Information processing method and related device

Abstract

The present application provides an information processing method and a related device, which are used for verifying information to be proved of a first entity on the basis of an evaluation index and historical behavior information, enabling the credibility of the verification process to be improved, so as to improve network security. In the method, first information and second information are acquired, wherein the first information indicates an evaluation rule for whether the information to be proved of the first entity is valid or not, the second information indicates the historical behavior information of the first entity associated with the information to be proved, and the information to be proved comprises capability and / or qualification; and the information to be proved of the first entity is verified on the basis of the first information and the second information to obtain a verification result.

Description

Information processing method and related equipment

[0001] This application claims priority to the Chinese patent application filed with the State Intellectual Property Office on June 26, 2023, with application number 202310764169.3 and invention name “An information processing method and related equipment”, the entire contents of which are incorporated by reference into this application. Technical Field

[0002] The present application relates to the field of computer technology, and in particular to an information processing method and related equipment. Background Art

[0003] As network coverage increases and application scenarios become more widespread, user needs become more diverse, the number of devices increases dramatically, and the network environment becomes more complex. Therefore, how to establish trust between different devices in the network environment is a technical problem that needs to be solved urgently.

[0004] Summary of the Invention

[0005] The present application provides an information processing method and related equipment for verifying information to be proved of a first entity based on evaluation rules and historical behavior information, which can improve the credibility of the verification process and thus enhance network security.

[0006] The first aspect of the present application provides an information processing method, which is executed by a first device, or the method is executed by some components in the first device (such as a processor, a chip or a chip system, etc.), or the method can also be implemented by a logic module or software that can realize all or part of the functions of the first device. In the first aspect and its possible implementation, the method is described as being executed by the first device as an example. The first device can be a server, a device running (or having) a virtual machine, a device running (or having) a container, a desktop computer, a notebook, etc. In the method, the first device obtains first information and second information, the first information indicates an evaluation rule for whether the information to be proved of the first entity is valid, and the second information indicates historical behavior information of the first entity associated with the information to be proved, and the information to be proved includes capabilities and / or qualifications; the first device verifies the information to be proved of the first entity based on the first information and the second information to obtain a verification result.

[0007] Based on the above technical solution, the first information obtained by the first device indicates the evaluation rules for whether the information to be proved of the first entity is valid, and the second information obtained by the first device indicates the historical behavior information of the first entity associated with the information to be proved, and the information to be proved includes capabilities and / or qualifications, and the first device can verify the information to be proved based on the first information and the second information to obtain a verification result. In other words, the verification process of the information to be proved of the first entity can be implemented based on the evaluation rules corresponding to the information to be proved and the associated historical behavior information. Therefore, in the above technical solution, the first device can verify the information to be proved of the first entity based on the evaluation rules and the historical behavior information, which can improve the credibility of the verification process and thus improve network security.

[0008] Optionally, in the above technical solution, the first device can verify the information to be proved of the first entity based on the evaluation rules and associated historical behavior information, without relying on other nodes (such as digital certificates provided by CA servers, indirect reputations provided by other nodes, etc.), which can improve the credibility of the verification process.

[0009] Optionally, the evaluation rules are used to evaluate whether the information to be certified is valid, which can be understood as: the evaluation rules are used to evaluate whether the information to be certified is legal, or the evaluation rules are used to evaluate whether the information to be certified is compliant, etc. In other words, the subsequent verification process performed by the first device can be understood as the first device evaluating whether the information to be certified of the first entity is valid (or legal, compliant, etc.) based on the evaluation rules indicated by the first information and the historical behavior information indicated by the second information. In addition, the evaluation rules can also be understood as: evaluation indicators, legal indicators, legal rules, compliance rules, compliance indicators, etc.

[0010] It should be noted that the above technical solution can be applied to a communication network system. Accordingly, the first entity can be a physical device or a virtual device in the communication network system, such as a terminal device, a network device, etc. In other words, the above technical solution can be applied to the verification process of the information to be proved by the device in the communication network system.

[0011] Optionally, the information to be proved may include at least one item of information such as capability and qualification, that is, the information to be proved of the first entity may indicate the capability and / or qualification possessed by the first entity. For example, when the first entity is a network device (or terminal device), the information to be proved of the first entity may indicate that the network device (or terminal device) has at least one of 6G / 5G / 4G / 3G communication capability, encryption capability, integrity protection capability or privacy protection capability, or the information to be proved of the first entity may indicate that the network device (or terminal device) has at least one of 6G / 5G / 4G / 3G communication qualification, encryption qualification, integrity protection qualification or privacy protection qualification. Exemplarily, the information to be proved of the first entity may be replaced by the claim (or declaration information) of the first entity, the capability (or capability information) of the first entity, or the qualification (or qualification information) of the first entity, etc.

[0012] Optionally, the historical behavior information may be replaced with the historical information.

[0013] In a possible implementation of the first aspect, the first device verifies the information to be proved of the first entity based on the first information and the second information, and obtains a verification result including: when the support degree of the first information and the second information is greater than or equal to a first threshold, the first device determines that the verification result is verification passed; and / or, when the support degree of the first information and the second information is less than or equal to a second threshold, the first device determines that the verification result is verification failed.

[0014] Based on the above technical solution, during the verification process performed by the first device, the first device can determine the verification result based on the support of the first information and the second information to provide a specific implementation method of the verification process.

[0015] Optionally, the support can be replaced by similarity or other descriptions.

[0016] Optionally, the first device may implement the above-mentioned verification process through an artificial intelligence (AI) algorithm (or AI model, AI operation, etc.). For example, the first device verifies the information to be verified of the first entity based on the first information and the second information. The process of obtaining the verification result may include: the first device uses the first information and the second information as inputs to the AI ​​algorithm (or AI model, AI operation, etc.), and outputs the verification result after verification processing by the AI ​​algorithm. Thus, the first device implements the above-mentioned verification process through the AI ​​algorithm (or AI model, AI operation, etc.), making the verification process objective, transparent, and intelligent, and further improving the credibility of the verification process.

[0017] In a possible implementation manner of the first aspect, the first device acquiring the first information and the second information includes: the first device receiving the first information and the second information.

[0018] Based on the above technical solution, the first device can obtain the first information and the second information by receiving the first information and the second information, so that the first device can perform a verification process for the information to be proved of the first entity based on the received first information and the second information.

[0019] It is understood that in the above technical solution, the first device can perform the verification process based on the received first information and second information. The first device (or the hardware module and / or software module in the first device used to perform the verification process) can be called an attestation engine (AE), an attestation node, etc.

[0020] In a possible implementation of the first aspect, the first device obtains the first information and the second information, including: the first device receives third information, where the third information is used to indicate the information to be proved of the first entity; the first device determines the first information based on the third information, and determines the second information based on the third information.

[0021] Based on the above technical solution, after receiving the third information, the first device can determine the first information and the second information based on the third information to obtain the first information and the second information, so that the first device can perform a verification process for the information to be proved of the first entity based on the determined first information and second information.

[0022] It is understandable that in the above technical solution, the first device obtains the first information and the second information based on the received third information, and then performs the verification process based on the first information and the second information. Among them, the first device (or the hardware module and / or software module in the first device used to perform the determination of the first information based on the third information) can be called a rule mining module (RMM), a rule mining node, etc.; the first device (or the hardware module and / or software module in the first device used to perform the determination of the second information based on the third information) can be called a knowledge embedding module (KEM), a knowledge embedding node, etc.; the first device (or the hardware module and / or software module in the first device used to perform the verification process) can be called an attestation engine (AE), an attestation node, etc.

[0023] In a possible implementation of the first aspect, the first device determines the first information based on the third information, including: the first device determines the first information from a first data set based on the third information, the first data set indicating N evaluation rules for whether the information to be proved is valid, where N is a positive integer.

[0024] Based on the above technical solution, after the first device receives the third information indicating the information to be proven of the first entity, the first device can determine the first information from the first data set based on the third information. In other words, after receiving the third information, the first device can determine a corresponding evaluation rule based on the information to be proven indicated by the third information, so as to subsequently perform a verification process based on the evaluation rule.

[0025] In a possible implementation of the first aspect, the first device determines the first information from the first data set based on the third information, including: the first device determines the first information from the first data set based on the triple information corresponding to the information to be proved of the first entity; the triple information includes the identifier of the first entity, the relationship between the first entity and the information to be proved, and the identifier of the information to be proved; wherein the third information includes the triple information, or the triple information is obtained by performing semantic analysis processing on the third information.

[0026] Based on the above technical solution, when determining the first information, the first device can obtain triplet information corresponding to the information to be proven based on the third information, and then further determine the first information from the first data set based on the triplet information. Furthermore, the first device can obtain triplet information through the above multiple methods to enhance the flexibility of the solution implementation.

[0027] It can be understood that when the triple information obtained by the first device is obtained by performing semantic analysis processing on the third information, the first device (or the hardware module and / or software module in the first device for performing the semantic analysis processing) can be called a semantic processing module (SPM), a semantic processing node, a semantic analysis module, a semantic analysis node, etc.

[0028] Optionally, the first device may implement the above-mentioned semantic analysis and processing process through an AI algorithm (or AI model, AI operation, etc.). For example, the process of the first device obtaining the triple information by performing semantic analysis on the third information may include: the first device uses the third information as input to the AI ​​algorithm (or AI model, AI operation, etc.), performs semantic analysis on the AI ​​algorithm, and outputs the triple information. Thus, the first device implements the above-mentioned semantic analysis and processing process through the AI ​​algorithm (or AI model, AI operation, etc.), making the semantic analysis and processing process secure, transparent, explainable, and unbiased, which can further enhance the credibility of the subsequent verification process.

[0029] In a possible implementation of the first aspect, the first device determines the second information based on the third information, including: the first device sends request information based on the third information, and the request information is used to request the historical behavior information of the first entity; the first device receives the second information; or, the first device receives the historical behavior information of the first entity and determines the second information based on the historical behavior information of the first entity.

[0030] Based on the above technical solution, in the process of determining the second information, the first device can send request information based on the third information, and then obtain the second information based on the response to the request information (for example, the response includes the second information, or the response includes the historical behavior information of the first entity) to provide a specific implementation method for the first device to obtain the second information.

[0031] Optionally, after the first device sends the request information based on the third information, the device that receives the request information and sends a response to the request information to the first device may be a second device. The second device may store historical behavior information of one or more entities (the one or more entities include the first entity). For example, the second device may be an access device to a public database (such as a server, workstation, etc.), an access device to a blockchain (such as a server, workstation, desktop, laptop, etc.), or other devices, which are not limited here.

[0032] It is understandable that when the second device is a blockchain access device, the combination with blockchain technology can improve data security.

[0033] Optionally, the first device may locally store historical behavior information of one or more entities. Accordingly, the first device determining the second information based on the third information includes: the first device may determine the second information from the information stored locally based on the third information.

[0034] In a possible implementation manner of the first aspect, the third information is generated based on a template provided by a consortium blockchain (CB), or the third information is generated based on a template provided by a centralized node.

[0035] Based on the above technical solution, the third information indicating the information to be proved of the first entity can be generated based on a template to reduce the implementation complexity of determining triplet information from the third information and improve the accuracy of determining triplet information.

[0036] Optionally, the template may be provided by a distributed node (such as a CB), a centralized node (such as a third-party authority), or other nodes, which are not limited here.

[0037] In a possible implementation manner of the first aspect, the method further includes: the first device updating the first data set based on the verification result.

[0038] Based on the above technical solution, after the first device executes the verification process and obtains the verification result, the first device can also update the first data set based on the verification result, and can subsequently use the updated first data set to execute other verification processes in order to improve the accuracy of the other verification processes.

[0039] In a possible implementation manner of the first aspect, the method further includes: the first device sending indication information indicating the verification result.

[0040] Based on the above technical solution, after the first device executes the verification process and obtains the verification result, the first device can also send an indication message indicating the verification result, so that the recipient of the indication message can clarify the verification result of the information to be proved of the first entity based on the indication message, and determine whether to establish a trust relationship with the first entity based on the verification result.

[0041] Furthermore, if the first data set is stored on a device other than the first device, the other device may perform the aforementioned process of determining the first information based on the third information based on the first data set. Accordingly, after the first device sends indication information indicating the verification result, the other device may serve as the recipient of the indication information and update the first data set based on the indication information.

[0042] The second aspect of the present application provides an information processing device, which can implement the method in the above-mentioned first aspect or any possible implementation of the first aspect. The communication device includes corresponding units or modules for executing the above-mentioned method. The units or modules included in the communication device can be implemented by software and / or hardware. For example, the device can be a first device, or the device can be a component in the first device (such as a processor, a chip or a chip system, etc.), or the device can also be a logic module or software that can implement all or part of the functions of the first device. Among them, the first device can be a server, a device running (or having) a virtual machine, a device running (or having) a container, etc.

[0043] The device includes an acquisition unit and a verification unit; the acquisition unit is used to acquire first information and second information, the first information indicating the evaluation rules of whether the information to be proved of the first entity is valid, and the second information indicating the historical behavior information of the first entity associated with the information to be proved, and the information to be proved includes capabilities and / or qualifications; the verification unit is used to verify the information to be proved of the first entity based on the first information and the second information to obtain a verification result.

[0044] In a possible implementation manner of the second aspect, the acquisition unit is used to acquire the first information and the second information, including: the acquisition unit is used to receive the first information and the second information.

[0045] In a possible implementation of the second aspect, the acquisition unit is used to acquire the first information and the second information, including: the acquisition unit receives third information, and the third information is used to indicate the information to be proved of the first entity; the acquisition unit determines the first information based on the third information; the acquisition unit determines the second information based on the third information.

[0046] In a possible implementation of the second aspect, the acquisition unit determines the first information based on the third information, including: the acquisition unit determines the first information from a first data set based on the third information, the first data set indicating N evaluation rules for whether the information to be proved is valid, where N is a positive integer.

[0047] In a possible implementation of the second aspect, the acquisition unit determines the first information from the first data set based on the third information, including: the acquisition unit determines the first information from the first data set based on the triple information corresponding to the information to be proved of the first entity; the triple information includes the identifier of the first entity, the relationship between the first entity and the information to be proved, and the identifier of the information to be proved; wherein, the third information includes the triple information, or the triple information is obtained by performing semantic analysis processing on the third information.

[0048] In a possible implementation of the second aspect, the acquisition unit determines the second information based on the third information, including: the acquisition unit sends request information based on the third information, and the request information is used to request the historical behavior information of the first entity; the acquisition unit receives the second information; or, the acquisition unit receives the historical behavior information of the first entity and determines the second information based on the historical behavior information of the first entity.

[0049] In a possible implementation of the second aspect, the third information is generated based on a template provided by the consortium chain CB, or the third information is generated based on a template provided by a centralized node.

[0050] In a possible implementation manner of the second aspect, the apparatus further includes an updating unit; the updating unit is configured to update the first data set based on the verification result.

[0051] In a possible implementation manner of the second aspect, the apparatus further includes a sending unit; the sending unit is configured to send indication information indicating the verification result.

[0052] In a possible implementation of the second aspect, the verification unit is used to verify the information to be proved of the first entity based on the first information and the second information, and the verification result obtained includes: when the support degree of the first information and the second information is greater than or equal to a first threshold, the verification unit determines that the verification result is verification passed; and / or, when the support degree of the first information and the second information is less than or equal to a second threshold, the verification unit determines that the verification result is verification failed.

[0053] In a possible implementation manner of the second aspect, the information to be proved includes capabilities and / or qualifications.

[0054] In the second aspect of this application, the constituent modules of the communication device can also be used to execute the steps performed in each possible implementation method of the first aspect and achieve corresponding technical effects. For details, please refer to the fourth aspect and will not be repeated here.

[0055] The third aspect of the present application provides a device, comprising at least one processor, which is coupled to a memory; the memory is used to store programs or instructions; the at least one processor is used to execute the program or instructions so that the device implements the method in the aforementioned first aspect and any possible implementation thereof.

[0056] In a fourth aspect, the present application provides a device comprising at least one logic circuit and an input / output interface; the logic circuit is used to execute the method described in the first aspect and any possible implementation thereof.

[0057] A fifth aspect of an embodiment of the present application provides a system, which includes the device of the second aspect, or the device of the third aspect, or the device of the fourth aspect.

[0058] Optionally, the system also includes a possible second device, a third device, etc.

[0059] In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium, which is used to store one or more computer-executable instructions. When the computer-executable instructions are executed by a processor, the processor executes the method described in the first aspect above and any possible implementation thereof.

[0060] A seventh aspect of an embodiment of the present application provides a computer program product (or computer program), which includes instructions. When the instructions in the computer program product are executed by the processor, the processor executes the method described in the first aspect and any possible implementation thereof.

[0061] An eighth aspect of an embodiment of the present application provides a chip system, which includes at least one processor for supporting a device to implement the method described in the first aspect and any possible implementation method thereof.

[0062] In one possible design, the chip system may further include a memory for storing program instructions and data necessary for the device. The chip system may be composed of a chip or may include a chip and other discrete components. Optionally, the chip system may further include an interface circuit for providing program instructions and / or data to the at least one processor.

[0063] Among them, the technical effects brought about by any design method in the second to eighth aspects can refer to the technical effects brought about by the different design methods in the above-mentioned first aspect, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] FIG1 is a schematic diagram of trust establishment involved in this application;

[0065] FIG2 is a schematic diagram of the information processing method provided by the present application;

[0066] FIG3 is another schematic diagram of the information processing method provided by the present application;

[0067] FIG4 is another schematic diagram of the information processing method provided by the present application;

[0068] FIG5 is another schematic diagram of the information processing method provided by the present application;

[0069] FIG6 is another schematic diagram of the information processing method provided by the present application;

[0070] FIG7 is another schematic diagram of the information processing method provided by the present application;

[0071] FIG8 is another schematic diagram of the information processing method provided by this application;

[0072] FIG9 is a schematic diagram of the device provided by the present application;

[0073] FIG10 is another schematic diagram of the device provided by the present application;

[0074] FIG11 is another schematic diagram of the device provided by the present application;

[0075] FIG12 is another schematic diagram of the device provided in this application. DETAILED DESCRIPTION

[0076] First, the terms involved in the embodiments of the present application are explained to facilitate understanding by those skilled in the art.

[0077] 1. Terminal device: It can be a wireless terminal device that can receive network device scheduling and instruction information. The wireless terminal device can be a device that provides voice and / or data connectivity to the user, or a handheld device with wireless connection function, or other processing device connected to a wireless modem.

[0078] Exemplarily, the terminal device may be any communication kit with wireless communication capabilities (the kit may include, for example, an antenna, a power supply module, a cable, and a Wi-Fi module). The terminal device may also be a communication module with satellite communication capabilities, a satellite phone or its components, or a very small aperture terminal (VSAT). The terminal device may be a mobile terminal device, such as a mobile phone (also known as a "cellular" phone, mobile phone), a computer, and a data card. For example, the terminal device may be a portable, pocket-sized, handheld, computer-built-in, or vehicle-mounted mobile device that exchanges voice and / or data with a wireless access network. Examples include personal communication service (PCS) phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants (PDAs), tablet computers, and computers with wireless transceiver capabilities. A wireless terminal device may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station (MS), a remote station, an access point (AP), a remote terminal, an access terminal, a user terminal, a user agent, a subscriber station (SS), a customer premises equipment (CPE), a terminal, a user equipment (UE), a mobile terminal (MT), a drone, etc. A terminal device may also be a wearable device and a next-generation communication system, for example, a terminal device in a 6G communication system or a terminal device in a future-evolved public land mobile network (PLMN). Of course, the terminal device in this application may also refer to a chip, a modem, a system on a chip (SoC) that is primarily responsible for relevant communication functions in the device, or a communication platform that may include a radio frequency (RF) part, etc.

[0079] 2. Network equipment: This may include equipment in a wireless network. For example, a network equipment may be a radio access network (RAN) node (or device) that connects a terminal device to a wireless network, also known as a base station. Currently, some examples of RAN equipment include: new-generation base stations in future communication systems, transmission reception points (TRPs), evolved Node Bs (eNBs), radio network controllers (RNCs), Node Bs (NBs), base station controllers (BSCs), base transceiver stations (BTSs), home base stations (e.g., home evolved Node Bs, or HNBs), baseband units (BBUs), or wireless fidelity (Wi-Fi) access points (APs). Furthermore, in a network architecture, a network equipment may include a centralized unit (CU) node, a distributed unit (DU) node, or a RAN device that includes both CU and DU nodes.

[0080] In addition, in other possible cases, the network device may be another device that provides wireless communication functions for the terminal device. The embodiments of this application do not limit the specific technology and specific device form used by the network device. For the convenience of description, the embodiments of this application are not limited.

[0081] In addition, the network device may also include a core network device, which may include, for example, an access and mobility management function (AMF), a user plane function (UPF), or a session management function (SMF).

[0082] It should be understood that the terminal equipment and network equipment involved in this application can be applied to a variety of communication systems. For example, the communication system may include a fourth generation (4G) mobile communication system, a fifth generation (5G) mobile communication system, or a future-oriented evolution system (such as a 6G mobile communication system). Alternatively, the communication system may also include an open access network (open RAN, O-RAN or ORAN), a cloud radio access network (CRAN), etc. Alternatively, the communication system may include a communication system that integrates two or more of the above systems.

[0083] The terms "system" and "network" in this application can be used interchangeably. "At least one" means one or more, and "plurality" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: the existence of A alone, the existence of A and B at the same time, and the existence of B alone, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, "at least one of A, B or C" includes A, B, C, AB, AC, BC or ABC. And, unless otherwise specified, the ordinal numbers such as "first" and "second" mentioned in the embodiments of this application are used to distinguish multiple objects, and are not used to limit the order, timing, priority or importance of multiple objects.

[0084] The following will describe the technical solutions in the embodiments of this application in conjunction with the accompanying drawings. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0085] With the improvement of network coverage and the popularization of application scenarios, user needs have become more diversified, the number of various devices has increased sharply, and the network environment has become more complex. For example, the integration of heterogeneous networks has become a trend in future network development. In the future, networks will move from independent and closed networks to heterogeneous interconnected networks. Cellular networks, Internet Protocol (IP) networks, and satellite networks will be highly integrated. For another example, in the future 6G era, the network environment will be more open than in the 5G era. Different networks will use different equipment, and different equipment may come from different manufacturers. In addition, the same network (such as open access network (open RAN, O-RAN or ORAN)) may also use equipment from different manufacturers, even including some "white-label" equipment.

[0086] However, as the network environment becomes more open, new security issues arise: the interfaces between different devices lack adequate protection, user data and privacy information may be overused, data transmission between entities is inherently fragile, the network may be more vulnerable to malicious attacks, and users will face higher security risks.

[0087] Therefore, how to establish trust between different devices in a network environment is a technical problem that needs to be solved urgently. In order to establish a trusted network environment and ensure the security of user information, it is necessary to consider how to establish trust between heterogeneous related entities, including people, devices, applications, and services. For example, in the future 6G network, the trust establishment solution in the 5G context may not meet the needs of the 6G open network era in terms of adaptability, transparency, and scalability, and may not be applicable to the increasingly diverse scenarios. Therefore, in the context of 6G open networks, how to establish trust between different network devices and how to establish trust between devices from different equipment manufacturers in the same network are issues that need to be solved urgently.

[0088] One possible implementation is to establish trust based on certificates. A device can obtain a digital certificate from a certificate authority (CA) server. When the device subsequently interacts with other devices, it can provide the digital certificate, allowing the other device to verify the device based on the digital certificate. If the verification is successful, the other device can determine that the device is a trusted object, thereby establishing a trust relationship between different devices.

[0089] Under this technical solution, trust is established between entities by verifying certificates. At present, the implementation of this technical solution mainly relies on the public key infrastructure (PKI) architecture. The technical system is mature and has a wide range of application scenarios in the 5G era. Under this system, the trust certificate is issued to the applicant by an authoritative third-party certificate authority (such as a CA server) and digitally signed. When a node applies to interact with another node, the node can present a certificate signed by the CA. The other node reads the CA information in the certificate, confirms that the CA is in its built-in trusted CA list, and verifies the CA's public key to ensure that the certificate has not been modified and is truly issued by the CA. If the authentication is successful, the node can be confirmed as a trusted object, and a trust relationship is established. The following will take the PKI architecture in Figure 1 as an example to exemplify the certificate-based trust establishment process.

[0090] Step 1. Node A applies for a certificate from the CA server. For example, Node A may submit information such as a public key, organization information, and personal information (domain name) to the CA server and apply for certification.

[0091] Step 2. The CA server conducts an audit based on the audit information. For example, the CA server verifies the authenticity of the applicant's information, including whether the organization exists, the company is legitimate, and whether the applicant owns the domain name, through various online and offline methods. If the audit passes, the CA server proceeds to step 3.

[0092] Step 3. The CA server issues a signed certificate to Node A.

[0093] Step 4. Node A returns the certificate to Node B.

[0094] Step 5. Node B verifies the certificate. For example, Node B reads the relevant plaintext information in the certificate, calculates the digest, and then decrypts the signature data using the corresponding CA's public key. The digest is compared with the certificate's digest. If they match, the certificate's legitimacy is confirmed. Node B verifies the certificate's domain name, validity period, and other information, and queries the certificate information (including the public key) of the built-in trusted CA. If the CA is not listed, the certificate is deemed invalid. If the CA is trusted, step 6 is executed.

[0095] Step 6. Node B determines that node A is trustworthy and interacts with it, such as performing key negotiation and other operations.

[0096] As shown in Figure 1, the certificate-based trust establishment approach creates a relatively closed trust system, making cross-CA and heterogeneous trust domain authentication difficult. Furthermore, this approach relies heavily on third-party CAs, resulting in high centralization and poor scalability. Furthermore, this approach is susceptible to single points of failure. If a CA is unreliable, subject to external attacks, or has vulnerabilities in its certificate issuance process, resulting in the issuance of fraudulent certificates to untrusted nodes, this could have a severely negative impact on the entire trust system and compromise network security.

[0097] Another possible implementation method is a reputation-based trust establishment method (which can be called the RepTrust model). This technical solution is mainly applicable to peer-to-peer (P2P) network scenarios. The main node actively collects information about the target node's past behavior performance (i.e., direct reputation) and interaction records with other nodes (i.e., indirect reputation) from the evaluation of associated nodes, and then evaluates the trust in the target node through reputation calculation. If the trust of the target node is higher than a certain threshold set in advance, it will be authenticated as trustworthy, thereby establishing a trust relationship. Compared with the certificate-based trust establishment method, this technical solution is more flexible and open, has better scalability, and better reflects the dynamic nature of trust. The following is an exemplary description of the reputation-based trust establishment method.

[0098] 1) Before the subject node A interacts with the target node B, the trust of B is first evaluated. If B has interacted with B many times before, the composite reputation and trust are calculated in the form of arithmetic average based on the local direct reputation.

[0099] 2) If A and B have not interacted before, A needs to search for B's indirect reputation in the network, and finally calculate B's composite reputation and trustworthiness based on the local direct reputation and the searched indirect reputation.

[0100] 3) If B's ​​trust is greater than the set trust threshold, then interact with it; otherwise, choose another interaction partner. After the interaction, A gives B a reputation rating and saves it locally.

[0101] From the above-mentioned trust system based on reputation, it can be seen that the credibility of a node's reputation depends largely on whether the feedback provided by the associated nodes is true and valid. False reputation evaluation will have a significant negative impact on credibility. Therefore, if this technical solution is adopted, it is necessary to establish additional relevant security mechanisms to prevent malicious attacks (such as intermittent attacks (On-off attacks), collusion attacks (collusion attacks), etc.), and at the same time, it is necessary to establish an incentive mechanism to encourage nodes to provide real feedback, so as to ensure that the node's reputation can be correctly evaluated. It can be seen that this implementation method is relatively complex, and if there are untrustworthy nodes that give direct or indirect reputation, it may also have an extremely serious negative impact on the entire trust system, thereby affecting network security.

[0102] In order to solve the above problems, the present application provides an information processing method and related equipment for verifying the information to be proved of the first entity based on evaluation rules and historical behavior information, which can improve the credibility of the verification process and thus enhance network security.

[0103] Please refer to FIG2 , which is a schematic diagram of an implementation of the information processing method provided in this application. The method includes the following steps.

[0104] It should be noted that, in FIG2 and other subsequent figures, the first device (or a possible second device) is used as an example to illustrate the method, but the present application does not limit the execution subject of the interaction. For example, the execution subject can be the first device (or a possible second device), the execution subject can also be a chip, a chip system, or a processor that supports the first device (or a possible second device) to implement the method, or a logic module or software that can implement all or part of the functions of the first device (or a possible second device). Among them, the first device (or a possible second device) can be a server, a device running (or having) a virtual machine, a device running (or having) a container, a desktop computer, a notebook, etc.

[0105] S201. A first device obtains first information and second information, wherein the first information indicates an evaluation rule for whether information to be proven of a first entity is valid, and the second information indicates historical behavior information of the first entity associated with the information to be proven, wherein the information to be proven includes capabilities and / or qualifications.

[0106] It should be noted that the technical solution shown in Figure 2 can be applied to a communication network system. Accordingly, the first entity can be a physical device or a virtual device in the communication network system, such as a terminal device, a network device, etc. In other words, the technical solution shown in Figure 2 can be applied to the process of verifying information to be proven in a device in the communication network system. For example, the technical solution shown in Figure 2 can be applied to the process of establishing a trust system between heterogeneous entities in an open network environment, such as the process of establishing trust between devices in different networks, or the process of establishing trust between devices from different vendors in the same network.

[0107] Optionally, the information to be proved may include at least one item of information such as capability, qualification, etc. Exemplarily, the information to be proved of the first entity may be replaced by the first entity's claim (or claim information), the first entity's capability (or capability information), or the first entity's qualification (or qualification information).

[0108] Optionally, the historical behavior information may be replaced with the historical information.

[0109] S202. The first device verifies the information to be certified based on the first information and the second information to obtain a verification result.

[0110] In one possible implementation, in step S202, the first device verifies the information to be verified of the first entity based on the first information and the second information. The process of obtaining the verification result may include: when the support of the first information and the second information is greater than or equal to a first threshold, the first device determines that the verification result is verification passed; and / or when the support of the first information and the second information is less than or equal to a second threshold, the first device determines that the verification result is verification failed. Specifically, during the verification process performed by the first device, the first device may determine the verification result based on the support of the first information and the second information, thereby providing a specific implementation of the verification process.

[0111] Optionally, the support can be replaced by similarity or other descriptions.

[0112] Optionally, in step S202, the first device may implement the above-mentioned verification process through an artificial intelligence (AI) algorithm (or AI model, AI operation, etc.). For example, the first device verifies the information to be verified of the first entity based on the first information and the second information. The process of obtaining the verification result may include: the first device uses the first information and the second information as inputs to the AI ​​algorithm (or AI model, AI operation, etc.), and outputs the verification result after verification processing by the AI ​​algorithm. Thus, the first device implements the above-mentioned verification process through the AI ​​algorithm (or AI model, AI operation, etc.), making the verification process objective, transparent, and intelligent, and further improving the credibility of the verification process.

[0113] Based on the above technical solution, the first information obtained by the first device in step S201 indicates the evaluation rules for whether the information to be proved of the first entity is valid, and the second information obtained by the first device in step S201 indicates the historical behavior information of the first entity associated with the information to be proved, and the information to be proved includes capabilities and / or qualifications, and in step S202, the first device can verify the information to be proved of the first entity based on the first information and the second information to obtain a verification result. In other words, the verification process of the information to be proved of the first entity can be implemented based on the evaluation rules corresponding to the information to be proved and the associated historical behavior information. Therefore, in the above technical solution, the first device can verify the information to be proved of the first entity based on the evaluation rules and the historical behavior information, which can improve the credibility of the verification process and thus improve network security.

[0114] Optionally, in the above technical solution, the first device can verify the information to be proved of the first entity based on the evaluation rules and associated historical behavior information, without relying on other nodes (such as digital certificates provided by CA servers, indirect reputations provided by other nodes, etc.), which can improve the credibility of the verification process.

[0115] It can be seen from the above description that the information to be proved may include at least one item of information such as capability and qualification, that is, the information to be proved of the first entity may indicate the capability and / or qualification possessed by the first entity. For example, when the first entity is a network device (or terminal device), the information to be proved of the first entity may indicate that the network device (or terminal device) has at least one of 6G / 5G / 4G / 3G communication capability, encryption capability, integrity protection capability or privacy protection capability, or the information to be proved of the first entity may indicate that the network device (or terminal device) has at least one of 6G / 5G / 4G / 3G communication qualification, encryption qualification, integrity protection qualification or privacy protection qualification.

[0116] Optionally, the evaluation rules are used to evaluate whether the information to be certified is valid, which can be understood as: the evaluation rules are used to evaluate whether the information to be certified is legal, or the evaluation rules are used to evaluate whether the information to be certified is compliant, etc. In other words, the process of the first device performing verification in step S202 can be understood as the first device evaluating whether the information to be certified of the first entity is valid (or legal, compliant, etc.) based on the evaluation rules indicated by the first information and the historical behavior information indicated by the second information. In addition, the evaluation rules can also be understood as: evaluation indicators, legal indicators, legal rules, compliance rules, compliance indicators, etc.

[0117] As an implementation example, take the first entity as a network device, and the information to be proved of the first entity as the 5G communication capability of the first entity as an example. In step S201, the evaluation rule indicated by the first information is used to evaluate whether the first entity has 5G communication capability. The first information can specifically indicate the evaluation rule of "a certain entity has 5G communication capability (or qualification)". For example, the evaluation rule indicated by the first information can be that the certain entity performs broadcast communication based on the 5G communication capability (or qualification), and / or, the evaluation rule indicated by the first information can be that the certain entity performs unicast communication with another entity based on the 5G communication capability (or qualification). Correspondingly, in step S202, the historical behavior information indicated by the second information can include "the first entity has sent a broadcast message based on the 5G communication capability (or qualification) at a certain time point in history", and / or "the first entity has sent a unicast message to another entity based on the 5G communication capability (or qualification) at a certain time point in history". Thereafter, in step S202, the first device can verify the historical behavior information indicated by the second information based on the evaluation rule indicated by the first information and obtain a verification result.

[0118] Optionally, the historical behavior information of the first entity may include historical behavior information associated with the information to be proven of the first entity, and may also include historical behavior information not associated with the information to be proven of the first entity. Taking the example described in the previous paragraph as an example, the historical behavior information not associated with the information to be proven of the first entity may include: the first entity sending a unicast message or broadcast message to another entity based on 3G / 4G communication capabilities at a certain point in time in history.

[0119] In the technical solution shown in FIG. 2 , the first device may obtain the first information and the second information in step S201 in a variety of ways, which will be described below with reference to some implementation examples.

[0120] Implementation Example 1, as shown in FIG3 , the process of the first device acquiring the first information and the second information includes: Step S301. The first device receives the first information and the second information. The implementation process of Step S302 can refer to the implementation process of the aforementioned Step S202.

[0121] Specifically, the first device may obtain the first information and the second information by receiving the first information and the second information, so that the first device can perform a verification process on the information to be proved of the first entity based on the received first information and the second information.

[0122] It is understandable that in implementation example 1, the first device can perform the verification process based on the received first information and second information. Among them, the first device (or the hardware module and / or software module in the first device for performing the verification process) can be called an attestation engine (AE), an attestation node, etc. Correspondingly, in the example shown in Figure 3, the second device that sends the first information and the second information can be a device with a rule mining module (RMM) and a knowledge embedding module (KEM).

[0123] In implementation example 2, as shown in FIG4 , the process of the first device acquiring the first information and the second information includes: the first device receiving third information in step S401, where the third information indicates the information to be certified of the first entity; and the first device determining the first information based on the third information and determining the second information based on the third information in step S402. The implementation process of step S403 may refer to the implementation process of step S202 described above.

[0124] Specifically, after receiving the third information, the first device can determine the first information and the second information based on the third information to obtain the first information and the second information, so that the first device can perform a verification process for the information to be proved of the first entity based on the determined first information and second information.

[0125] It can be understood that in the second implementation example, the first device obtains the first information and the second information based on the received third information, and then performs the verification process based on the first information and the second information. Among them, the first device (or the hardware module and / or software module in the first device used to perform the determination of the first information based on the third information) can be called a rule mining module (RMM), a rule mining node, etc.; the first device (or the hardware module and / or software module in the first device used to perform the determination of the second information based on the third information) can be called a knowledge embedding module (KEM), a knowledge embedding node, etc.; the first device (or the hardware module and / or software module in the first device used to perform the verification process) can be called an attestation engine (AE), an attestation node, etc. Correspondingly, in the example shown in Figure 4, the second device that sends the third information can be the first entity, or a device that includes the first entity.

[0126] In one possible implementation of Example 2, the first device determining the first information based on the third information includes: the first device determining the first information from a first data set based on the third information, the first data set indicating N evaluation rules for whether the information to be proved is valid, where N is a positive integer. Specifically, after the first device receives the third information indicating the information to be proved of the first entity, the first device may determine the first information from the first data set based on the third information. In other words, after the first device receives the third information, the first device may determine the corresponding evaluation rule based on the information to be proved indicated by the third information, so as to facilitate the subsequent execution of the verification process based on the evaluation rule.

[0127] In a possible implementation of Example 2, the first device determines the first information from the first data set based on the third information, including: the first device determines the first information from the first data set based on the triple information corresponding to the information to be proved of the first entity; the triple information includes the identifier of the first entity, the relationship between the first entity and the information to be proved, and the identifier of the information to be proved; wherein the third information includes the triple information, or the triple information is obtained by performing semantic analysis on the third information. Specifically, in the process of determining the first information, the first device may obtain the triple information corresponding to the information to be proved based on the third information, and then further determine the first information from the first data set based on the triple information. In addition, the first device may obtain the triple information through the above-mentioned multiple methods to enhance the flexibility of the solution implementation.

[0128] It can be understood that when the triple information obtained by the first device is obtained by performing semantic analysis processing on the third information, the first device (or the hardware module and / or software module in the first device for performing the semantic analysis processing) can be called a semantic processing module (SPM), a semantic processing node, a semantic analysis module, a semantic analysis node, etc.

[0129] Optionally, the first device may implement the above-mentioned semantic analysis and processing process through an AI algorithm (or AI model, AI operation, etc.). For example, the process of the first device obtaining the triple information by performing semantic analysis on the third information may include: the first device uses the third information as input to the AI ​​algorithm (or AI model, AI operation, etc.), performs semantic analysis on the AI ​​algorithm, and outputs the triple information. Thus, the first device implements the above-mentioned semantic analysis and processing process through the AI ​​algorithm (or AI model, AI operation, etc.), making the semantic analysis and processing process secure, transparent, explainable, and unbiased, which can further enhance the credibility of the subsequent verification process.

[0130] In a possible implementation of Example 2, the first device determines the second information based on the third information, including: the first device sends a request message based on the third information, the request message being used to request the historical behavior information of the first entity; the first device receives the second information; or, the first device receives the historical behavior information of the first entity and determines the second information based on the historical behavior information of the first entity. Specifically, in the process of determining the second information, the first device may send a request message based on the third information, and then obtain the second information based on a response to the request message (for example, the response includes the second information, or the response includes the historical behavior information of the first entity), so as to provide a specific implementation method for the first device to obtain the second information.

[0131] Optionally, the request information sent by the first device to request the historical behavior information of the first entity can be implemented in multiple ways. For example, the request information can carry the identifier of the first entity, so that the receiving end of the request information sends the historical behavior information of the first entity to the first device based on the identifier. For another example, the request information can carry the identifier of the first entity and / or the identifier of the information to be proved of the first entity, so that the receiving end of the request information sends the second information (i.e., the historical behavior information associated with the information to be proved of the first entity) to the first device based on the identifier.

[0132] Optionally, after the first device sends the request information based on the third information, the device that receives the request information and sends a response to the request information to the first device may be a second device. The second device may store historical behavior information of one or more entities (the one or more entities include the first entity). For example, the second device may be an access device to a public database (such as a server, workstation, etc.), an access device to a blockchain (such as a server, workstation, desktop, laptop, etc.), or other devices, which are not limited here.

[0133] It is understandable that when the second device is a blockchain access device, the combination with blockchain technology can improve data security.

[0134] Optionally, the first device may locally store historical behavior information of one or more entities. Accordingly, the first device determining the second information based on the third information includes: the first device may determine the second information from the information stored locally based on the third information.

[0135] In one possible implementation of Example 2, the third information is generated based on a template provided by a consortium blockchain (CB), or the third information is generated based on a template provided by a centralized node. Specifically, the third information indicating the information to be proven of the first entity can be generated based on a template to reduce the complexity of determining triple information from the third information and improve the accuracy of determining triples.

[0136] Optionally, the template may be provided by a distributed node (such as a CB), a centralized node (such as a third-party authority), or other nodes, which are not limited here.

[0137] In one possible implementation of Example 2, the method further includes: the first device updating the first data set based on the verification result. Specifically, after the first device performs the verification process and obtains the verification result, the first device may further update the first data set based on the verification result. The updated first data set may then be used to perform other verification processes to improve the accuracy of the other verification processes.

[0138] In one possible implementation of Implementation Example 1 or Implementation Example 2, the method further includes: the first device sending indication information indicating the verification result. Specifically, after the first device performs the verification process and obtains the verification result, the first device may further send indication information indicating the verification result, so that a recipient of the indication information can clarify the verification result of the first entity's information to be proved based on the indication information, and determine whether to establish a trust relationship with the first entity based on the verification result.

[0139] Furthermore, if the first data set is stored on a device other than the first device (e.g., as described in the first implementation example), the other device may perform the aforementioned process of determining the first information based on the third information based on the first data set. Accordingly, after the first device sends indication information indicating the verification result, the other device may serve as the recipient of the indication information and update the first data set based on the indication information.

[0140] It can be seen from the above implementation process that the key points of the embodiment of the present application are: an entity can make a declaration about its identity according to a template (such as a target provided by a distributed node (such as a CB), or a template provided by a centralized node (such as a third-party authority), etc.), and then based on the declaration, automatically extract the evaluation criteria for determining whether the declaration is credible from the dynamic knowledge graph through a rule mining algorithm, and at the same time extract information about the entity from multiple nodes of the public chain as evidence, and input it into a proof engine supported by a trusted AI language model to verify whether the entity meets the evaluation criteria, and then finally predict whether the entity's declaration is credible by integrating the compliance status. In addition, the dynamic knowledge graph is kept updated in real time, and the declaration verified to be valid will be added to the knowledge graph as new factual information. In other words, the technical means provided by the embodiment of the present application include one or more of the following:

[0141] 1. Extract the declaration keyword triple information (including subject, relation, and object) based on the information provided by the entity.

[0142] 2. Generate indicators for verification based on the declaration triple information (such as the evaluation rules mentioned in the previous embodiment).

[0143] 3. Obtain the entity's identity from the declaration triplet, and obtain its historical information (such as the historical behavior information mentioned in the previous embodiment) based on the entity's identity (for example, from the blockchain).

[0144] 4. Generate evidence required for verification based on historical information (e.g., the process of determining the second information based on the historical behavior information of the first entity) and conduct the verification process of the statement.

[0145] As shown in Figure 5, taking the storage of historical behavior information through blockchain as an example, the system architecture of the embodiment of the present application includes three parts: declaration, proof, and evidence, which are mainly supported by knowledge graph, AI algorithm, and blockchain technology respectively.

[0146] Declaration (i.e., the third information in the preceding embodiments): A declaration issued by an entity in accordance with standards established by a trusted authority, and converted by an AI algorithm (e.g., a natural language processing (NLP) tool) into a triplet of information: the identifier of the first entity, the relationship between the first entity and the information to be proved, and the identifier of the information to be proved, respectively denoted as "Subject, Relationship, Object" in the figure.

[0147] Evidence (i.e., historical behavior information in the previous examples): original data generated by the entity and stored in the blockchain (public chain), which is open and transparent and cannot be tampered with at will.

[0148] Proof (i.e., the verification process in the previous examples): Verifying the validity of a claim based on evidence, powered by a trusted AI algorithm that automatically generates and verifies corresponding evaluation rules for different claims. Trusted AI algorithms must be secure, transparent, explainable, and unbiased.

[0149] Optionally, in some implementations, the involved processes may include:

[0150] 1. The entity provides a statement and extracts keyword triples (subject, relation, object) from the statement through semantic role labeling, such as the process of performing semantic analysis on the third information to obtain triple information in the previous article.

[0151] 2. The rule mining algorithm extracts rules from the knowledge graph to evaluate whether a statement is valid based on the statement, such as the process of determining the first information through the third information mentioned above.

[0152] 3. Extract the original data about the entity from the public chain and process it into evidence that can be used to verify the claim, such as the process of determining the second information through the third information mentioned above.

[0153] 4. The proof engine uses relevant evidence to verify whether the entity meets the previously extracted rules, such as the process of verifying the information to be proved of the first entity based on the first information and the second information.

[0154] 5. Add the verified true statement as new knowledge to the knowledge graph, such as the process of updating the first data set based on the verification results mentioned above.

[0155] The following embodiments are described exemplarily using the examples shown in Figures 6 to 8. It should be noted that in the following Figures 6 to 8, the first entity is denoted as "entity (EN)" for illustration, and the first device executing the aforementioned method may include the "AE" in Figures 6 to 8 or a logic module such as the "SPM, RMM, KEM, and AE" in Figures 6 to 8. The following embodiments do not limit the specific implementation of the first device.

[0156] Please refer to FIG6 , which is a schematic diagram of the information processing method provided in this application. The method includes the following steps.

[0157] Step 1. CB sends the claim template (stored on CB) to EN.

[0158] Step 2. EN fills in the claim generation form according to the template.

[0159] Step 3. EN sends EN's claim (in template's format) to SPM.

[0160] Optionally, in the case where the first device includes logic modules such as SPM, RMM, KEM and AE, step 3 is an implementation example of receiving the third information in the above step S401.

[0161] Step 4. SPM extracts keyword triplets from the claim through semantic processing.

[0162] Step 5. SPM sends EN's claim triplets to RMM.

[0163] Step 6. RMM uses rule mining algorithms to extract evaluation indicators for EN statements from the knowledge graph (rule ectraction based on Knowledge graph and rule mining algorithms).

[0164] Step 7. RMM sends the extracted evaluation metrics (metrics for attestation) to AE.

[0165] Optionally, in the case where the first device includes an AE, step 7 is an implementation example of receiving the first information in the aforementioned step S301.

[0166] Step 8. SPM sends EN's identity information to KEM.

[0167] Step 9. KEM provides EN identity information to PB and requests for EN's raw data (given identity info).

[0168] Step 10. PB sends EN's raw data (stored on multiple PBs) to KEM.

[0169] Step 11. KEM performs knowledge embedding on the original data and extracts relevant knowledge and evidence (knowledge and evidences generated by embedding).

[0170] Step 12. KEM sends EN's evidences to AE.

[0171] Optionally, in the case where the first device includes an AE, step 12 is an implementation example of receiving the second information in the aforementioned step S301.

[0172] Step 13. AE performs claim attestation based on metrics and evidences extracted previously.

[0173] Optionally, step 13 is an implementation example of performing the verification process in the above step S202 (or step S302 or step S403).

[0174] Step 14. AE sends the attestation results to PB.

[0175] Step 15. PB updates the knowledge graph and algorithms in RMM with the newly received knowledge. That is, PB sends the verification results and information involved in the verification process (such as triples, evidence, etc.) to RMM.

[0176] As shown in Figure 6, the EN initiates the claim independently and uses its own information as evidence, unlike traditional solutions that rely on other nodes. Trusted AI (AE) automatically determines whether the EN's evidence supports the claim, making the process more objective, transparent, and intelligent. Furthermore, integration with blockchain technology ensures the security of user data.

[0177] Please refer to FIG7 , which is a schematic diagram of the information processing method provided in this application. The method includes the following steps.

[0178] Step 1. EN generates claim generation.

[0179] Step 2. EN sends the claim to SPM (EN's claim).

[0180] Optionally, in the case where the first device includes logic modules such as SPM, RMM, KEM and AE, step 3 is an implementation example of receiving the third information in the above step S401.

[0181] Step 3. SPM extracts keyword triplets from the claim through semantic processing.

[0182] Step 4. SPM sends EN's claim triplets to RMM.

[0183] Step 5. RMM uses rule mining algorithms to extract evaluation indicators for EN statements from the knowledge graph (rule ectraction based on Knowledge graph and rule mining algorithms).

[0184] Step 6. RMM sends the extracted evaluation metrics (metrics for attestation) to AE.

[0185] Optionally, in the case where the first device includes an AE, step 7 is an implementation example of receiving the first information in the aforementioned step S301.

[0186] Step 7. RMM sends EN's identity information to KEM.

[0187] Step 8. KEM provides EN identity information to PB and requests for EN's raw data (given identity info).

[0188] Step 9. PB sends the raw data about EN stored on multiple nodes to KEM data (EN's raw data (stored on multiple PBs)).

[0189] Step 10. KEM performs knowledge embedding on the original data and extracts relevant knowledge and evidence (evidence generated by embedding).

[0190] Step 11. KEM sends EN's evidences to AE.

[0191] Optionally, in the case where the first device includes an AE, step 12 is an implementation example of receiving the second information in the aforementioned step S301.

[0192] Step 12: AE performs claim attestation based on metrics and evidences extracted previously.

[0193] Optionally, step 12 is an implementation example of performing the verification process in the above step S202 (or step S302 or step S403).

[0194] Step 13. AE sends the attestation results to PB.

[0195] Step 14. PB updates the knowledge graph and algorithms in RMM with the newly received knowledge. That is, PB sends the verification results and information involved in the verification process (such as triples, evidence, etc.) to RMM.

[0196] The difference between the embodiment shown in FIG. 7 and the embodiment shown in FIG. 6 is that the embodiment shown in FIG. 7 does not require declarations to conform to a specific template, and supports more free-format declarations compared to the embodiment shown in FIG. 6 .

[0197] Please refer to FIG8 , which is a schematic diagram of the information processing method provided in this application. The method includes the following steps.

[0198] Step 1. Third party authorities provide EN with a claim template.

[0199] Step 2. EN fills in the claim generation form according to the template.

[0200] Step 3. EN sends EN's claim (in template's format) to SPM.

[0201] Optionally, in the case where the first device includes logic modules such as SPM, RMM, KEM and AE, step 3 is an implementation example of receiving the third information in the above step S401.

[0202] Step 4. SPM extracts keyword triplets from the claim through semantic processing.

[0203] Step 5. SPM sends EN's claim triplets to RMM.

[0204] Step 6. RMM uses rule mining algorithms to extract evaluation indicators for EN statements from the knowledge graph (rule ectraction based on Knowledge graph and rule mining algorithms).

[0205] Step 7. RMM sends the extracted evaluation metrics (metrics for attestation) to AE.

[0206] Optionally, in the case where the first device includes an AE, step 7 is an implementation example of receiving the first information in the aforementioned step S301.

[0207] Step 8. SPM sends EN's identity information to KEM.

[0208] Step 9. KEM provides EN identity information to a publicly accessible database and requests for EN's raw data (given identity info).

[0209] Step 10. The publicly accessible database sends the raw data about EN to KEM (EN's raw data (stored on multiple PBs)).

[0210] Step 11. KEM performs knowledge embedding on the original data and extracts relevant knowledge and evidence (knowledge and evidences generated by embedding).

[0211] Step 12. KEM sends EN's evidences to AE.

[0212] Optionally, in the case where the first device includes an AE, step 12 is an implementation example of receiving the second information in the aforementioned step S301.

[0213] Step 13. AE performs claim attestation based on metrics and evidences extracted previously.

[0214] Optionally, step 13 is an implementation example of performing the verification process in the above step S202 (or step S302 or step S403).

[0215] Step 14. AE sends the attestation results to a publicly accessible database.

[0216] Step 15. The publicly accessible database updates the knowledge graph and algorithms in the RMM with the newly received knowledge, that is, sends the verification results and information involved in the verification process (such as triples, evidence, etc.) to the RMM.

[0217] In the embodiment shown in FIG8 , the use of blockchain is not emphasized, and a publicly accessible database may be used to enhance the flexibility of the solution implementation.

[0218] Based on the embodiments shown in FIG6 to FIG8 , it can be seen that the main beneficial effects are as follows:

[0219] In some implementations, the solution can be made more open, that is, more scalable, and avoid dependence on a single node.

[0220] In some implementations, the solution can be made more autonomous, that is, it emphasizes self-certification and does not need to rely on other nodes.

[0221] In some implementations, the solution can be made more intelligent, that is, the trustor has lower requirements and does not need to have relevant professional knowledge.

[0222] The present application is described above from the perspectives of methods and systems. The device provided by the present application will be introduced below based on more drawings.

[0223] Referring to FIG. 9 , an embodiment of the present application provides a device 900 , which includes an acquisition unit 901 and a verification unit 902 .

[0224] It should be understood that the device 900 can implement the functions of the first device in the above method embodiment, and thus can also achieve the beneficial effects of the above method embodiment. In the embodiment of the present application, the device 900 can be the first device in the above method embodiment, or it can be an integrated circuit or component, such as a chip, within the first device in the above method embodiment.

[0225] In one possible implementation, the acquisition unit 901 is used to obtain first information and second information, the first information indicating the evaluation rules for whether the information to be proved of the first entity is valid, and the second information indicating the historical behavior information of the first entity associated with the information to be proved, and the information to be proved includes capabilities and / or qualifications; the verification unit is used to verify the information to be proved of the first entity based on the first information and the second information to obtain a verification result.

[0226] In a possible implementation, the acquiring unit 901 is used to acquire the first information and the second information, including: the acquiring unit 901 is used to receive the first information and the second information.

[0227] In one possible implementation, the acquisition unit 901 is used to acquire the first information and the second information, including: the acquisition unit 901 receives third information, and the third information is used to indicate the information to be proved of the first entity; the acquisition unit 901 determines the first information based on the third information; the acquisition unit 901 determines the second information based on the third information.

[0228] In one possible implementation, the acquisition unit 901 determines the first information based on the third information, including: the acquisition unit 901 determines the first information from a first data set based on the third information, the first data set indicating N evaluation rules for whether the information to be proved is valid, where N is a positive integer.

[0229] In one possible implementation, the acquisition unit 901 determines the first information from the first data set based on the third information, including: the acquisition unit 901 determines the first information from the first data set based on the triple information corresponding to the information to be proved of the first entity; the triple information includes the identifier of the first entity, the relationship between the first entity and the information to be proved, and the identifier of the information to be proved; wherein, the third information includes the triple information, or the triple information is obtained by performing semantic analysis on the third information.

[0230] In one possible implementation, the acquisition unit 901 determines the second information based on the third information, including: the acquisition unit 901 sends request information based on the third information, and the request information is used to request the historical behavior information of the first entity; the acquisition unit 901 receives the second information; or, the acquisition unit 901 receives the historical behavior information of the first entity and determines the second information based on the historical behavior information of the first entity.

[0231] In a possible implementation, the third information is generated based on a template provided by the consortium chain CB, or the third information is generated based on a template provided by a centralized node.

[0232] In a possible implementation, as shown in FIG10 , compared to the apparatus shown in FIG9 , the apparatus further includes an updating unit 903 ; the updating unit 903 is configured to update the first data set based on the verification result.

[0233] In a possible implementation, as shown in FIG10 , compared to the apparatus shown in FIG9 , the apparatus further includes a sending unit 904 ; the sending unit 904 is configured to send indication information indicating the verification result.

[0234] In one possible implementation, the verification unit 902 is used to verify the information to be proved of the first entity based on the first information and the second information, and the verification result obtained includes: when the support degree of the first information and the second information is greater than or equal to a first threshold, the verification unit 902 determines that the verification result is verification passed; and / or, when the support degree of the first information and the second information is less than or equal to a second threshold, the verification unit determines that the verification result 902 is verification failed.

[0235] In a possible implementation, the information to be proven includes capabilities and / or qualifications.

[0236] It should be noted that the information execution process of the units of the above-mentioned device 900 and the corresponding technical effects, etc., can be specifically referred to the description in the method embodiment shown above in this application, and will not be repeated here.

[0237] Please refer to Figure 11, which is another schematic structural diagram of a device 1100 provided in this application. The device 1100 at least includes an input and output interface 1102. The device 1100 may be a chip or an integrated circuit.

[0238] Optionally, the device further includes a logic circuit 1101 .

[0239] Among them, any of the acquisition unit 901 and the sending unit 904 shown in Figure 9 or Figure 10 can be a communication interface, and the communication interface can be the input / output interface 1102 in Figure 11, and the input / output interface 1102 can include an input interface and an output interface. Alternatively, the communication interface can also be a transceiver circuit, and the transceiver circuit can include an input interface circuit and an output interface circuit.

[0240] In addition, the logic circuit 1101 and the input / output interface 1102 can execute the method executed by any device (eg, the first device) in the aforementioned method embodiments and achieve corresponding beneficial effects, which will not be described in detail here.

[0241] Optionally, any of the acquisition unit 901, verification unit 902, and update unit 903 shown in FIG9 or FIG10 may be the logic circuit 1101 in FIG11. The logic circuit 1101 may be a processing device, and the functions of the processing device may be partially or entirely implemented by software. The functions of the processing device may be partially or entirely implemented by software.

[0242] Optionally, the processing device may include a memory and a processor, wherein the memory is used to store a computer program, and the processor reads and executes the computer program stored in the memory to perform corresponding processing and / or steps in any one of the method embodiments.

[0243] Alternatively, the processing device may include only a processor. A memory for storing the computer program is located outside the processing device, and the processor is connected to the memory via circuits / wires to read and execute the computer program stored in the memory. The memory and processor may be integrated or physically separate.

[0244] Optionally, the processing device may be one or more chips, or one or more integrated circuits. For example, the processing device may be one or more field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), system-on-chips (SoCs), central processor units (CPUs), network processors (NPs), digital signal processors (DSPs), microcontroller units (MCUs), programmable logic devices (PLDs), or other integrated chips, or any combination of the above chips or processors.

[0245] Please refer to FIG. 12 , which shows an apparatus 1200 involved in the above embodiments provided in an embodiment of the present application. Specifically, the apparatus 1200 may be the first device in the above embodiments.

[0246] Herein, a possible logical structure diagram of the device 1200 is shown. The device 1200 may include but is not limited to at least one processor 1201 and a communication port 1202 .

[0247] Further optionally, the device may also include at least one of a memory 1203 and a bus 1204. In an embodiment of the present application, the at least one processor 1201 is used to control and process the actions of the device 1200.

[0248] In addition, the processor 1201 can be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. It can implement or execute the various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of this application. The processor can also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a digital signal processor and a microprocessor, and so on. Those skilled in the art will clearly understand that for the sake of convenience and brevity of description, the specific working processes of the systems, devices, and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0249] It should be noted that the device 1200 shown in Figure 12 can be specifically used to implement the steps implemented by any device (for example, the first device) in the aforementioned method embodiments, and to achieve the technical effects corresponding to any device. The specific implementation methods of the device shown in Figure 12 can refer to the description in the aforementioned method embodiments, and will not be repeated here one by one.

[0250] An embodiment of the present application further provides a computer-readable storage medium. When the computer execution instruction is executed by a processor, the processor executes the method described in the possible implementation manner of any device (e.g., the first device) in the aforementioned method embodiment.

[0251] An embodiment of the present application also provides a computer program product (or computer program). When the computer program product is executed by the processor, the processor executes a method that may be implemented by any device (such as the first device) in the above method embodiment.

[0252] An embodiment of the present application also provides a chip system, which includes at least one processor for implementing the functions involved in the possible implementation methods of any device (such as the first device) in the above method embodiment.

[0253] Optionally, the chip system further includes an interface circuit that provides program instructions and / or data to the at least one processor. In one possible design, the chip system may further include a memory for storing program instructions and data necessary for the terminal device. The chip system may be composed of a chip alone or may include a chip and other discrete components.

[0254] In one possible design, the chip system may further include a memory for storing the necessary program instructions and data of any device in the above method embodiment. The chip system may be composed of a chip or may include a chip and other discrete devices.

[0255] An embodiment of the present application also provides a system, which includes the first device in any of the above embodiments and a possible second device.

[0256] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are schematic. For example, the division of the units is a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0257] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0258] In addition, the functional units in the various embodiments of the present application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of a software functional unit. If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the part that essentially contributes to the technical solution of the present application or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in the various embodiments of the present application. The aforementioned storage medium includes various media that can store program code, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0259] The above description is merely a specific implementation of the embodiments of the present application, but the scope of protection of the embodiments of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in the embodiments of the present application should be included in the scope of protection of the embodiments of the present application. Therefore, the scope of protection of the embodiments of the present application should be based on the scope of protection of the claims.

Claims

1. An information processing method, characterized in that: include: The first device acquires first information and second information, the first information indicating an evaluation rule of whether information to be proved of the first entity is valid, and the second information indicating historical behavior information of the first entity associated with the information to be proved, the information to be proved including capability and / or qualification; The first device verifies the information to be verified based on the first information and the second information to obtain a verification result.

2. The method according to claim 1, characterized in that The first device acquiring the first information and the second information includes: The first device receives the first information and the second information.

3. The method according to claim 1, characterized in that The first device acquiring the first information and the second information includes: The first device receives third information, where the third information is used to indicate the information to be proved of the first entity; The first device determines the first information based on the third information, and determines the second information based on the third information.

4. The method according to claim 3, characterized in that The first device determining the first information based on the third information includes: The first device determines the first information from a first data set based on the third information, where the first data set indicates N evaluation rules for whether the information to be proved is valid, where N is a positive integer.

5. The method according to claim 4, characterized in that The first device determines the first information from the first data set based on the third information, including: The first device determines the first information from the first data set based on triple information corresponding to the information to be proved of the first entity; the triple information includes an identifier of the first entity, a relationship between the first entity and the information to be proved, and an identifier of the information to be proved; The third information includes the triple information, or the triple information is obtained by performing semantic analysis on the third information.

6. The method according to any one of claims 3 to 5, characterized in that: The first device determining the second information based on the third information includes: The first device sends request information based on the third information, where the request information is used to request historical behavior information of the first entity; The first device receives the second information; Alternatively, the first device receives historical behavior information of the first entity, and determines the second information based on the historical behavior information of the first entity.

7. The method according to any one of claims 3 to 6, characterized in that: The third information is generated based on a template provided by the alliance chain CB, or the third information is generated based on a template provided by a centralized node.

8. The method according to any one of claims 4 to 7, characterized in that: The method further comprises: The first device updates the first data set based on the verification result.

9. The method according to any one of claims 1 to 7, characterized in that: The method further comprises: The first device sends indication information indicating the verification result.

10. The method according to any one of claims 1 to 9, characterized in that: The first device verifies the information to be verified based on the first information and the second information, and obtains a verification result including: When the support degree of the first information and the second information is greater than or equal to a first threshold, the first device determines that the verification result is verification passed; and / or, When the support degree of the first information and the second information is less than or equal to a second threshold, the first device determines that the verification result is verification failure.

11. An information processing device, characterized in that: It includes an acquisition unit and a verification unit; The acquisition unit is used to acquire first information and second information, the first information indicating an evaluation rule of whether the information to be proved of the first entity is valid, and the second information indicating historical behavior information of the first entity associated with the information to be proved, the information to be proved including capability and / or qualification; The verification unit is used to verify the information to be verified of the first entity based on the first information and the second information to obtain a verification result.

12. A device, characterized in that: The device comprises at least one processor, wherein the at least one processor is coupled to a memory; the memory is used to store programs or instructions; The at least one processor is configured to execute the program or instruction so that the apparatus implements the method according to any one of claims 1 to 10.

13. A computer-readable storage medium, characterized in that: The medium stores instructions; When the instructions are executed by a computer, the method according to any one of claims 1 to 10 is implemented.

14. A computer program product, characterized in that The computer program product comprises computer instructions; When part or all of the computer instructions are executed on a computer, the method according to any one of claims 1 to 10 is executed.

15. A chip, characterized in that: The chip includes a processor and a communication interface; The communication interface is coupled to the processor, and the processor is used to run a computer program or instruction to implement the method as claimed in any one of claims 1 to 10.

Images