Privacy protection type social connection method, device, equipment, medium and product

Abstract

The invention discloses a privacy protection type social connection method and device, equipment, a medium and a product, and relates to the technical field of computer communication, and the method comprises the steps: obtaining a feature identifier sent by a first user terminal; the feature identifier is an irreversible identifier generated by the first user terminal based on feature information of a second user input by the first user; matching the feature identifier with all user feature identifiers in a pre-constructed user registration library to obtain a matching result; if the matching result is that the unique matching item exists, triggering a one-way transmission mechanism to send a basic identity identifier of the first user to a second user terminal; and the second user terminal receives and verifies the basic identity identifier of the first user, and the first user terminal and the second user terminal establish end-to-end social network connection under the condition that the verification is passed. According to the invention, the security of social network connection establishment is improved.

Description

Technical Field

[0001] This application relates to the field of computer communication technology, and in particular to a privacy-preserving social connection method, apparatus, device, medium and product. Background Technology

[0002] In current social networking scenarios, traditional social platforms often rely on virtual identifiers (such as accounts and phone numbers) to locate and connect users. This approach poses significant privacy and security risks. For example, if a user's virtual identifier is leaked, their personal information may be maliciously misused, and the binding relationship between virtual identifiers and real-world identities is easily cracked, leading to further privacy breaches. Furthermore, in traditional processes, users' original characteristic information often needs to be uploaded to platform servers for processing and matching. This exposure of raw data increases the likelihood of information theft or misuse, making it difficult to balance the convenience of social connections with the security of privacy protection. Therefore, there is an urgent need for a privacy-preserving social networking method that can improve security. Summary of the Invention

[0003] In view of the above-mentioned defects or deficiencies in the related technologies, the purpose of this application is to provide a privacy-preserving social connection method, apparatus, device, medium and product that can improve the security of establishing social network connections.

[0004] To achieve the above objectives, this application provides the following solution: Firstly, this application provides a privacy-preserving social connection method applied to a server. The privacy-preserving social connection method includes: obtaining a feature identifier sent by a first user terminal; the feature identifier is an irreversible identifier generated by the first user terminal based on feature information of a second user input by the first user; matching the feature identifier with all user feature identifiers in a pre-built user registration database to obtain a matching result; if the matching result shows a unique match, triggering a one-way transmission mechanism to send the basic identity identifier of the first user to the second user terminal; the second user terminal receives the basic identity identifier of the first user and replies to the first user terminal, and the first user terminal and the second user terminal establish an end-to-end social network connection.

[0005] Optionally, matching the feature identifier with all user feature identifiers in a pre-built registration database to obtain a matching result includes: traversing the pre-built user registration database and retrieving user feature identifiers in the pre-built user registration database that match the feature identifier using a string equivalence matching method; if the match is unsuccessful, returning an empty response message to the first user terminal; the empty response message does not contain any user information; if the match is successful, there is a unique match, triggering a one-way transmission mechanism to send the basic identity identifier of the first user to the second user terminal; the basic identity identifier of the first user includes the first user's surname and gender information.

[0006] Secondly, this application provides a privacy-preserving social connection method applied to a first user terminal. The privacy-preserving social connection method includes: obtaining feature combination information of a second user input by the first user; the feature combination information includes at least any two of the following: venue identification information, role attributes, and title fragments corresponding to the second user; generating a dynamic salt value using a privacy engine, and concatenating the feature combination information of the second user with the dynamic salt value to obtain a string to be processed; encrypting the string to be processed using the SHA3-256 hash algorithm, and retaining the first preset bit of the calculation result to obtain a feature identifier corresponding to the second user.

[0007] Optionally, after obtaining the feature identifier corresponding to the second user, the method further includes: sending the feature identifier to the server and deleting the feature combination information of the second user stored locally.

[0008] Optionally, generating a dynamic salt value using a privacy engine includes: generating the dynamic salt value based on locally stored device fingerprint information and the current timestamp using a preset algorithm; the device fingerprint information is a unique identifier for the first user terminal; the lifecycle of the dynamic salt value is consistent with the session period of the current social connection request, and it is automatically destroyed after the session ends.

[0009] Thirdly, this application provides a privacy-preserving social connection method applied to a second user terminal. The privacy-preserving social connection method includes: obtaining a basic identity identifier of a first user sent by a server; replying to the first user terminal to establish an end-to-end social network connection with the first user terminal; sending the contact information of the second user to the first user terminal and unlocking the contact level with the first user terminal; the contact level includes normal and encrypted; if the contact level is normal, obtaining a real-world characteristic identifier of the first user sent by the first user terminal, the real-world characteristic identifier including the first user's full name, company name, and / or position within the company; if the contact level is encrypted, jointly signing a blockchain-based electronic contract with the first user terminal, obtaining an encrypted characteristic identifier of the first user sent by the first user terminal, the encrypted characteristic identifier including a confidential full name, undisclosed department information, and / or a confidential position.

[0010] Fourthly, this application provides a privacy-preserving social connection device, the privacy-preserving social connection device comprising: The acquisition module is used to acquire the feature identifier sent by the first user terminal; the feature identifier is an irreversible identifier generated by the first user terminal based on the feature information of the second user input by the first user; The matching module is used to match the feature identifier with all user feature identifiers in the pre-built user registration database to obtain the matching result; The sending module is used to trigger a one-way transmission mechanism to send the basic identity identifier of the first user to the second user terminal if the matching result is that there is a unique match; the second user terminal receives the basic identity identifier of the first user and replies to the first user terminal, and the first user terminal and the second user terminal establish an end-to-end social network connection.

[0011] Fifthly, this application provides a computer device, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the privacy-preserving social connection method according to any one of the first aspects, or the steps of the privacy-preserving social connection method according to any one of the second aspects, or the steps of the privacy-preserving social connection method according to the third aspect.

[0012] Sixthly, this application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the privacy-preserving social connection method described in any of the first aspects, or the steps of the privacy-preserving social connection method described in any of the second aspects, or the steps of the privacy-preserving social connection method described in the third aspect.

[0013] In a seventh aspect, this application provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the privacy-preserving social connection method described in any of the first aspects, or the steps of the privacy-preserving social connection method described in any of the second aspects, or the steps of the privacy-preserving social connection method described in the third aspect.

[0014] According to the specific embodiments provided in this application, the following technical effects are disclosed: This application provides a privacy-preserving social connection method, apparatus, device, medium, and product. A server obtains a feature identifier sent by a first user terminal and matches it with all user feature identifiers in a pre-built user registration database to obtain a matching result. If a unique match exists, a one-way transmission mechanism is triggered to send the first user's basic identity identifier to a second user terminal. Upon receiving and responding to the first user terminal, the first and second user terminals establish an end-to-end social network connection. During this end-to-end connection, the second and first user terminals can unlock their communication levels bi-directionally, allowing information to be released gradually as trust accumulates. Unlocking sensitive information requires a jointly signed blockchain-based electronic contract, ensuring both privacy and efficiency in social connections, achieving a dynamic balance between privacy protection and social needs. Furthermore, direct communication between the second and first user terminals can use real information as the addressing basis, breaking the reliance on virtual identifiers such as phone numbers and IDs, solving the privacy leakage problem caused by the exposure of virtual identifiers in traditional social searches, and improving the security of establishing social network connections. Attached Figure Description

[0015] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0016] Figure 1 This is an application environment diagram of a privacy-preserving social connection method according to an embodiment of this application; Figure 2 A flowchart illustrating a privacy-preserving social connection method provided in an embodiment of this application; Figure 3 A flowchart illustrating a privacy-preserving social connection method provided in another embodiment of this application; Figure 4A schematic diagram of the functional modules of a privacy-preserving social connection device provided in an embodiment of this application; Figure 5 This is a schematic diagram of the structure of a computer device provided in an embodiment of this application. Detailed Implementation

[0017] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0018] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0019] The privacy-preserving social connection method provided in this application embodiment can be applied to, for example... Figure 1 In the application environment shown, the first user terminal 101 and the second user terminal 102 communicate with the server 103 via a network. The first user terminal 101 sends a feature identifier to the server 103. After receiving the feature identifier, the server 103 matches the feature identifier with all user feature identifiers in a pre-built user registration database to obtain a matching result. If the matching result shows a unique match, a one-way transmission mechanism is triggered to send the first user's basic identity identifier to the second user terminal. The second user terminal receives the first user's basic identity identifier and replies to the first user terminal, thus establishing an end-to-end social network connection between the first user terminal and the second user terminal.

[0020] The first user terminal 101 and the second user terminal 102 can be, but are not limited to, various desktop computers, laptops, smartphones, tablets, IoT devices, and portable wearable devices. IoT devices can include smart speakers, smart TVs, smart air conditioners, smart in-vehicle devices, etc. Portable wearable devices can include smartwatches, smart bracelets, head-mounted devices, etc. Server 103 can be implemented using a standalone server or a server cluster composed of multiple servers, or it can be a cloud server.

[0021] In one exemplary embodiment, such as Figure 2 As shown, a privacy-preserving social connection method is provided, which is applied to... Figure 1 Taking server 103 as an example, the explanation includes the following steps S201 to S203. Wherein: Step S201: Obtain the feature identifier sent by the first user terminal.

[0022] In the example embodiment, the feature identifier is an irreversible identifier generated by the first user terminal based on the feature information of the second user input by the first user. That is, after the server obtains the feature identifier, it cannot use the feature identifier for reverse addressing, which can ensure the security of establishing a social network connection.

[0023] Step S202: Match the feature identifier with all user feature identifiers in the pre-built user registration database to obtain the matching result.

[0024] In the example implementation, the pre-built user registration database is a collection of all user feature identifiers. Each user feature identifier is associated with the user's basic identity identifier, and the pre-built user registration database only stores user feature identifiers and does not store any user's original real-world feature information. The user feature identifier is an irreversible identifier generated by the user during registration or editing of their profile based on their own real-world features (such as location identifiers, role attributes, title fragments, etc.); the original real-world feature information includes the user's name, company name, contact information, etc.

[0025] Optionally, step S202 may include: traversing the pre-built user registration database and using string equivalence matching to retrieve user feature identifiers that match the feature identifiers in the pre-built user registration database; if the match is unsuccessful, returning an empty response message to the first user terminal; if the match is successful, there is a unique match, triggering a one-way transmission mechanism to send the basic identity identifier of the first user to the second user terminal; the basic identity identifier of the first user includes the first user's surname and gender information.

[0026] It should be noted that the empty response information mentioned above does not contain any user information, but only includes notification information of matching failure, such as "404" or "match failed". The one-way transmission mechanism means that after a successful match, the server only sends information to the second user terminal and does not send feedback information to the first user terminal, realizing one-way transmission of information from the initiator to the receiver.

[0027] In other embodiments, the basic identity identifier of the first user may also include virtual items, emoticons, data files, etc. associated with the first user, wherein the data files may include text, video, and audio.

[0028] In step S203, if the matching result is that there is a unique match, a one-way transmission mechanism is triggered to send the basic identity identifier of the first user to the second user terminal; the second user terminal receives the basic identity identifier of the first user and replies to the first user terminal, and the first user terminal and the second user terminal establish an end-to-end social network connection.

[0029] In the example embodiment, the basic identity identifier includes the first user's surname and gender information, and the basic identity identifier is encrypted using the public key of the blockchain during transmission. Only the second user terminal can decrypt it through the built-in private key, further ensuring the security of the social network connection establishment.

[0030] It should be noted that, in this embodiment, the server only processes irreversible feature identifiers to determine whether a match is successful, and does not store the generated feature identifiers; and after sending the basic identity identifier of the first user, the server automatically clears the basic identity identifier of the first user and does not store it. Furthermore, the basic identity identifier of the first user is uploaded by the first user's terminal simultaneously when sending the feature identifier of the second user.

[0031] By implementing steps S201 to S203, the server obtains the feature identifier sent by the first user terminal. It then matches this feature identifier with all user feature identifiers in a pre-built user registration database to obtain a matching result. If a unique match exists, the server triggers a one-way transmission mechanism to send the first user's basic identity identifier to the second user terminal. Upon receiving and responding to the first user terminal, the first and second user terminals establish an end-to-end social network connection. During this end-to-end connection, the second and first user terminals can unlock their communication levels bi-directionally, allowing information to be released gradually as trust accumulates. Unlocking sensitive information requires a jointly signed blockchain-based electronic contract, ensuring both privacy and efficiency in social connections, achieving a dynamic balance between privacy protection and social needs. Furthermore, direct communication between the second and first user terminals can use real information as the addressing basis, breaking the reliance on virtual identifiers such as phone numbers and IDs. This solves the privacy leakage problem caused by the exposure of virtual identifiers in traditional social searches, improving the security of establishing social network connections.

[0032] In another exemplary embodiment of this application, the method is applied to Figure 1 Taking the first user terminal 101 as an example, the explanation includes the following steps S301 to S303. Wherein: Step S301: Obtain the feature combination information of the second user input by the first user.

[0033] In the example embodiment, the feature combination information includes at least two of the following: venue identification information corresponding to the second user, role attributes, and title fragments. The venue identification is the identification information of the physical location of the second user, such as "XXX Building"; the role attributes are the social role or professional attribute information of the second user, such as "Head of AI Lab"; and the title fragments are partial characters of the second user's surname or commonly used title, such as "Wang".

[0034] Step S302: Generate a dynamic salt value using a privacy engine, and concatenate the feature combination information of the second user with the dynamic salt value to obtain the string to be processed.

[0035] Optionally, a dynamic salt value is generated based on the device fingerprint information stored locally and the current timestamp according to a preset algorithm; the device fingerprint information is the unique identifier of the first user terminal; the lifecycle of the dynamic salt value is consistent with the session period of the current social connection request, and it is automatically destroyed after the session ends.

[0036] Step S303: The SHA3-256 hash algorithm is used to encrypt the string to be processed, and the first preset bit of the calculation result is retained to obtain the feature identifier corresponding to the second user.

[0037] It should be noted that the embodiments of this application use the SHA3-256 hash algorithm to encrypt the string to be processed, and obtain a 256-bit hash value. The first 128 bits of the 256-bit hash value are extracted as the feature identifier.

[0038] In addition, to ensure that the feature combination information of the second user never leaves the first user's terminal and to achieve "zero-knowledge addressing" and minimize the risk of information leakage, the above method also includes: sending a feature identifier to the server and deleting the feature combination information of the second user stored locally.

[0039] It should be noted that when the first user terminal sends the feature identifier to the server, the default format of the feature identifier can be "feature combination information + separator + dynamic salt value field", where the separator is a default non-printable character. Using a device-side privacy circuit breaker mechanism to delete the second user's feature combination information stored locally ensures the security of user privacy.

[0040] Furthermore, after the first user terminal and the second user terminal establish end-to-end communication, the encrypted channel between the first user terminal and the second user terminal is an end-to-end encrypted transmission link established based on the TLS1.3 protocol. The server only acts as a data forwarding node and cannot decrypt the feature identifier.

[0041] In another exemplary embodiment of this application, the method is applied to Figure 1 Taking the second user terminal 102 as an example, the explanation includes the following steps S401 to S403. Wherein: Step S401: Obtain the basic identity identifier of the first user sent by the server, and reply to the first user terminal to establish an end-to-end social network connection with the first user terminal.

[0042] In the example embodiment, after obtaining the basic identity identifier, the second user terminal generates a reception log and stores it locally. The reception log includes the reception time, the hash digest of the sender's feature identifier, and the digest information of the basic identity identifier. The reception log is displayed to the second user via a display, and the second user's input confirmation information is obtained. After obtaining the second user's input confirmation information, the second user terminal replies to the first user terminal, and an end-to-end social network connection is established between the second user terminal and the first user terminal.

[0043] Step S402: Send the contact information of the second user to the first user terminal and unlock the communication level with the first user terminal; the communication level includes normal and encrypted. Step S403: If the contact level is normal, obtain the real characteristic identifier of the first user sent by the first user terminal. The real characteristic identifier includes the full name of the first user, the company name and / or the position of the company. Step S404: If the communication level is encrypted, jointly sign a blockchain-based electronic contract with the first user terminal and obtain the encrypted feature identifier of the first user sent by the first user terminal. The encrypted feature identifier includes the confidential full name, undisclosed department information and / or confidential position.

[0044] like Figure 3 As shown, in step S1, the first user terminal generates a feature identifier and sends it to the server; in step S2, the server searches the pre-built user registration database to see if there is a user feature identifier that matches the feature identifier, and obtains a matching result; in step S3, when the matching result shows that there is a unique match, the server sends the first user's basic identity identifier to the second user terminal; in step S4, the second user terminal receives the first user's basic identity identifier and replies to the first user terminal, and the second user terminal and the first user terminal establish an end-to-end social network connection; in step S5, the second user terminal and the first user terminal exchange contact information and unlock the contact level. If the contact level is ordinary, the social network communication uses the real address format of "full name + company + position"; if the contact level is encrypted, they jointly sign a blockchain-based electronic certificate and use the real address format of "confidential full name + undisclosed department + confidential position" for social network communication.

[0045] This application's embodiments revolutionize social addressing by directly using observable real-world feature identifiers and encrypted feature identifiers as the addressing basis. This breaks through the reliance on virtual identifiers such as phone numbers and IDs, solving the privacy leakage problem caused by the exposure of virtual identifiers in traditional social searches. Secondly, it constructs a more rigorous privacy protection paradigm. Through the privacy circuit breaker mechanism of the first user terminal, it ensures that user information never leaves the user terminal, and the server only processes irreversible feature identifiers, achieving "zero-knowledge addressing" and minimizing the risk of information leakage. Furthermore, it promotes the evolution of social logic by adopting a two-way interactive unlocking mechanism. Information is gradually released as trust accumulates, and unlocking sensitive information requires the joint signing of a blockchain-based electronic contract for evidence storage. This ensures both privacy and security while also considering the efficiency of social connections, achieving a dynamic balance between privacy protection and social needs.

[0046] Based on the same inventive concept, this application also provides a privacy-preserving social connection device for implementing the privacy-preserving social connection method described above. The solution provided by this device is similar to the implementation described in the above method; therefore, the specific limitations in one or more privacy-preserving social connection device embodiments provided below can be found in the limitations of the privacy-preserving social connection method described above, and will not be repeated here.

[0047] In one exemplary embodiment, such as Figure 4 As shown, a privacy-preserving social connection device 400 is provided, comprising: an acquisition module 401, a matching module 402, and a sending module 403, wherein: The acquisition module 401 is used to acquire the feature identifier sent by the first user terminal; the feature identifier is an irreversible identifier generated by the first user terminal based on the feature information of the second user input by the first user; Matching module 402 is used to match the feature identifier with all user feature identifiers in the pre-built user registration database to obtain the matching result; The sending module 403 is used to trigger a one-way transmission mechanism to send the basic identity identifier of the first user to the second user terminal if the matching result is that there is a unique match; the second user terminal receives the basic identity identifier of the first user and replies to the first user terminal, and the first user terminal and the second user terminal establish an end-to-end social network connection.

[0048] As an optional implementation, the matching module 402 is specifically used to traverse the pre-built user registration database and retrieve user feature identifiers that match the feature identifiers in the pre-built user registration database using string equivalence matching; if the match is unsuccessful, an empty response message is returned to the first user terminal; the empty response message does not contain any user information; if the match is successful, there is a unique match, triggering a one-way transmission mechanism to send the basic identity identifier of the first user to the second user terminal; the basic identity identifier of the first user includes the first user's surname and gender information.

[0049] In another exemplary embodiment, a privacy-preserving social connection device is provided, comprising: a second acquisition module, a splicing generation module, and a generation module, wherein: The second acquisition module is used to acquire feature combination information of the second user input by the first user; the feature combination information includes at least any two of the following: venue identification information corresponding to the second user, role attributes, and title fragments; The generation and concatenation module is used to generate a dynamic salt value using the privacy engine, and concatenate the feature combination information of the second user with the dynamic salt value to obtain the string to be processed; The generation module is used to perform encryption calculations on the string to be processed using the SHA3-256 hash algorithm, and retain the first preset bits of the calculation result to obtain the feature identifier corresponding to the second user.

[0050] As an optional implementation, the aforementioned privacy-preserving social connection device further includes a deletion sending module, used to send a feature identifier to the server and delete the feature combination information of the second user stored locally.

[0051] As an optional implementation, the above-mentioned generation and splicing module is specifically used to generate a dynamic salt value based on the device fingerprint information stored locally and the current timestamp according to a preset algorithm; the device fingerprint information is the unique identifier of the first user terminal; the life cycle of the dynamic salt value is consistent with the session cycle of the current social connection request, and it is automatically destroyed after the session ends.

[0052] In yet another exemplary embodiment, a privacy-preserving social connection device is provided, comprising: a third acquisition module and a send unlock module; wherein: The third acquisition module is used to acquire the basic identity identifier of the first user sent by the server and reply to the first user terminal to establish an end-to-end social network connection with the first user terminal; The unlocking module is used to send the contact information of the second user to the first user terminal and unlock the communication level with the first user terminal. The communication level includes normal and encrypted. If the communication level is normal, the module obtains the real characteristic identifier of the first user sent by the first user terminal. The real characteristic identifier includes the first user's full name, company name and / or position in the company. If the communication level is encrypted, the module jointly signs a blockchain-based electronic contract with the first user terminal and obtains the encrypted characteristic identifier of the first user sent by the first user terminal. The encrypted characteristic identifier includes the confidential full name, undisclosed department information and / or confidential position.

[0053] In this implementation, the server obtains the feature identifier sent by the first user terminal and matches it with all user feature identifiers in a pre-built user registration database to obtain a matching result. If a unique match is found, the server triggers a one-way transmission mechanism to send the first user's basic identity identifier to the second user terminal. Upon receiving and responding to the first user terminal, the first and second user terminals establish an end-to-end social network connection. During this end-to-end connection, the second and first user terminals can unlock their communication levels bi-directionally, allowing information to be released gradually as trust accumulates. Unlocking sensitive information requires a jointly signed blockchain-based electronic contract, ensuring both privacy and efficiency in social connections, achieving a dynamic balance between privacy protection and social needs. Furthermore, direct communication between the second and first user terminals can use real information as the addressing basis, breaking the reliance on virtual identifiers such as phone numbers and IDs, solving the privacy leakage problem caused by the exposure of virtual identifiers in traditional social searches, and improving the security of establishing social network connections.

[0054] In one exemplary embodiment, a computer device is provided, which may be a server or a terminal, and its internal structure diagram may be as follows. Figure 5As shown, this computer device includes a processor, memory, input / output (I / O) interfaces, and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is also connected to the system bus via the I / O interfaces. The processor provides computational and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores privacy-preserving social connection data. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communicating with external terminals via a network connection. When the computer program is executed by the processor, it implements a privacy-preserving social connection method.

[0055] Those skilled in the art will understand that Figure 5 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0056] In one exemplary embodiment, a computer device is also provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in the above-described method embodiments.

[0057] In one exemplary embodiment, a computer-readable storage medium is provided storing a computer program that, when executed by a processor, implements the steps in the above-described method embodiments.

[0058] In one exemplary embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above-described method embodiments.

[0059] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0060] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments described above. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM).

[0061] The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, distributed databases based on blockchain. The processors involved in the embodiments provided in this application may be, but are not limited to, general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc.

[0062] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0063] This document uses specific examples to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the methods and core ideas of this application. Furthermore, those skilled in the art will recognize that, based on the ideas of this application, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. A privacy-preserving social connection method, characterized in that, Applied to a server, the privacy-preserving social connection method includes: Obtain the feature identifier sent by the first user terminal; the feature identifier is an irreversible identifier generated by the first user terminal based on the feature information of the second user input by the first user. The feature identifier is matched with all user feature identifiers in the pre-built user registration database to obtain the matching results; If the matching result shows that there is a unique match, a one-way transmission mechanism is triggered to send the basic identity identifier of the first user to the second user terminal; the second user terminal receives the basic identity identifier of the first user and replies to the first user terminal, and the first user terminal and the second user terminal establish an end-to-end social network connection.

2. The privacy-preserving social connection method according to claim 1, characterized in that, The step of matching the feature identifier with all user feature identifiers in a pre-built registration database to obtain the matching result includes: Traverse the pre-built user registration database and use string equivalence matching to retrieve user feature identifiers in the pre-built user registration database that match the feature identifier; If the matching fails, an empty response message is returned to the first user terminal; the empty response message does not contain any user information. If a match is found, a unique match is found, triggering a one-way transmission mechanism to send the basic identity identifier of the first user to the second user terminal; the basic identity identifier of the first user includes the first user's surname and gender information.

3. A privacy-preserving social connection method, characterized in that, Applied to a first user terminal, the privacy-preserving social connection method includes: Obtain feature combination information of the second user input by the first user; the feature combination information includes at least any two of the following: venue identification information corresponding to the second user, role attributes, and title fragments; A dynamic salt value is generated using a privacy engine, and the feature combination information of the second user is concatenated with the dynamic salt value to obtain the string to be processed; The string to be processed is encrypted using the SHA3-256 hash algorithm, and the first preset bit of the calculation result is retained to obtain the feature identifier corresponding to the second user.

4. The privacy-preserving social connection method according to claim 3, characterized in that, After obtaining the feature identifier corresponding to the second user, the method further includes: Send the feature identifier to the server and delete the feature combination information of the second user stored locally.

5. The privacy-preserving social connection method according to claim 1, characterized in that, The method of generating dynamic salt values ​​using a privacy engine includes: The dynamic salt value is generated based on the device fingerprint information stored locally and the current timestamp according to a preset algorithm; the device fingerprint information is the unique identifier of the first user terminal; the lifecycle of the dynamic salt value is consistent with the session cycle of the current social connection request, and it is automatically destroyed after the session ends.

6. A privacy-preserving social connection method, characterized in that, Applied to a second user terminal, the privacy-preserving social connection method includes: Obtain the basic identity identifier of the first user sent by the server, and reply to the first user terminal to establish an end-to-end social network connection with the first user terminal; Send the contact information of the second user to the first user terminal and unlock the communication level with the first user terminal; the communication level includes normal and encrypted. If the contact level is normal, obtain the real-name identifier of the first user sent by the first user terminal. The real-name identifier includes the first user's full name, company name and / or position in the company. If the communication level is encrypted, a blockchain-based electronic contract for evidence storage is jointly signed with the first user terminal to obtain the encrypted feature identifier of the first user sent by the first user terminal. The encrypted feature identifier includes the confidential full name, undisclosed department information, and / or confidential position.

7. A privacy-preserving social connection device, characterized in that, The privacy-preserving social connectivity device includes: The acquisition module is used to acquire the feature identifier sent by the first user terminal; the feature identifier is an irreversible identifier generated by the first user terminal based on the feature information of the second user input by the first user; The matching module is used to match the feature identifier with all user feature identifiers in the pre-built user registration database to obtain the matching result; The sending module is used to trigger a one-way transmission mechanism to send the basic identity identifier of the first user to the second user terminal if the matching result is that there is a unique match; the second user terminal receives the basic identity identifier of the first user and replies to the first user terminal, and the first user terminal and the second user terminal establish an end-to-end social network connection.

8. A computer device, comprising: A memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that the processor executes the computer program to implement the steps of the privacy-preserving social connection method according to any one of claims 1-2, or to implement the steps of the privacy-preserving social connection method according to any one of claims 3-5, or to implement the steps of the privacy-preserving social connection method according to claim 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When executed by a processor, the computer program implements the steps of the privacy-preserving social connection method according to any one of claims 1-2, or the steps of the privacy-preserving social connection method according to any one of claims 3-5, or the steps of the privacy-preserving social connection method according to claim 6.

10. A computer program product, comprising a computer program, characterized in that, When executed by a processor, the computer program implements the steps of the privacy-preserving social connection method according to any one of claims 1-2, or the steps of the privacy-preserving social connection method according to any one of claims 3-5, or the steps of the privacy-preserving social connection method according to claim 6.

Images