Secure Data Intersection via Ciphertext Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for determining common service data between multiple participants in a horizontal alliance face security issues due to potential data leakage and low efficiency, as they require intercommunication of all service data and often involve adding forged data to improve security, which complicates the intersection process and limits flexibility in determining common data across various participant combinations.
Innovation Solution
A data processing method where participating member nodes encrypt their service data using a shared encryption key array, allowing a central node to compare ciphertext data to determine common service data without decrypting it, thus ensuring security and improving efficiency by avoiding data intercommunication and the need for forged data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If plaintext service data is directly communicated between participants for common data determination, then data processing efficiency is improved, but data security deteriorates due to potential data leakage
Solution Approach 1:
A central node acts as an intermediary to receive ciphertext data sets from multiple participating member nodes, perform data comparison operations on the ciphertext data, and return comparison results. This mediator approach enables secure common data determination without direct plaintext communication between participants, resolving the contradiction between efficiency and security.
Solution Approach 2:
The patent changes the state of data from plaintext to ciphertext form during transmission and processing. By encrypting service data before submission and performing comparisons on encrypted data, the system maintains data security while enabling efficient processing. The ciphertext form serves as a transformed parameter that preserves comparability while preventing data leakage.
2Reliability
If forged data is added to improve security in data intersection, then data security is improved, but device complexity increases due to complicated intersection processes
Solution Approach 1:
The patent extracts and removes the security vulnerability element (need for forged data) from the system. By performing data comparison directly on ciphertext without requiring forged data injection, the system achieves security without the additional complexity of generating and managing fake data, thus simplifying the overall process while maintaining security.
3Measurement precision
If all service data is intercommunicated between participants, then common data determination accuracy is improved, but loss of time increases due to extensive data exchange
Solution Approach 1:
The patent extracts only the necessary data elements for comparison in ciphertext form from the complete service data sets. Participants submit ciphertext data sets containing only the relevant service data needed for common data determination, avoiding the time-consuming exchange of all service data while maintaining determination accuracy through targeted ciphertext comparison.
Data Source
AI summary
Embodiments of the present application provide a data processing method and apparatus, an electronic device, and a storage medium. The data processing method, applied to a first participating node, includes: encrypting plaintext service data based on an encryption key array to obtain a ciphertext data set, where the ciphertext data set includes ciphertext service data, and different participating member nodes use a same encryption key array; sending the ciphertext data set to a central node; and acquiring a data comparison result generated by the central node, where the data comparison result is obtained by performing data comparison based on ciphertext service data in ciphertext data sets of the participating member nodes.