Data processing method, system, electronic device, storage medium and program product

Abstract

This application provides a data processing method, system, electronic device, storage medium, and program product, relating to the field of artificial intelligence technology. The method includes: receiving a data processing request sent by a client, the data processing request including first encrypted data and first prompt information. The first encrypted data is obtained by encrypting plaintext data input by a user, and the first prompt information is used to indicate the data decryption parameters of the first encrypted data; invoking a pre-trained data processing model to generate a decryption method for the first encrypted data based on the first prompt information; and sending response data to the client, the response data including encrypted processing result, the response data being used to enable the client to obtain the plaintext processing result of the encrypted processing result and display the plaintext processing result. The technical solution of this application improves the security of user data.

Description

Technical Field

[0001] This application relates to the field of artificial intelligence technology, and in particular to a data processing method, system, electronic device, storage medium, and program product. Background Technology

[0002] With the continuous development of artificial intelligence, intelligent dialogue systems based on large models have been widely used in many fields, such as healthcare, finance, and law. Currently, after a user inputs a question into an intelligent dialogue system, the question is transmitted to the large model in plaintext, which may lead to the leakage of the user's private data. Summary of the Invention

[0003] This application provides a data processing method, system, electronic device, computer-readable storage medium, and computer program product to alleviate or solve one or more technical problems existing in the prior art.

[0004] In a first aspect, embodiments of this application provide a data processing method, including:

[0005] The system receives a data processing request sent by a client. The data processing request includes a first encrypted data and a first prompt message. The first encrypted data is obtained by the client encrypting the plaintext data to be processed input by the user. The first prompt message is used to indicate the decryption method of the first encrypted data.

[0006] Invoke the pre-trained data processing model to generate the ciphertext of the first data ciphertext based on the first prompt information;

[0007] The system sends response data to the client, the response data including the ciphertext of the processing result, the response data being used to enable the client to obtain the plaintext of the processing result from the ciphertext of the processing result and to display the plaintext of the processing result.

[0008] Secondly, embodiments of this application provide a method for training a data processing model, including:

[0009] Multiple training samples are obtained, and each training sample includes a second encrypted data and a second hint information. The second hint information is used to indicate the decryption method of the second encrypted data.

[0010] The network to be trained is trained using the multiple training samples to obtain a data processing model, which is used in the data processing method provided in the first aspect above.

[0011] Thirdly, embodiments of this application provide a data processing method, including:

[0012] In response to the plaintext data to be processed input by the user, the plaintext data is encrypted using data encryption parameters to obtain the first ciphertext data;

[0013] Based on the first prompt information and the first encrypted data, a data processing request is sent to the server. The first prompt information is used to prompt the decryption method of the first encrypted data. The data processing request is used to request the server to call the data processing model and generate the processing result ciphertext of the first encrypted data based on the first prompt information.

[0014] The plaintext processing result is obtained based on the response data sent by the server, and the plaintext processing result is displayed.

[0015] Fourthly, embodiments of this application provide a data processing system, including:

[0016] The client is configured to respond to plaintext data input by the user, encrypt the plaintext data using data encryption parameters to obtain first ciphertext data; send a data processing request to the server based on a first prompt message and the first ciphertext data, wherein the first prompt message is used to indicate the decryption method of the first ciphertext data; obtain the processing result plaintext based on the response data sent by the server, and display the processing result plaintext data.

[0017] The server is configured to receive the data processing request; invoke a pre-trained data processing model to generate a ciphertext of the processing result of the first data ciphertext based on the first prompt information; and send response data to the client, the response data including the ciphertext of the processing result.

[0018] Fifthly, embodiments of this application provide an electronic device, including a memory, a processor, and a computer program stored in the memory, wherein the processor implements any of the methods of embodiments of this application when executing the computer program.

[0019] Sixthly, embodiments of this application provide a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the method of any one of the embodiments of this application.

[0020] In a seventh aspect, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the method of any one of the embodiments of this application.

[0021] In the data processing method provided in this application embodiment, the data processing request sent by the client includes a first prompt message and a first ciphertext obtained by encrypting the plaintext data to be processed input by the user. Upon receiving the data processing request, the client calls the data processing model to generate a ciphertext of the processing result based on the first prompt message, and sends response data including the ciphertext of the processing result to the client, so that the client can obtain the plaintext of the processing result. Therefore, the user-input data and processing result are always transmitted between the client and the data processing model in ciphertext form, thus reducing the risk of user data leakage and improving user privacy security.

[0022] The above description is only an overview of the technical solution of this application. In order to better understand the technical means of this application, it can be implemented according to the contents of the specification. In order to make the above and other objects, features and advantages of this application more obvious and understandable, specific embodiments of this application are given below. Attached Figure Description

[0023] In the accompanying drawings, unless otherwise specified, the same reference numerals throughout the various drawings denote the same or similar parts or elements. These drawings are not necessarily drawn to scale. It should be understood that these drawings depict only some embodiments according to this application and should not be construed as limiting the scope of this application.

[0024] Figure 1 This illustration shows an application scenario diagram of the data processing method provided in the embodiments of this application;

[0025] Figure 2 A first flowchart of the data processing method provided in an embodiment of this application is shown;

[0026] Figure 3 A second flowchart of the data processing method provided in an embodiment of this application is shown;

[0027] Figure 4 A schematic diagram of the data processing method provided in an embodiment of this application is shown;

[0028] Figure 5 A flowchart illustrating the training method of the data processing model provided in an embodiment of this application is shown;

[0029] Figure 6 A third flowchart of the data processing method provided in the embodiments of this application is shown;

[0030] Figure 7 A schematic diagram of the composition of the data processing system provided in an embodiment of this application is shown;

[0031] Figure 8 A block diagram of an electronic device provided in an embodiment of this application is shown. Detailed Implementation

[0032] In the following description, only certain exemplary embodiments are briefly described. As those skilled in the art will recognize, the described embodiments can be modified in various ways without departing from the concept or scope of this application. Therefore, the drawings and description are considered to be exemplary in nature and not restrictive.

[0033] To facilitate understanding of the technical solutions of the embodiments of this application, the relevant technologies of the embodiments of this application are described below. The following relevant technologies are optional solutions and can be combined with the technical solutions of the embodiments of this application in any way, and all of them fall within the protection scope of the embodiments of this application.

[0034] The following terms will be used in the following text:

[0035] Large Language Models (LLMs) are machine learning models with a large number of parameters and complex computational structures. They are usually built from deep neural networks and have billions or even hundreds of billions of parameters. These models are trained on massive amounts of data and can learn complex patterns and features, exhibiting strong generalization ability and versatility.

[0036] Encryption: The process of converting plaintext data into ciphertext data, making the information incomprehensible to unauthorized users.

[0037] Decryption: The process of converting ciphertext data into plaintext data, which can only be performed by authorized users.

[0038] Intelligent dialogue systems based on large models suffer from insufficient protection of user privacy data. This is because user input data and processing results are transmitted in plaintext between the user and the large model, making user data vulnerable to leakage. Several encryption mechanisms exist, including end-to-end encryption, homomorphic encryption, federated learning, Secure Multi-Party Computation (MPC), and Differential Privacy. However, end-to-end encryption only protects data during transmission; since the server needs to decrypt the data before it is input into the model, potential security risks remain. While homomorphic encryption allows computation on ciphertext data, achieving end-to-end encryption, its high computational complexity and performance overhead make it difficult to support the real-time processing needs of large models. Furthermore, its implementation is complex and difficult to integrate seamlessly with existing large models. Federated learning is primarily used in model training, allowing distributed model training while protecting the privacy of the original data. However, it cannot directly protect real-time dialogue content, and in practical applications, additional protection mechanisms are still needed to safeguard user data and model response data. Secure multi-party computation (SMPC) allows multiple parties to compute collaboratively without revealing their private data, but it incurs high communication overhead and is difficult to scale to complex large models. Furthermore, SMPC is mainly applied to specific computational tasks and is ill-suited for general large-scale model scenarios. Differential privacy mechanisms protect individual privacy by adding noise, primarily used for privacy protection in datasets and model training. They are difficult to apply directly to real-time intelligent dialogue systems, and adding noise may affect the accuracy of large models.

[0039] Based on this, embodiments of this application provide a data processing method, electronic device, storage medium, and program product to enhance the security of user privacy data. Figure 1 This is a schematic diagram of a data processing method provided in an embodiment of this application, such as... Figure 1 As shown, this scenario can include: client and server.

[0040] The client can be a mobile phone, tablet computer, desktop computer, laptop, smart wearable device, vehicle terminal, or other terminal device. Figure 1 The example shown is a desktop computer. The client can have a data processing application installed. This application can be a standalone application (App), a small program embedded in other applications, or a web application, etc.

[0041] The client can also be equipped with a display screen. This display screen is configured to show the user interface (UI) of the data processing application and provide an interface for interaction and information exchange between the data processing application and the user. The UI involved in this embodiment can be configured as a medium interface for user operation and interaction with the data processing application. As an interaction interface with the user, the UI can convert the computer language of the data processing application into a form that the user can accept and recognize, including displayed images, text, buttons, etc. A common form of UI is a graphical user interface (GUI), which refers to a user interface related to computer operation displayed graphically. It can be an icon, window, control, or other interface element displayed on the client's screen. Controls can include visual interface elements such as icons, buttons, menus, tabs, and text boxes. The control can be implemented as a visual functional interface of the data processing application. When the control receives a corresponding trigger operation from the user, the corresponding functional interface of the data processing application receives the corresponding processing instruction, thereby enabling the data processing application to respond to the processing instruction and perform functional processing. For example, each user action (such as clicking, double-clicking, editing, etc.) inputs corresponding instructions to the data processing application through the corresponding GUI controls, thereby triggering the data processing application to perform relevant processing and update the GUI based on the processed results.

[0042] The server can be a physical server or a cloud server that performs cloud computing. Figure 1 The following example uses a physical server for illustration. The server can maintain a data processing strategy. This strategy instructs the invocation of a pre-trained data processing model upon receiving a data processing request from a client. Based on the first prompt information in the data processing request, the model generates a ciphertext of the processing result from the first ciphertext in the request and sends response data to the client, allowing the client to obtain the plaintext of the processing result. The first ciphertext is obtained by encrypting the plaintext data input by the user. The large model can be deployed on the server or on other devices.

[0043] The client and server communicate via a network, which can be a wired or wireless network. The client and server can communicate based on a security protocol; for example, the security protocol is TLS (Transport Layer Security).

[0044] As can be seen, the user input data and processing results are always transmitted between the client and the data processing model in encrypted form, thus reducing the risk of user data leakage and improving the security of user privacy data.

[0045] It should be noted that the application scenarios or examples provided in the embodiments of this application are for ease of understanding, and the embodiments of this application do not specifically limit the application of the technical solutions. In addition, the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of related data must comply with the relevant laws, regulations and standards of relevant countries and regions, and corresponding operation entry points are provided for users to choose to authorize or refuse.

[0046] The technical solution of this application and how it solves the aforementioned technical problems are described in detail below with specific embodiments. The listed specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will be described in detail below with reference to the accompanying drawings.

[0047] Figure 2 A flowchart of a data processing method according to an embodiment of this application is shown. Figure 2 The method shown can be used by Figure 1 Server-side execution, such as Figure 2 As shown, the method may include steps S101 to S103.

[0048] Step S101: Receive a data processing request sent by the client. The data processing request includes a first encrypted data and a first prompt message. The first encrypted data is obtained by the client encrypting the plaintext data to be processed input by the user. The first prompt message is used to prompt the decryption method of the first encrypted data.

[0049] Step S102: Call the pre-trained data processing model to generate the processing result ciphertext of the first data ciphertext based on the first prompt information.

[0050] Step S103: Send response data to the client. The response data includes the ciphertext of the processing result. The response data is used to enable the client to obtain the plaintext of the processing result from the ciphertext of the processing result and to display the plaintext of the processing result.

[0051] Specifically, when a user has data to process, they can input plaintext data into the data processing application on their client and operate the send control. The client responds to the user's operation on the send control by obtaining the plaintext data input; encrypting the plaintext data using data encryption parameters to obtain first ciphertext data; and sending a data processing request to the server based on a first prompt message and the first ciphertext data; wherein the first prompt message indicates the decryption method for the first ciphertext data. Upon receiving the data processing request from the client, the server inputs the first ciphertext data and the first prompt message into a pre-trained data processing model, obtains the ciphertext data of the first ciphertext data processed by the data processing model, and sends response data including the ciphertext data processing result to the client.

[0052] In some implementations, the data processing system, including both client and server components, can be an intelligent dialogue system. Accordingly, the plaintext data can be any data from any field, such as image data, audio and video data in the multimedia field, image data and text data in the medical field, image data and text data in the legal field, and chart data and account data in the financial field. This application does not specifically limit the specific data type and content of the plaintext data. Furthermore, it should be noted that the data processing method provided in this application is not limited to intelligent dialogue scenarios; it can be applied to any scenario with data processing needs.

[0053] Data encryption parameters may include at least one of the following: data encryption algorithm, data encryption key, and data encryption mode. The data encryption algorithm can be any existing algorithm suitable for the artificial intelligence model. For example, the data encryption algorithm can be AES (Advanced Encryption Standard), DES (Data Encryption Standard), Message Digest Algorithm Version 5, RSA (Rivest-Shamir-Adleman) digital signature, etc. The encryption algorithm can also be an encryption rule pre-negotiated between the client and the server. For example, the encryption algorithm is a substitution rule, such as replacing "A" with "Z", "B" with "Y", and so on, until "Z" is replaced with "A", etc.

[0054] The data processing model can be a large-scale model or a model of ordinary scale, and this application does not make any specific restrictions on this.

[0055] In the data processing method provided in this application, the data processing request sent by the client includes a first prompt message and a first ciphertext obtained by encrypting the plaintext data to be processed input by the user. Upon receiving the data processing request, the client calls the data processing model to generate a ciphertext of the processing result based on the first prompt message, and sends response data including the ciphertext of the processing result to the client, so that the client can obtain the plaintext of the processing result. Therefore, the user-input data and processing result are always transmitted between the client and the data processing model in ciphertext form, thus reducing the risk of user data leakage and improving user privacy security.

[0056] In some implementations, such as Figure 3 As shown, step S102 may include steps S1021 to S1023:

[0057] Step S1021: Call the pre-trained data processing model and use the data decryption parameters corresponding to the decryption method to decrypt the first data ciphertext to obtain the data plaintext.

[0058] Specifically, such as Figure 4 As shown, the server calls the pre-trained data processing model, inputs the first encrypted data and the first prompt information into the data processing model, determines the data decryption parameters based on the first prompt information, and decrypts the first encrypted data according to the data decryption parameters to obtain the plaintext data.

[0059] In other words, before decrypting the first ciphertext using the data decryption parameters to obtain the plaintext, the process may include: determining the data decryption parameters based on the first prompt information.

[0060] To prevent the leakage of user's plaintext data due to the leakage of data decryption parameters during the data processing request process from the client to the data processing model, in some implementations, the first prompt information may include the security attribute information of the plaintext data. Accordingly, the above-mentioned determination of the data decryption parameter based on the first prompt information may include: obtaining the target decryption parameter corresponding to the security attribute information of the plaintext data from the preset first correspondence between security attribute information and decryption parameters, and determining the target decryption parameter as the data decryption parameter of the first encrypted data.

[0061] Specifically, a first correspondence between security attribute information and data decryption parameters can be pre-defined and saved to the server or data processing model. A third correspondence between security attribute information and data encryption parameters can also be pre-defined and saved to the client. For example... Figure 4As shown, after receiving plaintext data input by the user, the client determines the security attribute information of the plaintext data; it retrieves the data encryption parameters corresponding to the security attribute information of the plaintext data from the third correspondence, and uses these data encryption parameters to encrypt the plaintext data to obtain the first plaintext data; it generates a first prompt message including the security level information of the plaintext data, and sends a data processing request to the server based on the first prompt message and the first ciphertext data. Correspondingly, after the server invokes the data processing model based on the data processing request, it retrieves the target data decryption parameters corresponding to the security attribute information of the plaintext data from the first correspondence through the data processing request, and uses the target data decryption parameters to decrypt the first ciphertext data to obtain the plaintext data.

[0062] In some implementations, the security attribute information of the plaintext data can be a security level parameter of the plaintext data, such as level one, level two, level three, etc. Correspondingly, the above-mentioned method of obtaining the target decryption parameter corresponding to the security attribute information of the plaintext data from the preset first correspondence between security attribute information and decryption parameters may include: comparing the security level parameter of the plaintext data with at least one security attribute information in the first correspondence, and determining the decryption parameter corresponding to the security level parameter that matches the comparison as the target decryption parameter.

[0063] When a user inputs plaintext data into the client, they can specify the security level parameter for the plaintext data. If the user does not specify the security level parameter for the plaintext data, the client will set the preset security level parameter as the security level parameter for the plaintext data.

[0064] In other embodiments, the security attribute information of the plaintext data can be a key parameter association index, which represents the association between the data encryption parameters and data decryption parameters of the plaintext data. Correspondingly, the above-mentioned method of obtaining the target decryption parameter corresponding to the security attribute information of the plaintext data from the preset first correspondence between security attribute information and decryption parameters may include: comparing the key parameter association index with at least one key parameter association index in the first correspondence, and determining the decryption parameter corresponding to the key parameter association index that matches the comparison as the target decryption parameter.

[0065] When the client receives plaintext data input by the user, it can randomly select a key parameter association index from the third correspondence between key parameter association indices and encryption parameters as the key parameter association index for the plaintext data, or it can select a key parameter association index according to a preset selection strategy. For example, the preset selection strategy can be to determine the key parameter association index corresponding to the usage marker in the third correspondence, where the usage marker was added during the previous encryption of the plaintext data, and the encryption parameter corresponding to the usage marker is the data encryption parameter used in the previous encryption; if the key parameter association index corresponding to the usage marker is not the last key parameter association index in the third correspondence, the next key parameter association index corresponding to the usage marker is determined as the key parameter association index for the current plaintext data; if the key parameter association index corresponding to the usage marker is the last key parameter association index in the third correspondence, the first key parameter association index in the third correspondence is determined as the key parameter association index for the current plaintext data. The preset selection strategy can be set as needed in practical applications, and this application does not specifically limit it. Alternatively, before sending a data processing request to the server, the client can send a parameter negotiation request to the server and determine the key parameter association index indicated by the negotiation response data sent by the server as the key parameter association index of the data plaintext.

[0066] It should be noted that when the first prompt message contains security attribute information of the plaintext data, the encryption method corresponding to the first ciphertext data can be symmetric encryption (i.e., the data encryption parameters are the same as the data decryption parameters), asymmetric encryption (i.e., the data encryption parameters are different from the data decryption parameters), or a preset encryption rule.

[0067] For example, the data decryption parameters include a preset replacement rule, that is, replacing "A" with "Z", "B" with "Y", and so on, until "Z" is replaced with "A", correspondingly:

[0068] The plaintext data entered by the user is PLEASE INTRODUCE HANGZHOU IN 20WORDS.

[0069] The first data ciphertext is KOVZHV RMGILWFXV SZMTZASLF RM 20DLIWH.

[0070] The processing result in plaintext is:

[0071] HERE IS A BRIEF INTRODUCTION OF HANGZHOU IN 20WORDS:HANGZHOU, CAPITAL OF ZHEJIANG PROVINCE,IS A BEAUTIFUL CITY KNOWN FOR ITS WEST LAK E, GREEN TEA, AND SILK.IT'S A HUB OF TECHNOLOGY AND CULTURE.

[0072] The encrypted result is:

[0073] SVIV RH Z YIRVU RMGILWFXGRLM LU SZMTASLF RM 20DLIWH:SZMTASLF,XZKRGZOLU ASVQRZMT KILERMXV,RH Z YVZFGRUFO

[0074] Therefore, by including the security attribute information of the plaintext data in the first prompt message, the server can not only obtain accurate data decryption parameters to effectively process the data processing request, but also prevent malicious users from decrypting the first encrypted data based on the first prompt message, thus ensuring the security of the data decryption parameters and further protecting the security of the user's plaintext data.

[0075] When the encryption method corresponding to the first data ciphertext is symmetric encryption, that is, the data decryption parameters are used for symmetric decryption, the first prompt information also includes the decryption parameter ciphertext obtained by encrypting the data decryption parameters using a preset key. Correspondingly, the above-mentioned determination of the data decryption parameters based on the first prompt information may include: decrypting the decryption parameter ciphertext using a preset key to obtain the data decryption parameters.

[0076] Specifically, preset keys can be saved to the client and server respectively in advance. The client uses the determined data encryption parameters as data decryption parameters, encrypts the data decryption parameters using the preset keys to obtain the decrypted parameter ciphertext, and generates a first prompt message based on the decrypted parameter ciphertext. Correspondingly, after the server calls the data processing model, it decrypts the decrypted parameter ciphertext in the first prompt message using the preset keys to obtain the data decryption parameters.

[0077] Therefore, by including the decryption parameter ciphertext in the first prompt message, even if some users maliciously obtain the data processing request, they will not be able to obtain the data decryption parameter from the first prompt message because they do not know the preset key, and thus they will not be able to decrypt the first data ciphertext, thus ensuring the security of the data decryption parameter and the data plaintext.

[0078] Step S1022: After processing the plaintext data to obtain the plaintext result, determine the encryption parameters of the result based on the data decryption parameters.

[0079] Specifically, the plaintext data is processed to obtain the processed plaintext result, and the encryption parameters of the result are determined based on the data decryption parameters. The plaintext processing procedure can be set as needed in practical applications, and this application does not impose specific limitations on it.

[0080] In some implementations, the data decryption parameters and the result encryption parameters may be the same. Accordingly, the above-mentioned determination of the result encryption parameters based on the data decryption parameters may include: determining the data decryption parameters as the result encryption parameters.

[0081] In other words, the encryption and decryption parameters used when sending data processing requests from the client to the server are the same as the encryption and decryption parameters used when sending response data from the server to the client.

[0082] By defining the data decryption parameters as the result decryption parameters, the plaintext of the processing result is encrypted using the result encryption parameters, and a response data containing the ciphertext of the processing result is sent to the client. This avoids the leakage of the plaintext of the processing result during transmission, thus ensuring the security of the plaintext of the processing result and also ensuring the security of user privacy.

[0083] In other embodiments, to further enhance security, the above-mentioned determination of the result encryption parameter based on the data decryption parameter may include: obtaining the encryption parameter corresponding to the data decryption parameter from the second correspondence between the decryption parameter and the encryption parameter, and determining the encryption parameter corresponding to the data decryption parameter as the result encryption parameter.

[0084] Specifically, a second correspondence between decryption parameters and encryption parameters can be pre-established and saved to the server or data processing model. After obtaining the plaintext result of the data plaintext processing, the encryption parameters corresponding to the data decryption parameters can be obtained from the second correspondence, and the obtained encryption parameters are determined as the result encryption parameters. It should be noted that the decryption parameters and encryption parameters in the second correspondence can be combinations of decryption parameters and encryption parameters corresponding to symmetric encryption, or they can be obtained by random combination. That is, they can be decryption parameters and encryption parameters corresponding to different encryption algorithms. For example, for any correspondence between decryption parameters and encryption parameters in the second correspondence, the decryption parameter can be the decryption parameter corresponding to encryption algorithm 1, and the encryption parameter can be the encryption parameter corresponding to encryption algorithm 2.

[0085] In other words, the encryption and decryption parameters used when sending a data processing request from the client to the server are different from the encryption and decryption parameters used when sending the response data from the server to the client. Therefore, even if some users maliciously crack the data decryption parameters, they still cannot obtain the plaintext processing result from the response data, further ensuring the security of the processing result and thus protecting user privacy.

[0086] Step S1023: Encrypt the plaintext of the processing result using the result encryption parameters to obtain the ciphertext of the processing result.

[0087] It should be noted that steps S1021 to S1023 are all operations performed by the data processing model after the data processing model is invoked.

[0088] Therefore, within the data processing model, the first ciphertext is decrypted using data decryption parameters to obtain plaintext. After processing the plaintext, the plaintext is then encrypted using the determined encryption parameters to obtain ciphertext. This ensures that the processing result is transmitted between the server and client in ciphertext form, guaranteeing the security of the processing result and thus protecting user privacy.

[0089] In some implementations, the data processing model may include a decryption module, a data processing module, and an encryption module. The decryption module decrypts the first ciphertext using data decryption parameters to obtain plaintext. The data processing module processes the plaintext to obtain a processed plaintext. The encryption module determines result encryption parameters based on the data decryption parameters and encrypts the processed plaintext using these parameters to obtain a processed ciphertext. In other words, during the process of calling the data processing model to generate the processed ciphertext of the first ciphertext based on the first prompt information, the decryption module decrypts the first ciphertext using data decryption parameters to obtain plaintext; the data processing module processes the plaintext to obtain a processed plaintext; and the encryption module determines result encryption parameters based on the data decryption parameters and encrypts the processed plaintext using these parameters to obtain the processed ciphertext.

[0090] The specific processing procedures of each module in the data processing model can be found in the previous descriptions; repeated details will not be repeated here.

[0091] By setting up decryption and encryption modules in the data processing model, the first encrypted data and the processing results can be decrypted within the data processing model, thus greatly reducing the risk of data leakage of user privacy during transmission.

[0092] Based on any of the above embodiments, sending response data to the client in step S103 may include: determining the ciphertext of the processing result as response data and sending the response data to the client.

[0093] In other words, the response data may not include the second prompt information used to indicate the result decryption parameters. Specifically, when the data decryption parameters are determined as the result encryption parameters, after receiving the response data, the client can determine the data encryption parameters used to encrypt the plaintext data as the result decryption parameters; and use the result decryption parameters to decrypt the response data to obtain the processed result plaintext. When the result encryption parameters are obtained from the second correspondence, a fourth correspondence between encryption parameters and decryption parameters can be pre-established and saved to the client. When the client receives the response data, it can obtain the decryption parameters corresponding to the data encryption parameters used to encrypt the plaintext data from the fourth correspondence, determine the obtained decryption parameters as the result decryption parameters, and use the result decryption parameters to decrypt the processed result ciphertext in the response data to obtain the processed result plaintext.

[0094] For example, a certain fourth correspondence is "encryption parameter 1 - decryption parameter 2", and its corresponding second correspondence is "decryption parameter 1 - encryption parameter 2". This indicates that encryption parameter 1 and decryption parameter 1 are a pair of encryption and decryption parameters, and decryption parameter 2 and encryption parameter 2 are a pair of encryption and decryption parameters. When the client uses encryption parameter 1 to encrypt the plaintext data to obtain the first ciphertext data, the first ciphertext data is decrypted using decryption parameter 1 in the data processing model. Furthermore, the processing result plaintext is encrypted using encryption parameter 2 in the data processing model to obtain the processing result ciphertext, and the processing result ciphertext is decrypted using decryption parameter 2 in the client to obtain the processing result plaintext.

[0095] Therefore, directly identifying the encrypted processing result as the response data and sending it to the client not only ensures the security of the processing result but also improves data processing efficiency.

[0096] In some other implementations, sending response data to the client in step S103 may include: generating response data based on the first prompt information and the encrypted processing result, and then sending the response data to the client.

[0097] The specific format of the response data can be set according to the needs of the actual application, and this application does not impose specific limitations on it. For example, the response data can be obtained by concatenating the encrypted processing result with the first prompt information.

[0098] By generating response data containing the initial prompt and the encrypted processing result, the security of the processing result is ensured, and the client can accurately determine the decryption key based on the initial prompt, thus successfully decrypting the encrypted processing result.

[0099] Furthermore, to enhance data protection security, in some implementations, the method further includes: updating at least one encrypted parameter and at least one decrypted parameter stored according to a determined update strategy when it is determined that the parameter update conditions are met.

[0100] Optionally, a parameter update cycle is preset. Accordingly, when the preset parameter update cycle is reached, it is determined that the parameter update conditions are met, and the stored at least one encrypted parameter and at least one decrypted parameter are updated according to the preset update strategy.

[0101] Alternatively, upon receiving an update instruction, determine that the parameter update conditions are met, and update at least one encrypted parameter and at least one decrypted parameter stored in the update instruction according to the update strategy in the update instruction.

[0102] Alternatively, if it is determined that the first prompt message includes an update strategy, then the parameter update condition is determined to be met, and the saved at least one encrypted parameter and at least one decrypted parameter are updated according to the update strategy in the first prompt message.

[0103] It should be noted that the server and client simultaneously update the encryption and decryption parameters. This means the client can pre-set a parameter update cycle and update at least one encryption and at least one decryption parameter stored on the client upon receiving a parameter update request. Alternatively, the managing user or device can simultaneously send update instructions to both the client and server. The client then updates its stored encryption and at least one decryption parameter based on these instructions. The client updates its stored encryption and at least one decryption parameter according to a determined update strategy (which can be preset, retrieved from the cloud, or input by the user). Based on this strategy, the client generates a first prompt message, which is sent to the server along with the data processing request. This ensures that the server can correctly decrypt the first encrypted data sent by the client, and that the client can correctly decrypt the encrypted processing result sent by the server.

[0104] Therefore, by regularly updating the encryption and decryption parameters, not only is the security of the encryption and decryption parameters ensured, but the secure transmission of data is further guaranteed.

[0105] Corresponding to the application scenarios and methods provided in the embodiments of this application, the embodiments of this application also provide a training method for a data processing model, which can be applied to... Figure 1 The server shown is as follows: Figure 5 As shown, the method includes:

[0106] Step S201: Obtain multiple training samples. Each training sample includes a second encrypted data and a second hint message. The second hint message is used to indicate the data decryption parameters of the second encrypted data.

[0107] Step S202: Train the network to be trained using multiple training samples to obtain a data processing model.

[0108] In some implementations, each training sample may also carry a label, which represents the ciphertext of the processing result corresponding to the second ciphertext in the training sample. Accordingly, training the network to be trained using multiple training samples to obtain a data processing model may include: obtaining the target training sample corresponding to the current training round from multiple training samples, inputting the target training sample into the network to be trained for data processing, and outputting the ciphertext of the processing result; determining a loss value based on the output ciphertext of the processing result and the ciphertext of the processing result represented by the label of the target training sample, according to a preset loss function; determining the current network to be trained as the data processing model if the loss value is less than a loss value threshold; and performing the next round of training if the loss value is not less than the loss value threshold, until the data processing model is obtained. The data processing model is used in the data processing method provided in any of the foregoing embodiments.

[0109] It should be noted that the specific training process of the data processing model is not limited to the above process, and it can be set according to the needs in practical applications.

[0110] By training the data processing model, the plaintext data to be processed by the user can be transmitted from the client to the data processing model in encrypted form, and the data processing results can be transmitted from the data processing model to the client in encrypted form. This ensures the security of user data and reduces the risk of user privacy leakage.

[0111] Corresponding to the application scenarios and methods provided in the embodiments of this application, the embodiments of this application also provide a data processing method that can be applied to... Figure 1 The client shown is as follows: Figure 6 As shown, the method includes:

[0112] Step S301: In response to the plaintext data to be processed input by the user, the plaintext data is encrypted using data encryption parameters to obtain the first ciphertext data.

[0113] Step S302: Based on the first prompt information and the first encrypted data, send a data processing request to the server. The first prompt information is used to prompt the decryption method of the first encrypted data, and the data processing request is used to request the server to call the data processing model and generate the processing result encrypted data of the first encrypted data based on the first prompt information.

[0114] In some implementations, step S302 may further include: generating a first prompt message based on the security attribute information of the plaintext data, wherein the security attribute information is a security level parameter or a key parameter association index of the plaintext data, and the key parameter association index represents the association between the data encryption parameter and the data decryption parameter. Alternatively, when the data encryption parameter is used for symmetric encryption, the data encryption parameter is encrypted using a preset key to obtain the decryption parameter ciphertext, and the first prompt message is generated based on the decryption parameter ciphertext.

[0115] Step S303: Obtain the plaintext of the processing result based on the response data sent by the server, and display the plaintext of the processing result.

[0116] In some implementations, the response data includes a first prompt message and a ciphertext of the processing result. The second prompt message is used to prompt the result decryption parameters of the ciphertext of the processing result. Accordingly, obtaining the plaintext of the processing result based on the response data sent by the server in step S303 may include: determining the result decryption parameters according to the second prompt message; and decrypting the ciphertext of the processing result using the result decryption parameters to obtain the plaintext of the processing result.

[0117] For the specific implementation methods and corresponding technical effects of steps S301 to S303, please refer to the relevant descriptions above. Repeated details will not be repeated here.

[0118] Corresponding to the application scenarios and methods provided in the embodiments of this application, the embodiments of this application also provide a data processing apparatus, applied to... Figure 1 The server shown includes:

[0119] The receiving module is used to receive a data processing request sent by the client. The data processing request includes a first encrypted data and a first prompt message. The first encrypted data is obtained by the client encrypting the plaintext data to be processed input by the user. The first prompt message is used to indicate the decryption method of the first encrypted data.

[0120] The processing module is used to call the pre-trained data processing model and generate the processing result ciphertext of the first data ciphertext based on the first prompt information.

[0121] The sending module is used to send response data to the client. The response data includes the ciphertext of the processing result. The response data is used to enable the client to obtain the plaintext of the processing result from the ciphertext of the processing result and to display the plaintext of the processing result.

[0122] In some implementations, the processing module is specifically used for:

[0123] The first ciphertext is decrypted using the data decryption parameters corresponding to the decryption method to obtain the plaintext; when the plaintext is processed to obtain the processed result plaintext, the result encryption parameters are determined according to the data decryption parameters; the processed result plaintext is encrypted using the result encryption parameters to obtain the processed result ciphertext.

[0124] In some embodiments, the first prompt information includes security attribute information of the plaintext data, and the device further includes a first acquisition module, used to acquire a target decryption parameter corresponding to the security attribute information of the plaintext data from a preset first correspondence between security attribute information and decryption parameters, wherein the security attribute information of the plaintext data is a security level parameter or key parameter association index of the plaintext data, and the key parameter association index represents the association between the data encryption parameter and the data decryption parameter of the plaintext data; and the target decryption parameter is determined as the data decryption parameter.

[0125] In some embodiments, when the data decryption parameters are used for symmetric decryption, the first prompt information includes ciphertext of decryption parameters obtained by encrypting the data decryption parameters using a preset key. The device further includes a second acquisition module for decrypting the ciphertext of decryption parameters using the preset key to obtain the data decryption parameters.

[0126] In some implementations, the processing module is further specifically used to: determine the data decryption parameter as the result encryption parameter; or, obtain the encryption parameter corresponding to the data decryption parameter from the second correspondence between the decryption parameter and the encryption parameter, and determine the encryption parameter corresponding to the data decryption parameter as the result encryption parameter.

[0127] In some implementations, the sending module is specifically used to: determine the ciphertext of the processing result as the response data and send the response data to the client; or, generate the response data based on the first prompt information and the ciphertext of the processing result and send the response data to the client.

[0128] In some embodiments, the apparatus further includes a training module for acquiring multiple training samples, each training sample including a second encrypted data and a second prompt message, the second prompt message being used to indicate the data decryption parameters of the second encrypted data; and using the multiple training samples to train the network to be trained to obtain the data processing model.

[0129] Corresponding to the application scenarios and methods provided in the embodiments of this application, the embodiments of this application also provide a data processing apparatus, applied to... Figure 1 The client shown, the device includes:

[0130] An encryption module is used to encrypt the plaintext data to be processed in response to user input, using data encryption parameters to obtain a first ciphertext data.

[0131] The sending module is used to send a data processing request to the server based on the first prompt information and the first encrypted data. The first prompt information is used to prompt the decryption method of the first encrypted data. The data processing request is used to request the server to call the data processing model and generate the processing result ciphertext of the first encrypted data based on the first prompt information.

[0132] The acquisition module is used to acquire the plaintext of the processing result based on the response data sent by the server, and to display the plaintext of the processing result.

[0133] In some embodiments, the device further includes a generation module, configured to generate the first prompt information based on the security attribute information of the plaintext data, wherein the security attribute information is a security level parameter or key parameter association index of the plaintext data, and the key parameter association index represents the association between the data encryption parameter and the data decryption parameter; or, when the data encryption parameter is used for symmetric encryption, the data encryption parameter is encrypted using a preset key to obtain decryption parameter ciphertext, and the first prompt information is generated based on the decryption parameter ciphertext.

[0134] In some implementations, the response data includes the first prompt information and the ciphertext of the processing result. The acquisition module is specifically used to determine the result decryption parameters based on the first prompt information; and to decrypt the ciphertext of the processing result using the result decryption parameters to obtain the plaintext of the processing result.

[0135] The functions of each module in each device in the embodiments of this application can be found in the corresponding description in the above method, and they have corresponding beneficial effects, which will not be repeated here.

[0136] Corresponding to the application scenarios and methods provided in the embodiments of this application, the embodiments of this application also provide a data processing system, such as... Figure 7 As shown, the system includes:

[0137] Client 401 is configured to respond to plaintext data to be processed input by the user, encrypt the plaintext data using data encryption parameters to obtain first ciphertext data; send a data processing request to server 402 based on a first prompt message and the first ciphertext data, wherein the first prompt message is used to indicate the decryption method of the first ciphertext data; obtain the processing result plaintext based on the response data sent by server 402, and display the processing result plaintext data.

[0138] The server 402 is configured to receive the data processing request; invoke a pre-trained data processing model to generate a ciphertext of the processing result of the first data ciphertext based on the first prompt information; and send response data to the client 401, the response data including the ciphertext of the processing result.

[0139] In some implementations, the system may further include a forwarding device. Accordingly, client 401 may send a data processing request to the forwarding device, which forwards the received data processing request to server 402; and server 402 may send response data to the forwarding device, which forwards the response data to client 401. The specific architecture of the data processing system can be configured as needed in practical applications.

[0140] The functions of each part in the data processing system provided in this application embodiment can be found in the corresponding descriptions in the above methods, and they have corresponding beneficial effects, which will not be repeated here.

[0141] Figure 8 This is a block diagram of an electronic device used to implement embodiments of this application. For example... Figure 8 As shown, the electronic device includes a memory 501 and a processor 502. The memory 501 stores a computer program that can run on the processor 502. When the processor 502 executes the computer program, it implements the method described in the above embodiments. The number of memories 501 and processors 502 can be one or more. In a specific implementation, the electronic device may also include a communication interface 503 for communicating with external devices and exchanging data.

[0142] In practical implementation, if the memory 501, processor 502, and communication interface 503 are implemented independently, they can be interconnected via a bus to communicate with each other. This bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. This bus can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 7 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0143] Optionally, in a specific implementation, if the memory 501, processor 502 and communication interface 503 are integrated on a single chip, the memory 501, processor 502 and communication interface 503 can communicate with each other through an internal interface.

[0144] This application provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the method provided in this application.

[0145] This application provides a computer program product, including a computer program that, when executed by a processor, implements the method provided in this application.

[0146] This application also provides a chip including a processor for calling and executing instructions stored in a memory, causing a communication device with the chip installed to perform the method provided in this application.

[0147] This application also provides a chip, including: an input interface, an output interface, a processor, and a memory. The input interface, output interface, processor, and memory are connected through an internal connection path. The processor is used to execute code in the memory. When the code is executed, the processor is used to execute the method provided in the application embodiment.

[0148] It should be understood that the aforementioned processor can be a Central Processing Unit (CPU), or other general-purpose processors, Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Field-Programmable Gate Arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. General-purpose processors can be microprocessors or any conventional processor. It is worth noting that the processor can be a processor supporting Advanced Reduced Instruction Set Machines (ARM) architecture.

[0149] Further, optionally, the aforementioned memory may include read-only memory and random access memory. The memory may be volatile memory or non-volatile memory, or may include both. Non-volatile memory may include read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory may include random access memory (RAM), which serves as an external cache. By way of example, but not limitation, many forms of RAM are available. Examples include Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), Synchronous DRAM (SDRAM), Double Data Rate SDRAM (DDR SDRAM), Enhanced Synchronous DRAM (ESDRAM), Synchronous Link DRAM (SLDRAM), and Direct Rambus RAM (DR RAM).

[0150] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented in software, it can be implemented, in whole or in part, as a computer program product. A computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions according to this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transferred from one computer-readable storage medium to another.

[0151] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of those different embodiments or examples.

[0152] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this application, "a plurality of" means two or more, unless otherwise explicitly specified.

[0153] Any process or method described in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing a particular logical function or process. Furthermore, the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functionality involved.

[0154] The logic and / or steps described in the flowchart or otherwise herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus or device (such as a computer-based system, a processor-included system or other system that can fetch and execute instructions from, an instruction execution system, apparatus or device).

[0155] It should be understood that various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. All or part of the steps of the methods in the above embodiments can be implemented by a program instructing related hardware, the program being stored in a computer-readable storage medium, which, when executed, includes one or a combination of the steps of the method embodiments.

[0156] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. This storage medium can be a read-only memory, a disk, or an optical disk, etc.

[0157] The above description is merely an exemplary embodiment of this application, but the scope of protection of this application is not limited thereto. Any person skilled in the art can easily conceive of various variations or substitutions within the technical scope described in this application, and these should all be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A data processing method, characterized in that, include: The system receives a data processing request sent by a client. The data processing request includes a first encrypted data and a first prompt message. The first encrypted data is obtained by the client encrypting the plaintext data to be processed input by the user. The first prompt message is used to indicate the decryption method of the first encrypted data. Invoke the pre-trained data processing model to generate the ciphertext of the first data ciphertext based on the first prompt information; The system sends response data to the client, the response data including the ciphertext of the processing result, the response data being used to enable the client to obtain the plaintext of the processing result from the ciphertext of the processing result and to display the plaintext of the processing result.

2. The method according to claim 1, characterized in that, The step of generating the ciphertext result of the first data ciphertext based on the first prompt information includes: The first ciphertext is decrypted using the data decryption parameters corresponding to the decryption method to obtain the plaintext data; When the plaintext data is processed to obtain the plaintext result, the encryption parameters of the result are determined according to the data decryption parameters. The plaintext of the processing result is encrypted using the encryption parameters to obtain the ciphertext of the processing result.

3. The method according to claim 2, characterized in that, The first prompt information includes the security attribute information of the plaintext data. Before decrypting the first ciphertext data using the data decryption parameters to obtain the plaintext data, the process includes: From the first correspondence between the preset security attribute information and the decryption parameter, the target decryption parameter corresponding to the security attribute information of the plaintext is obtained. The security attribute information of the plaintext is the security level parameter or key parameter association index of the plaintext. The key parameter association index represents the association between the data encryption parameter and the data decryption parameter of the plaintext. The target decryption parameter is determined as the data decryption parameter.

4. The method according to claim 2, characterized in that, When the data decryption parameters are used for symmetric decryption, the first prompt information includes ciphertext of the decryption parameters obtained by encrypting the data decryption parameters using a preset key. Before decrypting the first ciphertext using the data decryption parameters to obtain the plaintext, the process further includes: The ciphertext of the decryption parameters is decrypted using the preset key to obtain the data decryption parameters.

5. The method according to any one of claims 2-4, characterized in that, The step of determining the result encryption parameters based on the data decryption parameters includes: The data decryption parameters are determined as the result encryption parameters; or, From the second correspondence between the decryption parameters and the encryption parameters, the encryption parameters corresponding to the data decryption parameters are obtained, and the encryption parameters corresponding to the data decryption parameters are determined as the result encryption parameters.

6. The method according to claim 1, characterized in that, The data processing model includes a decryption module, a data processing module, and an encryption module; The decryption module uses the data decryption parameters to decrypt the first ciphertext to obtain the plaintext data. The data processing module processes the plaintext data to obtain the plaintext processing result. The encryption module determines the result encryption parameters based on the data decryption parameters, and uses the result encryption parameters to encrypt the plaintext of the processing result to obtain the ciphertext of the processing result.

7. A method for training a data processing model, characterized in that, include: Multiple training samples are obtained, and each training sample includes a second encrypted data and a second hint information. The second hint information is used to indicate the decryption method of the second encrypted data. The network to be trained is trained using the multiple training samples to obtain a data processing model, which is used in the data processing method according to any one of claims 1-6.

8. A data processing method, characterized in that, include: In response to the plaintext data to be processed input by the user, the plaintext data is encrypted using data encryption parameters to obtain the first ciphertext data; Based on the first prompt information and the first encrypted data, a data processing request is sent to the server. The first prompt information is used to prompt the decryption method of the first encrypted data. The data processing request is used to request the server to call the data processing model and generate the processing result ciphertext of the first encrypted data based on the first prompt information. The plaintext processing result is obtained based on the response data sent by the server, and the plaintext processing result is displayed.

9. The method according to claim 8, characterized in that, Before sending a data processing request to the server based on the first prompt information and the first encrypted data, the method further includes: Based on the security attribute information of the plaintext data, the first prompt information is generated. The security attribute information is the security level parameter or key parameter association index of the plaintext data. The key parameter association index represents the association relationship between the data encryption parameter and the data decryption parameter. or, When the data encryption parameters are used for symmetric encryption, the data encryption parameters are encrypted using a preset key to obtain decryption parameter ciphertext, and the first prompt message is generated based on the decryption parameter ciphertext.

10. The method according to claim 8 or 9, characterized in that, The response data includes the first prompt information and the encrypted processing result. Obtaining the plaintext processing result based on the response data sent by the server includes: Based on the first prompt information, determine the result decryption parameters; The ciphertext of the processing result is decrypted using the decryption parameters to obtain the plaintext of the processing result.

11. A data processing system, characterized in that, include: The client is used to respond to the plaintext data to be processed input by the user and encrypt the plaintext data using data encryption parameters to obtain the first ciphertext data; Based on the first prompt information and the first encrypted data, a data processing request is sent to the server. The first prompt information is used to indicate the decryption method of the first encrypted data. Based on the response data sent by the server, the plaintext processing result is obtained and displayed. The server is used to receive the data processing request; Invoke the pre-trained data processing model to generate the ciphertext of the first data ciphertext based on the first prompt information; Send response data to the client, the response data including the encrypted processing result.

12. An electronic device comprising a memory, a processor, and a computer program stored in the memory, wherein the processor, when executing the computer program, implements the method of any one of claims 1 to 10.

13. A computer-readable storage medium storing a computer program that, when executed by a processor, implements the method of any one of claims 1 to 10.

14. A computer program product comprising a computer program that, when executed by a processor, implements the method of any one of claims 1 to 10.

Images