WO2019085677A1

WO2019085677A1 - Garbled circuit-based data calculation method, apparatus, and device

Info

Publication number: WO2019085677A1
Application number: PCT/CN2018/106963
Authority: WO
Inventors: 李艺; 徐崴; 刘正
Original assignee: 清华大学; 阿里巴巴集团控股有限公司
Priority date: 2017-11-01
Filing date: 2018-09-21
Publication date: 2019-05-09
Also published as: TWI686712B; CN109756442B; CN109756442A; TW201923619A

Abstract

The embodiments of the present specification disclose a garbled circuit-based data calculation method, apparatus, and device. The method comprises: on the basis of data exchange between nodes, and a garbled circuit, performing service data calculation on nodes in groups of two; further performing calculation on the obtained data in groups of two; and continuing in the same manner to obtain the final calculation result.

Description

Data statistics method, device and device based on confusion circuit

Technical field

The present specification relates to the field of computer software technology, and in particular, to a data statistics method, apparatus and device based on an obfuscation circuit.

Background technique

With the rapid development of computer and Internet technologies, many businesses can be carried out online, bringing convenience to users. Some of the services require multiple service provider collaboration statistics, such as the risk control business in a long-term lending scenario. In this scenario, the service provider is a financial institution, and the loan applicant may borrow from one or more financial institutions. In the case of risk control of loan applicants, it is often necessary for multiple financial institutions to participate in statistics.

In the prior art, the nodes of the multiple service providers respectively provide service data for statistics, such as maximizing, minimizing, summing, or averaging the service data. In the example of the previous paragraph, the specific loan amount of the loan applicant in a single financial institution may be counted, or the sum of the loan amount of the loan applicant in a plurality of financial institutions may be counted, and the like.

Based on the prior art, there is a need for a statistical solution that more secures the data privacy of the service provider.

Summary of the invention

The embodiments of the present specification provide a data statistics method, apparatus, and device based on an obfuscation circuit, to solve the following technical problem: a statistical solution that better protects data privacy of a service provider is needed.

In order to solve the above technical problem, the embodiment of the present specification is implemented as follows:

A data statistics method based on an obfuscation circuit provided by an embodiment of the present specification includes:

Grouping each node to obtain a plurality of node groups including at most two nodes;

Performing partial service data exchange between nodes in the node group, and obtaining statistical data in the group according to the data after the exchange and the statistical data of the obfuscation circuit, wherein the obfuscation circuit is used for confusing the statistical process and hiding statistics based on the random number result;

Performing inter-node group statistics according to the statistical data in the group, and obtaining inter-group statistical data;

The statistical data of the group is restored by using the corresponding random number to obtain a final statistical result.

A data statistics device based on an obfuscation circuit provided by an embodiment of the present specification includes:

a grouping module, grouping each node to obtain a plurality of node groups including at most two nodes;

The intra-group statistical module performs partial service data exchange between nodes in the node group, and obtains statistical data in the group according to the exchanged data and the obfuscated circuit statistical service data, wherein the obfuscating circuit is used to confuse the statistical process, and Hide statistical results based on random numbers;

The inter-group statistics module performs statistics between the node groups according to the statistical data in the group, and obtains statistical data between the groups;

The restoration module restores the statistical data between the groups by using a corresponding random number to obtain a final statistical result.

At least one processor; and,

a memory communicatively coupled to the at least one processor; wherein

The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:

The above at least one technical solution adopted by the embodiments of the present specification can achieve the following beneficial effects: each service provider corresponds to each node, and the data exchanged and the obfuscated circuit between the nodes can not only hide the data held by the node, but also hide the statistics. The identity of the node that provides the data in the process, as well as the relative statistical relationship between the data of the two nodes, therefore, the service provider data privacy is more guaranteed.

DRAWINGS

In order to more clearly illustrate the embodiments of the present specification or the technical solutions in the prior art, the drawings to be used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a few embodiments described in the present specification, and other drawings can be obtained from those skilled in the art without any inventive labor.

FIG. 1 is a schematic diagram of an overall architecture involved in an implementation scenario of the present specification;

2 is a schematic flowchart of a data statistics method based on an obfuscation circuit according to an embodiment of the present disclosure;

FIG. 3 is a schematic diagram of an anonymous statistical circuit according to an embodiment of the present disclosure; FIG.

FIG. 4 is a schematic flowchart of performing statistics on four nodes by using the method of FIG. 2 according to an embodiment of the present disclosure;

FIG. 5 is a schematic flowchart of performing statistics on three nodes by using the method of FIG. 2 according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of an obfuscation circuit-based data statistics apparatus corresponding to FIG. 2 according to an embodiment of the present disclosure.

Detailed ways

Embodiments of the present specification provide a data statistics method, apparatus, and device based on an obfuscation circuit.

In order to make those skilled in the art better understand the technical solutions in the present specification, the technical solutions in the embodiments of the present specification will be clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the specification. The embodiments are only a part of the embodiments of the present application, and not all of them. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present specification without departing from the inventive scope shall fall within the scope of the application.

In the solution of the present specification, the service data statistics for each node is a multi-party secure computing process, and the multi-party secure computing realizes multi-party collaborative computing under the requirement that one party data is not leaked to other parties, and can guarantee the calculation result. Correctness. Moreover, the scheme of the present specification can also hide the identity of the node providing data in the statistical process and the relative statistical relationship between the data of the two nodes.

In order to achieve the above effects, data exchange and obfuscation circuits between nodes are utilized, and data exchange includes partial service data exchange and/or random number exchange between nodes, and the obfuscated circuit utilized is improved on the basis of the prior art.

The obfuscation circuit is a secure computing protocol based on encryption. Two mutually untrusted data holders can cooperatively calculate the result of a certain function f, and f uses a circuit to represent the input, and the input is the data held by the two parties. In order to ensure that the data is not exposed during the calculation process, the circuit needs to be confused. The confusing circuit protocol ensures the correctness of the calculation result, and neither party can obtain information other than the function result from the protocol.

The obfuscation circuit utilized in the present invention increases the random number input, and uses the random number to mask the result while completing the statistical calculation, thereby preventing any one from restoring the result. Not only that, but also data exchange between nodes before the data input obfuscation circuit. Therefore, it is advantageous to hide the identity of both parties and the relative statistical relationship between the two parties. For example, for the statistics of the most value, the relative size of the two parties can be hidden. The confusing circuits referred to below refer to such improved confusing circuits in this paragraph.

FIG. 1 is a schematic diagram of an overall architecture involved in an implementation scenario of the present specification. In the overall architecture, there are mainly three parts: user (terminal), agent and multiple nodes. The agent directly interacts with the user and coordinates each node to achieve multi-party statistics.

Taking the scenario of the background art as an example, if the service provider is a financial institution, the node is, for example, a financial institution server, and each financial institution may correspond to one node respectively, and the financial institution may be a bank, an insurance company, or a third-party payment institution. In other applicable scenarios, the service provider may not be limited to financial institutions, but may also be government, schools, shops, other institutions, or companies.

A workflow of the overall architecture includes: the user sends a data request to the agent, the agent notifies the plurality of nodes, and the plurality of nodes perform statistics based on the data exchange and the obfuscation circuit between the nodes, and obtain the final statistical result and return.

The program of this specification focuses on the statistical process of multiple nodes, which are described in detail below.

FIG. 2 is a schematic flowchart diagram of a data statistics method based on an obfuscation circuit according to an embodiment of the present disclosure. The execution body of the process includes a plurality of nodes participating in the statistics, and may also include a proxy.

The process in Figure 2 can include the following steps:

S202: Group each node to obtain a plurality of node groups including at most two nodes.

In the embodiment of the present specification, in order to speed up the statistical speed, each node may be grouped into two groups, and then counted in the node group first, and then counted among the node groups. Thus, the final statistical result is obtained through multiple rounds of statistics. It should be noted that the node group may also include only one node, and the node group may not perform statistics and participate in the statistics of the node groups.

S204: Perform partial service data exchange between nodes in the node group, and obtain statistical data in the group according to the exchanged data and the confusion circuit statistical service data, wherein the obfuscation circuit is used to confuse the statistical process, and based on the random number Hide statistics.

In the embodiment of the present specification, the service data is data required for performing statistics, which affects the statistical data in the group, thereby affecting the statistical data between the groups and the final statistical result.

For example, in the example of the background art, the service data of each node may refer to the loan amount of the target object at the financial institution to which the node belongs, and the final statistical result may refer to the total amount of the loan of the target institution at the financial institution to which the node belongs (summed Statistics) or the maximum loan amount (statistics for the maximum value), etc., which specific statistics can be determined according to actual needs.

In the embodiment of the present specification, the real content of the service data held by the node can be hidden by the partial service data exchange between the nodes. Before the exchange, the service data owned by the node is split. There are many ways to split the data. Two examples are given: if the service data is a value, for example, the secret sharing protocol can be used. Splitting; if the service data is one or more data records, for example, the data records can be split, of course, the single data record itself can be further split; and so on.

The following embodiments are mainly described based on the first splitting method listed above. In this splitting mode, the encryption of the data before the splitting can also be conveniently realized, thereby facilitating data privacy.

In the embodiments of the present specification, it has been mentioned above that the obfuscation circuit has a random number input which can be generated by a node. The obfuscated circuit itself can also be generated by the node. The generated obfuscated circuit uses the input random number to mask the result while completing the statistical calculation, which can prevent any party from restoring the result.

It should be noted that the above circuit may be just a computer processing logic, and is not necessarily a real circuit.

S206: Perform inter-node group statistics according to the statistical data in the group, and obtain inter-group statistics.

In the embodiment of the present specification, similar to the statistics in the node group, the statistics between the node groups can also be performed between the two node groups, and the statistical process between the node groups also utilizes the confusion circuit accordingly. If there are more than two node groups, the inter-node group statistics can be performed iteratively. In this case, the inter-group statistical data described in step S206 refers to the inter-group statistical data finally obtained after the iteration is completed.

It should be noted that if iterative statistics are required, the representative nodes of each node group may be regrouped, and then statistics are performed in the re-divided group, thereby implementing the above-mentioned node group statistics.

In the embodiment of the present specification, in order to ensure data privacy, before the final statistical result is obtained, whether it is intra-group statistical data or inter-group statistical data, the original statistical data is not directly presented, but is composed of at least two different nodes. Holding some, but not all, through the exchange of data between nodes, the joint parts can restore the original statistics, not only that, but the intermediate statistical process is confused.

S208: Restore the statistical data of the group by using a corresponding random number to obtain a final statistical result.

In the embodiment of the present specification, the corresponding random number is a part of the inter-group statistical data held by the node, and is used to restore other inter-group statistical data held by other nodes to obtain a final statistical result.

Through the method of FIG. 2, each service provider corresponds to each node, and the data exchange and the obfuscation circuit between the nodes can not only hide the data held by the node, but also hide the identity of the node providing the data in the statistical process, and The relative statistical relationship between the data of the two nodes, therefore, the privacy of the data of the service provider is more guaranteed.

Based on the method of FIG. 2, the embodiments of the present specification further provide some specific implementations of the method, and an extended solution, which will be described below.

In the embodiment of the present specification, for the step S204, the performing the inter-node partial service data exchange in the node group may specifically include:

Based on the Secret Sharing protocol, the service data of each node in the node group is split into two parts, wherein the service data before the splitting can be restored according to the XOR result of the two parts; if the node group contains the first node And the second node, the part of the data split by the two nodes are exchanged.

For example, assuming that the service data of the first node of a node group is a, based on the Secret Sharing protocol, a can be split into two parts, a1 and a2, and satisfied.

Similarly, assuming that the service data of the second node of the node group is b, split b into two parts b1 and b2, and satisfy

The inter-node partial service data exchange performed in the node group includes, for example, the first node exchanges b1 of the second node with a2; after the exchange, the first node holds (a1, b1), and the second node holds (a2) , b2).

For the sake of understanding, the node names used in this specification are explained:

Generally, each node group contains two nodes, and for distinguishing, one of the nodes is referred to as a first node, and the other node is referred to as a second node.

Further, when it comes to describing two node groups (a certain node group and another node group) at the same time, in order to avoid confusion, the first node of another node group is referred to as a third node, and another node group is The second node is renamed to the fourth node;

In addition, as mentioned above, a node group may also contain only one node, and then a node included in such a node group is also referred to as a third node;

These node names are for convenience of description and are not intended to limit the application.

In the embodiment of the present specification, for the step S204, the statistical data of the group is obtained according to the data of the exchanged data and the confusing circuit, and the specific data may include:

Generating an obfuscating circuit, the obfuscating circuit takes the exchanged data and the random number as input; according to the exchanged data and the obfuscation circuit, the service data is collected through the interaction between the first node and the second node, and the intra-group statistical data is obtained.

The random number is generated by a node or a proxy, taking node generation as an example. For example, before the intra-group statistics are obtained, the first node generates and holds the first random number, denoted as r1, and the second node generates and holds the second random number, denoted as r2.

The following is a further description of the random number input of the obfuscation circuit. Intuitively, an anonymous statistical circuit will be described in conjunction with FIG. FIG. 3 is a schematic diagram of an anonymous statistical circuit according to an embodiment of the present disclosure.

In FIG. 3, the statistics are specifically a maximum value calculation, which involves comparison of service data between nodes. Therefore, the anonymous statistical circuit may also be referred to as an anonymous comparison circuit.

Among them, "XOR" means XOR gate circuit, "AND" means AND gate circuit, ">" means comparison gate circuit, and comparison gate circuit can be composed of several simple gate circuits.

R1 and r2 are the random numbers entered. The input to the anonymous statistical circuit includes: (a1, a2, b1, b2, r1, r2), that is, the input of the aliasing circuit. In the process of the anonymous statistical circuit, a is restored by a1 and a2, b is restored by b1 and b2, and by comparison, the larger value max(a, b) among a and b is obtained by statistics, and further, using r1 and The XOR result of r2 is XORed with max(a,b), and the result is:

Thereby hiding the max(a, b). Of course, there will be confusion in the process to hide the node identity. In this example, the output of the obfuscation circuit is Equation 1.

It should be noted that, for the above input, (a1, b1, r1) is input based on data transmission of the first node, and (a2, b2, r2) is input based on data transmission of the second node, and the data transmission is based on the confusion circuit. The Oblivious Transfer protocol can be used. Due to confusion, the first node and the second node transmit not the original value but the obfuscated value.

Further, the first node or the second node may partially restore the formula 1 according to the random number held by itself. Before the final statistical result is obtained, it is necessary to avoid exposing max(a, b) directly. Based on this, for example, the first node can partially restore the formula 1 according to the r1 held by the first node.

And hold, while the second node holds

Further reduced r2, in this way, the first node or the second node can not obtain max(a, b) by itself, thereby ensuring the secrecy of max(a, b).

According to the above example, in step S204, before the obtaining the intra-group statistical data, the first node may generate and hold the first random number, and the second node generates and holds the second random number; further, According to the exchanged data and the obfuscation circuit, the service data is collected through the interaction between the first node and the second node, and the statistics in the group are obtained, which may specifically include:

Passing the interaction between the first node and the second node, the first node inputs the first random number and its own exchanged data, and the second node inputs the second random number and its own exchanged data into the Converging the circuit statistical service data, and obtaining statistical data in the group; wherein the statistical data in the group includes: an XOR result of the first output result of the obfuscation circuit and the first random number, which is held by the first node; The second random number is held by the second node.

The first output result is counted for the first node and the second node.

Further, the obtaining the statistics in the group may specifically include:

The second node obtains the first output result of the obfuscation circuit, and sends the result to the first node; the first node performs an exclusive-OR operation on the first random number and the received first output result of the obfuscation circuit to obtain a hidden state. Corresponding statistical result, which is numerically equal to the XOR result of the corresponding statistical result and the second random number.

In the embodiment of the present specification, after the statistics in the group are completed, the statistics between the groups are further performed. According to the foregoing description, the result of the statistics in the group is in a hidden state, and can be continuously used in the process of counting between groups without Exposing hidden results allows random numbers used to restore hidden results to be exchanged between groups of nodes.

For example, assume that another node group includes a third node corresponding to the first node and a fourth node corresponding to the second node; for intra-group statistics, the third node generates a third random number, and the fourth node generates a third node Four random numbers. Then, the random number exchange may be performed before the inter-group statistics: the second node sends the second random number to the third node, and the fourth node sends the corresponding fourth random number to the first node. Further, the first node and the third node respectively perform the inter-group statistics as the representative nodes of the node group to which they belong.

According to the analysis of the above two segments, if another node group includes a third node corresponding to the first node, and a fourth node corresponding to the second node, the node performs the node according to the statistics in the group for step S206. Statistics between groups can be obtained from the statistics of the group. The details can include:

The first node and the third node are respectively used as representative nodes of the node group to which they belong, and perform random number exchange; according to the post-exchange random number, the representative group corresponding to the intra-group statistical data and the confusion circuit, the interaction between the representative nodes is performed. Performing inter-node group statistics to obtain inter-group statistics; wherein the obfuscation circuit takes the post-exchange random number and the statistical data of the partial group corresponding to the representative node as input, and the random number exchange includes: the second node will The second random number is sent to the third node, and the fourth node sends its corresponding fourth random number to the first node.

Similar to the intra-group statistics, in the inter-group statistics, the representative node also needs to generate a random number again to hide the results of the inter-group statistics. It is assumed that the first node generates a fifth random number for the inter-node group statistics, and the third node. A sixth random number is generated.

The inter-group statistical data may include: an exclusive OR result of the second output result of the obfuscation circuit and the second output result of the obfuscation circuit and the fifth random number statistically generated by the first node between the node groups, The first node holds; the third node is a sixth random number that is generated and held by the node group.

The second output result is counted for the first node, the second node, the third node, and the fourth node.

In the embodiment of the present specification, if the second output result is calculated for all nodes, for step S208, the statistical data of the group is restored by using the corresponding random number to obtain a final statistical result, which may be specifically include:

The third node sends the sixth random number to the first node; the first node performs an exclusive-OR operation on the sixth random number and the statistical data of the group, and restores the hidden corresponding statistical result, as a final statistic result.

In the embodiment of the present specification, if the second output result is not calculated for all the nodes, the using the corresponding random number to restore the statistical data between the groups to obtain the final statistical result may also be performed:

Continue to iterate the statistics until you get: the statistics between the groups obtained after the statistics of all the nodes are completed, and are used to restore the final statistical results.

For ease of understanding, the entire statistical process is illustrated with a more complete example in conjunction with FIG. FIG. 4 is a schematic flowchart of performing statistics on four nodes by using the method of FIG. 2 according to an embodiment of the present disclosure. Some of the steps in Figure 4 have been described in the above examples, and these steps are only briefly described herein.

Let the output function of the obfuscated circuit be denoted by f. In FIG. 4, the first node and the second node belong to one node group, the third node and the fourth node belong to another node group, and a, b, c, and d are service data of the corresponding node, respectively. The output of the obfuscated circuit is counted as fab for the statistics of a and b, and the output of the obfuscated circuit is recorded as fcd for the statistics of c and d, and the output of the obfuscated circuit is recorded for the statistics of a, b, c, and d. Fabcd.

For the previous node group, the first node and the second node split the service data based on the Secret Sharing protocol before performing the first round of statistics. After the split, the first node holds (a1, a2), and the second node Holding (b1, b2); the first node performs partial service data exchange with the second node, after the exchange, the first node holds (a1, b1), and the second node holds (a2, b2);

The first node generates an obfuscation circuit, and the input is (a1, a2, b1, b2, r1, r2), and the state of the first node and the second node is state 1 at this time, and the state 1 indicates that the current confusion circuit is calculated before;

Execute the obfuscation circuit calculation process, the second node obtains the output result fab of the obfuscated circuit, and sends it to the first node, and the first node uses the r1 to perform an exclusive OR operation and holds

The second node holds r2, and the statistical result is in a hidden state. Taking the statistics as the maximum value calculation as an example, the fab is numerically equal to the formula 1, and it can be seen that the statistical result max(a, b) is in a hidden state. At this time, the state of the first node and the second node is state 2, and the state 2 indicates that the current confusion circuit is calculated;

At this time, the first node and the second node respectively hold a part of the statistical data in the group: maskab, r2; the first node is taken as the representative node of the first node group; similarly, for the other node group, the group is completed. After the statistics, the third node holds

The fourth node holds r4 and the third node is a representative node of another node group;

The random number exchange is performed between the node groups, the second node sends r2 to the third node, and the fourth node sends r4 to the first node; after the random number is exchanged, as the representative node, the first node holds (maskab, r4) The third node holds (maskcd, r2), and the state of the first node and the third node is restored to state 1;

The first node and the third node perform the next round of statistics, that is, the inter-group statistics; the first node generates a fifth random number r11, and the third node generates a sixth random number r22;

Similar to the statistics in the group, the input of the obfuscated circuit is (maskab, r2, maskcd, r4, r11, r22), the obfuscated circuit calculation process is performed, the obfuscated circuit outputs fabcd; after further performing the exclusive OR operation, the first node holds

The third node holds r22, and the state of the first node and the third node is restored to state 2;

If there are no more nodes, the flow in the dashed box can be directly executed. The third node sends r22 to the first node, and the first node performs an exclusive OR operation with r22 and maskabcd to restore the final statistical result, which is recorded as final. And can send the final back to the agent, and then return to the user by the agent; for the specific calculation of the maximum value as an example, final is equal to max(a, b, c, d).

If there are more nodes, iteratively counts the statistics until the statistics of all the nodes are completed, and then the final statistics are restored.

In the embodiment of the present specification, as mentioned above, a node group may also contain only one node. In this case, it is possible for two node groups that perform inter-group statistics to have a total of three nodes. For a node group consisting of two nodes, the statistics in the group can be referred to the above description, and for the node group containing only one node, there is no need to perform intra-group statistics, and the specific implementation scheme of the statistics between the groups and the above The description is also different. Continue to explain below.

In the embodiment of the present disclosure, if the other node group only includes the third node, the step-synthesis is performed according to the statistical data in the group, and the inter-group statistics are obtained, which may include:

The first node and the third node are respectively used as representative nodes of the node group to which they belong, and data exchange is performed; according to the exchanged data, the intra-group statistical data corresponding to the representative nodes, and the obfuscation circuit, the interaction between the representative nodes is performed. The inter-group statistics are obtained, and the inter-group statistics are obtained. The obfuscating circuit takes the post-exchange data and the statistical data of the partial group corresponding to the representative node as input, and the data exchange includes: the second node will use the second random number Sending to the third node, the third node sends a part of its own data split based on the secret sharing protocol to the first node.

Further, in the case of the previous segment, the inter-group statistical data includes: an XOR result of the third output result of the obfuscation circuit and a fifth random number generated by the first node for the statistically generated between the node groups, by A node holds; the third node is a sixth random number generated and held by the node group.

The third output result is counted for the first node, the second node, and the third node. The following steps are similar to the case where four nodes participate in statistics, and will not be described again.

For ease of understanding, a more complete example is used to illustrate the flow of counting three nodes using the method of FIG. 2, as shown in FIG. 5. Part of the steps in Fig. 5 can be referred to Fig. 4, and the main steps are explained here.

In FIG. 5, the first node and the second node belong to one node group, and the third node belongs to another node group. The output of the obfuscated circuit when counting for a, b, and c is recorded as fabc.

For another node group, the third node splits the service data c to get (c1, c2);

After the statistics in the group of the first node group are completed, the second node sends r2 to the third node, and the third node sends c2 to the first node; then, as the proxy node, the first node holds (maskab, c2), Three nodes hold (c1, r2);

The first node and the third node perform a lower round comparison, that is, inter-group statistics; the first node generates a fifth random number r11, and the third node generates a sixth random number r22;

Similar to the statistics in the group, the input of the obfuscated circuit is (maskab, r2, c1, c2, r11, r22), the obfuscated circuit calculation process is performed, the obfuscated circuit outputs fabc; after further performing the exclusive OR operation, the first node holds

The third node holds r22;

If there are no more nodes, the flow in the dashed box can be directly executed. The third node sends r22 to the first node. The first node performs an exclusive OR operation with the maskabc by r22, restores the final, and can send the final. Returning to the agent, and then returning to the user by the agent; taking the statistics as the maximum value operation as an example, final is equal to max(a, b, c).

Based on the same idea, the embodiment of the present specification further provides a device corresponding to the above method, as shown in FIG. 6.

FIG. 6 is a schematic structural diagram of an obfuscation circuit-based data statistic apparatus corresponding to FIG. 2 according to an embodiment of the present disclosure. The apparatus may be located on an execution body of the process in FIG. 2, and includes:

The grouping module 601 groups each node to obtain a plurality of node groups including at most two nodes;

The intra-group statistic module 602 performs partial service data exchange between the nodes in the node group, and obtains statistical data in the group according to the exchanged data and the confusing circuit statistical service data, wherein the obfuscation circuit is used to confuse the statistical process. And hiding statistical results based on random numbers;

The inter-group statistics module 603 performs statistics between the node groups according to the statistical data in the group, and obtains statistics between the groups;

The restoration module 604 restores the statistical data between the groups by using a corresponding random number to obtain a final statistical result.

Optionally, the intra-group statistic module 602 performs part-service data exchange between the nodes in the node group, and specifically includes:

The in-group statistic module 602 splits the service data of each node in the node group into two parts based on the secret sharing protocol, wherein the pre-split service data can be restored according to the XOR result of the two parts;

If the node group includes the first node and the second node, a part of the data split by the two nodes is exchanged.

Optionally, the in-group statistics module 602 obtains the statistics in the group according to the data after the exchange and the statistics data of the obfuscation circuit, and specifically includes:

The intra-group statistic module 602 generates an obfuscation circuit that takes the exchanged data and the random number as input; according to the exchanged data and the obfuscation circuit, the service data is collected through the interaction between the first node and the second node. , get the statistics within the group.

Optionally, before the intra-group statistics module 602 obtains the intra-group statistics, the first node generates and holds the first random number, and the second node generates and holds the second random number;

The in-group statistic module 602, according to the exchanged data and the obfuscation circuit, collects statistical data of the group by using the interaction between the first node and the second node, and the statistic data includes:

The intra-group statistic module 602 passes the interaction between the first node and the second node, the first node will use the first random number and its own post-exchange data, and the second node will use the second random number and the second node. After the exchange of data, enter the confusion circuit statistical service data to obtain statistical data within the group;

The statistical data in the group includes: an XOR result of the first output result of the obfuscation circuit and the first random number, which is held by the first node; and the second random number is held by the second node .

Optionally, the in-group statistics module 602 obtains the statistics in the group, and specifically includes:

The second node obtains the first output result of the obfuscation circuit and sends the result to the first node;

The first node performs an exclusive-OR operation on the first random number and the received first output result of the obfuscation circuit to obtain a corresponding statistical result in a hidden state, which is numerically equal to the corresponding statistical result and the second random number The XOR result of the number.

Optionally, if another node group includes a third node corresponding to the first node, and a fourth node corresponding to the second node,

The inter-group statistic module 603 performs inter-node group statistics according to the statistical data in the group, and obtains inter-group statistic data, which specifically includes:

The inter-group statistic module 603 takes the first node and the third node as representative nodes of the node group to which it belongs, and performs random number exchange;

According to the post-exchange random number, the corresponding intra-group statistical data and the obfuscation circuit, the inter-group statistics are obtained by the interaction between the representative nodes, and the inter-group statistical data is obtained;

The obfuscation circuit takes the post-exchange random number and the statistical data of the partial group corresponding to the representative node as input, and the random number exchange includes: the second node sends the second random number to the third node, and the fourth node Sending the corresponding fourth random number to the first node.

Optionally, the inter-group statistic data includes: an XOR result of the second output result of the obfuscation circuit and a fifth random number generated by the first node between the node groups, and is held by the first node; The third node is a sixth random number generated and held by the node group.

Optionally, if the second output is statistic for all the nodes, the restoring module 604 uses the corresponding random number to restore the statistical data of the group to obtain a final statistical result, which specifically includes:

The third node sends the sixth random number to the first node;

The first node performs an exclusive-OR operation on the sixth random number and the statistical data between the groups, and restores the hidden corresponding statistical result as a final statistical result.

Optionally, if the second output result is not calculated for all nodes, the restoring module 604 uses the corresponding random number to restore the statistical data between the groups to obtain statistics before the final statistical result. The module 603 continues to iterate the statistics until: the inter-group statistics obtained after the statistics of all the nodes are completed are used for the restoration to obtain the final statistical result.

Optionally, if another node group only includes the third node,

The inter-group statistic module 603 takes the first node and the third node as representative nodes of the node group to which it belongs, and performs data exchange;

According to the data after the exchange, the statistical data of the group corresponding to the representative nodes, and the obfuscation circuit, the statistics between the nodes are performed by the interaction between the representative nodes, and the statistical data between the groups is obtained;

The obfuscation circuit takes the post-exchange data and the statistical data of the partial group corresponding to the representative node as input, and the data exchange includes: the second node sends the second random number to the third node, and the third node is based on A part of the data split by the secret sharing protocol is sent to the first node.

Optionally, the inter-group statistical data includes: an XOR result of the third output result of the obfuscation circuit and a fifth random number generated by the first node between the node groups, and is held by the first node; The third node is a sixth random number generated and held by the node group.

Optionally, the node comprises a financial institution server.

Based on the same idea, the embodiment of the present specification further provides an obfuscation circuit-based data statistics device corresponding to FIG. 2, including:

At least one processor; and,

a memory communicatively coupled to the at least one processor; wherein

Based on the same idea, the embodiment of the present specification further provides a non-volatile computer storage medium corresponding to FIG. 2, which stores computer executable instructions, and the computer executable instructions are set as:

The foregoing description of the specific embodiments of the specification has been described. Other embodiments are within the scope of the following claims. In some cases, the actions or steps recited in the claims can be performed in a different order than the embodiments and still achieve the desired results. In addition, the processes depicted in the figures are not necessarily in a particular order or in a sequential order to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

The various embodiments in the specification are described in a progressive manner, and the same or similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for a device, device, non-volatile computer storage medium embodiment, since it is substantially similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiment.

The device, the device, the non-volatile computer storage medium and the method provided by the embodiments of the present specification are corresponding, and therefore, the device, the device, and the non-volatile computer storage medium also have similar beneficial technical effects as the corresponding method, since The beneficial technical effects of the method are described in detail, and therefore, the beneficial technical effects of the corresponding device, device, and non-volatile computer storage medium are not described herein.

In the 1990s, improvements to a technology could clearly distinguish between hardware improvements (eg, improvements to circuit structures such as diodes, transistors, switches, etc.) or software improvements (for process flow improvements). However, as technology advances, many of today's method flow improvements can be seen as direct improvements in hardware circuit architecture. Designers almost always get the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that the improvement of a method flow cannot be implemented by hardware entity modules. For example, a Programmable Logic Device (PLD) (such as a Field Programmable Gate Array (FPGA)) is an integrated circuit whose logic function is determined by the user programming the device. Designers program themselves to "integrate" a digital system on a single PLD without having to ask the chip manufacturer to design and fabricate a dedicated integrated circuit chip. Moreover, today, instead of manually making integrated circuit chips, this programming is mostly implemented using "logic compiler" software, which is similar to the software compiler used in programming development, but before compiling The original code has to be written in a specific programming language. This is called the Hardware Description Language (HDL). HDL is not the only one, but there are many kinds, such as ABEL (Advanced Boolean Expression Language). AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc., are currently the most commonly used VHDL (Very-High-Speed Integrated Circuit Hardware Description Language) and Verilog. It should also be apparent to those skilled in the art that the hardware flow for implementing the logic method flow can be easily obtained by simply programming the method flow into the integrated circuit with a few hardware description languages.

The controller can be implemented in any suitable manner, for example, the controller can take the form of, for example, a microprocessor or processor and a computer readable medium storing computer readable program code (eg, software or firmware) executable by the (micro)processor. In the form of logic gates, switches, application specific integrated circuits (ASICs), programmable logic controllers, and embedded microcontrollers, examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, The Microchip PIC18F26K20 and the Silicone Labs C8051F320, the memory controller can also be implemented as part of the memory's control logic. Those skilled in the art will also appreciate that in addition to implementing the controller in purely computer readable program code, the controller can be logically programmed by means of logic gates, switches, ASICs, programmable logic controllers, and embedding. The form of a microcontroller or the like to achieve the same function. Such a controller can therefore be considered a hardware component, and the means for implementing various functions included therein can also be considered as a structure within the hardware component. Or even a device for implementing various functions can be considered as a software module that can be both a method of implementation and a structure within a hardware component.

The system, device, module or unit illustrated in the above embodiments may be implemented by a computer chip or an entity, or by a product having a certain function. A typical implementation device is a computer. Specifically, the computer can be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or A combination of any of these devices.

For the convenience of description, the above devices are described separately by function into various units. Of course, the functions of the various units may be implemented in one or more software and/or hardware in the implementation of the present specification.

Those skilled in the art will appreciate that embodiments of the specification can be provided as a method, system, or computer program product. Thus, embodiments of the present specification can take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, embodiments of the present specification can take the form of a computer program product embodied on one or more computer usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code.

The present description is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present specification. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include non-persistent memory, random access memory (RAM), and/or non-volatile memory in a computer readable medium, such as read only memory (ROM) or flash memory. Memory is an example of a computer readable medium.

Computer readable media includes both permanent and non-persistent, removable and non-removable media. Information storage can be implemented by any method or technology. The information can be computer readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read only memory. (ROM), electrically erasable programmable read only memory (EEPROM), flash memory or other memory technology, compact disk read only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, Magnetic tape cartridges, magnetic tape storage or other magnetic storage devices or any other non-transportable media can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary storage of computer readable media, such as modulated data signals and carrier waves.

It is also to be understood that the terms "comprises" or "comprising" or "comprising" or any other variations are intended to encompass a non-exclusive inclusion, such that a process, method, article, Other elements not explicitly listed, or elements that are inherent to such a process, method, commodity, or equipment. An element defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, method, item, or device including the element.

This description can be described in the general context of computer-executable instructions executed by a computer, such as a program module. Generally, program modules include routines, programs, objects, components, data structures, and the like that perform particular tasks or implement particular abstract data types. The present specification can also be practiced in distributed computing environments where tasks are performed by remote processing devices that are connected through a communication network. In a distributed computing environment, program modules can be located in both local and remote computer storage media including storage devices.

The various embodiments in the specification are described in a progressive manner, and the same or similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiment.

The above description is only for the embodiments of the present specification, and is not intended to limit the application. Various changes and modifications can be made to the present application by those skilled in the art. Any modifications, equivalents, improvements, etc. made within the spirit and scope of the present application are intended to be included within the scope of the appended claims.

Claims

A data statistics method based on an obfuscated circuit, comprising:

Grouping each node to obtain a plurality of node groups including at most two nodes;

Performing partial service data exchange between nodes in the node group, and obtaining statistical data in the group according to the data after the exchange and the statistical data of the obfuscation circuit, wherein the obfuscation circuit is used for confusing the statistical process and hiding statistics based on the random number result;

Performing inter-node group statistics according to the statistical data in the group, and obtaining inter-group statistical data;

The statistical data of the group is restored by using the corresponding random number to obtain a final statistical result.
The method of claim 1, wherein the performing inter-node partial service data exchange in the node group comprises:

Separating the service data of each node in the node group into two parts according to the secret sharing protocol, wherein the service data before the splitting can be restored according to the XOR result of the two parts;

If the node group includes the first node and the second node, a part of the data split by the two nodes is exchanged.
The method according to claim 2, wherein the statistical data of the group is obtained according to the data after the exchange and the data of the obfuscation circuit, which specifically includes:

Generating an obfuscating circuit that takes the exchanged data and the random number as input;

According to the exchanged data and the obfuscation circuit, the service data is collected through the interaction between the first node and the second node, and the statistical data in the group is obtained.
The method of claim 3, before the obtaining the intra-group statistical data, the method further comprises:

The first node generates and holds a first random number, and the second node generates and holds a second random number;

According to the exchanged data and the obfuscation circuit, the service data is collected through the interaction between the first node and the second node, and the statistical data in the group is obtained, which specifically includes:

Passing the interaction between the first node and the second node, the first node inputs the first random number and its own exchanged data, and the second node inputs the second random number and its own exchanged data into the Confusing the circuit statistics service data to obtain statistical data within the group;

The statistical data in the group includes: an XOR result of the first output result of the obfuscation circuit and the first random number, which is held by the first node; and the second random number is held by the second node .
The method of claim 4, wherein the obtaining the statistical data in the group comprises:

The second node obtains the first output result of the obfuscation circuit and sends the result to the first node;

The first node performs an exclusive-OR operation on the first random number and the received first output result of the obfuscation circuit to obtain a corresponding statistical result in a hidden state, which is numerically equal to the corresponding statistical result and the second random number The XOR result of the number.
The method of claim 4, if the other node group includes a third node corresponding to the first node and a fourth node corresponding to the second node,

Performing statistics on the inter-node groups according to the statistical data in the group, and obtaining statistical data between the groups, specifically including:

The first node and the third node are respectively used as representative nodes of the node group to which they belong, and random number exchange is performed;

According to the post-exchange random number, the corresponding intra-group statistical data and the obfuscation circuit, the inter-group statistics are obtained by the interaction between the representative nodes, and the inter-group statistical data is obtained;

The obfuscation circuit takes the post-exchange random number and the statistical data of the partial group corresponding to the representative node as input, and the random number exchange includes: the second node sends the second random number to the third node, and the fourth node Sending the corresponding fourth random number to the first node.
The method according to claim 6, wherein the inter-group statistical data comprises: an exclusive OR result of the second output result of the obfuscation circuit and a fifth random number generated by the first node between the node groups, by the first The node holds; the third node is a sixth random number generated and held by the node group.
The method of claim 7, wherein if the second output is statistic for all nodes, the statistic data is restored by using the corresponding random number to obtain a final statistical result, which specifically includes:

The third node sends the sixth random number to the first node;

The first node performs an exclusive-OR operation on the sixth random number and the statistical data between the groups, and restores the hidden corresponding statistical result as a final statistical result.
The method according to claim 7, wherein if the second output result is not calculated for all nodes, the method uses the corresponding random number to restore the statistical data between the groups to obtain a final statistical result. Also includes:

Continue to iterate the statistics until you get: the statistics between the groups obtained after the statistics of all the nodes are completed, and are used to restore the final statistical results.
The method of claim 4, if another node group only includes the third node,

Performing statistics on the inter-node groups according to the statistical data in the group, and obtaining statistical data between the groups, specifically including:

The first node and the third node are respectively used as representative nodes of the node group to which they belong, and data is exchanged;

According to the data after the exchange, the statistical data of the group corresponding to the representative nodes, and the obfuscation circuit, the statistics between the nodes are performed by the interaction between the representative nodes, and the statistical data between the groups is obtained;

The obfuscation circuit takes the post-exchange data and the statistical data of the partial group corresponding to the representative node as input, and the data exchange includes: the second node sends the second random number to the third node, and the third node is based on A part of the data split by the secret sharing protocol is sent to the first node.
The method according to claim 10, wherein the inter-group statistical data comprises: an exclusive OR result of the third output result of the obfuscation circuit and a fifth random number statistically generated by the first node between the node groups, by the first The node holds; the third node is a sixth random number generated and held by the node group.
The method of any one of claims 1 to 11, the node comprising a financial institution server.
A data statistics device based on an obfuscated circuit, comprising:

a grouping module, grouping each node to obtain a plurality of node groups including at most two nodes;

The intra-group statistical module performs partial service data exchange between nodes in the node group, and obtains statistical data in the group according to the exchanged data and the obfuscated circuit statistical service data, wherein the obfuscating circuit is used to confuse the statistical process, and Hide statistical results based on random numbers;

The inter-group statistics module performs statistics between the node groups according to the statistical data in the group, and obtains statistical data between the groups;

The restoration module restores the statistical data between the groups by using a corresponding random number to obtain a final statistical result.
The apparatus according to claim 13, wherein the intra-group statistic module performs part-to-node service data exchange between the node groups, and specifically includes:

The intra-group statistic module splits the service data of each node in the node group into two parts based on the secret sharing protocol, wherein the service data before the splitting can be restored according to the XOR result of the two parts;

If the node group includes the first node and the second node, a part of the data split by the two nodes is exchanged.
The apparatus according to claim 14, wherein the in-group statistic module obtains statistical data in the group according to the exchanged data and the confusing circuit statistical service data, and specifically includes:

The intra-group statistic module generates an obfuscating circuit that takes the exchanged data and the random number as input;

According to the exchanged data and the obfuscation circuit, the service data is collected through the interaction between the first node and the second node, and the statistical data in the group is obtained.
The apparatus according to claim 15, wherein the first node generates and holds a first random number, and the second node generates and holds a second random number before the intra-group statistical module obtains the intra-group statistical data;

The intra-group statistic module obtains statistical data of the group by using the exchanged data and the obfuscation circuit, and the statistical data is obtained by the interaction between the first node and the second node, and specifically includes:

The intra-group statistic module passes the interaction between the first node and the second node, the first node will use the first random number and its own post-exchange data, and the second node will use the second random number and its own After exchanging data, input the confusing circuit statistical service data to obtain statistical data in the group;

The statistical data in the group includes: an XOR result of the first output result of the obfuscation circuit and the first random number, which is held by the first node; and the second random number is held by the second node .
The apparatus according to claim 16, wherein the in-group statistic module obtains intra-group statistics, and specifically includes:

The second node obtains the first output result of the obfuscation circuit and sends the result to the first node;

The first node performs an exclusive-OR operation on the first random number and the received first output result of the obfuscation circuit to obtain a corresponding statistical result in a hidden state, which is numerically equal to the corresponding statistical result and the second random number The XOR result of the number.
The apparatus according to claim 16, wherein another node group includes a third node corresponding to the first node, and a fourth node corresponding to the second node,

The inter-group statistic module performs inter-node group statistics according to the statistical data in the group, and obtains inter-group statistic data, which specifically includes:

The inter-group statistic module uses the first node and the third node as representative nodes of the node group to which they belong, and performs random number exchange;

According to the post-exchange random number, the corresponding intra-group statistical data and the obfuscation circuit, the inter-group statistics are obtained by the interaction between the representative nodes, and the inter-group statistical data is obtained;

The obfuscation circuit takes the post-exchange random number and the statistical data of the partial group corresponding to the representative node as input, and the random number exchange includes: the second node sends the second random number to the third node, and the fourth node Sending the corresponding fourth random number to the first node.
The apparatus according to claim 18, wherein the inter-group statistical data comprises: an exclusive OR result of the second output result of the obfuscation circuit and a fifth random number statistically generated by the first node between the node groups, by the first The node holds; the third node is a sixth random number generated and held by the node group.
The apparatus according to claim 19, wherein if the second output result is calculated for all nodes, the restoring module uses the corresponding random number to restore the statistical data between the groups to obtain a final statistical result, which specifically includes :

The third node sends the sixth random number to the first node;

The first node performs an exclusive-OR operation on the sixth random number and the statistical data between the groups, and restores the hidden corresponding statistical result as a final statistical result.
The apparatus according to claim 19, wherein if the second output result is not counted for all nodes, the restoring module uses the corresponding random number to restore the statistical data between the groups to obtain a final statistical result. The inter-group statistics module continues to iterate the statistics until it is obtained: the inter-group statistics obtained after the statistics of all the nodes are completed, and are used to restore the final statistical results.
The apparatus according to claim 16, if the other node group only includes the third node,

The inter-group statistic module performs inter-node group statistics according to the statistical data in the group, and obtains inter-group statistic data, which specifically includes:

The inter-group statistic module uses the first node and the third node as representative nodes of the node group to which it belongs, and performs data exchange;

According to the data after the exchange, the statistical data of the group corresponding to the representative nodes, and the obfuscation circuit, the statistics between the nodes are performed by the interaction between the representative nodes, and the statistical data between the groups is obtained;

The obfuscation circuit takes the post-exchange data and the statistical data of the partial group corresponding to the representative node as input, and the data exchange includes: the second node sends the second random number to the third node, and the third node is based on A part of the data split by the secret sharing protocol is sent to the first node.
The apparatus according to claim 22, wherein the inter-group statistical data comprises: an XOR result of the third output result of the obfuscation circuit and a fifth random number statistically generated by the first node between the node groups, by the first The node holds; the third node is a sixth random number generated and held by the node group.
The apparatus of any one of claims 13 to 23, said node comprising a financial institution server.
A data statistics device based on an obfuscated circuit, comprising:

At least one processor; and,

a memory communicatively coupled to the at least one processor; wherein

The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:

Grouping each node to obtain a plurality of node groups including at most two nodes;

Performing partial service data exchange between nodes in the node group, and obtaining statistical data in the group according to the data after the exchange and the statistical data of the obfuscation circuit, wherein the obfuscation circuit is used for confusing the statistical process and hiding statistics based on the random number result;

Performing inter-node group statistics according to the statistical data in the group, and obtaining inter-group statistical data;

The statistical data of the group is restored by using the corresponding random number to obtain a final statistical result.