Method and system for privacy computing network authorization and state management based on node contract

Abstract

The application discloses a kind of based on node contract's privacy computing network authorization and state management method and system, it is related to privacy computing field, it aims at solving the problem of relying on centralization node, state synchronization inconsistency and extensive authorization management in the decentralized privacy computing collaborative network. Through the point-to-point interaction of the intercommunication gateway of initiator node and partner node, node cooperation application, data set authorization configuration are completed, and the real-time synchronization of data set and node information and the authorization full life cycle management are realized;Initiator node and partner node maintain the cooperation gateway address list based on intercommunication gateway locally, automatically synchronized through cooperation application, without centralized registration center, ensure network decentralization, state consistency and authorization refinement, suitable for cross-institution privacy computing collaborative scene.

Description

Technical Field

[0001] This invention belongs to the field of privacy computing, specifically relating to a method and system for authorization and state management of privacy computing networks based on node contracts. Background Technology

[0002] In decentralized privacy-preserving computing collaborative networks, cross-institutional data sharing is a core prerequisite for collaborative computing. However, due to data privacy protection regulations and institutional trust barriers, data use needs to be regulated through authorization mechanisms. Existing solutions mostly adopt a "centralized authorization platform" or "registration center + management platform" architecture: the former involves a third party building an authorization platform, where data-holding institutions register datasets and partner institutions apply for permissions; the latter manages participants through a centralized registration center and controls data through a management platform, forming an "identity-information-data" collaborative mechanism.

[0003] However, the existing solutions have the following obvious drawbacks: First, the registration center is a single point of failure, relying on a single centralized node, and a crash will lead to interruption of state synchronization and task stagnation; second, sensitive data is stored centrally, making it vulnerable to attacks or internal abuse; third, network expansion is difficult, and the communication cost increases linearly with the growth of nodes; fourth, centralized permissions may lead to the management platform favoring some participants; and fifth, the authorization is rudimentary and the state synchronization is delayed, which can easily lead to permission abuse or inconsistent states, affecting the reliability of computing. Summary of the Invention

[0004] Based on the above background and the problems existing in the prior art, the present invention adopts the following technical solution: it provides a privacy computing network authorization and state management method based on node contracts, which can avoid authorization interruption caused by single point of failure through node contracts and achieve fine-grained control through multi-dimensional permission configuration, and reliably complete privacy computing tasks under different scenario requirements.

[0005] A method for authorization and state management in a privacy-preserving computing network based on node contracts includes the following steps:

[0006] The partner node receives the node cooperation application, node health check request and dataset authorization application sent by the initiating node. Based on the node health check request, it performs its own health status check, obtains the health status result and sends it back to the initiating node.

[0007] The partner node verifies the node information based on the node cooperation application and health status results. If the verification is successful, a node contract is generated and sent back to the initiating node. The initiating node updates the status of its local node contract through the node contract.

[0008] The partner node receives and approves the dataset status request sent by the initiating node. If approved, it generates the corresponding resource license certificate and authorization status.

[0009] The partner node sends the resource license certificate and authorization status to the initiating node. The initiating node then uses the resource license certificate and authorization status to perform corresponding privacy-preserving computation operations on the partner node's dataset.

[0010] As one possible implementation, the node cooperation application includes the node ID of the initiating node, the computing node service address, and the interconnection gateway address;

[0011] The self-health status check includes the initiating node detecting the running status of the node data encryption module, which is used to implement data encryption operations in the data transmission, data storage, and data computation processes in the privacy computing network.

[0012] As one possible implementation method, the node information verification is performed through the identity of the initiating node, the validity of the cooperating node, and the uniqueness of the node contract, specifically as follows:

[0013] The collaborating node verifies whether the initiating node's identity complies with the cross-institutional collaboration guidelines for privacy computing.

[0014] Do the partner nodes possess the computing power and security protection capabilities to meet privacy computing tasks?

[0015] Does the same node contract exist, either valid or pending, for the same privacy computing task?

[0016] As one possible implementation, it also includes synchronizing the change information through the interconnection gateway when the status of the partner node or the initiator node is updated, specifically:

[0017] Information is broadcast through the interconnection gateway of the partner node or the initiator node, and the nodes related to the privacy computing task are synchronized first.

[0018] If synchronization fails, the failure information is recorded in the local broadcast information table, and a scheduled task is used to retry until synchronization is completed.

[0019] As one possible implementation, the timed task retry repeatedly sends update information through the interconnection gateway according to preset rules until all interconnection gateways report successful reception.

[0020] The preset rules are set by prioritizing privacy computing tasks.

[0021] As one possible implementation, the address list of the interconnection gateway is automatically synchronized through information exchange in cooperation between nodes, without the need for a centralized registration center to uniformly store or distribute addresses.

[0022] As one possible implementation, the dataset status request includes an authorization request and a deauthorization request;

[0023] If the dataset status request is an authorization request, after approval, the initiating node accesses the partner node's dataset under the privacy computing scenario defined by the resource license certificate, which includes access frequency and access validity period.

[0024] If the dataset status request is a deauthorization request, the collaborating node will revoke the resource license certificate of the initiating node, synchronize the authorization status to the initiating node, and terminate the initiating node's dataset access permission.

[0025] A privacy-preserving computation network authorization and state management system based on node contracts, comprising:

[0026] In the cooperation application module, the cooperating node receives the node cooperation application, node health check request and dataset authorization application sent by the initiating node, performs its own health status check based on the node health check request, obtains the health status result and sends it back to the initiating node.

[0027] The information verification module verifies the node information based on the node cooperation application and health status results. If the verification is successful, a node contract is generated and sent back to the initiating node. The initiating node then updates the status of its local node contract through the node contract.

[0028] In the data authorization module, the partner node receives and approves the dataset status application sent by the initiating node. If approved, the corresponding resource license certificate and authorization status are generated.

[0029] In the data access module, the partner node sends the resource license certificate and authorization status to the initiating node. The initiating node then uses the resource license certificate and authorization status to perform corresponding privacy-preserving computation operations on the partner node's dataset.

[0030] A computer-readable storage medium storing a computer program that, when executed by a processor, implements the following method:

[0031] The partner node receives the node cooperation application, node health check request and dataset authorization application sent by the initiating node. Based on the node health check request, it performs its own health status check, obtains the health status result and sends it back to the initiating node.

[0032] The partner node verifies the node information based on the node cooperation application and health status results. If the verification is successful, a node contract is generated and sent back to the initiating node. The initiating node updates the status of its local node contract through the node contract.

[0033] The partner node receives and approves the dataset status request sent by the initiating node. If approved, it generates the corresponding resource license certificate and authorization status.

[0034] The partner node sends the resource license certificate and authorization status to the initiating node. The initiating node then uses the resource license certificate and authorization status to perform corresponding privacy-preserving computation operations on the partner node's dataset.

[0035] A privacy-preserving computing network authorization and state management device based on node contracts includes a memory, a processor, and a computer program stored in the memory and running on the processor. When the processor executes the computer program, it implements the following method:

[0036] The partner node receives the node cooperation application, node health check request and dataset authorization application sent by the initiating node. Based on the node health check request, it performs its own health status check, obtains the health status result and sends it back to the initiating node.

[0037] The partner node verifies the node information based on the node cooperation application and health status results. If the verification is successful, a node contract is generated and sent back to the initiating node. The initiating node updates the status of its local node contract through the node contract.

[0038] The partner node receives and approves the dataset status request sent by the initiating node. If approved, it generates the corresponding resource license certificate and authorization status.

[0039] The partner node sends the resource license certificate and authorization status to the initiating node. The initiating node then uses the resource license certificate and authorization status to perform corresponding privacy-preserving computation operations on the partner node's dataset.

[0040] (1) A method and system for authorization and state management of privacy computing network based on node contracts are proposed. By maintaining distributed addresses and forwarding peer-to-peer through gateways, the dependence on centralized registration centers is eliminated. Node contracts replace centralized authorization rule storage, avoiding authorization interruption caused by single point of failure, and reducing the risk of centralized storage of sensitive data.

[0041] (2) A method and system for authorization and state management of privacy computing network based on node contracts are proposed. The real-time synchronization mechanism ensures that the dataset and node state changes are quickly synchronized, and the timed retry mechanism makes up for the synchronization failure, avoiding problems such as "contract activation not being realized" and "authorization revocation still retaining permissions", thus ensuring the reliability of computing tasks.

[0042] (3) A method and system for authorization and state management of privacy computing networks based on node contracts are proposed. Multi-dimensional permission configuration enables fine-grained control. The scope of authorization can be flexibly adjusted according to the needs of different privacy computing tasks, avoiding the abuse of permissions and meeting the needs of differentiated permissions.

[0043] Other advantages, objectives and features of the present invention will become apparent in part from the following description, and in part from those skilled in the art through study and practice of the invention. Attached Figure Description

[0044] Figure 1 This is a schematic flowchart of the method of the present invention;

[0045] Figure 2 This is a schematic diagram of the modules of the system of the present invention. Detailed Implementation

[0046] To clearly illustrate the present invention and make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings, so that those skilled in the art can implement them based on the description.

[0047] In the context of this invention, a trusted execution environment (TEE) provides an isolated runtime environment from the perspective of underlying hardware and operating system, protecting the code and data running within it from external attacks, including attacks from the operating system, hardware, and other applications. This technology has been used in some fields to achieve the objectives described above, and some of its basic principles are known to those skilled in the art. However, those skilled in the art will understand how to apply this technology in this context after reading this application, and will clearly recognize that the technology, combined with other features in a specific context, possesses novelty.

[0048] The present invention will now be described in detail with reference to the accompanying drawings and specific embodiments.

[0049] Example 1:

[0050] This invention relates to a method for authorization and state management in privacy-preserving computation networks based on node contracts. The flowchart of the invention is as follows: Figure 1 As shown, the specific steps are as follows:

[0051] S100: The partner node receives the node cooperation application, node health check request and dataset authorization application sent by the initiating node, performs its own health status check based on the node health check request, obtains the health status result and sends it back to the initiating node.

[0052] S200: The partner node verifies the node information based on the node cooperation application and health status results. If the verification is successful, a node contract is generated and sent back to the initiating node. The initiating node updates the status of its local node contract through the node contract.

[0053] S300: The partner node receives and approves the dataset status request sent by the initiating node. If approved, it generates the corresponding resource license certificate and authorization status.

[0054] S400: The partner node sends the resource license certificate and authorization status to the initiating node. The initiating node then uses the resource license certificate and authorization status to perform corresponding privacy-preserving computation operations on the partner node's dataset.

[0055] This application deeply binds node contracts with privacy computing node devices, interacts through peer-to-peer gateways (without centralized nodes), and the resource license certificate clearly limits "privacy computing exclusive permissions" (such as only allowing it to be used for federated learning model training, and not allowing viewing of raw data), directly adapting to the core requirement of "data usable but not visible" privacy computing, and solving the problem that traditional authorization cannot take into account both "decentralization" and "privacy security".

[0056] The health check in this application not only verifies the device's operating status, but also confirms whether the node has privacy computing security capabilities (such as whether a Trusted Execution Environment (TEE) and data transmission encryption module are deployed), to avoid privacy data leakage due to insufficient node security capabilities and to fill the security vulnerabilities of existing health checks in privacy computing scenarios.

[0057] During state synchronization, this application prioritizes the update and synchronization of privacy computing task nodes (such as synchronizing the "authorization revoked" status immediately upon task completion), and uses a timed retry mechanism to retransmit data after synchronization failure, thereby avoiding the privacy risk of "authorization revoked but the task still calling data" and addressing the shortcomings of existing state management in terms of the timeliness of privacy computing tasks.

[0058] The authorization control in this application covers the entire lifecycle of "application-effectiveness-modification-revocation". Resource license certificates can be configured with dynamic permissions according to the needs of privacy computing tasks (such as setting the validity period according to the task cycle and restricting the access frequency according to the computing steps), and all operation records are traceable, meeting the compliance audit requirements in cross-organizational collaboration of privacy computing.

[0059] In this embodiment, all participants in the privacy computing collaborative network deploy a management platform. The participants include collaborating nodes and initiating nodes. The initiating node sends a node cooperation application containing the initiating node ID, computing node service address and gateway address to the collaborating node's interconnection gateway through its interconnection gateway.

[0060] After the initiating node initiates a cooperation application, it automatically initiates a node health check request. This request is forwarded to the computing node of the cooperating node through the interconnection gateway of the initiating node and the interconnection gateway of the cooperating node. After verifying its own health status, the computing node of the cooperating node returns the health status result. This result is sent back to the initiating management platform through the interconnection gateway of the cooperating node and the interconnection gateway of the initiating node.

[0061] The management platform of the partner node receives the node cooperation application and health status result, verifies the identity of the initiating node, the validity of the partner node and the uniqueness of the node contract. After the verification is passed, a node contract with a contract ID is generated and sent back to the initiating management platform through the partner interconnection gateway and the initiating interconnection gateway. The initiating management platform updates the local node contract status.

[0062] Partner nodes, as data holders, configure the public scope of the dataset through their management platform and record information about partner nodes that can view the dataset;

[0063] The initiator queries the public dataset of the partner node through its interconnection gateway, initiates a dataset authorization application through the management platform of the initiator node, and the management platform of the initiator node records the application to the application and approval table, and marks the status as "application submitted".

[0064] The management platform of the partner node approves the authorization application. After approval, a resource license certificate is generated and the authorization relationship is registered. The authorization relationship supports configuring authorization permissions according to the number of accesses and the validity period. The resource license certificate is sent back to the management platform of the initiating node through the interconnection gateway of the partner node and the interconnection gateway of the initiating node.

[0065] When the dataset is allocated, the public scope is changed, or the authorization status is updated, the change information is synchronized to the relevant participants through the interconnection gateway. When the node information of a participant changes, its interconnection gateway broadcasts the update information to all partner interconnection gateways. If the synchronization fails, the failure information is recorded in the local broadcast information table, and the synchronization is retried through a scheduled task until the synchronization is completed.

[0066] After the authorization certificate takes effect, the initiating node can use the authorized dataset, and any participating node can initiate an authorization revocation request, and both parties update the authorization to invalid.

[0067] After the resource license certificate takes effect, the initiating node can use the authorized dataset, and any participating node can initiate an authorization revocation request, which will notify the other party through its interconnection gateway. The management platforms of both parties will update the authorization status to "revoked" and the authorization mark will be invalid.

[0068] All operational information for the entire process of the above-mentioned node application, health status verification, authorization application, authorization approval, status synchronization, and authorization revocation is recorded and archived, and authorization record query and auditing are supported.

[0069] In summary, the present invention provides a method and system for authorization and state management of privacy computing networks based on node contracts. This method aims to address the problems of reliance on centralized nodes, inconsistent state synchronization, and coarse-grained authorization control in decentralized privacy computing collaborative networks. Through point-to-point interaction between participating parties' interconnection gateways, node cooperation applications and dataset authorization configurations are completed, achieving real-time synchronization of dataset and node information and full lifecycle management of authorization. Each participating party's interconnection gateway locally maintains a list of cooperative gateway addresses, which is automatically synchronized upon cooperation applications. This eliminates the need for a centralized registration center, ensuring network decentralization, state consistency, and fine-grained authorization, making it suitable for cross-institutional privacy computing collaborative scenarios.

[0070] Example 2:

[0071] A privacy-preserving computing network authorization and state management system based on node contracts, such as Figure 2 As shown, it includes:

[0072] The cooperation application module 100 allows the cooperating node to receive the node cooperation application, node health check request, and dataset authorization application sent by the initiating node. Based on the node health check request, the cooperating node performs its own health status check, obtains the health status result, and sends it back to the initiating node.

[0073] The information verification module 200 verifies the node information based on the node cooperation application and health status results. If the verification is successful, a node contract is generated and sent back to the initiating node. The initiating node updates the status of its local node contract through the node contract.

[0074] The data authorization module 300 allows partner nodes to receive and approve dataset status requests sent by initiating nodes. If approved, it generates corresponding resource license credentials and authorization status.

[0075] The data access module 400 allows partner nodes to send resource license credentials and authorization status to initiating nodes. Initiating nodes then use these credentials and authorization status to perform privacy-preserving computations on the partner nodes' datasets.

[0076] Various changes and modifications made without departing from the spirit and scope of this invention, and all equivalent technical solutions, also fall within the scope of this invention.

[0077] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0078] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, apparatus, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0079] This invention is described with reference to flowchart illustrations and / or block diagrams of the method, terminal device (system), and computer program product according to the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0080] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing terminal device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0081] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal equipment, causing a series of operational steps to be performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable terminal equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0082] It should be noted that:

[0083] The phrase "an embodiment" or "an embodiment" used in this specification means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment of the invention. Therefore, the phrase "an embodiment" or "an embodiment" appearing in various places throughout the specification does not necessarily refer to the same embodiment.

[0084] The above description of the embodiments is provided to enable those skilled in the art to understand and apply the present invention. It will be apparent to those skilled in the art that various modifications can be made to the above embodiments, and the general principles described herein can be applied to other embodiments without inventive effort. Therefore, the present invention is not limited to the above embodiments, and any improvements and modifications made to the present invention by those skilled in the art based on the disclosure thereof should be within the scope of protection of the present invention.

Claims

1. A method for authorization and state management in a privacy-preserving computing network based on node contracts, characterized in that, Includes the following steps: The partner node receives the node cooperation application, node health check request and dataset authorization application sent by the initiating node. Based on the node health check request, it performs its own health status check, which includes detecting the running status of the node data encryption module, confirming whether the node has deployed a Trusted Execution Environment (TEE) and a data transmission encryption module, and obtains the health status result and sends it back to the initiating node. The partner node verifies the node information based on the node cooperation application and health status results. If the verification is successful, a node contract is generated and sent back to the initiating node. The initiating node updates the status of its local node contract through the node contract. The partner node receives and approves the dataset status application sent by the initiating node. The dataset status application includes a request for authorization and a request to revoke authorization. If it is a request for authorization and is approved, a corresponding resource license certificate and authorization status are generated. If it is a request to revoke authorization and is approved, the resource license certificate corresponding to the initiating node is revoked and the authorization status is updated to revoke. The partner node sends the aforementioned resource license certificate and authorization status to the initiating node. Based on the resource license certificate and authorization status, the initiating node performs corresponding privacy computation operations on the partner node's dataset or terminates the dataset access.

2. The method for authorization and state management of privacy-preserving computing networks based on node contracts according to claim 1, characterized in that, The node cooperation application includes the node ID of the initiating node, the computing node service address, and the interconnection gateway address; The node data encryption module is used to implement data encryption operations during data transmission, data storage, and data computation in the privacy computing network.

3. The method for authorization and state management of privacy-preserving computing networks based on node contracts according to claim 1, characterized in that, The node information verification is conducted through the identity of the initiating node, the validity of the cooperating nodes, and the uniqueness of the node contract, specifically as follows: The collaborating node verifies whether the initiating node's identity complies with the cross-institutional collaboration guidelines for privacy computing. Do the partner nodes possess the computing power and security protection capabilities to meet privacy computing tasks? Does the same node contract exist, either valid or pending, for the same privacy computing task? 4. The method for authorization and state management of privacy-preserving computing networks based on node contracts according to claim 1, characterized in that, This also includes synchronizing the change information through the interconnection gateway when the status of a partner node or initiator node is updated, specifically: Information is broadcast through the interconnection gateway of the partner node or the initiator node, and the nodes related to the privacy computing task are synchronized first. If synchronization fails, the failure information is recorded in the local broadcast information table, and a scheduled task is used to retry until synchronization is completed.

5. The method for authorization and state management of privacy-preserving computing networks based on node contracts according to claim 4, characterized in that, The scheduled task retry involves repeatedly sending update information through the interconnection gateways according to preset rules until all interconnection gateways report successful reception. The preset rules are set by prioritizing privacy computing tasks.

6. The method for authorization and state management of privacy-preserving computing networks based on node contracts according to claim 4, characterized in that, The address list of the interconnection gateway is automatically synchronized through information exchange in the cooperation application of nodes, without the need for a centralized registration center to uniformly store or distribute addresses.

7. The method for authorization and state management of privacy-preserving computing networks based on node contracts according to claim 1, characterized in that, Also includes: The resource license certificate includes access frequency and access validity period. The initiating node accesses the dataset of the collaborating node under the privacy computing scenario defined by the resource license certificate.

8. A privacy-preserving computing network authorization and state management system based on node contracts, characterized in that, include: The cooperation application module allows the cooperating node to receive the node cooperation application, node health check request, and dataset authorization application sent by the initiating node. Based on the node health check request, the cooperating node performs its own health status check, which includes detecting the running status of the node data encryption module, confirming whether the node has deployed a Trusted Execution Environment (TEE) and a data transmission encryption module, obtaining the health status result, and sending it back to the initiating node. The information verification module verifies the node information based on the node cooperation application and health status results. If the verification is successful, a node contract is generated and sent back to the initiating node. The initiating node then updates the status of its local node contract through the node contract. In the data authorization module, the partner node receives and approves the dataset status application sent by the initiating node. The dataset status application includes a request for authorization and a request to revoke authorization. If it is a request for authorization and is approved, a corresponding resource license certificate and authorization status are generated. If it is a request to revoke authorization and is approved, the resource license certificate corresponding to the initiating node is revoked and the authorization status is updated to revoke. In the data access module, the partner node sends the aforementioned resource license certificate and authorization status to the initiating node. Based on the resource license certificate and authorization status, the initiating node performs corresponding privacy calculation operations on the partner node's dataset or terminates the dataset access.

9. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by a processor, it implements the method as described in any one of claims 1 to 7.

10. A privacy-preserving computing network authorization and state management device based on node contracts, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that, When the processor executes the computer program, it implements the method as described in any one of claims 1 to 7.

Images