypted data. Thus, the blinding process ensures that the query content cannot be directly parsed when returned, guaranteeing the security of the queried data.

[0180] S605: Provide multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information to the second device, wherein the multiple candidate encrypted data includes target encrypted data corresponding to the query object.

[0181] In other words, in this embodiment of the present disclosure, after the fourth device determines multiple candidate fuzzy matching information and the candidate encrypted data corresponding to each candidate fuzzy matching information, it can directly provide them to the second device. Thus, while the fourth device provides the target encrypted data to the second device, the fourth device can avoid learning the specific query content, thereby effectively improving data privacy and security.

[0182] In this embodiment, the process involves receiving a data query request from a first device, generated by the first device based on authorization information; sending an authentication request to a second device, the authentication request including authorization information; receiving a third random number and target fuzzy matching information provided by the second device, the target fuzzy matching information being generated based on first encrypted information and the third random number, the first encrypted information being determined based on authorization information, and the first encrypted information indicating the object identifier of the query object; determining multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information based on the third random number and the target fuzzy matching information, wherein the candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object; and providing the multiple candidate fuzzy matching information and the candidate encrypted data corresponding to each candidate fuzzy matching information to the second device, wherein the multiple candidate encrypted data includes target encrypted data corresponding to the query object. Therefore, while providing target encrypted data to the second device, the specific query content is prevented from being known by the fourth device, thereby effectively improving data privacy and security.

[0183] In summary, the data anonymity query method proposed in this disclosure achieves authorization anonymization through homomorphic ciphertext verification code; it constructs a multi-layer encryption mechanism through ciphertext multiplication of homomorphic encryption and symmetric encryption, and constructs a blinding strategy using encrypted ID and mask to ensure that no one other than the querying party can obtain the query results, thereby protecting the privacy of the query object, and ultimately achieving privacy protection in the authorization process as well as the privacy protection of the query object and the results.

[0184] like Figure 7 As shown, Figure 7 This is a schematic diagram of the data anonymity query scheme proposed in this disclosure. It includes the following steps:

[0185] Step 1: The querying party and the queried party negotiate the key, and the individual user authenticates their identity at the authentication center and obtains the verification code.

[0186] The querying party and the queried party negotiate a key, Key, using the symmetric encryption algorithm Enc1, through key exchange or offline methods. Individual users authenticate their identity at an authentication center. After successful authentication, the authentication center encrypts a random number r-1 using the homomorphic encryption method Enc2 to obtain a verification code, which is then sent to each user's terminal. Here, the authentication center does not simply generate or directly send the verification code; instead, it generates it using a homomorphic encryption algorithm. This scheme ensures that even if an attacker intercepts the verification code, they cannot decrypt its content or predict the next verification code. Furthermore, the party receiving the verification code can manipulate it to initiate reverse verification.

[0187] Step 2: The querying party obtains authorization from the individual user and initiates an authorization verification application to the certification center. After successful verification, a token is returned.

[0188] The querying party encrypts the query ID using a key and sends a request to the authentication center. The authentication center multiplies the encrypted ID by a random number *r* and encrypts it again using the homomorphic encryption method Enc2 before returning it to the querying party. Then, the querying party initiates an authorization request to the individual user and sends the key to the user. After obtaining authorization, the individual user encrypts their own ID using the key, multiplies it by a verification code, and returns it to the querying party. The querying party calculates the difference between the result returned by the authentication center and the result returned by the individual user and sends it to the authentication center. The authentication center decrypts the result to obtain the encrypted ID and simultaneously issues a token to the querying party. Here, the individual user uses ciphertext multiplication with symmetric and homomorphic encryption for authorization verification, ensuring that the ID is not exposed during the authorization process and enhancing user privacy protection. Furthermore, multiple encryption mechanisms and difference verification methods ensure consistency and accuracy during data interaction while preventing unauthorized access.

[0189] Step 3: The querying party sends a query to the queried party with the authorization token. The queried party sends an authentication request to the authentication center. After successful authentication, the fuzzy query primary key is returned.

[0190] The querying party sends a query request to the queried party, carrying a token and a mask `s`. The queried party then sends an authentication request to the authentication center, carrying the token. After successful authentication, the authentication center calculates a fuzzy matching ID based on the encrypted ID corresponding to the token and a random number `p`. An example of calculating the fuzzy matching ID is as follows: `ID_fuzzy = Enc1(ID) mod p`. The fuzzy matching ID and the random number `p` are then returned to the queried party. This combination of authentication and fuzzy query primary keys ensures not only the security of data transmission but also prevents the direct exposure of the query target through fuzzy matching. This fuzzy query mechanism is particularly suitable for protecting user privacy without affecting the accuracy of query results.

[0191] Step 4: The queried party uses a fuzzy primary key query, obfuscates and encrypts the value, and then returns it to the authentication center.

[0192] The queried party encrypts all its IDs using a symmetric key and calculates a fuzzy matching ID using a random number p in the same way. Then, it matches the fuzzy matching ID sent by the authenticator to obtain all encrypted IDs and the query content. A blinding value is then obtained using a mask and the encrypted ID; an example of the blinding value calculation is as follows: q = Enc1(Idi)mods. Finally, each query content is added with the corresponding blinding value and encrypted with a key. The encrypted blinded query content and the encrypted ID are then returned to the authentication center. Here, the query content is encrypted after generating a blinding value based on the mask and the encrypted ID. This blinding process ensures that the query content cannot be directly parsed when returned, thus guaranteeing the security of the queried party's data.

[0193] Step 5: The authentication center matches the encrypted primary key and returns the matching value to the querying party, who then decrypts the data to obtain the query result.

[0194] The authentication center matches the queried party's encrypted ID with the encrypted ID returned by the queried party, and returns the encrypted and blinded query content corresponding to the matching ID to the queried party. The queried party calculates the blinding value in the same way, and finally uses the key and the blinding value to decrypt the encrypted and blinded query content to obtain the query result. Through layered encryption and matching of the key and the blinding value, the secure transmission of the query result is ensured. This design ensures that the queried party can only decrypt authorized data content, enhancing the security and protection of the query result.

[0195] For example, such as Figure 8 As shown, Figure 8This is a schematic diagram of an embodiment of anonymous data query proposed in this disclosure. The specific embodiment involves four roles: individual user, querying party, authentication center, and queried party. The designed application scenario is: the querying party needs to query the queried party's personal credit score via mobile phone number. Referring to the diagram above, the specific details are as follows:

[0196] (1) The querying party and the querying party negotiate a symmetric encryption key.

[0197] (2) When an individual user authenticates their identity at the authentication center, the authentication center selects a random number r-1 (i.e. the second random number mentioned above) and sends the homomorphic ciphertext Enc2(r-1) as a verification code (i.e. the verification information mentioned above) to the individual user.

[0198] (3) The querying party uses the symmetric encryption key Key to encrypt the mobile phone number (i.e. the above object identifier) ​​to obtain Enc1(ID) (i.e. the above first encrypted information), and sends an authorization application (i.e. the above first authorization request) to the certification center with Enc1(ID).

[0199] (4) The authentication center uses the random number r (i.e. the first random number mentioned above) and the homomorphic encryption key to calculate Enc2(Enc1(ID)*r) (i.e. the second encrypted information mentioned above) and returns it to the querying party.

[0200] (5) The querying party sends an authorization request (i.e., the second authorization request mentioned above) to the individual user with the key Key.

[0201] (6) After the individual user confirms the authorization, they encrypt their own mobile phone number using the symmetric encryption key Key, and calculate Enc1(ID)*Enc2(r-1) (i.e. the third encrypted information mentioned above) in combination with the verification code of the authentication center, and return the calculation result to the querying party.

[0202] (7) The querying party calculates the difference (i.e. the above difference information) based on the results returned by the certification center and the results returned by the individual user, namely Enc2(Enc1(ID)*r)-Enc1(ID)*Enc2(r-1), and sends the calculation result to the certification center.

[0203] (8) The authentication center uses the homomorphic encryption private key to decrypt and obtain the encrypted mobile phone number Enc1(ID), and at the same time sends the token (i.e. the above authorization information) to the querying party.

[0204] (9) The querying party sends a request to the querying party with a token and a random mask s.

[0205] (10) The party being queried uses the token to initiate an authentication request to the authentication center.

[0206] (11) The authentication center obtains the encrypted ID based on the token of the queried party, generates a random number p (i.e. the third random number mentioned above), calculates the fuzzy matching encrypted mobile phone number ID_fuzzy=Enc1(ID)modp, and finally returns the fuzzy matching mobile phone number and the random number to the queried party.

[0207] (12) The queried party uses the key Key to encrypt all its mobile phone numbers (i.e., the candidate identifiers of the aforementioned candidate objects), and uses a random number p to generate a fuzzy matching mobile phone number (i.e., the aforementioned target fuzzy matching information). The queried party performs a one-by-one matching based on the fuzzy matching mobile phone number from the authentication center to obtain the batch encrypted mobile phone number Enc1(IDi) (i.e., the aforementioned fourth encrypted information) and the credit score vi (i.e., the relevant data of the aforementioned candidate objects). The queried party then uses a random mask s and the encrypted mobile phone number to obtain the blinding value (i.e., the aforementioned first blinding value): qi = Enc1(Idi)mods. Finally, each credit score vi is added to the corresponding blinding value qi and then encrypted with Key to obtain the encrypted blinded credit score Enc1(vi+qi) (i.e., the aforementioned fifth encrypted information).

[0208] (13) The party being queried sends a batch of encrypted mobile phone numbers Enc1(IDi) and encrypted blind credit scores Enc1(vi+qi) to the authentication center.

[0209] (14) The authentication center uses the encrypted mobile phone number Enc1(ID) of the querying party to accurately match the content sent by the querying party, and returns the matched encrypted blind credit score Enc1(v+q) to the querying party.

[0210] (15) The querying party calculates the blinding value (i.e. the second blinding value mentioned above) in the same way, and finally uses the Key and the blinding value to decrypt the encrypted blinded query content to obtain the credit score.

[0211] In summary, the technical points of the data anonymity query method proposed in this disclosure include at least the following:

[0212] (1) Privacy Protection in the Authorization Process: A novel scheme is proposed to protect the privacy of the authorizing entity while ensuring authorization from individual users. Specifically, a homomorphic ciphertext of a random number is used as a verification code to ensure the privacy and security of the verification content, and the verification code can be manipulated to initiate reverse verification. Then, authorization verification is performed using ciphertext multiplication of symmetric encryption and homomorphic encryption. Multiple encryption mechanisms and differential verification methods ensure the privacy and accuracy of the authorization process. Based on this scheme, the authentication center and the queried party cannot obtain the authorization entity, but they can prove the authorization of the individual user. Only the authorized individual user can correctly obtain the query results.

[0213] (2) Privacy Protection of Query Objects and Results: A novel three-party computation scheme is proposed to protect the privacy of query objects and results while correctly obtaining them. Specifically, a combination of homomorphic encryption, symmetric encryption, and blinded values ​​ensures data security at each step. Simultaneously, by introducing fuzzy query and blinding processing into the authentication center, user privacy is effectively protected, and the accuracy and security of data queries are ensured. Using this scheme, the queried party and the authentication center cannot correctly obtain the query objects and results during the scheme execution process; the querying party can only obtain the content it needs to query and cannot obtain other query results.

[0214] Figure 9 This is a schematic diagram of the structure of a data anonymity query device proposed in an embodiment of this disclosure.

[0215] like Figure 9 As shown, the data anonymity query device 90 is applied to the first device, and the device includes:

[0216] The first sending module 901 is used to send a first authorization request to the second device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key;

[0217] The first receiving module 902 is used to receive the second encrypted information provided by the second device, wherein the second encrypted information is obtained by the second device processing the first encrypted information based on the first random number and the homomorphic encryption key;

[0218] The second receiving module 903 is used to receive the third encrypted information provided by the third device, and to determine the difference information between the second encrypted information and the third encrypted information and provide it to the second device. The third device is associated with the query object, and the third encrypted information is determined by the third device based on the first encrypted information and the verification information of the query object.

[0219] The third receiving module 904 is used to receive authorization information provided by the second device, wherein the authorization information is generated by the second device after the decryption verification based on the difference information is successful;

[0220] The second sending module 905 is used to send a data query request to the fourth device based on the authorization information in order to obtain the target data of the query object.

[0221] It should be noted that the foregoing explanation of the data anonymity query method also applies to the data anonymity query device of this embodiment, and will not be repeated here.

[0222] In this embodiment, a first authorization request is sent to a second device, including first encrypted information, which is obtained by encrypting the object identifier of the query object using a symmetric encryption key. Second encrypted information is received from the second device, which is obtained by processing the first encrypted information using a first random number and a homomorphic encryption key. Third encrypted information is received from a third device, and the difference between the second and third encrypted information is provided to the second device, where the third device is associated with the query object, and the third encrypted information is determined by the third device based on the first encrypted information and the query object's verification information. Authorization information is received from the second device, generated by the second device after successful decryption verification based on the difference information. A data query request is sent to a fourth device based on the authorization information to obtain the target data of the query object. Thus, a multi-layered encryption mechanism is constructed through homomorphic and symmetric encryption measures. The multiple encryption mechanisms and the difference verification method ensure consistency and accuracy during data interaction, while preventing unauthorized access, thereby protecting the privacy of the query object. Ultimately, privacy protection is achieved for the authorization process, as well as for the query object and its results.

[0223] Figure 10 This is a schematic diagram of the structure of a data anonymity query device proposed in another embodiment of this disclosure.

[0224] like Figure 10 As shown, the data anonymity query device 100 is applied to the second device, and the device includes:

[0225] The third sending module 1001 is used to encrypt the second random number based on the homomorphic encryption key to obtain verification information after the query object completes identity authentication, and send the verification information to the third device, which is associated with the query object.

[0226] The fourth receiving module 1002 is used to receive a first authorization request provided by the first device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key;

[0227] The fourth sending module 1003 is used to process the first encrypted information based on the first random number and the homomorphic encryption key to obtain the second encrypted information, and then send the second encrypted information to the first device;

[0228] The fifth receiving module 1004 is used to receive the difference information provided by the first device, wherein the difference information is determined by the first device based on the second encryption information and the third encryption information, and the third encryption information is determined by the third device based on the first encryption information and the verification information.

[0229] The fifth sending module 1005 is used to perform decryption verification based on the difference information, and to provide authorization information to the first device after the verification is successful. The authorization information is used by the first device to obtain the target data corresponding to the query object from the fourth device.

[0230] It should be noted that the foregoing explanation of the data anonymity query method also applies to the data anonymity query device of this embodiment, and will not be repeated here.

[0231] In this embodiment, after the query object completes identity authentication, verification information is obtained by encrypting a second random number based on a homomorphic encryption key, and then sent to a third device associated with the query object. The system receives a first authorization request from a first device, which includes first encrypted information obtained by encrypting the query object's object identifier using a symmetric encryption key. Second encrypted information is obtained by processing the first encrypted information using the first random number and the homomorphic encryption key, and then sent to the first device. The system also receives difference information from the first device, determined by the first device based on the second and third encrypted information, and by the third device based on the first encrypted information and the verification information. Decryption verification is performed based on the difference information, and upon successful verification, authorization information is provided to the first device. This authorization information serves as the basis for the first device to obtain the target data corresponding to the query object from a fourth device. Thus, a multi-layered encryption mechanism is constructed using homomorphic and symmetric encryption measures. This multi-layered encryption mechanism, combined with the difference verification method, ensures consistency and accuracy during data interaction, prevents unauthorized access, and protects the privacy of the query object. Ultimately, this achieves privacy protection during the authorization process, as well as privacy protection for the query object and its results.

[0232] Figure 11 This is a schematic diagram of the structure of a data anonymity query device proposed in another embodiment of this disclosure.

[0233] like Figure 11 As shown, the data anonymity query device 110 is applied to a third device, which is associated with the query object. The device includes:

[0234] The eighth receiving module 1101 is used to receive verification information provided by the second device, wherein the verification information is obtained by the second device encrypting a second random number based on a homomorphic encryption key after the queried object has completed identity authentication;

[0235] The ninth receiving module 1102 is used to receive a second authorization request sent by the first device, wherein the second authorization request includes a symmetric encryption key;

[0236] Processing module 1103 is used to encrypt the object identifier of the query object based on a symmetric encryption key to obtain the first encrypted information;

[0237] The second determining module 1104 is used to determine the product of the first encrypted information and the verification information as the third encrypted information;

[0238] The eighth sending module 1105 is used to provide the third encrypted information to the first device. The first device is used to determine the difference information, and the difference information is used by the second device to perform decryption verification. After the decryption verification is successful, the second device provides authorization information to the first device. The authorization information is used by the first device to obtain the target data of the query object.

[0239] It should be noted that the foregoing explanation of the data anonymity query method also applies to the data anonymity query device of this embodiment, and will not be repeated here.

[0240] In this embodiment, the system receives verification information provided by a second device, which is obtained by encrypting a second random number using a homomorphic encryption key after the queried object completes identity authentication. It then receives a second authorization request from a first device, which includes a symmetric encryption key. First encrypted information is obtained by encrypting the object identifier of the queried object using the symmetric encryption key. The product of the first encrypted information and the verification information is determined as third encrypted information. This third encrypted information is then provided to the first device, whereby the first device uses it to determine a difference information, which is used by the second device for decryption verification. After successful decryption verification, the second device provides authorization information to the first device, which is used by the first device to obtain the target data of the queried object. Thus, a multi-layered encryption mechanism is constructed using homomorphic and symmetric encryption measures. This multi-layered encryption mechanism, combined with the difference verification method, ensures consistency and accuracy during data interaction, prevents unauthorized access, and protects the privacy of the queried object. Ultimately, this achieves privacy protection during the authorization process, as well as for the privacy of the queried object and its results.

[0241] Figure 12 This is a schematic diagram of the structure of a data anonymity query device proposed in another embodiment of this disclosure.

[0242] like Figure 12 As shown, the data anonymity query device 120 is applied to a fourth device, and the device includes:

[0243] The sixth receiving module 1201 is used to receive a data query request sent by the first device, wherein the data query request is generated by the first device based on authorization information;

[0244] The sixth sending module 1202 is used to send an authentication request to the second device, wherein the authentication request includes authorization information;

[0245] The seventh receiving module 1203 is used to receive a third random number and target fuzzy matching information provided by the second device, wherein the target fuzzy matching information is generated based on the first encrypted information and the third random number, the first encrypted information is determined based on the authorization information, and the first encrypted information is used to indicate the object identifier of the query object;

[0246] The first determining module 1204 is used to determine multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information based on the third random number and the target fuzzy matching information. The candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object.

[0247] The seventh sending module 1205 is used to provide multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information to the second device, wherein the multiple candidate encrypted data includes target encrypted data corresponding to the query object.

[0248] It should be noted that the foregoing explanation of the data anonymity query method also applies to the data anonymity query device of this embodiment, and will not be repeated here.

[0249] In this embodiment, the process involves receiving a data query request from a first device, generated by the first device based on authorization information; sending an authentication request to a second device, the authentication request including authorization information; receiving a third random number and target fuzzy matching information provided by the second device, the target fuzzy matching information being generated based on first encrypted information and the third random number, the first encrypted information being determined based on authorization information, and the first encrypted information indicating the object identifier of the query object; determining multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information based on the third random number and the target fuzzy matching information, wherein the candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object; and providing the multiple candidate fuzzy matching information and the candidate encrypted data corresponding to each candidate fuzzy matching information to the second device, wherein the multiple candidate encrypted data includes target encrypted data corresponding to the query object. Therefore, while providing target encrypted data to the second device, the specific query content is prevented from being known by the fourth device, thereby effectively improving data privacy and security.

[0250] According to embodiments of this application, this application also provides an electronic device and a readable storage medium.

[0251] Figure 13 This is a block diagram of an electronic device according to an embodiment of the present application.

[0252] like Figure 13 As shown, the electronic device includes:

[0253] The memory 1301, the processor 1302, and computer instructions stored on the memory 1301 and executable on the processor 1302.

[0254] When processor 1302 executes instructions, it implements the data anonymity query method provided in the above embodiments.

[0255] Furthermore, electronic devices also include:

[0256] Communication interface 1303 is used for communication between memory 1301 and processor 1302.

[0257] The memory 1301 is used to store computer instructions that can be executed on the processor 1302.

[0258] The memory 1301 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk storage device.

[0259] The processor 1302 is used to implement the data anonymity query method of the above embodiments when executing a program.

[0260] If the memory 1301, processor 1302, and communication interface 1303 are implemented independently, then the communication interface 1303, memory 1301, and processor 1302 can be interconnected via a bus to complete communication between them. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be divided into address buses, data buses, control buses, etc. For ease of representation, Figure 13 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0261] Optionally, in a specific implementation, if the memory 1301, processor 1302, and communication interface 1303 are integrated on a single chip, then the memory 1301, processor 1302, and communication interface 1303 can communicate with each other through an internal interface.

[0262] The processor 1302 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of this application.

[0263] This application also proposes a computer program product that, when executed by an instruction processor, implements the data anonymity query method of the embodiments of this application.

[0264] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., refer to specific features, structures, materials, or characteristics described in connection with that embodiment or example, which are included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0265] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this application, "multiple" means at least two, such as two, three, etc., unless otherwise explicitly specified.

[0266] Any process or method description in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing custom logic functions or processes, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as should be understood by those skilled in the art to which embodiments of this application pertain.

[0267] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of computer-readable media include: an electrical connection having one or more wires (electronic device), a portable computer disk drive (magnetic device), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which programs can be printed, because programs can be obtained electronically, for example, by optically scanning the paper or other media, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0268] It should be understood that various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0269] Those skilled in the art will understand that all or part of the steps of the methods described in the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, the program includes one or a combination of the steps of the method embodiments.

[0270] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0271] The storage medium mentioned above can be a read-only memory, a disk, or an optical disk, etc. Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions, and variations to the above embodiments within the scope of this application.

Claims

1. A method for anonymous data query, characterized in that, Applied to a first device, the method includes: Send a first authorization request to the second device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key; The device receives second encrypted information provided by the second device, wherein the second encrypted information is obtained by the second device processing the first encrypted information based on a first random number and a homomorphic encryption key; The third device receives third encrypted information provided by a third device and determines the difference information between the second encrypted information and the third encrypted information, which is then provided to the second device. The third device is associated with the query object. The third encrypted information is determined by the third device based on the first encrypted information and the verification information of the query object. The verification information is obtained by the second device after the query object completes identity authentication by encrypting a second random number based on a homomorphic encryption key. Receive authorization information provided by the second device, wherein the authorization information is generated by the second device after the decryption verification based on the difference information is successful; Based on the authorization information, a data query request is sent to the fourth device to obtain the target data of the query object.

2. The method as described in claim 1, characterized in that, The receipt of third encrypted information provided by a third device includes: Send a second authorization request to the third device, wherein the second authorization request includes the symmetric encryption key; The third encrypted information is received from the third device, wherein the third encrypted information is the product of the first encrypted information and the verification information, and the first encrypted information is obtained by the third device after encrypting the object identifier based on the symmetric encryption key.

3. The method as described in claim 1, characterized in that, The step of sending a data query request to the fourth device based on the authorization information to obtain the target data of the query object includes: The data query request is sent to the fourth device, wherein the data query request includes the authorization information and a random mask, and the authorization information is used by the fourth device to generate and send an authentication request to the second device; The device receives target encrypted data provided by the second device, wherein the target encrypted data is determined by the second device from multiple candidate encrypted data based on the authorization information, and the candidate encrypted data is obtained by the fourth device after encrypting and blinding the candidate data of the candidate object based on the random mask; Based on the random mask and the first encryption information, obtain the first blinding value corresponding to the query object; The target encrypted data is decrypted based on the symmetric encryption key and the first blinding value to obtain the target data.

4. A method for anonymous data query, characterized in that, Applied to a second device, the method includes: After the queried object completes identity authentication, the second random number is encrypted based on the homomorphic encryption key to obtain verification information, and the verification information is sent to a third device, which is associated with the queried object. Receive a first authorization request provided by a first device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key; The first encrypted information is processed based on the first random number and the homomorphic encryption key to obtain the second encrypted information, and the second encrypted information is sent to the first device. The device receives difference information provided by the first device, wherein the difference information is determined by the first device based on the second encryption information and the third encryption information, and the third encryption information is determined by the third device based on the first encryption information and the verification information; Decryption verification is performed based on the difference information, and authorization information is provided to the first device after the verification is successful. The authorization information is used as the first device to obtain the target data corresponding to the query object from the fourth device.

5. The method as described in claim 4, characterized in that, The method further includes: Receive the authentication request sent by the fourth device, wherein the authentication request includes the authorization information; The first encrypted information is obtained based on the authorization information, and target fuzzy matching information is generated based on the first encrypted information and the third random number. The third random number and the target fuzzy matching information are provided to the fourth device; The system receives multiple candidate fuzzy matching information provided by the fourth device, as well as candidate encrypted data corresponding to each candidate fuzzy matching information. The candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object. Determine candidate fuzzy matching information that matches the target fuzzy matching information, and provide the candidate encrypted data corresponding to the matching candidate fuzzy matching information as target encrypted data to the first device.

6. A method for anonymous data query, characterized in that, Applied to a third device as described in any one of claims 1-3, wherein the third device is associated with a query object, the method comprises: Receive verification information provided by a second device, wherein the verification information is obtained by the second device encrypting a second random number based on a homomorphic encryption key after the queried object has completed identity authentication; Receive a second authorization request sent by the first device, wherein the second authorization request includes a symmetric encryption key; The first encrypted information is obtained by encrypting the object identifier of the queried object based on the symmetric encryption key. The product of the first encrypted information and the verification information is determined as the third encrypted information; The third encrypted information is provided to the first device, wherein the third encrypted information is used by the first device to determine the difference information, the difference information is used by the second device to perform decryption verification, and the second device provides authorization information to the first device after the decryption verification is successful, the authorization information is used by the first device to obtain the target data of the query object.

7. A method for anonymous data query, characterized in that, The method, applied to the fourth device according to any one of claims 1-3, comprises: Receive a data query request sent by a first device, wherein the data query request is generated by the first device based on authorization information; Send an authentication request to the second device, wherein the authentication request includes the authorization information; Receive a third random number and target fuzzy matching information provided by the second device, wherein the target fuzzy matching information is generated based on the first encrypted information and the third random number, the first encrypted information is determined based on the authorization information, and the first encrypted information is used to indicate the object identifier of the query object; Based on the third random number and the target fuzzy matching information, multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information are determined, wherein the candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object; The plurality of candidate fuzzy matching information and the candidate encrypted data corresponding to each candidate fuzzy matching information are provided to the second device, wherein the plurality of candidate encrypted data includes target encrypted data corresponding to the query object.

8. The method as described in claim 7, characterized in that, The data query request also includes a random mask; The step of determining multiple candidate fuzzy matching information based on the third random number and the target fuzzy matching information, and candidate encrypted data corresponding to each candidate fuzzy matching information, includes: Candidate encrypted information is obtained by encrypting the object identifier corresponding to the candidate object using a symmetric encryption key; Based on the third random number, candidate fuzzy matching information corresponding to the candidate encrypted information is generated; Matching processing is performed based on the target fuzzy matching information to obtain a batch of candidate encrypted information and candidate data corresponding to the candidate encrypted information; Based on the random mask and the candidate encryption information, obtain the second blinding value corresponding to the candidate object; The candidate encrypted data is obtained by encrypting the candidate data corresponding to the candidate encrypted information based on the symmetric encryption key and the second blinding value.

9. A data anonymity query device, characterized in that, Applied to a first device, the device includes: The first sending module is used to send a first authorization request to the second device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key; The first receiving module is configured to receive second encrypted information provided by the second device, wherein the second encrypted information is obtained by the second device processing the first encrypted information based on a first random number and a homomorphic encryption key; The second receiving module is used to receive third encrypted information provided by the third device, and to determine the difference information between the second encrypted information and the third encrypted information and provide it to the second device. The third device is associated with the query object. The third encrypted information is determined by the third device based on the first encrypted information and the verification information of the query object. The verification information is obtained by the second device after the query object completes identity authentication by encrypting a second random number based on a homomorphic encryption key. The third receiving module is used to receive authorization information provided by the second device, wherein the authorization information is generated by the second device after the decryption verification based on the difference information is successful; The second sending module is used to send a data query request to the fourth device based on the authorization information in order to obtain the target data of the query object.

10. A data anonymity query device, characterized in that, Applied to a second device, the device includes: The third sending module is used to encrypt the second random number based on the homomorphic encryption key to obtain verification information after the query object completes identity authentication, and send the verification information to the third device, which is associated with the query object; The fourth receiving module is used to receive a first authorization request provided by the first device, wherein the first authorization request includes first encrypted information, which is obtained by encrypting the object identifier of the queried object with a symmetric encryption key; The fourth sending module is used to process the first encrypted information based on the first random number and the homomorphic encryption key to obtain the second encrypted information, and then send the second encrypted information to the first device; The fifth receiving module is used to receive the difference information provided by the first device, wherein the difference information is determined by the first device based on the second encryption information and the third encryption information, and the third encryption information is determined by the third device based on the first encryption information and the verification information; The fifth sending module is used to perform decryption verification based on the difference information, and to provide authorization information to the first device after the verification is successful. The authorization information is used as the target data corresponding to the query object obtained by the first device from the fourth device.

11. A data anonymity query device, characterized in that, Applied to the third device of claim 9, the third device being associated with a query object, the apparatus comprising: The eighth receiving module is used to receive verification information provided by the second device, wherein the verification information is obtained by the second device encrypting a second random number based on a homomorphic encryption key after the queried object has completed identity authentication; The ninth receiving module is configured to receive a second authorization request sent by the first device, wherein the second authorization request includes a symmetric encryption key; The processing module is used to encrypt the object identifier of the queried object based on the symmetric encryption key to obtain the first encrypted information; The second determining module is used to determine the product of the first encrypted information and the verification information as the third encrypted information; The eighth sending module is used to provide the third encrypted information to the first device, wherein the third encrypted information is used by the first device to determine the difference information, the difference information is used by the second device to perform decryption verification, and the second device provides authorization information to the first device after the decryption verification is successful, the authorization information is used by the first device to obtain the target data of the query object.

12. A data anonymity query device, characterized in that, Applied to the fourth device according to claim 9, the device comprises: The sixth receiving module is used to receive a data query request sent by the first device, wherein the data query request is generated by the first device based on authorization information; The sixth sending module is used to send an authentication request to the second device, wherein the authentication request includes the authorization information; The seventh receiving module is used to receive a third random number and target fuzzy matching information provided by the second device, wherein the target fuzzy matching information is generated based on the first encrypted information and the third random number, the first encrypted information is determined based on the authorization information, and the first encrypted information is used to indicate the object identifier of the query object; The first determining module is used to determine multiple candidate fuzzy matching information and candidate encrypted data corresponding to each candidate fuzzy matching information based on the third random number and the target fuzzy matching information, wherein the candidate fuzzy matching information is obtained by encrypting the object identifier of the candidate object, and the candidate encrypted data is obtained by encrypting the relevant data of the candidate object; The seventh sending module is used to provide the plurality of candidate fuzzy matching information and the candidate encrypted data corresponding to each candidate fuzzy matching information to the second device, wherein the plurality of candidate encrypted data includes target encrypted data corresponding to the query object.

13. An electronic device, characterized in that, include: At least one processor; as well as A memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor to enable the at least one processor to perform the method of any one of claims 1-8.

14. A non-transitory computer-readable storage medium storing computer instructions, characterized in that, in, The computer instructions are used to cause the computer to perform the method according to any one of claims 1-8.

15. A computer program product, characterized in that, Includes a computer program that, when executed by a processor, implements the steps of the method according to any one of claims 1-8.

Images