CN112100689B - Trusted data processing method, device and equipment - Google Patents

Abstract

The embodiments of this specification disclose a trusted data processing method, apparatus, and device. The solution may include: using a trusted data processing application to collect target data from a target client where the data provider is a user according to data demand information, and using a trusted data processing application to generate a trusted identifier for the encrypted target data, so as to The trusted encrypted data carrying the trusted identifier is obtained.

Description

A trusted data processing method, device and device

technical field

The present application relates to the field of Internet technologies, and in particular, to a trusted data processing method, apparatus, and device.

Background technique

The data provider usually needs to ensure the credibility of the data it provides to the data demander, and the data demander also needs to verify the credibility of the data obtained from the data provider. At present, data providers usually need to show their personal identification information to the authority, so that after the authority has passed the identity verification of the data provider based on the personal identification information, the authority can feed back to the data provider the stamping that it needs to use. data on the official seal of the authority. The data provider can send the data stamped with the official seal of the authority to the data demander as trusted data. The data demander can also carry the received data stamped with the official seal of the authority to the authority to verify the credibility of the data received by the data demander.

Based on this, how to provide a more convenient processing method for trusted data has become an urgent problem to be solved.

SUMMARY OF THE INVENTION

The embodiments of this specification provide a trusted data processing method, apparatus and device, so as to improve the operational convenience when a user acquires and verifies trusted data.

In order to solve the above-mentioned technical problems, the embodiments of this specification are implemented as follows:

A trusted data processing method provided by the embodiments of this specification, applied to trusted data processing applications, includes:

Obtaining data requirement information; the data requirement information is used to request to obtain the target data of the data provider;

Acquire the target data according to the data requirement information; the target data is the data collected by the trusted data processing application from the target client where the data provider is the user;

Encrypting the target data to obtain encrypted target data;

A trusted identifier is generated for the encrypted target data to obtain trusted encrypted data, where the trusted encrypted data is the encrypted target data carrying the trusted identifier.

A method for obtaining trusted data provided by the embodiments of this specification includes:

Obtain the operation information of the data demander;

generating a target data acquisition request according to the operation information, where the target data acquisition request is used for requesting acquisition of the target data of the data provider;

sending the target data acquisition request;

Receive trusted encrypted data fed back by the data provider; the trusted encrypted data is encrypted target data with a trusted identifier generated by a trusted data processing application of the data provider; the encrypted target data is the The ciphertext data obtained by encrypting the target data collected from the target client of which the data provider is the user by the trusted data processing application.

A trusted data processing device provided by the embodiments of this specification, applied to trusted data processing applications, includes:

a first acquisition module, used for acquiring data requirement information; the data requirement information is used for requesting acquisition of target data of the data provider;

a second obtaining module, configured to obtain the target data according to the data requirement information; the target data is the data collected by the trusted data processing application from the target client where the data provider is the user;

an encryption module for performing encryption processing on the target data to obtain encrypted target data;

A trusted encrypted data generation module, configured to generate a trusted identifier for the encrypted target data to obtain trusted encrypted data, where the trusted encrypted data is the encrypted target data carrying the trusted identifier.

A device for obtaining trusted data provided by the embodiments of this specification includes:

The acquisition module is used to acquire the operation information of the data demander;

an acquisition request generation module, configured to generate a target data acquisition request according to the operation information, and the target data acquisition request is used to request to acquire the target data of the data provider;

a sending module, configured to send the target data acquisition request;

a receiving module, configured to receive trusted encrypted data fed back by the data provider; the trusted encrypted data is encrypted target data carrying a trusted identifier generated by a trusted data processing application of the data provider; the encrypted data The target data is ciphertext data obtained by the trusted data processing application performing encryption processing on the target data collected from the target client where the data provider is the user.

A trusted data processing device provided by an embodiment of this specification includes:

at least one processor; and,

a memory communicatively coupled to the at least one processor; wherein,

The memory stores instructions executable by the at least one processor, the instructions being instructions at a trusted data processing application, the instructions being executed by the at least one processor to cause the at least one processor were able:

Obtaining data requirement information; the data requirement information is used to request to obtain the target data of the data provider;

Acquire the target data according to the data requirement information; the target data is the data collected by the trusted data processing application from the target client where the data provider is the user;

Encrypting the target data to obtain encrypted target data;

A trusted identifier is generated for the encrypted target data to obtain trusted encrypted data, where the trusted encrypted data is the encrypted target data carrying the trusted identifier.

A trusted data acquisition device provided by the embodiments of this specification includes:

at least one processor; and,

a memory communicatively coupled to the at least one processor; wherein,

The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:

Obtain the operation information of the data demander;

generating a target data acquisition request according to the operation information, where the target data acquisition request is used for requesting acquisition of the target data of the data provider;

sending the target data acquisition request;

Receive trusted encrypted data fed back by the data provider; the trusted encrypted data is encrypted target data with a trusted identifier generated by a trusted data processing application of the data provider; the encrypted target data is the The ciphertext data obtained by encrypting the target data collected from the target client of which the data provider is the user by the trusted data processing application.

At least one embodiment provided in this specification can achieve the following beneficial effects:

The trusted data processing application can collect target data from the target client where the data provider is the user according to the data requirement information, so as to ensure the reliability of the collected target data. The trusted data processing application may also generate a trusted identifier for the encrypted target data, so as to obtain trusted encrypted data carrying the trusted identifier. This solution enables the data provider to conveniently generate trusted encrypted data with high reliability through the trusted data processing application, so as to simplify the process for the data provider to obtain the trusted encrypted data. In addition, since the generated trusted encrypted data is ciphertext data, the leakage of the user's original data caused by the use of the trusted encrypted data can be avoided, which is beneficial to improve the data security and privacy of the data provider.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present specification or the prior art, the following briefly introduces the accompanying drawings required in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments described in this application. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

1 is a schematic flowchart of a trusted data processing method provided by an embodiment of the present specification;

2 is a schematic flowchart of a method for obtaining trusted data according to an embodiment of the present specification;

FIG. 3 is a schematic structural diagram of a trusted data processing apparatus corresponding to FIG. 1 provided by an embodiment of the present specification;

FIG. 4 is a schematic structural diagram of an apparatus for obtaining trusted data corresponding to FIG. 2 according to an embodiment of the present specification;

FIG. 5 is a schematic structural diagram of a trusted data processing device corresponding to FIG. 1 provided by an embodiment of the present specification;

FIG. 6 is a schematic structural diagram of a trusted data acquisition device corresponding to FIG. 2 according to an embodiment of the present specification.

Detailed ways

In order to make the objectives, technical solutions and advantages of one or more embodiments of this specification clearer, the technical solutions of one or more embodiments of this specification will be clearly and completely described below with reference to the specific embodiments of this specification and the corresponding drawings. . Obviously, the described embodiments are only some of the embodiments of the present specification, but not all of the embodiments. All other embodiments obtained by persons of ordinary skill in the art based on the embodiments in the present specification without creative efforts fall within the protection scope of one or more embodiments of the present specification.

The technical solutions provided by the embodiments of the present specification will be described in detail below with reference to the accompanying drawings.

In the prior art, the data provider usually needs to provide the data demander with the data required by the data demander, and verify the credibility of the data provided by the data demander, and enable the data demander to verify the data provided by the data provider. reliability of the data. Therefore, the data provider usually obtains the data affixed with the official seal of the authoritative organization, and feeds the data affixed with the official seal of the authoritative organization to the data demander as trusted data. The data demander needs to feed back the obtained data with the official seal of the authority to the authority for credibility verification. It can be seen that this trusted data processing method is less convenient to use.

In order to solve the defects in the prior art, this scheme provides the following examples:

FIG. 1 is a schematic flowchart of a trusted data processing method according to an embodiment of the present specification. From a program perspective, the execution subject of the process may be a trusted data processing application of the data provider, or a device equipped with the trusted data processing application.

As shown in Figure 1, the process can include the following steps:

Step 102: Acquire data requirement information; the data requirement information is used for requesting acquisition of target data of the data provider.

In the embodiment of this specification, the trusted data processing application of the data provider can obtain the data requirement information for the target data of the data provider. In practical applications, the data demand information may be generated according to the data acquisition demand of the data demander, may also be generated according to the data acquisition demand of the data provider, or may be generated by a trusted data processing application according to a predetermined It is self-generated by setting data collection rules, and there is no specific limitation on this.

Step 104: Acquire the target data according to the data requirement information; the target data is the data collected by the trusted data processing application from the target client of which the data provider is the user.

In the embodiment of this specification, the device of the data provider is usually equipped with a trusted data processing application and a target client. Since the data requirement information can indicate that the information source of the target data is the target client, the trusted data processing application is The target data can be obtained from the target client used by the data provider according to the data requirement information.

Specifically, step 104: the acquiring the target data according to the data requirement information may include: the trusted data processing application, according to the data requirement information, from the data provider in the process of using the target client In the generated data, the target data is collected.

In the embodiment of this specification, the data generated in the process of using the target client by the data provider may include: data input by the data provider on the application interface of the target client, data displayed on the application interface of the target client, and data provided by the data provider The data downloaded from the target client to the local, etc., are not specifically limited.

Step 106: Encrypt the target data to obtain encrypted target data.

In the embodiment of the present specification, the existing encryption processing method may be used to perform encryption processing on the target data collected by the trusted data processing application, so as to obtain the encrypted target data, which will not be repeated.

Step 108: Generate a trusted identifier for the encrypted target data to obtain trusted encrypted data, where the trusted encrypted data is the encrypted target data carrying the trusted identifier.

In the embodiment of this specification, the trusted data processing application may also generate a trusted identifier for the encrypted target data, so as to obtain the encrypted target data carrying the trusted identifier. The trusted identifier may carry data source information and collection time information of the encrypted target data, and the trusted identifier may also indicate that the encrypted target data is trusted data, that is, the trusted identifier may also indicate that the encrypted target data is trusted data. The encrypted target data is true and complete and has not been tampered with. Therefore, after receiving the encrypted target data carrying the trusted identifier, the data demander can know that the encrypted target data is the trusted data collected from the target client at x, x, x, x, year.

In the method shown in FIG. 1, the trusted data processing application can automatically generate trusted encrypted data with high reliability based on the operations performed by the data provider using the target client normally, without the need for the data provider to perform additional trusted operations. The data collection operation can simplify the operation process for the data provider to obtain trusted data, which is beneficial to improve the convenience of using the trusted data collection scheme. And since the trusted encrypted data generated by the trusted data processing application is ciphertext data, the leakage of the user's original data caused by the use of the trusted encrypted data can be avoided, so as to improve the data security and privacy of the data provider. And because the data demander receives the trusted encrypted data carrying the trusted identifier, the data demander can conveniently determine the credibility of the trusted encrypted data according to the trusted identifier.

Based on the method in FIG. 1 , the examples of this specification also provide some specific implementations of the method, which will be described below.

Step 102: Acquire data requirement information, which may specifically include:

Obtain the target data obtaining request sent by the data demander through the first blockchain network, where the target data obtaining request is used to request to obtain the target data of the data provider.

In the embodiments of this specification, the data provider and the data demander can perform data flow based on the blockchain technology. Block chain can be understood as a data chain composed of sequential storage of multiple blocks. The block header of each block contains the timestamp of this block, the hash value of the previous block information and The hash value of this block information, thereby realizing the mutual verification between blocks and forming an immutable blockchain. Each block can be understood as a data block (unit of storing data). As a decentralized database, blockchain is a series of data blocks that are correlated with each other using cryptographic methods. Each data block contains the information of a network transaction, which is used to verify the validity of its information (anti-counterfeiting). and generate the next block. A chain formed by connecting blocks end-to-end is called a blockchain. If you need to modify the data in the block, you need to modify the content of all blocks after this block, and modify the data backed up by all nodes in the blockchain network. Therefore, the blockchain has the characteristics of being difficult to tamper and delete. After the data has been saved to the blockchain, it is reliable as a method to maintain the integrity of the content.

In the embodiment of this specification, a distributed digital identity service can be provided through a blockchain platform, so that the data provider and the data demander can transfer data based on their respective distributed digital identities. In practical applications, both the data provider and the data demander can request a distributed identity server (Decentralized Identity Service, DIS) to create personal distributed digital identities (Decentralized Identitfiers, DID). Among them, DIS is a blockchain-based identity management solution. The DIS server can be connected to the blockchain platform and provide functions such as creation, verification and management of digital identities, so as to achieve standardized management and protection of entity data, while ensuring The authenticity and efficiency of information flow, and can solve problems such as cross-organization identity authentication and data cooperation.

In the embodiment of this specification, both the data demander and the data provider may pre-register a personal DID to realize data flow based on the personal DID. Specifically, the data demander may generate a target data acquisition request based on the data demander DID, and the target data acquisition request may represent the target data of the user corresponding to the data provider DID requested by the user corresponding to the data demander DID.

In the embodiment of this specification, the trusted data processing application of the data provider can be connected to the first blockchain network in communication, so that the data provider can receive the data requester's request for the data provider through the trusted data processing application. DID's target data acquisition request. The data provider can also perform authorization management on the target data acquisition request sent by the data demander through the trusted data processing application. For example, the data provider can generate an authorization instruction by operating the trusted data processing application, thereby indicating that the data demander is allowed to obtain it. to the target data; or, the data provider can also generate a refusal authorization instruction by operating a trusted data processing application, thereby instructing the refusal data demander to obtain the target data; so that the data provider can use the trusted data processing application to verify the target data. Convenient authorized management of personal data.

Correspondingly, the trusted data processing application may obtain the target data according to the data requirement information after obtaining the authorization instruction for the target data obtaining request from the data provider. However, if the trusted data processing application obtains the refusal authorization instruction for the target data obtaining request from the data provider, the trusted data processing application may skip to the step of obtaining the target data and jump to End step.

Of course, the data provider can also log in to the device with a personal blockchain account to perform authorization management on the target data acquisition request sent by the data demander, and the trusted data processing application can communicate with the device. After receiving the authorization instruction sent by the device, the trusted data processing application obtains the target data according to the data requirement information. So that the data provider can control the use rights of personal data.

Alternatively, the data demander can also send the target data acquisition request to the trusted data processing application of the data provider through an off-chain method (that is, a method that does not use blockchain technology), which is not specifically limited.

In the embodiments of this specification, in order to ensure the security and traceability of the data transmission process, a blockchain network can be used to transmit the data of the data provider to the data demander.

Therefore, step 108: generating a trusted identifier for the encrypted target data, and after obtaining the trusted encrypted data, it may further include: the trusted data processing application sends the trusted encrypted data to the data through the second blockchain network demand side.

In the embodiment of this specification, the second blockchain network and the aforementioned first blockchain network may be the same blockchain network or different blockchain networks, which are not specifically limited.

Of course, the trusted data processing application can also send the trusted encrypted data to the data demander in an off-chain manner. Since the trusted encrypted data is ciphertext data, the trusted encrypted data is encrypted using various transmission methods. When data is transmitted, the security and privacy of the original data of the data provider can be protected.

In the embodiment of this specification, the data demander may need to acquire target data from the data provider, so as to execute a specified service based on the acquired target data. For example, when the data provider needs to handle financial services at the data demander, the data demander may need to obtain the bank flow data of the data provider. Or, when the data provider needs to obtain promotion services from the data demander, the data demander may need to obtain the customer order data of the data provider on the designated business platform. Or, when the data demander needs to complete the demand for passenger flow data analysis in the business platform, the data demander may need to obtain the passenger flow data of the data provider in various time periods on the business platform.

It can be seen that for different data requirements, the data sources of the target data collected by the trusted data processing application are not completely consistent. Based on this, the target data acquisition request sent by the data demander may also indicate that the data source of the target data is the target application client, that is, the data demand information may indicate that the data source of the target data of the data provider should be the target client.

In practical applications, there may be various types of target clients, for example, business application clients, search engine clients, instant messaging application clients, network media application clients, and the like. The above-mentioned various target clients can be realized either through WEB technology (WEB Technology) or through application software (Application) technology.

When the target client is a target webpage client implemented based on Web technology, the trusted data processing application may be an available plug-in (Plug-in, also known as add-in, or add-in) loaded at the target webpage client on).

The collecting of the target data from the data generated in the process of using the target client by the data provider may specifically include the following multiple implementation manners.

Implementation method one

The trusted data processing application may collect the target data from the web page data browsed by the data provider at the target web page client.

In the embodiment of this specification, after starting the target web client, the data provider may automatically run an available plug-in (for example, a trusted data processing application) of the target web client. This enables the trusted data processing application to collect the target data from the web page data browsed by the data provider during the process that the data provider normally uses the target web client to browse web page data.

Specifically, a communication agreement can be signed in advance between the trusted data processing application and the target webpage client, so that the trusted data processing application can obtain all the webpage data displayed on the current page of the target webpage client, so that the trusted data processing application can obtain all webpage data displayed on the current page of the target webpage client, so that the trusted data processing application can obtain all webpage data displayed on the current page of the target webpage client. information, and extract the target data from all the webpage data displayed on the current page of the target webpage client.

Implementation method two

The trusted data processing application may collect the target data from the webpage data downloaded by the data provider at the target webpage client.

In the embodiment of this specification, based on the same principle as the first implementation, the trusted data processing application can download the webpage data from the data provider to the local computer after the data provider normally uses the target webpage client to download the webpage data. The target data is collected from webpage data.

In implementation mode 1 and implementation mode 2, when the trusted data processing application collects target data, it can be non-perceptual collection for the data provider, that is, the data provider only needs to follow the existing operation regulations of the target webpage client. It is sufficient to perform operations such as browsing and data downloading on the target webpage client, without the need for the data provider to perform additional specified operations to collect trusted data, thereby improving the operational convenience for the data provider to obtain trusted data.

Moreover, the trusted data processing application can obtain trusted data by interacting with the target client, without requiring the trusted data processing application to communicate with the server of the target client, which not only reduces the need for data collection The device resources that need to be consumed when the trusted data is used can also reduce the steps that the server of the target client needs to perform, so that the trusted data acquisition process can be simplified.

In the embodiment of this specification, the target data may be personal business data of the data provider, for example, bank flow data, business order data, etc. Therefore, the data provider needs to log in the individual's registered account at the target webpage client Only then can the target data be browsed or downloaded from the target webpage client. It can be seen that the target data may be user service data that has a corresponding relationship with the registered account logged in by the data provider at the target client.

Alternatively, the target data can also be public data that the data provider has the right to browse or download, such as news information, user blogs, etc. In this case, the data provider can access the data from the data provider without logging in to the individual's registered account. When browsing or downloading the target data at the target webpage client, it can be seen that the target data may also be data that does not have a corresponding relationship with the registered account logged in by the data provider at the target client.

In practical applications, the target data may have various types, for example, at least one of a specified field in the web page data, a specified picture in the web page data, and a specified multimedia file in the web page data, which are not specifically limited .

When the target client is a target APP client implemented based on application software (Application) technology, the trusted data processing application may be an available software development kit (Software Development Kit, SDK) loaded on the target APP client or Another APP application client communicatively connected to the target APP client.

Correspondingly, when the data provider starts the target APP client, it can automatically run the available software development kit (for example, a trusted data processing application) loaded at the target APP client; or, a trusted data processing application It can monitor whether the target APP client is in the running state; so that the trusted data processing application can go to the data displayed from the application interface of the target APP client during the normal use of the target APP client by the data provider, Or, the data provider collects the target data from the data downloaded from the target APP client.

In the embodiment of this specification, after collecting the target data, the trusted data processing application may also generate trusted encrypted data according to the target data. Because different data demanders may have acquisition requirements for the same target data, or the trusted data processing application may need to send the target data to the data demander after a specified period of time. Therefore, the trusted data processing application can store the generated trusted encrypted data to facilitate subsequent operations.

Therefore, step 108: generating a trusted identifier for the encrypted target data, and after obtaining the trusted encrypted data, the method may further include: storing the trusted encrypted data in trusted hardware.

Among them, trusted hardware is one of the important foundations of trusted computing. Based on trusted hardware, a trusted execution environment (Trusted Execution Environments) can be built on the hardware device to protect the program code and data in the trusted hardware from being compromised. disclosed and modified, thereby protecting the privacy and security of data in trusted hardware. There are many types of trusted hardware, for example, Intel's SGX, ARM Trust Zone and other trusted chips. In the embodiments of the present specification, the specific model used by the trusted hardware is not specifically limited.

In practical applications, the trusted hardware may be trusted hardware connected to a device equipped with the trusted data processing application; that is, when trusted hardware is mounted on the device of the data provider, the trusted data processing application The trusted encrypted data may be stored in trusted hardware at the data provider's device.

Alternatively, the trusted hardware may also be trusted hardware connected to the target server. The target server may be a cloud server communicatively connected to the trusted data processing application. The data provider may request permission to use the trusted hardware from the cloud server in advance, so that the data provider can store the trusted encrypted data in a location other than the data provider's device through the trusted data processing application. In the information hardware, in order to reduce the configuration requirements for the data provider's equipment.

In the embodiment of this specification, since the trusted data processing application can pre-store part of the trusted data of the data provider in the trusted hardware, the trusted data processing application The target data is acquired from the stored data without acquiring the target data based on the data generated by the data provider's current operation on the target client, which is beneficial to improve the real-time performance of the target data collection.

In the embodiment of this specification, after obtaining the trusted encrypted data, the data demander may need to verify the credibility of the trusted encrypted data. Therefore, step 108: Generate a trusted identifier for the encrypted target data , and after obtaining the trusted encrypted data, the method may further include: storing the trusted encrypted data in a third blockchain network.

The third blockchain network, the first blockchain network and the second blockchain network may be the same blockchain network or different blockchain networks, which are not specifically limited.

In the embodiment of this specification, the trusted encrypted data stored in the third blockchain network can be used as the reference data, and the trusted encrypted data obtained by the data demander can be compared for consistency, so as to complete the data demand Credibility verification of trusted encrypted data obtained by the party.

FIG. 2 is a schematic flowchart of a method for obtaining trusted data according to an embodiment of the present specification. From a program point of view, the execution body of the method can be the device of the data demander.

As shown in Figure 2, the process can include the following steps:

Step 202: Obtain the operation information of the data demander.

Step 204: Generate a target data acquisition request according to the operation information, where the target data acquisition request is used for requesting acquisition of the target data of the data provider.

In the embodiment of this specification, the data demander may request to acquire target data based on the blockchain technology. Then the data demander can perform a trigger operation on the blockchain application on the data demander's device to generate a target data acquisition request for obtaining the target data of the data provider. Alternatively, the data demander can also request the acquisition of target data based on technologies other than the blockchain, and the data demander can perform a trigger operation on the non-blockchain application on the data demander's device to generate a request for The target data acquisition request for acquiring the target data of the data provider, which is not specifically limited.

Step 206: Send the target data acquisition request.

In the embodiment of this specification, the data demander can either send the target data acquisition request to the data provider through the first blockchain network, or send the target data acquisition request to the data provider through off-chain transmission. There is no specific limitation on this, as long as the trusted data processing application of the data provider can obtain the target data acquisition request.

Step 208: Receive trusted encrypted data fed back by the data provider; the trusted encrypted data is encrypted target data with a trusted identifier generated by a trusted data processing application of the data provider; the encrypted target data It is ciphertext data obtained by the trusted data processing application encrypting the target data collected from the target client where the data provider is the user.

In the embodiment of this specification, the data provider may use the method shown in FIG. 1 to generate trusted encrypted data that is fed back to the data demander, and the generation process of the trusted encrypted data will not be repeated.

In practical applications, in order to improve the security and traceability of data transmission, the trusted encrypted data may be transmitted by means of on-chain data transmission, so step 208 may specifically include: receiving the data provider through the second blockchain network Feedback trusted encrypted data. Of course, the data demander can also receive the trusted encrypted data fed back by the data provider based on the off-chain data transmission method, which is not specifically limited.

In the method described in FIG. 2 , since the trusted encrypted data fed back by the data provider is the encrypted target data with the trusted identifier generated by the trusted data processing application of the data provider, the data demander can obtain the data that can be After the encrypted data is trusted, it can be determined based on the trusted identifier carried by the trusted encrypted data that the reliability of the trusted encrypted data is high, which is beneficial to improve the reliability of the data demander's verification operation on the reliability of the data obtained from the data provider. Convenience.

In the embodiment of this specification, the data demander may have a requirement to further verify the credibility of the obtained trusted encrypted data in addition to verifying the credibility of the obtained trusted encrypted data according to the trusted identifier.

Therefore, step 208: after receiving the trusted encrypted data fed back by the data provider, it may further include: using the trusted data processing application of the data demander to perform trusted verification on the trusted encrypted data, and obtain the verification result.

Specifically, the data demander can use the trusted data processing application of the data demander to obtain benchmark data from the third blockchain network; the benchmark data is sent by the trusted data processing application of the data provider to The ciphertext data carrying the trusted identifier stored in the third blockchain network.

Consistency verification is performed on the reference data and the trusted encrypted data. If the reference data is consistent with the trusted encrypted data, the trusted encrypted data received by the data demander can be generated to indicate that the trusted encrypted data is trusted and not If the reference data is inconsistent with the trusted encrypted data, a verification result indicating that the trusted encrypted data received by the data demander is untrustworthy and has a risk of being tampered can be generated.

In the embodiment of this specification, since the ciphertext data carrying the trusted identifier stored in the third blockchain network is generated by the trusted data processing application of the data provider and stored in the third blockchain network , therefore, the data carrying the trusted identifier stored in the third blockchain network is trusted data and can be used as reference data. And because the data carrying the trusted identifier stored in the third blockchain network is ciphertext data, the security and privacy of the original data of the data provider can be guaranteed.

Based on the same idea, the embodiments of the present specification also provide a device corresponding to the method in FIG. 1 . FIG. 3 is a schematic structural diagram of a trusted data processing apparatus corresponding to the method in FIG. 1 according to an embodiment of the present specification, and the apparatus can be applied to trusted data processing applications.

As shown in Figure 3, the device may include:

The first obtaining module 302 is configured to obtain data requirement information; the data requirement information is used to request to obtain target data of the data provider.

The second obtaining module 304 is configured to obtain the target data according to the data requirement information; the target data is the data collected by the trusted data processing application from the target client of which the data provider is the user.

The encryption module 306 is configured to perform encryption processing on the target data to obtain encrypted target data.

The trusted encrypted data generation module 308 is configured to generate a trusted identifier for the encrypted target data to obtain trusted encrypted data, where the trusted encrypted data is the encrypted target data carrying the trusted identifier.

In the embodiment of this specification, the second obtaining module 304 may be specifically used for:

The trusted data processing application collects the target data from the data generated in the process of using the target client by the data provider according to the data requirement information.

In the embodiment of this specification, the target client may include a target web client; the trusted data processing application may be an available plug-in loaded at the target web client.

The second acquisition module may specifically include:

a first collection module, configured to collect the target data from the webpage data browsed by the data provider at the target webpage client; and/or, a second collection module, used to collect the target data from the data provider The target data is collected from the webpage data downloaded at the target webpage client.

The target data may be user service data that has a corresponding relationship with a registered account logged in by the data provider at the target client. The target data may include: at least one of a specified field in the web page data, a specified picture in the web page data, and a specified multimedia file in the web page data.

In the embodiment of this specification, the first obtaining module 302 may be specifically used for:

Obtain the target data obtaining request sent by the data demander through the first blockchain network, where the target data obtaining request is used to request to obtain the target data of the data provider.

In the embodiment of the present specification, the apparatus described in FIG. 3 may further include:

An authorization instruction acquisition module, configured to acquire an authorization instruction from the data provider for the target data acquisition request.

In the embodiment of the present specification, the apparatus described in FIG. 3 may further include:

A sending module, configured to send the trusted encrypted data to the data demander through the second blockchain network.

In the embodiment of the present specification, the apparatus described in FIG. 3 may further include:

The first storage module is used for storing the trusted encrypted data to the third blockchain network.

In the embodiment of the present specification, the apparatus described in FIG. 3 may further include:

The second storage module is used to store the trusted encrypted data to trusted hardware; the trusted hardware is trusted hardware connected to the device equipped with the trusted data processing application; or, the trusted hardware is the trusted hardware connected to the target server.

Based on the same idea, the embodiments of the present specification also provide a device corresponding to the method in FIG. 2 . FIG. 4 is a schematic structural diagram of an apparatus for obtaining trusted data corresponding to the method in FIG. 2 according to an embodiment of the present specification.

As shown in Figure 4, the apparatus may include:

The obtaining module 402 is configured to obtain the operation information of the data demander.

The acquisition request generation module 404 is configured to generate a target data acquisition request according to the operation information, where the target data acquisition request is used for requesting acquisition of target data of a data provider.

The sending module 406 is configured to send the target data acquisition request.

A receiving module 408, configured to receive trusted encrypted data fed back by the data provider; the trusted encrypted data is encrypted target data carrying a trusted identifier generated by a trusted data processing application of the data provider; the The encrypted target data is ciphertext data obtained by the trusted data processing application performing encryption processing on the target data collected from the target client where the data provider is the user.

In the embodiment of this specification, the sending module 406 may be specifically used for:

Send the target data acquisition request to the data provider through the first blockchain network.

In the embodiment of this specification, the receiving module 408 may be specifically used for:

Receive trusted encrypted data fed back by the data provider through the second blockchain network.

In the embodiment of this specification, the apparatus described in FIG. 4 may further include:

The verification module is used to perform trusted verification on the trusted encrypted data by using the trusted data processing application of the data demander to obtain a verification result.

In the embodiment of this specification, the verification module can be specifically used for:

Use the trusted data processing application of the data demander to obtain benchmark data from the third blockchain network; the benchmark data is sent to the third blockchain by the trusted data processing application of the data provider The ciphertext data carrying the trusted identifier stored at the network.

Consistency verification is performed on the reference data and the trusted encrypted data.

Based on the same idea, the embodiments of this specification also provide a device corresponding to the above method.

FIG. 5 is a schematic structural diagram of a trusted data processing device corresponding to FIG. 1 according to an embodiment of the present specification. As shown in FIG. 5, device 500 may include:

at least one processor 510; and,

a memory 530 in communication with the at least one processor; wherein,

The memory 530 stores instructions 520 executable by the at least one processor 510, the instructions 520 are instructions at a trusted data processing application, and the instructions are executed by the at least one processor 510 to cause all The at least one processor 510 can:

Acquire data requirement information; the data requirement information is used to request to acquire target data of the data provider.

According to the data requirement information, the target data is acquired; the target data is the data collected by the trusted data processing application from the target client of which the data provider is the user.

The target data is encrypted to obtain encrypted target data.

A trusted identifier is generated for the encrypted target data to obtain trusted encrypted data, where the trusted encrypted data is the encrypted target data carrying the trusted identifier.

Based on the same idea, the embodiments of this specification also provide a device corresponding to the above method.

FIG. 6 is a schematic structural diagram of a trusted data acquisition device corresponding to FIG. 2 according to an embodiment of the present specification. As shown in FIG. 6, device 600 may include:

at least one processor 610; and,

a memory 630 in communication with the at least one processor; wherein,

The memory 630 stores instructions 620 executable by the at least one processor 610, the instructions being executed by the at least one processor 610 to enable the at least one processor 610 to:

Obtain the operation information of the data demander.

According to the operation information, a target data acquisition request is generated, and the target data acquisition request is used for requesting acquisition of the target data of the data provider.

Send the target data acquisition request.

Receive trusted encrypted data fed back by the data provider; the trusted encrypted data is encrypted target data with a trusted identifier generated by a trusted data processing application of the data provider; the encrypted target data is the The ciphertext data obtained by encrypting the target data collected from the target client of which the data provider is the user by the trusted data processing application.

Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the devices shown in FIG. 5 and FIG. 6 , since they are basically similar to the method embodiments, the description is relatively simple, and reference may be made to some descriptions of the method embodiments for related parts.

In the 1990s, an improvement in a technology could be clearly differentiated between improvements in hardware (for example, improvements in circuit structures such as diodes, transistors, switches, etc.) or improvements in software (improvements in method flow). However, with the development of technology, the improvement of many methods and processes today can be regarded as a direct improvement of the hardware circuit structure. Designers almost get the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that the improvement of a method flow cannot be realized by hardware entity modules. For example, a Programmable Logic Device (PLD) such as a Field Programmable Gate Array (FPGA) is an integrated circuit whose logical function is determined by the user programming the device. It is programmed by the designer to "integrate" a digital character system on a PLD, without the need for a chip manufacturer to design and manufacture a dedicated integrated circuit chip. And, instead of making integrated circuit chips by hand, these days, most of this programming is done using "logic compiler" software, which is similar to the software compilers used in program development and writing, but before compiling The original code also has to be written in a specific programming language, which is called Hardware Description Language (HDL), and there is not only one HDL, but many kinds, such as ABEL (Advanced Boolean Expression Language) , AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed Integrated Circuit Hardware Description Language) and Verilog. It should also be clear to those skilled in the art that a hardware circuit for implementing the logic method process can be easily obtained by simply programming the method process in the above-mentioned several hardware description languages and programming it into the integrated circuit.

The controller may be implemented in any suitable manner, for example, the controller may take the form of eg a microprocessor or processor and a computer readable medium storing computer readable program code (eg software or firmware) executable by the (micro)processor , logic gates, switches, application specific integrated circuits (ASICs), programmable logic controllers and embedded microcontrollers, examples of controllers include but are not limited to the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicon Labs C8051F320, the memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art also know that, in addition to implementing the controller in the form of pure computer-readable program code, the controller can be implemented as logic gates, switches, application-specific integrated circuits, programmable logic controllers and embedded devices by logically programming the method steps. The same function can be realized in the form of a microcontroller, etc. Therefore, such a controller can be regarded as a hardware component, and the devices included therein for realizing various functions can also be regarded as a structure within the hardware component. Or even, the means for implementing various functions can be regarded as both a software module implementing a method and a structure within a hardware component.

The systems, devices, modules or units described in the above embodiments may be specifically implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device Or a combination of any of these devices.

For the convenience of description, when describing the above device, the functions are divided into various units and described respectively. Of course, when implementing the present application, the functions of each unit may be implemented in one or more software and/or hardware.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block in the flowcharts and/or block diagrams, and combinations of flows and/or blocks in the flowcharts and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in one or more of the flowcharts and/or one or more blocks of the block diagrams.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions An apparatus implements the functions specified in a flow or flows of the flowcharts and/or a block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in one or more of the flowcharts and/or one or more blocks of the block diagrams.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

Memory may include non-persistent memory in computer readable media, random access memory (RAM) and/or non-volatile memory in the form of, for example, read only memory (ROM) or flash memory (flash RAM). Memory is an example of a computer-readable medium.

Computer-readable media includes both persistent and non-permanent, removable and non-removable media, and storage of information may be implemented by any method or technology. Information may be computer readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read only memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), Flash Memory or other memory technology, Compact Disc Read Only Memory (CD-ROM), Digital Versatile Disc (DVD), or other optical storage , magnetic tape cartridges, magnetic tape-disk storage or other magnetic storage devices or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include transitory computer-readable media, such as modulated data signals and carrier waves.

It should also be noted that the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device comprising a series of elements includes not only those elements, but also Other elements not expressly listed, or which are inherent to such a process, method, article of manufacture, or apparatus are also included. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in the process, method, article of manufacture, or device that includes the element.

It will be appreciated by those skilled in the art that the embodiments of the present application may be provided as a method, a system or a computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The application may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The application may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including storage devices.

The above descriptions are merely examples of the present application, and are not intended to limit the present application. Various modifications and variations of this application are possible for those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included within the scope of the claims of this application.

Claims (30)

1. A trusted data processing method, applied to a trusted data processing application of a data provider, comprising: Obtaining data requirement information; the data requirement information is used to request to obtain the target data of the data provider; According to the data requirement information, the target data is acquired in the process of using the target client by the data provider; the target data is the target client that the trusted data processing application takes as a user from the data provider data collected at the terminal; the target client includes a target web client; the trusted data processing application is an available plug-in loaded at the target web client; Encrypting the target data to obtain encrypted target data; A trusted identifier is generated for the encrypted target data, and trusted encrypted data is obtained, where the trusted encrypted data is the encrypted target data carrying the trusted identifier, and the trusted identifier carries the encrypted data of the encrypted target data. Data source information and collection time information, so that the data demander can easily determine the credibility of the trusted encrypted data according to the trusted identifier, and learn that the encrypted target data is the time corresponding to the collection time information from the Trusted data collected at the target client. 2. The method according to claim 1, wherein the acquiring the target data according to the data requirement information specifically comprises: The trusted data processing application collects the target data from the data generated in the process of using the target client by the data provider according to the data requirement information. 3. The method according to claim 2, The collecting the target data from the data generated in the process of using the target client by the data provider specifically includes: collecting the target data from the web page data browsed by the data provider at the target web page client; Alternatively, the target data is collected from the webpage data downloaded by the data provider at the target webpage client. 4 . The method according to claim 3 , wherein the target data is user service data that has a corresponding relationship with a registered account logged in by the data provider at the target client. 5 . 5. The method of claim 3, wherein the target data comprises: at least one of a specified field in the web page data, a specified picture in the web page data, and a specified multimedia file in the web page data. 6. The method according to claim 1, the acquiring data requirement information specifically comprises: Obtain the target data obtaining request sent by the data demander through the first blockchain network, where the target data obtaining request is used to request to obtain the target data of the data provider. 7. The method according to claim 6, before acquiring the target data according to the data requirement information, further comprising: Acquire an authorization instruction from the data provider for the target data acquisition request. 8. The method according to claim 6, wherein generating a trusted identifier for the encrypted target data, after obtaining the trusted encrypted data, further comprising: Send the trusted encrypted data to the data demander through the second blockchain network. 9. The method according to claim 1, wherein generating a trusted identifier for the encrypted target data, and after obtaining the trusted encrypted data, further comprising: The trusted encrypted data is stored in the third blockchain network. 10. The method according to claim 1, wherein after generating a trusted identifier for the encrypted target data and obtaining trusted encrypted data, the method further comprises: Store the trusted encrypted data to trusted hardware. 11. The method according to claim 10, wherein the trusted hardware is a trusted hardware connected with a device equipped with the trusted data processing application; or, the trusted hardware is a trusted hardware connected with a target server hardware. 12. A method for obtaining trusted data, comprising: Obtain the operation information of the data demander; generating a target data acquisition request according to the operation information, where the target data acquisition request is used for requesting acquisition of the target data of the data provider; sending the target data acquisition request; Receive trusted encrypted data fed back by the data provider; the trusted encrypted data is encrypted target data with a trusted identifier generated by a trusted data processing application of the data provider, and the trusted identifier carries The data source information and collection time information of the encrypted target data, so that the data demander can easily determine the credibility of the trusted encrypted data according to the trusted identifier, and learn that the encrypted target data corresponds to the collection time information. The trusted data collected from the target client at the time of day; the encrypted target data is the information obtained by the trusted data processing application from the data provider as a user in the process of using the target client by the data provider. ciphertext data obtained by encrypting the target data collected at the target client; the target client includes a target web client; the trusted data processing application is the available data loaded at the target web client plugin. 13. The method according to claim 12, wherein the sending the target data acquisition request specifically comprises: Send the target data acquisition request to the data provider through the first blockchain network. 14. The method according to claim 12, wherein the receiving the trusted encrypted data fed back by the data provider specifically comprises: Receive trusted encrypted data fed back by the data provider through the second blockchain network. 15. The method according to claim 12, after receiving the trusted encrypted data fed back by the data provider, further comprising: A trusted data processing application of the data demander is used to perform trusted verification on the trusted encrypted data to obtain a verification result. 16. The method according to claim 15, wherein the trusted data processing application of the data demander is used to perform trusted verification on the trusted encrypted data, specifically comprising: Use the trusted data processing application of the data demander to obtain benchmark data from the third blockchain network; the benchmark data is sent to the third blockchain by the trusted data processing application of the data provider The ciphertext data carrying the trusted identifier stored at the network; Consistency verification is performed on the reference data and the trusted encrypted data. 17. A trusted data processing device, applied to a trusted data processing application of a data provider, comprising: a first acquisition module, used for acquiring data requirement information; the data requirement information is used for requesting acquisition of target data of the data provider; The second obtaining module is configured to obtain the target data according to the data requirement information in the process of using the target client by the data provider; the target data is obtained by the trusted data processing application from the data provider The data collected at the target client as the user; the target client includes a target web client; the trusted data processing application is an available plug-in loaded at the target web client; an encryption module for performing encryption processing on the target data to obtain encrypted target data; A trusted encrypted data generation module, configured to generate a trusted identifier for the encrypted target data, and obtain trusted encrypted data, where the trusted encrypted data is the encrypted target data carrying the trusted identifier, and the trusted encrypted data is Identify the data source information and collection time information that carry the encrypted target data, so that the data demander can conveniently determine the credibility of the trusted encrypted data according to the trusted identifier, and learn that the encrypted target data is the The trusted data collected from the target client at the time corresponding to the collection time information. 18. The apparatus according to claim 17, wherein the second acquisition module is specifically used for: The trusted data processing application collects the target data from the data generated in the process of using the target client by the data provider according to the data requirement information. 19. The apparatus of claim 18, The second acquisition module specifically includes: a first collection module, configured to collect the target data from the webpage data browsed by the data provider at the target webpage client; The second collection module is configured to collect the target data from the webpage data downloaded by the data provider at the target webpage client. 20. The device according to claim 17, wherein the first acquisition module is specifically used for: Obtain the target data obtaining request sent by the data demander through the first blockchain network, where the target data obtaining request is used to request to obtain the target data of the data provider. 21. The apparatus of claim 17, further comprising: A sending module, configured to send the trusted encrypted data to the data demander through the second blockchain network. 22. The apparatus of claim 17, further comprising: The first storage module is used for storing the trusted encrypted data to the third blockchain network. 23. The apparatus of claim 17, further comprising: The second storage module is used to store the trusted encrypted data to trusted hardware; the trusted hardware is trusted hardware connected to the device equipped with the trusted data processing application; or, the trusted hardware is the trusted hardware connected to the target server. 24. A trusted data acquisition device, comprising: The acquisition module is used to acquire the operation information of the data demander; an acquisition request generation module, configured to generate a target data acquisition request according to the operation information, and the target data acquisition request is used to request to acquire the target data of the data provider; a sending module, configured to send the target data acquisition request; A receiving module, configured to receive the trusted encrypted data fed back by the data provider; the trusted encrypted data is the encrypted target data with a trusted identifier generated by the trusted data processing application of the data provider, and the trusted encrypted data can be The trusted identifier carries the data source information and collection time information of the encrypted target data, so that the data demander can easily determine the credibility of the trusted encrypted data according to the trusted identifier, and learn that the encrypted target data is the The trusted data collected from the target client at the time corresponding to the collection time information; the encrypted target data is the data provided by the trusted data processing application in the process of using the target client by the data provider. ciphertext data obtained by encrypting the target data collected at the target client of the user; the target client includes a target web client; the trusted data processing application is the target web client Available plugins loaded at the end. 25. The device according to claim 24, wherein the sending module is specifically configured to: Send the target data acquisition request to the data provider through the first blockchain network. 26. The apparatus according to claim 24, wherein the receiving module is specifically used for: Receive trusted encrypted data fed back by the data provider through the second blockchain network. 27. The apparatus of claim 24, further comprising: The verification module is used to perform trusted verification on the trusted encrypted data by using the trusted data processing application of the data demander to obtain a verification result. 28. The device according to claim 27, the verification module is specifically used for: Use the trusted data processing application of the data demander to obtain benchmark data from the third blockchain network; the benchmark data is sent to the third blockchain by the trusted data processing application of the data provider ciphertext data carrying the trusted identifier stored at the network; Consistency verification is performed on the reference data and the trusted encrypted data. 29. A trusted data processing device, comprising: at least one processor; and, a memory communicatively coupled to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, the instructions being instructions at a trusted data processing application, the instructions being executed by the at least one processor to cause the at least one processor were able: Obtaining data requirement information; the data requirement information is used to request to obtain the target data of the data provider; According to the data requirement information, the target data is acquired in the process of using the target client by the data provider; the target data is obtained from the data provider as a user by a trusted data processing application of the data provider. The data collected at the target client; the target client includes a target webpage client; the trusted data processing application is an available plug-in loaded at the target webpage client; Encrypting the target data to obtain encrypted target data; A trusted identifier is generated for the encrypted target data, and trusted encrypted data is obtained, where the trusted encrypted data is the encrypted target data carrying the trusted identifier, and the trusted identifier carries the encrypted data of the encrypted target data. Data source information and collection time information, so that the data demander can easily determine the reliability of the trusted encrypted data according to the trusted identifier, and learn that the encrypted target data is the time corresponding to the collection time information from the Trusted data collected at the target client. 30. A trusted data acquisition device, comprising: at least one processor; and, a memory communicatively coupled to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to: Obtain the operation information of the data demander; generating a target data acquisition request according to the operation information, where the target data acquisition request is used for requesting acquisition of the target data of the data provider; sending the target data acquisition request; Receive trusted encrypted data fed back by the data provider; the trusted encrypted data is encrypted target data with a trusted identifier generated by a trusted data processing application of the data provider, and the trusted identifier carries The data source information and collection time information of the encrypted target data, so that the data demander can easily determine the credibility of the trusted encrypted data according to the trusted identifier, and learn that the encrypted target data corresponds to the collection time information. The trusted data collected from the target client at the time of day; the encrypted target data is the information obtained by the trusted data processing application from the data provider as a user in the process of using the target client by the data provider. ciphertext data obtained by encrypting the target data collected at the target client; the target client includes a target web client; the trusted data processing application is the available data loaded at the target web client plugin.

Images