WO2016037330A1 - Information processing method and device - Google Patents

Abstract

Disclosed are an information processing method and device, which relate to the field of communications, and can solve the problem that privacy information about a user may be revealed due to the fact that an administrator of a virtual infrastructure in a virtual network has access to the privacy information about the user. The specific technical solution comprises: acquiring information to be stored; acquiring, by a security module, first anonymous information corresponding to first privacy information; replacing, in the information to be stored, by means of the security module, the first privacy information with the first anonymous information, so as to obtain anonymous information to be stored; and storing the anonymous information to be stored. The present invention is used for information processing.

Description

Information processing method and device Technical field

The present invention relates to the field of communications, and in particular, to an information processing method and device.

Background technique

NFV (Network Function Virtualization) implements some network functions by establishing VNF (Virtualised Network Function) on hardware devices such as general-purpose servers, switches, and storage devices, so that these network functions are on general-purpose hardware devices. Operation, no need to configure a new dedicated network element device, can greatly enhance the flexibility of network deployment and reduce investment costs.

NFVI (Network Function Virtualization Infrastructure) consists of hardware resources, virtual layers and virtual resources. NFVI provides an execution environment for the virtual network function VNF. NFVI includes Virtual Machine Monitor (VMM). It can also be called a hypervisor, responsible for the management of physical resources (computing, storage, and network) under it, as well as the creation and management of virtual environments. VMs (virtual machines) are provided to run the guest operating system.

In a virtualized environment, information about VNFs and third-party applications needs to be stored in NFVI's memory (such as memory). Since the information stored in the NFVI may be frequently queried, if the information is encrypted as a whole, the efficiency of information saving and querying is reduced; if the information is not encrypted, the administrator of the virtual infrastructure has the right to view these. Information, including user privacy information stored by the VNF, such as IMSI (International Mobile Subscriber Identification Number), IMEI (International Mobile Equipment Identity), MSISDN (Mobile Subscriber International ISDN/PSTN Number, Mobile user international number), MAC (Media Access Control) address, IP (Internet Protocol) address, etc., as well as private information related to third-party applications, such as the user's bank account information, etc. Privacy information has hidden dangers.

Summary of the invention

Embodiments of the present invention provide an information processing method and device, which can solve a virtual network In the network, the administrator of the virtual infrastructure has the right to view the virtual network function running on it or the user privacy information saved by the third-party application, so that the user's private information may be leaked.

In order to achieve the above object, embodiments of the present invention adopt the following technical solutions:

In a first aspect, an embodiment of the present invention provides an information processing method, which is applied to a virtualized cloud infrastructure in a virtual network, where the virtualized cloud infrastructure includes a virtual machine monitor and a security module, where the virtual machine monitors The device cannot obtain information in the security module, and the method includes:

Obtaining information to be stored, where the information to be stored includes first privacy information;

Acquiring the first anonymous information corresponding to the first private information by using the security module;

And replacing, by the security module, the first private information in the to-be-stored information with the first anonymous information to obtain anonymous to-be-stored information;

The anonymous to-be-stored information is stored.

With reference to the first aspect, in a first possible implementation, the obtaining, by the security module, the first anonymous information corresponding to the first private information includes:

If the mapping list that has been stored by the security module includes the first private information, the mapping list includes a correspondence between the first private information and the first anonymous information, and according to the mapping list, The security module acquires first anonymous information corresponding to the first privacy information;

If the first private information is not included in the mapping list, the security information is used by the security module to obtain the first anonymous information corresponding to the first private information by using a first algorithm. And storing, in the mapping list, a correspondence between the first private information and the first anonymous information.

In conjunction with the first possible implementation of the first aspect, in a second possible implementation, the method further includes:

Obtaining a lookup request, where the lookup request includes second privacy information;

If the second private information is included in the mapping list, the second anonymous information corresponding to the second private information is obtained by the security module according to the mapping list;

Replacing the second private information in the lookup request by the security module Obtaining an anonymous lookup request for the second anonymous information;

Finding the second information according to the anonymous lookup request.

In conjunction with the first possible implementation of the first aspect, in a third possible implementation, the method further includes:

Get a lookup request;

Finding second information according to the lookup request, the second information including second anonymous information;

If the second anonymous information is included in the mapping list, the second private information corresponding to the second anonymous information is obtained by the security module according to the mapping list;

And replacing, by the security module, the second anonymous information with the second private information in the second information to obtain second read information.

With reference to the first aspect, in a fourth possible implementation manner, the acquiring the first anonymous information corresponding to the first private information includes:

If the first private information is included in the mapping list that has been stored by the security module, the mapping list includes a correspondence between the first private information and the first encryption key, and according to the mapping list, Obtaining, by the security module, the first encryption key corresponding to the first privacy information;

Encrypting the first private information by the security module to generate the first anonymous information corresponding to the first private information according to the first encryption key;

If the first private information is not included in the mapping list, the first private information is encrypted according to a third encryption key to generate the first anonymous information, and the first privacy is stored in the mapping list. Correspondence between the information and the third encryption key.

In conjunction with the fourth possible implementation of the first aspect, in a fifth possible implementation, the method further includes:

Obtaining a lookup request, where the lookup request includes second privacy information;

And obtaining, by the security module, a second encryption key corresponding to the second private information, according to the mapping list, if the second private information is included in the mapping list;

Encrypting the second private information by the security module to generate the second anonymous information corresponding to the second private information according to the second encryption key;

Replacing the second private information with the second anonymous information in the lookup request to obtain an anonymous lookup request;

Finding the second information according to the anonymous lookup request.

In conjunction with the fourth possible implementation of the first aspect, in a sixth possible implementation, the method further includes:

Get a lookup request;

Finding second information according to the lookup request, the second information including second anonymous information;

If the second anonymous information is included in the mapping list, the second encryption key corresponding to the second anonymous information is obtained by the security module according to the mapping list;

Decrypting the second anonymous information by the security module according to the second encryption key to obtain the second private information;

The second anonymous information is replaced with the second private information in the second information to obtain second read information.

With reference to the first possible implementation of the first aspect, to any implementation of the sixth possible implementation of the first aspect, in a seventh possible implementation, the obtaining, by the security module, Before the first anonymous information corresponding to the first privacy information, the method further includes:

Determining, by the security module, whether the first private information is included in the mapping list.

With reference to any implementation of the first aspect to the seventh possible implementation manner of the first aspect, in an eighth possible implementation manner,

The first private information includes an International Mobile Subscriber Identity (IMSI) of the user, a mobile device international identification code IMEI of the user, a mobile subscriber international number MSISDN of the user, a media access control MAC address of the user, and a location Describe one or more of the user's Internet Protocol IP addresses.

With reference to any implementation of the first aspect to the eighth possible implementation of the first aspect, in a ninth possible implementation manner,

The security module is a hardware security module HSM or a trusted platform module TPM.

In a second aspect, the embodiment of the present invention provides a virtualized cloud infrastructure, including a virtual machine monitor, a security module, an obtaining module, and a storage module, where the virtual machine monitor cannot obtain information in the security module;

The acquiring module is configured to acquire information to be stored, where the information to be stored includes first privacy information;

The security module is configured to obtain the first anonymous information corresponding to the first private information acquired by the acquiring module, and replace the first private information in the to-be-stored information with the first anonymous information to be anonymously Store information;

The storage module is configured to store the anonymous to-be-stored information obtained by the security module.

In combination with the second aspect, in a first possible implementation manner,

The security module is specifically configured to: when the mapping list that has been stored by the security module includes the first private information, where the mapping list includes a correspondence between the first private information and the first anonymous information, Acquiring the first anonymous information corresponding to the first private information according to the mapping list;

The security module is further configured to: when the first private information is not included in the mapping list, perform the operation on the first private information by using a first algorithm to obtain the first corresponding to the first private information. An anonymous information and a correspondence between the first private information and the first anonymous information is stored in the mapping list.

In conjunction with the first possible implementation of the second aspect, in a second possible implementation,

The obtaining module is further configured to acquire a lookup request, where the lookup request includes second privacy information;

The security module is further configured to: when the mapping list includes the second private information included in the search request acquired by the acquiring module, acquire, according to the mapping list, the second private information Second anonymous information; replacing the second private information with the second anonymous information in the lookup request to obtain an anonymous lookup request;

The virtualized cloud infrastructure further includes a lookup module configured to find the second information according to the anonymous lookup request obtained by the security module.

In conjunction with the first possible implementation of the second aspect, in a third possible implementation,

The obtaining module is further configured to: acquire a lookup request;

The virtualized cloud infrastructure further includes a search module, configured to search for second information according to the lookup request obtained by the obtaining module, where the second information includes second anonymous information;

The security module is further configured to: when the mapping list includes the second anonymous information included in the second information that is found by the searching module, acquire the second anonymous information according to the mapping list. Corresponding second private information; replacing the second anonymous information with the second private information in the second information to obtain second read information.

In conjunction with the first possible implementation of the second aspect, in a fourth possible implementation,

The security module is specifically configured to: when the mapping list that has been stored by the security module includes the first privacy information, where the mapping list includes a correspondence between the first privacy information and a first encryption key, according to the Obtaining, by the mapping list, the first encryption key corresponding to the first private information, and encrypting the first private information according to the first encryption key to generate the first corresponding to the first private information An anonymous message;

The security module is further configured to: when the first private information is not included in the mapping list, encrypt the first private information according to a third encryption key to generate the first anonymous information, and in the A mapping relationship between the first private information and the third encryption key is stored in the mapping list.

In conjunction with the fourth possible implementation of the second aspect, in a fifth possible implementation manner,

The obtaining module is further configured to acquire a lookup request, where the lookup request includes second privacy information;

The security module is further configured to: when the mapping list includes the second private information included in the search request acquired by the acquiring module, acquire, according to the mapping list, the second private information a second encryption key; encrypting the second private information according to the second encryption key to generate the second corresponding to the second private information Anonymous information; replacing the second private information with the second anonymous information in the lookup request to obtain an anonymous lookup request;

The virtualized cloud infrastructure further includes a lookup module configured to find the second information according to the anonymous lookup request obtained by the security module.

In conjunction with the fourth possible implementation of the second aspect, in a sixth possible implementation manner,

The obtaining module is further configured to acquire a lookup request;

The virtualized cloud infrastructure further includes a search module, configured to search for second information according to the lookup request obtained by the obtaining module, where the second information includes second anonymous information;

The security module is further configured to: when the mapping list includes the second anonymous information included in the second information that is searched by the searching module, acquire the second anonymous information according to the mapping list. Corresponding second encryption key; decrypting the second anonymous information according to the second encryption key to obtain the second private information; and replacing the second anonymous information with the second information The second private information is obtained by the second private information.

With reference to the first possible implementation of the second aspect to the sixth possible implementation of the second aspect, in a seventh possible implementation,

The security module is further configured to determine whether the first privacy information is included in the mapping list.

With reference to the second aspect to the seventh possible implementation of the second aspect, in an eighth possible implementation manner,

The first private information includes an International Mobile Subscriber Identity (IMSI) of the user, a mobile device international identification code IMEI of the user, a mobile subscriber international number MSISDN of the user, a media access control MAC address of the user, and a location Describe one or more of the user's Internet Protocol IP addresses.

With reference to the second aspect to the eighth possible implementation manner of the second aspect, in a ninth possible implementation manner,

The security module is a hardware security module HSM or a trusted platform module TPM.

In a third aspect, an embodiment of the present invention provides a virtualized cloud infrastructure, including a processor, a memory, and a bus, where the processor and the memory are connected to each other through the bus, in the processor, the memory, and Above the hardware resources included in the bus, the virtualized cloud infrastructure includes a virtual machine monitor and a security module, and the virtual machine monitor cannot obtain information in the security module;

The processor is configured to acquire information to be stored, where the information to be stored includes first privacy information;

The processor is further configured to acquire the first anonymous information corresponding to the first private information by using the security module, and replace, by the security module, the first private information in the to-be-stored information with the first The anonymous information is obtained by anonymizing the information to be stored, and the anonymous information to be stored is stored.

In combination with the third aspect, in a first possible implementation manner,

The processor is specifically configured to: when the mapping list that has been stored by the security module includes the first private information, where the mapping list includes a correspondence between the first private information and the first anonymous information, Acquiring the first anonymous information corresponding to the first private information according to the mapping list;

The processor is further configured to: when the first private information is not included in the mapping list, perform the operation on the first private information by using a first algorithm to obtain the first corresponding to the first private information. An anonymous information and a correspondence between the first private information and the first anonymous information is stored in the mapping list.

In conjunction with the first possible implementation of the third aspect, in a second possible implementation manner,

The processor is further configured to acquire a lookup request, where the lookup request includes second privacy information;

The processor is further configured to: when the mapping list includes the second private information included in the search request, acquire second anonymous information corresponding to the second private information according to the mapping list; The second privacy information is replaced by the second anonymous information in the lookup request to obtain an anonymous search request, and the second information is found according to the anonymous search request.

In conjunction with the first possible implementation of the third aspect, in a third possible implementation,

The processor is further configured to obtain a lookup request, and find second information according to the lookup request, where the second information includes second anonymous information;

The processor is further configured to: when the mapping list includes the second anonymous information included in the second information, acquire second privacy information corresponding to the second anonymous information according to the mapping list; The second anonymous information is replaced with the second private information in the second information to obtain second read information.

In conjunction with the first possible implementation of the third aspect, in a fourth possible implementation,

The processor is specifically configured to: when the mapping list that has been stored by the security module includes the first private information, where the mapping list includes a correspondence between the first private information and a first encryption key, according to Obtaining, by the mapping list, the first encryption key corresponding to the first private information, and encrypting the first private information according to the first encryption key to generate the first corresponding to the first private information An anonymous message;

The processor is further configured to: when the first private information is not included in the mapping list, encrypt the first private information according to a third encryption key to generate the first anonymous information, and in the A mapping relationship between the first private information and the third encryption key is stored in the mapping list.

In conjunction with the fourth possible implementation of the third aspect, in a fifth possible implementation manner,

The processor is further configured to acquire a lookup request, where the lookup request includes second privacy information;

The processor is further configured to: when the mapping list includes the second private information included in the search request, acquire a second encryption key corresponding to the second private information according to the mapping list; Encrypting the second private information according to the second encryption key to generate the second anonymous information corresponding to the second private information; replacing the second private information with the searching request The second anonymous information is obtained by an anonymous lookup request, and the second information is found according to the anonymous lookup request.

In conjunction with the fourth possible implementation of the third aspect, in a sixth possible implementation manner,

The processor is further configured to obtain a lookup request, and find second information according to the lookup request, where the second information includes second anonymous information;

The processor is further configured to: when the mapping list includes the second anonymous information included in the second information, acquire a second encryption key corresponding to the second anonymous information according to the mapping list Decrypting the second anonymous information according to the second encryption key to obtain the second private information; and replacing the second anonymous information with the second private information in the second information Second, read the information.

With reference to the first possible implementation of the third aspect to the sixth possible implementation of the third aspect, in a seventh possible implementation,

The processor is further configured to determine, by the security module, whether the first private information is included in the mapping list.

With reference to the seventh possible implementation manner of the third aspect to the third aspect, in an eighth possible implementation manner,

The first private information includes an International Mobile Subscriber Identity (IMSI) of the user, a mobile device international identification code IMEI of the user, a mobile subscriber international number MSISDN of the user, a media access control MAC address of the user, and a location Describe one or more of the user's Internet Protocol IP addresses.

With reference to the eighth aspect to the eighth possible implementation manner of the third aspect, in a ninth possible implementation manner,

The security module is a hardware security module HSM or a trusted platform module TPM.

The information processing method and device provided by the embodiment of the present invention obtain the anonymous to-be-stored information and store the anonymous to-be-stored information by replacing the first private information in the information to be stored with the first anonymous information. Because the mapping list of the first private information and the first anonymous information or the first encryption key or the third encryption key is stored in the security device, so that the virtual machine monitor cannot obtain the first privacy information and the first anonymous information. The corresponding relationship solves the problem that the administrator of the virtual infrastructure has the right to view the user's private information in the virtual network, so that the user's private information may be leaked, and the user's privacy information is ensured. Fullness.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only the present invention. For some embodiments, other drawings may be obtained from those of ordinary skill in the art without departing from the drawings.

FIG. 1 is a schematic structural diagram of a virtual network according to an embodiment of the present invention;

2 is a schematic flowchart of an information processing method according to an embodiment of the present invention;

3 is a schematic flowchart of an information processing method according to another embodiment of the present invention;

4 is a schematic flowchart of an information reading method according to another embodiment of the present invention;

FIG. 5 is a schematic flowchart of another information processing method according to another embodiment of the present invention; FIG.

FIG. 6 is a schematic flowchart diagram of another information reading method according to another embodiment of the present invention; FIG.

FIG. 7 is a schematic structural diagram of a virtualized cloud infrastructure according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a virtualized cloud infrastructure according to another embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

An embodiment of the present invention provides a virtual network. As shown in FIG. 1, the virtual network 10 includes a NFVO (Network Functions Virtualization Orchestrator). Function Virtualization Orchestrator) 101, VNFM (Virtualized Network Function Manager) 102, VIM (Virtualised Infrastructure Manager) 103, OSS/BSS (Operations and Business Support Systems, Operations and Services) Support system 104, EMS (Element Management System) 105, VNF 106, NFVI (Network Function Virtualization Infrastructure) 107.

The NFVI 107 includes at least one VM, a virtual machine monitor, and hardware resources.

Based on the virtual network described in the foregoing embodiment corresponding to FIG. 1, the embodiment of the present invention provides an information processing method, which is applied to a virtualized cloud infrastructure in a virtual network, where the virtualized cloud infrastructure includes a virtual machine monitor and security. The module and the virtual machine monitor cannot obtain the information in the security module. Optionally, the virtualized cloud infrastructure may be a network function virtualization infrastructure NFVI in the virtual network. As shown in FIG. 2, the embodiment provides Information processing methods include:

201. Acquire information to be stored.

The information to be stored includes the first private information. Optionally, the first private information includes the identification information of the user in the mobile communication, such as an IMSI (International Mobile Subscriber Identification Number), and an IMEI of the user. Mobile Equipment Identity, mobile device international identification code, user's MSISDN (Mobile Subscriber International ISDN/PSTN Number), user's MAC (Media Access Control) address, user's IP (Internet Protocol, One or more of the Internet Protocol addresses, or the first private information may also include user contact information (such as name, address, email, phone number), or user identity information (such as user identification, ID number, passport number) , social security number, etc., or location information (such as user GPS (Global Positioning System) coordinates, cell identification, WLAN (Wireless Local Area Networks) address, AP (Wireless Access Point, wireless network connection) Point), or the user financial information (e.g., user credit card numbers, bank account number, etc.). For specific definition of the first private information, the present embodiment is not limited to the embodiments, the user may not leaked sensitive information.

202. Acquire first anonymous information corresponding to the first private information by using the security module.

Preferably, taking the NFVI as an example, obtaining the first anonymous information corresponding to the first private information may be performed by a security module in the NFVI, and the security module may be an HSM (Hardware Security Module) or a TPM (Trusted Platform Module). A protected module, such as a trusted platform module, the data processed by the security module, for example, the correspondence between the first private information and the first anonymous information is not obtained by the virtual machine monitor, thereby ensuring the security of the user's private information. .

Optionally, obtaining the corresponding first anonymous information according to the first private information has two specific implementation manners:

In the first implementation, if the first private information has been saved before, the first anonymous information corresponding to the first private information is obtained according to the mapping list; if the first private information is not saved before, the security module The first anonymous information corresponding to the first private information is obtained by the first algorithm, and the corresponding relationship between the first private information and the first anonymous information is stored in the mapping list by the security module. The method for determining whether the first private information is saved is: searching for the first private information in the already stored mapping list by using the security module; and if the first private information is found in the mapping list, before the first private information The mapping list includes the correspondence between the first private information and the first anonymous information; if the first private information is not found in the mapping list, the first private information is not previously saved.

In the second implementation manner, if the first private information has been saved before, the first encryption key corresponding to the first private information is obtained by the security module according to the mapping list, and the security module is used according to the first encryption key. The first private information is encrypted to generate first anonymous information corresponding to the first private information; if the first private information is not previously saved, the first anonymous information is encrypted by the security module according to the third encryption key to generate the first anonymous information. And storing, by the security module, a correspondence between the first private information and the third encryption key in the mapping list. The method for determining whether the first private information is saved is: searching for the first private information in the already stored mapping list by using the security module; and if the first private information is found in the mapping list, before the first private information Has been saved, the mapping list includes the correspondence between the first privacy information and the first encryption key; if in the mapping list If the first private information is not found, the first private information has not been saved before.

Of course, only two specific implementations are listed herein, and the present invention is not limited thereto.

203. Obtain an anonymous to-be-stored information by replacing the first private information with the first anonymous information in the to-be-stored information by the security module.

204. Store anonymous information to be stored.

The information processing method provided in this embodiment obtains the anonymous to-be-stored information and stores the anonymous to-be-stored information by replacing the first private information in the to-be-stored information with the first anonymous information. Because the mapping list of the first private information and the first anonymous information or the first encryption key or the third encryption key is stored in the security device, so that the virtual machine monitor cannot obtain the first privacy information and the first anonymous information. The corresponding relationship solves the problem that the administrator of the virtual infrastructure has the right to view the user's private information in the virtual network, so that the user's private information may be leaked, and the security of the user's private information is ensured.

Based on the embodiment corresponding to FIG. 2 above, another embodiment of the present invention provides an information processing method. Referring to FIG. 3, the method includes the following steps:

301. Acquire information to be stored.

302. Determine whether the first private information is included in the to-be-stored information.

Specifically, if the information to be stored includes the first private information, step 303 is performed, and if the first private information is not included in the information to be stored, step 308 is performed.

303. Extract the first private information in the to-be-stored information.

304. Determine whether the first privacy information is included in the mapping list.

If not, step 305 is performed; if yes, step 306 is performed.

305. If the first private information is not included in the mapping list, the first private information is obtained by the first algorithm to obtain the first anonymous information corresponding to the first private information.

In this embodiment, in conjunction with the description of the first implementation in step 202 in the embodiment corresponding to FIG. 2, the mapping list includes the correspondence between the private information and the anonymous information. Preferably, the privacy information may be passed through, for example, a hash operation. The first algorithm, such as encryption operation, calculates anonymous information. Further preferably, when the anonymous information is calculated by the first algorithm, the following parameters may also be introduced: a random variable, a VNF identifier, a time variable, and the like. This way in the operation The variables are included, so that the anonymous information calculated every time the same private information is changed, further ensuring that the user's private information is not leaked.

Preferably, the correspondence between the first private information and the first anonymous information may be stored in the mapping list.

After step 304, the method further includes:

306. If the mapping list includes the first private information, obtain the first anonymous information corresponding to the first private information according to the mapping list.

If the first private information is found in the mapping list, the mapping list includes a correspondence between the first private information and the first anonymous information.

After step 305 and step 306, the method further includes:

307. Replace the first private information in the to-be-stored information with the first anonymous information, and obtain the anonymous to-be-stored information.

Optionally, after the first private information is replaced with the first anonymous information, the anonymous identifier may be added to the specific field of the information to be stored to obtain the anonymous information to be stored. If the information includes the anonymous identifier, the anonymous information is included in the information.

Preferably, in conjunction with the embodiment corresponding to FIG. 2 above, steps 303-307 may be performed by a security module in the NFVI, or at least step 305 or 306 may be performed by a security module in the NFVI.

308. Store anonymous information to be stored or information to be stored.

Based on the embodiment corresponding to FIG. 3 above, another embodiment of the present invention provides an information reading method. After storing the information to be stored through steps 301-308, the information reading method provided by the embodiment corresponding to FIG. 4 can be read. The stored information, specifically, as shown in FIG. 4, includes the following steps:

401. Obtain a lookup request.

Optionally, after obtaining the lookup request, the second information is found according to the lookup request, and step 406 is directly executed after the second information is obtained.

Alternatively, the method may be used to determine whether the second private information is included in the search request. If not, the second information is found according to the search request. After the second information is obtained, step 406 may be directly executed. Contains second privacy information as an example The line description, when the lookup request includes the second private information, after step 401, the method further includes:

402. Search for the second private information in the mapping list.

Optionally, if the second mapping information is included in the confirmation mapping list, step 403 may be directly performed after step 401.

403. Acquire second anonymous information corresponding to the second private information according to the mapping list.

404. Replace the second private information with the second anonymous information in the lookup request to obtain an anonymous search request.

405. Find the second information according to the anonymous lookup request.

Optionally, after step 405, the method may further include:

406. Determine whether the second information includes anonymous information.

If the second information includes the second anonymous information, step 407 is performed. If the second information does not include the anonymous information, optionally, the second information is used as the second read information and step 409 is performed.

Preferably, in combination with the description of step 307 in the embodiment corresponding to FIG. 3 above, whether the second information includes the second anonymous information may be determined by determining whether the specific field of the second information includes an anonymous identifier. Optionally, the second anonymous information may be a string of characters. For example, the specific field includes the character “1” for the second information to include the second anonymous information, and the specific field includes the character “0” for the second information does not include the second anonymous information. Of course, this is only an example. For the specific form of the second anonymous identifier, the embodiment does not limit the embodiment.

407. If the second information includes the second anonymous information, obtain the second private information corresponding to the second anonymous information according to the mapping list.

Preferably, if the correspondence between the second private information and the second anonymous information is cached in step 403, step 408 may be directly performed.

408. Replace the second anonymous information with the second private information in the second information to obtain the second read information.

Optionally, in combination with step 406, the second information may include other anonymous information. If the second information includes other anonymous information, the other anonymous information is replaced with other anonymous information according to the mapping list. .

Optionally, after step 408, the method may further include:

409. Send a second read information.

Optionally, in conjunction with the embodiment corresponding to FIG. 2, steps 402-404 and steps 407-408 may be performed by a security module in the NFVI.

The information processing method provided in this embodiment obtains the anonymous to-be-stored information by replacing the first private information in the information to be stored with the first anonymous information, and stores the information. Because the virtual machine monitor cannot obtain the correspondence between the first private information and the first anonymous information, the administrator of the infrastructure has the authority to view the information of the user, so that the user's private information may be The leaked issue ensures the user's information security.

Based on the embodiment corresponding to FIG. 2 above, another embodiment of the present invention provides another information processing method. Referring to FIG. 5, the following steps are included:

501. Obtain information to be stored.

502. Determine whether the first private information is included in the to-be-stored information.

Specifically, if the information to be stored includes the first private information, step 503 is performed, and if the first private information is not included in the information to be stored, step 509 is performed.

503. Extract the first private information in the to-be-stored information.

504. Determine whether the first privacy information is included in the mapping list.

In this embodiment, in conjunction with the description of the second implementation manner in step 202 in the embodiment corresponding to FIG. 2, the mapping list includes the correspondence between the privacy information and the encryption key. Preferably, the privacy information is performed by using an encryption key. When encrypting anonymous information, the following parameters can be introduced: random variables, VNF identifiers, time variables, and so on. In this way, variables are included in the operation process, so that the anonymous information obtained by encrypting the same private information is changed, further ensuring that the user's private information is not leaked.

505. If the first private information is not included in the mapping list, encrypt the first private information according to the third encryption key to generate the first anonymous information.

Optionally, the third encryption key may be a previously generated key, or may be a third encryption key before the first anonymous information is encrypted according to the third encryption key to generate the first anonymous information.

Optionally, the correspondence between the first private information and the third encryption key may be stored in In the mapping list.

After step 504, the method further includes:

506. If the mapping list includes the first privacy information, obtain the first encryption key corresponding to the first privacy information according to the mapping list.

If the first privacy information is found in the mapping list, the mapping list includes a correspondence between the first privacy information and the first encryption key.

507. Encrypt the first private information according to the first encryption key to generate first anonymous information corresponding to the first private information.

After step 505 and step 507, the method further includes:

508. Replace the first private information with the first anonymous information in the information to be stored to obtain anonymous information to be stored.

Optionally, after the first private information is replaced with the first anonymous information, the anonymous identifier may be added in a specific field of the anonymous information to be stored, and if the information includes the anonymous identifier, the anonymous information is included in a specific location in the information.

Preferably, in conjunction with the embodiment corresponding to FIG. 2 above, steps 503-508 may be performed by a security module in the NFVI.

509. Store anonymous information to be stored or information to be stored.

Based on the embodiment corresponding to FIG. 5 above, another embodiment of the present invention provides another information reading method. After the information to be stored is stored in steps 501-509, the information reading method provided by the embodiment corresponding to FIG. 6 is provided. The stored information is read. Specifically, as shown in FIG. 6, the following steps are included:

601. Obtain a lookup request.

Optionally, after obtaining the lookup request, the second information is found according to the lookup request, and step 606 is directly executed after the second information is obtained.

Alternatively, optionally, the second privacy information may be included in the search request. If not, the second information is found according to the search request. After the second information is obtained, step 606 may be directly performed. In this embodiment, the second private information is included in the search request as an example. When the second private information is included in the search request, after the step 601, the method further includes:

602. Search for the second private information in the mapping list.

If the second private information is found in the mapping list, step 603 is performed. If the second private information is not found in the mapping list, the search request is performed as an anonymous search request in step 606.

Optionally, if the second mapping information is included in the confirmation mapping list, step 603 may be directly performed after step 601.

603. Acquire a second encryption key corresponding to the second privacy information according to the mapping list.

604. Encrypt the second private information according to the second encryption key to generate second anonymous information corresponding to the second private information.

605. Replace the second private information with the second anonymous information in the lookup request to obtain an anonymous search request.

606. Find the second information according to the anonymous lookup request.

Optionally, after step 606, the method may further include:

607. Determine whether the second information includes anonymous information.

If the second information includes the second anonymous information, step 608 is performed. If the second information does not include the second anonymous information, optionally, the second information may be used as the second read information and step 610 is performed.

Preferably, in combination with the description of step 508 in the embodiment corresponding to FIG. 5 above, whether the second information includes the second anonymous information may be determined by determining whether the specific field of the second information includes an anonymous identifier. Optionally, the second anonymous information may be a string of characters. For example, the specific field includes the character “1” for the second information to include the second anonymous information, and the specific field includes the character “0” for the second information does not include the second anonymous information. Of course, this is only an example. For the specific form of the second anonymous identifier, the embodiment does not limit the embodiment.

608. If the second information includes the second anonymous information, decrypt the second anonymous information according to the second encryption key to obtain the second private information.

Optionally, if the correspondence between the second private information and the second anonymous information is cached in step 604, step 609 may be directly performed.

609. Replace the second anonymous information with the second private information in the second information to obtain the second read information.

Optionally, in combination with step 607, the second information may include other anonymous information, such as If the second information includes other anonymous information, the other anonymous information is decrypted according to the encryption key corresponding to other anonymous information in the mapping list to obtain corresponding private information, and the other anonymous information is replaced with other anonymous information in the second information. Privacy information.

Optionally, after step 609, the method may further include:

610. Send a second read information.

Preferably, in conjunction with the embodiment corresponding to FIG. 2, steps 602-605 and steps 608-609 may be performed by a security module in the NFVI.

In the method provided in the embodiment of FIG. 2-6, the information to be stored or the information to be read may include multiple user privacy information. In this case, multiple times according to the method provided in the embodiment corresponding to FIG. 2-6, can. For example, for the embodiment corresponding to FIG. 3, steps 304-307 are repeatedly performed; for the embodiment corresponding to FIG. 4, steps 407-409 are repeatedly performed.

The information processing method provided in this embodiment obtains the anonymous to-be-stored information and stores it by replacing the first private information in the information to be stored with the first anonymous information. Because the virtual machine monitor cannot obtain the correspondence between the first private information and the first anonymous information, in the virtual network, the administrator of the virtual infrastructure has the right to view the user's private information, so that the user's private information may be The leaked issue ensures the security of the user's private information.

The embodiment of the present invention provides a virtualized cloud infrastructure. As shown in FIG. 7, the virtualized cloud infrastructure 70 includes a security module 701, an obtaining module 702, a storage module 703, and a virtual machine monitor 704. The virtual machine monitor 704 The information in the security module 701 could not be obtained.

The obtaining module 702 is configured to obtain information to be stored, where the information to be stored includes the first private information.

The security module 701 is configured to obtain the first anonymous information corresponding to the first private information acquired by the obtaining module 702, and replace the first private information in the information to be stored with the first anonymous information to obtain anonymous pending information.

The storage module 703 is configured to store the anonymous to-be-stored information obtained by the security module 701.

Optionally, the virtualized cloud infrastructure 70 also includes a lookup module 705.

Optionally, in the first application scenario, the security module 701 is specifically configured to be secure. The mapping list that has been stored by the module 701 includes the first private information. When the mapping list includes the correspondence between the first private information and the first anonymous information, the first anonymous information corresponding to the first private information is obtained according to the mapping list.

The security module 701 is further configured to: when the first privacy information is not included in the mapping list, obtain the first anonymous information corresponding to the first private information by using the first algorithm, and store the first information in the mapping list. The correspondence between the privacy information and the first anonymous information.

Further, the obtaining module 702 is further configured to obtain a lookup request, where the lookup request includes the second private information.

The security module 701 is further configured to: when the mapping list includes the second private information included in the search request acquired by the obtaining module 702, obtain the second anonymous information corresponding to the second private information according to the mapping list. The second private information is replaced with the second anonymous information in the lookup request to obtain an anonymous lookup request.

The searching module 705 is configured to find the second information according to the anonymous lookup request obtained by the security module 701.

Alternatively, the obtaining module 702 is further configured to obtain a lookup request.

The searching module 705 is configured to search for the second information according to the lookup request acquired by the obtaining module 702, where the second information includes the second anonymous information.

The security module 701 is further configured to: when the mapping list includes the second anonymous information included in the second information that is found by the searching module 705, obtain the second private information corresponding to the second anonymous information according to the mapping list. The second anonymous information is replaced with the second private information in the second information to obtain the second read information.

Optionally, in the second application scenario, the security module 701 is specifically configured to include the first privacy information in the mapping list that has been stored by the security module 701, where the mapping list includes the correspondence between the first privacy information and the first encryption key. In the case of a relationship, the first encryption key corresponding to the first private information is obtained according to the mapping list. The first private information is encrypted according to the first encryption key to generate first anonymous information corresponding to the first private information.

The security module 701 is further configured to: when the first privacy information is not included in the mapping list, encrypt the first private information according to the third encryption key to generate the first anonymous information and display the first anonymous information. The correspondence between the first private information and the third encryption key is stored in the shot list.

Further, the obtaining module 702 is further configured to obtain a lookup request, where the lookup request includes the second private information.

The security module 701 is further configured to: when the mapping list includes the second private information included in the search request acquired by the obtaining module 702, obtain the second encryption key corresponding to the second private information according to the mapping list. Encrypting the second private information according to the second encryption key to generate second anonymous information corresponding to the second private information. The second private information is replaced with the second anonymous information in the lookup request to obtain an anonymous lookup request.

The searching module 705 is configured to find the second information according to the anonymous lookup request obtained by the security module 701.

Alternatively, the obtaining module 702 is further configured to obtain a lookup request.

The searching module 705 is configured to search for the second information according to the lookup request acquired by the obtaining module 702, where the second information includes the second anonymous information.

The security module 701 is further configured to: when the mapping list includes the second anonymous information included in the second information found by the searching module 705, obtain the second encryption key corresponding to the second anonymous information according to the mapping list. Decrypting the second anonymous information according to the second encryption key to obtain second private information. The second anonymous information is replaced with the second private information in the second information to obtain the second read information.

Optionally, the security module 701 is further configured to determine whether the first privacy information is included in the mapping list.

Optionally, the first privacy information includes the user's International Mobile Subscriber Identity (IMSI), the user's mobile device international identifier IMEI, the user's mobile subscriber international number MSISDN, the user's media access control MAC address, and the user's Internet Protocol IP address. One or more. The security module 701 can be a hardware security module HSM or a trusted platform module TPM.

The virtualized cloud infrastructure provided in this embodiment obtains the anonymous to-be-stored information and stores it by replacing the first private information in the to-be-stored information with the first anonymous information. Because the virtual machine monitor cannot obtain the correspondence between the first private information and the first anonymous information, the virtual network administrator has the authority to view the virtual network. The privacy information of the user makes the privacy information of the user may be leaked, and the security of the user's private information is ensured.

Another embodiment of the present invention provides a virtualized cloud infrastructure. As shown in FIG. 8, the virtualized cloud infrastructure 80 includes: at least one processor 801, a memory 802, a bus 803, the at least one processor 801, and a memory. The 802 connects and completes communication with each other through the bus 803. Above the hardware resources included in the processor 801, the memory 802, and the bus 803, the virtualized cloud infrastructure includes a virtual machine monitor 804 and a security module 805, and a virtual machine monitor. 804 and security module 805 are virtual modules on top of virtualized cloud infrastructure 80 hardware resources, and virtual machine monitor 805 is unable to obtain information in security module 805.

The bus 803 may be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component) bus, or an EISA (Extended Industry Standard Architecture) bus. The bus 803 can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 8, but it does not mean that there is only one bus or one type of bus. among them:

The memory 802 is used to execute the application code of the inventive scheme, and the application code for executing the inventive scheme is stored in a memory and controlled by the processor 801 for execution.

The memory can be a read only memory ROM or other type of static storage device that can store static information and instructions, a random access memory RAM or other type of dynamic storage device that can store information and instructions, or can be electrically erasable or programmable. Read-only memory EEPROM, CD-ROM or other optical disc storage, optical disc storage (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), disk storage media or other magnetic storage devices, or can be used for Any other medium that carries or stores the desired program code in the form of an instruction or data structure and that can be accessed by a computer, but is not limited thereto. These memories are connected to the processor via a bus.

The processor 801 may be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one configured to implement an embodiment of the present invention. Multiple integrated circuits.

The processor 801 is configured to invoke program code in the memory 802. In a possible implementation manner, when the application program is executed by the processor 801, the following functions are implemented.

The processor 801 is configured to obtain information to be stored, where the information to be stored includes first privacy information.

The processor 801 is further configured to obtain the first anonymous information corresponding to the first private information by using the security module 805, and replace the first private information in the information to be stored with the first anonymous information by the security module 805 to obtain the anonymous information to be stored, and Store anonymous information to be stored.

Optionally, in an application scenario,

The processor 801 is configured to: when the mapping list that has been stored by the security module 805 includes the first private information, where the mapping list includes the correspondence between the first private information and the first anonymous information, obtain the first private information according to the mapping list. First anonymous information.

The processor 801 is further configured to: when the first privacy information is not included in the mapping list, obtain the first anonymous information corresponding to the first private information by using the first algorithm, and store the first information in the mapping list. The correspondence between the privacy information and the first anonymous information.

Further optionally, the processor 801 is further configured to obtain a lookup request, where the lookup request includes the second private information.

The processor 801 is further configured to: when the mapping list includes the second private information included in the search request, obtain the second anonymous information corresponding to the second private information according to the mapping list. The second private information is replaced with the second anonymous information in the lookup request to obtain an anonymous lookup request, and the second information is found according to the anonymous lookup request.

Alternatively, the processor 801 is further configured to obtain a lookup request, and find the second information according to the lookup request, where the second information includes the second anonymous information.

The processor 801 is further configured to: when the mapping list includes the second anonymous information included in the second information, obtain the second private information corresponding to the second anonymous information according to the mapping list. The second anonymous information is replaced with the second private information in the second information to obtain the second read information.

Optionally, in the second application scenario,

The processor 801 is specifically configured to: when the mapping list that has been stored by the security module 805 includes the first privacy information, where the mapping list includes the correspondence between the first privacy information and the first encryption key, obtain the first privacy information according to the mapping list. The first encryption key. The first private information is encrypted according to the first encryption key to generate first anonymous information corresponding to the first private information.

The processor 801 is further configured to: when the first private information is not included in the mapping list, encrypt the first private information according to the third encryption key to generate the first anonymous information, and store the first private information and the third in the mapping list. The correspondence between the encryption keys.

Further optionally, the processor 801 is further configured to obtain a lookup request, where the lookup request includes the second private information.

The processor 801 is further configured to: when the mapping list includes the second private information included in the search request, acquire the second encryption key corresponding to the second private information according to the mapping list. Encrypting the second private information according to the second encryption key to generate second anonymous information corresponding to the second private information. The second private information is replaced with the second anonymous information in the lookup request to obtain an anonymous lookup request, and the second information is found according to the anonymous lookup request.

Alternatively, the processor 801 is further configured to obtain a lookup request, and find the second information according to the lookup request, where the second information includes the second anonymous information.

The processor 801 is further configured to: when the mapping list includes the second anonymous information included in the second information, obtain the second encryption key corresponding to the second anonymous information according to the mapping list. Decrypting the second anonymous information according to the second encryption key to obtain second private information. The second anonymous information is replaced with the second private information in the second information to obtain the second read information.

Optionally, the first privacy information includes the user's International Mobile Subscriber Identity (IMSI), the user's mobile device international identifier IMEI, the user's mobile subscriber international number MSISDN, the user's media access control MAC address, and the user's Internet Protocol IP address. One or more. The security module 805 can be a hardware security module HSM or a trusted platform module TPM.

The virtualized cloud infrastructure provided in this embodiment obtains the anonymous to-be-stored information and stores it by replacing the first private information in the to-be-stored information with the first anonymous information. Because the virtual machine monitor cannot obtain the correspondence between the first private information and the first anonymous information. In the virtual network, the administrator of the virtual infrastructure has the right to view the user's private information, so that the user's private information may be leaked, and the security of the user's private information is ensured.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented in hardware, firmware implementation, or a combination thereof. When implemented in software, the functions described above may be stored in or transmitted as one or more instructions or code on a computer readable medium. Computer readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one location to another. A storage medium may be any available media that can be accessed by a computer. For example, but not limited to, the computer readable medium may include a RAM (Random Access Memory), a ROM (Read Only Memory), and an EEPROM (Electrically Erasable Programmable Read Only Memory). Read memory), CD-ROM (Compact Disc Read Only Memory) or other optical disk storage, disk storage media or other magnetic storage device, or can be used to carry or store a desired program in the form of an instruction or data structure. Code and any other medium that can be accessed by a computer. Also. Any connection may suitably be a computer readable medium.

The above is only a specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Claims (30)

1. An information processing method, characterized by being applied to a virtualized cloud infrastructure in a virtual network, the virtualized cloud infrastructure comprising a virtual machine monitor and a security module, wherein the virtual machine monitor cannot obtain the virtual machine monitor Information in the security module, the method comprising:

   Obtaining information to be stored, where the information to be stored includes first privacy information;

   Acquiring the first anonymous information corresponding to the first private information by using the security module;

   And replacing, by the security module, the first private information in the to-be-stored information with the first anonymous information to obtain anonymous to-be-stored information;

   The anonymous to-be-stored information is stored.
2. The method according to claim 1, wherein the obtaining, by the security module, the first anonymous information corresponding to the first private information comprises:

   If the mapping list that has been stored by the security module includes the first private information, the mapping list includes a correspondence between the first private information and the first anonymous information, and according to the mapping list, The security module acquires first anonymous information corresponding to the first privacy information;

   If the first private information is not included in the mapping list, the security information is used by the security module to obtain the first anonymous information corresponding to the first private information by using a first algorithm. And storing, in the mapping list, a correspondence between the first private information and the first anonymous information.
3. The method of claim 2, wherein the method further comprises:

   Obtaining a lookup request, where the lookup request includes second privacy information;

   If the second private information is included in the mapping list, the second anonymous information corresponding to the second private information is obtained by the security module according to the mapping list;

   And obtaining, by the security module, the second private information in the lookup request by using the second anonymous information to obtain an anonymous search request;

   Finding the second information according to the anonymous lookup request.
4. The method of claim 2, wherein the method further comprises:

   Get a lookup request;

   Finding second information according to the lookup request, where the second information includes second anonymous name information;

   If the second anonymous information is included in the mapping list, the second private information corresponding to the second anonymous information is obtained by the security module according to the mapping list;

   And replacing, by the security module, the second anonymous information with the second private information in the second information to obtain second read information.
5. The method according to claim 1, wherein the obtaining the first anonymous information corresponding to the first private information comprises:

   If the first private information is included in the mapping list that has been stored by the security module, the mapping list includes a correspondence between the first private information and the first encryption key, and according to the mapping list, Obtaining, by the security module, the first encryption key corresponding to the first privacy information;

   Encrypting the first private information by the security module to generate the first anonymous information corresponding to the first private information according to the first encryption key;

   If the first private information is not included in the mapping list, the first private information is encrypted according to a third encryption key to generate the first anonymous information, and the first privacy is stored in the mapping list. Correspondence between the information and the third encryption key.
6. The method of claim 5, wherein the method further comprises:

   Obtaining a lookup request, where the lookup request includes second privacy information;

   And obtaining, by the security module, a second encryption key corresponding to the second private information, according to the mapping list, if the second private information is included in the mapping list;

   Encrypting the second private information by the security module to generate the second anonymous information corresponding to the second private information according to the second encryption key;

   Replacing the second private information with the second anonymous information in the lookup request to obtain an anonymous lookup request;

   Finding the second information according to the anonymous lookup request.
7. The method of claim 5, wherein the method further comprises:

   Get a lookup request;

   Finding second information according to the lookup request, the second information including second anonymous information;

   If the second anonymous information is included in the mapping list, the second encryption key corresponding to the second anonymous information is obtained by the security module according to the mapping list;

   Decrypting the second anonymous information by the security module according to the second encryption key to obtain the second private information;

   The second anonymous information is replaced with the second private information in the second information to obtain second read information.
8. The method according to any one of claims 2-7, wherein before the obtaining, by the security module, the first anonymous information corresponding to the first private information, the method further includes:

   Determining, by the security module, whether the first private information is included in the mapping list.
9. Method according to any of claims 1-8, characterized in that

   The first private information includes an International Mobile Subscriber Identity (IMSI) of the user, a mobile device international identification code IMEI of the user, a mobile subscriber international number MSISDN of the user, a media access control MAC address of the user, and a location Describe one or more of the user's Internet Protocol IP addresses.
10. Method according to any of claims 1-9, characterized in that

    The security module is a hardware security module HSM or a trusted platform module TPM.
11. A virtualized cloud infrastructure, comprising: a virtual machine monitor, a security module, an obtaining module, and a storage module, wherein the virtual machine monitor cannot obtain information in the security module;

    The acquiring module is configured to acquire information to be stored, where the information to be stored includes first privacy information;

    The security module is configured to obtain the first anonymous information corresponding to the first private information acquired by the acquiring module, and replace the first private information in the to-be-stored information with the first anonymous information to be anonymously Store information;

    The storage module is configured to store the anonymous to-be-stored information obtained by the security module.
12. The device of claim 11 wherein:

    The security module is specifically configured to: when the mapping list that has been stored by the security module includes the first private information, where the mapping list includes a correspondence between the first private information and the first anonymous information, Acquiring the first anonymous information corresponding to the first private information according to the mapping list;

    The security module is further configured to: when the first private information is not included in the mapping list, perform the operation on the first private information by using a first algorithm to obtain the first corresponding to the first private information. An anonymous information and a correspondence between the first private information and the first anonymous information is stored in the mapping list.
13. The device according to claim 12, characterized in that

    The obtaining module is further configured to acquire a lookup request, where the lookup request includes second privacy information;

    The security module is further configured to: when the mapping list includes the second private information included in the search request acquired by the acquiring module, acquire, according to the mapping list, the second private information Second anonymous information; replacing the second private information with the second anonymous information in the lookup request to obtain an anonymous lookup request;

    The virtualized cloud infrastructure further includes a lookup module configured to find the second information according to the anonymous lookup request obtained by the security module.
14. The device according to claim 12, characterized in that

    The obtaining module is further configured to: acquire a lookup request;

    The virtualized cloud infrastructure further includes a search module, configured to search for second information according to the lookup request obtained by the obtaining module, where the second information includes second anonymous information;

    The security module is further configured to: when the mapping list includes the second anonymous information included in the second information that is found by the searching module, acquire the second anonymous information according to the mapping list. Corresponding second private information; replacing the second anonymous information with the second private information in the second information to obtain second read information.
15. The device of claim 11 wherein:

    The security module is specifically configured to be used in a mapping list that has been stored by the security module. The first privacy information is included, and when the mapping list includes a correspondence between the first privacy information and the first encryption key, acquiring the first encryption key corresponding to the first privacy information according to the mapping list Key: encrypting the first private information according to the first encryption key to generate the first anonymous information corresponding to the first private information;

    The security module is further configured to: when the first private information is not included in the mapping list, encrypt the first private information according to a third encryption key to generate the first anonymous information, and in the A mapping relationship between the first private information and the third encryption key is stored in the mapping list.
16. The device of claim 15 wherein:

    The obtaining module is further configured to acquire a lookup request, where the lookup request includes second privacy information;

    The security module is further configured to: when the mapping list includes the second private information included in the search request acquired by the acquiring module, acquire, according to the mapping list, the second private information a second encryption key; encrypting the second private information according to the second encryption key to generate the second anonymous information corresponding to the second private information; and performing the second in the lookup request The privacy information is replaced with the second anonymous information to obtain an anonymous search request;

    The virtualized cloud infrastructure further includes a lookup module configured to find the second information according to the anonymous lookup request obtained by the security module.
17. The device of claim 15 wherein:

    The obtaining module is further configured to acquire a lookup request;

    The virtualized cloud infrastructure further includes a search module, configured to search for second information according to the lookup request obtained by the obtaining module, where the second information includes second anonymous information;

    The security module is further configured to: when the mapping list includes the second anonymous information included in the second information that is searched by the searching module, acquire the second anonymous information according to the mapping list. Corresponding second encryption key; decrypting the second anonymous information according to the second encryption key to obtain the second private information; and replacing the second anonymous information with the second information The second private information is obtained as a second read letter interest.
18. Apparatus according to any one of claims 12-17, wherein

    The security module is further configured to determine whether the first privacy information is included in the mapping list.
19. Apparatus according to any one of claims 11-18, wherein

    The first private information includes an International Mobile Subscriber Identity (IMSI) of the user, a mobile device international identification code IMEI of the user, a mobile subscriber international number MSISDN of the user, a media access control MAC address of the user, and a location Describe one or more of the user's Internet Protocol IP addresses.
20. Apparatus according to any one of claims 11-19, wherein

    The security module is a hardware security module HSM or a trusted platform module TPM.
21. A virtualized cloud infrastructure, comprising: a processor, a memory, and a bus, wherein the processor and the memory are connected to each other by the bus, and are included in the processor, the memory, and the bus Above the hardware resources, the virtualized cloud infrastructure includes a virtual machine monitor and a security module, and the virtual machine monitor cannot obtain information in the security module;

    The processor is configured to acquire information to be stored, where the information to be stored includes first privacy information;

    The processor is further configured to acquire the first anonymous information corresponding to the first private information by using the security module, and replace, by the security module, the first private information in the to-be-stored information with the first The anonymous information is obtained by anonymizing the information to be stored, and the anonymous information to be stored is stored.
22. The device according to claim 21, wherein

    The processor is specifically configured to: when the mapping list that has been stored by the security module includes the first private information, where the mapping list includes a correspondence between the first private information and the first anonymous information, Acquiring the first anonymous information corresponding to the first private information according to the mapping list;

    The processor is further configured to: when the first private information is not included in the mapping list, obtain the first private information by using a first algorithm to obtain the first The first anonymous information corresponding to the privacy information, and storing, in the mapping list, a correspondence between the first private information and the first anonymous information.
23. The device according to claim 22, wherein

    The processor is further configured to acquire a lookup request, where the lookup request includes second privacy information;

    The processor is further configured to: when the mapping list includes the second private information included in the search request, acquire second anonymous information corresponding to the second private information according to the mapping list; The second privacy information is replaced by the second anonymous information in the lookup request to obtain an anonymous search request, and the second information is found according to the anonymous search request.
24. The device according to claim 22, wherein

    The processor is further configured to obtain a lookup request, and find second information according to the lookup request, where the second information includes second anonymous information;

    The processor is further configured to: when the mapping list includes the second anonymous information included in the second information, acquire second privacy information corresponding to the second anonymous information according to the mapping list; The second anonymous information is replaced with the second private information in the second information to obtain second read information.
25. The device according to claim 21, wherein

    The processor is specifically configured to: when the mapping list that has been stored by the security module includes the first private information, where the mapping list includes a correspondence between the first private information and a first encryption key, according to Obtaining, by the mapping list, the first encryption key corresponding to the first private information, and encrypting the first private information according to the first encryption key to generate the first corresponding to the first private information An anonymous message;

    The processor is further configured to: when the first private information is not included in the mapping list, encrypt the first private information according to a third encryption key to generate the first anonymous information, and in the A mapping relationship between the first private information and the third encryption key is stored in the mapping list.
26. The device according to claim 25, wherein

    The processor is further configured to acquire a lookup request, where the lookup request includes a second privacy information;

    The processor is further configured to: when the mapping list includes the second private information included in the search request, acquire a second encryption key corresponding to the second private information according to the mapping list; Encrypting the second private information according to the second encryption key to generate the second anonymous information corresponding to the second private information; replacing the second private information with the searching request The second anonymous information is obtained by an anonymous lookup request, and the second information is found according to the anonymous lookup request.
27. The device according to claim 25, wherein

    The processor is further configured to obtain a lookup request, and find second information according to the lookup request, where the second information includes second anonymous information;

    The processor is further configured to: when the mapping list includes the second anonymous information included in the second information, acquire a second encryption key corresponding to the second anonymous information according to the mapping list Decrypting the second anonymous information according to the second encryption key to obtain the second private information; and replacing the second anonymous information with the second private information in the second information Second, read the information.
28. A device according to any one of claims 22-27, wherein

    The processor is further configured to determine, by the security module, whether the first private information is included in the mapping list.
29. Apparatus according to any one of claims 21-28, wherein

    The first private information includes an International Mobile Subscriber Identity (IMSI) of the user, a mobile device international identification code IMEI of the user, a mobile subscriber international number MSISDN of the user, a media access control MAC address of the user, and a location Describe one or more of the user's Internet Protocol IP addresses.
30. A device according to any one of claims 21-29, wherein

    The security module is a hardware security module HSM or a trusted platform module TPM.

Images