CN118585991B - Data processing method, device, equipment and storage medium - Google Patents

Abstract

The embodiment of the application discloses a data processing method, a device, equipment and a storage medium, which are applied to the technical field of cloud security, wherein the method comprises the following steps: receiving a calculation task request sent by first service equipment corresponding to a first service party through a security agent component in a security sandbox; and acquiring the encrypted service data of the second service party from second service equipment corresponding to the second service party according to the first data identifier through the security agent component, and decrypting the encrypted service data of the second service party to obtain the service data of the second service party. Executing calculation operation on the service data of the second service party according to the execution file through the calculation task component to obtain an execution result; and aggregating and encrypting the execution result through the security agent component to obtain an encryption execution result, and sending the encryption execution result to the first service equipment and the second service equipment. The application can improve the convenience of the circulation process of the business data and the circulation efficiency of the business data.

Description

Data processing method, device, equipment and storage medium

Technical Field

The present application relates to fields such as Internet technologies, and in particular to a data processing method, device, equipment and storage medium.

Background Art

As business data is widely recognized as a new production factor and resource, countries are accelerating the top-level design, laws and regulations, cross-border flow and platform construction for business data circulation. In terms of top-level design, the world continues to make layouts and formulate policies. On the other hand, at the market level, the release of data value urgently requires the construction of a secure and reliable business data circulation platform. The business data circulation platform refers to assisting multiple business parties to realize the circulation of business data (such as calling) while ensuring the security of business data.

At present, the business data circulation platform ensures the security of business data through a closed domain approach. Specifically, an independent cluster needs to be created for each business party. The cluster is used to execute the business data of the business party and store the business data and the results of the business data execution. And when a business party needs to call the data in the cluster of another business party, it needs to go through a manual approval process and be operated by professionals with specified permissions. Jump machines (a network security device or computer device) can be realized. It can be seen that in the closed domain approach, the circulation process of business data is relatively cumbersome, resulting in low efficiency in the circulation of business data.

Summary of the invention

The embodiments of the present application provide a data processing method, apparatus, device and storage medium to improve the convenience of the business data circulation process and improve the business data circulation efficiency.

An embodiment of the present application provides a data processing method, including:

A computing task request sent by a first business device corresponding to a first business party is received through a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on business data of a second business party, and a first data identifier of encrypted business data corresponding to the business data;

Obtaining, through the security proxy component, the encrypted business data of the second business party from the second business device corresponding to the second business party according to the first data identifier, decrypting the encrypted business data of the second business party to obtain the business data of the second business party;

By running the computing task component in the security sandbox, according to the execution file, a computing operation is performed on the business data of the second business party to obtain an execution result;

Through the security proxy component, the execution result is aggregated and encrypted according to the first public key of the first business party and the second public key of the second business party to obtain an encrypted execution result, and the encrypted execution result is sent to the first business device and the second business device;

Among them, the above-mentioned first business device is used to aggregately decrypt the above-mentioned encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the above-mentioned execution result. The above-mentioned first part of the decryption result is obtained by the above-mentioned first business device decrypting the above-mentioned encrypted execution result based on the first private key corresponding to the above-mentioned first public key. The above-mentioned second part of the decryption result is sent to the above-mentioned first business device when the above-mentioned second business device determines that the business data of the above-mentioned second business party cannot be restored based on the above-mentioned execution file, and the above-mentioned second part of the decryption result is obtained by decrypting the above-mentioned encrypted execution result based on the second private key corresponding to the above-mentioned second public key. The execution file in the above-mentioned second business device is sent to the above-mentioned second business device by the above-mentioned first business device or the above-mentioned security agent component.

An embodiment of the present application provides a data processing method, including:

Sending a computing task request to a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and a first data identifier of encrypted business data corresponding to the business data, the security proxy component is used to obtain the encrypted business data of the second business party from a second business device corresponding to the second business party according to the first data identifier, decrypt the encrypted business data of the second business party, and obtain the business data of the second business party;

Receive the encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file;

The encrypted execution result is decrypted according to the first private key corresponding to the first public key to obtain a first part of the decrypted result, and the second part of the decrypted result sent by the second business device corresponding to the second business party is received; the second part of the decrypted result is sent to the first business device corresponding to the first business party when the second business device determines that the business data of the second business party cannot be restored based on the execution file, and the second part of the decrypted result is obtained by decrypting the encrypted execution result based on the second private key corresponding to the second public key, the encrypted execution result is sent to the second business device by the security proxy component, and the execution file in the second business device is sent to the second business device by the first business device or the security proxy component;

According to the above-mentioned first part of decryption results and the above-mentioned second part of decryption results, the above-mentioned encrypted execution results are aggregated and decrypted to obtain the above-mentioned execution results.

An embodiment of the present application provides a data processing method, including:

According to the first data identifier carried in the computing task request, the encrypted business data of the second business party is sent to the security proxy component running in the security sandbox of the trusted third party; the computing task request is sent to the security proxy component by the first business device corresponding to the first business party, and the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and the first data identifier of the encrypted business data corresponding to the business data, and the security proxy component is used to decrypt the encrypted business data of the second business party to obtain the business data of the second business party;

receiving the encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file;

When it is determined that the business data of the second business party cannot be restored based on the execution file, the encrypted execution result is decrypted according to the second private key corresponding to the second public key to obtain a second partial decryption result; the execution file in the second business device corresponding to the second business party is sent to the second business device by the first business device or the security proxy component;

The second part of the decryption result is sent to the first business device corresponding to the first business party; the first business device is used to aggregate and decrypt the encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the execution result. The first part of the decryption result is obtained by the first business device decrypting the encrypted execution result based on the first private key corresponding to the first public key.

An embodiment of the present application provides a data processing device, including:

A receiving module, configured to receive a computing task request sent by a first business device corresponding to a first business party through a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on business data of a second business party, and a first data identifier of encrypted business data corresponding to the business data;

a decryption module, configured to obtain, through the security proxy component and according to the first data identifier, the encrypted business data of the second business party from the second business device corresponding to the second business party, and decrypt the encrypted business data of the second business party to obtain the business data of the second business party;

An execution module, configured to execute a computing operation on the business data of the second business party according to the execution file by running a computing task component in the security sandbox to obtain an execution result;

An encryption module, used to perform aggregate encryption on the execution result through the security proxy component according to the first public key of the first business party and the second public key of the second business party to obtain an encrypted execution result, and send the encrypted execution result to the first business device and the second business device;

Among them, the above-mentioned first business device is used to aggregately decrypt the above-mentioned encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the above-mentioned execution result. The above-mentioned first part of the decryption result is obtained by the above-mentioned first business device decrypting the above-mentioned encrypted execution result based on the first private key corresponding to the above-mentioned first public key. The above-mentioned second part of the decryption result is sent to the above-mentioned first business device when the above-mentioned second business device determines that the business data of the above-mentioned second business party cannot be restored based on the above-mentioned execution file, and the above-mentioned second part of the decryption result is obtained by decrypting the above-mentioned encrypted execution result based on the second private key corresponding to the above-mentioned second public key. The execution file in the above-mentioned second business device is sent to the above-mentioned second business device by the above-mentioned first business device or the above-mentioned security agent component.

An embodiment of the present application provides a data processing device, including:

A sending module, used to send a computing task request to a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and a first data identifier of encrypted business data corresponding to the business data; the security proxy component is used to obtain the encrypted business data of the second business party from a second business device corresponding to the second business party according to the first data identifier, decrypt the encrypted business data of the second business party, and obtain the business data of the second business party;

a receiving module, configured to receive an encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file;

A decryption module, used to decrypt the above-mentioned encrypted execution result according to the first private key corresponding to the above-mentioned first public key to obtain a first part of the decryption result, and receive a second part of the decryption result sent by the second business device corresponding to the second business party; the above-mentioned second part of the decryption result is sent to the first business device corresponding to the above-mentioned first business party when the above-mentioned second business device determines that the business data of the above-mentioned second business party cannot be restored based on the above-mentioned execution file, and the above-mentioned second part of the decryption result is obtained by decrypting the above-mentioned encrypted execution result based on the second private key corresponding to the above-mentioned second public key, the above-mentioned encrypted execution result is sent to the above-mentioned second business device by the above-mentioned security proxy component, and the execution file in the above-mentioned second business device is sent to the above-mentioned second business device by the above-mentioned first business device or the above-mentioned security proxy component;

The above-mentioned decryption module is also used to aggregate and decrypt the above-mentioned encrypted execution result according to the above-mentioned first part of decryption results and the above-mentioned second part of decryption results to obtain the above-mentioned execution result.

An embodiment of the present application provides a data processing device, including:

A sending module, used to send the encrypted business data of the second business party to the security proxy component running in the security sandbox of the trusted third party according to the first data identifier carried in the computing task request; the computing task request is sent to the security proxy component by the first business device corresponding to the first business party, the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and the first data identifier of the encrypted business data corresponding to the business data, and the security proxy component is used to decrypt the encrypted business data of the second business party to obtain the business data of the second business party;

a receiving module, configured to receive the encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file;

a decryption module, for decrypting the encrypted execution result according to the second private key corresponding to the second public key to obtain a second partial decryption result when it is determined that the business data of the second business party cannot be restored based on the execution file; the execution file in the second business device corresponding to the second business party is sent to the second business device by the first business device or the security proxy component;

The above-mentioned sending module is also used to send the above-mentioned second part of the decryption result to the first business device corresponding to the above-mentioned first business party; the above-mentioned first business device is used to aggregate and decrypt the above-mentioned encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the above-mentioned execution result. The above-mentioned first part of the decryption result is obtained by the above-mentioned first business device decrypting the above-mentioned encrypted execution result based on the first private key corresponding to the above-mentioned first public key.

On one hand, an embodiment of the present application provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above method when executing the computer program.

On one hand, an embodiment of the present application provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of the above method are implemented.

On the one hand, an embodiment of the present application provides a computer program product, including a computer program, which implements the steps of the above method when executed by a processor.

The present application has at least the following beneficial effects: (1) Deploy security proxy components and computing task components in the security sandbox of the trusted third party corresponding to each business party, and the decryption and computing process of the encrypted business data of the second business party are all realized through the security proxy components and computing task components in the security sandbox, that is, the business data of each business party is circulated through the security sandbox, and there is no need to create independent clusters for each business party, nor to rely on dedicated hardware, thereby reducing the circulation cost of business data and improving the convenience of the business data circulation process. In addition, the circulation process does not require manual participation, thereby improving the circulation efficiency of business data. (2) By aggregate encryption of the execution results, the second business party will send the second part of the decryption result obtained by itself to the first business party only when it determines that the execution file cannot restore the original data (that is, the business data). In this way, the first business party can aggregate and decrypt the encrypted execution results based on the first part of the decryption result obtained by itself and the second part of the decryption result received to obtain the execution result, which can ensure the shared ownership of the execution results by the first and second business parties, realize the security and controllability of the execution results, and improve the security of the execution results. The circulation of business data here may refer to the execution result of the business data of the second business party being transmitted to the first business party, that is, the first business party calls the business data of the second business party through a trusted third party to realize the circulation of business data.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

FIG1 is a schematic diagram of a data processing system provided by the present application;

FIG2 is a schematic diagram of another data processing system provided by the present application;

FIG3 is a flow chart of a data processing method provided by the present application;

FIG4 is a flowchart of a public key exchange process and a service data encryption process provided by the present application;

FIG5 is a schematic diagram of a process of starting a computing task provided by the present application;

FIG6 is a flowchart of an execution process of a computing task provided by the present application;

FIG7 is a flow chart of another data processing method provided by the present application;

FIG8 is a flowchart of a decryption process of an encryption execution result provided by the present application;

FIG9 is a flow chart of another data processing method provided by the present application;

FIG10 is a schematic diagram of the structure of a data processing device provided in an embodiment of the present application;

FIG11 is a schematic diagram of the structure of another data processing device provided in an embodiment of the present application;

FIG12 is a schematic diagram of the structure of another data processing device provided in an embodiment of the present application;

FIG. 13 is a schematic diagram of the structure of a computer device provided in an embodiment of the present application.

DETAILED DESCRIPTION

The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

In order to facilitate a clearer understanding of the present application, the data processing system for implementing the present application is first introduced. As shown in Figure 1, the data processing system includes a server and a terminal cluster. The terminal cluster may include one or more terminals, and the number of terminals will not be limited here. As shown in Figure 1, the terminal cluster includes 4 terminals as an example. The terminal cluster may specifically include a first terminal, a second terminal, a third terminal, and a fourth terminal; it can be understood that the first terminal, the second terminal, the third terminal, and the fourth terminal can all be connected to the server through a network connection, so that each terminal can exchange data with the server through a network connection.

It is understandable that the server can be an independent physical server, or a server cluster or distributed system composed of at least two physical servers, or a cloud server that provides cloud services, cloud knowledge bases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, Content Delivery Network (CDN), and basic cloud computing services such as big data and artificial intelligence platforms. The terminal can specifically refer to a vehicle-mounted terminal, a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a screen speaker, a smart TV, a smart watch, etc., but is not limited to this. Each terminal and server can be directly or indirectly connected via wired or wireless communication. At the same time, the number of terminals and servers can be one or at least two, and this application does not limit this.

Among them, any terminal can refer to the business device corresponding to the business party, each business device can include its own business data and one or more execution files, and any business device can call the business data of other business parties through the server. The execution file can refer to a code file or a mirror file of a code file used to perform calculation operations on the business data, and the calculation operation can refer to statistical calculation, training model, operation processing, etc.

It should be noted that the first business party in this application may refer to the business party that initiates the computing task request, that is, the first business party may refer to the business party that uses the business data, and at the same time, the first business party may also provide business data, and the terminal corresponding to the first business party may be called the first business device. The second business party may refer to the business party that provides business data, and the terminal corresponding to the second business party may be called the second business device.

Among them, in a computing operation process for business data, at least one business data user and at least one business data provider may be included; when only one business data provider and one business data user are included, the business data provider is different from the business data user.

The server may refer to a device corresponding to a trusted third party. The server includes a security sandbox, in which a security agent component and a computing task component are running. The security sandbox is a mechanism for protecting object privacy and system security. The security sandbox can restrict the security agent component and the computing task component to a closed operating environment to prevent them from causing potential threats to the system and other applications. In addition, the security sandbox can provide some virtual hardware and software resources, such as a file system, a network, an operating system, etc., so that the security agent component and the computing task component can run in this virtual environment without causing any adverse effects on the computer system. If the security agent component and the computing task component attempt to access resources outside the security sandbox or perform dangerous operations (such as transmitting unencrypted business data to other business devices), the security sandbox will intercept these requests and take corresponding security measures. The security measures may include prohibiting the execution of dangerous operations and terminating applications or processes that perform dangerous operations.

Among them, the security sandbox also includes an access restriction tool, which is used to restrict the network access, directory access and inter-process access of the processes corresponding to the security proxy component and the computing task component, so that the security proxy component and the computing task component run in a completely isolated environment, and the security proxy component implements data reading and writing back data, and each computing task component is allowed to access each other. The access restriction tool may include gVisor (process-level virtualization), nsjail (process isolation tool) or Kata Container (cloud-native virtualization). The computing task component may include spark (a computing engine or framework) or Ray (a computing engine or framework). Usually, each computing task component needs to communicate with each other to jointly complete the distributed computing tasks.

Specifically, the security proxy component can be used to read the encrypted business data from the second business device, decrypt the encrypted business data, obtain the business data, and send the business data and the execution file to the computing task component. The computing task component can be used to perform computing operations on the business data according to the execution file.

The trusted third party may refer to an entity that is trusted by the business parties corresponding to each terminal in the data processing system, such as a Certificate Authority (CA) management agency.

The data processing system of the present application can be used to guide the development of the privacy computing system framework. The main product form is in the form of a privacy computing platform, which provides federated learning, joint query, anonymous query and other services on a public or private cloud. The machine learning model obtained by federated learning and the query results obtained by joint query and anonymous query can be used in multiple scenarios such as joint marketing, joint advertising, and joint risk control.

Among them, anonymous query can refer to private information retrieval (PIR), which is a very practical technology and application in secure multi-party computing. It can be used to protect the user's query privacy, and then protect the user's query results (i.e. business data). Its goal is to ensure that when the first business party submits a query request (i.e. computing task request) to a trusted third party, the query is completed without being perceived or leaked during the query process. In anonymous query, the first business party is the query party, and the executable file provided by the first business party can refer to the code used to perform computing operations on the query results or the image file corresponding to the code; the second business party can refer to the queried party, that is, the business data of the second business party can be called the query result, and the number of second business parties can be multiple or one.

Among them, federated learning is also called federated machine learning (Federated Machine Learning/Federated Learning), joint learning, and alliance learning. Federated learning is a machine learning framework that can effectively help multiple business parties (i.e., the first business party and the second business party) use data and perform machine learning modeling while meeting the requirements of user privacy protection, data security, and government regulations. In federated learning, the first business party may refer to the business party that needs machine learning modeling, and the execution file provided by the first business party may refer to the initial machine learning model to be trained, which is composed of code or a mirror file of the code; the second business party may refer to the business party that provides training data, that is, the business data of the second business party may refer to training data. In particular, the first business party may also provide training data, and the computing operation on the business data may refer to identifying the training data through the initial machine learning model to train the initial machine student model and obtain the execution result, which is the trained machine learning model.

Among them, the machine learning model can refer to a linear regression model (Linear Regression), a logistic regression model (Logistic Regression), a decision tree model (Decision Tree), a neural network model (Neural Network), etc.

Among them, the machine learning model can be used in joint risk control scenarios, joint advertising scenarios, and joint marketing scenarios. That is, in the joint risk control scenario, the machine learning model can be used to verify whether the user is a qualified investor and whether the individual or institution has abnormal financial behavior. In the joint advertising scenario, the machine learning model can be used to produce advertising content that users are interested in for product merchants; in the joint marketing scenario, the machine learning model can be used to produce marketing strategies for a certain product for product merchants.

Among them, the joint query can be a special query mode, and its main function is to combine two or more query results into a result set, eliminate duplicate rows in the query results, and sort and calculate the result set of the joint query. In the joint query, the first business party is the query party, and the execution file provided by the first business party can refer to the code used to implement the joint query or the image file corresponding to the code; the second business party can refer to the queried party, that is, the business data of the second business party can be called the query result, and the number of the second business parties is multiple.

Among them, the joint risk control scenario can be based on the query results obtained by joint query or anonymous query, or the machine learning model obtained by training, to achieve risk control management for individuals or institutions. Risk control management can refer to verifying whether the user is a qualified investor, verifying whether the individual or institution has financial abnormal behavior, such as financial abnormal behavior including transferring assets to illegal accounts, evading tax payment, etc. In the joint risk control scenario, the first business party (i.e. the above-mentioned query party or the business party that needs machine learning modeling) is specifically a risk control management agency, such as a tax agency or an asset regulatory agency. The execution file provided by the first business party can be a code or a mirror file corresponding to the code for risk control management of individuals or institutions, such as an initial machine learning model to be trained for risk control management. The second business party (i.e. the above-mentioned query party, or the business party providing training data) can include at least one of a banking institution, a trust institution, a fund company, etc., and the business data (such as the above-mentioned query results or training data) can include the transaction data of users in banking institutions, trust institutions, and fund companies.

Among them, the joint advertising scenario may refer to the production of advertising content that users are interested in based on the query results obtained by joint query or anonymous query, or the machine learning model obtained by training. In the joint advertising scenario, the first business party (i.e., the query party or the business party that needs machine learning modeling) may be a product merchant, and the execution file provided by the first business party may be a code for generating advertising content or a mirror file corresponding to the code. The second business party (i.e., the queried party or the business party providing training data) may include the product merchant and the advertising platform corresponding to the advertisement. The business data provided by the advertising platform is the advertising behavior data of the user for the advertising content, and the advertising behavior data may include the number of clicks, collections, and likes of the advertising content. The business data provided by the product merchant includes the user's purchase behavior data for the product, such as the purchase behavior data including the purchase time, the price of the product, the number of purchases, and the basic information of the product (production time, purpose, etc.). Advertising behavior data and purchase behavior data may refer to the query results or training data.

Among them, the joint marketing scenario may refer to the production of a marketing strategy for a certain product based on the query results obtained by joint query or anonymous query, or the trained machine learning model; in the joint marketing scenario, the first business party (i.e. the above-mentioned query party or the business party that needs machine learning modeling) may be the product merchant, and the execution file provided by the first business party may be the code or the mirror file corresponding to the code used to generate the marketing strategy of the product. The second business party (i.e. the above-mentioned queried party, or the business party providing training data) may include product merchants and marketing agencies. The business data provided by the marketing agency is the basic information of the user, such as name, gender, etc.; the business data provided by the product merchant is the user's purchase behavior data for the product. Marketing strategies may include shopping discount strategies, issuing coupons, etc. Basic information and purchase behavior data may refer to the above-mentioned query results or training data.

Taking the application of joint query in the joint risk control scenario as an example, the first business device may refer to the first terminal in Figure 1, and the second business device may include the second terminal, the third terminal, and the fourth terminal in Figure 1; the first business party corresponding to the first terminal is an investment institution, and the second business parties corresponding to the second terminal, the third terminal, and the fourth terminal are respectively a bank institution, a trust institution, and a fund company. When the investment institution needs to review whether the user u1 is a qualified investor, the first terminal can send a computing task request to the security agent component running in the security sandbox of the server. The computing task request is used to indicate whether the user u1 is a qualified investor. The computing task request carries the object information of the investment institution, the execution file for performing computing operations on the business data, and the data identifier of each encrypted business data. The object information of the investment institution may include the credit code and institution name of the investment institution, and the business data may include the transaction data corresponding to the user u1 in the bank institution, the trust institution, and the fund company, respectively. The execution file can be used to verify whether the user u1 is a qualified investor based on the transaction data.

After receiving the computing task request, the security proxy component in the server can verify whether the investment institution has the request computing authority for the above-mentioned business data based on the object information of the investment institution. For example, the server can query whether the investment institution has abnormal investment behavior based on the object information of the investment institution. When it is found that the investment institution has abnormal investment behavior, it is determined that the investment institution does not have the request computing authority for the business data, and the verification of whether the user u1 is a qualified investor can be refused. When it is found that the investment institution does not have abnormal investment behavior, it is determined that the investment institution has the request computing authority for the business data, and the first encrypted transaction data can be obtained from the second terminal, the second encrypted transaction data can be obtained from the third terminal, and the second encrypted transaction data can be obtained from the fourth terminal according to the computing task request. The first encrypted transaction data is obtained by encrypting the first transaction data of user u1 in a banking institution, and the first transaction data may include at least one of the borrowing and lending records, deposit records, repayment records, etc. of user u1 in the banking institution; the second encrypted transaction data is obtained by encrypting the second transaction data of user u1 in a trust institution, and the second transaction data may include the trust products purchased by user u1 in the trust institution, etc.; the third encrypted transaction data is obtained by encrypting the third transaction data of user u1 in a fund company, and the third transaction data may include the funds purchased by user u1 in the fund company, etc.

Further, through the proxy security proxy component, the first encrypted transaction data is decrypted to obtain the first transaction data, the second encrypted transaction data is decrypted to obtain the second transaction data, and the third encrypted transaction data is decrypted to obtain the third transaction data. The computing task component running in the security sandbox of the server can verify whether the user u1 is a qualified investor based on the execution file, the first transaction data, the second transaction data and the third transaction data, and obtain a verification result (i.e., an execution result), which can reflect that the user u1 is a qualified investor, or the verification result reflects that the user u1 is not a qualified investor. Through the security proxy component, the verification result can be aggregated and encrypted according to the public keys corresponding to the investment institution, the banking institution, the trust institution, and the fund company, respectively, to obtain an encrypted verification result (i.e., an encrypted execution result), and the encrypted verification result and the execution file are sent to the second terminal, the third terminal, and the fourth terminal, and the encrypted execution result is sent to the first terminal. When the second terminal, the third terminal, and the fourth terminal respectively determine that the execution file cannot restore the corresponding transaction data, the corresponding private key is used to decrypt the encrypted verification result to obtain the second part of the decryption result corresponding to the second terminal, the third terminal, and the fourth terminal. The first terminal can decrypt the encrypted verification result according to the private key corresponding to the investment institution to obtain a first part of the decryption result, receive the second part of the decryption result sent by the second terminal, the third terminal, and the fourth terminal respectively, and perform aggregate decryption on the encrypted verification result according to the first part of the decryption result and the second part of the decryption result to obtain a verification result.

It can be seen that this application can realize joint queries against banking institutions, trust institutions, and fund companies. It can realize verification of user u1 without leaking the unencrypted transaction data of user u1, realize joint risk control of user u1, and realize the circulation of transaction data for banking institutions, trust institutions, and fund companies, thereby improving the security of transaction data of each business party.

In one embodiment, the present application provides a structural diagram of another data processing system, as shown in FIG2, the data processing system includes a third business device, a first business device and a second business device; wherein the third business device may refer to a device corresponding to a trusted third party, that is, the third business device may refer to the server in FIG1. The first business device may refer to a device corresponding to the first business party, and the first business device may refer to any terminal in FIG1; the second business device may refer to a device corresponding to the second business party, and the second business device may refer to a terminal other than the terminal corresponding to the first business party in FIG1.

Among them, the first business device may include a task submission component, a second task scheduling component, and a first data proxy component; the second business device may include a third task scheduling component and a second data proxy component; the third business device includes a security sandbox and a first task scheduling component, and the security sandbox includes a computing task component and a security proxy component.

Among them, the task submission component can be used to generate a computing task request and synchronize the computing task request to the first task scheduling component, the second task scheduling component and the third task scheduling component.

Among them, the second task scheduling component can be used to start the first data proxy component after receiving a computing task request; the first data proxy component stores the business data of the first business party, and the first data proxy component is used to encrypt the business data of the first business party, obtain the encrypted business data of the first business party, and synchronize the encrypted business data of the first business party to the security proxy component.

Among them, the third task scheduling component can be used to start the second data proxy component after receiving a computing task request; the second data proxy component stores the business data of the second business party, and the second data proxy component is used to encrypt the business data of the second business party, obtain the encrypted business data of the second business party, and synchronize the encrypted business data of the second business party to the security proxy component.

Among them, the encryption method corresponding to the encryption of the business data can be negotiated by the trusted third party and the first business party and the second business party respectively, that is, the encryption method for the business data of the first business party can be negotiated by the first business party and the trusted third party, so that the encrypted business data of the first business party can only be decrypted by the trusted third party and the first business party. The encryption method for the business data of the second business party can be negotiated by the second business party and the trusted third party, so that the encrypted business data of the second business party can only be decrypted by the trusted third party and the second business party, which is conducive to ensuring the security of the business data.

Among them, encryption algorithms include asymmetric encryption algorithms and symmetric encryption algorithms. Asymmetric encryption algorithms may refer to different keys used in the encryption process and decryption process. The characteristic of asymmetric encryption algorithms is that one key (public key) is public and the other key (private key) is kept secret. The public key is used to encrypt data, while the private key is used to decrypt data. Asymmetric encryption algorithms include RSA (an asymmetric encryption algorithm), backpack algorithm, Rabin (which can be regarded as a variant of RSA), public key encryption algorithm in key exchange protocol, and Elliptic Curve Cryptography (ECC). Symmetric encryption algorithms may refer to the use of the same key in both the encryption process and the decryption process, that is, the key can be called a symmetric key. Symmetric encryption algorithms may include Data Encryption Standard (DES), Advanced Encryption Standard (AES), etc.

Among them, the first task scheduling component can be used to start the security proxy component and the computing task component after receiving the computing task request, and synchronize the computing task request to the security proxy component. The security proxy component can be used to receive the encrypted business data of the first business party and the encrypted business data of the second business party, decrypt the encrypted business data of the first business party and the encrypted business data of the second business party, and obtain the business data of the first business party and the business data of the second business party. The computing task component can be used to obtain the execution file, the business data of the first business party and the business data of the second business party from the service interface of the security proxy component, add the business data of the first business party and the business data of the second business party to the execution file, obtain the added execution file, execute the added execution file, and obtain the execution result. The security proxy component is also used to obtain the execution result from the computing task component through the service interface, aggregate and encrypt the execution result according to the first public key of the first business party and the second public key of the second business party, obtain the encrypted execution result, and return the encrypted execution result to the first data proxy component and the second data proxy component.

The service interface may refer to an interface in the security proxy component for data interaction with the computing task component.

The second data proxy component is also used to decrypt the encrypted execution result according to the second private key of the second business party when it is determined that the execution file cannot restore the business data of the second business party, obtain the second part of the decrypted result, and send the second part of the decrypted result to the first data proxy component. The first data proxy component is also used to decrypt the encrypted execution result according to the first private key of the first business party to obtain the first part of the decrypted result, and aggregate the encrypted execution result according to the first part of the decrypted result and the second part of the decrypted result to obtain the execution result.

In summary, the data processing system in the present application has the following beneficial effects: 1. The business data is encrypted through an encryption algorithm negotiated by a trusted third party and a data provider, thereby ensuring that the encrypted business data can only be decrypted by a trusted third party and a data provider, thereby improving the security of the business data.

2. By encrypting the execution results in aggregate, any party can only partially decrypt the encrypted execution results. After the parties (i.e., the first business party and the second business party) aggregate their partial decryption results, they can get the final execution result. That is, only after the second business party sends the second part of the decrypted result to the first business party, the business equipment of the first business party can decrypt and get the final execution result. In other words, the first business party can get the execution result only with the authorization and consent of the second business party, which can ensure the shared ownership of the execution result by the first business party and the second business party, ensure the execution is safe and controllable, and improve the security of the execution result.

3. The decryption process of encrypted business data is realized through the security agent component in the security sandbox, and the computing process of business data is realized through the computing task component in the security sandbox, that is, a secure and isolated data computing environment is built through the security sandbox, and the computing process for business data is realized in the secure and isolated data environment. The computing tasks are isolated in computing, storage and network at the process level, without the need for complex independent deployment at the cluster level; nor do they need to rely on dedicated hardware, and can be implemented on existing general hardware resources to achieve efficient data collaboration.

Among them, the computing task here can refer to the computing operation on business data, and the isolation of computing, storage and network of computing tasks at the process level can mean: the isolation of computing, storage and network of computing tasks are all realized by the processes corresponding to the above-mentioned computing task components and security agent components.

Further, please refer to FIG3, which is a flow chart of a data processing method provided by an embodiment of the present application. As shown in FIG3, the method can be executed by a device corresponding to a trusted third party. The device corresponding to the trusted third party can refer to a terminal, or can refer to the server in FIG1, or can refer to a terminal and a server. In the present application, the device corresponding to the trusted third party can be collectively referred to as a third business device. The method can include the following steps:

S101. Receive a computing task request sent by a first business device corresponding to a first business party through a security proxy component running in a security sandbox of a trusted third party.

The computing task request includes an execution file for executing a computing operation on the business data of the second business party, and a first data identifier of encrypted business data corresponding to the business data.

In one embodiment, as shown in FIG. 4 , before executing step S101, the third service device may execute the following steps S40 to S48:

S40: The first service device generates a first key pair for the first service party, the first key pair including a first private key and a first public key; the first public key can be used to encrypt data, and the first private key can be used to decrypt data. Specifically, the first service device can use a random algorithm to generate a first random number, use the first random number as the first private key, and obtain the first private key of the basic data. To the second power, we get the second public key. is the first private key. That is, the first key pair can be expressed as ( ), As basic data, is the first public key, and the basic data can be elliptic curve group The base point of the elliptic curve group may include an elliptic curve for generating a key, and the basic data may refer to data agreed in advance by the first business party, the second business party, and the trusted third party. The random algorithm may include any one of a numerical probability algorithm, a Las Vegas algorithm, a Monte Carlo algorithm, and a Sherwood algorithm.

S41. The second service device may generate a second key pair; the second key pair includes a second private key and a second public key; the second public key may be used to encrypt data, and the second private key may be used to decrypt data. Specifically, the second service device may use a random algorithm to generate a second random number, use the second random number as the second private key, and obtain the basic data. To the second power, we get the second public key. is the second private key, that is, the second key pair can be expressed as ( ), The second public key.

S42: The third service device generates a third key pair; the third key pair includes a third private key and a third public key; the third public key can be used to encrypt data, and the third private key can be used to decrypt data. Specifically, the third service device can use a random algorithm to generate a third random number, use the third random number as the third private key, and obtain the basic data. To the second power, we get the third public key. is the third private key, that is, the third key pair can be expressed as ( ), is the third public key.

S43: The first service device sends the first public key of the first service party to the third service device.

S44: The second service device sends the second public key of the second service party to the third service device.

In steps S43 and S44, the first business device may send the first public key of the first business party to the third business device, and the second business device may send the second public key of the second business party to the third business device; so that the third business device can aggregate and encrypt the execution result of the business data based on the first public key and the second public key. Aggregate encryption here may refer to an encryption method involving multiple parties, such as aggregate encryption for the execution result may require the first public key of the first business party and the second public key of the second business party, that is, aggregate encryption of the execution result requires the participation of the first business party and the second business party.

S45. The third business device sends the third public key of the trusted third party to the first business device and the second business device; in this way, when the first business device can generate a symmetric key between the first business device and the third business device based on the third public key and the first private key, the symmetric key between the first business device and the third business device can be used to encrypt the business data of the first business party and decrypt the encrypted business data of the first business party. Similarly, when the second business device can generate a symmetric key between the second business device and the third business device based on the third public key and the second private key, the symmetric key between the second business device and the third business device can be used to encrypt the business data of the second business party and decrypt the encrypted business data of the second business party.

It should be noted that this application mainly uses the symmetric key between the second service device and the third service device as an example for explanation, that is, the symmetric key mentioned later refers to the symmetric key between the second service device and the third service device, and the specific generation process of the symmetric key can be referred to the description below.

It should be noted that encrypted business data may refer to data obtained by encrypting business data, and business data may be obtained by decrypting encrypted business data. Business data may refer to unencrypted data.

S46. The second business device encrypts the business data to obtain the encrypted business data of the second business party. The second business device may use the third public key to encrypt the business data of the second business party to obtain the encrypted business data of the second business party. Alternatively, the second business device may use a symmetric key to encrypt the business data of the second business party to obtain the encrypted business data of the second business party.

S47. The second business device generates a data identifier of the encrypted business data of the second business party, which is recorded as the first data identifier; if a hash operation is performed on the encrypted business data of the second business party to obtain a hash value of the encrypted business data of the second business party, the hash value of the encrypted business data of the second business party can be determined as the first data identifier. The first data identifier can be used to uniquely identify the encrypted business data of the second business party. The first data identifier is also equivalent to an authorization code, that is, the business party with the first data identifier has the request calculation permission for the business data of the second business party. The request calculation permission can refer to the permission to request a trusted third party to perform a calculation operation on the business data of the second business party.

S48. The second business device synchronizes the first data identifier to the first business device. The second business device may synchronize the first data identifier to the first business device to authorize the first business party to request computing authority for the business data of the second business party.

It should be noted that the second business device can also generate the validity period of the first data identifier of the encrypted business data of the second business party, and send the first data identifier and the validity period to the third business device. That is, if the time is within the validity period, the first data identifier is valid, and the business party holding the first data identifier has the request calculation permission for the business data; if the time exceeds the validity period, the first data identifier becomes invalid, and the business party holding the first data identifier does not have the request calculation permission for the business data.

Similarly, the first business device can encrypt the business data of the first business party, obtain the encrypted business data of the first business party, obtain the second data identifier of the encrypted business data of the first business party, and synchronize the second data identifier of the encrypted business data of the first business party to the second business device to authorize the second business party to have the request computing authority for the business data of the first business party.

Based on the above steps S40 to S48, the first business party, the second business party and the trusted third party exchange public keys, which is conducive to the subsequent aggregate encryption of the execution results and the decryption of the encrypted business data.

After the first business device obtains the first data identifier of the encrypted business data of the second business party, it can send a computing task request to the security proxy component running in the security sandbox of the trusted third party; the third business device can receive the computing task request through the task scheduling component, and send the computing task request to the security proxy component through the task scheduling component. The computing task request is used to indicate the execution of a computing operation on the business data of the second business party. The computing task request carries an execution file for executing the computing operation on the business data of the second business party, and the first data identifier of the encrypted business data corresponding to the business data; the computing task request can also carry the object information of the first business party, the parameters required to execute the business data, and the second data identifier of the encrypted business data of the first business party. If the first business party is an institution, the object information may include the name of the institution, the credit code, the registration time, etc. When the first business party is a user (i.e., an individual), the object information may include the name of the user and other information.

The process of the first business device sending a computing task request to the third business device is equivalent to the process of starting a computing task. As shown in FIG5 , the first business device includes a task submission component, a second task scheduling component, and a first data proxy component. The second business device includes a third task scheduling component and a second data proxy component. The third business device includes a first task scheduling component, a security proxy component, and a computing task component. The process of starting a computing task includes the following steps S51 to S57:

S51, the task submission component initiates a computing task request to the second task scheduling component; when the first business party needs to request to perform a computing operation on the business data of the second business party, the task submission component can generate a computing task request and initiate the computing task request to the second task scheduling component.

S52: The second task scheduling component synchronizes the computing task request to the third task scheduling component.

S53: The second task scheduling component synchronizes the computing task request to the first task scheduling component.

S54: The second task scheduling component starts the first data proxy component.

In steps S52-S53, after receiving the computing task request, the second task scheduling component can synchronize the computing task request to the third task scheduling component of the second business device and the first task scheduling component of the third business device respectively. When the first business device also needs to synchronize the business data of the first business party to the third business device, the second task scheduling component can start the first data proxy component so that the first data proxy component synchronizes the encrypted business data of the first business party to the third business device. Starting the first data proxy component here can refer to running the first data proxy component so that the first data proxy component is in working state.

S55. The third task scheduling component starts the second data proxy component. After the third task scheduling component receives the computing task request, the second data proxy component can be run so that the second data proxy component synchronizes the encrypted business data of the second business party to the third business device.

S56: The first task scheduling component starts the security proxy component.

S57: The first task scheduling component starts the computing task component.

In steps S56 and S57, after the first task scheduling component receives the computing task request, the security agent component and the computing task component can be run so that the security agent component can receive the encrypted business data synchronized by the second data agent component and the first data agent component, and decrypt the encrypted business data, and the computing task component can perform computing operations on the business data.

S102. Obtain the encrypted business data of the second business party from the second business device corresponding to the second business party through the security proxy component according to the first data identifier, decrypt the encrypted business data of the second business party, and obtain the business data of the second business party.

In the present application, after receiving the computing task request, the security proxy component can verify whether the first business party has the request computing authority for the business data based on the computing task request. Specifically, the security code component can query the validity period of the first data identifier. When the current time is not within the validity period, it is determined that the first business party does not have the request computing authority for the business data. When the current time is within the validity period, it is determined that the first business party has the request computing authority for the business data. The computing task request can be sent to the second business device, and the second business device returns the encrypted business data of the second business party to the security proxy component, and the encrypted business data of the second business party is decrypted to obtain the business data of the second business party. By decrypting the encrypted business data in the security proxy component in the security sandbox, the business data can be prevented from being leaked and the security of the business data can be improved.

In particular, when the first business party is an institution, the security proxy component can query the business status of the institution corresponding to the first business party based on the object information in the computing task request. If the business status is normal, it is determined that the first business party has the request computing authority for the business data; if the business status is abnormal, it is determined that the first business party does not have the request computing authority for the business data. The abnormal state may refer to the situation where the registered address is abnormal or there is tax evasion, and the normal state may refer to the situation where there is no abnormal registered address or tax evasion.

In one embodiment, the encrypted business data of the second business party is obtained by concatenating the ciphertext data of the business data of the second business party and the first coordinate value. The ciphertext data of the business data of the second business party is obtained by encrypting the business data of the second business party according to the symmetric key, that is, the ciphertext data of the business data may refer to the encrypted business data. The first coordinate value is the coordinate value associated with the basic data on the elliptic curve group, that is, the first coordinate value is the coordinate value of the point on the elliptic curve in the elliptic curve group that maps the basic data to the horizontal axis.

The above-mentioned decryption of the encrypted business data of the second business party to obtain the business data of the second business party includes: the third business device can split the encrypted business data of the second business party according to the splicing order of the ciphertext data of the business data of the second business party and the first coordinate value, and the data length of the ciphertext data, to obtain the ciphertext data of the business data of the second business party and the first coordinate value. The third business device can generate the second coordinate value and the third coordinate value associated with the third private key on the elliptic curve group according to the first coordinate value, the second public key, and the third private key of the trusted third party. A symmetric key is generated according to the first coordinate value, the second coordinate value and the third coordinate value, the first public key, and the third public key corresponding to the third private key; according to the symmetric key, the ciphertext data of the business data of the second business party is decrypted to obtain the business data of the second business party. By decrypting the encrypted business data in the sandbox through the security proxy component, it is possible to prevent the unencrypted business data from being obtained by illegal business parties, thereby improving the security of the business data.

Among them, the concatenation order of the ciphertext data of the business data of the second business party and the first coordinate value, and the data length of the ciphertext data of the business data may refer to the pre-agreed agreement between the second business party and the trusted third party. For example, if the concatenation order is that the first coordinate value is concatenated after the ciphertext data of the business data, and the data length of the ciphertext data of the business data is L1, then the first L1 bits in the encrypted business data of the second business party are the ciphertext data of the business data, and the data after the L1 bit is the first coordinate value.

Among them, the second coordinate value is the coordinate value of the point on the vertical axis that maps the third private key to the elliptic curve in the elliptic curve group, the third coordinate value is the coordinate value of the point on the vertical axis that maps the third private key to the elliptic curve in the elliptic curve group, and the point on the elliptic curve in the elliptic curve group mapped to the basic data and the point on the elliptic curve in the elliptic curve group mapped to the third private key are the same coordinate point.

For example, the encrypted business data of the second business party can be expressed as the following formula (1):

(1)

Among them, in formula (1) The encrypted business data of the second business party, is the first coordinate value, is the ciphertext data of the business data, For splicing, the third service equipment can Split it and get ,and , is the business data of the second business party. The second coordinate value and the third coordinate value are calculated based on the following formula (2):

(2)

Among them, in formula (2) is the second coordinate value, is the third coordinate value, that is, the second coordinate value is the first coordinate value The third coordinate value is of The symmetric key between the second business party and the trusted third party is calculated based on the following formula (3):

(3)

Among them, in formula (3) is a symmetric key, For hash operation, call the symmetric decryption algorithm right Decryption is performed to obtain the business data of the second business party.

S103. Perform a computing operation on the business data of the second business party according to the execution file by running the computing task component in the security sandbox to obtain an execution result.

In the present application, after the security proxy component obtains the business data and execution file, the execution file and business data can be sent to the computing task component running in the above-mentioned security sandbox. Through the computing task component, the business data of the second business party is added to the execution file, and the added execution file is executed to obtain the execution result; the computing tasks related to the business data are implemented in a completely isolated environment (i.e., the security sandbox), thereby improving the security of the business data.

In one embodiment, the above S103 includes: the computing task request also includes a second data identifier of the encrypted business data of the first business party; the third business device can obtain the encrypted business data of the first business party from the first business device based on the second data identifier of the encrypted business data of the first business party, decrypt the encrypted business data of the first business party to obtain the business data of the first business party, add the business data of the first business party and the business data of the second business party to the execution file to obtain the added execution file, execute the added execution file, and obtain the execution result.

Among them, the encrypted business data of the first business party can be obtained by encrypting the business data of the first business party based on the third public key. At this time, the third business device can decrypt the encrypted business data of the first business party based on the third private key to obtain the business data of the first business party. Alternatively, the encrypted business data of the first business party can be obtained by encrypting the business data of the first business party based on a symmetric key. The third business device can decrypt the encrypted business data of the first business party based on the symmetric key to obtain the business data of the first business party. The symmetric key here can refer to the symmetric key between the first business party and the trusted third party. The decryption process of the encrypted business data of the first business party based on the symmetric key can refer to the above-mentioned decryption process of the encrypted business data of the second business party based on the symmetric key.

It should be noted that the image file can be obtained by compressing the code that performs computing operations on the business data; when the execution file is a mirror file corresponding to the code used to perform computing operations on the business data, the trusted third party can decompress the image file to obtain the code used to perform computing operations on the business data, add the business data to the code, and obtain the added execution file.

In one embodiment, in the above-mentioned federated learning, the business data is the training data, the execution file is the initial machine learning model to be trained, the calculation operation on the business data may be to identify the training data and obtain the identification label of the training data, and the execution result may refer to the machine learning model trained based on the training data. Specifically, the training data is input into the initial machine learning model, the training data is identified by the initial machine learning model to obtain the identification label, and the initial machine learning model is trained according to the identification label and the annotation label of the training data to obtain the trained machine learning model.

Among them, the identification label can refer to the label obtained by the initial machine learning model to identify the training data, and the annotation label can refer to the label obtained by manually annotating the training data. The identification label and the annotation label can be used to reflect the attribute characteristics of the training data.

Among them, in the joint risk control scenario, the training data may include the transaction data of users in banking institutions, trust institutions, fund companies, etc. The identification labels and annotation labels of the training data reflect whether the user has abnormal financial behavior, or reflect that the user does not have abnormal financial behavior; the trained machine learning model can be used to implement risk control management, such as identifying whether the user has abnormal financial behavior.

Among them, in the joint advertising scenario, the training data may include the advertising behavior data of users in response to advertising content provided by the advertising platform, the purchasing behavior data of users in response to products provided by product merchants, and the identification labels and annotation labels of the training data include advertising content that users are interested in. The trained machine learning model can generate advertising content that users are interested in.

Among them, in the joint marketing scenario, the training data may include the basic information of users provided by the marketing agency; the purchasing behavior data of users for products provided by product merchants; the identification labels and annotation labels of the training data include the marketing strategies of the products; and the trained machine learning model can generate the marketing strategies of the products.

Among them, in a joint query or an anonymous query, the business data is the query result obtained by the joint query or the anonymous query, the execution file can be used to instruct deduplication processing, statistical processing, etc. of the query results, the calculation operation on the business data can refer to deduplication processing, statistical processing, etc. of the query results, and the execution result can refer to the processed query result.

For example, the computing task request of the first business party also carries a query condition, which indicates to query the annual profit of a company in 2023. The business data includes the total revenue and total expenditure of the company in 2023 queried from the company (the second business party); the calculation operation on the business data can refer to subtracting the total revenue and total expenditure of the company in 2023 to obtain the annual profit of the company in 2023, that is, the annual profit of the company in 2023 is the execution result.

In particular, the query result can be used as the above-mentioned training data to train the initial machine learning model, and the execution result at this time may refer to the trained machine learning model.

S104. Perform aggregate encryption on the execution result through the security proxy component according to the first public key of the first business party and the second public key of the second business party to obtain an encrypted execution result, and send the encrypted execution result to the first business device and the second business device.

In this application, by performing aggregate encryption on the execution results, the final execution result can only be obtained when both the first business party and the second business party participate in the decryption process. This is conducive to ensuring the common ownership of the data collaboration results (i.e., the execution results) and ensuring the security and controllability of the execution results without the need for complex manual review.

Among them, the above-mentioned first business device is used to aggregately decrypt the above-mentioned encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the above-mentioned execution result. The above-mentioned first part of the decryption result is obtained by the above-mentioned first business device decrypting the above-mentioned encrypted execution result based on the first private key corresponding to the above-mentioned first public key. The above-mentioned second part of the decryption result is sent to the above-mentioned first business device when the above-mentioned second business device determines that the business data of the above-mentioned second business party cannot be restored based on the above-mentioned execution file, and the above-mentioned second part of the decryption result is obtained by decrypting the above-mentioned encrypted execution result based on the second private key corresponding to the above-mentioned second public key.

The execution file in the second business device is sent to the second business device by the first business device or the security proxy component, such as after the first business device sends the computing task request to the security proxy component of the third business device, the computing task request can be synchronized to the second business device. Alternatively, the computing task request can be synchronized to the second business device by the security proxy component, and the second business device can obtain the execution file from the computing task request.

Among them, since the first business party provides the execution file and the second business party provides the business data, the ownership of the execution result of the business data is jointly owned by the first business party and the second business party, that is, when the second business device sends the second part of the decryption result to the first business device, it is equivalent to the second business party authorizing the first business party to use the execution result. When the second business device determines that the business data can be restored based on the execution file, it can refuse to send the second part of the decryption result to the first business device, so that the first business device cannot decrypt the execution result, which can ensure the security and controllability of the execution result.

Among them, aggregate encryption can refer to an encryption method in which the first business party and the second business party participate, that is, the aggregate encryption process requires the first public key of the first business party and the second public key of the second business party. Aggregate decryption can refer to a decryption method in which the first business party and the second business party participate, that is, the aggregate decryption process requires the first private key of the first business party and the second private key of the second business party, and the private keys of each business party are managed by themselves. Therefore, the aggregate decryption process requires partial decryption results of the first business party and partial decryption results of the second business party, that is, only one business party participating cannot decrypt the execution result.

Among them, the encrypted execution result may refer to the execution result after aggregate encryption. Whether the business data of the second business party can be restored based on the execution file may be determined according to the computational complexity of the execution file. For a specific description, please refer to the following.

The first part of the decryption result may refer to the data decrypted from the encrypted execution result based on the first private key, and the second part of the decryption result may refer to the data decrypted from the encrypted execution result based on the second private key. Neither the first part of the decryption result nor the second part of the decryption result is the final execution result. For a description of the first part of the decryption result and the second part of the decryption result, please refer to the following.

In one embodiment, the above-mentioned execution result is aggregated and encrypted according to the first public key of the first business party and the second public key of the second business party through the above-mentioned security proxy component to obtain an encrypted execution result, including: the third business device can multiply the first public key of the first business party and the second public key of the second business party through the above-mentioned security proxy component to obtain a joint public key; the rth power of the joint public key is determined as a derived public key. The rth power of the basic data is obtained to obtain the extended basic data; r is the above-mentioned first random number, and the above-mentioned basic data is the data used to calculate the above-mentioned first public key and the above-mentioned second public key. The third business device can aggregate and encrypt the above-mentioned execution result according to the above-mentioned extended basic data and the above-mentioned derived public key to obtain an encrypted execution result. By aggregate encryption of the execution result, the encrypted execution result can be aggregated and decrypted only when both the first business party and the second business party participate, which is conducive to ensuring the shared ownership of the execution result and realizing the security and controllability of the execution result.

In one embodiment, the execution result is aggregated and encrypted based on the extended basic data and the derived public key to obtain an encrypted execution result, including: the third service device can perform a hash operation on the derived public key and the execution result to obtain a hash value, and use the hash value as the summary data of the execution result. According to the data length of the execution result, the derived public key is extended to obtain a random byte stream; the random byte stream and the execution result are XORed to obtain an XORed result; the extended basic data, the summary data and the XORed result are concatenated to obtain an encrypted execution result.

The data length of the random byte stream is the same as the data length of the execution result, that is, the random byte stream may be obtained by adding a random number to the derived public key according to the data length of the execution result.

The above XOR processing may refer to comparing the random byte stream with the two data at the same position in the execution result. When the two data are the same, the comparison result of the position is 0, and when the two data are different, the comparison result of the position is 1. The comparison results of all positions are the XOR processing results. For example, if the random byte stream is 0101 and the execution result is 1011, the XOR processing result is 1110.

For example, the third service device may calculate the joint public key based on the following formula (4):

(4)

Among them, in formula (4) The rth power of the joint public key is used as the derived public key, that is, the derived public key can be expressed by the following formula (5):

(5)

Among them, in formula (5) To derive the public key, a key derivation function (KDF) is used to convert Expand to a random byte stream with the same data length as the execution result. Perform XOR processing on the random byte stream and the execution result to obtain an XOR processing result, which can be expressed by the following formula (6):

(6)

Among them, in formula (6) is the result of XOR processing, For the execution result, is a random byte stream, is an XOR process (i.e., an XOR calculation symbol). A hash operation is performed on the derived public key and the execution result to obtain the summary data of the execution result. The summary data can be expressed by the following formula (7):

(7)

Among them, in formula (7) The summary data representing the execution result is the rth power of the basic data as the extended basic data. The extended basic data, the summary data and the XOR processing result are concatenated to obtain the encrypted execution result. The encrypted execution result can be expressed by the following formula (8):

(8)

Among them, the To encrypt the execution result, To expand the basic data.

In one embodiment, the third business device performs a computing operation on the business data of the first business party and the business data of the second business party based on the execution file to perform a computing task. The execution process of the computing task is shown in Figure 6. The first business device includes a first data proxy component, the second business device includes a second data proxy component, and the third business device includes a security proxy component and a computing task component. The execution process of the computing task includes the following steps S61 to S69:

S61. The first data proxy component sends the encrypted business data of the first business party to the security proxy component; the first data proxy component can encrypt the business data of the first business party to obtain the encrypted business data of the first business party, such as the first data proxy component can encrypt the business data of the first business party according to the third public key to obtain the encrypted business data of the first business party. The encrypted business data of the first business party is sent to the security proxy component.

S62, the second data proxy component sends the encrypted business data of the second business party to the security proxy component; the second data proxy component can encrypt the business data of the second business party to obtain the encrypted business data of the second business party, for example, the second data proxy component can encrypt the business data of the second business party according to the third public key to obtain the encrypted business data of the second business party. The encrypted business data of the second business party is sent to the security proxy component.

S63, the security proxy component sends the decrypted business data and execution file to the computing task component; for example, the security proxy component can decrypt the encrypted business data of the first business party and the encrypted business data of the second business party to obtain the business data of the first business party and the business data of the second business party. If the encrypted business data of the first business party and the encrypted business data of the second business party are both encrypted based on the third public key, the security proxy component can decrypt the encrypted business data of the first business party and the encrypted business data of the second business party respectively according to the third private key to obtain the business data of the first business party and the business data of the second business party. The business data and execution files of the first business party and the second business party are sent to the computing task component through the service interface of the security proxy component.

S64. The computing task component may perform computing operations on the business data according to the execution file to obtain an execution result. The computing task component may add the business data of the first business party and the second business party to the execution file, and execute the added execution file to obtain an execution result.

S65. The security proxy component aggregates and encrypts the execution results to obtain an encrypted execution result. The computing task component can return the execution result to the security proxy component through the service interface. The security proxy component can aggregate and encrypt the execution results according to the first public key of the first business party and the second public key of the second business party to obtain an encrypted execution result.

S66. The security proxy component sends the encryption execution result to the first data proxy component.

S67. The first data proxy component receives and stores the encryption execution result.

In steps S66~S67, when the security proxy component obtains the encrypted execution result, it can send the encrypted execution result to the first data proxy component. The first data proxy component can receive the encrypted execution result and store the encrypted execution result so that the first business device can aggregate and decrypt the encrypted execution result based on the second part of the decryption result of the second business device and its own first part of the decryption result to obtain the execution result.

S68. The security proxy component sends the encryption execution result to the second data proxy component.

S69. The second data proxy component receives and stores the encryption execution result.

In steps S68~S69, when the security proxy component obtains the encrypted execution result, it can send the encrypted execution result to the second data proxy component. The second data proxy component can receive the encrypted execution result and store the encrypted execution result so that the second business device can decrypt the encrypted execution result to obtain the second part of the decrypted result.

In one embodiment, the third business device can divide the execution result to obtain a first execution sub-result and a second execution sub-result. For example, if the data length of the execution result is L3, the first L4 bits of the execution result can be used as the first execution sub-result, and the data after the L4th bit in the execution result can be used as the second execution sub-result, where L4 is less than L3. The first execution sub-result is encrypted using the first public key to obtain a first encrypted execution sub-result, and the first encrypted sub-result is sent to the first business device. The second execution sub-result is encrypted using the second public key to obtain a second encrypted execution sub-result, and the second encrypted sub-result is sent to the second business device.

The first business device can decrypt the first encrypted sub-result based on the first private key to obtain a first execution sub-result, receive the second execution sub-result sent by the second business device, and concatenate the first execution sub-result and the second execution sub-result to obtain an execution result. The second execution sub-result sent by the second business device is obtained by the second business device decrypting the second encrypted sub-result based on the second private key.

The present application has at least the following beneficial effects: (1) Deploy security proxy components and computing task components in the security sandbox of the trusted third party corresponding to each business party, and the decryption and computing process of the encrypted business data of the second business party are all realized through the security proxy components and computing task components in the security sandbox, that is, the business data of each business party is circulated through the security sandbox, and there is no need to create independent clusters for each business party, nor to rely on dedicated hardware, thereby reducing the circulation cost of business data and improving the convenience of the business data circulation process. In addition, the circulation process does not require manual participation, thereby improving the circulation efficiency of business data. (2) By aggregate encryption of the execution results, the second business party will send the second part of the decryption result obtained by itself to the first business party only when it determines that the execution file cannot restore the original data (that is, the business data). In this way, the first business party can aggregate and decrypt the encrypted execution results based on the first part of the decryption result obtained by itself and the second part of the decryption result received to obtain the execution result, which can ensure the shared ownership of the execution results by the first and second business parties, realize the security and controllability of the execution results, and improve the security of the execution results.

Further, please refer to Figure 7, which is a flowchart of another data processing method provided by an embodiment of the present application. As shown in Figure 7, the method can be executed by a device corresponding to the first business party, and the device corresponding to the trusted first business party can refer to the terminal in Figure 1, or the server in Figure 1, or the terminal and the server. In the present application, the device corresponding to the first business party can be collectively referred to as the first business device. Among them, the method can include the following steps:

S201. Send a computing task request to a security proxy component running in a security sandbox of a trusted third party.

The computing task request includes an execution file for executing a computing operation on the business data of the second business party, and a first data identifier of the encrypted business data corresponding to the business data. The security proxy component is used to obtain the encrypted business data of the second business party from the second business device corresponding to the second business party according to the first data identifier, decrypt the encrypted business data of the second business party, and obtain the business data of the second business party.

In the present application, the task submission component in the first business device can generate a computing task request, send the computing task request to the task scheduling component in the first business device, and the task scheduling component in the first business device synchronizes the computing task request to the task scheduling component in the third business. The task scheduling component in the third business forwards the computing task request to the security proxy component.

S202: Receive the encryption execution result sent by the security proxy component.

Among them, the above-mentioned encrypted execution result is obtained by the above-mentioned security agent component by aggregately encrypting the execution result according to the first public key of the first business party and the second public key of the above-mentioned second business party, and the above-mentioned execution result is obtained by the computing task component running in the above-mentioned security sandbox, which performs computing operations on the business data of the above-mentioned second business party according to the above-mentioned execution file.

S203. Decrypt the encryption execution result according to the first private key corresponding to the first public key to obtain a first partial decryption result, and receive a second partial decryption result sent by a second business device corresponding to the second business party.

The second part of the decryption result is sent to the first business device corresponding to the first business party when the second business device determines that the business data of the second business party cannot be restored based on the execution file, and the second part of the decryption result is obtained by decrypting the encrypted execution result based on the second private key corresponding to the second public key. The encrypted execution result is sent to the second business device by the security proxy component, and the execution file in the second business device is sent to the second business device by the first business device or the security proxy component.

In one embodiment, the encrypted execution result is decrypted according to the first private key corresponding to the first public key to obtain the first part of the decrypted result, including: since the encrypted execution result is obtained by splicing the extended basic data, the summary data of the execution result and the XOR processing result, the first business device can extract the extended basic data from the encrypted execution result according to the splicing order and the data length of each data (i.e., the extended basic data, the summary data of the execution result and the XOR processing result). For example, the splicing order from left to right is: extended basic data, summary data of the execution result, XOR processing result; that is, the summary data of the execution result is spliced after the extended basic data, and the XOR processing result is spliced after the summary data of the execution result. Assuming that the data length of the extended basic data is L2, the first L2 bits of the encrypted execution result are the extended basic data. The extended basic data is the rth power of the basic data, r is a first random number, and the basic data is the data used to calculate the first public key and the second public key. Obtain the extended basic data To the power of , we get the first part of the decryption result; is the first private key corresponding to the first public key.

For example, the first service device may use the following formula (9) to calculate the first part of the decryption result:

(9)

Among them, in formula (9) Decryption result for the first part.

Similarly, the second business device decrypts the above-mentioned encrypted execution result according to the second private key corresponding to the above-mentioned second public key to obtain the second part of the decrypted result, including: the second business device can extract the extended basic data from the encrypted execution result according to the splicing order and the data length of each data (i.e., the extended basic data, the summary data of the execution result and the XOR processing result); the above-mentioned extended basic data is the rth power of the basic data, r is the first random number, and the above-mentioned basic data is the data used to calculate the above-mentioned first public key and the above-mentioned second public key. To the power of , we get the second part of the decryption result; It is the second private key corresponding to the above second public key.

For example, the second service device may use the following formula (10) to calculate the second part of the decryption result:

(10)

Among them, in formula (10) Decrypt the result for the second part.

S204. According to the first part of the decryption results and the second part of the decryption results, the encrypted execution results are aggregated and decrypted to obtain the execution results.

In one embodiment, the above step S204 may include: the first service device may extract the summary data and the XOR processing result of the execution result from the encrypted execution result according to the splicing order and the data length of each data (i.e., the extended basic data, the summary data of the execution result, and the XOR processing result); the XOR processing result is obtained by XOR processing the random byte stream and the above execution result. For example, the splicing order from left to right is: extended basic data, summary data of the execution result, XOR processing result; that is, the summary data of the execution result is spliced after the extended basic data, and the XOR processing result is spliced after the summary data of the execution result. Assume that the data length of the extended basic data is 5, the data length of the summary data of the execution result is 10, and the data length of the XOR processing result is 10; the first 5 bits of the encrypted execution result are the extended basic data, the 6th to 15th bits of the encrypted execution result are the summary data of the execution result, and the 16th to 25th bits of the encrypted execution result are the XOR processing result. The above first part of the decryption result and the above second part of the decryption result are multiplied to obtain a derived public key. According to the data length of the XOR processing result, the derived public key is extended to obtain the random byte stream; the data length of the XOR processing result is the same as the data length of the execution result. The execution result is determined based on the XOR processing result, the random byte stream, the derived public key, and the summary data of the execution result. The first business party and the second business party participate in the aggregate decryption process of the encrypted execution result, which is conducive to ensuring the shared ownership of the execution result, ensuring the security and controllability of the execution result, and improving the security of the execution result.

In one embodiment, the above-mentioned determination of the execution result according to the above-mentioned XOR processing result, the above-mentioned random byte stream, the above-mentioned derived public key, and the summary data of the above-mentioned execution result includes: the first business device performs XOR processing on the above-mentioned XOR processing result and the random byte stream to obtain an initial execution result; performs hash operation on the initial execution result and the above-mentioned derived public key to obtain a hash operation result; when the hash operation result matches the summary data of the above-mentioned execution result, the above-mentioned initial execution result is used to determine the execution result of the business data. When the hash operation result does not match the summary data of the above-mentioned execution result, the execution result fails to be decrypted, and the decryption failure is returned to the second business device so as to return the second part of the decryption result again. Alternatively, the decryption failure can be returned to the third business device corresponding to the trusted third party to re-aggregate and encrypt the execution result to obtain an encrypted execution result. The first business party and the second business party participate in the aggregate decryption process of the encrypted execution result, which is conducive to ensuring the shared ownership of the execution result, ensuring the security and controllability of the execution result, and improving the security of the execution result.

For example, the first service device may calculate the derived public key based on the following formula (11):

(11)

Further, using the key derivation function, The random byte stream is expanded to have the same data length as the data length of the execution result, and the XOR processing result is XORed with the random byte stream to obtain the initial execution result. The initial execution result can be expressed by the following formula (12):

(12)

Among them, in formula (12) is the initial execution result, is a random byte stream, is the XOR processing result. The initial execution result and the above-mentioned derived public key are hashed to obtain a hash operation result, which can be expressed by the following formula (13):

(13)

Among them, in formula (13) Indicates the result of the hash operation, that is, the result of the hash operation is a hash value. If the hash operation result is the same as the digest, Determine the execution result.

For example, the decryption process for the encryption execution result is shown in FIG8 , and the decryption process includes the following steps S81 to S84:

S81. The first business device decrypts to obtain a first part of the decryption result; that is, the first business device can decrypt the encryption execution result according to the first private key of the first business party to obtain the first part of the decryption result. The specific implementation process can refer to the above description.

S82. The second business device decrypts to obtain a second part of the decryption result; that is, the second business device can decrypt the encryption execution result according to the second private key of the second business party to obtain the second part of the decryption result. The specific implementation process can refer to the above description.

S83. The second business device sends the second part of the decryption result to the first business device. When the second business device determines that the business data cannot be restored based on the execution file, the second business device can send the second part of the decryption result to the first business device to authorize the first business party to use the execution result.

S84. The first service device aggregates and decrypts the encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain an execution result.

In summary, only when the second business party authorizes and agrees that the first business party can use the execution result, can the first business device aggregate and decrypt the encrypted execution result based on the first part of the decryption result and the second part of the decryption result to obtain the execution result. This ensures the shared ownership of the execution result by the first and second business parties, realizes the security and controllability of the execution result, and improves the security of business data and execution results.

In the present application, the second part of the decryption result is obtained from the second business device through the first business device, and the encrypted execution result is decrypted based on the first part of the decryption result and the second part of the decryption result to obtain the execution result. This can ensure the shared ownership of the execution result by the first business party and the second business party, achieve the security and controllability of the execution result, and improve the security of the execution result.

Further, please refer to Figure 9, which is a flowchart of another data processing method provided by an embodiment of the present application. As shown in Figure 9, the method can be executed by a device corresponding to the second business party. The device corresponding to the trusted second business party can refer to the terminal in Figure 1, or the server in Figure 1, or the terminal and the server. In the present application, the device corresponding to the second business party can be collectively referred to as the second business device. Among them, the method can include the following steps:

S301. Send encrypted business data of a second business party to a security proxy component running in a security sandbox of a trusted third party according to a first data identifier carried in a computing task request.

Among them, the above-mentioned computing task request is sent by the first business device corresponding to the first business party to the above-mentioned security proxy component, and the above-mentioned computing task request includes an execution file for performing computing operations on the business data of the second business party, and a first data identifier of the encrypted business data corresponding to the above-mentioned business data. The above-mentioned security proxy component is used to decrypt the encrypted business data of the above-mentioned second business party to obtain the business data of the above-mentioned second business party.

In the present application, the second business device can receive a computing task request sent by the first business device, or receive a computing task request sent by the third business device; based on the first data identifier in the computing task request, the second business party's encrypted business data is sent to the security agent component running in the security sandbox of the trusted third party.

S302: Receive the encryption execution result of the business data sent by the security proxy component.

The encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party. The execution result is obtained by the computing task component running in the security sandbox performing computing operations on the business data of the second business party according to the execution file.

S303: When it is determined that the business data of the second business party cannot be restored based on the execution file, the encrypted execution result is decrypted according to the second private key corresponding to the second public key to obtain a second part of the decrypted result.

The execution file in the second service device corresponding to the second service party is sent from the first service device or the security proxy component to the second service device.

In one embodiment, the above determination that the business data of the second business party cannot be restored based on the above execution file includes: the second business device can obtain the calculation information corresponding to the calculation operation on the business data of the second business party from the above execution file, and the calculation information may include the calculation method and calculation duration of the business data of the second business party. The second business device can determine the calculation complexity corresponding to the calculation operation on the business data of the second business party based on the above calculation information; when the above calculation complexity is greater than the complexity threshold, it is determined that the business data of the second business party cannot be restored based on the above execution file. By determining the calculation complexity of the business data of the second business party, it is determined whether the business data of the second business party can be restored from the execution file, thereby preventing the first business party from obtaining the unencrypted business data of the second business party and improving the security of the business data.

Among them, the complexity threshold can be preset, or the complexity threshold can be determined according to the application scenario. For example, if the privacy of the business data of the second business party in the application scenario is relatively high, the first value is determined as the complexity threshold; if the privacy of the business data of the second business party in the application scenario is relatively low, the second value is determined as the complexity threshold; the first value is greater than the second value.

Among them, when the calculation information includes the calculation duration, the calculation complexity corresponding to the calculation operation for the above-mentioned business data can be determined according to the calculation duration. That is, the longer the calculation duration, the higher the calculation complexity; conversely, the shorter the calculation duration, the lower the calculation complexity. When the calculation information includes the calculation method and the calculation duration corresponding to each calculation method, the second business device can obtain the weight corresponding to each calculation method, use the weight of the calculation method to weight the calculation duration corresponding to the calculation method, obtain the weighted calculation duration, sum the weighted calculation durations corresponding to various calculation methods, and obtain the calculation complexity corresponding to the calculation operation for the above-mentioned business data. The weight corresponding to the calculation method can be pre-set, such as the weight corresponding to the multiplication and division calculation methods is greater than the weight corresponding to the subtraction and addition calculation methods.

In one embodiment, the second business device can encrypt the business data of the second business party according to the object key to obtain the encrypted business data of the second business party. Specifically, the second business device can generate a symmetric key according to the basic data, the third public key of the trusted third party, and the second private key; the x-th power of the basic data is determined as the first coordinate value associated with the basic data on the elliptic curve group, and x is a second random number. According to the symmetric key and the first coordinate value, the business data of the second business party is encrypted to obtain the encrypted business data of the second business party; the encrypted business data of the second business party is hashed to obtain the data identifier of the encrypted business data of the second business party. The data identifier of the encrypted business data is sent to the first business device corresponding to the first business party to authorize the first business party to request computing authority for the business data. By encrypting the business data through the second business device, the business data can be prevented from being leaked during transmission, thereby improving the security of the business data.

In one embodiment, the generation of the symmetric key based on the basic data, the third public key of the trusted third party, and the second private key includes: the second service device may determine the xth power of the third public key of the trusted third party as the second coordinate value associated with the third public key on the elliptic curve group. to the power, obtaining a third coordinate value associated with the third public key on the elliptic curve group; The second private key is the third public key, the second public key, the first coordinate value, the second coordinate value and the third coordinate value are hashed to obtain a symmetric key. By generating a symmetric key, the service data is encrypted so that the third service device can decrypt the encrypted service data based on the same symmetric key, thereby improving the convenience of decryption.

It should be noted that the second coordinate value here is the coordinate value of the point on the elliptic curve in the elliptic curve group that maps the third public key to the coordinate value on the vertical axis, and the third coordinate value is the coordinate value of the point on the elliptic curve in the elliptic curve group that maps the third public key to the coordinate value on the vertical axis. Since the third public key is calculated based on the basic data and the third private key, the second coordinate value associated with the third private key on the elliptic curve group is the same as the second coordinate value associated with the third public key on the elliptic curve group; the third coordinate value associated with the third private key on the elliptic curve group is the same as the third coordinate value associated with the third public key on the elliptic curve group.

In one embodiment, the business data of the second business party is encrypted according to the symmetric key and the first coordinate value to obtain the encrypted business data of the second business party, including: the second business device can encrypt the business data of the second business party according to the symmetric key to obtain the ciphertext data of the business data; the ciphertext data of the business data is concatenated with the first coordinate value to obtain the encrypted business data of the second business party. This is conducive to the third business device to calculate the symmetric key based on the first coordinate value in the encrypted business data and its own private key to decrypt the ciphertext data of the business data to obtain the business data of the second business party, thereby improving the convenience of decryption.

For example, the second service device may generate a random number according to a random algorithm, and calculate the first coordinate value, the second coordinate value, and the third coordinate value according to the random number, the second private key, and the third public key. The first coordinate value, the second coordinate value, and the third coordinate value may be expressed by the following formula (14):

(14)

Among them, since the relationship between the third private key and the third public key is: ( ), the relationship between the second public key and the second private key is: ( ). Therefore, in formula (14) Compared with the formula (2) are the same value, in formula (14) Compared with the formula (2) The second service device can perform a hash operation on the third public key, the second public key, the first coordinate value, the second coordinate value and the third coordinate value to obtain a symmetric key, which can be expressed by the above formula (3). Calling a symmetric encryption algorithm Encrypting the business data of the second business party , obtain the ciphertext data of the business data, concatenate the first coordinate value with the ciphertext data of the business data, and obtain the encrypted business data of the second business party. The encrypted business data of the second business party can be expressed by the above formula (1).

It should be noted that, in the second business party, the symmetric key is generated based on the third public key, the second private key, the second random number and other parameters. Therefore, if the second private key is leaked at a certain time T, since the second random number is unknown, the encrypted business data of the second business party cannot be decrypted, which can ensure the forward security of the business data of the second business party. Forward security means ensuring that the encrypted business data of the second business party before time T will not be leaked.

S304: Send the second partial decryption result to the first service device corresponding to the first service party.

Among them, the above-mentioned first business device is used to aggregately decrypt the above-mentioned encrypted execution result according to the first part decryption result and the second part decryption result to obtain the above-mentioned execution result. The above-mentioned first part decryption result is obtained by the above-mentioned first business device decrypting the above-mentioned encrypted execution result based on the first private key corresponding to the above-mentioned first public key.

In this application, the second business device can prevent the unencrypted business data from being leaked during the transmission process by transmitting encrypted business data to the security proxy component, thereby improving the security of business data. By returning the second part of the decryption result to the first business device only when it is determined that the business data of the second business party cannot be restored based on the execution file, it can prevent the first business party from restoring the business data based on the execution file, thereby improving the security of business data; it can ensure the shared ownership of the execution results by the first business party and the second business party, realize the security and controllability of the execution results, and improve the security of the execution results and business data.

Please refer to Figure 10, which is a schematic diagram of the structure of a data processing device provided in an embodiment of the present application. As shown in Figure 10, the data processing device may include:

The receiving module 1010 is used to receive a computing task request sent by a first business device corresponding to the first business party through a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and a first data identifier of encrypted business data corresponding to the business data;

The decryption module 1011 is used to obtain the encrypted business data of the second business party from the second business device corresponding to the second business party through the security proxy component according to the first data identifier, decrypt the encrypted business data of the second business party, and obtain the business data of the second business party;

An execution module 1012 is used to execute a computing operation on the business data of the second business party according to the execution file by running a computing task component in the security sandbox to obtain an execution result;

The encryption module 1013 is used to perform aggregate encryption on the execution result through the security proxy component according to the first public key of the first business party and the second public key of the second business party to obtain an encrypted execution result, and send the encrypted execution result to the first business device and the second business device;

Among them, the above-mentioned first business device is used to aggregately decrypt the above-mentioned encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the above-mentioned execution result. The above-mentioned first part of the decryption result is obtained by the above-mentioned first business device decrypting the above-mentioned encrypted execution result based on the first private key corresponding to the above-mentioned first public key. The above-mentioned second part of the decryption result is sent to the above-mentioned first business device when the above-mentioned second business device determines that the business data of the above-mentioned second business party cannot be restored based on the above-mentioned execution file, and the above-mentioned second part of the decryption result is obtained by decrypting the above-mentioned encrypted execution result based on the second private key corresponding to the above-mentioned second public key. The execution file in the above-mentioned second business device is sent to the above-mentioned second business device by the above-mentioned first business device or the above-mentioned security agent component.

Optionally, the encryption module 1013 is specifically used for:

By means of the security proxy component, the first public key of the first business party and the second public key of the second business party are multiplied to obtain a joint public key;

According to the first random number, deriving the joint public key to obtain a derived public key;

Obtaining the rth power of the basic data to obtain the extended basic data, wherein r is the first random number, and the basic data is the data used to calculate the first public key and the second public key;

According to the above-mentioned extended basic data and the above-mentioned derived public key, the above-mentioned execution result is aggregated and encrypted to obtain an encrypted execution result.

Optionally, the encryption module 1013 is specifically used for:

Performing a hash operation on the derived public key and the execution result to obtain summary data of the execution result;

According to the data length of the above execution result, the above derived public key is extended to obtain a random byte stream;

Performing XOR processing on the random byte stream and the execution result to obtain an XOR processing result;

The extended basic data, the summary data and the XOR processing result are concatenated to obtain an encrypted execution result.

Optionally, the encrypted business data of the second business party is obtained by concatenating the ciphertext data of the business data of the second business party and the first coordinate value. The ciphertext data of the business data of the second business party is obtained by encrypting the business data of the second business party according to a symmetric key, and the first coordinate value is the coordinate value associated with the basic data on the elliptic curve group.

Optionally, the decryption module 1011 is specifically used for:

Splitting the encrypted business data of the second business party to obtain the first coordinate value and ciphertext data of the business data of the second business party;

Generate a second coordinate value and a third coordinate value associated with the third private key on the elliptic curve group according to the first coordinate value, the second public key, and the third private key of the trusted third party;

Generate a symmetric key according to the first coordinate value, the second coordinate value, the third coordinate value, the second public key, and the third public key corresponding to the third private key;

The ciphertext data of the business data of the second business party is decrypted according to the symmetric key to obtain the business data of the second business party.

Optionally, the computing task request further carries a second data identifier of the encrypted business data of the first business party;

Optionally, the execution module 1012 is specifically configured to:

Obtaining the encrypted business data of the first business party from the first business device through the security proxy component according to the second data identifier;

Decrypting the encrypted business data of the first business party to obtain the business data of the first business party;

By running the computing task component in the security sandbox, the computing operation is performed on the business data of the first business party and the second business party according to the execution file to obtain the execution result.

The present application has at least the following beneficial effects: (1) Deploy security proxy components and computing task components in the security sandbox of the trusted third party corresponding to each business party, and the decryption and computing process of the encrypted business data of the second business party are all realized through the security proxy components and computing task components in the security sandbox, that is, the business data of each business party is circulated through the security sandbox, and there is no need to create independent clusters for each business party, nor to rely on dedicated hardware, thereby reducing the circulation cost of business data and improving the convenience of the business data circulation process. In addition, the circulation process does not require manual participation, thereby improving the circulation efficiency of business data. (2) By aggregate encryption of the execution results, the second business party will send the second part of the decryption result obtained by itself to the first business party only when it determines that the execution file cannot restore the original data (that is, the business data). In this way, the first business party can aggregate and decrypt the encrypted execution results based on the first part of the decryption result obtained by itself and the second part of the decryption result received to obtain the execution result, which can ensure the shared ownership of the execution results by the first and second business parties, realize the security and controllability of the execution results, and improve the security of the execution results.

Please refer to Figure 11, which is a schematic diagram of the structure of another data processing device provided in an embodiment of the present application. As shown in Figure 11, the data processing device may include:

The sending module 1111 is used to send a computing task request to a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and a first data identifier of encrypted business data corresponding to the business data; the security proxy component is used to obtain the encrypted business data of the second business party from a second business device corresponding to the second business party according to the first data identifier, decrypt the encrypted business data of the second business party, and obtain the business data of the second business party;

The receiving module 1112 is used to receive the encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file;

The decryption module 1113 is used to decrypt the above-mentioned encrypted execution result according to the first private key corresponding to the above-mentioned first public key to obtain a first part of the decryption result, and receive the second part of the decryption result sent by the second business device corresponding to the second business party; the above-mentioned second part of the decryption result is sent to the first business device corresponding to the above-mentioned first business party when the above-mentioned second business device determines that the business data of the above-mentioned second business party cannot be restored based on the above-mentioned execution file, and the above-mentioned second part of the decryption result is obtained by decrypting the above-mentioned encrypted execution result based on the second private key corresponding to the above-mentioned second public key, the above-mentioned encrypted execution result is sent to the above-mentioned second business device by the above-mentioned security proxy component, and the execution file in the above-mentioned second business device is sent to the above-mentioned second business device by the above-mentioned first business device or the above-mentioned security proxy component;

The decryption module 1113 is further used to perform aggregate decryption on the encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the execution result.

Optionally, the decryption module 1113 is specifically used for:

Extracting summary data and an XOR processing result of the execution result from the encrypted execution result; the XOR processing result is obtained by performing XOR processing on the random byte stream and the execution result;

Multiplying the first partial decryption result and the second partial decryption result to obtain a derived public key;

According to the data length of the XOR processing result, the derived public key is extended to obtain the random byte stream;

Determine the execution result according to the XOR processing result, the random byte stream, the derived public key, and the summary data of the execution result;

Optionally, the decryption module 1113 is specifically used for:

Performing XOR processing on the XOR processing result and the random byte stream to obtain an initial execution result;

Performing a hash operation on the initial execution result and the derived public key to obtain a hash operation result;

When the above hash operation result matches the summary data of the above execution result, the above initial execution result is used to determine the execution result of the above business data.

Optionally, the decryption module 1113 is specifically used for:

Extract extended basic data from the encryption execution result; the extended basic data is the r-th power of the basic data, r is a first random number, and the basic data is data used to calculate the first public key and the second public key;

Get the above extended basic data To the power of , we get the first part of the decryption result; It is the first private key corresponding to the first public key.

In the present application, the second part of the decryption result is obtained from the second business device through the first business device, and the encrypted execution result is decrypted based on the first part of the decryption result and the second part of the decryption result to obtain the execution result. This can ensure the shared ownership of the execution result by the first business party and the second business party, achieve the security and controllability of the execution result, and improve the security of the execution result.

Please refer to Figure 12, which is a schematic diagram of the structure of another data processing device provided in an embodiment of the present application. As shown in Figure 12, the data processing device may include:

The sending module 1211 is used to send the encrypted business data of the second business party to the security proxy component running in the security sandbox of the trusted third party according to the first data identifier carried in the computing task request; the computing task request is sent to the security proxy component by the first business device corresponding to the first business party, and the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and the first data identifier of the encrypted business data corresponding to the business data, and the security proxy component is used to decrypt the encrypted business data of the second business party to obtain the business data of the second business party;

The receiving module 1212 is used to receive the encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file;

The decryption module 1213 is used to decrypt the encrypted execution result according to the second private key corresponding to the second public key to obtain a second part of the decryption result when it is determined that the business data of the second business party cannot be restored based on the execution file; the execution file in the second business device corresponding to the second business party is sent to the second business device by the first business device or the security proxy component;

The above-mentioned sending module 1211 is also used to send the above-mentioned second part of the decryption result to the first business device corresponding to the above-mentioned first business party; the above-mentioned first business device is used to aggregate and decrypt the above-mentioned encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the above-mentioned execution result. The above-mentioned first part of the decryption result is obtained by the above-mentioned first business device decrypting the above-mentioned encrypted execution result based on the first private key corresponding to the above-mentioned first public key.

Optionally, the decryption module 1213 is specifically used for:

Extract extended basic data from the encryption execution result; the extended basic data is the r-th power of the basic data, r is a first random number, and the basic data is data used to calculate the first public key and the second public key;

Get the above extended basic data To the power of , we get the second part of the decryption result; It is the second private key corresponding to the above second public key.

Optionally, the decryption module 1213 is specifically used for:

Obtaining, from the execution file, calculation information corresponding to the calculation operation on the business data of the second business party;

Determine, according to the calculation information, the calculation complexity corresponding to the calculation operation on the business data of the second business party;

When the calculation complexity is greater than the complexity threshold, it is determined that the business data of the second business party cannot be restored based on the execution file.

Optionally, the sending module 1211 is specifically configured to generate a symmetric key according to the basic data, the third public key of the trusted third party, and the second private key;

The x-th power of the basic data is determined as the first coordinate value associated with the basic data on the elliptic curve group; x is a second random number;

Encrypting the business data of the second business party according to the symmetric key and the first coordinate value to obtain the encrypted business data of the second business party;

Performing a hash operation on the encrypted business data of the second business party to obtain a data identifier of the encrypted business data of the second business party;

The data identifier of the encrypted business data of the second business party is sent to the first business device corresponding to the first business party.

Optionally, the sending module 1211 is specifically configured to:

Determine the xth power of the third public key of the trusted third party as the second coordinate value associated with the third public key on the elliptic curve group;

The third public key of the above trusted third party to the power, obtaining a third coordinate value associated with the third public key on the elliptic curve group; is the above-mentioned second private key;

A hash operation is performed on the third public key, the second public key, the first coordinate value, the second coordinate value and the third coordinate value to obtain a symmetric key.

In this application, the second business device can prevent the unencrypted business data from being leaked during the transmission process by transmitting encrypted business data to the security proxy component, thereby improving the security of business data. By returning the second part of the decryption result to the first business device only when it is determined that the business data of the second business party cannot be restored based on the execution file, it can prevent the first business party from restoring the business data based on the execution file, thereby improving the security of business data; it can ensure the shared ownership of the execution results by the first business party and the second business party, realize the security and controllability of the execution results, and improve the security of the execution results and business data.

Please refer to Figure 13, which is a structural diagram of a computer device provided by an embodiment of the present application. As shown in Figure 13, the above-mentioned computer device 1000 may refer to a terminal or a server, including: a processor 1001, a network interface 1004 and a memory 1005. In addition, the above-mentioned computer device 1000 may also include: a user interface 1003, and at least one communication bus 1002. Among them, the communication bus 1002 is used to realize the connection and communication between these components. Among them, in some embodiments, the user interface 1003 may include a display screen (DiSPlay), a keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1005 may be a high-speed RAM memory, or it may be a non-volatile memory (non-volatileMeMory), such as at least one disk memory. The memory 1005 may also be at least one storage device away from the aforementioned processor 1001. As shown in FIG. 13 , the memory 1005 as a computer-readable storage medium may include an operating system, a network communication module, a user interface module, and a computer program.

In the computer device 1000 shown in FIG. 13 , the network interface 1004 can provide a network communication function; the user interface 1003 is mainly used to provide an input interface; and the processor 1001 can be used to call a computer program stored in the memory 1005 to implement the steps in each method embodiment of the present application.

The present application has at least the following beneficial effects: (1) Deploy security proxy components and computing task components in the security sandbox of the trusted third party corresponding to each business party, and the decryption and computing process of the encrypted business data of the second business party are all realized through the security proxy components and computing task components in the security sandbox, that is, the business data of each business party is circulated through the security sandbox, and there is no need to create independent clusters for each business party, nor to rely on dedicated hardware, thereby reducing the circulation cost of business data and improving the convenience of the business data circulation process. In addition, the circulation process does not require manual participation, thereby improving the circulation efficiency of business data. (2) By aggregate encryption of the execution results, the second business party will send the second part of the decryption result obtained by itself to the first business party only when it determines that the execution file cannot restore the original data (that is, the business data). In this way, the first business party can aggregate and decrypt the encrypted execution results based on the first part of the decryption result obtained by itself and the second part of the decryption result received to obtain the execution result, which can ensure the shared ownership of the execution results by the first and second business parties, realize the security and controllability of the execution results, and improve the security of the execution results.

It should be understood that the computer device described in the embodiments of the present application can execute the description of the above data processing method in the corresponding embodiments above, and can also execute the description of the above data processing device in the corresponding embodiments above, which will not be repeated here. In addition, the description of the beneficial effects of adopting the same method will not be repeated.

The data collection and processing in this application should be strictly in accordance with the requirements of relevant laws and regulations when applied in practice, and the informed consent or separate consent of the personal information subject should be obtained. Subsequent data use and processing should be carried out within the scope of authorization of laws and regulations and the personal information subject.

In addition, it should be pointed out here that: the embodiment of the present application also provides a computer-readable storage medium, and the computer-readable storage medium stores a computer program executed by the data processing device mentioned above, and the computer program includes program instructions. When the processor executes the program instructions, it can execute the description of the data processing method in the corresponding embodiment above, so it will not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated. For technical details not disclosed in the computer-readable storage medium embodiment involved in this application, please refer to the description of the method embodiment of this application.

As an example, the above program instructions may be deployed on a computer device for execution, or deployed on at least two computer devices at one location for execution, or executed on at least two computer devices distributed at at least two locations and interconnected through a communication network. At least two computer devices distributed at at least two locations and interconnected through a communication network may constitute a blockchain network.

The computer-readable storage medium may be the data processing device provided in any of the aforementioned embodiments or the central storage unit of the computer device, such as a hard disk or a memory of the computer device. The computer-readable storage medium may also be an external storage device of the computer device, such as a plug-in hard disk, a smart memory card (SMART Media card, SMC), a secure digital (Secure digital, SD) card, a flash memory card (flaSh card), etc. equipped on the computer device. Further, the computer-readable storage medium may also include both the central storage unit of the computer device and an external storage device. The computer-readable storage medium is used to store the computer program and other programs and data required by the computer device. The computer-readable storage medium may also be used to temporarily store data that has been output or is to be output.

The terms "first", "second", etc. in the description, claims, and drawings of the embodiments of the present application are used to distinguish between contents in different media, rather than to describe a specific order. In addition, the terms "including" and any of their variations are intended to cover non-exclusive inclusions. For example, a process, method, device, product, or equipment that includes a series of steps or units is not limited to the listed steps or modules, but may optionally include steps or modules that are not listed, or may optionally include other step units inherent to these processes, methods, devices, products, or equipment.

In the embodiments of the present application, the term "module" or "unit" refers to a computer program or a part of a computer program that has a predetermined function and works together with other related parts to achieve a predetermined goal, and can be implemented in whole or in part by using software, hardware (such as processing circuits or memories), or a combination thereof. Similarly, a processor (or multiple processors or memories) can be used to implement one or more modules or units. In addition, each module or unit can be part of an overall module or unit that includes the function of the module or unit.

The data collection and processing in this application should be strictly in accordance with the requirements of relevant laws and regulations when applied in practice, and the informed consent or separate consent of the personal information subject should be obtained. Subsequent data use and processing should be carried out within the scope of authorization of laws and regulations and the personal information subject.

The embodiment of the present application also provides a computer program product, including a computer program, which, when executed by a processor, implements the description of the above-mentioned data processing method and decoding method in the corresponding embodiment above, so it will not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated. For technical details not disclosed in the embodiment of the computer program product involved in the present application, please refer to the description of the method embodiment of the present application.

Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

The method and related device provided by the embodiment of the present application are described with reference to the method flow chart and/or structural diagram provided by the embodiment of the present application, and each process and/or box of the method flow chart and/or structural diagram, and the combination of the process and/or box in the flow chart and/or block diagram can be realized by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable network connection device to produce a machine, so that the instructions executed by the processor of the computer or other programmable network connection device produce a device for realizing the function specified in one process or multiple processes of the flow chart and/or one box or multiple boxes of the structural diagram. These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable network connection device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a product including an instruction device, which implements the function specified in one process or multiple processes of the flow chart and/or one box or multiple boxes of the structural diagram. These computer program instructions may also be loaded onto a computer or other programmable network-connected device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and/or one or more boxes in the structure diagram.

The above disclosure is only the preferred embodiment of the present application, which certainly cannot be used to limit the scope of rights of the present application. Therefore, equivalent changes made according to the claims of the present application are still within the scope covered by the present application.

Claims (20)

1. A data processing method, comprising: A computing task request sent by a first business device corresponding to a first business party is received by a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on business data of a second business party, and a first data identifier of encrypted business data corresponding to the business data; Obtaining, by the security proxy component, the encrypted business data of the second business party from the second business device corresponding to the second business party according to the first data identifier, and decrypting the encrypted business data of the second business party to obtain the business data of the second business party; By running the computing task component in the security sandbox, according to the execution file, a computing operation is performed on the business data of the second business party to obtain an execution result; By means of the security proxy component, the execution result is aggregated and encrypted according to the first public key of the first business party and the second public key of the second business party to obtain an encrypted execution result, and the encrypted execution result is sent to the first business device and the second business device; Among them, the first business device is used to aggregate and decrypt the encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the execution result, the first part of the decryption result is obtained by the first business device decrypting the encrypted execution result based on the first private key corresponding to the first public key, the second part of the decryption result is sent to the first business device by the second business device when it is determined that the business data of the second business party cannot be restored based on the execution file, and the second part of the decryption result is obtained by decrypting the encrypted execution result based on the second private key corresponding to the second public key, and the execution file in the second business device is sent to the second business device by the first business device or the security agent component. 2. The method according to claim 1, wherein the step of performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party through the security proxy component to obtain the encrypted execution result comprises: By means of the security proxy component, a first public key of the first business party and a second public key of the second business party are multiplied to obtain a joint public key; According to the first random number, deriving the joint public key to obtain a derived public key; Obtaining the rth power of basic data to obtain extended basic data, wherein r is the first random number, and the basic data is data used to calculate the first public key and the second public key; The execution result is aggregated and encrypted according to the extended basic data and the derived public key to obtain an encrypted execution result. 3. The method according to claim 2, wherein the step of performing aggregate encryption on the execution result according to the extended basic data and the derived public key to obtain the encrypted execution result comprises: Performing a hash operation on the derived public key and the execution result to obtain summary data of the execution result; According to the data length of the execution result, the derived public key is extended to obtain a random byte stream; Performing XOR processing on the random byte stream and the execution result to obtain an XOR processing result; The extended basic data, the summary data and the XOR processing result are concatenated to obtain an encrypted execution result. 4. The method according to claim 1, characterized in that the encrypted business data of the second business party is obtained by concatenating the ciphertext data of the business data of the second business party and the first coordinate value, the ciphertext data of the business data of the second business party is obtained by encrypting the business data of the second business party according to a symmetric key, and the first coordinate value is a coordinate value associated with the basic data on the elliptic curve group; The decrypting the encrypted business data of the second business party to obtain the business data of the second business party includes: Splitting the encrypted business data of the second business party to obtain the first coordinate value and ciphertext data of the business data of the second business party; Generate a second coordinate value and a third coordinate value associated with the third private key on the elliptic curve group according to the first coordinate value, the second public key, and the third private key of the trusted third party; Generate a symmetric key according to the first coordinate value, the second coordinate value, the third coordinate value, the second public key, and a third public key corresponding to the third private key; The ciphertext data of the business data of the second business party is decrypted according to the symmetric key to obtain the business data of the second business party. 5. The method according to claim 1, wherein the computing task request also carries a second data identifier of the encrypted business data of the first business party; The step of performing a computing operation on the business data of the second business party according to the execution file by running the computing task component in the security sandbox to obtain an execution result includes: Obtaining, by the security proxy component, the encrypted business data of the first business party from the first business device according to the second data identifier; decrypting the encrypted business data of the first business party to obtain the business data of the first business party; By running the computing task component in the security sandbox, computing operations are performed on the business data of the first business party and the second business party according to the execution file to obtain an execution result. 6. A data processing method, comprising: Sending a computing task request to a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and a first data identifier of encrypted business data corresponding to the business data, the security proxy component is used to obtain the encrypted business data of the second business party from a second business device corresponding to the second business party according to the first data identifier, decrypt the encrypted business data of the second business party, and obtain the business data of the second business party; receiving an encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file; The encrypted execution result is decrypted according to the first private key corresponding to the first public key to obtain a first part of the decrypted result, and the second part of the decrypted result sent by the second business device corresponding to the second business party is received; the second part of the decrypted result is sent to the first business device corresponding to the first business party by the second business device when it is determined that the business data of the second business party cannot be restored based on the execution file, and the second part of the decrypted result is obtained by decrypting the encrypted execution result based on the second private key corresponding to the second public key, the encrypted execution result is sent by the security proxy component to the second business device, and the execution file in the second business device is sent to the second business device by the first business device or the security proxy component; According to the first partial decryption result and the second partial decryption result, the encrypted execution result is aggregated and decrypted to obtain the execution result. 7. The method according to claim 6, wherein the step of performing aggregate decryption on the encrypted execution result according to the first partial decryption result and the second partial decryption result to obtain the execution result comprises: Extracting summary data and an XOR processing result of the execution result from the encrypted execution result; the XOR processing result is obtained by performing XOR processing on a random byte stream and the execution result; Multiplying the first partial decryption result and the second partial decryption result to obtain a derived public key; According to the data length of the XOR processing result, the derived public key is extended to obtain the random byte stream; The execution result is determined according to the XOR processing result, the random byte stream, the derived public key, and the summary data of the execution result. 8. The method according to claim 7, wherein determining the execution result according to the XOR processing result, the random byte stream, the derived public key, and the summary data of the execution result comprises: Performing XOR processing on the XOR processing result and the random byte stream to obtain an initial execution result; Performing a hash operation on the initial execution result and the derived public key to obtain a hash operation result; When the hash operation result matches the summary data of the execution result, the initial execution result is used to determine the execution result of the business data. 9. The method according to claim 6, wherein decrypting the encrypted execution result according to the first private key corresponding to the first public key to obtain a first partial decryption result comprises: Extracting extended basic data from the encryption execution result; the extended basic data is the rth power of the basic data, r is a first random number, and the basic data is data used to calculate the first public key and the second public key; Get the extended basic data To the power of , we get the first part of the decryption result; The first private key corresponds to the first public key. 10. A data processing method, comprising: According to the first data identifier carried in the computing task request, the encrypted business data of the second business party is sent to the security proxy component running in the security sandbox of the trusted third party; the computing task request is sent to the security proxy component by the first business device corresponding to the first business party, the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and the first data identifier of the encrypted business data corresponding to the business data, and the security proxy component is used to decrypt the encrypted business data of the second business party to obtain the business data of the second business party; receiving an encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file; When it is determined that the business data of the second business party cannot be restored based on the execution file, the encrypted execution result is decrypted according to the second private key corresponding to the second public key to obtain a second partial decryption result; the execution file in the second business device corresponding to the second business party is sent to the second business device by the first business device or the security proxy component; The second part of the decryption result is sent to the first business device corresponding to the first business party; the first business device is used to aggregate and decrypt the encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the execution result. The first part of the decryption result is obtained by the first business device decrypting the encrypted execution result based on the first private key corresponding to the first public key. 11. The method according to claim 10, wherein the step of decrypting the encrypted execution result according to the second private key corresponding to the second public key to obtain the second partial decryption result comprises: Extracting extended basic data from the encryption execution result; the extended basic data is the rth power of the basic data, r is a first random number, and the basic data is data used to calculate the first public key and the second public key; Get the extended basic data To the power of , we get the second part of the decryption result; The second private key corresponding to the second public key. 12. The method according to claim 10, wherein the determining that the business data of the second business party cannot be restored based on the execution file comprises: acquiring, from the execution file, calculation information corresponding to the calculation operation on the business data of the second business party; Determining, according to the calculation information, a calculation complexity corresponding to a calculation operation on the business data of the second business party; When the calculation complexity is greater than a complexity threshold, it is determined that the business data of the second business party cannot be restored based on the execution file. 13. The method according to claim 10, characterized in that the method further comprises: Generate a symmetric key according to basic data, a third public key of the trusted third party, and the second private key; Determine the xth power of the basic data as the first coordinate value associated with the basic data on the elliptic curve group; x is a second random number; Encrypting the service data of the second service party according to the symmetric key and the first coordinate value to obtain the encrypted service data of the second service party; Performing a hash operation on the encrypted business data of the second business party to obtain a data identifier of the encrypted business data of the second business party; The data identifier of the encrypted service data of the second service party is sent to the first service device corresponding to the first service party. 14. The method according to claim 13, wherein generating a symmetric key according to basic data, a third public key of the trusted third party, and the second private key comprises: Determine the xth power of the third public key of the trusted third party as the second coordinate value associated with the third public key on the elliptic curve group; The third public key of the trusted third party to the power, obtaining a third coordinate value associated with the third public key on the elliptic curve group; is the second private key; A hash operation is performed on the third public key, the second public key, the first coordinate value, the second coordinate value, and the third coordinate value to obtain a symmetric key. 15. A data processing device, comprising: A receiving module, configured to receive a computing task request sent by a first business device corresponding to a first business party through a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on business data of a second business party, and a first data identifier of encrypted business data corresponding to the business data; a decryption module, configured to obtain, through the security proxy component and according to the first data identifier, the encrypted business data of the second business party from the second business device corresponding to the second business party, and decrypt the encrypted business data of the second business party to obtain the business data of the second business party; an execution module, configured to execute a computing operation on the business data of the second business party according to the execution file by running a computing task component in the security sandbox to obtain an execution result; an encryption module, configured to perform aggregate encryption on the execution result through the security proxy component according to the first public key of the first business party and the second public key of the second business party to obtain an encrypted execution result, and send the encrypted execution result to the first business device and the second business device; Among them, the first business device is used to aggregate and decrypt the encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the execution result, the first part of the decryption result is obtained by the first business device decrypting the encrypted execution result based on the first private key corresponding to the first public key, the second part of the decryption result is sent to the first business device by the second business device when it is determined that the business data of the second business party cannot be restored based on the execution file, and the second part of the decryption result is obtained by decrypting the encrypted execution result based on the second private key corresponding to the second public key, and the execution file in the second business device is sent to the second business device by the first business device or the security agent component. 16. A data processing device, comprising: A sending module, configured to send a computing task request to a security proxy component running in a security sandbox of a trusted third party; the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and a first data identifier of encrypted business data corresponding to the business data; the security proxy component is configured to obtain the encrypted business data of the second business party from a second business device corresponding to the second business party according to the first data identifier, decrypt the encrypted business data of the second business party, and obtain the business data of the second business party; a receiving module, configured to receive an encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file; a decryption module, configured to decrypt the encrypted execution result according to the first private key corresponding to the first public key to obtain a first part of the decryption result, and receive a second part of the decryption result sent by a second business device corresponding to the second business party; the second part of the decryption result is sent by the second business device to the first business device corresponding to the first business party when the second business device determines that the business data of the second business party cannot be restored based on the execution file, and the second part of the decryption result is obtained by decrypting the encrypted execution result based on the second private key corresponding to the second public key, the encrypted execution result is sent by the security proxy component to the second business device, and the execution file in the second business device is sent to the second business device by the first business device or the security proxy component; The decryption module is further used to perform aggregate decryption on the encrypted execution result according to the first partial decryption result and the second partial decryption result to obtain the execution result. 17. A data processing device, comprising: A sending module, used to send the encrypted business data of the second business party to a security proxy component running in a security sandbox of a trusted third party according to a first data identifier carried in a computing task request; the computing task request is sent to the security proxy component by a first business device corresponding to the first business party, the computing task request includes an execution file for performing a computing operation on the business data of the second business party, and a first data identifier of the encrypted business data corresponding to the business data, the security proxy component is used to decrypt the encrypted business data of the second business party to obtain the business data of the second business party; a receiving module, configured to receive an encrypted execution result sent by the security proxy component; the encrypted execution result is obtained by the security proxy component performing aggregate encryption on the execution result according to the first public key of the first business party and the second public key of the second business party, and the execution result is obtained by the computing task component running in the security sandbox performing a computing operation on the business data of the second business party according to the execution file; a decryption module, configured to decrypt the encrypted execution result according to a second private key corresponding to the second public key to obtain a second partial decryption result when it is determined that the business data of the second business party cannot be restored based on the execution file; the execution file in the second business device corresponding to the second business party is sent to the second business device by the first business device or the security proxy component; The sending module is also used to send the second part of the decryption result to the first business device corresponding to the first business party; the first business device is used to aggregate the decryption of the encrypted execution result according to the first part of the decryption result and the second part of the decryption result to obtain the execution result, and the first part of the decryption result is obtained by the first business device decrypting the encrypted execution result based on the first private key corresponding to the first public key. 18. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein the processor implements the steps of the method according to any one of claims 1 to 14 when executing the computer program. 19. A computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 14 are implemented. 20. A computer program product, comprising a computer program, characterized in that when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 14 are implemented.