Cloud-Edge Feature Matching for Secure Sensitive Data Recognition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud-edge interaction systems face challenges in securely processing and transmitting sensitive information, such as face images, due to the risk of leakage and untrustworthiness of edge devices.
Innovation Solution
Introduce a security enhancement module that stores local feature libraries and performs initial comparisons locally, sending encrypted data to the cloud platform only when no match is found, using key negotiation and encryption to ensure secure data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If sensitive information is transmitted in plaintext between edge devices and cloud platform, then data processing efficiency is improved, but data security deteriorates
Solution Approach 1:
The patent introduces a security enhancement module as an intermediary component between the edge device and cloud platform. This module performs local feature extraction and comparison, acting as a mediator that prevents raw sensitive data from being transmitted to the cloud. Only non-sensitive feature information is sent to the cloud platform, while the security module handles encryption and decryption operations locally, thus resolving the contradiction between transmission efficiency and data security.
Solution Approach 2:
The system segments the data processing function into two parts: sensitive feature extraction performed locally by the security enhancement module, and non-sensitive comparison operations performed by the cloud platform. This segmentation allows the system to maintain high processing efficiency at the cloud while protecting sensitive data locally, resolving the contradiction between centralized processing efficiency and data security.
2Device complexity
If all data is processed and stored in the cloud platform, then system complexity is reduced, but security reliability deteriorates
Solution Approach 1:
The patent adds a new dimension to the cloud-edge architecture by introducing a dedicated security enhancement module layer. This creates a three-layer structure (edge device, security module, cloud platform) instead of the traditional two-layer structure. The security module handles cryptographic operations and sensitive data management, allowing the cloud platform to focus on storage and computation without directly handling sensitive data, thus improving security reliability without significantly increasing overall system complexity.
3Object-affected harmful factors
If local feature library comparison is performed, then data transmission security is improved, but device complexity increases
Solution Approach 1:
The security enhancement module implements self-service functionality by autonomously performing feature extraction, local comparison against the feature library, and encryption/decryption operations. The module independently determines whether cloud platform assistance is needed based on comparison results, reducing the need for complex coordination protocols and minimizing the burden on the edge device while maintaining high security standards.
Data Source
AI summary
A cloud-edge collaboration method is provided, a data transmission apparatus, a cloud platform, an edge device, a cloud-edge collaboration system, an electric device, and a computer readable medium. The cloud-edge collaboration method includes: receiving first information sent by an edge device, the first information at least comprising image feature information of an image to be recognized; determining whether a local feature library comprises reference feature information matching the image feature information; if the local feature library includes reference feature information matching the image feature information, generating a first determination result, and sending the first determination result to the edge device.