Private computing system flow control method and device

Abstract

The invention discloses a privacy computing system flow control method and device, and the method comprises the steps: configuring the network and safety parameters of a second privacy computing platform of a requested mechanism, and initiating a networking application to the second privacy computing platform; after the secure communication is established, loading a flow limiting plug-in which is based on a token bucket algorithm and works in a transmission layer at the gateway, obtaining node uplink flow parameters and downlink flow parameters configured in the local party and the second privacy computing platform, and configuring the flow limiting plug-in based on the minimum value of the uplink flow parameters and the downlink flow parameters of the nodes of the two parties; initiating a multi-party security computing task to a second privacy computing platform, and establishing transmission layer connection; in the communication process of executing the multi-party security computing task, the uplink and downlink directions are respectively subjected to current limiting through a current limiting plug-in. According to the method, the data transmission security in the multi-party security calculation process is ensured, excessive occupation of link resources is avoided, and the utilization rate of a communication line is improved.

Description

Technical Field

[0001] This invention relates to the field of privacy computing technology, and more specifically, to a method and apparatus for traffic control in a privacy computing system. Background Technology

[0002] With increasingly stringent requirements for data security and privacy protection, privacy-preserving computation technology is being widely applied in various industries, including finance, healthcare, government affairs, and energy. By establishing encrypted communication channels among participating parties and achieving joint modeling and analysis based on technologies such as secure multi-party computation, federated learning, or homomorphic encryption, computational tasks can be completed without disclosing the original data of each party.

[0003] In existing privacy computing systems, multiple organizations typically deploy their own privacy computing platforms, and these organizations communicate encrypted over a network to achieve collaborative computing. Because privacy computing involves numerous encryption, decryption, and encrypted data exchange operations, the communication load is significantly increased compared to plaintext computing. To ensure the communication stability of the privacy computing platform under high-concurrency scenarios, current technologies generally employ the purchase of dedicated communication lines to avoid privacy computing impacting network bandwidth consumption or latency on other business systems.

[0004] However, the above methods have significant shortcomings. On the one hand, the procurement and construction cycle of dedicated leased lines is long and costly, which is not conducive to the rapid deployment of privacy computing projects. On the other hand, some privacy computing scenarios have short-term or phased characteristics, resulting in low utilization of leased line resources and wasted communication resources. In addition, existing open-source rate limiting solutions (such as the leaky bucket algorithm based on Nginx) mainly operate at the HTTP protocol layer and can only achieve downlink traffic control, which is insufficient to meet the needs of privacy computing platforms to control uplink and downlink traffic at the TCP / UDP protocol layer simultaneously.

[0005] Therefore, how to effectively control the communication traffic of a privacy computing platform without relying on a dedicated communication line, thereby improving the utilization rate of communication line resources while ensuring data transmission security, has become a technical problem that urgently needs to be solved in this field. Summary of the Invention

[0006] In order to solve at least one of the technical problems in the background art, the present invention proposes a flow control method and apparatus for a privacy computing system.

[0007] In one aspect, the present invention provides a flow control method for a privacy computing system, the method being applied to a first privacy computing platform of a requesting organization, the method comprising:

[0008] Configure the network and security parameters of the second privacy computing platform of the requested organization, and initiate a network application to the second privacy computing platform. After the second privacy computing platform completes the approval and authentication of the network application, the first privacy computing platform and the second privacy computing platform establish key-based secure communication.

[0009] After establishing secure communication, a rate limiting plugin based on the token bucket algorithm and operating at the transport layer is loaded on the gateway. The uplink and downlink traffic parameters of the nodes configured in the first privacy computing platform and the second privacy computing platform are obtained. The rate limiting plugin is configured based on the minimum value of the uplink and downlink traffic parameters of the nodes of both parties.

[0010] Initiate a multi-party secure computation task to the second privacy computing platform and establish a transport layer connection corresponding to the multi-party secure computation task;

[0011] During the communication process of performing the multi-party secure computation task, the uplink and downlink directions are rate-limited respectively through the rate-limiting plugin.

[0012] Optionally, the rate limiting plugin can be configured based on the minimum value of the uplink and downlink traffic parameters of both nodes, including:

[0013] In the distributed cache, corresponding distributed uplink token buckets and distributed downlink token buckets are established according to the peer platform identifier. The distributed uplink token bucket is used to limit the bandwidth in the sending direction, and the distributed downlink token bucket is used to limit the bandwidth in the receiving direction.

[0014] The token generation rate and bucket capacity of the distributed uplink token bucket are set according to the minimum value of the uplink traffic parameters of both nodes; the token generation rate and bucket capacity of the distributed downlink token bucket are set according to the minimum value of the downlink traffic parameters of both nodes.

[0015] Optionally, the step of limiting uplink and downlink rates separately using the rate limiting plugin includes:

[0016] Before sending data to the second privacy computing platform, tokens are deducted based on the distributed uplink token bucket. If there are not enough tokens, queuing or delayed release is performed.

[0017] When receiving data from the second privacy computing platform, tokens are deducted according to the distributed downlink token bucket. If there are not enough tokens, reading or processing of received data is temporarily suspended or delayed. Tokens are replenished according to a preset time granularity. The rate limiting plugin maintains the corresponding distributed uplink token bucket and distributed downlink token bucket according to the peer platform identifier.

[0018] Optionally, initiating a multi-party secure computation task to the second privacy computing platform and establishing a transport layer connection corresponding to the multi-party secure computation task includes:

[0019] A multi-party secure computation task request is generated and initiated, and a connection-oriented transport layer session is established at the same time as the request is initiated. The second privacy computing platform receives and parses the multi-party secure computation task request, authenticates the session request, and establishes a secure communication channel corresponding to the multi-party secure computation task after successful authentication.

[0020] Optionally, the step of generating and initiating a multi-party secure computation task request, and simultaneously establishing a connection-oriented transport layer session, includes:

[0021] A connection is established based on HTTPS SNI technology. During the TLS handshake phase, the target platform identifier is indicated to the second privacy computing platform so that the second privacy computing platform can identify the source of the connection and establish a corresponding secure communication channel.

[0022] Optionally, the privacy computing system traffic control method further includes:

[0023] Upon receiving an adjustment instruction for uplink and / or downlink traffic parameters, the corresponding parameters are updated, and the token generation rate and bucket capacity of the corresponding token bucket are refreshed simultaneously.

[0024] Optionally, the rate limiting plugin specifically controls uplink and downlink traffic at the TCP and / or UDP protocol layer.

[0025] In another aspect, the present invention provides a privacy computing system traffic control device, which is applied to a first privacy computing platform of a requesting organization, the device comprising:

[0026] The parameter configuration and networking unit is used to configure the network and security parameters of the second privacy computing platform of the requested organization and to initiate a networking application to the second privacy computing platform. After the second privacy computing platform completes the approval and authentication of the networking application, the first privacy computing platform and the second privacy computing platform establish a key-based secure communication.

[0027] The rate limiting plugin loading and configuration unit is used to load a rate limiting plugin based on the token bucket algorithm and operating at the transport layer on the gateway after establishing secure communication, obtain the uplink and downlink traffic parameters of the nodes configured in the first privacy computing platform and the second privacy computing platform, and configure the rate limiting plugin based on the minimum value of the uplink and downlink traffic parameters of the nodes of both parties.

[0028] The task connection establishment unit is used to initiate a multi-party secure computing task to the second privacy computing platform and establish a transport layer connection corresponding to the multi-party secure computing task.

[0029] A rate limiting processing unit is used to limit the uplink and downlink rates respectively through the rate limiting plugin during the communication process of executing the multi-party secure computation task.

[0030] To achieve the above objectives, according to another aspect of the present invention, a computer device is also provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the above-described privacy computing system flow control method.

[0031] To achieve the above objectives, according to another aspect of the present invention, a computer-readable storage medium is also provided, on which a computer program / instructions are stored, which, when executed by a processor, implement the steps of the above-described privacy computing system flow control method.

[0032] To achieve the above objectives, according to another aspect of the present invention, a computer program product is also provided, comprising a computer program / instructions that, when executed by a processor, implement the steps of the above-described privacy computing system flow control method.

[0033] The beneficial effects of this invention are as follows:

[0034] This invention establishes key-based secure communication between a first privacy computing platform of the requesting organization and a second privacy computing platform of the requested organization. Rate limiting plugins based on the token bucket algorithm and operating at the transport layer are loaded onto both gateways. These plugins are configured with pre-configured uplink and downlink traffic parameters, effectively constraining the data transmission rate in both directions during communication. This achieves precise control of communication traffic on the privacy computing platforms without relying on dedicated communication lines, ensuring data transmission security during multi-party secure computation while avoiding excessive consumption of link resources and improving the utilization rate of communication lines. Attached Figure Description

[0035] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. In the drawings:

[0036] Figure 1 This is a flowchart of the privacy computing system traffic control method according to an embodiment of the present invention;

[0037] Figure 2 This is a flowchart illustrating the configuration of the rate limiting plugin according to an embodiment of the present invention;

[0038] Figure 3 This is a flowchart illustrating how a rate-limiting plugin limits the uplink and downlink traffic in an embodiment of the present invention.

[0039] Figure 4 This is a schematic diagram of a privacy computing system according to an embodiment of the present invention;

[0040] Figure 5 This is a structural block diagram of the flow control device of the privacy computing system according to an embodiment of the present invention;

[0041] Figure 6 This is a schematic diagram of a computer device according to an embodiment of the present invention. Detailed Implementation

[0042] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0043] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0044] It should be noted that the terms "comprising" and "having" and any variations thereof in the specification, claims and accompanying drawings of this invention are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are explicitly listed, but may include other steps or units that are not explicitly listed or that are inherent to such processes, methods, products or devices.

[0045] It should be noted that, unless otherwise specified, the embodiments and features described in the present invention can be combined with each other. The present invention will now be described in detail with reference to the accompanying drawings and embodiments.

[0046] It should be noted that the information collected in the technical solution of this application is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data all comply with the relevant laws, regulations and standards of the relevant countries and regions, necessary confidentiality measures have been taken, and they do not violate public order and good morals. Corresponding operation portals are provided for users to choose to authorize or refuse.

[0047] It should be noted that the technical solution of this application provides users with corresponding operation entry points for users to choose to agree to or reject the automated decision results; if the user chooses to reject, the process will proceed to the expert decision-making process.

[0048] It should be noted that the privacy computing system flow control method and device of the present invention can be used in the financial field, or in any field other than the financial field. The application field of the privacy computing system flow control method and device of the present invention is not limited.

[0049] This invention provides a traffic control method for a privacy computing system. Figure 4 This is a schematic diagram of a privacy computing system according to an embodiment of the present invention, as shown below. Figure 4 As shown, the privacy computing system of the present invention includes a requesting organization and a requested organization, and both the requesting organization and the requested organization are equipped with privacy computing platforms. The platform in the requesting organization is referred to as the first privacy computing platform, and the platform in the requested organization is referred to as the second privacy computing platform.

[0050] It should be noted that the privacy computing system traffic control method of the present invention is applied to the first privacy computing platform, that is, the execution subject of the privacy computing system traffic control method of the present invention is the first privacy computing platform.

[0051] Figure 1 This is a flowchart of the privacy computing system traffic control method according to an embodiment of the present invention, such as... Figure 1 As shown, in one embodiment of the present invention, the privacy computing system traffic control method of the present invention includes steps S101 to S104.

[0052] Step S101: Configure the network and security parameters of the second privacy computing platform of the requested organization, and initiate a network application to the second privacy computing platform. After the second privacy computing platform completes the approval and authentication of the network application, the first privacy computing platform and the second privacy computing platform establish key-based secure communication.

[0053] In one embodiment of the present invention, before executing a network application, the first privacy computing platform inputs the network connection information and security parameters of the second privacy computing platform into its configuration interface. The network connection information includes the target IP address, port number, communication protocol type, etc., and the security parameters include the encryption key, public key certificate, and authentication credentials. After confirming that the parameters are correct, the first privacy computing platform initiates a network application to the second privacy computing platform, requesting the establishment of a communication channel.

[0054] Upon receiving a network application, the second privacy computing platform verifies the applicant's identity and checks the encryption key and certificate information. After successful authentication, both parties automatically negotiate a key and generate a secure communication channel. This communication channel can be established based on an encrypted transmission protocol to ensure the security of subsequent data interactions and prevent sensitive information from being intercepted or tampered with during communication.

[0055] Step S102: After establishing secure communication, a rate limiting plugin based on the token bucket algorithm and operating at the transport layer is loaded on the gateway. The uplink and downlink traffic parameters of the nodes configured in the local and second privacy computing platforms are obtained, and the rate limiting plugin is configured based on the minimum value of the uplink and downlink traffic parameters of both nodes. Specifically, after establishing secure communication, the second privacy computing platform loads a rate limiting plugin based on the token bucket algorithm on its own gateway, obtains the uplink and downlink traffic parameters of the nodes configured in the local and first privacy computing platforms, and configures the rate limiting plugin based on the minimum value of the uplink and downlink traffic parameters of both nodes.

[0056] In one embodiment of the present invention, the rate limiting plugin is deployed within the gateway module of the privacy computing platform. After loading, the plugin automatically initializes the token bucket based on preset uplink and downlink traffic parameters. The uplink traffic parameters limit the amount of data allowed to be sent to the other platform per unit time, and the downlink traffic parameters limit the amount of data allowed to be received from the other platform per unit time.

[0057] By setting the token generation rate and bucket capacity, the rate limiting plugin can dynamically allocate tokens to communication requests. When data traffic exceeds the set rate, the system will pause data transmission or reception, thereby smoothing network load. Because the rate limiting plugin operates at the transport layer, it can directly process TCP or UDP packets without relying on upper-layer application protocols, making the rate limiting process more accurate and stable. This method effectively prevents one party from consuming a large amount of network resources in a short period of time, ensuring the stability and fairness of multi-party communication.

[0058] In one embodiment of the present invention, the rate limiting plugin specifically controls uplink and downlink traffic at the TCP and / or UDP protocol layer. In this embodiment, the rate limiting plugin is located on the data processing path of the transport layer, performing real-time detection and rate adjustment of TCP data streams or UDP datagrams passing through the gateway. The plugin monitors the packet transmission rate of each connection or session and limits data sending and receiving based on the current state of the token bucket. When the data sending rate exceeds the threshold defined by the uplink traffic parameter, the plugin delays packet sending; when the receiving rate exceeds the threshold defined by the downlink traffic parameter, the plugin suspends data reading or buffers some packets. By directly implementing rate limiting control at the TCP and / or UDP protocol layer, the latency accumulation problem caused by application layer protocol traffic control can be avoided, achieving more accurate and stable bandwidth utilization and communication scheduling.

[0059] Step S103: Initiate a multi-party secure computation task to the second privacy computing platform and establish a transport layer connection corresponding to the multi-party secure computation task.

[0060] In one embodiment of the present invention, when the first privacy computing platform initiates a multi-party secure computing task, it generates a task request message carrying a task identifier, task parameters, and security credentials. The platform establishes a connection-oriented transport layer connection based on an existing secure communication channel to facilitate task-level data interaction.

[0061] Upon receiving a task request, the second privacy-preserving computing platform parses the task identifier and security credentials. After verifying the task's legitimacy, it registers the task on its own platform and prepares the computing environment. Both platforms establish independent communication sessions at the transport layer to carry the input data and computation results of this multi-party secure computing task. This independent transport layer connection ensures that task data is isolated from other communication tasks, preventing data interference and resource contention.

[0062] In one embodiment of the present invention, this step specifically establishes a TCP connection corresponding to the multi-party secure computation task.

[0063] Step S104: During the communication process of executing the multi-party secure computation task, the uplink and downlink directions are rate-limited respectively through the rate-limiting plugin.

[0064] In one embodiment of the present invention, before sending task data, the rate-limiting plugin of the first privacy computing platform determines whether to allow transmission based on the number of available tokens in the uplink token bucket. If the number of tokens is insufficient, data transmission is suspended until new tokens are added before transmission continues. This mechanism can prevent instantaneous high traffic from causing network congestion or overloading the other party's platform.

[0065] When receiving data, the rate limiting plugin controls the reception rate based on the remaining tokens in the downlink token bucket. When the receiving end's processing capacity is insufficient or network bandwidth is limited, the plugin automatically delays data reception to maintain the stability of the communication channel. Because independent token buckets are configured for uplink and downlink, the system can independently control the data according to the data characteristics of different directions, achieving precise bidirectional rate limiting adjustment.

[0066] Through the above methods, the privacy computing platform can flexibly control data traffic, achieve reasonable allocation of network resources, and improve the utilization rate of communication lines while maintaining communication encryption and security throughout the entire multi-party secure computation task execution process.

[0067] like Figure 2 As shown, in one embodiment of the present invention, the configuration of the rate limiting plugin based on the minimum value of the uplink traffic parameters and downlink traffic parameters of both nodes in step S102 includes steps S201 and S202.

[0068] Step S201: Establish corresponding distributed uplink token buckets and distributed downlink token buckets in the distributed cache according to the peer platform identifier, wherein the distributed uplink token bucket is used to limit the bandwidth in the sending direction, and the distributed downlink token bucket is used to limit the bandwidth in the receiving direction.

[0069] In one embodiment of the present invention, after being loaded, the rate limiting plugin first registers the peer platform identifier with the distributed caching system. The system can then create corresponding uplink and downlink token bucket instances in the cache based on the unique identifier information of each peer platform. The distributed cache can be implemented using a distributed storage cluster, enabling multiple gateway nodes to share the same set of token data and ensuring consistency of rate limiting status across different nodes.

[0070] The uplink token bucket is used to constrain the data transmission rate from the first privacy computing platform to the second privacy computing platform, while the downlink token bucket is used to constrain the data reception rate from the second privacy computing platform to the first privacy computing platform. By maintaining an independent token bucket for each peer platform, differentiated rate control can be achieved in multi-peer communication scenarios, preventing the stability of other connections from being affected by excessive traffic in one connection.

[0071] In one embodiment of the present invention, the uplink and downlink token buckets employ a distributed token bucket, which is centrally managed and its state shared through a distributed caching system. After creating a token bucket, each gateway node synchronously stores the current token count, generation rate, and bucket capacity, among other state information, into the distributed cache. This ensures that even if multiple gateway instances simultaneously process communication requests from the same peer platform, tokens can be deducted or replenished from a unified token data source, guaranteeing consistency of the rate limiting state across the entire system. Compared to a single-node local token bucket, the distributed token bucket offers higher reliability and scalability. When the system is deployed across multiple servers or regional nodes, each node can access the distributed cache to obtain real-time token status without independently maintaining local counters, thus avoiding the problem of asynchronous rate limiting strategies between nodes. This structure maintains global consistency in rate limiting logic under multi-task concurrency or high-load scenarios, enabling dynamic rate control across nodes.

[0072] Furthermore, the distributed token bucket also possesses good fault tolerance. When a node or cache shard fails, other nodes can continue to perform token deduction operations based on the remaining cache copies, without interrupting the rate limiting process. Through this distributed management approach, the system can meet the performance requirements of privacy computing platforms for high-concurrency communication while maintaining the accuracy and stability of flow control without increasing dedicated lines or independent bandwidth resources.

[0073] In one embodiment of the present invention, after establishing secure communication, the second privacy computing platform also performs the same operation on its gateway side. The second privacy computing platform establishes corresponding distributed uplink token buckets and distributed downlink token buckets in the distributed cache according to the corresponding first privacy computing platform identifier. In this way, both platforms can independently implement rate limiting control in their respective communication directions, ensuring bidirectional balance and coordination in the data transmission process.

[0074] Step S202: Set the token generation rate and bucket capacity of the distributed uplink token bucket according to the minimum value of the uplink traffic parameters of both nodes; set the token generation rate and bucket capacity of the distributed downlink token bucket according to the minimum value of the downlink traffic parameters of both nodes.

[0075] In one embodiment of the present invention, the rate limiting plugin initializes the corresponding token buckets based on the uplink and downlink traffic parameters provided by the configuration module. The token generation rate controls the amount of data that can be transmitted per unit time, thereby limiting the average transmission rate; the bucket capacity limits the maximum number of tokens that can be accumulated instantaneously to accommodate short-term burst transmission demands. For example, when the uplink traffic parameter is set to 10 MB / s, the token generation rate corresponds to adding tokens equivalent to 10 MB of data per second. If the bucket capacity is set to 20 MB, then a maximum of 20 MB of data burst transmission is allowed within a short period. By simultaneously configuring the token bucket parameters for both uplink and downlink directions, the system can achieve precise rate control of data transmission and reception during task communication, ensuring stable communication and reasonable allocation of network resources.

[0076] In one embodiment of the present invention, the second privacy computing platform also sets parameters for the distributed token bucket it establishes based on the uplink and downlink traffic parameters associated with the first privacy computing platform. The second privacy computing platform determines the token generation rate and bucket capacity according to its own communication direction, so that both platforms are controlled in the sending and receiving directions respectively, thereby forming a complete bidirectional rate limiting mechanism and realizing overall system traffic balance and efficient utilization.

[0077] like Figure 3 As shown, in one embodiment of the present invention, the above step S104, which limits the uplink and downlink directions by means of the rate limiting plugin, includes steps S301 and S302.

[0078] Step S301: Before sending data to the second privacy computing platform, tokens are deducted according to the distributed uplink token bucket. If there are not enough tokens, queuing or delayed release is performed.

[0079] In one embodiment of the present invention, when the first privacy computing platform prepares to send data to the second privacy computing platform, the rate limiting plugin first queries the current number of tokens in the corresponding uplink token bucket. Before each data transmission, the system calculates the required number of tokens based on the size of the data to be transmitted and deducts them from the uplink token bucket. When the number of tokens is sufficient, the data can directly enter the transmission queue; if the number of tokens is insufficient, the plugin will temporarily cache the data in the queue or delay transmission until new tokens are replenished. This token-based deduction control method keeps the uplink transmission rate within a set threshold, effectively preventing link congestion or communication interruption caused by short-term peak traffic. By uniformly managing the token state in a distributed environment, the rate consistency when multiple gateway nodes send data to the same peer platform simultaneously can be guaranteed, thereby improving the overall communication stability and predictability of the system.

[0080] Step S302: When receiving data from the second privacy computing platform, tokens are deducted according to the distributed downlink token bucket. If there are not enough tokens, reading or processing of received data is temporarily suspended or delayed. Tokens are replenished according to a preset time granularity. The rate limiting plugin maintains the corresponding distributed uplink token bucket and distributed downlink token bucket according to the peer platform identifier.

[0081] In one embodiment of the present invention, when the first privacy computing platform receives data from the second privacy computing platform, the rate limiting plugin determines whether to immediately read the data based on the number of tokens in the downlink token bucket. When the number of tokens is sufficient, the data in the receive buffer will be parsed and processed normally; when the number of tokens is insufficient, the system will suspend data reading or delay parsing to avoid buffer overflow or processing blockage at the receiving end due to data arriving too quickly. The token replenishment process is carried out according to a preset time granularity period, such as continuously generating new tokens at millisecond or second intervals to ensure the smoothness of the receiving process. The distributed downlink token bucket and uplink token bucket are independent of each other and are maintained separately by the rate limiting plugin according to the peer platform identifier, thereby enabling independent flow control capabilities in both the sending and receiving directions.

[0082] During communication, the second privacy computing platform also performs the rate limiting operation corresponding to the first privacy computing platform. Based on its configured uplink and downlink token buckets, it controls the sending and receiving rates respectively, so that the two platforms form a collaborative rate limiting mechanism in multi-party secure computing tasks, ensuring stable, secure and efficient data transmission.

[0083] In one embodiment of the present invention, step S103 above, which involves initiating a multi-party secure computation task to the second privacy computing platform and establishing a transport layer connection corresponding to the multi-party secure computation task, includes:

[0084] A multi-party secure computation task request is generated and initiated, and a connection-oriented transport layer session is established at the same time as the request is initiated. The second privacy computing platform receives and parses the multi-party secure computation task request, authenticates the session request, and establishes a secure communication channel corresponding to the multi-party secure computation task after successful authentication.

[0085] In this embodiment, when the first privacy computing platform needs to perform multi-party secure computation, it first generates a task request message based on the task requirements. This message includes a task identifier, data exchange strategy, encryption parameters, and security credentials. After the task request is generated, the platform initiates a communication connection with the second privacy computing platform through the existing network configuration, establishing a transport layer session corresponding to the task. Upon receiving the task request, the second privacy computing platform parses the task identifier and related authentication information, verifying the requester's identity, key validity, and the integrity of communication parameters. After successful authentication, a key-based secure communication channel is established between the two ends for task data transmission and result return. By establishing independent transport layer connections at the task level, data isolation and independent control between tasks can be achieved, avoiding resource conflicts when multiple tasks run concurrently, and improving the security and stability of computation and transmission.

[0086] In one embodiment of the present invention, the steps of generating and initiating a multi-party secure computation task request and simultaneously establishing a connection-oriented transport layer session include:

[0087] A connection is established based on HTTPS SNI technology. During the TLS handshake phase, the target platform identifier is indicated to the second privacy computing platform so that the second privacy computing platform can identify the source of the connection and establish a corresponding secure communication channel.

[0088] In this embodiment, when initiating a multi-party secure computation task, the first privacy computing platform uses the HTTPS protocol for encrypted communication and leverages the SNI (Server Name Indication) extension to transmit the target platform identifier to the second privacy computing platform during the TLS handshake phase. This identifier can be the domain name or logical address of the second privacy computing platform, used to specify the connection target when multiple virtual service nodes exist. Through the SNI mechanism, the second privacy computing platform can identify the connection source and its intent during the handshake phase, thereby loading the corresponding certificate and key information to complete authentication and encrypted channel initialization. This method can complete peer identification and channel establishment without relying on additional signaling interactions, ensuring the security and efficiency of the connection establishment process and providing a stable and reliable transmission foundation for subsequent multi-party secure computation tasks.

[0089] In one embodiment of the present invention, the privacy computing system traffic control method of the present invention further includes:

[0090] Upon receiving an adjustment instruction for uplink and / or downlink traffic parameters, the corresponding parameters are updated, and the token generation rate and bucket capacity of the corresponding token bucket are refreshed simultaneously.

[0091] In one embodiment of the present invention, the privacy computing platform can dynamically adjust uplink and downlink traffic parameters based on changes in network load, task priority, or communication policies during system operation. Upon receiving a parameter adjustment instruction, the rate limiting plugin immediately updates the configuration values ​​for the corresponding direction and recalculates the token generation rate and bucket capacity based on the new parameters. Updating the token generation rate changes the token replenishment rate per unit time to control the average data transmission rate; updating the bucket capacity adjusts the maximum allowed burst traffic within a short period. After the update operation is complete, the rate limiting plugin automatically takes effect in the next token replenishment cycle without interrupting the current transmission session.

[0092] Through this dynamic adjustment mechanism, the system can flexibly allocate bandwidth resources according to the real-time network status while ensuring communication security and stability, thereby achieving higher communication line utilization and task execution efficiency.

[0093] As can be seen from the above embodiments, the solution of the present invention has at least the following beneficial effects:

[0094] 1. Achieving effective control over communication traffic of privacy computing platforms. This invention establishes key-based secure communication between the requesting organization's first privacy computing platform and the requested organization's second privacy computing platform, and loads rate-limiting plugins based on the token bucket algorithm and operating at the transport layer onto both gateways. This allows for rate limiting control in both the uplink and downlink directions of the communication process, keeping the data transmission rate within a controllable range. Thus, precise management of platform communication traffic is achieved without relying on a dedicated communication line.

[0095] 2. Ensuring data transmission security and communication stability. During the execution of multi-party secure computation tasks, communication between platforms is completed through secure channels established through authentication. Data is protected by both encryption and rate control at the transport layer. The rate limiting plugin can automatically implement queuing or delayed transmission when tokens are insufficient, avoiding link congestion caused by sudden high traffic and improving the stability and reliability of the communication process.

[0096] 3. Achieve bidirectional, distributed traffic coordination control. This invention employs a distributed token bucket structure, maintaining uplink and downlink token buckets in a distributed cache according to the peer platform identifier, enabling synchronization and sharing of token states among multiple nodes. Regardless of whether the system operates in a single-node or multi-node environment, it maintains consistency in the rate limiting strategy and supports unified rate control in concurrent communication scenarios.

[0097] 4. It possesses dynamic parameter adjustment capabilities and excellent resource utilization. When the network environment or task load changes, the system can dynamically adjust uplink and downlink traffic parameters according to instructions, and refresh the token generation rate and bucket capacity in real time, taking effect automatically without interrupting existing connections. This mechanism enables the rate limiting policy to adapt to changes in network conditions, improving bandwidth resource utilization while ensuring communication security.

[0098] 5. Simple structure and strong scalability. This invention's solution uses gateway-level rate limiting as its core, without altering the core computing logic of the privacy computing platform or relying on external hardware or dedicated lines. The plug-in deployment method facilitates rapid integration into existing systems and can be horizontally scaled according to the number of nodes and business scale to meet the traffic control needs of different privacy computing scenarios.

[0099] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0100] Based on the same inventive concept, embodiments of the present invention also provide a privacy computing system flow control device, which can be used to implement the privacy computing system flow control method described in the above embodiments, as described in the following embodiments. Since the principle of the privacy computing system flow control device in solving the problem is similar to that of the privacy computing system flow control method, embodiments of the privacy computing system flow control device can refer to embodiments of the privacy computing system flow control method, and repeated details will not be elaborated further. As used below, the terms "unit" or "module" can refer to a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated.

[0101] It should be noted that the privacy computing system flow control device of the present invention is applied to the first privacy computing platform of the requesting organization.

[0102] Figure 5 This is a structural block diagram of the flow control device of the privacy computing system according to an embodiment of the present invention, as shown below. Figure 5 As shown, in one embodiment of the present invention, the privacy computing system traffic control device of the present invention includes:

[0103] The parameter configuration and networking unit 1 is used to configure the network and security parameters of the second privacy computing platform of the requested organization and to initiate a networking application to the second privacy computing platform. After the second privacy computing platform completes the approval and authentication of the networking application, the first privacy computing platform and the second privacy computing platform establish a key-based secure communication.

[0104] The rate limiting plugin loading and configuration unit 2 is used to load a rate limiting plugin based on the token bucket algorithm and operating at the transport layer on the gateway after establishing secure communication, obtain the uplink and downlink traffic parameters of the nodes configured in the first privacy computing platform and the second privacy computing platform, and configure the rate limiting plugin based on the minimum value of the uplink and downlink traffic parameters of the nodes of both parties.

[0105] The task connection establishment unit 3 is used to initiate a multi-party secure computing task to the second privacy computing platform and establish a transport layer connection corresponding to the multi-party secure computing task.

[0106] The rate limiting processing unit 4 is used to limit the uplink and downlink rates respectively through the rate limiting plugin during the communication process of executing the multi-party secure computation task.

[0107] In one embodiment of the present invention, the rate limiting plugin loading and configuration unit 2 includes:

[0108] The token bucket establishment module is used to establish corresponding distributed uplink token buckets and distributed downlink token buckets in the distributed cache according to the peer platform identifier. The distributed uplink token bucket is used to limit the bandwidth in the sending direction, and the distributed downlink token bucket is used to limit the bandwidth in the receiving direction.

[0109] The token bucket setting module is used to set the token generation rate and bucket capacity of the distributed uplink token bucket based on the minimum value of the uplink traffic parameters of both nodes; and to set the token generation rate and bucket capacity of the distributed downlink token bucket based on the minimum value of the downlink traffic parameters of both nodes.

[0110] In one embodiment of the present invention, the current limiting processing unit 4 includes:

[0111] The uplink rate limiting module is used to deduct tokens based on the distributed uplink token bucket before sending data to the second privacy computing platform. If there are not enough tokens, queuing or delayed release will be performed.

[0112] The downlink rate limiting module is used to deduct tokens based on the distributed downlink token bucket when receiving data from the second privacy computing platform. If there are not enough tokens, reading or processing of received data will be temporarily suspended or delayed. Tokens are replenished according to a preset time granularity. The rate limiting plugin maintains the corresponding distributed uplink token bucket and distributed downlink token bucket according to the peer platform identifier.

[0113] In one embodiment of the present invention, the task connection establishment unit 3 includes:

[0114] The task request initiation module is used to generate and initiate a multi-party secure computation task request, and establish a connection-oriented transport layer session at the same time as initiating the request. The second privacy computing platform receives and parses the multi-party secure computation task request, authenticates the session request, and establishes a secure communication channel corresponding to the multi-party secure computation task after successful authentication.

[0115] In one embodiment of the present invention, the task request initiation module includes:

[0116] The connection creation submodule is used to create a connection based on HTTPS SNI technology. During the TLS handshake phase, it indicates the target platform identifier to the second privacy computing platform so that the second privacy computing platform can identify the connection source and establish a corresponding secure communication channel.

[0117] In one embodiment of the present invention, the privacy computing system traffic control device of the present invention further includes:

[0118] The dynamic adjustment unit is used to update the corresponding parameters when it receives adjustment instructions for uplink traffic parameters and / or downlink traffic parameters, and at the same time refresh the token generation rate and bucket capacity of the corresponding token bucket.

[0119] To achieve the above objectives, according to another aspect of this application, a computer device is also provided. For example... Figure 6 As shown, the computer device includes a memory, a processor, a communication interface, and a communication bus. The memory stores a computer program that can run on the processor. When the processor executes the computer program, it implements the steps in the method of the above embodiments.

[0120] The processor can be a central processing unit (CPU). The processor can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or combinations of the above types of chips.

[0121] Memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs, non-transitory computer-executable programs, and units, such as the program units corresponding to the above-described method embodiments of the present invention. The processor executes various functional applications and data processing of the processor by running the non-transitory software programs, instructions, and modules stored in the memory, thereby implementing the methods described in the above-described method embodiments.

[0122] The memory may include a program storage area and a data storage area. The program storage area may store the operating system and applications required for at least one function; the data storage area may store data created by the processor, etc. Furthermore, the memory may include high-speed random access memory and non-transitory memory, such as at least one disk storage device, flash memory device, or other non-transitory solid-state storage device. In some embodiments, the memory may optionally include memory remotely located relative to the processor, which can be connected to the processor via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0123] The one or more units are stored in the memory and, when executed by the processor, perform the methods described in the above embodiments.

[0124] The specific details of the aforementioned computer equipment can be understood by referring to the relevant descriptions and effects in the above embodiments, and will not be repeated here.

[0125] To achieve the above objectives, according to another aspect of this application, a computer-readable storage medium is also provided, which stores a computer program that, when executed in a computer processor, implements the steps in the above-described privacy computing system flow control method. Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. The storage medium can be a magnetic disk, optical disk, read-only memory (ROM), random access memory (RAM), flash memory, hard disk drive (HDD), or solid-state drive (SSD), etc.; the storage medium may also include combinations of the above types of memory.

[0126] To achieve the above objectives, according to another aspect of this application, a computer program product is also provided, including a computer program / instructions that, when executed by a processor, implement the steps of the above-described privacy computing system flow control method.

[0127] Obviously, those skilled in the art will understand that the modules or steps of the present invention described above can be implemented using general-purpose computing devices. They can be centralized on a single computing device or distributed across a network of multiple computing devices. Optionally, they can be implemented using computer-executable program code, thereby storing them in a storage device for execution by a computing device, or fabricating them separately as individual integrated circuit modules, or fabricating multiple modules or steps as a single integrated circuit module. Thus, the present invention is not limited to any particular hardware and software combination.

[0128] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A flow control method for a privacy computing system, characterized in that, The method is applied to a requesting organization's first privacy computing platform, and the method includes: Configure the network and security parameters of the second privacy computing platform of the requested organization, and initiate a network application to the second privacy computing platform. After the second privacy computing platform completes the approval and authentication of the network application, the first privacy computing platform and the second privacy computing platform establish a key-based secure communication. After establishing secure communication, a rate limiting plugin based on the token bucket algorithm and operating at the transport layer is loaded on the gateway. The uplink and downlink traffic parameters of the nodes configured in the first privacy computing platform and the second privacy computing platform are obtained. The rate limiting plugin is configured based on the minimum value of the uplink and downlink traffic parameters of the nodes of both parties. Initiate a multi-party secure computation task to the second privacy computing platform and establish a transport layer connection corresponding to the multi-party secure computation task; During the communication process of performing the multi-party secure computation task, the uplink and downlink directions are rate-limited respectively through the rate-limiting plugin.

2. The privacy computing system traffic control method according to claim 1, characterized in that, The rate limiting plugin is configured based on the minimum value of the uplink and downlink traffic parameters of both nodes, including: In the distributed cache, corresponding distributed uplink token buckets and distributed downlink token buckets are established according to the peer platform identifier. The distributed uplink token bucket is used to limit the bandwidth in the sending direction, and the distributed downlink token bucket is used to limit the bandwidth in the receiving direction. The token generation rate and bucket capacity of the distributed uplink token bucket are set according to the minimum value of the uplink traffic parameters of both nodes; the token generation rate and bucket capacity of the distributed downlink token bucket are set according to the minimum value of the downlink traffic parameters of both nodes.

3. The privacy computing system traffic control method according to claim 1 or 2, characterized in that, The process of limiting uplink and downlink traffic using the aforementioned rate limiting plugin includes: Before sending data to the second privacy computing platform, tokens are deducted based on the distributed uplink token bucket. If there are not enough tokens, queuing or delayed release is performed. When receiving data from the second privacy computing platform, tokens are deducted according to the distributed downlink token bucket. If there are not enough tokens, reading or processing of received data is temporarily suspended or delayed. Tokens are replenished according to a preset time granularity. The rate limiting plugin maintains the corresponding distributed uplink token bucket and distributed downlink token bucket according to the peer platform identifier.

4. The privacy computing system traffic control method according to claim 1, characterized in that, The step of initiating a multi-party secure computation task to the second privacy computing platform and establishing a transport layer connection corresponding to the multi-party secure computation task includes: A multi-party secure computation task request is generated and initiated, and a connection-oriented transport layer session is established at the same time as the request is initiated. The second privacy computing platform receives and parses the multi-party secure computation task request, authenticates the session request, and establishes a secure communication channel corresponding to the multi-party secure computation task after successful authentication.

5. The privacy computing system traffic control method according to claim 4, characterized in that, The process of generating and initiating a multi-party secure computation task request, and simultaneously establishing a connection-oriented transport layer session, includes: A connection is established based on HTTPS SNI technology. During the TLS handshake phase, the target platform identifier is indicated to the second privacy computing platform so that the second privacy computing platform can identify the source of the connection and establish a corresponding secure communication channel.

6. The privacy computing system traffic control method according to claim 1, characterized in that, Also includes: Upon receiving an adjustment instruction for uplink and / or downlink traffic parameters, the corresponding parameters are updated, and the token generation rate and bucket capacity of the corresponding token bucket are refreshed simultaneously.

7. The privacy computing system traffic control method according to claim 1, characterized in that, The rate limiting plugin specifically controls uplink and downlink traffic at the TCP and / or UDP protocol layers.

8. A flow control device for a privacy computing system, characterized in that, The apparatus is used in a first privacy computing platform of a requesting organization, and the apparatus includes: The parameter configuration and networking unit is used to configure the network and security parameters of the second privacy computing platform of the requested organization and to initiate a networking application to the second privacy computing platform. After the second privacy computing platform completes the approval and authentication of the networking application, the first privacy computing platform and the second privacy computing platform establish a key-based secure communication. The rate limiting plugin loading and configuration unit is used to load a rate limiting plugin based on the token bucket algorithm and operating at the transport layer on the gateway after establishing secure communication, obtain the uplink and downlink traffic parameters of the nodes configured in the first privacy computing platform and the second privacy computing platform, and configure the rate limiting plugin based on the minimum value of the uplink and downlink traffic parameters of the nodes of both parties. The task connection establishment unit is used to initiate a multi-party secure computing task to the second privacy computing platform and establish a transport layer connection corresponding to the multi-party secure computing task. A rate limiting processing unit is used to limit the uplink and downlink rates respectively through the rate limiting plugin during the communication process of executing the multi-party secure computation task.

9. A computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program / instructions stored thereon, characterized in that, When the computer program / instructions are executed by the processor, they implement the steps of the method according to any one of claims 1 to 7.

11. A computer program product, comprising a computer program / instructions, characterized in that, When the computer program / instructions are executed by the processor, they implement the steps of the method according to any one of claims 1 to 7.

Images