A data query method, system and storage medium

Abstract

The present application relates to the technical field of information processing, in particular to a data query method, system and storage medium, the method comprising: a data using end determining a plurality of target data providing ends corresponding to a target product identifier, obtaining an encrypted information subject, and generating a query parameter; an intermediate processing end sending a data query request to each target data providing end, the data query request comprising the query parameter; each target data providing end analyzing the query parameter and feeding back target data corresponding to the target product identifier and the information subject in the target data providing end to the intermediate processing end; and the intermediate processing end processing the target data into a target data product and feeding back the target data product to the data using end. The present application makes it impossible for the intermediate processing end to decrypt the information subject, and only the target data can be obtained, and the information subject of the target data cannot be identified, realizing anonymous processing of the target data and ensuring data security.

Description

Technical Field

[0001] This invention relates to the field of information processing technology, and in particular to a data query method, system, and storage medium. Background Technology

[0002] In today's digital age, data has become a core element driving innovation and development across various industries. There is a demand for data development, utilization, and sharing in numerous sectors, including finance, healthcare, government and public services, intelligent transportation, education, and energy and utilities. By integrating and analyzing multi-source data, various industries can uncover the potential value of data. For example, the financial industry uses data to assess risk and formulate credit strategies; the healthcare sector uses data to conduct disease research and provide precision medicine services; and government departments improve the efficiency of public services and the accuracy of policy formulation through data sharing.

[0003] Existing data query systems consist of data users, intermediate processing agencies, and data providers. Currently, there are two main models for data acquisition and processing. One model involves data users using their own data and models, combined with data fields provided by various data providers after processing through an intermediate processing agency (such as a regulated and trusted institution), to perform independent calculations and output results. For example, financial institutions, in risk control, combine their own data with data fields from other data providers mediated by credit reporting agencies to perform independent scoring calculations. The other model involves data users directly initiating query requests to intermediate processing agencies. These agencies then retrieve relevant fields from various data providers based on the query conditions, process them, and ultimately return the results to the data user. For example, financial institutions directly initiating scoring query requests to credit reporting agencies to obtain scoring results.

[0004] However, regardless of the data acquisition and processing model employed, significant security risks exist during data sharing. Specifically, the data transmitted through intermediary data processing agencies contains detailed data identifying the information subject. Thus, during data transmission, not only are data users aware of the transmitted data related to the information subject, but the intermediary data processing agency also knows exactly which information subject the transmitted data corresponds to. An information subject refers to the owner, producer, or associated party of information. Information subjects are closely linked to various sensitive data; once an information subject is identified, attackers or unauthorized users can accurately locate, acquire, and misuse the relevant data, leading to a series of security risks.

[0005] Therefore, existing technologies have shortcomings and need to be improved and developed. Summary of the Invention

[0006] This application provides a data query method, system, and storage medium to address the technical problem that data query methods in related technologies are prone to data security risks.

[0007] To achieve the above objectives, this application adopts the following technical solution:

[0008] A data query method is applied to a data query system, wherein the data query system includes: several data providing ends, intermediate processing ends, and data using ends; the method includes:

[0009] The data user determines the target product identifier and information subject corresponding to the required target data product, and determines several target data providers corresponding to the target product identifier among several data providers;

[0010] The data user encrypts the information subject based on the identity authentication between several target data providers and the data user, obtaining the encrypted information subject, and generates query parameters based on the target product identifier and the encrypted information subject;

[0011] The intermediate processing end receives the query parameters sent by the data user end, parses the query parameters to obtain the target product identifier and the encrypted information body, and sends a data query request to each target data provider based on the target product identifier. The data query request includes query parameters.

[0012] Each target data provider parses the query parameters to obtain the target product identifier and the encrypted information subject. Based on identity authentication, the encrypted information subject is decrypted to obtain the information subject. The target data corresponding to the information subject and the target product identifier in the target data provider is then fed back to the intermediate processing end.

[0013] The intermediate processing end processes the target data into target data products and feeds the target data products back to the data user end.

[0014] In one implementation, before the data user encrypts the information subject based on identity authentication between several target data providers and the data user, the process further includes:

[0015] The intermediate processing end determines the identification information of several data providers corresponding to each data product that the data user has the right to query, and feeds back the identification information to the data user, and sends the identification information of the data user to the data provider, so that the data user and several data providers can perform identity authentication respectively.

[0016] In one implementation, the data user and several data providers perform identity authentication, including:

[0017] After the data user verifies its identity with several data providers, it generates asymmetric keys between the data user and the several data providers. The asymmetric keys include public keys and private keys.

[0018] The data users exchange public keys with several data providers.

[0019] In one implementation, the data user encrypts the information subject based on identity authentication between several target data providers and the data user, obtaining an encrypted information subject, including:

[0020] The data user encrypts the information subject based on the public key provided by each target data provider and its own private key, thus obtaining the encrypted information subject.

[0021] In one implementation, the data user encrypts the information subject based on the public key provided by each target data provider and its own private key, obtaining the encrypted information subject, including:

[0022] The data user uses a random key to encrypt the information subject and generate an encryption token;

[0023] The data user encrypts the random key using the public key provided by each target data provider to generate an encryption key;

[0024] The data user uses its own private key to sign the information subject, generating a digital signature;

[0025] The data user obtains the encrypted information body based on the encryption token, encryption key, and digital signature.

[0026] In one implementation, each target data provider parses the query parameters to obtain a target product identifier and an encrypted information subject. Based on identity authentication, the encrypted information subject is decrypted to obtain the information subject, including:

[0027] Each target data provider parses the query parameters to obtain the target product identifier, encryption token, encryption key, and digital signature;

[0028] Each target data provider uses the public key provided by the data user and its own private key to process the encryption token, encryption key, and digital signature to obtain the decrypted information subject.

[0029] In one implementation, each target data provider uses the public key provided by the data user and its own private key to process the encryption token, encryption key, and digital signature to obtain the decrypted information body, including:

[0030] Each target data provider uses the public key provided by the data user to verify the digital signature.

[0031] If the signature verification is successful, the target data provider uses its own private key to decrypt the encryption key and obtain a random key;

[0032] The target data provider decrypts the encryption token using the random key to obtain the decrypted information body.

[0033] In one implementation, before obtaining the plurality of target data providers corresponding to the target product identifier, the method further includes:

[0034] The intermediate processing end establishes the correspondence between the product identifier of each data product and the data provider, and sends the correspondence to the data user.

[0035] This application also provides a data query system, wherein the data query system includes: several data providing terminals, intermediate processing terminals and data using terminals;

[0036] The data user end is used to determine the target product identifier and information subject corresponding to the required target data product, and to determine a number of target data providers corresponding to the target product identifier among a number of data providers; and to encrypt the information subject based on the identity authentication between the number of target data providers and the data user end to obtain the encrypted information subject, and to generate query parameters based on the target product identifier and the encrypted information subject;

[0037] The intermediate processing end is used to receive query parameters sent by the data user end, parse the query parameters to obtain the target product identifier and the encrypted information body, and send data query requests to each target data provider end based on the target product identifier. The data query request includes query parameters.

[0038] The data provider is used to parse the query parameters to obtain the target product identifier and the encrypted information subject. Based on identity authentication, the encrypted information subject is decrypted to obtain the information subject. The target data corresponding to the information subject and the target product identifier in the target data provider is then fed back to the intermediate processing end.

[0039] The intermediate processing end is also used to process the target data into target data products and feed the target data products back to the data user end.

[0040] This application also provides a computer-readable storage medium storing a computer program that can be executed to implement the steps of the data query method described above.

[0041] The beneficial effects of this invention: The method of this embodiment is applied to a data query system, which includes: a plurality of data providers, an intermediate processing end, and a data user end; the method includes: the data user end determining the target product identifier and information subject corresponding to the required target data product, and determining a plurality of target data providers corresponding to the target product identifier among the plurality of data providers; the data user end encrypting the information subject based on the identity authentication between the plurality of target data providers and the data user end to obtain the encrypted information subject, and generating query parameters according to the target product identifier and the encrypted information subject; the intermediate processing end receiving data sent by the data user end. The system retrieves query parameters, parses them to obtain a target product identifier and an encrypted information subject, and sends data query requests to various target data providers based on the target product identifier. Each target data provider parses the query parameters to obtain the target product identifier and the encrypted information subject, decrypts the encrypted information subject based on identity authentication, obtains the information subject, and feeds back the target data corresponding to the information subject and target product identifier from the target data provider to the intermediate processing end. The intermediate processing end processes the target data into a target data product and feeds back the target data product to the data user end. This application utilizes identity authentication between the data provider and the data user end to encrypt the information subject, preventing the intermediate processing end from decrypting the information subject and allowing it to obtain only the target data without identifying the information subject of the target data. This achieves anonymization of the target data, thereby ensuring data security. Attached Figure Description

[0042] Figure 1 This is a flowchart of a preferred embodiment of the data query method in this invention.

[0043] Figure 2 This is a functional principle block diagram of a preferred embodiment of the data query system in this invention. Detailed Implementation

[0044] To make the objectives, technical solutions, and advantages of this invention clearer and more explicit, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

[0045] Currently, there are two main ways to query data: The first is for the data user to perform independent calculations and output results based on their own data and models, combined with data fields provided by various data providers after processing by an intermediary. The second is for the data user to directly initiate a data query request to the intermediary, which then retrieves relevant fields from various data providers based on the query conditions, processes them, and ultimately returns the generated data product (such as a score) to the financial institution. However, regardless of whether the data provider directly provides detailed data items (which may include some processed labels or indices) to the user (such as a financial institution) or through an intermediary (a regulated and trusted institution, such as a credit reporting agency), there are certain data security risks involved.

[0046] Existing methods to improve data security include:

[0047] First, the information subject (such as name and ID number) is encrypted using MD5, and then forwarded to the data provider by an intermediary processing agency for querying. The problem with this method is that data users need to cooperate and adapt to the encrypted query process. Furthermore, since different users may use different encryption algorithms, this requires significant investment of manpower, resources, and time in system modifications and algorithm integration. Additionally, such publicly available algorithms are prone to credential stuffing attacks, meaning attackers can potentially crack the encrypted data through numerous attempts and comparisons, thereby obtaining the information subject's real data and jeopardizing data security. The intermediary processing agency can also use the same algorithm to test whether an information subject has been queried. Therefore, this processing method also presents data security risks.

[0048] Secondly, in this model, data users only need an intermediary processing agency to relay data. Data users communicate directly with data providers and transmit data via encryption and decryption, preventing the intermediary processing agency from knowing the content of the data exchanged. The intermediary data processing agency merely acts as a relay station. In this model, the intermediary data processing agency only plays a simple relay role, unable to process the data, let alone integrate multiple data sources for in-depth analysis and mining, thus failing to meet the comprehensive data processing needs of complex business scenarios. Furthermore, the data provider directly provides detailed data items to the data user, bypassing the security protection mechanisms of the intermediary data processing agency. This makes the data more vulnerable to attacks and leaks during transmission and storage, posing serious data security risks.

[0049] In addition, some technologies use highly secure methods such as personal privacy computing for data processing. While these methods can greatly meet data security requirements, they also bring problems such as high deployment costs, complex implementation, low performance, and low efficiency. These problems seriously affect the universality of the application.

[0050] The following description, with reference to the accompanying drawings, illustrates a data query method, system, and storage medium according to embodiments of this application. Addressing the data security risks inherent in data query methods mentioned in the background section, this application provides a data query method applied to a data query system. The data query system includes: several data providers, an intermediate processing unit, and a data user. In this method, the data user determines the target product identifier and information subject corresponding to the desired target data product, and identifies several target data providers corresponding to the target product identifier among the several data providers. The data user encrypts the information subject based on identity authentication between the several target data providers and the data user, obtaining an encrypted information subject, and generates query parameters based on the target product identifier and the encrypted information subject. The intermediate processing end receives query parameters sent by the data user end, parses the query parameters to obtain the target product identifier and the encrypted information subject, and sends data query requests to each target data provider end based on the target product identifier. The data query requests include query parameters. Each target data provider end parses the query parameters to obtain the target product identifier and the encrypted information subject, decrypts the encrypted information subject based on identity authentication, obtains the information subject, and feeds back the target data corresponding to the information subject and target product identifier from the target data provider end to the intermediate processing end. The intermediate processing end processes the target data into a target data product and feeds back the target data product to the data user end. This application uses identity authentication between the data provider end and the data user end to encrypt the information subject, so that the intermediate processing end cannot decrypt the information subject, can only obtain the target data, and cannot identify the information subject of the target data, thus achieving anonymization of the target data and ensuring data security.

[0051] Please see Figure 1 The data query method described in this embodiment of the invention includes the following steps:

[0052] Step S100: The data user determines the target product identifier and information subject corresponding to the required target data product, and determines several target data providers corresponding to the target product identifier among several data providers.

[0053] Specifically, the data provider is the original source or collector of data, responsible for generating, collecting, or holding data, and is the starting point of data flow; examples include government data platforms, e-commerce platforms, and telecom operator platforms. The intermediate processing end analyzes and processes the data obtained from the data provider, transforming it into valuable information, such as generating scores or indices that can be used for risk assessment. In the financial sector, the intermediate processing end can be a credible institution approved by regulators, such as a credit reporting agency, while the data user end can be a financial institution. Financial institutions, as data users, utilize the scores or indices provided by the intermediate processing end, combined with their own risk assessment models and business rules, to comprehensively assess the credit risk of their clients. Data products can be analytical report products; in the financial sector, data products can be scoring products.

[0054] like Figure 1 As shown, the data query method further includes the following steps:

[0055] Step S200: The data user encrypts the information subject based on the identity authentication between several target data providers and the data user, obtaining the encrypted information subject, and generates query parameters based on the target product identifier and the encrypted information subject.

[0056] This application encrypts the information subject based on identity authentication between the data provider and the data user, so that the information subject is encrypted to the intermediate processing end, and only the data provider can decrypt the encrypted information subject.

[0057] In this embodiment of the application, before the step "the data user encrypts the information subject based on the identity authentication between the target data providers and the data user to obtain the encrypted information subject", the method further includes: the intermediate processing end determines the identification information of the data providers corresponding to each data product that the data user has the right to query, and feeds back the identification information to the data user, and sends the identification information of the data user to the data providers, so that the data user and the data providers can perform identity authentication respectively.

[0058] Specifically, the intermediate processing end needs to inform the data user of the data providers corresponding to all products that the data user has permission to query. For example, when the intermediate processing end processes data and returns a score to the data user, it needs to specify which data providers' data it needs to access. The intermediate processing end also needs to introduce the data user to the data providers. With this introduction from the intermediate processing end, the data user and data providers will conduct mutual identity verification, for example, using relevant offline verification methods. The verification and authentication in this application has stronger compliance, meaning the data user knows the data provider corresponding to the data product from the intermediate processing end.

[0059] Understandably, the existence of intermediary processing terminals stems from the need for such trusted institutions in certain industries (such as finance). Furthermore, if a single data provider directly provides scores to data users, it may not meet their requirements, as the scores generated by intermediary processing terminals can be integrated and processed from detailed data (which may also include tags) provided by multiple data providers. Intermediary processing terminals possess data processing capabilities, bringing product value to data users. While data providers cannot directly provide detailed data to users in certain security and compliance situations, they can provide detailed data to intermediary processing terminals because the data is anonymized for the intermediary processing terminals.

[0060] In one embodiment of this application, the step "the data user and several data providers perform identity authentication respectively" specifically includes: after the data user confirms its identity with several data providers respectively, generating asymmetric keys between the data user and several data providers, wherein the asymmetric keys include public keys and private keys; and exchanging public keys between the data user and several data providers respectively.

[0061] For example, both the data user and each data provider generate their own asymmetric keys, exchanging public keys only after both parties have verified their identities. However, this exchange is solely between the data user and data provider; the data providers themselves do not need to know or exchange these keys. Furthermore, the public keys between the data user and data provider cannot be relayed through an intermediate processing unit. Its primary purpose is to prevent the intermediate processing unit from generating its own public and private key information and then replacing the public keys of the data user and data provider with its own public key, respectively, and sending them to the data provider and data user. In this way, for encrypted information submitted by the data user, the intermediate processing unit can decrypt it using its own private key. For encrypted information sent to the data provider, the intermediate processing unit then signs it with its own private key. Since the data provider also receives the intermediate processing unit's public key, its signature verification is successful. The intermediate processing unit then receives the data returned by the data provider, but it has already decrypted the queried information, thus causing a data security problem.

[0062] In this application, the data user directly exchanges public keys with several data providers, and the intermediate processing end cannot obtain the public keys, thereby avoiding the intermediate processing end from decoding the encrypted information body.

[0063] In one embodiment of this application, the step "the data user encrypts the information subject based on the identity authentication between the target data providers and the data user to obtain the encrypted information subject" specifically means that the data user encrypts the information subject based on the public key provided by each target data provider and its own private key to obtain the encrypted information subject.

[0064] This application encrypts the information subject based on the public key provided by each target data provider and its own private key. Since only the data user and the data provider know the public key and their own private key, and the intermediate processing end cannot know them, the intermediate processing end cannot impersonate the data user to request queries about the information subject, thus avoiding the intermediate processing end indirectly obtaining the sensitive data of the information subject. In other words, the special processing performed on the information subject by the data user avoids being known to the intermediate processing end; only the data user and the data provider know the processing rules. For example, a hash algorithm cannot be directly used to transform the information subject, because if the intermediate processing end knows the processing rules, it can use the same rules to perform a brute-force attack. At the very least, it can try to generate query parameters for a certain information subject according to the same rules to see if it has been queried. If it has been queried and a query record is left on the intermediate processing end, it is equivalent to the intermediate processing end knowing the relevant information of the information subject.

[0065] In one specific embodiment of this application, the step "the data user encrypts the information subject based on the public key provided by each target data provider and its own private key to obtain the encrypted information subject" specifically includes: the data user encrypts the information subject using a random key to generate an encryption token; the data user encrypts the random key using the public key provided by each target data provider to generate an encryption key; the data user signs the information subject using its own private key to generate a digital signature; and the data user obtains the encrypted information subject based on the encryption token, encryption key, and digital signature.

[0066] Specifically, when the data user submits query parameters, the application programming interface (API) of the intermediate processing end is called. The information subject (such as an individual's name and ID number) is encrypted using a random symmetric key DEK (data encryption key) to generate an encryption token. The target product identifier of the data product to be queried is determined; the target product identifier can be a product ID. Since the intermediate processing end has informed the data user which data providers are involved in the target data product, the data user uses the public key provided by the corresponding data provider to encrypt the random key to generate an encryption key, and uses its own private key to sign the information subject to generate a digital signature. Then, the encryption token, encryption key, digital signature, and other non-encryptable original conditions (such as the target data product ID, query serial number, etc.) are combined to form new query parameters to call the intermediate processing end's API. The query parameters can be in JSON format. This application obtains full authorization from the information subject before querying data. The information subject can be an individual's name and ID number, or enterprise-related data, and this data complies with relevant regulations.

[0067] like Figure 1As shown, the data query method further includes the following steps:

[0068] Step S300: The intermediate processing end receives the query parameters sent by the data user end, parses the query parameters to obtain the target product identifier and the encrypted information body, and sends a data query request to each target data provider based on the target product identifier. The data query request includes query parameters.

[0069] Specifically, after receiving the query parameters from the data user, the intermediate processing end parses the parameters to obtain the product ID to be queried, the query serial number requested by the data user, and data items such as the encryption token, encryption key, and digital signature. Different data products require different data types for processing within the intermediate processing end; therefore, a correspondence between product identifiers and required data types can be established. API requests for data queries are made to the target data provider in real time. Multiple data providers can be requested concurrently when sending data query requests, or they can be processed sequentially. Data query requests may include, but are not limited to, query parameters and other related request parameters, such as the intermediate processing end's request serial number.

[0070] For example, in the financial sector, credit reporting agencies act as intermediaries. Their scoring products or other data processing products are typically formed by multiple data providers contributing their data, which are then integrated and processed by the credit reporting agency. While the query parameters provided by the data user are anonymous to the credit reporting agency, each data provider can still identify the subject of the query. In other words, after the query parameters are relayed through the credit reporting agency, the target data provider can identify the subject of the query.

[0071] Additionally, when querying the interface of a data provider, the encryption parameters of the public keys of other data providers sent by the data user can be filtered out to reduce the size of the request file packet.

[0072] This application adds an anonymized data processing mechanism to the intermediate processing terminal that relays data processing between the data provider and the data user. Since the encrypted information subject in the query parameters is anonymous to the intermediate processing terminal, the privacy and confidentiality of the information subject are greatly guaranteed.

[0073] like Figure 1 As shown, the data query method further includes the following steps:

[0074] Step S400: Each target data provider parses the query parameters to obtain the target product identifier and the encrypted information subject. Based on identity authentication, the encrypted information subject is decrypted to obtain the information subject. The target data corresponding to the information subject and the target product identifier in the target data provider is then fed back to the intermediate processing end.

[0075] Specifically, target data refers to the data involved in the required information subject and the target data product. To ensure data security, the target data can be only the necessary fields related to the target data product. For example, the output of data product fields to the downstream of the data provider and the intermediate processing end can be restricted. The data provider only sends some necessary fields related to the generation of the data product to the intermediate processing end, while the intermediate processing end only needs to return the final data product (such as a scoring field) to the data user. This can improve the utilization rate of data development and also ensure data security to a certain extent.

[0076] In this embodiment of the application, the step "each target data provider parses the query parameters to obtain the target product identifier and the encrypted information subject, and decrypts the encrypted information subject based on identity authentication to obtain the information subject" specifically includes: each target data provider parses the query parameters to obtain the target product identifier, encryption token, encryption key, and digital signature; each target data provider uses the public key provided by the data user and its own private key to process the encryption token, encryption key, and digital signature to obtain the decrypted information subject.

[0077] Specifically, since the data user and each target data provider have already authenticated their identities and each has their own private key, and have also exchanged public keys, when decrypting the information subject, each target data provider can use its own private key and the exchanged public key to decrypt and identify the information subject, while the intermediate processing end cannot know the encryption and decryption rules.

[0078] In one embodiment of this application, the step "each target data provider processes the encryption token, encryption key, and digital signature using the public key provided by the data user and its own private key to obtain the decrypted information subject" specifically includes: each target data provider verifies the digital signature using the public key provided by the data user; if the verification is successful, the target data provider decrypts the encryption key using its own private key to obtain a random key; the target data provider decrypts the encryption token using the random key to obtain the decrypted information subject.

[0079] Specifically, after receiving a request from the intermediate processing end, the data provider parses the query parameters and verifies the digital signature using the public key of the data user. If successful, it decrypts the encryption key using its own private key to obtain a random key. Then, it uses the random key to decrypt the encryption token, obtaining the plaintext of the information subject (such as name, ID number, etc.). Based on the target product identifier, it returns relevant data. Specifically, this can be determined by establishing a correspondence between product identifiers and required data types, and the data corresponding to the information subject that belongs to the target data type is used as the target data.

[0080] Understandably, the data provider can return detailed data items, including those reviewed by both parties and regulators, to the intermediate processing end. This can also include tagged or index-based data. The specific data returned will depend on the rules agreed upon by both the data provider and the intermediate processing end. If the most detailed data cannot be returned, especially fields that could identify the data subject, it's crucial to avoid disclosing the data subject and achieve true data anonymity. If these fields must be returned, they should be anonymized before being returned. The data provider and the intermediate processing end can also collaborate to develop the relevant data items needed for the intermediate processing end's data products, which will then be returned by the data provider to the data user.

[0081] like Figure 1 As shown, the data query method further includes the following steps:

[0082] Step S500: The intermediate processing end processes the target data into a target data product and feeds the target data product back to the data user end.

[0083] Specifically, after receiving the target data from the data provider, the intermediate processing end generates report fields (such as a rating) according to the data processing rules and returns them to the data user. It is understandable that when the target data product involves multiple data providers, if queries are performed in parallel, data processing can only proceed after all data providers have returned their data in real time.

[0084] In this way, this application collects more non-anonymized detailed data from data providers in real time to improve the quality of data products and form scoring-like data to be returned to data users (such as financial institutions). This effectively improves the efficiency of data development and utilization while protecting data security. During the data query process, the data is anonymized for data processing institutions; for data users, the target data product they receive only includes analytical data such as scores, thus indirectly protecting information security. For example, in the financial sector, data providers can provide credit reporting agencies with more necessary plaintext data items for scoring. After processing, the credit reporting agencies can obtain effective scores and then feed those scores back to financial institutions.

[0085] In this way, the data from both the data provider and the data user is anonymous to the intermediate processing end. Unless necessary, the product fields returned by the intermediate processing end to the data user end should be rating-type fields, or even tags, indices, or even the original fields of certain information subjects. The data returned to the data user end is determined by the regulator. This achieves the goal of improving the utilization rate of data development while ensuring data compliance and security to a certain extent.

[0086] In this embodiment of the application, before the step "obtaining several target data providers corresponding to the target product identifier", the method further includes: the intermediate processing end establishes the correspondence between the product identifier of each data product and the data provider, and sends the correspondence to the data user end.

[0087] Specifically, different data products correspond to different data sources. Therefore, it is necessary to establish a correspondence between the product identifier of each data product and the data provider so that the data user can identify the target data provider based on the product identifier.

[0088] The processing logic of external data required by the data user end of this application (such as scoring) can all be processed by a trusted intermediate processing end (such as a credit reporting agency). If necessary, both parties can collaborate on modeling at the intermediate processing end. In subsequent actual queries, the data processing logic is all performed on the intermediate processing end. The information subject processed by the intermediate processing end is anonymous, but this does not affect the quality of data processing. This data processing method can greatly improve the development and utilization rate of relevant data, while also ensuring the compliant and secure use of data to a certain extent. If the relevant regulatory authorities strictly approve the output of product fields from the data provider and the intermediate processing end to the data user end, the security level can reach a level acceptable to all parties. For example, the intermediate processing end only needs to provide the scoring field after data processing to the data user end.

[0089] In one embodiment, the entity processing the anonymous data is not limited to a single entity; it can be multiple regulated and authorized entities. For example, if a department E authorizes an entity P to operate its data, then P can act as the top-level data provider, exchanging public keys with the data users. Alternatively, department E can act as the top-level data provider, exchanging public keys with the data users, while the authorized entity P processes the data products based on the data possessed by department E. Entity P may not store copies of department E's data but can query department E's data in real time as needed. P should avoid providing the most detailed data products to external parties. However, if P only acts as an intermediate processing end, like downstream intermediate processing ends, the data can also be anonymous to P.

[0090] The processing logic of a multi-layered intermediate processing end is similar to that of a single intermediate processing end; it only requires ensuring that the data provider is the top-level data provider, and that the public keys are exchanged between the data provider and the data user. Multiple intermediate processing ends can perform anonymous data processing.

[0091] In a specific embodiment, the data query system in this embodiment includes: a data providing end C (including C1, C2, ..., Cn), an intermediate processing end B (including B1, B2, ..., Bm), and a data using end A, such as... Figure 2 As shown.

[0092] Step S1: Each data provider C stores the set of products authorized for query by the intermediate processing terminal B;

[0093] Step S2: The intermediate processing end saves the data products (product 1, product 2, etc.) authorized for querying by the data user A.

[0094] Step S3: The intermediate processing end B determines the correspondence between the data product ID and the data provider end C involved in the product, and synchronizes it with A.

[0095] Step S4: Based on the corresponding relationship, obtain the data provider C involved in the product, and introduce the recognition method through the intermediate processing end B. Both parties A and C confirm each other's identities.

[0096] Step S5: Data user A and data provider C generate asymmetric keys. Data user A and data provider C exchange public keys to obtain the public key set of data user A involved in data provider C, as well as the correspondence between public keys and data user A. Data user A can query the public key set of each data provider C involved in the product in the intermediate processing terminal B, as well as the correspondence between product ID, data provider C and public key.

[0097] It is understandable that for the data provider C, there are also N data users A. This embodiment uses only one data user A for illustration, and the usage principle is the same for multiple data users A.

[0098] Step S6: Data user A initiates a query for data product 1 to intermediate processing end B: 1. Generate a random key; 2. Encrypt the random key using public keys C1 and C2 to generate e and h; 3. Sign the information subject using the private key to obtain f; 4. Encrypt the information subject using the random key; 5. Integrate other information to form query parameters;

[0099] Step S7: Transmit the query parameters to B through the API interface. The requirement for these query parameters is data product 1. Parse and validate the query parameters submitted by A.

[0100] Step S8: Based on the information of C1 and C2 corresponding to data product 1, assemble the data query parameter 1 required for intermediate processing terminal B to call C1 and the data query parameter 2 required for intermediate processing terminal B to call C2; data query parameter 1 includes but is not limited to: query serial number of f, d, e, B (such as query report number); data query parameter 2 includes but is not limited to: query serial number of f, d, h, B (such as query report number) and other query parameters;

[0101] Step S9: C1 verifies, decrypts, and queries the data query parameter 1 to obtain data product 1 on C1; C2 verifies, decrypts, and queries the data query parameter 2 to obtain data product 1 on C2.

[0102] Step S10: The intermediate processing end B integrates the data fed back by C1 and C2, generates the final data product 1, and returns it to A.

[0103] Specifically, data user A can obtain a relationship table provided by intermediate processing terminal B, which includes the correspondence between products on intermediate processing terminal B and data providers. Data user A also stores the public key information of each data provider.

[0104] In one embodiment, based on the above data query method, the present invention also provides a data query system, which includes: several data providing terminals, intermediate processing terminals, and data using terminals;

[0105] The data user end is used to determine the target product identifier and information subject corresponding to the required target data product, and to determine a number of target data providers corresponding to the target product identifier among a number of data providers; and to encrypt the information subject based on the identity authentication between the number of target data providers and the data user end to obtain the encrypted information subject, and to generate query parameters based on the target product identifier and the encrypted information subject;

[0106] The intermediate processing end is used to receive query parameters sent by the data user end, parse the query parameters to obtain the target product identifier and the encrypted information body, and send data query requests to each target data provider end based on the target product identifier. The data query request includes query parameters.

[0107] The data provider is used to parse the query parameters to obtain the target product identifier and the encrypted information subject. Based on identity authentication, the encrypted information subject is decrypted to obtain the information subject. The target data corresponding to the information subject and the target product identifier in the target data provider is then fed back to the intermediate processing end.

[0108] The intermediate processing end is also used to process the target data into target data products and feed the target data products back to the data user end.

[0109] It should be noted that the foregoing explanation of the data query method embodiment also applies to the data query system of this embodiment, and will not be repeated here.

[0110] This invention discloses a data query system, comprising: several data providers, an intermediate processing unit, and a data user. The data user determines the target product identifier and information subject corresponding to the desired target data product, and identifies several target data providers corresponding to the target product identifier among the several data providers. The data user encrypts the information subject based on identity authentication between the several target data providers and the data user, obtaining an encrypted information subject, and generates query parameters based on the target product identifier and the encrypted information subject. The intermediate processing unit receives the query parameters sent by the data user, parses the query parameters to obtain the target product identifier and the encrypted information subject, and sends a data query request to each target data provider based on the target product identifier, the data query request including the query parameters. Each target data provider parses the query parameters to obtain the target product identifier and the encrypted information subject, decrypts the encrypted information subject based on identity authentication, obtains the information subject, and feeds back the target data corresponding to the information subject and target product identifier from the target data provider to the intermediate processing unit. The intermediate processing unit processes the target data into a target data product and feeds back the target data product to the data user. This application uses identity authentication between the data provider and the data user to encrypt the information subject, making it impossible for the intermediate processing end to decrypt the information subject. It can only obtain the target data but cannot identify the information subject of the target data, thus achieving anonymization of the target data and ensuring data security.

[0111] This embodiment also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the data query method described above.

[0112] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0113] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this application, "N" means at least two, such as two, three, etc., unless otherwise explicitly specified.

[0114] Any process or method description in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or N executable instructions for implementing custom logic functions or processes, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as should be understood by those skilled in the art to which embodiments of this application pertain.

[0115] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can read and execute instructions from or in conjunction with such an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by or in conjunction with an instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of computer-readable media include: an electrical connection having one or more wires (electronic device), a portable computer disk drive (magnetic device), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). In addition, computer-readable media can even be paper or other suitable media on which programs can be printed, because programs can be obtained electronically by optically scanning paper or other media, then editing, interpreting or otherwise processing them as necessary, and then storing them in computer memory.

[0116] It should be understood that the various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, the N steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. If implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0117] Those skilled in the art will understand that all or part of the steps of the methods described in the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, it includes one or a combination of the steps of the method embodiments.

[0118] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0119] The storage medium mentioned above can be a read-only memory, a disk, or an optical disk, etc. Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions, and variations to the above embodiments within the scope of this application.

Claims

1. A data query method, applied to a data query system, characterized in that, The data query system includes: several data providing terminals, intermediate processing terminals, and data using terminals; the method includes: The data user determines the target product identifier and information subject corresponding to the required target data product, and determines several target data providers corresponding to the target product identifier among several data providers; The data user uses a random key to encrypt the information subject and generate an encryption token. It then encrypts the random key using the public key provided by each target data provider to generate an encryption key. Finally, it signs the information subject using its own private key to generate a digital signature. Based on the encryption token, encryption key, and digital signature, it obtains the encrypted information subject and generates query parameters based on the target product identifier and the encrypted information subject. The intermediate processing end receives the query parameters sent by the data user end, parses the query parameters to obtain the target product identifier and the encrypted information body, and sends a data query request to each target data provider based on the target product identifier. The data query request includes query parameters. Each target data provider parses the query parameters to obtain the target product identifier and the encrypted information subject. Based on identity authentication, the encrypted information subject is decrypted to obtain the information subject. The target data corresponding to the information subject and the target product identifier in the target data provider is then fed back to the intermediate processing end. The intermediate processing end processes the target data into target data products and feeds the target data products back to the data user end; If the intermediate processing end receives target data from multiple data providers, it will integrate and process the target data from multiple data providers to form a target data product. Before obtaining the encrypted information subject, the data user encrypts the information subject based on the identity authentication between several target data providers and the data user. The process also includes: The intermediate processing end determines the identification information of several data providers corresponding to each data product that the data user has the right to query, and feeds back the identification information to the data user, and sends the identification information of the data user to the data provider, so that the data user and several data providers can perform identity authentication respectively. The data user and several data providers undergo separate identity authentication, including: After the data user verifies its identity with several data providers, it generates asymmetric keys between the data user and the several data providers. The asymmetric keys include public keys and private keys. The data users exchange public keys with several data providers.

2. The data query method according to claim 1, characterized in that, Each target data provider parses the query parameters to obtain the target product identifier and the encrypted information subject. Based on identity authentication, it decrypts the encrypted information subject to obtain the information subject, including: Each target data provider parses the query parameters to obtain the target product identifier, encryption token, encryption key, and digital signature; Each target data provider uses the public key provided by the data user and its own private key to process the encryption token, encryption key, and digital signature to obtain the decrypted information subject.

3. The data query method according to claim 2, characterized in that, Each target data provider uses the public key provided by the data user and its own private key to process the encryption token, encryption key, and digital signature to obtain the decrypted information body, including: Each target data provider uses the public key provided by the data user to verify the digital signature. If the signature verification is successful, the target data provider uses its own private key to decrypt the encryption key and obtain a random key; The target data provider decrypts the encryption token using the random key to obtain the decrypted information body.

4. The data query method according to claim 1, characterized in that, Before obtaining the target data providers corresponding to the target product identifier, the method further includes: The intermediate processing end establishes the correspondence between the product identifier of each data product and the data provider, and sends the correspondence to the data user.

5. A data query system, characterized in that, The data query system includes: several data providing terminals, intermediate processing terminals, and data using terminals; The data user end is used to determine the target product identifier and information subject corresponding to the required target data product, and to determine several target data providers corresponding to the target product identifier among several data providers; and to encrypt the information subject using a random key to generate an encryption token, encrypt the random key according to the public key provided by each target data provider to generate an encryption key, sign the information subject using its own private key to generate a digital signature, obtain the encrypted information subject according to the encryption token, encryption key and digital signature, and generate query parameters according to the target product identifier and the encrypted information subject; The intermediate processing end is used to receive query parameters sent by the data user end, parse the query parameters to obtain the target product identifier and the encrypted information body, and send data query requests to each target data provider end based on the target product identifier. The data query request includes query parameters. The data provider is used to parse the query parameters to obtain the target product identifier and the encrypted information subject. Based on identity authentication, the encrypted information subject is decrypted to obtain the information subject. The target data corresponding to the information subject and the target product identifier in the target data provider is then fed back to the intermediate processing end. The intermediate processing end is also used to process the target data into target data products and feed the target data products back to the data user end. If the intermediate processing end receives target data from multiple data providers, it integrates and processes the target data from multiple data providers to form target data products. The intermediate processing end determines the identification information of several data providers corresponding to each data product that the data user has the right to query, and feeds back the identification information to the data user, and sends the identification information of the data user to the data provider, so that the data user and several data providers can perform identity authentication respectively. The data user and several data providers perform identity authentication, including: after the data user confirms its identity with several data providers, it generates asymmetric keys between the data user and several data providers, the asymmetric keys including public keys and private keys; the data user and several data providers exchange public keys.

6. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that can be executed to implement the steps of the data query method as described in any one of claims 1 to 4.

Images