Trusted Application Data Processing for Privacy Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face inconvenience and privacy risks when obtaining trusted data from authorities, as they need to repeatedly request sealed data, leading to potential leakage of original data.
Innovation Solution
A data processing method using a trusted application (TAPP) determined from decentralized identifier document (DID Doc) information, which processes data from trusted institutions to generate trusted target data, ensuring high trustworthiness and protecting privacy by preventing access to original data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users repeatedly request sealed data from authorities to present to other users, then the trustworthiness of the data is ensured, but the convenience of data usage deteriorates and privacy leakage risk increases
Solution Approach 1:
The system performs preliminary actions by having authorities seal data with their official seals in advance and store it in the trusted data storage area of the user's terminal. This eliminates the need for users to repeatedly request sealed data from authorities, improving convenience while maintaining trustworthiness through pre-established seals.
Solution Approach 2:
The system creates copies of sealed data from authorities and stores them locally in the trusted data storage area. Users can present these local copies without repeatedly contacting authorities, improving ease of operation while the seal mechanism ensures the copied data remains trustworthy and unalterable.
2Reliability
If users repeatedly request sealed data from authorities, then data trustworthiness is maintained, but privacy protection deteriorates due to potential leakage of original data
Solution Approach 1:
The system extracts only the essential sealed data from authorities and stores it locally in the trusted data storage area, eliminating the need for users to handle or repeatedly request original unsealed data. This extraction approach maintains trustworthiness through seals while reducing privacy leakage risk by minimizing exposure of original data.
Solution Approach 2:
The terminal's trusted data storage area acts as an intermediary between authorities and users. It stores pre-sealed data from authorities and provides it to users without requiring users to directly interact with authorities or handle original unsealed data, thereby protecting user privacy while maintaining data trustworthiness.
3Adaptability or versatility
If original data is accessed to generate target data, then data processing flexibility is improved, but privacy protection deteriorates
Solution Approach 1:
The TAPP acts as an intermediary that processes data within the trusted execution environment. It can generate target data from original data without exposing the original data to external parties, maintaining processing flexibility while protecting privacy through the TEE's isolation and security mechanisms.
Solution Approach 2:
The system segments the data processing function into a separate trusted execution environment with the TAPP. The TAPP has access to original data for processing, but the results (target data) are what leave the TEE, not the original data. This segmentation allows flexible processing while protecting privacy through architectural isolation.
Data Source
Figure 1~2
Figure 3~4
AI summary
Embodiments of the present specification disclose a data processing method, apparatus, and device. The method can include the following: when an acquisition request for target data of a data owner is obtained, determining a trusted application (TAPP) for generating the target data based on decentralized identifier document (DID Doc) information of the data owner stored in a blockchain network; and sending a target data generation request to the determined TAPP, so that the determined TAPP can process data of the data owner obtained from a trusted institution to obtain trusted target data.