TWI453621B - A decentralized environmental information inquiry system based on user privacy - Google Patents

Description

Decentralized environmental data query system based on user privacy

The present invention relates to a method for processing an inquiry message in a ciphertext manner based on user privacy, and through a ciphertext search method, to achieve an inquiry without knowing the information that the user wants to find by the information provider; Through a certain degree of trusted remote computing resources, it can help improve computing performance and save computing resources consumption and demand on the user side; the result will be provided back to the user device for subsequent processing, and the whole process can be used without changing the user's operating habits. Completed with expected results.

The general information inquiry or analysis system often sends the information to be sent to the service server for further search. In most cases, the user does not know whether the content of the inquiry is exposed to the risk; in addition, various data analysis application systems that can be seen at present are The relevant data analysis comparison program is placed in the device. For example, the computer malicious analysis system is mainly based on host-based analysis technology, and the related malicious software feature values are provided by the remote update server from time to time to provide the latest feature code download, and then The data on the user device is directly analyzed by the host malware analysis system. On the mobile platform, the malware analysis methods currently visible are mainly based on this mechanism. However, the endurance considerations of personal communication devices are now an extremely important part. Malware analysis is basically an application that requires higher computing resources. At present, some anti-virus operators will move some of the analysis operations to the cloud system. Although the purpose of reducing the use of mobile platform resources can be achieved, if the user data is not properly processed and uploaded in clear text, there will be a host on the analysis. The problem of exposing privacy occurs.

The invention is based on the premise of protecting the privacy of the user, and under the limited computing operation and power resources of the mobile platform, the content inquiry based on the content protection is completed, and the system developed through the architecture, such as the cloud malicious analysis service, does not need the user. Worried about the leakage of privacy data during the analysis, and after the analysis can still confirm that the information obtained by the outside world is trustworthy.

The object of the present invention is to provide a distributed environment data inquiry system based on user privacy, which transmits the user's data in a ciphertext manner to the remote end for analysis through the method of information security encryption technology, and through high-performance The computing resources provide up-to-date and clear query results that users can trust. In addition to the computational resource consumption and hardware resources required to save the mobile platform, the operation with large computing requirements and the remote processing of the search feature values that need to be updated frequently can ensure the correctness of the search and avoid the malformation caused by the time difference. The risk of omission during analysis.

A decentralized environmental data query system based on user privacy that achieves the above object includes three subsystems: a data analysis processing subsystem, a personal computing auxiliary subsystem, and a data filtering analysis subsystem, through a fast and efficient encryption algorithm. The inquiry data of the hidden user end is reached, and the search result of the inquiry result is completed. In the case of a malicious newsletter or caller analysis, once the personal mobile device obtains a new newsletter or has an incoming call, the upload analysis action can be automatically executed immediately, and after the analysis result is obtained, the subsequent response action is immediately performed, such as being found to be malicious. When the newsletter or call comes in, immediately alert the user.

The privacy protection method of the user side is that before the inquiry content is sent to the data providing end, the ciphertext stream with the operability and interpretation can be used to hide the information, and the content of the hidden information can be compared after the information provider content is compared. The relevant hashing operation can only find out the information that the user may need, and achieve the purpose of privacy protection.

FIG. 1 is a system architecture diagram of the present invention, which is mainly divided into three subsystems, a data analysis processing subsystem 1, a personal operation auxiliary subsystem 2, and a data filtering analysis subsystem 3, and the intermediate transmission process can be performed through an encrypted channel. communication.

The data analysis processing subsystem 1 comprises three modules: a query content capture module 11, a query content encryption module 12 and a mobile platform feature analysis module 13, which can select the key query content of the analysis and use an encryption method. The related content is hidden and analyzed by subsequent systems to save the device resources required for feature analysis and reduce the need to maintain updated feature values.

The content capturing module 11 is inquired, and the device mainly obtains the content to be inquired, and has the following functions:

a. Filtering comparison mechanism with information type and dictionary file to provide key information content extraction mechanism;

b. Normalize the captured content for subsequent enquiry content encryption.

The content encryption module 12 is queried to provide a mechanism for processing the query content into ciphertext, and the method is as shown in FIG.

a. generating a cipher stream from which the data filtering analysis subsystem 3 can confirm validity and identification; wherein the contents of the ciphertext stream include: random numbers, random numbers, and results of specific hash functions With an identification value;

b. ciphertext is generated by mutually exclusive operation (XOR) of the ciphertext stream and the query content;

c. Send the ciphertext to the data filtering analysis subsystem 3, and send the identification value to the personal computing auxiliary subsystem 2.

The action platform feature analysis module 13 processes the results obtained by the personal operation assistant subsystem 2 or the data filter analysis subsystem 3, and analyzes the results to determine whether the query information is found. This module has the following features:

a. The operation result of the personal operation auxiliary subsystem 2 or the data filtering analysis subsystem 3 is retrieved, and based on the obtained result, the final feature analysis is performed to confirm the result with the plaintext content of the inquiry information.

The personal computing auxiliary subsystem 2 includes a fast filtering identification unit module 21 and a search result filtering auxiliary module 22, which is an individual-specific arithmetic auxiliary system, and transfers the original computing requirements of the user terminal to a more trustworthy resource. More remote assistance operations in the environment to facilitate the analysis of the output of the results. Since the personal operation auxiliary subsystem 2 is mainly used as an auxiliary operation, the data analysis processing subsystem 1 only obtains part of the information through the mechanism of the present invention to achieve the purpose of assisting the operation. The results of the personal computing assistant subsystem 2 are sent to the mobile platform for subsequent processing and application.

The fast filter identification unit module 21 mainly receives the ciphertext stream identification value provided by the data analysis processing subsystem 1, and provides the identification value of the ciphertext stream of the search result filtering auxiliary module 22.

The search result filtering auxiliary module 22 assists the preliminary filtering to filter the data to be returned to the data analysis processing subsystem 1 to reduce the computing needs of the data analysis processing subsystem 1. Its function is as follows:

a. The ciphertext stream identification value is obtained by the fast filter identification unit module 21;

b. The search result collection processing module 32 obtains the search result and the Bloom filter indicating the set of search result identification values;

c. Using the identification value of the fast filter identification unit module 21 and the search result identification value set bloom filter provided by the search result collection processing module 32 for presence confirmation. If the indication is present, the search result obtained by the search result collection processing module 32 is transmitted to the mobile platform feature analysis module 13, and vice versa, the mobile platform feature analysis module 13 is notified that there is no match.

The data filtering analysis subsystem 3 includes a search comparison module 31, a search result collection processing module 32, and a search comparison value module 33, and provides an analysis operation for comparing the user's encrypted inquiry content with the search data. The original data may be subject to variability and may be indexed before the search is provided. Since the information from the user is encrypted ciphertext, the matching job must be confirmed by a further ciphertext operation method. Because the comparison process has the characteristics of fuzzification (the external system cannot clearly know the information that the user wants to analyze), if the matching data is found, the system will wait for all the matching data to be collected and send it to the personal computing assistant subsystem 2 for Filter the job. If the data itself is of a completely structured type, the data transmitted back to the personal computing auxiliary subsystem 2 can be effectively compressed using the Bloom filter data structure, in addition to saving the bandwidth required for network transmission. It can also reduce the computational requirements of subsequent comparison jobs.

The search comparison module 31 provides a query ciphertext content and data search comparison mechanism. This module has the following features:

a. The ciphertext sent by the query content encryption module 12 and the data index plaintext provided by the search comparison value module 33 are mutually exclusive;

b. Perform the validity check of the mutually exclusive stream to determine whether it is a candidate result. In the validity confirmation, as shown in FIG. 3, the field indicating the random number in the ciphertext stream is brought into the hash function, and the comparison value is compared with the field indicating the value of the hash function in the ciphertext stream. Wait. If the two values are equal, the information is matched with the candidate result, and the corresponding search result and the intra-stream identification value information after the operation are submitted to the search result collection processing module 32 for integration.

The search result collection processing module 32 mainly collects information confirmed by the search comparison module 31 as a candidate search result, and is processed by the personal operation support subsystem 2. The main functions of this module are as follows:

a. The information obtained by the search comparison module 31 is confirmed as a candidate result, and;

b. Collect the identification values corresponding to the candidate results. For fast filtering and saving transmission bandwidth, the set of identification values can be stored in the form of a Bloom filter structure;

c. After the search module 31 completes the search, the collected search results are transmitted to the search result filtering assistance module 22 or the mobile platform feature analysis module 13 according to whether the personal computing assistant subsystem 2 needs the assistance selection.

The search comparison value module 33 provides comparison information that can be used for searching and corresponding raw materials. Before the search is provided, the original data can be indexed first, so that the data can be correctly mutually exclusive and validated with the content from the data analysis processing subsystem 1. In addition, the search comparison module 31 can be used to perform the search comparison operation. After the data is determined as the candidate result, the original data and the identification value in the stream are transmitted to the search result collection processing module 32 for aggregation.

The operational flow of the decentralized environmental data query system based on user privacy can be referred to Figure 2. When the user device needs to ask for certain information, such as whether the incoming call is a fraudulent call, the credibility of the newsletter, and the suitability information, etc., the inquiry process is indirectly revealed to the user's associated privacy. In addition to the system communication process using the encrypted channel (TLS, Transport Layer Security) to deliver the message, the information analysis processing subsystem 1 sends the query content to the data filtering analysis subsystem 3, the content is encrypted using the encryption technology to convert the query plaintext into Support the cipher text form of the search.

After the ciphertext is prepared, part of the ciphertext information, that is, the identification value thereof, is given to the quick filter identification unit module 21 to assist subsequent result filtering to reduce the resource usage of the information analysis processing subsystem 1 and improve the overall use efficiency. After the ciphertext is sent to the data filtering analysis subsystem 3, the search matching mechanism will mutually mutrate the ciphertext and the search plaintext, and the result of the mutually exclusive operation is confirmed by the validity of the candidate result to determine the current Whether the information is the result that the user may need. The validity verification method can be confirmed by expressing the equality of the hash value and the hash function value in the ciphertext stream after the operation. When the information analysis processing subsystem 1 generates the ciphertext stream, a part of the information in the stream includes: the generated random value and the hash function value calculated using the random number (data analysis processing subsystem 1 and data filtering analysis subsystem 3) The same hash function needs to be selected as the confirmation of equality; when the data filtering analysis subsystem 3 completes the mutual exclusion operation to generate the ciphertext stream, the field segment indicating the random number is brought into the previously used hash function. And whether the value after the comparison operation is equal to the field indicating the value of the hash function in the ciphertext stream. If the two values are equal, the information is a candidate result, and the search is performed after the comparison value module 33 performs the operation. The text stream identification value is stored in the Bloom filter; otherwise, it is unrelated information.

In considering the overall system performance, the collection and storage of candidate results can be divided into two types. In the search comparison value module 33, if the search for the data to be returned is a fixed format data, such as a fraudulent telephone number or a phishing website URL, it may be directly represented by an index value, and when the candidate result in this case is collected, The Bloom filter can be used to compress the data with the application of the hash function, in addition to reducing the use of the transmission bandwidth and speeding up the comparison. Another method of data collection and storage is that if the data to be returned has a large variability, such as virus code, intrusion detection system rules, etc., it cannot be processed by simply using the data structure compression technique. The result collection processing module 32 collects all the data to be returned. For example, the personal computing assistant subsystem 2 can assist the information analysis processing subsystem 1 in filtering the search results, that is, in the search result filtering assistant module 22, to quickly filter the ciphertext stream identification values obtained by the recognition unit module 21 and The ciphertext stream identification value Bloom filter from the search result collection processing module 32 performs comparison. If the Bloom filter indicates a pair after the calculation, the preliminary filtering indicates that the search result is met, and the search result set is transferred. The final processing is performed to the information analysis processing subsystem 1; otherwise, the related information is not found.

When the search result is transmitted back to the mobile platform feature analysis module 13, the final search result is judged. If the search result is expressed by the Bloom filter, the mobile platform feature analysis module 13 directly brings the presence verification to the search plaintext. The hash function to confirm the existence of the search results. In addition, if the search result is a general collection of plaintext results, the original application method is used. For example, the return result is a general virus code feature value, or an intrusion detection system rule, and is brought into the original analysis system as a feature value detection; For pure data search, the search algorithm is used to search the plaintext of the returned results.

The distributed environment data inquiry system based on user privacy provided by the invention has the following advantages when compared with other conventional systems:

1. The main feature of the inquiry system provided by the present invention is that the user can change the usage mode, and can complete the latest information search task without providing the information provider with clear content, so as to ensure that the user side does not disclose the information to the outside world. .

2. In the inquiry mechanism, the data analysis filtering subsystem can expand the application of horizontal resources through parallel operations, and accelerate the provision of search results, so as to facilitate the application of quick response results.

3. The invention can use the personal operation auxiliary subsystem according to the degree of trust, and assists the data operation filtering operation through some known information, and has positive performance and help for the action platform with the computing resources and the endurance priority.

4. The present invention can be used to quickly confirm the existence of the result and compress the amount of returned data to improve the transmission rate for the return data with simple format or the record of the existence of the data. advantage.

The detailed description of the preferred embodiments of the present invention is intended to be limited to the scope of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

To sum up, this case is not only innovative in terms of technical thinking, but also able to enhance the above-mentioned multiple functions compared with conventional articles. It should fully comply with the statutory invention patent requirements of novelty and progressiveness, and apply in accordance with the law. I urge you to approve this article. Invention patent application, in order to invent invention, to the sense of virtue.

1. . . Data analysis processing subsystem

11. . . Ask the content capture module

12. . . Ask the content encryption module

13. . . Mobile platform feature analysis module

2. . . Personal arithmetic auxiliary subsystem

twenty one. . . Fast filter identification unit module

twenty two. . . Search result filtering auxiliary module

3. . . Data filtering analysis subsystem

31. . . Search comparison module

32. . . Search result collection processing module

33. . . Search comparison value module

Please refer to the detailed description of the present invention and the accompanying drawings, and the technical contents of the present invention and its effects can be further understood; the related drawings are:

The technical content and the purpose of the present invention will be further understood by referring to the detailed description and drawings related to the present invention;

Figure 1 is a system architecture diagram of the present invention;

Figure 2 is a flow chart of the application service of the present invention;

FIG. 3 is a schematic diagram of a mutual exclusion operation between a ciphertext stream and an inquiry content according to the present invention.

1. . . Data analysis processing subsystem

11. . . Ask the content capture module

12. . . Ask the content encryption module

13. . . Mobile platform feature analysis module

2. . . Personal arithmetic auxiliary subsystem

twenty one. . . Fast filter identification unit module

twenty two. . . Search result filtering auxiliary module

3. . . Data filtering analysis subsystem

31. . . Search comparison module

32. . . Search result collection processing module

33. . . Search comparison value module

Claims (12)

A decentralized environment data query system based on user privacy, which uses the TLS (Transport Layer Security) mutual communication information, including: a data analysis processing subsystem, which mainly extracts the information to be inquired, and The relevant content is hidden by encryption method and provided to the data filtering analysis subsystem in cipher text; a data filtering analysis subsystem is mainly used for pre-index processing of data for subsequent comparison analysis; The ciphertext and the data are compared, and the result of the former calculation is confirmed by the validity of the candidate result, and the result required by the user is determined and collected; a human arithmetic auxiliary subsystem receives the part provided by the data analysis processing subsystem. Interrogation information, and the search results provided by the data filtering analysis subsystem can be initially filtered. After further determining the search results for the user device, the data analysis processing subsystem is finally confirmed. The distributed environment data inquiry system based on user privacy, as described in claim 1, wherein the data analysis processing subsystem includes: a query content capture module, and the device obtains the content to be inquired, and asks for content. The method can be self-input, use specific information type State or dictionary file, etc.; querying the content encryption module, processing the query content into a ciphertext form in which the data filtering analysis subsystem can confirm validity, including generating a ciphertext stream with identification and Mutual exclusion operation with the query content generates ciphertext, and is analyzed by the subsequent analysis system; a mobile platform feature analysis module receives the inquiry result sent by the query content capture module. The decentralized environmental data query system based on user privacy according to claim 1, wherein the personal computing auxiliary subsystem comprises: a fast filtering identification unit module, and the receiving data analysis processing subsystem provides support for searching result filtering. The identification value in the ciphertext stream; a search result filtering auxiliary module, which assists in filtering the search results obtained by the data filtering analysis subsystem to reduce the computing needs of the data analysis processing subsystem. The distributed environment data query system based on user privacy, as described in claim 1, wherein the data filtering analysis subsystem comprises: a search matching module, and the obtained query ciphertext and search comparison value module All the data indexes provided are mutually exclusive, and the obtained ciphertext stream is further validated to determine whether it is a candidate result; a search result collection processing module collects information that the search comparison module confirms as a candidate search result, The identification value corresponding to the candidate result; a search comparison value module performs a pre-data index processing operation, so that the index representing the data can be mutually mutually exclusive and validated with the challenge ciphertext. The decentralized environmental data inquiry system based on user privacy according to item 2 of the application scope, wherein the result of the inquiry received by the action platform feature analysis module is no data, indicating that the content is not met; if there is a return data, This module will further confirm the content with the plaintext of the inquiry. If the distributed environment data query system based on user privacy mentioned in item 5 of the application scope considers the transmission and the efficiency of the judgment, and the result of the return is expressed in the Bloom filter structure, the hash of the existence verification can be used. The function completes the confirmation. The distributed environment data query system based on user privacy, as described in claim 3, wherein the search result filtering auxiliary module can assist in filtering the search results obtained by the data filtering analysis subsystem to reduce the data analysis processing subsystem. The operation needs. The distributed environment data query system based on user privacy, as described in claim 7, wherein the search result filtering auxiliary module utilizes the ciphertext stream identification value of the fast filter identification unit module and the Blom filter of the search result identification value. The operation is performed to initially confirm the existence of the search result, and then the operation result is transmitted to the data analysis processing subsystem. For example, in the decentralized environmental data inquiry system based on user privacy described in item 4 of the application scope, in the validity verification of the search comparison module, the information of the ciphertext stream indicating the random number is brought into the hash function used. And whether the value after the comparison operation is equal to the field indicating the value of the hash function in the ciphertext stream. If they are equal, the content is a candidate result, and subsequent collection processing is performed. The decentralized environmental data query system based on user privacy according to item 4 of the application scope, wherein the set of identification values collected by the search result collection processing module is stored by using a Bloom filter data structure. The distributed environment data query system based on user privacy, as described in claim 4, wherein when the search result collection processing module confirms that the search comparison module completes the search comparison, the collected search result is transmitted to the personal operation assistant. Subsystem. The decentralized environmental data query system based on user privacy according to item 4 of the application scope, wherein the search comparison value module provides the original data and the identification value in the ciphertext stream if the comparison data is a candidate result. Take the consolidation.