CN116011019A - Privacy computing system, method, device, equipment and medium - Google Patents

Abstract

The application discloses a privacy computing system, a method, a device, equipment and a medium, which are used for accessing resources which can be safely cooperated among different privacy computing equipment. The first privacy computing device acquires a second device identifier of a second privacy computing device and target item information of a resource to be accessed, determines a target license credential corresponding to the second device identifier and the target item information, and sends a resource access request carrying the target license credential, the target item information and a first device identifier of the first privacy computing device to the second privacy computing device corresponding to the second device identifier; the second privacy computing device determines a target authorization credential corresponding to the first device identifier and the target item information, if the target authorization credential is judged to be matched with the target license credential, a verification passing notification is sent to the first privacy computing device, and the first privacy computing device accesses resources to be accessed in the second privacy computing device, so that safe and collaborative access resources among different privacy computing devices are realized.

Description

A privacy computing system, method, device, equipment and medium

technical field

The present application relates to the technical field of data security, and in particular to a privacy computing system, method, device, device and medium.

Background technique

Privacy computing (Privacy computing or Privacy computing) refers to a technology collection that realizes data analysis and calculation on the premise of protecting the data itself from being leaked to the outside world, so as to achieve the purpose of "usable and invisible" data, and on the premise of fully protecting data and privacy security Next, realize the transformation and release of data value.

With the increasing awareness of data protection in the industry and the tightening of privacy regulatory policies, privacy computing has attracted widespread attention from the industry due to its "available and invisible" characteristics. Many technology manufacturers have launched their privacy computing products with industry characteristics. Numerous privacy computing products have enriched the market choices, but also brought new challenges. For example, privacy computing products launched by different technology manufacturers are usually designed and implemented based on different system platforms. When the privacy computing products of different system platforms are stored in different privacy computing devices, the privacy computing products of different system platforms usually cannot be completed. The interaction of information turns "data islands" into "computing islands".

Therefore, the interconnection between privacy algorithm products stored in different privacy computing devices has become an absolute pain point in the industry. Among them, how a private computing device securely accesses resources in other private computing devices, that is, how to safely and cooperatively access resources between different private computing devices is a technical problem that needs to be solved urgently.

Contents of the invention

The present application provides a privacy computing system, method, device, device and medium, which are used for accessing resources that can be safely coordinated between different privacy computing devices.

In a first aspect, the present application provides a privacy computing system, the system comprising:

The first privacy computing device is configured to obtain the second device identifier of the second privacy computing device and the The target item information to which the resource to be accessed belongs; according to the correspondence between the pre-saved private computing device ID, item information, and resource access license credentials, determine the target license credential corresponding to the second device ID and the target project information; The second private computing device corresponding to the second device identifier sends a resource access request carrying the target permission credential, the target item information, and the first device identifier of the first private computing device;

The second private computing device is configured to receive the resource access request, and determine the corresponding relationship between the first device identifier and the target project information according to the pre-saved correspondence between the private computing device identifier, project information, and authorization credentials. Target authorization credential; if it is judged that the target authorization credential matches the target permission credential, send a verification pass notification to the first privacy computing device;

The first privacy computing device is further configured to receive the notification of passing the verification, and access resources to be accessed in the second privacy computing device.

In a possible implementation manner, the second privacy computing device is specifically configured to:

If the security access policy information carried in the target permission credential matches the security access policy information carried in the target authorization credential, it is determined that the target authorization credential matches the target permission credential.

In a possible implementation manner, the second privacy computing device is also used for:

If the security access policy information carried in the target permission credential does not match the security access policy information carried in the target authorization credential, then determine that the target authorization credential does not match the target permission credential, and report to the second A privacy computing device sends a prompt message that the verification fails.

In a possible implementation manner, the security access policy information is a hierarchical authorization policy for externally accessible information of the privacy computing system, including: permission classification of resource types that can be accessed, access mode restriction information, access times restriction information, access At least one of time limit information. Through this hierarchical and loosely coupled security access policy information, the problem of strong association of security policies between multi-party nodes is decoupled, so that the security policies between heterogeneous privacy computing systems have better versatility, maintainability and scalability.

In a possible implementation manner, the second privacy computing device is also used for:

Establishing an access session, and saving the correspondence between the session ID of the access session and the target token ID in the target license certificate;

sending the session identifier to the first private computing device;

The first privacy computing device is also used for:

receiving the session identifier, and sending the session identifier and the target token identifier in the target permission credential to the second privacy computing device when accessing the resource to be accessed is required;

The second privacy computing device is also used for:

The session ID and the target token ID are received, and when it is determined that the corresponding relationship between the session ID and the target token ID is stored locally, a verification pass notification is sent to the first privacy computing device.

In a possible implementation manner, the first privacy computing device is specifically configured to:

sending an authorization access resource application carrying the first device identifier and target item information to the second private computing device;

The second privacy computing device is specifically configured to, when judging that the first device identifier is located in a pre-stored security device identifier that has undergone identity authentication, according to the correspondence between the pre-stored device identifier, item information, and security access policy information relationship, determine the target security access policy information corresponding to the first device identifier and the target item information, and generate the target permission credential and target authorization credential, wherein both the target permission credential and the target authorization credential carrying the target security access policy information; saving the corresponding relationship between the first device identifier, the target item information and the target authorization credential, and sending the target permission credential to the first privacy computing device;

The first privacy computing device is further configured to receive the target permission certificate, and save the correspondence between the second device identifier, the target item information, and the target permission certificate.

In a second aspect, the present application provides a privacy computing method, the method is applied to a second privacy computing device, and the method includes:

receiving a resource access request sent by the first private computing device, wherein the resource access request carries a target permission credential, target item information, and a first device identifier of the first private computing device;

Determine the target authorization certificate corresponding to the first device identification and the target item information according to the pre-saved correspondence between the privacy computing device identification, project information, and authorization certificate; match, then send a verification passing notice to the first privacy computing device, so that the first privacy computing device receives the verification passing notification, and accesses the waiting list belonging to the target project information in the second privacy computing device. Access resources.

In a possible implementation manner, the judging that the target authorization credential matches the target permission credential includes:

If the security access policy information carried in the target permission credential matches the security access policy information carried in the target authorization credential, it is determined that the target authorization credential matches the target permission credential.

In a possible implementation manner, the method also includes:

If the security access policy information carried in the target permission credential does not match the security access policy information carried in the target authorization credential, then determine that the target authorization credential does not match the target permission credential, and report to the second A privacy computing device sends a prompt message that the verification fails.

In a possible implementation manner, the security access policy information includes: at least one of permission classification of accessible resource types, access mode restriction information, access times restriction information, and access time restriction information.

In a possible implementation manner, after it is determined that the target authorization credential matches the target permission credential, and before sending the verification pass notification to the first privacy computing device, the method further includes:

Establishing an access session, and saving the correspondence between the session ID of the access session and the target token ID in the target license certificate;

sending the session identifier to the first private computing device;

If the session identifier and the target token identifier sent by the first privacy computing device are received, and it is determined that the corresponding relationship between the session identifier and the target token identifier is stored locally, then the first privacy A step in which the computing device sends a verification pass notification.

In a possible implementation manner, the process of pre-storing the correspondence between the privacy computing device identifier, item information, and authorization credentials includes:

receiving an authorization access resource application carrying the first device identifier and target item information sent by the first privacy computing device;

When it is judged that the first device identifier is located in the pre-stored secure device identifiers that have undergone identity authentication, determine the first device identifier and the target security access policy information corresponding to the target item information, and generate the target permission credential and target authorization credential, wherein both the target permission credential and the target authorization credential carry the target security access policy information; sending the target permission credential to the first private computing device;

The corresponding relationship between the first device identifier, the target item information and the target authorization credential is saved.

In a third aspect, the present application provides a privacy computing method, the method is applied to a first privacy computing device, and the method includes:

If it is determined that the private computing device to which the resource to be accessed belongs is a second private computing device other than the first private computing device, obtain the second device identifier of the second private computing device and the target project information to which the resource to be accessed belongs ; According to the correspondence between the pre-saved private computing device identifier, project information and resource access permission certificate, determine the target permission certificate corresponding to the second device identifier and target project information; identify the second device corresponding to the first The second privacy computing device sends a resource access request carrying the target permission credential, the target item information, and the first device identifier of the first privacy computing device;

If the verification pass notification sent by the second privacy computing device is received, access the resource to be accessed in the second privacy computing device.

In a possible implementation manner, the sending the first device carrying the target permission credential, the target item information, and the first private computing device to the second private computing device corresponding to the second device identifier After the resource access request is identified, before receiving the verification notification sent by the second privacy computing device, the method further includes:

If the session identifier sent by the second privacy computing device is received, when the resource to be accessed needs to be accessed, send the session identifier and the target token identifier in the target permission certificate to the second privacy computing device equipment.

In a possible implementation manner, the process of pre-storing the correspondence between the private computing device identifier, project information, and permission credentials for resource access includes:

sending an authorization access resource application carrying the first device identifier and target item information to the second private computing device;

If the target permission certificate sent by the second privacy computing device is received, the corresponding relationship between the second device identifier, the target item information and the target permission certificate is saved.

In a fourth aspect, the present application provides a privacy computing device, the device is applied to a second privacy computing device, and the device includes:

A receiving module, configured to receive a resource access request sent by the first privacy computing device, wherein the resource access request carries a target license credential, target item information, and a first device identifier of the first privacy computing device;

An authentication module, configured to determine the target authorization credential corresponding to the first device identifier and the target item information according to the pre-saved correspondence between the private computing device identifier, item information, and authorization credential; if the target authorization credential is determined If it matches the target permission credential, then send a verification passing notification to the first privacy computing device, so that the first privacy computing device receives the verification passing notification, and accesses the information in the second privacy computing device belonging to the The resource to be accessed describing the target project information.

In a possible implementation manner, the authentication module is specifically configured to, if the security access policy information carried in the target permission certificate is consistent with the security access policy information carried in the target authorization certificate, determine that the The target authorization credentials match the target permission credentials.

In a possible implementation manner, the authentication module is further configured to determine if the security access policy information carried in the target permission credential does not match the security access policy information carried in the target authorization credential. The target authorization credential does not match the target permission credential, and a verification failure prompt message is sent to the first privacy computing device.

In a possible implementation manner, the authentication module is further configured to establish an access session, and save the correspondence between the session identifier of the access session and the target token identifier in the target permission certificate; The session identifier is sent to the first privacy computing device;

If the session identifier and the target token identifier sent by the first privacy computing device are received, and when it is determined that the corresponding relationship between the session identifier and the target token identifier is stored locally, send a message to the first privacy computing device Send verification notification.

In a possible implementation manner, the authentication module is specifically configured to receive an authorization access resource application carrying the first device identifier and target item information sent by the first privacy computing device;

When it is judged that the first device identifier is located in the pre-stored secure device identifiers that have undergone identity authentication, determine the first device identifier and the target security access policy information corresponding to the target item information, and generate the target permission credential and target authorization credential, wherein both the target permission credential and the target authorization credential carry the target security access policy information; sending the target permission credential to the first private computing device;

The corresponding relationship between the first device identifier, the target item information and the target authorization credential is saved.

In a fifth aspect, the present application provides a privacy computing device, the device is applied to a first privacy computing device, and the device includes:

A sending module, configured to obtain the second device identifier of the second private computing device and the resource to be accessed if it is determined that the private computing device to which the resource to be accessed belongs is a second private computing device other than the first private computing device The target project information to which it belongs; according to the correspondence between the pre-saved private computing device identifier, project information, and resource access permission credentials, determine the target permission credential corresponding to the second device identifier and target project information; The second privacy computing device corresponding to the device identifier sends a resource access request carrying the target permission credential, the target item information, and the first device identifier of the first privacy computing device;

The access module is configured to access the resources to be accessed in the second privacy computing device if the verification passing notification sent by the second privacy computing device is received.

In a possible implementation manner, the sending module is further configured to: if the session identifier sent by the second privacy computing device is received, when the resource to be accessed needs to be accessed, the session identifier and the The target token identifier in the target permission credential is sent to the second private computing device.

In a possible implementation manner, the sending module is specifically configured to send an authorization access resource application carrying the first device identifier and target item information to the second privacy computing device;

If the target permission certificate sent by the second privacy computing device is received, the corresponding relationship between the second device identifier, the target item information and the target permission certificate is saved.

In a sixth aspect, the present application provides an electronic device, which includes a processor and a memory, wherein the memory stores program code, and when the program code is executed by the processor, the processor executes the above-mentioned The steps of any one of the privacy computing methods.

In a seventh aspect, the present application provides a computer-readable storage medium, which includes program code, and when the storage medium is run on an electronic device, the program code is used to make the electronic device perform any of the above-mentioned The steps of the privacy calculation method are described.

In this application, the first private computing device may obtain the second device identifier of the second private computing device and the target project information to which the resource to be accessed belongs when determining that the private computing device to which the resource to be accessed belongs is a second private computing device other than its own; According to the correspondence between the pre-saved private computing device ID, project information, and resource access license credential, determine the target license credential corresponding to the second device ID and the target project information; and send to the second private computing device corresponding to the second device ID A resource access request that carries the target permission credential, target project information, and the first device ID of the first private computing device; after receiving the resource access request, the second private computing device can Correspondence between authorization certificates, determine the target authorization certificate corresponding to the first device identifier and the target item information; if it is judged that the target authorization certificate matches the target permission certificate, send a verification pass notification to the first privacy computing device; the first privacy computing device receives The verification passes the notification, and the resource to be accessed in the second privacy computing device is accessed. Since the target license certificate in this application corresponds to the second device identifier and target item information, and the target authorization certificate corresponds to the first device identifier and target item information, only when it is judged that the target authorization certificate matches the target license certificate is it sent to the second A private computing device sends a verification pass notification. On the one hand, it can ensure that the first private computing device cannot freely access the resources of other private computing devices; on the other hand, it can also ensure that the resources in the second private computing device cannot be deleted at will. Access to the private computing device; thirdly, it can also ensure that the first private computing device cannot arbitrarily access the resources of other projects except the target project, which can ensure the security and flexibility of resource access.

Description of drawings

In order to more clearly illustrate the embodiments of the present application or the implementation methods in related technologies, the following will briefly introduce the drawings that need to be used in the descriptions of the embodiments or related technologies. Obviously, the drawings in the following description are the For some embodiments of the application, those skilled in the art can also obtain other drawings according to these drawings.

Fig. 1 shows a schematic diagram of a privacy computing system provided by some embodiments;

Fig. 2 shows a schematic diagram of a resource type provided by some embodiments;

Fig. 3 shows a schematic diagram of a process of determining security access policy information provided by some embodiments;

Fig. 4 shows a schematic diagram of the first privacy calculation process provided by some embodiments;

Fig. 5 shows a schematic diagram of the second privacy calculation process provided by some embodiments;

Fig. 6 shows a schematic diagram of the third privacy calculation process provided by some embodiments;

Fig. 7 shows a schematic diagram of the fourth privacy calculation process provided by some embodiments;

Fig. 8 shows a schematic diagram of a privacy computing device provided by some embodiments;

Fig. 9 shows a schematic diagram of another privacy computing device provided by some embodiments;

Fig. 10 shows a schematic structural diagram of an electronic device provided by some embodiments.

Detailed ways

In order to allow different private computing devices to access resources securely and cooperatively, the present application provides a private computing device, method, device, device and medium.

In order to make the purpose and implementation of the application clearer, the following will clearly and completely describe the exemplary implementation of the application in conjunction with the accompanying drawings in the exemplary embodiment of the application. Obviously, the described exemplary embodiment is only the present application. Claim some of the examples, not all of them.

It should be noted that the brief description of the terms in this application is only for the convenience of understanding the implementations described below, and is not intended to limit the implementations of this application. These terms are to be understood according to their ordinary and usual meaning unless otherwise stated.

The terms "first", "second", and "third" in the description and claims of this application and the above drawings are used to distinguish similar or similar objects or entities, and do not necessarily mean limiting specific sequential or sequential unless otherwise noted. It is to be understood that the terms so used are interchangeable under appropriate circumstances.

The terms "comprising" and "having", as well as any variations thereof, are intended to be inclusive but not exclusive, for example, a product or device comprising a series of components is not necessarily limited to all components expressly listed, but may include not expressly listed other components listed or inherent to these products or equipment.

The term "module" refers to any known or later developed hardware, software, firmware, artificial intelligence, fuzzy logic, or combination of hardware or/and software code capable of performing the function associated with that element.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, and are not intended to limit it; although the application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: It is still possible to modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the various embodiments of the present application. scope.

Example 1:

Fig. 1 shows a schematic diagram of a privacy computing system provided by some embodiments, the system includes: a first privacy computing device 11 and a second privacy computing device 12, wherein:

The first private computing device 11 is configured to obtain the second private computing device 12 of the second private computing device 12 if it is determined that the private computing device to which the resource to be accessed belongs is the second private computing device 12 other than the first private computing device 11 Identification and target project information to which the resource to be accessed belongs; according to the correspondence between the pre-saved privacy computing device identification, project information, and resource access permission credentials, determine the target permission corresponding to the second device identification and target project information Credentials; sending a resource access request carrying the target permission credential, the target item information, and the first device identifier of the first private computing device to the second private computing device corresponding to the second device identifier;

The second private computing device 12 is configured to receive the resource access request, and determine the correspondence between the first device identifier and the target project information according to the pre-saved correspondence between the private computing device identifier, project information, and authorization credentials. the target authorization credential; if it is judged that the target authorization credential matches the target permission credential, then send a verification pass notification to the first privacy computing device;

The first privacy computing device 11 is further configured to receive the notification of passing the verification, and access resources to be accessed in the second privacy computing device.

In a possible implementation manner, the first private computing device 11 and the second private computing device 12 may be devices such as PCs and mobile terminals, or devices such as servers, which are not specifically limited in this application. The first private computing device 11 and the second private computing device 12 may be two different devices. Both the first privacy computing device 11 and the second privacy computing device 12 respectively store sub-algorithms of any privacy algorithm. For the convenience of description, the sub-algorithm stored in the first privacy computing device 11 is called the first sub-algorithm, and the second The subalgorithm stored in the second privacy computing device 12 is called the second subalgorithm. In a possible implementation, the first sub-algorithm and the second sub-algorithm may be part of the sub-algorithms included in the same privacy computing product launched by the same technology manufacturer, and the first sub-algorithm and the second sub-algorithm may also be respectively Different privacy computing products launched by different technology manufacturers based on different system platforms can be flexibly set according to requirements, which is not specifically limited in this application and will not be repeated here.

In a possible implementation manner, the first privacy computing device 11 may be a device of a resource user, and the second privacy computing device 12 may be a device of a resource holder. The number of the first privacy computing device 11 and the second privacy computing device 12 can be one or more. This application does not specifically limit the number of the first privacy computing device 11 and the second privacy computing device 12. Flexible setting, wherein, regardless of whether the number of the first privacy computing device 11 or the second privacy computing device 12 is one or more, for each first privacy computing device, the first privacy computing device accesses any second privacy computing device The resource access process provided by the embodiment of the present application can be adopted for the resource access process, and will not be repeated here. For the convenience of understanding, unless otherwise specified, the resource access process (private computing process) provided by this application is explained below by taking the number of the first private computing device 11 and the number of the second private computing device 12 as an example.

In a possible implementation manner, before the first privacy computing device 11 and the second privacy computing device 12 perform interconnection and intercommunication, a process of network connection and identity authentication may be performed first. Optionally, the developer of the privacy algorithm, etc. can pre-subscribe the first privacy computing device 11's Internet Protocol (Internet Protocol, IP) address, unique code (Identity document, ID) and other identification information offline (for convenience of description, follow-up The identification information of the first privacy computing device 11 is referred to as the first device identification) is sent to the second privacy computing device 12 . That is to say, both the first privacy computing device 11 and the second privacy computing device 12 can be used as a node, and can send identification information such as the IP of the node of the first privacy computing device 11 and the ID of the organization to which the node belongs to the second privacy computing device offline. Privacy Computing Device 12 . The second private computing device 12 may use the first private computing device 11 corresponding to the first device identifier as a secure compliance device, and store the first device identifier in its own secure device identifier that has been authenticated. In addition, other identity authentication methods may also be used to authenticate the privacy computing device, which is not specifically limited in this application.

In a possible implementation, the second privacy computing device 12 is the device of the resource holder, and the second privacy computing device may contain several resources, and the second privacy computing device 12 may base on the type label of each resource etc., divide its own resources into several types. Optionally, refer to FIG. 2. FIG. 2 shows a schematic diagram of a resource type provided by some embodiments. Resources can be divided into nodes (Node), projects (Project) that nodes participate in, and data sets required by projects ( Dataset), the process (Flow) involved in the project, the job (Job) included in the process, the task (Task) included in the job, the component (Component) involved in the task, the model (Model) involved in the process, and the model can provide There are nine types of resources including services.

In a possible implementation, considering that the resource holder and the resource user may cooperate in different projects, in order to improve the security and flexibility of resource access, for each project, the resource holder can follow the project The type of resources involved is to classify the resources in the second privacy computing device 12 . Wherein, different resource holders may classify resources in different ways, and each resource holder may flexibly and independently classify resources in its second privacy computing device 12 , which is not specifically limited in this application. Referring to Table 1, Table 1 shows an example table of resource classification provided by some embodiments.

Table 1

resource level Resource Type 1 node 2 Dataset, Model 3 project 4 process, service 5 Operation 6 Task

As shown in Table 1, resource levels can be divided into six levels: Level 1, Level 2, Level 3, Level 4, Level 5, and Level 6. The higher the value of the level, the more resource information can be viewed. For example, when you need to view resources at resource level 6, you usually also need to view resources at level 1-5, and when you view resources at resource level 1, you usually do not need to view resources at level 2-6. Later, when setting security access policy information for each resource user, if the resource user's security access policy information contains a higher permission classification (level) for resource types that can be accessed, the resource user can view More resource information. If the resource user's security access policy information contains a lower permission classification (level) for the type of resources that can be accessed, the resource user can view less resource information. The following is an introduction to configuring security access policy information for each resource user. Understandably, three fields can be used to describe any resource, and these three fields can be respectively: resource type (Resource Type), resource identifier (resource ID, Resource ID), and resource level (Resource Level). Among them, the resource type can be determined based on the unified classification rules in the industry, and the resource ID can be independently set by each node, for example, can be independently set by each resource holder based on the corresponding privacy computing device. The resource level can be graded independently by each node, which will not be repeated here.

Referring to FIG. 3 , FIG. 3 shows a schematic diagram of a process of determining security access policy information provided by some embodiments. Each resource holder can independently and flexibly configure security access policy information, that is, for each resource holder, the resource holder can independently and flexibly set corresponding security access policies for each resource user information. The security access policy information may be a hierarchical authorization policy for externally accessible information of the privacy computing system (privacy computing device). Exemplarily, for each resource user, the security access policy information set for the resource user may include the resource At least one of the permission classification of resource types that the user can access, access mode restriction information, access times restriction information, and access time restriction information. Wherein, the security access policy information can be flexibly set according to requirements, which is not specifically limited in this application. Through this hierarchical and loosely coupled security access policy information, the problem of strong association of security policies between multi-party nodes is decoupled, so that the security policies between heterogeneous privacy computing systems (different privacy computing devices) have better versatility and maintainability and scalability.

In a possible implementation manner, when setting the permission classification of resource types that can be accessed by resource users, it can be flexibly set according to requirements. Optionally, if the resource user has high permissions and can view all resources of the resource holder, you can directly set the permission classification of resource types that the resource user can access as a global security policy, and the resource user can View all resources of the resource holder. In addition, resource users can also be grouped. Resource users in different groups can have different permission levels. This method of setting permission levels can also be called a group security policy. For example, it can be based on the division of resource levels. Set the permission levels for resource types that can be accessed by resource consumers in each group. Still taking the above-mentioned division of resource levels into six levels: 1, 2, 3, 4, 5, and 6 as an example, each resource user can be divided into several groups, and the resources used in each group The authority level of the party can be level 1, level 2, level 3, level 4, level 5, level 6, etc. When the level of authority is level 6, it can be considered that the authority level of the corresponding resource user is higher, and the corresponding resource The user can view the resources of level 1-6 in the resource holder; when the permission level is 1, it can be considered that the corresponding resource user has a lower permission level, and the corresponding resource user can view the resources in the resource holder Level 1 resources will not be repeated here. In addition, it is also possible to separately set the permission level of resource types that can be accessed by one or some resource users. For example, the permission level of resource users can be level 1, level 2, level 3, level 4, level 5 or level 6 levels, etc., and will not be repeated here. It is understandable that the permission classification of the resource types that can be accessed carried in the target permission certificate of the subsequent resource user can be the highest level that the resource user can access to the resource. For example, for a certain project, the resource user can view at most For resources with a resource level of level 6, the permission level of the resource types that they can access can be level 6; if the resource user can only view resources with a resource level of level Permissions can be classified into 3 levels. The permission classification of the resource type that can be accessed carried in the target authorization certificate of the subsequent resource holder can also be the highest level that the resource user can access to the resource, and will not be repeated here.

The security access policy information may also include access mode restriction information for resource users to access resources. For example, the access mode restriction information may include access based on web pages, etc., which can be flexibly set according to requirements. In addition, the security access policy information may also include access times limit information, access time limit information, etc. of the resource user. For example, the access times limit information may include that the number of visits within a week does not exceed 5 times, 10 times, etc., and the access time limit information may include access between 8:00-18:00, etc.

After setting the security access policy information of the privacy computing device of the resource user for a certain project, the second privacy computing device can save the device identification of the privacy computing device of the resource user, the corresponding relationship between project information and security access policy information.

In a possible implementation, when the first private computing device 11 of the resource user wants to access the resources in the second private computing device 12 of the resource holder, it may first send an authorization to the second private computing device 12 An application for resource access, in which, in order for the second private computing device 12 to identify the first private computing device and which item's resources the first private computing device needs to view, the resource access authorization application can carry the first private computing device 11's first The device ID and the target project information for which you want to view the project.

When the second private computing device 12 receives a resource access authorization request, it can determine whether the first device ID is in the pre-saved secure device ID that has been authenticated. When the security device ID is present, the second privacy computing device 12 may determine the target security access policy information corresponding to the first device ID and the target item information according to the pre-stored correspondence between the device ID, item information and security access policy information. After determining the target security access policy information, still referring to FIG. 3 , the second privacy computing device 12 can generate a pair of credentials based on the authorization processor in itself: the target permission credential and the target authorization credential, wherein the target permission credential Both the target security access policy information is carried in the target authorization certificate. The second privacy computing device 12 can store the target authorization credential locally, and save the corresponding relationship between the first device identifier, the target item information and the target authorization credential for use in later authentication, and how to authenticate will be described in detail later , I won’t go into details here. In addition, the second privacy computing device 12 can send the target permission certificate to the resource user's privacy computing device, that is, the first privacy computing device 11, and the first privacy computing device 11 can receive the target permission certificate and save the second privacy computing device. The corresponding relationship between the second device identifier of the device 12, the target item information, and the target license certificate. Subsequently, the first privacy computing device may obtain the access right to access resources in the target item information in the second privacy computing device 12 by virtue of the target permission credential. Based on the same method, the first privacy computing device 11 can obtain the correspondence between the privacy computing device identifiers of multiple resource holders, project information, and permission credentials for resource access, which will not be repeated here.

In a possible implementation manner, both the target permission credential and the target authorization credential may include the following information: token (Token), resource type that can be accessed (Resource Type), permission classification (resource level) of resource type that can be accessed , Resource Level), the accessible resource ID (Resource Id), the node ID (Resourse Node Id) of the resource holder’s second privacy computing device, the resource holder’s organization name and other IDs (Resourse InstId), resource usage The node ID (RequestNode Id) of the party's first privacy computing device, the resource user's organization name and other IDs (Request Inst Id). Wherein, Resource Node Id and Resource Inst Id can be used as the second device identifier, and RequestNode Id and Request Inst Id can be used as the first device identifier. Optionally, both the target permission credential and the target authorization credential may also include access time limit information (Time Limit), access times limit information (Times Limit), etc. Among them, the token can be the only authorization credential issued by the resource holder to the resource user, and the token has a binding corresponding relationship with the resource holder, the resource user, and accessible resources.

The process of how the first private computing device 11 accesses the resources of the second private computing 12 will be described in detail below.

In a possible implementation, if the first privacy computing device 11 determines that the privacy computing device to which the resource to be accessed belongs is another privacy computing device, that is, it is a second privacy computing device other than the first privacy computing device, the first privacy computing device The device 11 may acquire the second device identifier of the second private computing device, and may also determine the target project information to which the resource to be accessed belongs according to the correspondence between the saved resource and the project information to which the resource belongs. The first private computing device 11 may determine the target permission credential corresponding to the second device identifier and the target project information according to the pre-stored correspondence between the private computing device identifier, project information, and resource access permission credential. After determining the target permission credential, the first privacy computing device 11 may send a resource access request to the second privacy computing device 12 corresponding to the second device identifier, and the resource access request may carry the target permission credential, target project information and the first privacy A first device identification of the computing device.

After receiving the resource access request, the second private computing device 12 may determine the target authorization credential corresponding to the first device identifier and the target project information according to the pre-stored correspondence between the private computing device identifier, project information and authorization credential. After the target authorization credential is determined, the second privacy computing device may authenticate whether the first privacy computing device has permission to access the resource to be accessed based on the target authorization credential. Specifically, the second privacy computing device 12 may determine whether the target authorization credential matches the target permission credential. If the target authorization credential matches the target permission credential, it may be considered that the first privacy computing device 11 has the right to access the resource to be accessed. If the target authorizes If the credential does not match the target permission credential, it can be considered that the first privacy computing device 11 does not have permission to access the resource with access.

Optionally, when judging whether the target authorization credential matches the target permission credential, the second privacy computing device 12 may judge whether the security access policy information carried in the target permission credential matches the security access policy information carried in the target authorization credential, If it is determined that the security access policy information carried in the target permission credential matches the security access policy information carried in the target authorization credential, it can be considered that the target authorization credential matches the target permission credential. And if the security access policy information carried in the target permission certificate does not match the security access policy information carried in the target authorization certificate, it can be considered that the target authorization certificate does not match the target permission certificate. When it does not match the target permission credential, the second privacy computing device 12 may send a verification failure prompt message to the first privacy computing device 11 .

In a possible implementation manner, the security access policy information carried in the target permission certificate and the security access policy information carried in the target authorization certificate are determined (for the convenience of description, the security access policy information carried in the target permission certificate and When the security access policy information carried in the target authorization credential is called the security access policy information of both parties), it can be judged whether the permission classification, access mode restriction information, and access times limit of the resource types that can be accessed contained in the security access policy information of both parties Whether each sub-policy information, such as access time limit information, is consistent. When each sub-policy information is consistent, it can be determined that the security access policy information of both parties is consistent; if any sub-policy information is not consistent, it can be determined that both parties Security access policy information does not match.

Among them, when the security access policy information of both parties includes the sub-policy information of the permission classification of the resource type that can be accessed, when judging whether the sub-policy information in the security access policy information of both parties is consistent, it can be judged that the access-capable resources carried in the target permission certificate Whether the permission classification of the resource type in the target authorization certificate is the same as that of the resource type that can be accessed in the target authorization certificate, if the permission classification of the resource type that can be accessed in the target authorization certificate is the same as that of the resource type that can be accessed in the target authorization certificate The permission classification is different. For example, if the permission classification of the accessible resource type carried in the target license certificate is level 6, and the permission classification of the accessible resource type summarized in the target authorization certificate is level 3, it can be considered that the security access policy of both parties If the sub-policy information of the permission level in the information does not match, it can be determined that the target authorization credential does not match the target permission credential, and a prompt message that the verification fails can be sent to the first privacy computing device. If the permission classification of the accessible resource type carried in the target permission certificate is the same as the permission classification of the accessible resource type in the target authorization certificate, it can be considered that the permission classification of the accessible resource type in the security access policy information of both parties matches .

Wherein, when the security access policy information of both parties includes the sub-policy information of access mode restriction information, when the first privacy computing device 11 of the resource user sends a resource access request to the second privacy computing device 12, the resource access request may also carry There is an access method, which can be the same as the access method allowed in the access method restriction information carried in the target permission certificate. When judging whether the sub-policy information in the security access policy information of both parties is consistent, it can be judged that the target permission certificate Whether the access mode restriction information carried in the target authorization certificate is the same as the access mode restriction information in the target authorization certificate. If the access mode restriction information carried in the target authorization certificate is different from the access mode restriction information in the target authorization certificate, it can be considered that the security access policy of both parties If the sub-policy information of access mode restriction information in the information does not match, it can be determined that the target authorization credential does not match the target permission credential, and a prompt message that the verification fails can be sent to the first privacy computing device. If the access mode restriction information carried in the target permission certificate is the same as the access mode restriction information in the target authorization certificate, it can be considered that the access mode restriction information in the security access policy information of both parties matches.

In a possible implementation manner, when the security access policy information of both parties includes the sub-policy information of access times limit information, when the first privacy computing device 11 of the resource user sends a resource access request to the second privacy computing device 12, the The resource access request can also carry the current cumulative number of visits. The current cumulative number of visits should meet the requirements of the access times limit information in the security access policy information. When judging whether the sub-policy information in the security access policy information of both parties is consistent, It can be determined whether the access limit information carried in the target license certificate is the same as the access limit information in the target authorization certificate. If the access limit information carried in the target license certificate is different from the access limit information in the target authorization certificate, then It can be considered that the sub-policy information of access limit information in the security access policy information of both parties does not match, it can be determined that the target authorization credential does not match the target permission credential, and a prompt message of failed verification can be sent to the first privacy computing device. If the access limit information carried in the target permission certificate is the same as the access limit information in the target authorization certificate, it can be considered that the access limit information in the security access policy information of both parties matches.

In a possible implementation manner, when the security access policy information of both parties includes the sub-policy information of access limit information, the second private computing device 12 of the resource holder may record the current accumulative visits of the first private computing device 11 The number of times, when the first privacy computing device 11 of the resource user sends a resource access request to the second privacy computing device 12, when judging whether the sub-policy information in the security access policy information of both parties is consistent, it can be judged that the target permission certificate carries Whether the number of visits limit information in the target authorization certificate is the same as the number of visits limit information in the target authorization certificate, and whether the current accumulative number of visits of the first privacy computing device 11 meets the requirements of the number of visits limit information in the number of visits limit information in the target authorization certificate, If the access limit information carried in the target permission certificate is not the same as the access limit information in the target authorization certificate, or the current cumulative access times of the first privacy computing device 11 does not meet the access limit information in the target authorization certificate. Requirements for the number of times limit information, it can be considered that the sub-policy information of the access times limit information in the security access policy information of both parties does not match, it can be determined that the target authorization credential does not match the target license credential, and a verification failure can be sent to the first privacy computing device Prompt information. If the number of visits limitation information carried in the target permission certificate is the same as the number of visits limitation information in the target authorization certificate, and the current accumulative number of visits of the first privacy computing device 11 also meets the requirements of the number of visits limitation information in the target authorization certificate, it can be considered The access limit information in the security access policy information of both parties is consistent.

In a possible implementation manner, when the security access policy information of both parties includes the sub-policy information of access time limit information, when the first privacy computing device 11 of the resource user sends a resource access request to the second privacy computing device 12, the resource The holder's second privacy computing device 12 can record the current access time of the first privacy computing device 11, and when judging whether the sub-policy information in the security access policy information of both parties is consistent, it can judge the access time carried in the target permission certificate Whether the restriction information is the same as the access time restriction information in the target authorization certificate, and whether the current access time of the first privacy computing device 11 meets the requirements of the access time restriction information in the access time restriction information in the target authorization certificate, if the target authorization certificate The access time limit information carried in the target authorization certificate is different from the access time limit information in the target authorization certificate, or the current access time of the first privacy computing device 11 does not meet the requirements of the access time limit information in the access time limit information in the target authorization certificate , then it can be considered that the sub-policy information of the access time limit information in the security access policy information of both parties does not match, it can be determined that the target authorization credential does not match the target permission credential, and a verification failure prompt message can be sent to the first privacy computing device. If the access time limit information carried in the target permission certificate is the same as the access time limit information in the target authorization certificate, and the current access time of the first privacy computing device 11 also meets the requirements of the access time limit information in the target authorization certificate, it can be considered that both parties The access time limit information in the security access policy information matches.

In a possible implementation manner, when the second privacy computing device 12 judges that the target authorization credential matches the target permission credential, it may send a verification pass notification to the first privacy computing device 11 . The first privacy computing device 11 may start to access the resources to be accessed in the second privacy computing device after receiving the notification of passing the verification.

In this application, the first private computing device may obtain the second device identifier of the second private computing device and the target project information to which the resource to be accessed belongs when determining that the private computing device to which the resource to be accessed belongs is a second private computing device other than its own; According to the correspondence between the pre-saved private computing device ID, project information, and resource access license credential, determine the target license credential corresponding to the second device ID and the target project information; and send to the second private computing device corresponding to the second device ID A resource access request that carries the target permission credential, target project information, and the first device ID of the first private computing device; after receiving the resource access request, the second private computing device can Correspondence between authorization certificates, determine the target authorization certificate corresponding to the first device identifier and the target item information; if it is judged that the target authorization certificate matches the target permission certificate, send a verification pass notification to the first privacy computing device; the first privacy computing device receives The verification passes the notification, and the resource to be accessed in the second privacy computing device is accessed. Since the target license certificate in this application corresponds to the second device identifier and target item information, and the target authorization certificate corresponds to the first device identifier and target item information, only when it is judged that the target authorization certificate matches the target license certificate is it sent to the second A private computing device sends a verification pass notification. On the one hand, it can ensure that the first private computing device cannot freely access the resources of other private computing devices; on the other hand, it can also ensure that the resources in the second private computing device cannot be deleted at will. Access to the private computing device; thirdly, it can also ensure that the first private computing device cannot arbitrarily access the resources of other projects except the target project, which can ensure the security and flexibility of resource access.

In addition, when the security access policy information includes the permission classification of the types of resources that can be accessed, the first privacy computing device will only send the data to the first privacy computing device when it is judged that the permission levels in the security access policy information of both parties match and the target authorization credential matches the target permission credential. The method of sending verification pass notification can ensure that resource users cannot access resources of other levels beyond their own authority vertically, and can ensure the security of resource access.

In addition, each resource holder can independently and flexibly set or maintain and update the corresponding security access policy information for each resource user, which can ensure the flexibility, diversity, maintainability, scalability and looseness of security access policy information. Coupling. That is, through this hierarchical and loosely coupled security access policy information, the problem of strong association of security policies between multi-party nodes is decoupled, so that the security policies between heterogeneous privacy computing systems have better versatility, maintainability and scalability . When the first privacy computing device of the resource user wants to access the resource to be accessed, the resource holder independently and flexibly authorizes and authenticates the resource user’s ability to access the resource, and the resource user does not need to pay attention to specific security To access policy information, you only need to pass the standard license certificate to the private computing device of the resource holder when you need to access the resource to be accessed, which can improve the flexibility and convenience of resource access on the basis of ensuring safe resource access sex etc.

In addition, the privacy computing method provided by this application can be applied to the interconnection between privacy computing products of different system platforms (also called heterogeneous privacy computing platforms, heterogeneous privacy computing systems), and is suitable for point-to-point networks and centralized networks. It is also applicable to the interconnection and intercommunication between heterogeneous privacy computing platforms of two parties or more than two parties, and has versatility.

In addition, the privacy computing method provided by this application has low functional intrusion to the privacy computing platform in the related technology. In the process of standardizing the resource access mechanism, the security access policy information can be flexibly set to ensure compatibility in the implementation process. Sexual issues, with good implementability.

In a possible implementation manner, in order to further ensure the security of resource access, after determining that the target authorization credential matches the target permission credential, before sending the verification pass notification to the first privacy computing device, the second privacy computing device 12 also An access session can be established, and the corresponding relationship between the session ID (Session ID) of the access session and the target token ID (Token) in the target license certificate can be saved. The second privacy computing device 12 can send the session identifier to the first privacy computing device 11, and in the calculation execution stage, when the first privacy computing device 11 needs to access the resource to be accessed, it can send the session identifier and the target in the target permission certificate The token identifier is sent to the second privacy computing device 12, and the second privacy computing device 12 verifies the validity of the target token identifier. Specifically, when verifying the validity of the target token identifier, the second privacy computing device 12 The device 12 can determine whether the corresponding relationship between the session ID and the target token ID is stored locally. If the corresponding relationship between the session ID and the target token ID is saved locally, the target token ID can be considered valid and the resource can be authorized. The user's first privacy computing device 11 accesses the resource to be accessed, and the second privacy computing device 12 may send a verification pass notification to the first privacy computing device 11 . The first privacy computing device 11 receives the notification of passing the verification, and can access the resource to be accessed in the second privacy computing device 12 when executing a certain privacy computing task. Optionally, the second privacy computing device may record and save the corresponding relationship between the privacy computing task, the session ID, and the target token ID.

In a possible implementation manner, if the second privacy computing device 12 judges that there is no correspondence between the above-mentioned session identifier and the target token identifier stored locally, it may consider that the target token identifier is invalid, and the second privacy computing device 12 12 may send verification failure prompt information to the first privacy computing device 11, which is not specifically limited in this application.

For the convenience of understanding, the following describes the privacy calculation process provided by this application through a specific embodiment. Referring to Figure 4, Figure 4 shows a schematic diagram of the first privacy calculation process provided by some embodiments, the process includes the following steps:

S401: If the first privacy computing device determines that the privacy computing device to which the resource to be accessed belongs is a second privacy computing device other than the first privacy computing device, obtain the second device identifier of the second privacy computing device and the target project to which the resource to be accessed belongs Information; according to the pre-saved correspondence between the private computing device identifier, item information, and resource access permission credentials, determine the target permission credential corresponding to the second device identifier and the target project information. The first privacy computing device sends a resource access request carrying the target permission credential, target item information, and the first device ID of the first privacy computing device to the second privacy computing device corresponding to the second device ID.

S402: The second privacy computing device receives the resource access request, and determines the target authorization certificate corresponding to the first device identification and the target project information according to the pre-saved correspondence between the privacy computing device identification, project information, and authorization certificate; the second privacy computing device Determine whether each sub-policy information in the security access policy information of the target permission certificate, such as the permission classification of the resource types that can be accessed, access mode restriction information, access times restriction information, and access time restriction information, is consistent with the corresponding sub-policy information in the target authorization certificate. Matching, if any sub-strategy information does not match, go to S403; if every sub-policy information matches, go to S404.

S403: The second privacy computing device determines that the target authorization credential does not match the target permission credential, and sends a verification failure prompt message to the first privacy computing device.

S404: If the second privacy computing device determines that the target authorization credential matches the target permission credential, establish an access session, save the correspondence between the session identifier of the access session and the target token identifier in the target permission credential, and send the session identifier to the first Privacy Computing Devices.

S405: The first privacy computing device receives the session ID, and sends the session ID and the target token ID in the target permission certificate to the second privacy computing device when it needs to access the resource to be accessed.

S406: The second privacy computing device receives the session ID and the target token ID, and sends a verification pass notification to the first privacy computing device when it is determined that the corresponding relationship between the session ID and the target token ID is stored locally.

S407: The first privacy computing device receives the verification passing notification, and accesses the resource to be accessed in the second privacy computing device.

In a possible implementation, the resource access process of this application (that is, the private computing process) can be integrated with the interconnection framework by relying on the privacy computing interconnection framework in related technologies to implement the resource access process of this application. Referring to Figure 5, Figure 5 shows a schematic diagram of the second privacy computing process provided by some embodiments. In the research of heterogeneous privacy computing interconnection technology, the industry proposes a layered framework for interconnection architecture that meets industry interconnection standards The solution, from top to bottom, is the management layer, the control layer and the transport layer. Among them, it is possible to define each entity based on the management layer, form a consensus on the general attributes that the entity should have, and define the information interaction and authorization interfaces of various resource entities, in a standardized way to meet the current privacy computing sub-resource information level An interconnected labeling process. Based on the control layer in the process of interconnection and intercommunication, the coordination mechanism and standardized interface of different privacy computing devices (multiple parties) at the job and task levels can be standardized to realize the coordination of jobs and tasks between different privacy computing platforms. Based on the transport layer, it can be used to carry out east-west data transmission between privacy computing platforms, mainly through the standard interface and modular design of communication transmission to realize the interconnection and intercommunication at the computing level.

In the embodiment of the present application, when resources are accessed between different privacy computing devices, the management layer, the control layer, and the transport layer need to be implemented together and coordinated. Referring to FIG. 5 again, the resource access process provided by the embodiment of the present application mainly includes three main steps of establishing authorization and permission, authenticating and establishing a session, and accessing.

Among them, (1) The process of establishing authorization and permission is mainly:

Based on the management layer in the first privacy computing device, the first privacy computing device 11 sends an authorization access resource application carrying the first device identifier and target project information to the second privacy computing device 12 . The second privacy computing device 12 receives the resource access authorization application based on the management layer in the second privacy computing device, and when judging that the first device ID is in the pre-saved security device IDs that have been authenticated, according to the pre-stored device The corresponding relationship between the identification, item information and security access policy information, determine the target security access policy information corresponding to the first device identification and the target item information, and generate target permission credentials and target authorization credentials, wherein the target permission credentials and target authorization credentials Both carry target security access policy information. The second private computing device 12 saves the correspondence between the first device identifier, the target item information and the target authorization credential, and sends the target permission credential to the first private computing device 11 . At the same time, the management layer of the second privacy computing device sends the token (Token) in the target authorization credential to the control layer in the second privacy computing device itself.

The first privacy computing device receives the target permission certificate based on the management layer in the first privacy computing device, and saves the corresponding relationship between the second device identifier, target item information and the target permission certificate. At the same time, the management layer in the first privacy computing device sends the token (Token) in the target permission certificate to the control layer in the first privacy computing device itself.

(2) The process of authentication and session establishment is mainly as follows:

When the first privacy computing device 11 wants to access the resources to be accessed in the second privacy computing device 12, the first privacy computing device 11 can obtain the second privacy computing device 12 based on the control layer in the first privacy computing device 11. 2. Determine the target license certificate corresponding to the second device ID and the target project information according to the correspondence between the pre-saved privacy computing device ID, project information, and resource access license certificate, and the target item information to which the device ID and the resource to be accessed belong; A resource access request carrying the target permission credential, target item information, and the first device ID of the first privacy computing device is sent to the second privacy computing device corresponding to the second device ID.

The second privacy computing device 12 can receive resource access requests based on the control layer in the second privacy computing device, and perform corresponding authentication matters. Corresponding relationship, determine the target authorization credential corresponding to the first device identifier and the target item information; if it is judged that the target authorization credential matches the target permission credential, then an access session can be established based on the control layer in the second privacy computing device, and the information of the access session can be saved. The corresponding relationship between the session identifier (session Id) and the target token identifier in the target permission certificate, and send the session identifier to the first privacy computing device 11. At the same time, the second privacy computing device can send the corresponding relationship between the session ID (session Id) of the access session and the target token ID (Token) in the target permission certificate to the transport layer in the second privacy computing device based on the control layer. Different sessions can be distinguished based on the session ID (sessionId), and the execution of each session task is carried out in an independent container to ensure that multiple session tasks are executed correctly at the same time.

The first privacy computing device 11 may receive the session ID based on the control layer in the first privacy computing device, and at the same time, send the session ID and the target token ID in the target permission certificate to the transmission layer in the first privacy computing device.

(3) The access process is mainly as follows:

When the first private computing device 11 needs to access the resources to be accessed and execute the private computing process, it can send the session identifier and the target token identifier in the target permission certificate to the second private computing device based on the transport layer in the first private computing device .

The second privacy computing device may receive the session ID and the target token ID based on the transport layer in the second privacy computing device, and when it is determined that the corresponding relationship between the session ID and the target token ID is stored locally, send a message to the first privacy computing device Send verification notification. The first privacy computing device may access the resource to be accessed in the second privacy computing device based on a corresponding transport layer.

Example 2:

Based on the same technical idea, this application also provides a privacy computing method, which is applied to a second privacy computing device. FIG. 6 shows a schematic diagram of a third privacy computing process provided by some embodiments. The process includes the following step:

S601: Receive a resource access request sent by a first private computing device, where the resource access request carries a target permission credential, target item information, and a first device identifier of the first private computing device.

S602: Determine the target authorization credential corresponding to the first device identifier and the target item information according to the pre-stored correspondence between the private computing device identifier, project information, and authorization credential; If the license credentials match, then send a verification passing notification to the first privacy computing device, so that the first privacy computing device receives the verification passing notification, and accesses the information belonging to the target project in the second privacy computing device resources to be accessed.

In a possible implementation manner, the judging that the target authorization credential matches the target permission credential includes:

If the security access policy information carried in the target permission credential matches the security access policy information carried in the target authorization credential, it is determined that the target authorization credential matches the target permission credential.

In a possible implementation manner, the method also includes:

If the security access policy information carried in the target permission credential does not match the security access policy information carried in the target authorization credential, then determine that the target authorization credential does not match the target permission credential, and report to the second A privacy computing device sends a prompt message that the verification fails.

In a possible implementation manner, the security access policy information includes: at least one of permission classification of accessible resource types, access mode restriction information, access times restriction information, and access time restriction information.

In a possible implementation manner, after it is determined that the target authorization credential matches the target permission credential, and before sending the verification pass notification to the first privacy computing device, the method further includes:

Establishing an access session, and saving the correspondence between the session ID of the access session and the target token ID in the target license certificate;

sending the session identifier to the first private computing device;

If the session identifier and the target token identifier sent by the first privacy computing device are received, and it is determined that the corresponding relationship between the session identifier and the target token identifier is stored locally, then the first privacy A step in which the computing device sends a verification pass notification.

In a possible implementation manner, the process of pre-storing the correspondence between the privacy computing device identifier, item information, and authorization credentials includes:

receiving an authorization access resource application carrying the first device identifier and target item information sent by the first privacy computing device;

When it is judged that the first device identifier is located in the pre-stored secure device identifiers that have undergone identity authentication, determine the first device identifier and the target security access policy information corresponding to the target item information, and generate the target permission credential and target authorization credential, wherein both the target permission credential and the target authorization credential carry the target security access policy information; sending the target permission credential to the first private computing device;

The corresponding relationship between the first device identifier, the target item information and the target authorization credential is saved.

Based on the same technical idea, this application also provides a privacy computing method, which is applied to the first privacy computing device. Figure 7 shows a schematic diagram of the fourth privacy computing process provided by some embodiments, and the process includes the following step:

S701: If it is determined that the private computing device to which the resource to be accessed belongs is a second private computing device other than the first private computing device, obtain the second device identifier of the second private computing device and the target to which the resource to be accessed belongs Project information; according to the correspondence between the pre-saved private computing device identifier, project information, and resource access permission certificate, determine the target permission certificate corresponding to the second device identifier and target project information; correspond to the second device identifier The second privacy computing device sends a resource access request carrying the target permission credential, the target item information, and the first device identifier of the first privacy computing device.

S702: If the verification pass notification sent by the second privacy computing device is received, access resources to be accessed in the second privacy computing device.

In a possible implementation manner, the sending the first device carrying the target permission credential, the target item information, and the first private computing device to the second private computing device corresponding to the second device identifier After the resource access request is identified, before receiving the verification notification sent by the second privacy computing device, the method further includes:

If the session identifier sent by the second privacy computing device is received, when the resource to be accessed needs to be accessed, send the session identifier and the target token identifier in the target permission certificate to the second privacy computing device equipment.

In a possible implementation manner, the process of pre-storing the correspondence between the private computing device identifier, project information, and permission credentials for resource access includes:

sending an authorization access resource application carrying the first device identifier and target item information to the second private computing device;

If the target permission certificate sent by the second privacy computing device is received, the corresponding relationship between the second device identifier, the target item information and the target permission certificate is saved.

Example 3:

Based on the same technical concept, the present application also provides a privacy computing device, which is applied to a second privacy computing device. Refer to FIG. 8, which shows a schematic diagram of a privacy computing device provided by some embodiments. Devices include:

The receiving module 81 is configured to receive a resource access request sent by the first private computing device, wherein the resource access request carries a target permission credential, target project information, and a first device identifier of the first private computing device.

The authentication module 82 is configured to determine the target authorization credential corresponding to the first device identifier and the target item information according to the pre-stored correspondence between the private computing device identifier, item information, and authorization credential; if it is determined that the target authorization If the credential matches the target permission credential, then send a verification passing notification to the first privacy computing device, so that the first privacy computing device receives the verification passing notification, and access the information belonging to the second privacy computing device The resource to be accessed for the target project information.

In a possible implementation manner, the authentication module 82 is specifically configured to determine that if the security access policy information carried in the target permission certificate is consistent with the security access policy information carried in the target authorization certificate The target authorization credential matches the target permission credential.

In a possible implementation manner, the authentication module 82 is further configured to: if the security access policy information carried in the target permission credential does not match the security access policy information carried in the target authorization credential, then It is determined that the target authorization credential does not match the target permission credential, and a verification failure prompt message is sent to the first privacy computing device.

In a possible implementation manner, the authentication module 82 is further configured to establish an access session, and save the correspondence between the session identifier of the access session and the target token identifier in the target permission certificate; The session identifier is sent to the first privacy computing device;

If the session identifier and the target token identifier sent by the first privacy computing device are received, and when it is determined that the corresponding relationship between the session identifier and the target token identifier is stored locally, send a message to the first privacy computing device Send verification notification.

In a possible implementation manner, the authentication module 82 is specifically configured to receive an authorization access resource application carrying the first device identifier and target item information sent by the first privacy computing device;

When it is judged that the first device identifier is located in the pre-stored secure device identifiers that have undergone identity authentication, determine the first device identifier and the target security access policy information corresponding to the target item information, and generate the target permission credential and target authorization credential, wherein both the target permission credential and the target authorization credential carry the target security access policy information; sending the target permission credential to the first private computing device;

The corresponding relationship between the first device identifier, the target item information and the target authorization credential is saved.

Based on the same technical idea, the present application also provides a privacy computing device, which is applied to the first privacy computing device. Refer to FIG. 9, which shows a schematic diagram of another privacy computing device provided by some embodiments. The unit includes:

The sending module 91 is configured to obtain the second device identifier of the second private computing device and the to-be-accessed resource if it is determined that the private computing device to which the resource to be accessed belongs is a second private computing device other than the first private computing device. The target project information to which the resource belongs; according to the correspondence between the pre-saved privacy computing device identifier, project information, and resource access permission credentials, determine the target permission credential corresponding to the second device identifier and target project information; The second private computing device corresponding to the two device identifiers sends a resource access request carrying the target permission credential, the target item information, and the first device identifier of the first private computing device.

The access module 92 is configured to access the resources to be accessed in the second privacy computing device if the verification notification sent by the second privacy computing device is received.

In a possible implementation manner, the sending module 91 is further configured to, if receiving the session identifier sent by the second privacy computing device, send the session identifier and the sending the target token identifier in the target permission credential to the second private computing device.

In a possible implementation manner, the sending module 91 is specifically configured to send an authorization access resource application carrying the first device identifier and target item information to the second privacy computing device;

If the target permission certificate sent by the second privacy computing device is received, the corresponding relationship between the second device identifier, the target item information and the target permission certificate is saved.

Example 4:

Based on the same technical concept, the present application also provides an electronic device. FIG. 10 shows a schematic structural diagram of an electronic device provided by some embodiments. As shown in FIG. 10 , it includes: a processor 101, a communication interface 102, and a memory 103 and communication bus 104, wherein, processor 101, communication interface 102, memory 103 complete mutual communication through communication bus 104;

A computer program is stored in the memory 103, and when the program is executed by the processor 101, the processor 101 is made to execute the steps of any one of the privacy computing methods described above.

Since the problem-solving principle of the above-mentioned electronic device is similar to the privacy calculation method, the implementation of the above-mentioned electronic device can refer to the implementation of the method, and the repetition will not be repeated.

The communication bus mentioned above for the electronic device may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus or the like. The communication bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

The communication interface 102 is used for communication between the electronic device and other devices.

The memory may include a random access memory (Random Access Memory, RAM), and may also include a non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

The above-mentioned processor can be a general-purpose processor, including a central processing unit, a network processor (NetworkProcessor, NP), etc.; it can also be a digital instruction processor (Digital Signal Processing, DSP), an application-specific integrated circuit, a field programmable gate display or other Programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc.

Based on the same technical idea, an embodiment of the present application provides a computer-readable storage medium, in which a computer program executable by an electronic device is stored, and when the program is run on the electronic device , so that the electronic device implements the steps of any one of the above privacy computing methods when executed.

Since the problem-solving principle of the above-mentioned computer-readable storage medium is similar to that of the privacy calculation method, the implementation of the above-mentioned computer-readable storage medium can refer to the implementation of the method, and the repetition will not be repeated.

The above-mentioned computer-readable storage medium may be any available medium or data storage device that can be accessed by a processor in an electronic device, including but not limited to magnetic storage such as floppy disk, hard disk, magnetic tape, magneto-optical disk (MO), etc., optical storage such as CD, etc. , DVD, BD, HVD, etc., and semiconductor memory such as ROM, EPROM, EEPROM, non-volatile memory (NANDFLASH), solid-state hard disk (SSD), etc.

Based on the same technical idea, on the basis of the above-mentioned embodiments, the present application provides a computer program product, the computer program product comprising: computer program code, when the computer program code runs on the computer, the computer program Execute the steps of any one of the privacy computing methods described above.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems, or computer program products. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to the present application. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

Obviously, those skilled in the art can make various changes and modifications to the application without departing from the spirit and scope of the application. In this way, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalent technologies, the present application is also intended to include these modifications and variations.

Claims (19)

1. A privacy computing system, the system comprising:

the first privacy computing device is used for acquiring a second device identifier of the second privacy computing device and target item information of the resource to be accessed if the privacy computing device of the resource to be accessed is determined to be a second privacy computing device which is not the first privacy computing device; determining a target license credential corresponding to the second equipment identifier and the target item information according to the corresponding relation between the pre-stored privacy computing equipment identifier, the item information and the resource access license credential; transmitting a resource access request carrying the target license credential, the target item information and a first device identifier of the first privacy computing device to a second privacy computing device corresponding to the second device identifier;

the second privacy computing device is configured to receive the resource access request, and determine a target authorization credential corresponding to the first device identifier and the target item information according to a pre-stored privacy computing device identifier, a corresponding relation between the item information and the authorization credential; if the target authorization credential is judged to be matched with the target license credential, sending a verification passing notification to the first privacy computing device;

The first privacy computing device is further configured to receive the verification pass notification and access a resource to be accessed in the second privacy computing device.

2. The system according to claim 1, wherein the second privacy computing device is specifically configured to:

and if the security access policy information carried in the target license credential is consistent with the security access policy information carried in the target authorization credential, determining that the target authorization credential is matched with the target license credential.

3. The system of claim 1, wherein the second privacy computing device is further to:

if the security access policy information carried in the target license credential does not accord with the security access policy information carried in the target authorization credential, determining that the target authorization credential is not matched with the target license credential, and sending verification failing prompt information to the first privacy computing device.

4. A system according to claim 2 or 3, wherein the security access policy information comprises: at least one of authority classification of the type of the resource which can be accessed, access mode limit information, access frequency limit information and access time limit information.

5. A system according to any of claims 1-3, wherein the second privacy computing device is further to:

establishing an access session, and storing the corresponding relation between the session identifier of the access session and the target token identifier in the target license credential;

transmitting the session identification to the first privacy computing device;

the first privacy computing device is further to:

receiving the session identifier, and when the resource to be accessed needs to be accessed, transmitting the session identifier and a target token identifier in the target license credential to the second privacy computing device;

the second privacy computing device is further to:

and receiving the session identifier and the target token identifier, and sending a verification passing notification to the first privacy computing device when the corresponding relation between the session identifier and the target token identifier is determined to be stored locally.

6. A system according to claim 2 or 3, wherein the first privacy computing device is specifically configured to:

sending an authorized access resource application carrying the first device identifier and target item information to the second privacy computing device;

the second privacy computing device is specifically configured to determine, when it is determined that the first device identifier is located in a pre-stored security device identifier that has been subjected to identity authentication, target security access policy information corresponding to the first device identifier and the target item information according to a correspondence between the pre-stored device identifier, the item information, and the security access policy information, and generate the target license credential and the target authorization credential, where the target license credential and the target authorization credential both carry the target security access policy information; storing the corresponding relation among the first equipment identifier, the target item information and the target authorization credential, and sending the target permission credential to the first privacy computing equipment;

The first privacy computing device is further configured to receive the target license credential and store a correspondence between the second device identifier, the target item information, and the target license credential.

7. A method of privacy calculation, the method being applied to a second privacy computing device, the method comprising:

receiving a resource access request sent by first privacy computing equipment, wherein the resource access request carries a target license credential, target item information and a first equipment identifier of the first privacy computing equipment;

determining a target authorization credential corresponding to the first equipment identifier and the target project information according to a pre-stored corresponding relation between the privacy computing equipment identifier, the project information and the authorization credential; and if the target authorization credential is judged to be matched with the target license credential, sending a verification passing notification to the first privacy computing equipment, enabling the first privacy computing equipment to receive the verification passing notification, and accessing resources to be accessed, which belong to the target item information, in the second privacy computing equipment.

8. The method of claim 7, wherein said determining that the target authorization credential matches the target license credential comprises:

And if the security access policy information carried in the target license credential is consistent with the security access policy information carried in the target authorization credential, determining that the target authorization credential is matched with the target license credential.

9. The method of claim 8, wherein the method further comprises:

if the security access policy information carried in the target license credential does not accord with the security access policy information carried in the target authorization credential, determining that the target authorization credential is not matched with the target license credential, and sending verification failing prompt information to the first privacy computing device.

10. The method according to claim 8 or 9, wherein the security access policy information comprises: at least one of authority classification of the type of the resource which can be accessed, access mode limit information, access frequency limit information and access time limit information.

11. The method of any of claims 7-9, wherein after determining that the target authorization credential matches the target license credential, prior to sending a verification pass notification to the first privacy computing device, the method further comprises:

Establishing an access session, and storing the corresponding relation between the session identifier of the access session and the target token identifier in the target license credential;

transmitting the session identification to the first privacy computing device;

and if the session identifier and the target token identifier sent by the first privacy computing device are received, and when the corresponding relation between the session identifier and the target token identifier is determined to be stored locally, the step of sending a verification passing notification to the first privacy computing device is performed.

12. The method according to claim 8 or 9, wherein the pre-maintaining the correspondence between the private computing device identification, the item information and the authorization credential comprises:

receiving an authorized access resource application which is sent by the first privacy computing device and carries the first device identifier and target item information;

when the first equipment identifier is judged to be positioned in a pre-stored safety equipment identifier which is subjected to identity authentication, determining target safety access strategy information corresponding to the first equipment identifier and the target item information according to the corresponding relation between the pre-stored equipment identifier, the item information and the safety access strategy information, and generating a target license credential and a target authorization credential, wherein the target license credential and the target authorization credential both carry the target safety access strategy information; transmitting the target license credential to the first privacy computing device;

And storing the corresponding relation among the first equipment identification, the target item information and the target authorization credential.

13. A method of privacy calculation, the method being applied to a first privacy computing device, the method comprising:

if the privacy computing equipment to which the resource to be accessed belongs is determined to be second privacy computing equipment which is not the first privacy computing equipment, acquiring a second equipment identifier of the second privacy computing equipment and target item information to which the resource to be accessed belongs; determining a target license credential corresponding to the second equipment identifier and the target item information according to the corresponding relation between the pre-stored privacy computing equipment identifier, the item information and the resource access license credential; transmitting a resource access request carrying the target license credential, the target item information and a first device identifier of the first privacy computing device to a second privacy computing device corresponding to the second device identifier;

and if the verification passing notification sent by the second privacy computing equipment is received, accessing the resources to be accessed in the second privacy computing equipment.

14. The method of claim 13, wherein after the sending the resource access request carrying the target license credential, the target item information, and the first device identification of the first privacy computing device to the second privacy computing device corresponding to the second device identification, the method further comprises, prior to receiving the verification pass notification sent by the second privacy computing device:

And if the session identifier sent by the second privacy computing device is received, when the resource to be accessed needs to be accessed, the session identifier and the target token identifier in the target license credential are sent to the second privacy computing device.

15. The method according to claim 13 or 14, wherein pre-maintaining the correspondence of the private computing device identification, item information and license credentials for resource access comprises:

sending an authorized access resource application carrying the first device identifier and target item information to the second privacy computing device;

and if the target license credential sent by the second privacy computing device is received, storing the corresponding relation among the second device identifier, the target item information and the target license credential.

16. A privacy computing apparatus, the apparatus being applied to a second privacy computing device, the apparatus comprising:

the device comprises a receiving module, a first privacy computing device and a second privacy computing device, wherein the receiving module is used for receiving a resource access request sent by the first privacy computing device, and the resource access request carries a target license credential, target item information and a first device identifier of the first privacy computing device;

The authentication module is used for determining a target authorization credential corresponding to the first equipment identifier and the target item information according to the pre-stored privacy computing equipment identifier and the corresponding relation between the item information and the authorization credential; and if the target authorization credential is judged to be matched with the target license credential, sending a verification passing notification to the first privacy computing equipment, enabling the first privacy computing equipment to receive the verification passing notification, and accessing resources to be accessed, which belong to the target item information, in the second privacy computing equipment.

17. A privacy computing apparatus, the apparatus being applied to a first privacy computing device, the apparatus comprising:

a sending module, configured to, if it is determined that a privacy computing device to which a resource to be accessed belongs is a second privacy computing device that is not the first privacy computing device, obtain a second device identifier of the second privacy computing device and target item information to which the resource to be accessed belongs; determining a target license credential corresponding to the second equipment identifier and the target item information according to the corresponding relation between the pre-stored privacy computing equipment identifier, the item information and the resource access license credential; transmitting a resource access request carrying the target license credential, the target item information and a first device identifier of the first privacy computing device to a second privacy computing device corresponding to the second device identifier;

And the access module is used for accessing the resources to be accessed in the second privacy computing equipment if the verification passing notification sent by the second privacy computing equipment is received.

18. An electronic device comprising a processor and a memory, wherein the memory stores program code that, when executed by the processor, causes the processor to perform the steps of the privacy calculation method of any of claims 7-15.

19. A computer readable storage medium, characterized in that it comprises a program code for causing an electronic device to perform the steps of the privacy calculation method of any of claims 7-15 when said storage medium is run on said electronic device.

Images