WO2020211074A1

WO2020211074A1 - Multi-party secure computing data processing method, apparatus and system

Info

Publication number: WO2020211074A1
Application number: PCT/CN2019/083425
Authority: WO
Inventors: 陈元丰; 李升林; 王嘉兴; 孙立林
Original assignee: 云图有限公司
Priority date: 2019-04-19
Filing date: 2019-04-19
Publication date: 2020-10-22

Abstract

Disclosed in embodiments of the present description are a multi-party secure computing data processing method, apparatus, and system. The method comprises: generating multi-party secure algorithm source code data of a target application scenario on the basis of a pre-built multi-party secure operation library, the multi-party secure operation library comprising a Boolean circuit functional component written on the basis of a preset language; compiling the multi-party secure algorithm source code data to obtain an intermediate code file; and performing analysis and execution processing on the intermediate code file to obtain an execution result of the target application scenario. The use of various embodiments of the present description may improve the simplicity of generating multi-party secure computing algorithm source code data and the efficiency of subsequent compilation and execution processing.

Description

Multi-party safe calculation data processing method, device and system

Technical field

The present invention relates to the technical field of computer data processing, and in particular, to a method, device and system for multi-party secure computing data processing.

Background technique

Multi-party security calculations are usually implemented based on Boolean circuits. The developer first writes the algorithm to realize the multi-party security calculation in a certain scenario, then uses the circuit compiler to compile the written algorithm into a Boolean circuit file, and then uses the virtual machine to parse and execute the Boolean circuit file.

Since the Boolean circuit file does not have the so-called LOOP\IF-ELSE\CALL Function and other characteristics, it is necessary to expand all the loops, functions, IF-ELSE and other statements used in the algorithm source code, so that the Boolean circuit file generated after compilation is very large. Conducive to transmission, storage, execution and other operations. In addition, since current circuit compilers correspond to specific programming languages, and the algorithm types are usually high-level languages oriented to specific fields, there are some differences and limitations with mainstream high-level languages. Therefore, developers also need to learn the grammatical details of this language, which brings a lot of inconvenience to developers.

Summary of the invention

The purpose of the embodiments of this specification is to provide a multi-party secure computing data processing method, device, and system, which can improve the simplicity of generating source code data of multi-party secure computing algorithms and the efficiency of subsequent compilation and execution processing.

This manual provides a multi-party secure computing data processing method, device and system, which are implemented in the following ways:

A multi-party secure computing data processing method, including:

Generate multi-party security algorithm source code data of the target application scenario based on a pre-built multi-party security computing library, the multi-party security computing library including Boolean circuit functional components written based on a preset language;

Compile and process the source data of the multi-party security algorithm to obtain an intermediate code file;

Perform analysis and execution processing on the intermediate code file to obtain an execution result of the target application scenario.

In another embodiment of the method provided in this specification, the compiling processing of the source code data of the multi-party security algorithm includes:

The LLVM compiler is used to compile and process the source code data of the multi-party security algorithm.

In another embodiment of the method provided in this specification, the parsing and execution processing of the intermediate code file includes:

A JIT compiler is used to parse and execute the intermediate code file.

On the other hand, the embodiment of this specification also provides a multi-party secure computing data processing device, the device includes:

The source code data generation module is used to generate the multi-party security algorithm source code data of the target application scenario based on the pre-built multi-party security calculation library, the multi-party security calculation library including the Boolean circuit functional components written based on the preset language;

The intermediate code generation module is used to compile and process the source data of the multi-party security algorithm to obtain an intermediate code file;

The analysis execution module is configured to perform analysis and execution processing on the intermediate code file to obtain the execution result of the target application scenario.

In another embodiment of the device provided in this specification, the intermediate code generation module is further configured to use an LLVM compiler to compile and process the source code data of the multi-party security algorithm.

In another embodiment of the device provided in this specification, the analysis execution module is further configured to use a JIT compiler to analyze and execute the intermediate code file to obtain an execution result.

On the other hand, the embodiment of the present specification also provides a multi-party secure computing data processing device, including a processor and a memory for storing executable instructions of the processor, the instructions being executed by the processor include the following steps:

On the other hand, the embodiments of the present specification also provide a multi-party secure computing data processing system. The multi-party secure computing data processing system includes at least one processor and a memory storing computer-executable instructions. When the processor executes the instructions, Implement the steps of the method described in any one of the above embodiments.

On the other hand, the embodiments of this specification also provide a multi-party secure computing data processing system, the system includes a multi-party secure computing library, an algorithm generation module, and an LLVM compiler, wherein:

The multi-party safe operation library includes Boolean circuit function components written based on a preset language;

The algorithm generating module is used to generate the source code data of the multi-party security algorithm based on the Boolean circuit functional components in the multi-party security operation library;

The LLVM compiler is used to compile and process the source code data of the multi-party security algorithm to obtain an intermediate code file.

In another embodiment of the system provided in this specification, the system further includes a JIT compiler, and the JIT compiler is used to analyze and execute the intermediate code file to obtain an execution result.

The multi-party secure computing data processing method, device, and system provided by one or more embodiments of this specification can be based on a pre-built multi-party secure computing library to easily and conveniently implement multi-party secure algorithm writing. The multi-party safe operation library is encapsulated with a pre-written Boolean circuit function implementation program, so that complex logic calculations can be completed with the help of the multi-party safe operation library during the algorithm writing process, avoiding the algorithm source code and circuit compilation processing process. And by using a multi-party secure computing library, the intermediate code file obtained after the algorithm source code is compiled is much smaller than the Boolean circuit file, which further improves the subsequent data transmission and execution efficiency.

Description of the drawings

In order to more clearly explain the technical solutions in the embodiments of this specification or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments described in this specification. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative labor. In the attached picture:

FIG. 1 is a schematic flowchart of an embodiment of a method for processing multi-party secure computing data provided in this specification;

FIG. 2 is a schematic flowchart of another embodiment of a multi-party secure computing data processing method provided in this specification;

3 is a schematic diagram of the module structure of an embodiment of a multi-party secure computing data processing device provided in this specification;

Fig. 4 is a schematic structural diagram of a multi-party secure computing data processing system in an embodiment provided in this specification.

detailed description

In order to enable those skilled in the art to better understand the technical solutions in this specification, the following will make clear and complete the technical solutions in one or more embodiments of this specification in conjunction with the drawings in one or more embodiments of this specification. It is obvious that the described embodiments are only a part of the embodiments in the specification, rather than all the embodiments. Based on one or more embodiments of the specification, all other embodiments obtained by a person of ordinary skill in the art without creative work shall fall within the protection scope of the embodiment scheme of this specification.

At present, multi-party security calculations are usually implemented based on Boolean circuits. First, the developer writes algorithms for realizing multi-party security calculations in a certain scenario, then uses a specific circuit compiler to compile the written algorithms into Boolean circuit files, and then parses and executes the Boolean circuit files to obtain the execution results. However, the current Boolean circuit files compiled by the circuit compiler are very large, which is not conducive to operations such as transmission, storage, and execution, and the algorithm source code compilation language type of the circuit compiler is relatively single, which is not conducive to large-scale promotion.

Correspondingly, the embodiments of this specification provide a multi-party secure computing data processing method, which can simply and conveniently implement the writing of multi-party secure algorithms based on a pre-built multi-party secure computing library. The multi-party safe operation library is encapsulated with a pre-written Boolean circuit function implementation program, so that complex logic calculations can be completed with the help of the multi-party safe operation library during the algorithm writing process, avoiding the algorithm source code and circuit compilation processing process. And by using a multi-party secure computing library, the intermediate code file obtained after the algorithm source code is compiled is much smaller than the Boolean circuit file, which further improves the subsequent data transmission and execution efficiency.

One or more embodiments of this specification provide a multi-party secure computing data processing method. Fig. 1 is a schematic flowchart of an embodiment of the method for processing multi-party secure computing data provided in this specification. Although this specification provides method operation steps or device structures as shown in the following embodiments or drawings, the method or device may include more or fewer operation steps after partial combination based on conventional or no creative labor. Or modular unit. In steps or structures where there is no necessary causal relationship logically, the execution order of these steps or the module structure of the device is not limited to the execution order or module structure shown in the embodiments of this specification or the drawings. When the described method or module structure is applied to an actual device, server or terminal product, it can be executed sequentially or in parallel according to the method or module structure shown in the embodiments or drawings (for example, parallel processor or multi-threaded processing). Environment, even including distributed processing, server cluster implementation environment).

A specific embodiment is shown in Fig. 1. In an embodiment of the multi-party secure computing data processing method provided in this specification, the method may include:

S202: Generate multi-party security algorithm source code data of the target application scenario based on a pre-built multi-party security calculation library, the multi-party security calculation library including a Boolean circuit function component written based on a preset language.

The multi-party security algorithm source code data may be generated based on a pre-built multi-party security algorithm library, which may include Boolean circuit functional components written based on a preset language.

In some embodiments, the Boolean circuit function corresponding to the multi-party security calculation can be written in a preset type of development language in advance, and then the compiled program is packaged to obtain a series of Boolean circuit function components to form a multi-party security calculation library ( Integer library). The preset types of development languages may include mainstream development languages such as C, C++, Java, Python, etc., and may also be other development languages in specific fields. Table 1 shows the operators that can be supported by part of the multi-party security operation library.

Table 1 Operators supported by the multi-party safe operation library

In actual application scenarios, users can choose the type of development language for writing algorithm source code according to their own needs, and then can use the Integer library to write multi-party secure computing algorithms in the target application scenario. The language type for generating the source code data of the multi-party security algorithm can be mainstream development languages such as C, C++, Java, Python, etc., or other development languages in specific fields.

In the process of writing the algorithm source code, the user can call the Boolean circuit functional components in the multi-party safe operation library to complete the logical calculation of the corresponding function. The multi-party safe operation library can feedback the operation result after the operation is completed. Therefore, based on the multi-party secure computing library, users can easily and conveniently write multi-party secure computing algorithms. Moreover, the written algorithm source code does not need to be converted into a Boolean circuit file for execution, thereby further improving the convenience of subsequent data compilation and execution processing.

S204: Compile and process the source code data of the multi-party security algorithm to obtain an intermediate code file.

It can be seen from the content of the foregoing embodiments that the Boolean circuit function corresponding to the multi-party secure calculation has been encapsulated in the Integer library, and the algorithm source code written based on the Integer library does not need to be compiled into a circuit file for execution by means of a circuit compiler. Correspondingly, in some embodiments of this specification, the user can select a compiler according to the language type of the algorithm source code and performance requirements, etc., to compile and process the multi-party security algorithm source code data.

FIG. 2 shows a schematic diagram of a data processing flow of a multi-party security algorithm in another or more embodiments provided in this specification. As shown in Figure 2, preferably, in an embodiment of this specification, the following methods can be used to compile and process the source code data of the multi-party security algorithm:

S2040: Use an LLVM compiler to compile and process the source code data of the multi-party security algorithm.

The LLVM compiler (Low Level Virtual Machine, underlying virtual machine) can be used to perform operations such as lexical analysis, syntax analysis, semantic analysis, and execution optimization on the multi-party security algorithm source code data to generate LLVM intermediate code data, that is, LLVM IR data.

The LLVM compiler can be used to compile and optimize algorithms written in any programming language, so that the programming language of the algorithm source code is no longer limited to a specific programming language, facilitating the large-scale promotion of multi-party secure computing. At the same time, the LLVM compiler can also be used to optimize the algorithm source code, which can further improve the executable of the optimized data.

The LLVM compiler can first perform lexical analysis, syntax analysis, and semantic analysis on the source data of multi-party security algorithms, complete error handling and language optimization. Then, the above-mentioned processed algorithm data can be compiled, optimized and converted, such as code simplification and static single assignment. In specific implementation, you can also use the optimization framework of LLVM to set the optimization method yourself according to actual needs. After the LLVM compiler compiles the source code data of the multi-party security algorithm, it can generate an intermediate code (IR) file corresponding to the LLVM, and the LLVM compiler can return the generated LLVM IR file.

By using the Integer library encapsulated with Boolean circuit functions to write the algorithm source code, and further using LLVM's syntax analysis and code optimization technology, the final intermediate code file obtained can be much smaller than the Boolean circuit file, and the obtained intermediate code data is more convenient for execution and processing .

S206: Perform analysis and execution processing on the intermediate code file to obtain an execution result of the target application scenario.

The intermediate code data can be further parsed and executed through a virtual machine to obtain the execution result of the target application scenario. As shown in Figure 2, preferably, in an embodiment of this specification, the intermediate code file can be parsed and executed in the following manner:

S2060: Use a JIT compiler to parse and execute the intermediate code file.

Users can call the JIT compiler with multi-party security input data as parameters to execute the algorithm functions in the LLVM IR file. After obtaining the LLVM IR file, the JIT compiler can parse the LLVM IR file to ensure the correctness of the LLVM IR file format. If there is an error in the analysis, the LLVM IR file may not be retrieved, or there may be a problem with the LLVM IR file itself. Correspondingly, the result error information can be feedback to the customer.

If there is no error, the JIT compiler can find the algorithm function to be executed by the user according to the entered multi-party security input data, and perform dynamic compilation and linking. Specifically, the algorithm function can be compiled into binary, and then linked into executable code for execution. The JIT compiler executes the linked function and returns the result to the user.

During the execution of the JIT compiler, when an algorithm function is executed for the first time, the function can be compiled into machine language, and internal storage will be carried out at the same time; when the algorithm function is executed again, the compiled machine can be directly executed Language. Thus the use of JIT compiler can greatly improve the efficiency of analysis and execution.

The solution provided by the above-mentioned embodiments of this specification uses the Integer library encapsulated with the Boolean circuit function to write the algorithm source code, and further uses the code optimization technology of LLVM, so that the final intermediate code file obtained is much smaller than the Boolean circuit file and is easier to execute deal with. At the same time, users can choose a familiar language to implement multi-party security algorithms in any scenario according to their own familiarity with the development language, which further improves the ease of writing algorithm source code.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. For details, reference may be made to the description of the foregoing related processing related embodiments, which will not be repeated here.

The foregoing describes specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps described in the claims may be performed in a different order than in the embodiments and still achieve desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or sequential order shown to achieve the desired result. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

The multi-party secure computing data processing method provided by one or more embodiments of this specification can be based on a pre-built multi-party secure computing library to easily and conveniently implement multi-party secure algorithm writing. The multi-party safe operation library is encapsulated with a pre-written Boolean circuit function implementation program, so that complex logic calculations can be completed with the help of the multi-party safe operation library during the algorithm writing process, avoiding the algorithm source code and circuit compilation processing process. And by using a multi-party secure computing library, the intermediate code file obtained after the algorithm source code is compiled is much smaller than the Boolean circuit file, which further improves the subsequent data transmission and execution efficiency.

Based on the aforementioned multi-party secure computing data processing method, one or more embodiments of this specification also provide a multi-party secure computing data processing device. The described devices may include systems, software (applications), modules, components, servers, etc. that use the methods described in the embodiments of this specification, combined with necessary implementation hardware devices. Based on the same innovative concept, the devices in one or more embodiments provided in the embodiments of this specification are as described in the following embodiments. Since the implementation scheme of the device to solve the problem is similar to the method, the implementation of the specific device in the embodiment of this specification can refer to the implementation of the foregoing method, and the repetition will not be repeated. As used below, the term "unit" or "module" can be a combination of software and/or hardware that implements predetermined functions. Although the devices described in the following embodiments are preferably implemented by software, hardware or a combination of software and hardware is also possible and conceived. Specifically, FIG. 3 shows a schematic diagram of the module structure of an embodiment of a multi-party secure computing data processing device provided in the specification. As shown in FIG. 3, the device may include:

The source code data generation module 102 can be used to generate multi-party security algorithm source code data of the target application scenario based on a pre-built multi-party security calculation library, which includes a Boolean circuit functional component written based on a preset language;

The intermediate code generation module 104 may be used to compile and process the source code data of the multi-party security algorithm to obtain an intermediate code file;

The analysis execution module 106 may be used to perform analysis and execution processing on the intermediate code file to obtain the execution result of the target application scenario.

Using the solution provided by the foregoing embodiment can avoid the process of performing circuit compilation processing on the algorithm source code, and the intermediate code file obtained after compilation is much smaller than the Boolean circuit file, which can further improve the subsequent data transmission and execution efficiency.

In another embodiment of this specification, the intermediate code generation module 104 may also be used to compile and process the source code data of the multi-party security algorithm by using an LLVM compiler.

Utilizing the solutions provided by the foregoing embodiments can further improve the ease of writing algorithm source code and the executable of the intermediate code obtained after compilation.

In another embodiment of the present specification, the analysis execution module 106 may also be used to analyze and execute the intermediate code file by using a JIT compiler to obtain an execution result.

Utilizing the solutions provided by the foregoing embodiments can further improve the efficiency of analysis execution.

It should be noted that the above-mentioned device may also include other implementation manners according to the description of the method embodiment. For specific implementation manners, reference may be made to the description of the related method embodiments, which will not be repeated here.

The multi-party secure computing data processing device provided by one or more embodiments of this specification can implement the compilation of multi-party secure algorithms simply and conveniently based on a pre-built multi-party secure computing library. The multi-party safe operation library is encapsulated with a pre-written Boolean circuit function implementation program, so that complex logic calculations can be completed with the help of the multi-party safe operation library during the algorithm writing process, avoiding the algorithm source code and circuit compilation processing process. And by using a multi-party secure computing library, the intermediate code file obtained after the algorithm source code is compiled is much smaller than the Boolean circuit file, which further improves the subsequent data transmission and execution efficiency.

The method or device described in the foregoing embodiment provided in this specification can implement business logic through a computer program and record it on a storage medium, and the storage medium can be read and executed by a computer to achieve the effects of the solution described in the embodiment of this specification. Therefore, this specification also provides a multi-party secure computing data processing device, including a processor and a memory storing processor-executable instructions. When the instructions are executed by the processor, the implementation includes the following steps:

The storage medium may include a physical device for storing information, and the information is usually digitized and then stored in an electric, magnetic, or optical medium. The storage medium may include: devices that use electrical energy to store information, such as various types of memory, such as RAM, ROM, etc.; devices that use magnetic energy to store information, such as hard disks, floppy disks, magnetic tapes, magnetic core memory, bubble memory, U disk; a device that uses optical means to store information, such as CD or DVD. Of course, there are other ways of readable storage media, such as quantum memory, graphene memory, and so on.

The multi-party secure computing data processing device described in the foregoing embodiment can simply and conveniently implement the writing of multi-party secure algorithms based on a pre-built multi-party secure computing library. The multi-party safe operation library is encapsulated with a pre-written Boolean circuit function implementation program, so that complex logic calculations can be completed with the help of the multi-party safe operation library during the algorithm writing process, avoiding the algorithm source code and circuit compilation processing process. And by using a multi-party secure computing library, the intermediate code file obtained after the algorithm source code is compiled is much smaller than the Boolean circuit file, which further improves the subsequent data transmission and execution efficiency.

This specification also provides a multi-party secure computing data processing system. The system can be a single multi-party secure computing data processing system, or it can be applied to multiple computer data processing systems. The system can be a single server, or it can include server clusters, systems (including distributed systems), software (applications), and one or more of the methods described in this specification or one or more embodiments of the device. The actual operation device, logic gate circuit device, quantum computer, etc., combined with the terminal device necessary to implement the hardware. The multi-party secure computing data processing system may include at least one processor and a memory storing computer-executable instructions. The processor implements the steps of the method in any one or more of the foregoing embodiments when executing the instructions.

Fig. 4 shows a schematic structural diagram of a multi-party secure computing data processing system provided by one or more embodiments of this specification. As shown in Fig. 4, the system may include a multi-party secure computing library, a source code data generation module, and an LLVM compiler.

The multi-party safe operation library may include Boolean circuit function components written based on a preset language;

The algorithm generation module may be used to generate multi-party security algorithm source code data based on the Boolean circuit functional components in the multi-party security operation library;

The LLVM compiler may be used to compile and process the source code data of the multi-party security algorithm to obtain an intermediate code file.

The Boolean circuit functions corresponding to multi-party secure computing can be written in a development language in advance and then packaged in the Integer library. The development language can include mainstream development languages such as C, C++, Java, Python, or other development languages in specific fields.

In actual application scenarios, users can choose the type of development language for writing algorithm source code according to their needs, and then use the Integer library to write multi-party secure computing algorithms in the target application scenario. In the process of writing algorithm source code, users can call the circuit function operating components in the multi-party safe operation library to complete the calculation of the corresponding logic function. The multi-party safe operation library can feedback the operation result after the operation is completed. Thereby, it is simple and convenient to realize the programming of multi-party secure calculation algorithms.

Then, the LLVM compiler can be used to compile the source data of the multi-party security algorithm. The LLVM compiler (Low Level Virtual Machine, underlying virtual machine) can perform operations such as lexical analysis, syntax analysis, semantic analysis, and optimization of the source code data of the multi-party security algorithm to generate LLVM intermediate code data.

The LLVM compiler can be used to compile and optimize algorithms written in any programming language, so that the programming language of the algorithm source code is no longer limited to the programming language of a specific field, which is convenient for the large-scale promotion of multi-party secure computing. At the same time, the LLVM compiler can also be used to optimize the algorithm source code, which can further improve the executable of the optimized data.

As shown in FIG. 4, in another embodiment of the present specification, the system may further include a JIT compiler, and the JIT compiler may be used to analyze and execute the intermediate code file to obtain the execution result.

A JIT compiler can be used to parse and execute the intermediate code file. Users can use multi-party security input data as parameters to call JIT to execute algorithm functions in LLVM IR files. After the JIT compiler retrieves the LLVM IR file, it can parse the LLVM IR file first to ensure the correctness of the LLVM IR file format. If the file format is correct, the JIT compiler can find the algorithm function to be executed by the user according to the input multi-party security input data, and perform dynamic compilation and linking. Specifically, the algorithm function can be compiled into binary, and then linked into executable code for execution. The JIT compiler executes the linked function and can return the result to the user.

The system provided by the above-mentioned embodiment of this specification uses the Integer library encapsulated with the Boolean circuit function to write the algorithm source code, and further uses the code optimization technology of LLVM to make the final intermediate code file much smaller than the Boolean circuit file, and the intermediate code file It is easier to perform processing. In addition, the LLVM compiler can adapt to any source code writing language, which can further improve the simplicity of algorithm writing.

It should be noted that the above-mentioned system may also include other implementation manners based on the description of the method or device embodiment. For the specific implementation manner, reference may be made to the description of the relevant method embodiment, which will not be repeated here.

The multi-party secure computing data processing system described in the foregoing embodiment can simply and conveniently implement the writing of multi-party secure algorithms based on a pre-built multi-party secure computing library. The multi-party safe operation library is encapsulated with a pre-written Boolean circuit function implementation program, so that complex logic calculations can be completed with the help of the multi-party safe operation library during the algorithm writing process, avoiding the algorithm source code and circuit compilation processing process. And by using a multi-party secure computing library, the intermediate code file obtained after the algorithm source code is compiled is much smaller than the Boolean circuit file, which further improves the subsequent data transmission and execution efficiency.

It should be noted that the device or system described above in this specification may also include other implementation manners based on the description of the related method embodiments. For specific implementation manners, refer to the description of the method embodiments, which will not be repeated here. The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, as for the hardware+program and storage medium+program embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiments.

Although the IR file analysis, function execution and other operations and data description mentioned in the content of the embodiments of this specification, such as acquisition, definition, interaction, calculation, judgment, etc., are not limited to the embodiments of this specification that must conform to the standard data model/template. Or the situation described in the embodiment of this specification. Certain industry standards or implementations described in custom methods or examples with slight modifications can also achieve the same, equivalent or similar implementation effects of the foregoing examples, or predictable implementation effects after modification. The examples obtained by applying these modified or deformed data acquisition, storage, judgment, processing methods, etc., may still fall within the scope of the optional implementation solutions of this specification.

The systems, devices, modules, or units explained in the foregoing embodiments may be specifically implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a vehicle-mounted human-computer interaction device, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, and a tablet. Computers, wearable devices, or any combination of these devices.

For the convenience of description, when describing the above device, the functions are divided into various modules and described separately. Of course, when implementing one or more of this specification, the function of each module can be realized in the same one or more software and/or hardware, or the module that realizes the same function can be realized by a combination of multiple sub-modules or sub-units, etc. . The device embodiments described above are merely illustrative, for example, the division of the units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components can be combined or integrated To another system, or some features can be ignored, or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

Those skilled in the art also know that in addition to implementing the controller in a purely computer-readable program code manner, it is entirely possible to program the method steps to make the controller use logic gates, switches, application specific integrated circuits, programmable logic controllers and embedded The same function can be realized in the form of a microcontroller, etc. Therefore, such a controller can be regarded as a hardware component, and the devices included in the controller for realizing various functions can also be regarded as a structure within the hardware component. Or even, the device for realizing various functions can be regarded as both a software module for realizing the method and a structure within a hardware component.

The present invention is described with reference to flowcharts and/or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and/or block in the flowchart and/or block diagram, and the combination of processes and/or blocks in the flowchart and/or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing equipment to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing equipment are generated It is a device that realizes the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing equipment to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction device. The device implements the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be loaded on a computer or other programmable data processing equipment, so that a series of operation steps are executed on the computer or other programmable equipment to produce computer-implemented processing, so as to execute on the computer or other programmable equipment. The instructions provide steps for implementing functions specified in a flow or multiple flows in the flowchart and/or a block or multiple blocks in the block diagram.

In a typical configuration, the computing device includes one or more processors (CPU), input/output interfaces, network interfaces, and memory.

It should also be noted that the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, product or equipment including a series of elements not only includes those elements, but also includes Other elements that are not explicitly listed, or include elements inherent to this process, method, commodity, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other same elements in the process, method, or device that includes the element.

Those skilled in the art should understand that one or more embodiments of this specification can be provided as a method, a system, or a computer program product. Therefore, one or more embodiments of this specification may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, one or more embodiments of this specification may adopt a computer program implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. The form of the product.

One or more embodiments of this specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more embodiments of this specification can also be practiced in distributed computing environments. In these distributed computing environments, tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, as for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment. In the description of this specification, descriptions with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" etc. mean specific features described in conjunction with the embodiment or example , Structure, materials or features are included in at least one embodiment or example in this specification. In this specification, the schematic representations of the above-mentioned terms do not necessarily refer to the same embodiment or example. Moreover, the described specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art can combine and combine the different embodiments or examples and the characteristics of the different embodiments or examples described in this specification without contradicting each other.

The above descriptions are only examples of this specification and are not intended to limit this specification. For those skilled in the art, this specification can have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this specification shall be included in the scope of the claims of this specification.

Claims

A multi-party secure computing data processing method, characterized in that it comprises:

Generate multi-party security algorithm source code data of the target application scenario based on a pre-built multi-party security computing library, the multi-party security computing library including Boolean circuit functional components written based on a preset language;

Compile and process the source data of the multi-party security algorithm to obtain an intermediate code file;

Perform analysis and execution processing on the intermediate code file to obtain an execution result of the target application scenario.
The method according to claim 1, wherein said compiling and processing said multi-party security algorithm source code data comprises:

The LLVM compiler is used to compile and process the source code data of the multi-party security algorithm.
The method according to claim 1 or 2, wherein the parsing and executing processing of the intermediate code file comprises:

A JIT compiler is used to parse and execute the intermediate code file.
A multi-party secure computing data processing device, characterized in that the device includes:

The source code data generation module is used to generate the multi-party security algorithm source code data of the target application scenario based on the pre-built multi-party security calculation library, the multi-party security calculation library including the Boolean circuit functional components written based on the preset language;

The intermediate code generation module is used to compile and process the source data of the multi-party security algorithm to obtain an intermediate code file;

The analysis execution module is configured to perform analysis and execution processing on the intermediate code file to obtain the execution result of the target application scenario.
The device according to claim 4, wherein the intermediate code generation module is further configured to use an LLVM compiler to compile and process the source code data of the multi-party security algorithm.
The device according to claim 4 or 5, wherein the analysis execution module is further configured to use a JIT compiler to analyze and execute the intermediate code file to obtain an execution result.
A multi-party secure computing data processing device, which is characterized by comprising a processor and a memory for storing executable instructions of the processor, the instructions being executed by the processor including the following steps:

Generate multi-party security algorithm source code data of the target application scenario based on a pre-built multi-party security computing library, the multi-party security computing library including Boolean circuit functional components written based on a preset language;

Compile and process the source data of the multi-party security algorithm to obtain an intermediate code file;

Perform analysis and execution processing on the intermediate code file to obtain an execution result of the target application scenario.
A multi-party secure computing data processing system, wherein the multi-party secure computing data processing system includes at least one processor and a memory storing computer executable instructions, and the processor implements the claim 1 when the instructions are executed. -3 Steps of any of the methods.
A multi-party secure computing data processing system, characterized in that the system includes a multi-party secure computing library, an algorithm generation module and an LLVM compiler, wherein,

The multi-party safe operation library includes Boolean circuit function components written based on a preset language;

The algorithm generating module is used to generate the source code data of the multi-party security algorithm based on the Boolean circuit functional components in the multi-party security operation library;

The LLVM compiler is used to compile and process the source code data of the multi-party security algorithm to obtain an intermediate code file.
The system according to claim 9, wherein the system further comprises a JIT compiler, and the JIT compiler is used to analyze and execute the intermediate code file to obtain an execution result.