Data processing method and device, first equipment, storage medium and computer program product

Abstract

The invention discloses a data processing method and device, first equipment, a storage medium and a computer program product. The method comprises the following steps: a first device obtains a first security parameter of a previous first device adjacent to the first device in at least two first devices; generating a first key based on the first security parameter; encrypting first data based on the first key to obtain second data, the first data including private data of the first device; based on the second data, third data is obtained, and the third data represents a product result between the first data corresponding to the at least two first devices.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data security, and particularly relates to a data processing method and device, a first device, a storage medium and a computer program product. BACKGROUND

[0002] In an application scenario of data aggregation (such as a crowdsourcing system or a mobile cloud computing application scenario), each individual needs to provide his / her own sensitive data (such as location information or personal identity information) to obtain a specific service (such as a location-based service or a mobile-based social network service).

[0003] Therefore, how to realize secure aggregation of data without revealing personal privacy has not yet been solved. SUMMARY

[0004] To solve the problems in the related art, the embodiments of the present application provide a data processing method and device, a first device, a storage medium and a computer program product.

[0005] The technical scheme of the embodiments of the present application is implemented as follows: The embodiments of the present application provide a data processing method applied to a first device, comprising the following steps. Obtaining a first security parameter of a last first device adjacent to the first device among at least two first devices; Generating a first key based on the first security parameter; Encrypting first data based on the first key to obtain second data, wherein the first data contains privacy data of the first device; Obtaining third data based on the second data, wherein the third data represents a product result of the first data corresponding to the at least two first devices.

[0006] In the above scheme, the step of obtaining the third data based on the second data comprises the following steps. Sending the second data to a second device, so that the second device sequentially performs product calculation processing on second data corresponding to each of the at least two first devices to obtain the third data; Receiving the third data broadcast by the second device.

[0007] In the above scheme, the step of obtaining the third data based on the second data comprises the following steps. sending the second data to a next first device adjacent to the first device among the at least two first devices, so that the next first device performs a product calculation process on the second data corresponding to the next first device and the received second data until fourth data is obtained, the fourth data representing a product result between the second data corresponding to each of the at least two first devices; obtaining the third data based on the fourth data.

[0008] In the above solution, the obtaining of the third data based on the fourth data includes: obtaining a first random parameter, the first random parameter including random parameters shared by the at least two first devices; obtaining the third data based on the first random parameter and the fourth data.

[0009] In the above solution, the generating of the first key based on the first security parameter includes: generating a second security parameter of the first device; generating the first key based on the first security parameter and the second security parameter.

[0010] In the above solution, the generating of the first key based on the first security parameter and the second security parameter includes: obtaining a first random parameter, the first random parameter including random parameters shared by the at least two first devices; generating the first key based on the first random parameter, the first security parameter and the second security parameter.

[0011] In the above solution, the generating of the second security parameter of the first device includes: generating a second random parameter; generating the second security parameter by using the second random parameter and a third random parameter, the third random parameter including random parameters shared by the at least two first devices.

[0012] Embodiments of the present application further provide a data processing apparatus arranged in a first device, comprising: a first obtaining unit configured to obtain a first security parameter of a previous first device adjacent to the first device among at least two first devices; a generating unit configured to generate a first key based on the first security parameter; a first processing unit configured to perform encryption processing on first data based on the first key to obtain second data, the first data including private data of the first device; a second processing unit, configured to obtain third data based on the second data, the third data representing a product result of the first data corresponding to the at least two first devices.

[0013] The embodiment of the present application further provides a first device, comprising a processor and a communication interface, The communication interface is configured to obtain a first security parameter of a last first device adjacent to the first device among the at least two first devices. The processor is configured to generate a first key based on the first security parameter, perform encryption processing on first data based on the first key to obtain second data, wherein the first data comprises private data of the first device, and obtain third data based on the second data, wherein the third data represents a product result of the first data corresponding to the at least two first devices.

[0014] The embodiment of the present application further provides a first device, comprising a processor and a memory for storing a computer program capable of running on the processor, When the processor is used to run the computer program, the processor executes the steps of any one of the above-mentioned methods on the first device side.

[0015] The embodiment of the present application further provides a storage medium having a computer program stored thereon, wherein the computer program is executed by a processor to implement the steps of any one of the above-mentioned methods on the first device side.

[0016] The embodiment of the present application further provides a computer program product comprising a computer program, wherein the computer program is executed by a processor to implement the steps of any one of the above-mentioned methods on the first device side.

[0017] The data processing method, device, first device, storage medium and computer program product provided by the embodiment of the present application, the first device obtains a first security parameter of a last first device adjacent to the first device among the at least two first devices, generates a first key based on the first security parameter, performs encryption processing on first data based on the first key to obtain second data, wherein the first data comprises private data of the first device, and obtains third data based on the second data, wherein the third data represents a product result of the first data corresponding to the at least two first devices. The technical solution provided by the present application is that each device independently generates a key and performs encryption processing on local private data, and calculates a product of private data of all devices based on the encrypted private data. In this way, efficient and secure data aggregation is achieved without revealing the original data and without the intervention of a third party. BRIEF DESCRIPTION OF DRAWINGS

[0018] Figure 1 FIG. 1 is a schematic diagram of a data processing method according to an embodiment of the present application; Figure 2 FIG. 2 shows a flowchart of a second data transmission according to an embodiment of the present application; Figure 3 FIG. 3 shows another flowchart of a second data transmission according to an embodiment of the present application; Figure 4 FIG. 4 shows a structural diagram of a data processing apparatus according to an embodiment of the present application; Figure 5 FIG. 5 shows a structural diagram of a first device according to an embodiment of the present application. DETAILED DESCRIPTION

[0019] The present application will be further described in detail below with reference to the accompanying drawings and embodiments.

[0020] In the related art, a data aggregation scheme is to protect the privacy data of participants by using an encryption algorithm, and to realize secure aggregation of data by a key agreement mechanism. However, the above scheme often relies on a trusted third-party institution to distribute the key. That is, the key is delivered to each participant through a secure channel, and in this process, there is a risk of key leakage, which cannot guarantee the security of data aggregation.

[0021] Another data aggregation scheme is to aggregate the encrypted data of participants by polling calculation to ensure the confidentiality and integrity of the data. However, the above scheme needs to rely on key transfer between adjacent devices (which can also be understood as bidirectional transfer), so that the scheme is only applicable to the case where the number of participants is greater than three, that is, the application range is limited, and at the same time, there is a risk of key leakage, which cannot guarantee the security of data aggregation.

[0022] Based on this, in various embodiments of the present application, each participant independently generates a key and encrypts its own privacy data, and then calculates the product of the privacy data of all participants based on the encrypted privacy data to realize data aggregation. In this way, the security of data aggregation can be guaranteed without leaking the privacy data of all participants and without relying on a third party (such as a key generation center or other participants).

[0023] An embodiment of the present application provides a data processing method, as shown in Figure 1 The method is applied to a first device and includes the following steps. Step 101: Obtain a first security parameter of a last first device adjacent to the first device among at least two first devices; Step 102: Generate a first key based on the first security parameter; Step 103: Perform encryption processing on first data based on the first key to obtain second data, wherein the first data includes privacy data of the first device; Step 104: obtaining third data based on the second data, the third data representing a product result between the first data corresponding to the at least two first devices.

[0024] In actual application, the first device can be understood as a device used by a user participating in data aggregation (also referred to as a participant), such as a server, a notebook computer, a tablet computer, or a desktop computer, and the like. The type of the first device is not limited in the embodiments of the present application. In addition, for the at least two first devices, each first device has its own privacy data and does not know the privacy data of other first devices, and each first device can pre-know the identity-related information of other first devices in the at least two first devices, so as to subsequently perform information transmission.

[0025] In actual application, before step 101, the at least two first devices can negotiate related parameters. Of course, other devices except the first devices can also configure the related parameters and issue the related parameters to the at least two first devices. The configuration manner of the related parameters is not limited in the embodiments of the present application.

[0026] Exemplarily, in the scenario that the at least two first devices negotiate the related parameters, the at least two first devices can negotiate and select two first random parameters p and a fourth random parameter q in a random manner, and the lengths of p and q are consistent. p and q are both prime numbers (also referred to as large prime numbers), and the numerical values are different. In addition, the at least two first devices can negotiate and select an integer s (also referred to as a large integer) in a random manner. Based on s, p, and q, each first device can calculate a fifth security parameter g1 and a third security parameter g2. g1 and g2 are both prime numbers, and the numerical values are different. .

[0027] Exemplarily, in the scenario that other devices configure the related parameters, the other devices can select two first random parameters p and a third random parameter q in a random manner, and the lengths of p and q are consistent. p and q are both prime numbers, and the numerical values are different. The other devices can also negotiate and select an integer s in a random manner. Then, the other devices calculate a third security parameter g1 and a fourth security parameter g2 based on s, p, and q, and make p, g1, and g2 public, so that each first device can obtain the parameters.

[0028] In actual application, after the negotiation or configuration of the related parameters is completed, the first device can receive a first security parameter sent by a previous first device based on a one-way transmission mechanism. The first security parameter can be understood as security data generated by the previous first device itself, and the previous first device can be understood as a previous first device having a transmission sequence relationship with the current first device.

[0029] Here, after receiving the first security parameter, the first device can combine the first security parameter and its own security parameter to jointly generate the first key, so as to improve the complexity of the first key and reduce the risk of cracking the first key.

[0030] Specifically, in some optional embodiments, the generating the first key based on the first security parameter comprises: generating a second security parameter of the first device; generating the first key based on the first security parameter and the second security parameter.

[0031] The second security parameter can be understood as security data generated by the first device itself, and the first key can be understood as a key corresponding to the first device.

[0032] In actual application, in the process of generating the second security parameter, the first device can introduce a random parameter to dynamically generate the second security parameter. In this way, the complexity of the second security parameter can be improved.

[0033] Specifically, in some optional embodiments, the generating the second security parameter of the first device comprises: generating a second random parameter; generating the second security parameter by using the second random parameter and a third random parameter, the third random parameter containing a random parameter shared by the at least two first devices.

[0034] The second random parameter is a random parameter selected by the first device in a random manner, and the third random parameter can be understood as a random parameter pre-agreed or disclosed.

[0035] In actual application, the first device can take the second random parameter as an index of the third random parameter to calculate the second security parameter.

[0036] For example, for a first device, the first device can randomly generate a second random parameter and obtain a second security parameter based on the second random parameter and a third random parameter.

[0037] It should be noted that for the last first device, the first device can randomly generate a second random parameter and obtain a first security data based on the second random parameter and a third random parameter. That is, each first device can independently select a second random parameter and generate a security parameter corresponding to itself based on the second random parameter and a third random parameter.

[0038] In actual application, after the second security parameter is generated, the first device can generate the first key in combination with the first security parameter and the second security parameter; wherein, a random parameter can be introduced in the process of key generation to increase the risk of key cracking, so as to improve the anti-attack capability of the first device.

[0039] Specifically, in some optional embodiments, the generating the first key based on the first security parameter and the second security parameter comprises: obtaining a first random parameter, wherein the first random parameter comprises a random parameter shared by the at least two first devices; generating the first key based on the first random parameter, the first security parameter and the second security parameter.

[0040] In actual application, the first random parameter can be understood as a random parameter pre-agreed or disclosed.

[0041] In actual application, the first device can perform division processing on the first security parameter and the second security parameter to obtain a first result, and then perform modulo processing on the first result and the first random parameter to obtain the first key; wherein, the first key can be determined by the following formula: (1) wherein, for the first device i, denoted as the second security parameter, denoted as the first security parameter, denoted as the first random parameter, denoted as the first key.

[0042] It should be noted that in the case where there are m (m is an integer greater than or equal to 2) first devices, when i = 1, the previous first device of the first device i can be the first device m, in this case, the first key of the first device i can be determined by the following formula: (2) In the embodiments of the present application, each first device generates a local key by using the secure data of one-way data transmission between the first devices, without the intervention of a third party entity (such as a key management center), which can be applied to the case where the number of first devices is greater than or equal to two, i.e. the application range of the key generation method is expanded, the practicability of the scheme is improved, and the security of the key is guaranteed.

[0043] In actual application, after the first key is generated, the first device can encrypt the first data based on the first key and the first random parameter to obtain the second data, which can be understood as the first data after encryption processing, and the first data can be understood as the private data possessed by the first device itself. In this way, it can be ensured that the first data does not leave the first device, thereby ensuring the security of the data.

[0044] For example, for the first device i, the first device i uses the generated first key (which can be represented as ) and the first random parameter (which can be represented as p) to encrypt the first data (which can be represented as ) to obtain the second data (which can be represented as ). The second data can be obtained by the following formula: (3) In the embodiments of the present application, each first device uses an independently generated key and local private data for data encryption. This data processing method does not need to rely on a third party to generate a key, simplifies the process and is easy to operate.

[0045] In actual application, after the second data corresponding to the first device is determined, the first device can obtain the third data in a centralized calculation manner (also referred to as centralized manner).

[0046] Specifically, in some optional embodiments, the third data is obtained based on the second data, and the method comprises: sending the second data to the second device, so that the second device sequentially performs product calculation processing on the second data corresponding to each of the at least two first devices to obtain the third data; receiving the third data broadcast by the second device.

[0047] In actual application, the second device can be understood as an external device or an external node capable of performing centralized data aggregation. The second device can include a server (specifically, a centralized data receiver) or a terminal device, and the type of the second device is not limited in the embodiments of the present application, as long as the function thereof is realized.

[0048] In actual application, the first device can send the second data to the second device based on a relevant communication protocol, such as a transmission control protocol (TCP) or an Internet protocol (IP). After receiving the second data of all the first devices, the second device can sequentially perform a product calculation on the second data of each first device to obtain fourth data, which represents the product result of the second data corresponding to the at least two first devices, that is, the fourth data is the product result of the first data in an encrypted form.

[0049] Then, since the first random parameter is public, the second device can obtain the first random parameter and derive the third data based on the first random parameter and the fourth data. In this way, the privacy data of the user can be effectively protected, and the security of data aggregation is improved. Exemplarily, as shown in Figure 2 It is assumed that there are m first devices, and the m first devices will respectively send second data (respectively denoted as ) to the second device, so that the second device performs product-related processing on the m second data to obtain fourth data. Then, the fourth data (which can be denoted as E) is decrypted based on the first random parameter p to derive third data (which can be denoted as ). The third data can be obtained by the following formula: (4) In actual application, after obtaining the third data, the second device can simultaneously send the third data to each first device in the at least two first devices in a broadcast manner.

[0050] It should be noted that the second device can also send the fourth data to each first device in the at least two first devices in a broadcast manner, so that each first device independently calculates the third data based on the first random parameter and the fourth data.

[0051] In the embodiments of the present application, by introducing the second device as a centralized computing node and using a broadcast mechanism to distribute the third data, the product calculation of the privacy data among the multiple first devices can be realized without exposing the privacy data, the security and efficiency of data aggregation are improved (that is, the data aggregation process is faster), and the scheme can support more application scenarios involving privacy protection, such as financial data analysis and medical data sharing.

[0052] In actual application, after determining the second data corresponding to the first device, the first device can also derive the third data in a polling calculation manner (which can also be referred to as a polling manner).

[0053] Specifically, in some optional embodiments, the third data is obtained based on the second data, including: The second data is sent to a next first device adjacent to the first device among the at least two first devices, so that the next first device performs product calculation processing on the second data corresponding to the next first device and the received second data until fourth data is obtained, the fourth data representing a product result between the second data corresponding to each first device among the at least two first devices. The third data is obtained based on the fourth data.

[0054] Wherein, the next first device can be understood as the next first device having a transmission sequence relationship with the current first device.

[0055] In actual application, any first device among the at least two first devices can initiate sending the second data to the next first device based on a one-way transmission mechanism; after the next first device receives the second data, the next first device performs product calculation processing on the received second data and the second data of the next first device itself until the first device that initiates sends the product result between all the second data sent by the last first device, i.e., the fourth data.

[0056] Exemplarily, as shown in the following table, Figure 3 assuming that there are three first devices, the first device 1 is taken as an initiating device, and the second data is sent to the first device 2. After the first device 2 receives , the first device 2 multiplies and the second data of the first device 2 itself to obtain a product result 1 , and sends the product result 1 to the first device 3. After the first device 3 receives the product result 1, the first device 3 multiplies the product result 1 and the second data of the first device 3 itself to obtain a product result 2 , and sends the product result 2 to the first device 4, until the first device 1 receives the product result m-1 sent by the first device m, i.e., the fourth data.

[0057] Here, in actual application, after the fourth data is obtained, the first device can decrypt the fourth data in combination with the first random parameter, so as to obtain the third data.

[0058] In actual application, the first device can calculate the third data in combination with a random parameter agreed in advance.

[0059] Specifically, in some optional embodiments, the third data is obtained based on the fourth data, including: ​​obtaining a first random parameter, the first random parameter comprising a random parameter shared by the at least two first devices; obtaining the third data based on the first random parameter and the fourth data.

[0060] In actual application, the first device can obtain the third data through formula (4).

[0061] In the embodiments of the present application, the secure data aggregation among the multiple first devices is realized through the one-way data transmission and the layer-by-layer product calculation processing. In this way, the calculation of the product of the private data is performed through the self-interaction among the first devices without setting or deploying additional devices and maintaining the private state of the private data of the multiple first devices, so that the security and practicability of the data aggregation are improved.

[0062] The data processing method provided in the embodiments of the present application comprises: a first device obtaining a first security parameter of a last first device adjacent to the first device among at least two first devices; generating a first key based on the first security parameter; performing encryption processing on first data based on the first key to obtain second data, the first data comprising private data of the first device; and obtaining third data based on the second data, the third data representing a product result between the first data corresponding to the at least two first devices. The technical solution provided in the present application comprises: each device independently generating a key and performing encryption processing on local private data, and calculating the product between the private data of all devices based on the encrypted private data. In this way, efficient and secure data aggregation can be realized without revealing the original data and without the intervention of a third party.

[0063] In order to implement the method of the embodiments of the present application, the embodiments of the present application further provide a data processing apparatus arranged on a first device, as shown in Figure 4 The apparatus comprises: An obtaining unit 401 is configured to obtain a first security parameter of a last first device adjacent to the first device among at least two first devices. A generating unit 402 is configured to generate a first key based on the first security parameter. A first processing unit 403 is configured to perform encryption processing on first data based on the first key to obtain second data, the first data comprising private data of the first device. A second processing unit 404 is configured to obtain third data based on the second data, the third data representing a product result between the first data corresponding to the at least two first devices.

[0064] In some optional embodiments, the second processing unit 404 is configured to send the second data to the second device, so that the second device sequentially performs product calculation processing on the second data corresponding to each of the at least two first devices to obtain the third data; and receive the third data broadcast by the second device.

[0065] In some optional embodiments, the second processing unit 404 is configured to send the second data to the next first device adjacent to the first device among the at least two first devices, so that the next first device performs product calculation processing on the second data corresponding to the next first device and the received second data until the fourth data is obtained, the fourth data representing the product result between the second data corresponding to each of the at least two first devices; and obtain the third data based on the fourth data.

[0066] In some optional embodiments, the obtaining unit 401 is configured to obtain a first random parameter, the first random parameter including random parameters shared by the at least two first devices. The second processing unit 404 is configured to obtain the third data based on the first random parameter and the fourth data.

[0067] In some optional embodiments, the generating unit 402 is configured to generate a second security parameter of the first device; and generate the first key based on the first security parameter and the second security parameter.

[0068] In some optional embodiments, the obtaining unit 401 is configured to obtain a first random parameter, the first random parameter including random parameters shared by the at least two first devices. The generating unit 402 is configured to generate the first key based on the first random parameter, the first security parameter and the second security parameter.

[0069] In some optional embodiments, the generating unit 402 is configured to generate a second random parameter; and generate the second security parameter by using the second random parameter and a third random parameter, the third random parameter including random parameters shared by the at least two first devices.

[0070] In actual application, the obtaining unit 401 can be implemented by a communication interface in a data processing apparatus, and the generating unit 402, the first processing unit 403 and the second processing unit 404 can be implemented by a processor in the data processing apparatus.

[0071] It should be noted that the data processing apparatus provided in the above embodiments is only used for illustrating the division of the above program modules when performing data processing, and in actual application, the above processing can be completed by different program modules according to needs, that is, the internal structure of the apparatus is divided into different program modules to complete all or part of the above-described processing. In addition, the data processing apparatus and the data processing method provided in the above embodiments belong to the same concept, and the specific implementation process is described in the method embodiments, which will not be repeated here.

[0072] Based on the hardware implementation of the above program modules, and in order to realize the method of the embodiments of the application, the embodiments of the application also provide a first device, as shown in the following table: Figure 5 The first device 500 includes: A communication interface 501 capable of information interaction with other devices; A processor 502 connected with the communication interface 501 to realize information interaction with other devices, for running a computer program, and executing the method provided by one or more of the above technical solutions; A memory 503, wherein the computer program is stored in the memory 503.

[0073] Specifically, the communication interface 501 is configured to obtain a first security parameter of a last first device adjacent to the first device among at least two first devices; The processor 502 is configured to generate a first key based on the first security parameter, encrypt first data based on the first key to obtain second data, wherein the first data includes private data of the first device, and obtain third data based on the second data, wherein the third data represents a product result of the first data corresponding to the at least two first devices.

[0074] In some optional embodiments, the communication interface 501 is configured to send the second data to a second device, so that the second device sequentially performs product calculation processing on second data corresponding to each of the at least two first devices to obtain the third data, and receive the third data broadcast by the second device.

[0075] In some optional embodiments, the communication interface 501 is configured to send the second data to a next first device adjacent to the first device among the at least two first devices, so that the next first device performs product calculation processing on the second data corresponding to the next first device and the received second data until a fourth data is obtained, wherein the fourth data represents a product result of the second data corresponding to each of the at least two first devices; The processor 502 is configured to obtain the third data based on the fourth data.

[0076] In some embodiments, the communication interface 501 is configured to obtain a first random parameter, the first random parameter comprising a random parameter shared by the at least two first devices. The processor 502 is configured to obtain the third data based on the first random parameter and the fourth data.

[0077] In some embodiments, the processor 502 is configured to generate a second security parameter of the first device, and generate the first key based on the first security parameter and the second security parameter.

[0078] In some embodiments, the communication interface 501 is configured to obtain a first random parameter, the first random parameter comprising a random parameter shared by the at least two first devices. The processor 502 is configured to generate the first key based on the first random parameter, the first security parameter and the second security parameter.

[0079] In some embodiments, the processor 502 is configured to generate a second random parameter, and generate the second security parameter based on the second random parameter and a third random parameter, the third random parameter comprising a random parameter shared by the at least two first devices.

[0080] It should be noted that the specific processing process of the processor 502 and the communication interface 501 can be understood with reference to the above method.

[0081] Of course, in actual application, each component in the first device 500 is coupled together through a bus system 504. It can be understood that the bus system 504 is configured to realize the connection and communication between the components. The bus system 504 includes not only a data bus, but also a power bus, a control bus and a status signal bus. However, in order to clearly illustrate, all kinds of buses are marked as the bus system 504 in the Figure 5 .

[0082] The memory 503 in the embodiments of the present application is configured to store various types of data to support the operation of the first device 500. Examples of these data include any computer programs used for operation on the first device 500.

[0083] The method disclosed by the embodiments of the present application can be applied to the processor 502 or implemented by the processor 502. The processor 502 can be an integrated circuit chip having a signal processing capability. In the implementation process, each step of the above method can be completed by an integrated logic circuit or an instruction in the form of software in the processor 502. The processor 502 can be a general-purpose processor, a digital signal processor (DSP), or other programmable logic device, discrete gate or transistor logic device, discrete hardware component, etc. The processor 502 can implement or execute the disclosed methods, steps and logic block diagrams in the embodiments of the present application. The general-purpose processor can be a microprocessor or any conventional processor, etc. In combination with the steps of the method disclosed in the embodiments of the present application, the hardware decoding processor can be directly implemented or executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a storage medium, which is located in the memory 503, and the processor 502 reads the information in the memory 503 to complete the steps of the above method in combination with the hardware.

[0084] In the exemplary embodiments, the first device 500 can be implemented by one or more application specific integrated circuits (ASICs), DSPs, programmable logic devices (PLDs), complex programmable logic devices (CPLDs), field programmable gate arrays (FPGAs), general-purpose processors, controllers, micro controllers (MCUs), microprocessors (Microprocessors), or other electronic elements, for executing the above method.

[0085] It can be understood that the memory (the memory 503) of the embodiments of the present application can be a volatile memory or a non-volatile memory, and can also include both volatile and non-volatile memories. The non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a ferromagnetic random access memory (FRAM), a flash memory, a magnetic surface memory, an optical disc, or a compact disc read-only memory (CD-ROM). The magnetic surface memory can be a disk memory or a tape memory. The volatile memory can be a random access memory (RAM) used as an external cache. By way of example but not limitation, many forms of RAM can be used, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct rambus random access memory (DRRAM).The memory described in the embodiments of the present application is intended to include, but not limited to, these and any other suitable types of memory.

[0086] In the example embodiments, the embodiments of the present application also provide a storage medium, i.e. a computer storage medium, specifically a computer readable storage medium, such as the memory 503 storing the computer program executable by the processor 502 of the network element 500 to complete the steps of the aforementioned first device side method. The computer readable storage medium can be FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disc, or CD-ROM, etc.

[0087] In the example embodiments, the embodiments of the present application also provide a computer program product comprising a computer program executable by the processor 502 of the first device 500 to complete the steps of the aforementioned first device side method.

[0088] It should be noted that "first", "second", etc. are used to distinguish similar objects, and do not necessarily describe a specific order or sequence.

[0089] In addition, the technical solutions described in the embodiments of the present application can be combined arbitrarily without conflict.

[0090] The above is only a preferred embodiment of the present application, and is not intended to limit the protection scope of the present application.

Claims

1. A data processing method, characterized in that, Applied to a first device, the method includes: Obtain the first security parameter of the previous first device that is adjacent to the first device among at least two first devices; Based on the first security parameter, generate the first key; The first data is encrypted using the first key to obtain the second data, wherein the first data contains the privacy data of the first device. Based on the second data, third data is obtained, which represents the product result between the first data corresponding to the at least two first devices.

2. The method according to claim 1, characterized in that, The process of obtaining the third data based on the second data includes: The second data is sent to the second device, so that the second device sequentially performs a product calculation on the second data corresponding to each of the at least two first devices to obtain the third data; Receive the third data broadcast by the second device.

3. The method according to claim 1, characterized in that, The process of obtaining the third data based on the second data includes: The second data is sent to the next first device adjacent to the first device among the at least two first devices, such that the next first device performs a product calculation on the second data corresponding to the next first device and the received second data until a fourth data is obtained, wherein the fourth data represents the product result between the second data corresponding to each of the at least two first devices; The third data is obtained based on the fourth data.

4. The method according to claim 3, characterized in that, The process of obtaining the third data based on the fourth data includes: Obtain a first random parameter, wherein the first random parameter includes random parameters shared by the at least two first devices; The third data is obtained based on the first random parameter and the fourth data.

5. The method according to claim 1, characterized in that, The step of generating the first key based on the first security parameter includes: Generate the second security parameters for the first device; The first key is generated based on the first security parameter and the second security parameter.

6. The method according to claim 5, characterized in that, The step of generating the first key based on the first security parameter and the second security parameter includes: Obtain a first random parameter, wherein the first random parameter includes random parameters shared by the at least two first devices; The first key is generated based on the first random parameter, the first security parameter, and the second security parameter.

7. The method according to claim 5, characterized in that, The generation of the second security parameters for the first device includes: Generate a second random parameter; The second security parameter is generated using the second random parameter and the third random parameter, wherein the third random parameter includes random parameters shared by the at least two first devices.

8. A data processing apparatus, characterized in that, The first device includes: The acquisition unit is used to acquire the first security parameter of the previous first device that is adjacent to the first device among at least two first devices; A generation unit is configured to generate a first key based on the first security parameter; The first processing unit is configured to encrypt the first data based on the first key to obtain the second data, wherein the first data contains the privacy data of the first device. The second processing unit is configured to obtain third data based on the second data, wherein the third data represents the product result between the first data corresponding to the at least two first devices.

9. A first device, characterized in that, include: Processor and communication interface; among which, The communication interface is used to obtain the first security parameters of the previous first device that is adjacent to the first device among at least two first devices; The processor is configured to generate a first key based on the first security parameter; encrypt first data based on the first key to obtain second data, the first data containing privacy data of the first device; and obtain third data based on the second data, the third data representing the product result between the first data corresponding to the at least two first devices.

10. A first device, characterized in that, include: The processor and the memory used to store computer programs that can run on the processor. When the processor is used to run the computer program, it performs the steps of the method according to any one of claims 1 to 7.

11. A storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 7.

12. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 7.

Images