CN119622817A

CN119622817A - Privacy request method, device, electronic device and storage medium

Info

Publication number: CN119622817A
Application number: CN202411874844.9A
Authority: CN
Inventors: 连帮; 郭相林; 王娜
Original assignee: Industrial and Commercial Bank of China Ltd ICBC
Current assignee: Industrial and Commercial Bank of China Ltd ICBC
Priority date: 2024-12-19
Filing date: 2024-12-19
Publication date: 2025-03-14

Abstract

The present invention provides a privacy intersection method, which can be applied to the field of big data technology. The privacy intersection method includes: receiving a status task request sent by an initiator, the status task request is used to request a consistency check on the data status of the business data of the initiator and the partner, and the status task request includes the first data version information of the first business data sent by the initiator and the privacy intersection task information; based on the privacy intersection task information, querying from the task database to obtain the second business data matching the privacy intersection task information, and obtaining the second data version information of the second business data; performing a consistency check on the first data version information and the second data version information to generate a first check result; when the check result is a pass, sending the first check result to the initiator, so that the initiator initiates the privacy intersection task. The present invention also provides a privacy intersection device, equipment, storage medium and program product.

Description

Privacy exchange method, device, electronic equipment and storage medium

Technical Field

The invention relates to the field of big data and information security, in particular to a privacy intersection method, a privacy intersection device, privacy intersection equipment, privacy intersection media and privacy intersection program products.

Background

With advances in technology and digitization of financial services, the risk of leakage of personal privacy is also increasing. When a financial institution makes a joint scene with other institutions, various privacy protection measures are required to be carried out in order to protect the privacy of users, and one important task is to execute privacy interaction tasks. For two data sets with larger data volume, the state of the data set is not confirmed through a privacy intersection task in general, and the integrity and the accuracy of the data are not checked, so that the lower privacy intersection efficiency and the higher error rate are caused. Therefore, a method for realizing the automatic operation of the privacy intersection task with higher accuracy and efficiency is needed.

Disclosure of Invention

In view of the above, the invention provides a privacy intersection method, a privacy intersection device, electronic equipment and a storage medium.

According to a first aspect of the present invention, there is provided a privacy-preserving method comprising:

Receiving a state task request sent by an initiator, wherein the state task request is used for requesting consistency verification of data states of service data of the initiator and a partner, and the state task request comprises first data version information of first service data sent by the initiator and privacy intersection task information;

inquiring from a task database based on the privacy task information to obtain second service data matched with the privacy task information, and obtaining second data version information of the second service data;

Consistency verification is carried out on the first data version information and the second data version information, and a first verification result is generated;

And under the condition that the verification result is that the verification is passed, sending a first verification result to the initiator so that the initiator initiates a privacy intersection task.

According to the embodiment of the invention, the privacy intersection task information comprises data set type information and preset data rules;

inquiring from the task database based on the privacy task information to obtain second business data matched with the privacy task information comprises the following steps:

inquiring from a task database to obtain primary selection business data matched with the data set type information;

and determining second service data from the primary service data based on a preset data rule.

According to an embodiment of the present invention, the preset data rules include at least one of a field length rule for a first preset field, a field value rule for a second preset field.

According to an embodiment of the present invention, the field length rule includes a field length range set for a first preset field:

determining the second service data from the primary service data based on the preset data rule comprises:

determining first field data with a primary key as a first preset field from the primary service data;

verifying the field length of the key value of the first field data based on the field length range to obtain a first field verification result;

and determining the first field data as the second service data under the condition that one field check result is passed.

According to an embodiment of the present invention, the field value rule includes a range of possible values of the field set for the second preset field;

Determining second field data with a main key as a second preset field from the primary service data;

verifying the key value of the second field data based on the range of possible field values to obtain a second field verification result;

And determining the second field data as second service data under the condition that the two-field check result is passed.

According to the embodiment of the invention, the first data version information included in the state task request is version information passing through consistency check of the first data version information based on preset version information through an initiator.

According to the embodiment of the invention, after the verification result is sent to the initiator, the method further comprises the steps of obtaining second service data and generating third data version information after the privacy intersection task begins;

acquiring fourth version information generated after the first business data starts a privacy intersection task;

consistency verification is carried out on the third version information and the fourth version information, and a second verification result is generated;

And generating prompt information for completing the privacy intersection task under the condition that the second checking result is that the checking is passed.

A second aspect of the present invention provides a privacy intersection device, including:

The system comprises a receiving module, a processing module and a processing module, wherein the receiving module is used for receiving a state task request sent by an initiator, wherein the state task request is used for requesting consistency verification of data states of service data of the initiator and a partner, and the state task request comprises first data version information of first service data sent by the initiator and privacy intersection task information;

The acquisition module is used for inquiring and obtaining second service data matched with the privacy task information from the task database based on the privacy task information and acquiring second data version information of the second service data;

The verification module is used for carrying out consistency verification on the first data version information and the second data version information to generate a first verification result, and

And the execution module is used for sending the verification result to the initiator under the condition that the verification result is that the verification is passed, so that the initiator initiates the privacy intersection task.

A third aspect of the invention provides an electronic device comprising one or more processors and a memory for storing one or more computer programs, wherein the one or more processors execute the one or more computer programs to implement the steps of the method.

A fourth aspect of the invention also provides a computer readable storage medium having stored thereon a computer program or instructions which when executed by a processor performs the steps of the above method.

The fifth aspect of the invention also provides a computer program product comprising a computer program or instructions which, when executed by a processor, carries out the steps of the method described above.

According to the embodiment of the invention, through the state task request sent by the sender of the privacy task, the related data of the partner of the privacy task can be automatically checked through the data version information to determine that the data to be involved in the privacy task is in the latest version as the sender or has the same time window as the partner, and the accuracy of the privacy task can be greatly improved by checking the data to be subjected to the privacy task and then carrying out the privacy task, so that the lower efficiency of the privacy task due to the error or incomplete data is avoided, and even the method has no significance. And the privacy intersection task can be automatically executed regularly or regularly through a preset scheme, and especially under the condition that both sides of the privacy intersection task are large data sets, the data of the initiator and the partner are not required to be confirmed manually, and then the privacy intersection time is contracted, so that the efficiency of the privacy intersection task is improved, the labor cost is saved, and the execution efficiency and accuracy of the task flow are improved.

Drawings

The foregoing and other objects, features and advantages of the invention will be apparent from the following description of embodiments of the invention with reference to the accompanying drawings, in which:

FIG. 1 schematically illustrates application scenario diagrams of a privacy arose method, apparatus, electronic device and storage medium according to an embodiment of the invention;

FIG. 2 schematically illustrates a flow chart of a privacy intersection method according to an embodiment of the present invention;

Fig. 3 schematically shows a second traffic data acknowledgement flow chart according to an embodiment of the invention;

FIG. 4 schematically illustrates a second business data flow diagram according to a field length rule in accordance with an embodiment of the present invention;

FIG. 5 schematically illustrates a flow chart for deriving second business data according to field value rules, in accordance with an embodiment of the present invention;

FIG. 6 schematically illustrates a flow diagram for generating privacy intersection task hints information in accordance with an embodiment of the present invention;

Fig. 7 schematically shows a block diagram of a privacy intersection device according to an embodiment of the present invention;

Fig. 8 schematically shows a block diagram of an electronic device adapted to implement a privacy-preserving method according to an embodiment of the invention.

Detailed Description

Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. It should be understood that the description is only illustrative and is not intended to limit the scope of the invention. In the following detailed description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the embodiments of the invention. It may be evident, however, that one or more embodiments may be practiced without these specific details. In addition, in the following description, descriptions of well-known structures and techniques are omitted so as not to unnecessarily obscure the present invention.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The terms "comprises," "comprising," and/or the like, as used herein, specify the presence of stated features, steps, operations, and/or components, but do not preclude the presence or addition of one or more other features, steps, operations, or components.

All terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. It should be noted that the terms used herein should be construed to have meanings consistent with the context of the present specification and should not be construed in an idealized or overly formal manner.

Where a convention analogous to "at least one of A, B and C, etc." is used, in general such a convention should be interpreted in accordance with the meaning of one of skill in the art having generally understood the convention (e.g., "a system having at least one of A, B and C" would include, but not be limited to, systems having a alone, B alone, C alone, a and B together, a and C together, B and C together, and/or A, B, C together, etc.).

In the technical scheme of the invention, the related user information (including but not limited to user personal information, user image information, user equipment information, such as position information and the like) and data (including but not limited to data for analysis, stored data, displayed data and the like) are information and data authorized by a user or fully authorized by all parties, and the related data are collected, stored, used, processed, transmitted, provided, disclosed, applied and the like, all comply with related laws and regulations and standards, necessary security measures are adopted, no prejudice to the public order is provided, and corresponding operation entries are provided for the user to select authorization or rejection.

In the scene of using personal information to make automatic decision, the method, the device and the system provided by the embodiment of the invention provide corresponding operation inlets for users to choose to agree or reject the automatic decision result, and enter an expert decision flow if the users choose to reject. The expression "automated decision" here refers to an activity of automatically analyzing, assessing the behavioral habits, hobbies or economic, health, credit status of an individual, etc. by means of a computer program, and making a decision. The expression "expert decision" here refers to an activity of making a decision by a person who is specializing in a certain field of work, has specialized experience, knowledge and skills and reaches a certain level of expertise.

The embodiment of the invention provides a privacy intersection method, a privacy intersection device, electronic equipment and a storage medium.

Fig. 1 schematically illustrates an application scenario diagram of a privacy intersection method, a privacy intersection device, an electronic device and a storage medium according to an embodiment of the invention.

As shown in fig. 1, an application scenario 100 according to this embodiment may include a first terminal device 101, a second terminal device 102, a third terminal device 103, a network 104, and a server 105. The network 104 is a medium used to provide a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103, and the server 105. The network 104 may include various connection types, such as wired, wireless communication links, or fiber optic cables, among others.

The user may interact with the server 105 via the network 104 using the first terminal device 101, the second terminal device 102, the third terminal device 103, to receive or send messages etc. Various communication client applications, such as a shopping class application, a web browser application, a search class application, an instant messaging tool, a mailbox client, social platform software, etc. (by way of example only) may be installed on the first terminal device 101, the second terminal device 102, and the third terminal device 103.

The first terminal device 101, the second terminal device 102, the third terminal device 103 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smartphones, tablets, laptop and desktop computers, and the like.

The server 105 may be a server providing various services, such as a background management server (by way of example only) providing support for websites browsed by the user using the first terminal device 101, the second terminal device 102, and the third terminal device 103. The background management server may analyze and process the received data such as the user request, and feed back the processing result (e.g., the web page, information, or data obtained or generated according to the user request) to the terminal device.

It should be noted that, the privacy intersection method provided by the embodiment of the present invention may be generally executed by the server 105. Accordingly, the privacy intersection device provided by the embodiment of the present invention may be generally disposed in the server 105. The privacy resolution method provided by the embodiment of the present invention may also be performed by a server or a server cluster that is different from the server 105 and is capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103, and/or the server 105. Accordingly, the privacy intersection device provided by the embodiment of the present invention may also be provided in a server or a server cluster that is different from the server 105 and is capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103 and/or the server 105.

It should be understood that the number of terminal devices, networks and servers in fig. 1 is merely illustrative. There may be any number of terminal devices, networks, and servers, as desired for implementation.

The privacy intersection method of the disclosed embodiments will be described in detail below with reference to fig. 2to 6 based on the scenario described in fig. 1.

Fig. 2 schematically shows a flow chart of a privacy intersection method according to an embodiment of the invention.

As shown in FIG. 2, the privacy intersection method of this embodiment includes operations S210-S240.

In operation S210, a status task request sent by the initiator is received, where the status task request is used to request consistency verification of data states of service data of the initiator and the partner, and the status task request includes first data version information of first service data sent by the initiator and privacy intersection task information.

In an embodiment of the present invention, in the case where the data involved in the privacy-seeking task is related to user information, the user's consent or authorization may be obtained before the user's information is obtained. The data collected after user approval or authorization can be used in the privacy interaction task of the present invention.

In accordance with an embodiment of the present invention, privacy intersection (PRIVATE SET Intersection, PSI) is a cryptographic technique that allows two or more parties to find the intersection of their data sets without revealing the respective data sets. An initiator refers to a party that initiates a privacy interview task in which any participant can act as an initiator. Specifically, a certain party may be set as the initiator by a person, or a party may be selected as the initiator at random. A partner refers to the other party in a privacy intersection task that receives the initiator request. Specifically, the partner may be one data set of one organization, may be multiple data sets of one organization, or may be multiple data sets of multiple organizations. A status task request refers to a task for validating the status of partner data for checking or verifying the current status of certain business data. Consistency checks are used to ensure that data from different sources or in different systems is consistent at a particular point in time. This typically involves comparing identical data items in different data sources to ensure that they do not differ. The first transaction data refers to a portion of the transaction data provided by the initiator, possibly a data set associated with a particular transaction or event, such as the exchange of respective blacklisted user data, whitelisted data, etc. between two financial institutions via a privacy interrogation task. The first data version information refers to version information about the first service data, which may include a time of data creation, a history of modification, a version number, etc., for tracking a change history of data, for example, the first data version information of the first service data updated on the x-year, y-month, and z-day may be "xyz". The privacy intersection task information refers to task information which needs to be specially considered for privacy protection when data consistency verification is carried out, and can comprise various rules related to data participating in the privacy intersection task so as to ensure that the data participating in the privacy intersection task accords with preset rules.

In some embodiments of the present invention, the status task request may be automatically sent by the initiator by a contract for a fixed period of time, such as 1 day per month, 15 days per month, etc., and may specifically be specifically contracted for 8:00 of 1 day per month.

In operation S220, based on the privacy task information, second service data matching the privacy task information is queried from the task database, and second data version information of the second service data is obtained.

According to the embodiment of the invention, the task database refers to a database or a collection of data such as a data set of a partner of privacy intersection, and in particular, the task database can comprise various types of data, such as white list personnel data, black list institution data and the like. The second business data refers to a portion of the business data provided by the partner corresponding to the initiator, and may refer to a data set related to a specific transaction or event, such as exchanging respective blacklist user data, whitelist data, etc. between two financial institutions through a privacy exchange task. The second data version information refers to version information about the second service data, which may include a time of data creation, a history of modification, a version number, etc., for tracking a change history of the data, for example, the second data version information of the second service data updated on the a-year b-month c-day may be "abc".

Further, the query of the task database to obtain the second service data matched with the privacy task information refers to the manner of specifying the rule-conforming data by the content of the privacy task information set in advance, such as specifying the data type or specifying the data set name, or setting the data rule, so that the query and the matching of the task database of the partner obtain the second service data of the partner for the privacy task. The obtaining of the second version information of the second service data may be achieved in a number of ways, for example by performing an SQL query to obtain version information of a specific table or field, and if there is a version control table containing version numbers and modification times of the fields, the required version information may be obtained by querying the table. The version control system can also be used for managing the version of codes or documents, and the invention does not limit the acquisition method of the data version and the format of the acquired version information.

In operation S230, consistency verification is performed on the first data version information and the second data version information, and a first verification result is generated.

According to the embodiment of the invention, consistency verification is performed on the first data version information and the second data version information, the consistency verification can be performed through the version numbers, the update condition of the data is detected by using the version number field, and whether the update degree of the data is consistent is determined by comparing the version numbers in the two data versions. If the version numbers are the same, the data are considered to be consistent, if the version numbers are different, the data of one party are not in the latest state, and the data can be checked through a data consistency check tool, a database version management tool and the like, and meanwhile, the initiator and the partner needing privacy interaction agree that the same tool or plugin and the like are used. The first verification result may include a pass or difference, and may include an error or the like, which cannot be verified.

Specifically, the latest time such as the modification day or the upgrade day may be determined by the time stamp of the first service data, and the first data version information of the first service data updated by the day of the year x, the month y, and the day z may be "xyz". And according to the time of the latest modification day or the upgrading day of the database of the partner, if the second data version information of the second service data updated on the day c of the year b is abc, the consistency check is to check whether the values of xyz and abc are the same or not, if so, the first check result is passed, and if not, the first check result is not passed.

In some embodiments of the present invention, if the first verification result is not passed, the result of the failed verification is returned to the initiator, and a period of time may be preset, after the result of the failed verification is obtained, the state task request is initiated again after the preset period of time passes until the result of the first verification is received as the result of the passed verification, for example, the preset period of time is set for 2 hours, and the initiator initiates the state task request again after 2 hours after the first receipt of the result of the first verification is not passed.

In some embodiments of the present invention, a threshold value that the first verification result does not pass may be set to the initiator or the partner, for example, after receiving 10 times of first verification results that the first verification result does not pass, the initiator or the partner generates corresponding prompt information, and further, the prompt information may be pushed to a mobile phone, a mailbox, etc. of a predetermined manager to remind that the database needs to be updated, so that the current privacy task is used.

In some embodiments of the present invention, the data set status of the partner and the initiator may also be checked to determine that both parties have reached a status in which they can perform the privacy task, for example, by assigning a status identifier, and performing a version check if both party status identifiers are consistent, for example, both are "ready" identifiers.

In operation S240, if the verification result is that the verification is passed, a first verification result is sent to the initiator, so that the initiator initiates a privacy intersection task.

According to the embodiment of the invention, after the initiator receives the first verification result of the partner, the data set or the data base version of the partner is considered to be the latest as the data set or the data base version of the partner, so that the privacy exchange task agreed today can be carried out, and the formal privacy exchange task is further sent.

In some embodiments of the present invention, the first data version information included in the status task request is version information passing through the initiator to perform consistency check on the first data version information based on preset version information.

In some embodiments of the present invention, the preset version information refers to version information set according to actual requirements, for example, it is specified that a privacy task is performed on 1 day of each month, and the generation mode of the version information is that the latest timestamp is the date of the year, month and day, then the preset version information of 2 months of x years is "x0201". The step of performing consistency check on the first data version information refers to generating the first data version information of the initiator before the initiator initiates the state task request, for example, the first data version information can be generated according to a timestamp in a version update record, and the version information is consistent with the preset version information such as 'x 0201' check, and then the version information is the version information for performing consistency check.

In some embodiments of the present invention, before the initiator initiates the status task request, the initiator checks the first data version information of the initiator, which not only can ensure that the first data version information is consistent with the second data version information of the partner, but also can ensure that the first data version information is consistent with the preset version information, for example, the date of the day is set to be the date of the day, so that both parties of the privacy intersection task can be ensured to be the latest updated data state on the day of the preset privacy intersection task, and outdated or erroneous data can be prevented from being used for privacy intersection, thereby improving the accuracy of the final intersection result.

Fig. 3 schematically shows a second traffic data acknowledgement flow chart according to an embodiment of the invention.

As shown in fig. 3, the privacy task information includes data set type information and preset data rules, and the second service data confirmation in this embodiment includes operations S310 to S320.

In operation S310, the primary selected service data matching the data set type information is queried from the task database.

In operation S320, second service data is determined from the initially selected service data based on a preset data rule.

According to an embodiment of the invention, the data set type information is part of the privacy intersection task information, indicating the type or class of data sets involved in the privacy intersection, and the data set type information helps to determine which data sets should be used for subsequent privacy intersection operations. For example, the white list data, the black list data, the organization data, the personal data and the like are all data set type information, and further, the partner and the initiator of the privacy task can confirm and unify the data set types in advance so as to ensure the correct performance of the privacy task. The preset data rules are another part of the privacy intersection task information, and comprise predefined rules of the data set, such as the format, range, validity and the like of the data, and the rules are used for screening and determining which data are valid and can be used for privacy intersection.

In some embodiments of the present invention, the privacy intersection task information may include data set type information, preset data rules, and may further include privacy intersection protocol information, so as to determine that the privacy intersection protocol based on the two parties is valid and within the valid time.

In some embodiments of the present invention, the privacy intersection task information may further include information of the parties, such as identities of the parties and the initiator, a data set identifier, and the like, for confirming the parties participating in the privacy intersection and their data.

In some embodiments of the present invention, the privacy task information may further include a security model, such as a Semi-honest model (Semi-Honest Secure PSI) or a malicious security model (Malicious Secure PSI), on which the specified privacy task is based, where the security model determines the security of the protocol and the behavior assumption of the participants.

In some embodiments of the present invention, the private interaction task information may also include asymmetric PSI information, which may require asymmetric PSI solutions if the data sets of the participants differ significantly in size, requiring special handling to improve efficiency.

According to an embodiment of the present invention, in operation S310, the initially selected service data refers to data matching the data set and the data set type information in the privacy task information, and has not been subjected to detailed screening to satisfy preset data rules, such as "whitelist organization", "individual user blacklist", etc. The data range can be reduced by inquiring the primary service data matched with the data set type information from the task database, and the partner data set possibly intersecting with the initiator data set can be found. For example, in the state task request, the requirement for the privacy interaction task is to interact with the data of the personal user blacklist, and the data type information of the personal user blacklist can be queried in the task data of the partner as the primary service data.

According to the embodiment of the present invention, in operation S320, determining the second service data from the primary selected service data based on the preset data rule refers to further selecting or confirming the primary selected service data according to the preset data rule, and then using the verified or selected data as the second service data, which may be further used for performing a privacy intersection operation with the first service data of the initiator.

According to the embodiment of the invention, the data type related to the privacy intersection is selected as the primary selected service data according to the data type information, and then the primary selected service data is further selected and confirmed according to the preset data rule, so that the second service data for the privacy intersection task is determined, only the data meeting the specific conditions is ensured to be used for the privacy intersection task, the data privacy can be protected, and the consistency and the accuracy of the data set are ensured.

In some embodiments of the present invention, the preset data rules include at least one of a field length rule for a first preset field, a field value rule for a second preset field.

In some embodiments of the present invention, the preset data rules may also include data format rules for specific fields that specify a specific format that the data must follow, such as a format that the date field must follow "YYYY-MM-DD".

In some embodiments of the present invention, the preset data rules may further include a data type rule for a particular field that determines the type of data that the field should contain, such as a string, an integer, a floating point number, a boolean value, and the like.

In some embodiments of the present invention, the preset data rule may further include a uniqueness rule for a specific field, so as to ensure that a certain field value in the data set is unique, such as an identity number or a user ID, that is, a situation that one identity number corresponds to multiple names of people or multiple pieces of personnel information may not occur.

In some embodiments of the present invention, the preset data rules may also include integrity rules for specific fields, ensuring that certain key fields in the data set are not empty and must have a value.

According to the embodiment of the invention, the second business data for carrying out the privacy intersection task can be ensured to have higher integrity and accuracy by further selecting and determining the data in the initially selected business data through the data rule, and the accuracy and the efficiency of the whole privacy intersection task can be improved through screening and confirming the data because the meaning of the wrong or incomplete information privacy intersection is not great and the result of the privacy intersection is wrong.

Fig. 4 schematically shows a flow chart for obtaining second service data according to a field length rule according to an embodiment of the invention.

As shown in fig. 4, in operation S320, when the field length rule includes a field length range set for the first preset field, obtaining the second service data according to the field length rule includes operations S410 to S430.

In operation S410, first field data with a primary key being a first preset field is determined from the primary service data;

In operation S420, checking the field length of the key value of the first field data based on the field length range to obtain a first field checking result;

In operation S430, in case that one field check result is passed, the first field data is determined as the second service data.

Specifically, the first preset field may be one field or multiple fields, and the corresponding field length rule may be one or multiple fields. The first preset field length rule specifies an acceptable character length range for a particular field, i.e., the first preset field. The first preset field may be a number of financial institutions exchanging contact or identification numbers in a customer-related list, such as a job number, or the like, or may be a field of a fixed format and fixed length, such as a telephone number, job number, or the like, for example, if one field is a telephone number, the field length rule may specify that the field must contain exactly 10 digits, and if one field is an identification number, the field length rule may Guiding that the field must contain exactly 18 digits or letters. Such rules help ensure that the data is properly formatted and meets specific business requirements.

In accordance with an embodiment of the present invention, in operation S410, the primary key is a field or a set of fields in the database, whose values can uniquely identify each row of records in the table, and determining that the primary key is the first field data of the first preset field means that those key field data having a unique identification function are found in the primary service data.

For example, the first preset field is "gender", and then the related data with the primary key of "gender" needs to be found in the database as the first field data.

In accordance with an embodiment of the present invention, in operation S420, the first field check result indicates whether the first field data passes the check of the field length, which may include "pass" and "fail", and if the check result is pass, it is indicated that the length of the first field data conforms to the preset field length range. And verifying the field length of the key value of the first field data based on the field length range can ensure that the data accords with a preset data rule, thereby ensuring the consistency and accuracy of the data.

For example, the determined primary key is an "organization code", the rule is a combination of numbers and letters of 8-18 bits, and the first field data is verified according to the field length range.

According to an embodiment of the present invention, if the first field check result is passed, the first field data is determined as the second service data in operation S430, which means that the first field data already satisfies all preset data rules and may be used for the privacy intersection task.

According to the embodiment of the invention, only the data meeting the specific conditions can be ensured to be used for privacy intersection by checking the field length set for the first preset field, so that the accuracy and consistency of the data are improved, and the data privacy is protected. Meanwhile, the decline of the accuracy of the privacy intersection caused by data errors or incomplete data can be avoided, so that the meaning of the privacy intersection task is lost.

Fig. 5 schematically shows a flow chart for obtaining second business data according to a field value rule according to an embodiment of the invention.

As shown in fig. 5, in the case that the field value rule includes the range of possible values of the field set for the second preset field, in operation S320, obtaining the second service data according to the field value rule includes operations S510 to S530.

In operation S510, second field data in which the primary key is a second preset field is determined from the primary service data;

In operation S520, the key value of the second field data is checked based on the range of possible values of the field, so as to obtain a second field check result;

In operation S530, in case that the two-field check result is passed, the second field data is determined as the second service data.

Specifically, the second preset field may be one field or multiple fields, and the corresponding field length rule may be one or multiple fields. The field value rule specifies a range of values or a particular set of values for a particular field, i.e., a second preset field. The second preset field may be a fixed identity information, a fixed identification information, etc. in a list related to the customer for a plurality of financial institutions, or may be a field with a certain value, for example, if a field is an age, a field value rule may specify that the value of the field must be between 0 and 120, and if a field is a gender, the value of the field may be only "male" or "female", and other values may be considered as erroneous, i.e. not conforming to the field value rule. Such rules may ensure that the data is within a reasonable range of values, excluding outliers or erroneous data.

The difference between the operation S510 and the operation S410 is only that the second field data, which is different fields, are identified according to the preset primary key, and the operation S530 and the operation S430 have the same implementation method, so that the details are not repeated here.

According to an embodiment of the present invention, in operation S520, the second field check result indicates whether the second field data passes the check of the field length, which may include "pass" and "fail", and if the check result is pass, it is indicated that the value of the second field data corresponds to the preset range of possible values. And verifying the field length of the key value of the second field data based on the field possible value range, so that the data can be ensured to accord with a preset data rule, and the consistency and the accuracy of the data are ensured.

According to the embodiment of the invention, by checking the range of possible values of the fields set for the second preset field, only the data meeting the specific conditions can be ensured to be used for privacy intersection, so that the accuracy and consistency of the data are improved, and the privacy of the data is protected. Meanwhile, the decline of the accuracy of the privacy intersection caused by data errors or incomplete data can be avoided, so that the meaning of the privacy intersection task is lost.

FIG. 6 schematically illustrates a flow diagram for generating privacy-rendering task cues in accordance with an embodiment of the present invention.

As shown in FIG. 6, the generation of the privacy task suggestion information includes operations S610-S530.

In operation S610, a status task request sent by an initiator is received, where the status task request is used to request consistency verification of data states of service data of the initiator and a partner, and the status task request includes first data version information of first service data sent by the initiator and privacy intersection task information;

in operation S620, based on the privacy task information, second service data matching the privacy task information is obtained from the task database, and second data version information of the second service data is obtained;

In operation S630, consistency checking is performed on the first data version information and the second data version information, and a first check result is generated;

In operation S640, if the verification result is that the verification is passed, a first verification result is sent to the initiator, so that the initiator initiates a privacy intersection task;

in operation S650, after sending the verification result to the initiator, obtaining the third data version information generated by the second service data after the privacy intersection task is started;

In operation S660, fourth version information generated after the privacy task is started for the first service data is obtained;

In operation S670, performing consistency check on the third version information and the fourth version information to generate a second check result;

In operation S680, if the second check result is that the check is passed, a prompt message for the completion of the privacy task is generated.

Operations S610 to S640 are the same as operations S210 to S240, and thus are not described here.

According to an embodiment of the present invention, the third data version information is data version information generated by the partner according to the state of the database and a predetermined version information generation method after the privacy exchange task starts in operation S650. Specifically, the third data version information may be consistent with the second data version information of the partner before the privacy task is started, that is, it indicates that the privacy task is not completed, because if the privacy task is completed, the data version of the partner will change accordingly. For example, the second data version information is "xyz-ab", wherein "xyz" is the date of year, month, and day, "ab" is the time of last modification time, minute, and the third data version information is "xyz-ab". The third data version information may not be consistent with the second data version information of the partner before the privacy routing task begins, e.g., the third data version information is "xyz-cd", indicating that the partner's data version has changed, i.e., the privacy routing task has ended.

According to an embodiment of the present invention, the fourth data version information is data version information generated by the initiator according to the state of the database and a predetermined version information generation method after the start of the privacy exchange task in operation S660. Specifically, the fourth data version information may be consistent with the first data version information of the initiator before the privacy task is started, that is, it indicates that the privacy task is not completed, because the data version of the initiator changes correspondingly if the privacy task is completed. For example, the first data version information is "xyz-ab", where "xyz" is the year, month and day, and "ab" is the time, minute of the latest modification time. The fourth data version information may not be identical to the first data version information of the initiator before the start of the privacy routing task, e.g., the fourth data version information is "xyz-cd", indicating that the data version of the initiator has changed, i.e., the privacy routing task has ended.

According to an embodiment of the present invention, in operation S670, consistency check is performed on the third version information and the fourth version information, so as to check whether the two version information are consistent, and further, if both parties update the latest "xyz-cd" version, it is verified that the privacy intersection task has been completed.

According to the embodiment of the present invention, in operation S680, the second checking result is that the checking is passed, which indicates that the data versions of the initiator and the partner are updated, that is, the privacy intersection task is completed, and then the prompt information of the completion of the privacy intersection task is further generated.

Specifically, the prompt information of the completion of the privacy task may be pushed to a preset database manager through a preset related mode such as a short message, a telephone, a mail, etc.

In some embodiments of the present invention, if no prompt message for completing the privacy task is generated within a preset period of time, for example, within 24 hours, an early warning prompt message may be set, and then sent to a corresponding person for prompting, so as to warn that an error may occur in the privacy task, and manual intervention or investigation is required.

According to the embodiment of the invention, the data versions are checked before and after the privacy intersection task starts, so that the completion condition of the privacy intersection task can be automatically identified, whether the privacy intersection task is completed or not is not required to be checked manually, the privacy intersection efficiency is improved, and the experience of an end user can be improved.

Based on the privacy intersection method, the invention further provides a privacy intersection device. The device will be described in detail below in connection with fig. 7.

Fig. 7 schematically shows a block diagram of a privacy intersection device according to an embodiment of the present invention.

As shown in fig. 7, the privacy intersection device 700 of this embodiment includes a receiving module 710, an obtaining module 720, a checking module 730, and an executing module 740.

The receiving module 710 is configured to receive a status task request sent by an initiator, where the status task request is used to request consistency verification of data states of service data of the initiator and a partner, and the status task request includes first data version information of first service data sent by the initiator and privacy intersection task information. In an embodiment, the receiving module 710 may be configured to perform the operation S210 described above, which is not described herein.

The obtaining module 720 is configured to query from the task database, based on the privacy task information, second service data that matches the privacy task information, and obtain second data version information of the second service data. In an embodiment, the obtaining module 720 may be configured to perform the operation S220 described above, which is not described herein.

The verification module 730 is configured to perform consistency verification on the first data version information and the second data version information, and generate a first verification result. In an embodiment, the verification module 730 may be configured to perform the operation S230 described above, which is not described herein.

The execution module 740 is configured to send a verification result to the initiator, so that the initiator initiates a privacy intersection task if the verification result is that the verification is passed. In an embodiment, the execution module 740 may be configured to execute the operation S240 described above, which is not described herein.

In one embodiment of the present invention, the private task information includes data set type information and preset data rules, and the obtaining module 720 of the private task device includes:

and the first primary selection unit is used for inquiring and obtaining primary selection business data matched with the data set type information from the task database.

The first determining unit determines second service data from the primary service data based on a preset data rule.

In a specific embodiment of the present invention, the privacy intersection device further includes:

And the third version module is used for acquiring the second service data after the verification result is sent to the initiator and generating third data version information after the privacy intersection task is started.

And the fourth version module is used for acquiring fourth version information generated after the privacy intersection task of the first service data starts.

And the second checking module is used for carrying out consistency check on the third version information and the fourth version information to generate a second checking result.

And the prompt generation module is used for generating prompt information for completing the privacy intersection task under the condition that the second checking result is that the checking is passed.

According to the embodiment of the invention, through the state task request sent by the sender of the privacy task, the related data of the partner of the privacy task can be automatically checked through the data version information to determine that the data to be involved in the privacy task is in the latest version as the sender or has the same time window as the partner, and the accuracy of the privacy task can be greatly improved by checking the data to be subjected to the privacy task and then carrying out the privacy task, so that the lower efficiency of the privacy task due to the error or incomplete data is avoided, and even the method has no significance. And the privacy intersection task can be automatically executed regularly or regularly through a preset scheme, and especially under the condition that both sides of the privacy intersection task are large data sets, the data of the initiator and the partner are not required to be confirmed manually, and then the privacy intersection time is contracted, so that the efficiency of the privacy intersection task is improved, the labor cost is saved, and the execution efficiency and accuracy of the task flow are improved. .

Any of the receiving module 710, the acquiring module 720, the verifying module 730, and the executing module 740 may be combined in one module to be implemented, or any of the modules may be split into a plurality of modules according to an embodiment of the present invention. Or at least some of the functionality of one or more of the modules may be combined with, and implemented in, at least some of the functionality of other modules. At least one of the receiving module 710, the obtaining module 720, the verifying module 730, and the executing module 740 may be implemented at least in part as hardware circuitry, such as a Field Programmable Gate Array (FPGA), a Programmable Logic Array (PLA), a system on a chip, a system on a substrate, a system on a package, an Application Specific Integrated Circuit (ASIC), or may be implemented in hardware or firmware, such as any other reasonable way of integrating or packaging the circuitry, or in any one of or a suitable combination of any of the three. Or at least one of the receiving module 710, the obtaining module 720, the verifying module 730 and the executing module 740 may be at least partially implemented as a computer program module, which when executed may perform the corresponding functions.

As shown in fig. 8, an electronic device 800 according to an embodiment of the present invention includes a processor 801 that can perform various appropriate actions and processes according to a program stored in a Read Only Memory (ROM) 802 or a program loaded from a storage section 808 into a Random Access Memory (RAM) 803. The processor 801 may include, for example, a general purpose microprocessor (e.g., a CPU), an instruction set processor and/or an associated chipset and/or a special purpose microprocessor (e.g., an Application Specific Integrated Circuit (ASIC)), or the like. The processor 801 may also include on-board memory for caching purposes. The processor 801 may comprise a single processing unit or multiple processing units for performing the different actions of the method flows according to embodiments of the invention.

In the RAM 803, various programs and data required for the operation of the electronic device 800 are stored. The processor 801, the ROM 802, and the RAM 803 are connected to each other by a bus 804. The processor 801 performs various operations of the method flow according to the embodiment of the present invention by executing programs in the ROM 802 and/or the RAM 803. Note that the program may be stored in one or more memories other than the ROM 802 and the RAM 803. The processor 801 may also perform various operations of the method flow according to embodiments of the present invention by executing programs stored in one or more memories.

According to an embodiment of the invention, the electronic device 800 may further comprise an input/output (I/O) interface 805, the input/output (I/O) interface 805 also being connected to the bus 804. The electronic device 800 may also include one or more of an input portion 806 including a keyboard, a mouse, etc., an output portion 807 including a display such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), etc., and a speaker, etc., a storage portion 808 including a hard disk, etc., and a communication portion 809 including a network interface card such as a LAN card, a modem, etc., connected to an input/output (I/O) interface 805. The communication section 809 performs communication processing via a network such as the internet. The drive 810 is also connected to an input/output (I/O) interface 805 as needed. A removable medium 811 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is mounted on the drive 810 as needed so that a computer program read out therefrom is mounted into the storage section 808 as needed.

The present invention also provides a computer-readable storage medium that may be included in the apparatus/device/system described in the above embodiments, or may exist alone without being assembled into the apparatus/device/system. The computer-readable storage medium carries one or more programs which, when executed, implement methods in accordance with embodiments of the present invention.

According to embodiments of the invention, the computer-readable storage medium may be a non-volatile computer-readable storage medium, which may include, for example, but is not limited to, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. For example, according to embodiments of the invention, the computer-readable storage medium may include ROM 802 and/or RAM 803 and/or one or more memories other than ROM 802 and RAM 803 described above.

Embodiments of the present invention also include a computer program product comprising a computer program containing program code for performing the method shown in the flowcharts. When the computer program product runs in a computer system, the program code is used for enabling the computer system to realize the privacy exchange method provided by the embodiment of the invention.

The above-described functions defined in the system/apparatus of the embodiment of the present invention are performed when the computer program is executed by the processor 801. The systems, apparatus, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the invention.

In one embodiment, the computer program may be based on a tangible storage medium such as an optical storage device, a magnetic storage device, or the like. In another embodiment, the computer program may also be transmitted, distributed over a network medium in the form of signals, downloaded and installed via the communication portion 808, and/or installed from the removable medium 811. The computer program may comprise program code that is transmitted using any appropriate network medium, including but not limited to wireless, wireline, etc., or any suitable combination of the preceding.

In such an embodiment, the computer program may be downloaded and installed from a network via the communication portion 808, and/or installed from the removable medium 811. The above-described functions defined in the system of the embodiment of the present invention are performed when the computer program is executed by the processor 801. The systems, devices, apparatus, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the invention.

According to embodiments of the present invention, program code for carrying out computer programs provided by embodiments of the present invention may be written in any combination of one or more programming languages, and in particular, such computer programs may be implemented in high-level procedural and/or object-oriented programming languages, and/or in assembly/machine languages. Programming languages include, but are not limited to, such as Java, c++, python, "C" or similar programming languages. The program code may execute entirely on the user's computing device, partly on the user's device, partly on a remote computing device, or entirely on the remote computing device or server. In the case of remote computing devices, the remote computing device may be connected to the user computing device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., connected via the Internet using an Internet service provider).

The flowcharts and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams or flowchart illustration, and combinations of blocks in the block diagrams or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

Those skilled in the art will appreciate that the features recited in the various embodiments of the invention can be combined and/or combined in a variety of ways, even if such combinations or combinations are not explicitly recited in the present invention. In particular, the features recited in the various embodiments of the invention can be combined and/or combined in various ways without departing from the spirit and teachings of the invention. All such combinations and/or combinations fall within the scope of the invention.

The embodiments of the present invention are described above. These examples are for illustrative purposes only and are not intended to limit the scope of the present invention. Although the embodiments are described above separately, this does not mean that the measures in the embodiments cannot be used advantageously in combination. Various alternatives and modifications can be made by those skilled in the art without departing from the scope of the invention, and such alternatives and modifications are intended to fall within the scope of the invention.

Claims

1. A method of privacy exchange, the method comprising:

Receiving a state task request sent by an initiator, wherein the state task request is used for requesting consistency verification of data states of service data of the initiator and a partner, and the state task request comprises first data version information of first service data sent by the initiator and privacy interaction task information;

and sending the first verification result to the initiator under the condition that the verification result is verification passing, so that the initiator initiates a privacy intersection task.

2. The method according to claim 1, wherein the privacy task information includes data set type information and preset data rules;

the inquiring the second service data matched with the privacy task information from a task database based on the privacy task information comprises the following steps:

and determining the second service data from the primary service data based on the preset data rule.

3. The method of claim 2, wherein the preset data rules include at least one of a field length rule for a first preset field, a field value rule for a second preset field.

4. A method according to claim 3, wherein the field length rule comprises a field length range set for the first preset field:

the determining the second service data from the primary service data based on the preset data rule comprises:

Determining a primary key as first field data of the first preset field from the primary service data;

checking the field length of the key value of the first field data based on the field length range to obtain a first field checking result;

and determining the first field data as the second service data under the condition that the one field check result is passed.

5. The method of claim 3 or 4, wherein the field value rule comprises a range of possible values for the field set for the second preset field;

Determining a primary key as second field data of the second preset field from the primary service data;

Verifying the key value of the second field data based on the range of possible values of the field to obtain a second field verification result;

And determining the second field data as the second service data under the condition that the two-field check result is passed.

6. A method according to claim 1 or 2, characterized in that,

The first data version information included in the state task request is version information passing through the consistency check of the first data version information based on preset version information through the initiator.

7. The method according to claim 1 or 2, further comprising:

After the verification result is sent to the initiator, acquiring the second service data and generating third data version information after the privacy intersection task begins;

acquiring fourth version information generated after the first business data starts the privacy intersection task;

Performing consistency check on the third version information and the fourth version information to generate a second check result;

8. A privacy-seeking communication device, the device comprising:

The system comprises a receiving module, a sending module and a receiving module, wherein the receiving module is used for receiving a state task request sent by an initiator, the state task request is used for requesting consistency verification of data states of business data of the initiator and a partner, and the state task request comprises first data version information of first business data sent by the initiator and privacy intersection task information;

The acquisition module is used for inquiring and obtaining second service data matched with the privacy task information from a task database based on the privacy task information and acquiring second data version information of the second service data;

A verification module for performing consistency verification on the first data version information and the second data version information to generate a first verification result, and

And the execution module is used for sending the verification result to the initiator when the verification result is that the verification is passed, so that the initiator initiates a privacy intersection task.

9. An electronic device, comprising:

One or more processors;

A memory for storing one or more computer programs,

Characterized in that the one or more processors execute the one or more computer programs to implement the steps of the method according to any one of claims 1-7.

10. A computer-readable storage medium, on which a computer program or instructions is stored, which, when executed by a processor, carries out the steps of the method according to any one of claims 1 to 7.