WO2022099891A1

WO2022099891A1 - Data query method, apparatus and system, and data set processing method

Info

Publication number: WO2022099891A1
Application number: PCT/CN2020/140634
Authority: WO
Inventors: 邱炜伟; 李伟; 蔡亮; 汪小益; 刘敬
Original assignee: 杭州趣链科技有限公司
Priority date: 2020-11-10
Filing date: 2020-12-29
Publication date: 2022-05-19
Also published as: CN112328640A

Abstract

The present application relates to a data query method, apparatus and system, and a data set processing method. The data query method comprises: performing calculation to obtain first encrypted data according to a first preset prime number, a second preset prime number and data to be queried, and sending the first preset prime number, the first encrypted data and the current data group sequence number to a device to be queried, so that said device acquires a first encrypted data set and second encrypted data; receiving the first encrypted data set and the second encrypted data, and performing calculation to obtain a second encrypted data set according to the first encrypted data set and the second preset prime number; and determining, according to the second encrypted data and the second encrypted data set, a query result corresponding to the data to be queried.

Description

Data query method, device, system and data set processing method

Related applications

This application claims the priority of the Chinese patent application filed on November 10, 2020, the application number is 202011249438.5, and the invention title is "Data query method, device, system and data set processing method", the entire content of which is incorporated herein by reference Applying.

technical field

The present application relates to the field of computer technology, and in particular, to a data query method, apparatus, system, computer equipment and storage medium, as well as a data set processing method, apparatus, computer equipment and storage medium.

Background technique

Protecting the privacy of data collections is a natural or even necessary requirement in many scenarios. For example, when the collection is the address book of a user or the genome of a genetic diagnosis service user, such input must be performed through cryptographic means. Protect. The Privacy-Preserving Set Intersection (PSI) computing technique allows two parties holding their respective sets to jointly compute the intersection of the two sets. At the end of the protocol interaction, one or both parties should get the correct intersection, and not get any information in the other party's set outside the intersection.

However, the privacy-preserving set intersection computing technology needs to allow two parties holding their respective sets to jointly calculate the intersection operation of the two sets. This method may easily lead to data leakage during the data query process and cannot guarantee the privacy of the query data. Querying data is not secure.

SUMMARY OF THE INVENTION

According to various embodiments of the present application, a data query method is provided, comprising the following steps: sending a data query request to a device to be queried; receiving an ordered interval point set, where the ordered interval point set includes the device to be queried obtaining according to the data query request Ordered data group interval points corresponding to the candidate data set; obtain the data to be queried, and determine the current data group serial number corresponding to the to-be-queried data according to the to-be-queried data and the ordered interval point set; according to the first preset prime number, the second preset The prime number and the data to be queried are calculated to obtain the first encrypted data, and the first preset prime number, the first encrypted data and the current data group serial number are sent to the to-be-queried device, so that the to-be-queried device obtains at least one current data corresponding to the current data group serial number , calculate and obtain the first encrypted data set according to the third preset prime number, the first preset prime number and at least one current data, calculate and obtain the second encrypted data according to the first encrypted data and the third preset prime number; receive the first encrypted data set and the second encrypted data, the second encrypted data set is calculated according to the first encrypted data set and the second preset prime number; the query result corresponding to the data to be queried is determined according to the second encrypted data and the second encrypted data set.

According to another aspect of the present application, a data query device is provided, the device includes: a query request sending module, used for sending a data query request to a device to be queried; an ordered interval set receiving module, used for receiving ordered interval points The ordered interval point set includes the ordered data group interval points corresponding to the candidate data set obtained by the device to be queried according to the data query request; the data group serial number determination module is used to obtain the to-be-queried data, according to the to-be-queried data and the ordered interval The point set determines the sequence number of the current data group corresponding to the data to be queried; the encrypted data calculation module is used to calculate and obtain the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, and calculate the first preset prime number, The first encrypted data and the sequence number of the current data group are sent to the device to be queried, so that the device to be queried obtains at least one current data corresponding to the sequence number of the current data group, and calculates according to the third preset prime number, the first preset prime number and the at least one current data Obtain the first encrypted data set, and calculate and obtain the second encrypted data according to the first encrypted data and the third preset prime number; the encrypted data processing module is used for receiving the first encrypted data set and the second encrypted data, according to the first encrypted data set and a second preset prime number to obtain a second encrypted data set; and a query result determination module, configured to determine a query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set.

According to another aspect of the present application, a computer device is provided, comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implements the following steps when executing the computer program: Send a data query request to the device to be queried; receive an ordered interval point set, where the ordered interval point set includes the device to be queried obtains an ordered data group interval point corresponding to the candidate data set according to the data query request; The query data and the ordered interval point set determine the current data group serial number corresponding to the data to be queried; the first encrypted data is obtained by calculating according to the first preset prime number, the second preset prime number, and the data to be queried, and the first preset prime number, the first An encrypted data and the sequence number of the current data group are sent to the device to be queried, so that the device to be queried obtains at least one current data corresponding to the sequence number of the current data group, and is calculated according to the third preset prime number, the first preset prime number and the at least one current data The first encrypted data set is calculated according to the first encrypted data and the third preset prime number to obtain the second encrypted data; the first encrypted data set and the second encrypted data are received, and calculated according to the first encrypted data set and the second preset prime number. A second encrypted data set; determining a query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set.

According to another aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented: sending a data query request to a device to be queried; receiving in an orderly manner The interval point set, the ordered interval point set includes that the device to be queried obtains the interval points of the ordered data group corresponding to the candidate data set according to the data query request; obtains the data to be queried, and determines the data to be queried according to the data to be queried and the ordered interval point set The corresponding current data group serial number; the first encrypted data is calculated according to the first preset prime number, the second preset prime number and the data to be queried, and the first preset prime number, the first encrypted data and the current data group serial number are sent to the to-be-queried data device, so that the device to be queried obtains at least one current data corresponding to the serial number of the current data group, calculates and obtains the first encrypted data set according to the third preset prime number, the first preset prime number and the at least one current data, and obtains the first encrypted data set according to the first encrypted data and The third preset prime number is calculated to obtain the second encrypted data; the first encrypted data set and the second encrypted data are received, and the second encrypted data set is obtained by calculating the first encrypted data set and the second preset prime number; according to the second encrypted data and The second encrypted data set determines the query result corresponding to the data to be queried.

According to another aspect of the present application, a data query system is provided, the system comprising: a query device for acquiring a data query request and sending the data query request to the device to be queried; The query request obtains the ordered interval point set corresponding to the candidate data set, and returns the ordered interval point set to the query device, where the ordered interval point set includes the ordered data group interval points corresponding to the candidate data set; the query device also uses Receiving the ordered interval point set, obtaining the data to be queried, determining the current data group serial number corresponding to the to-be-queried data according to the to-be-queried data and the ordered interval point set, and according to the first preset prime number, the second preset prime number and the to-be-queried data The first encrypted data is obtained by calculation, and the first preset prime number, the first encrypted data and the current data group serial number are sent to the device to be inquired; the device to be inquired is also used to obtain at least one current data corresponding to the current data group serial number, according to the first The first encrypted data set is obtained by calculating the three preset prime numbers, the first preset prime number and at least one current data, the second encrypted data is obtained by calculating the first encrypted data and the third preset prime number, and the first encrypted data set and the third 2. Return the encrypted data to the query device; the query device is further configured to receive the first encrypted data set and the second encrypted data, calculate and obtain the second encrypted data set according to the first encrypted data set and the second preset prime number, and obtain the second encrypted data set according to the second encrypted data set. The data and the second encrypted data set determine a query result corresponding to the data to be queried.

According to another aspect of the present application, a data set processing method is provided, comprising the following steps: obtaining a candidate data set, the candidate data set includes at least one candidate data; The data is processed to obtain a target candidate data set, and the target candidate data set includes at least one candidate hash data; the target candidate data set is grouped according to preset rules to obtain a plurality of candidate data groups; The hash data determines the corresponding data group interval points, and generates an ordered data group interval point set according to each data group interval point.

The above data query method, device, system, computer equipment and storage medium, and data set processing method, device, computer equipment and storage medium, the query device sends a data query request to the device to be queried, and the data query request includes the data to be queried. Sequential interval point set, the ordered interval point set includes the ordered data group interval points corresponding to the candidate data set obtained by the device to be queried according to the data query request, and the current data corresponding to the to-be-queried data is determined according to the to-be-queried data and the ordered interval point set Group serial number, calculate and obtain the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, and send the first preset prime number, the first encrypted data and the current data group serial number to the device to be queried, so that the The device to be queried obtains the current data corresponding to the serial number of the current data set, calculates the first encrypted data set according to the third preset prime number, the first preset prime number and the current data, and obtains the first encrypted data set according to the first encrypted data and the third preset prime number. Second encrypted data, receive the first encrypted data set and the second encrypted data, calculate and obtain the second encrypted data set according to the first encrypted data set and the second preset prime number, and determine the to-be-queried data according to the second encrypted data and the second encrypted data set The query result corresponding to the data.

Therefore, since the ordered interval point set sent by the device to be queried is not a candidate data set in the device to be queried, the interval points of the ordered data groups in these ordered interval point sets are meaningless by themselves, and do not set the interval points to be queried. The candidate data set in the device is sent to the query device, which avoids the leakage of the candidate data set in the device to be queried, and ensures the privacy of the query data, and the data sent by the device to be queried and the query device to the other party are all through the confidential large data. The prime numbers are obtained by encrypted calculation. Since their own data and exponents are kept secret, they cannot deduce each other's real data, thereby improving the security and privacy of query data.

The details of one or more embodiments of the application are set forth in the accompanying drawings and the description below in order to make other features, objects and advantages of the application more apparent.

Description of drawings

In order to better describe and illustrate embodiments and/or examples of those inventions disclosed herein, reference may be made to one or more of the accompanying drawings. The additional details or examples used to describe the drawings should not be construed as limiting the scope of any of the disclosed inventions, the presently described embodiments and/or examples, and the best mode presently understood of these inventions.

FIG. 1 is an application environment diagram of the data query method according to Embodiment 1 of the present application.

FIG. 2 is a schematic flowchart of a data query method according to Embodiment 1 of the present application.

FIG. 3 is a structural block diagram of a data query apparatus according to Embodiment 1 of the present application.

FIG. 4 is a structural block diagram of the data query system according to Embodiment 1 of the present application.

FIG. 5 is a structural block diagram of a computer device according to Embodiment 1 of the present application.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present application more clearly understood, the present application will be described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application.

Reference in this application to an "embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the application. The appearances of the phrase in various places in the specification are not necessarily all referring to the same embodiment, nor a separate or alternative embodiment that is mutually exclusive of other embodiments. It is explicitly and implicitly understood by those of ordinary skill in the art that the embodiments described in this application may be combined with other embodiments without conflict.

Unless otherwise defined, the technical or scientific terms involved in this application shall have the usual meanings understood by those with ordinary skill in the technical field to which this application belongs. Words such as "a", "an", "an", "the" and the like mentioned in this application do not denote a quantitative limitation, and may denote the singular or the plural. The terms "comprising", "comprising", "having" and any of their variants referred to in this application are intended to cover non-exclusive inclusion; for example, a process, method, system, product or process comprising a series of steps or modules (units) The apparatus is not limited to the steps or units listed, but may further include steps or units not listed, or may further include other steps or units inherent to the process, method, product or apparatus. Words like "connected," "connected," "coupled," and the like referred to in this application are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. The "plurality" referred to in this application refers to two or more. "And/or" describes the association relationship between associated objects, indicating that there can be three kinds of relationships. For example, "A and/or B" can mean that A exists alone, A and B exist at the same time, and B exists alone. The character "/" generally indicates that the associated objects are an "or" relationship. The terms "first", "second", "third", "fourth", etc. involved in this application are only to distinguish similar objects, and do not represent a specific order for the objects.

FIG. 1 is an application environment diagram of a data query method in one embodiment. Referring to FIG. 1, the data query method is applied to a data query system. The data query system includes a query device 101 and a device to be queried 102 . The inquiring device 101 and the device to be inquired 102 are connected through a network. The query device 101 may specifically be a desktop terminal or a mobile terminal or a device to be queried, and the mobile terminal may specifically be at least one of a mobile phone, a tablet computer, a notebook computer, and the like. The device 102 to be queried can be implemented by an independent server or a server cluster composed of multiple servers.

Specifically, the query device 101 obtains the data query request to the device to be queried 102, and after the query device 102 receives the data query request, obtains the ordered interval point set corresponding to the candidate data set according to the data query request, and assigns the ordered interval point The set is returned to the query device 101, and the ordered interval point set includes the ordered data group interval points corresponding to the candidate data set. The query device 101 receives the ordered interval point set, obtains the data to be queried, and according to the Determine the current data group serial number corresponding to the data to be queried, calculate and obtain the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, and combine the first preset prime number, the first encrypted data and the current data group serial number Send to the device 102 to be queried, and the device 102 to be queried obtains at least one current data corresponding to the serial number of the current data group, and obtains the first encrypted data set according to the third preset prime number, the first preset prime number, and at least one current data set, according to the first encrypted data set. An encrypted data and a third preset prime number are calculated to obtain second encrypted data, and the first encrypted data set and the second encrypted data are returned to the query device 101 . Further, the query device 101 receives the first encrypted data set and the second encrypted data, calculates and obtains the second encrypted data set according to the first encrypted data set and the second preset prime number, and determines according to the second encrypted data and the second encrypted data set. The query result corresponding to the data to be queried.

In one embodiment, a data query method is provided, and the method is applied to the query device in FIG. 1 as an example for description, including the following steps:

Step 201: Send a data query request to the device to be queried.

The inquiring device may be the device where the data inquirer is located, and may be, but is not limited to, an inquiring terminal or a device to be inquired, and the device to be inquired here may be the device to be inquired where the data user is located, storing the candidate data set, the candidate data The set includes at least one candidate data set, the candidate data set is processed to obtain a target candidate data set, the target candidate data set is grouped to obtain a plurality of candidate data sets, and the corresponding data set interval points are determined according to the data in each candidate data set , sort these data group interval points to obtain an ordered data group interval point set.

The data query request here is used to request the device to be queried to perform data query. The data query request can be triggered and generated by an operation on the query device. Specifically, the query device is provided with a related query application, and the query application The relevant interface is provided with a query button, and the operation of the query button triggers the generation of a data query request, wherein the operation includes but is not limited to a click operation, a voice operation or an operation triggered by a timed event.

Step 202: Receive an ordered interval point set, where the ordered interval point set includes the ordered data group interval points corresponding to the candidate data set obtained by the device to be queried according to the data query request.

Among them, the ordered interval point set here refers to a set consisting of data group interval points in a certain order, and the data group interval point refers to the interval value between the candidate data groups corresponding to the candidate data set, and the pre-set on the device to be queried Store a candidate data set, the candidate data set includes at least one candidate data, process the candidate data set to obtain a target candidate data set, group the target candidate data set, and obtain a plurality of candidate data sets, according to the data in each candidate data set Corresponding data group interval points are determined, and these data group interval points are sorted to obtain an ordered data group interval point set.

Among them, the method of determining the corresponding data group interval point according to the data in each candidate data group can be customized, and the customization can be to obtain the current candidate data group, obtain the current candidate data corresponding to the current candidate data group, and obtain the previous candidate data. The target candidate data corresponding to the group, calculate the interval point of the current data group according to the current candidate data and the target candidate data, obtain the next candidate data group, take the next candidate data group as the current candidate data group, and return to the step to obtain the corresponding data group of the current candidate data group the current candidate data until the interval points of each data group are obtained.

The current candidate data may be the first candidate data in the current candidate data group, and the target candidate data may be the last candidate data in the previous candidate data group. Specifically, the device to be queried may obtain the current candidate data group and obtain the current candidate data. The first candidate data in the group, obtain the last candidate data in the previous candidate data group, calculate the interval point of the current data group according to the first candidate data and the last candidate data, obtain the next candidate data group, and put the next candidate data group As the current candidate data group, the return step obtains the first candidate data in the current candidate data group until the data group interval point is obtained.

For example, the current candidate data group is: [317, 553], the previous candidate data group is: [55, 270], the current candidate data is the first candidate data in the current candidate data group: 317, the target candidate data is the previous one The last candidate data in the candidate data group: 270, then the current candidate data group interval point can be calculated according to the first candidate data and the last candidate data to obtain the current data group interval point: (270+317)/2=293.5.

In another embodiment, the method of determining the interval point of the data group can also be customized by obtaining the current candidate data group, obtaining the current candidate data corresponding to the current candidate data group, and obtaining the target candidate data corresponding to the previous candidate data group. Randomly select a number between the current candidate data and the target candidate data to determine the interval point of the current data group, obtain the next candidate data group, take the next candidate data group as the current candidate data group, and return to the step to obtain the corresponding data group of the current candidate data group the current candidate data until the interval points of each data group are obtained.

The current candidate data may be the first candidate data in the current candidate data group, and the target candidate data may be the last candidate data in the previous candidate data group. Specifically, the device to be queried may obtain the current candidate data group and obtain the current candidate data. The first candidate data in the group, obtain the last candidate data in the previous candidate data group, randomly select a number between the first candidate data and the last candidate data to determine the interval point of the current data group, and obtain the next candidate data group , taking the next candidate data group as the current candidate data group, and returning to the step to obtain the current candidate data corresponding to the current candidate data group until the interval points of each data group are obtained.

For example, the current candidate data group is: [317, 553], the previous candidate data group is: [55, 270], the current candidate data is the first candidate data in the current candidate data group: 317, the target candidate data is the previous one The last candidate data in the candidate data group: 270, then the current candidate data group interval point can be a number randomly selected from the first candidate data and the last candidate data, for example, 300 can be selected as the current candidate data group interval point.

For example, all candidate data in the candidate data set are processed by the same hash function to obtain the target candidate data by the following formula, and the target candidate data set is composed of the target candidate data:

Then, sort the target candidate data according to a certain order, where the certain order can be ascending or descending, and group them according to the fixed size of each group to obtain multiple candidate data groups, wherein the fixed size It can be pre-determined according to business requirements, product requirements or actual application scenarios, wherein, in another embodiment, after sorting the target candidate data in a certain order, it can also be grouped according to different sizes of each group. , that is, the groups can be grouped according to the non-fixed size of each group, and the group size corresponding to each candidate data group can be determined according to business requirements, product requirements and actual application scenarios. Some of the group sizes corresponding to the data groups may be the same, and some may be different, which can be determined according to the actual situation.

Further, data group interval points are obtained by calculation according to the target candidate data in each candidate data group, and these data group interval points are sorted to obtain ordered data group interval points. Specifically, when the query device sends a data query request to the device to be queried, the device to be queried obtains an ordered set of interval points according to the data query request, and returns the obtained set of ordered interval points to the query device.

Step 203: Acquire the data to be queried, and determine the sequence number of the current data group corresponding to the data to be queried according to the data to be queried and the ordered interval point set.

The data to be queried is data waiting to be queried. Among them, the data to be queried can be the data processed by a hash function, and the data to be queried can be obtained by calling from a local database or obtained through other devices. Specifically, it can be based on business requirements, actual application scenarios, and product requirements. Sure get it. The sequence number of the current data group here is the sequence number corresponding to the data group where the data to be queried is located. The sequence number of the data group can be specifically obtained by obtaining two adjacent target interval points from the ordered interval point set according to the data to be queried, and then determining the current data group sequence number corresponding to the data to be queried according to the two target interval points. Wherein, if the data to be queried is equal to one of two adjacent target interval points, or the data to be queried has only one adjacent interval point, it means that the data to be queried is not in the candidate data set, and the data query is ended.

For example, the target candidate data set obtained by hash function processing on the candidate data set is: 55, 270, 317, 553, 682, 847, and the target candidate data set is grouped to obtain: [55, 270], [317, 553] , [682, 847], the ordered interval point set is: the data group interval point between the first group and the second group is 293.5, and the data group interval point between the second group and the third group is 617.5. After the query data is processed by the hash function, it is 583. Since the data to be queried is between 293.5 and 617.5, it can be determined that the current data group serial number corresponding to the data to be queried is 2, that is, if the data to be queried is to be inserted into the candidate data set, then Need to be inserted into the second group. Wherein, the data group interval point between the first group and the second group can be calculated according to the last target candidate data of the first group and the first target candidate data of the second group, for example, the last target of the first group The candidate data is 270, the first target candidate data of the second group is 317, and the data group interval point between the first group and the second group may be: (270+317)/2=293.5. Similarly, the data group interval point between the second group and the third group can be calculated according to the last target candidate data of the second group and the first target candidate data of the third group, for example, the last position of the second group The target candidate data is 553, the first target candidate data of the third group is 682, and the data group interval point between the second group and the third group may be: (553+682)/2=617.5.

Step 204: Calculate and obtain the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, and send the first preset prime number, the first encrypted data and the serial number of the current data group to the device to be queried, so that the The device to be queried obtains at least one current data corresponding to the serial number of the current data set, calculates and obtains the first encrypted data set according to the third preset prime number, the first preset prime number and the at least one current data, and obtains the first encrypted data set according to the first encrypted data and the third preset prime number. The prime number calculation obtains the second encrypted data.

Among them, the first preset prime number and the second preset prime number are both randomly generated prime numbers that are large enough. Based on the discrete logarithm intractability guarantee, the original data cannot be inversely deduced from the encrypted data. Due to the particularity of the encryption algorithm, it can be The result of data encrypted multiple times is guaranteed to be independent of the order of encryption. When generating a prime number randomly, first randomly select an odd number with a given number of bits, and then use the prime number discrimination method to determine whether it is a prime number. If not, reselect. However, according to the prime number theorem, given a number x, the number of prime numbers less than x is about x/lnx, that is, given a number, the probability of it being a prime number is about 1/lnx. Even if the given number is odd, its probability can only go up to 2/lnx. If the prime number requirement is 2048 bits, then an odd number is randomly selected, and the probability that it can pass the prime number test is about 2/2048*log(e)=0.22%. That is to say, it takes about 500 selections to pass the prime number judgment once. If the number of digits is large, the number of selections will increase, and the efficiency will be low. The randomly generated prime numbers in the embodiments of the present application are all preferably 2048 bits, more than 2048 bits, the computational efficiency is reduced, and less than 2048 bits, the security cannot be satisfied. When the computing power is exhausted, the computing power required for the number of digits is large. At present, 2048 bits are generally used in important occasions.

Specifically, the query device randomly generates two prime numbers as the first preset prime number and the second preset prime number, respectively, and obtains the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, wherein, The calculation method may be, using the first preset prime number as the modulus of the first encryption, using the second preset prime number as the index of the data to be queried, and performing the first encryption calculation on the data to be queried, wherein the first encryption calculation may be: is the modulo exponent calculation, thereby obtaining the first encrypted data.

For example, a 2048-bit first preset prime number N and a second preset prime number P are randomly generated, the first preset prime number N is used as the modulus of encryption, and the second preset prime number P is used as the index of the data B to be queried. The modulus index calculation is performed on the data B to obtain the first encrypted data Bp, which can be specifically shown in the following formula:

B _P = B ^P modN

Further, the inquiring device sends the first preset prime number, the first encrypted data and the current group serial number to the device to be inquired together, and after the inquiring device receives the first preset prime number, the first encrypted data and the current group serial number, it randomly generates The third preset prime number, the third preset prime number can be a 2048-bit prime number, and at least one corresponding current data is obtained according to the current group serial number, where the current data can refer to the data elements in the current group serial number, and the current data can be All the data in the current group serial number can also be the target data in the current group serial number. The quantity of target data can be determined according to business requirements and actual application conditions. The candidate data set is processed to obtain the target candidate data set, and the The target candidate data sets are grouped to obtain multiple candidate data groups. Each candidate data group includes the corresponding target candidate data and the corresponding group serial number. Therefore, all target candidate data in the current group serial number can be used as the current data. . Secondly, the third preset prime number can be used as the exponent of the current data, the first preset prime number can be used as the modulus of the second encryption, and the current data can be encrypted for the second time. The first encrypted dataset.

For example, if the current group serial number is i, a 2048-bit third preset prime number Q is randomly generated, the third preset prime number Q is used as the exponent of the current data A ⁱ , and the first preset prime number N is used as the modulus of the second encryption, The modulus index calculation is performed on the current data A ⁱ to obtain the first encrypted data set, which can be specifically shown in the following formula:

Further, after the inquiring device receives the first preset prime number, the first encrypted data and the current group serial number, the third preset prime number can also be used as the index of the first encrypted data, and the first encrypted data can be encrypted for the third time. Calculation, the third encryption calculation may be modulo exponential calculation to obtain the second encrypted data.

For example, a 2048-bit first preset prime number N and a second preset prime number P are randomly generated, the first preset prime number N is used as the modulus of encryption, and the second preset prime number P is used as the exponent of the data B to be queried. Query the data B to perform modulus index calculation to obtain the first encrypted data Bp, which can be specifically shown in the following formula:

B _P = B ^P modN

Then randomly generate a 2048-bit third preset prime number Q, use the third preset prime number Q as the index of the first encrypted data, and perform a modulus exponent calculation on the first encrypted data to obtain the second encrypted data. Specifically, the following formula can be used: Show:

B _PQ =(B ^P ) ^Q modN=B ^PQ modN

Wherein, after the device to be inquired obtains the first encrypted data set and the second encrypted data by calculation, the first encrypted data set and the second encrypted data need to be returned to the inquiring device.

The device to be queried can first obtain the second encrypted data according to the first encrypted data and the third preset prime number, and then calculate and obtain the first encrypted data according to the third preset prime number, the first preset prime number and at least one current data. Set, the two steps are in no order and can be interchanged.

Step 205: Receive the first encrypted data set and the second encrypted data, and calculate and obtain the second encrypted data set according to the first encrypted data set and the second preset prime number.

Wherein, after receiving the first encrypted data set and the second encrypted data returned by the device to be queried, the querying device may encrypt the first encrypted data set to obtain the second encrypted data set, wherein the encryption process may be based on the first encrypted data set. An encrypted data set and a second preset index are encrypted and calculated to obtain a second encrypted data set. Specifically, the second preset index is used as the index of the first encrypted data set, and the first encrypted data set is encrypted for the fourth time, and the fourth encryption can be modulo index calculation to obtain the second encrypted data set.

For example, if the current group serial number is i, a 2048-bit third preset prime number Q is randomly generated, the third preset prime number Q is used as the exponent of the current data A ⁱ , and the first preset prime number N is used as the modulus of the second encryption, Perform modulo index calculation on the current data A ⁱ to obtain the first encrypted data set

Specifically, it can be shown in the following formula:

The inquiring device receives the first encrypted data set sent by the device to be inquired

Encrypt data for the second time

Perform another encryption calculation, and use the second preset prime number P as the first encrypted data set

The exponent of the first encrypted dataset

Perform the modulus index calculation to obtain the second encrypted data set

Specifically, it can be shown in the following formula:

Step 206: Determine a query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set.

Wherein, after obtaining the second encrypted data and the second encrypted data set, the query device can determine the query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set, and specifically, compare the second encrypted data with the second encrypted data set. 2. Whether the encrypted data set matches, wherein if the second encrypted data matches the second encrypted data set, the query result corresponding to the data to be queried is determined to be the first query result, and the first query result indicates that the data to be queried is in the candidate data set , if the second encrypted data does not match the second encrypted data set, the query result corresponding to the data to be queried is determined to be the second query result, and the second query result indicates that the data to be queried is not in the candidate data set. Wherein, whether the second encrypted data matches the second encrypted data set may be comparing whether the second encrypted data and the second encrypted data set are the same, or comparing whether the second encrypted data and the second encrypted data set are equal.

Among them, because the ordered interval point set sent by the device to be queried is not a candidate data set in the device to be queried, and because of the characteristics of the hash function, the interval points of the ordered data groups in these ordered interval point sets are meaningless by themselves. It does not send the candidate data set in the device to be queried to the query device, which avoids the leakage of the candidate data set in the device to be queried, and ensures the privacy of the query data. The data is obtained by encrypting and calculating the large prime numbers that are kept secret. Since their own data and indices are kept secret, they cannot deduce each other's real data, thereby improving the security and privacy of the query data.

In the above data query method, the query device sends a data query request to the device to be queried, and receives an ordered interval point set, where the ordered interval point set includes the device to be queried obtains an ordered data group interval point corresponding to the candidate data set according to the data query request. , obtain the data to be queried, determine the serial number of the current data group corresponding to the data to be queried according to the data to be queried and the ordered interval point set, and obtain the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, Send the first preset prime number, the first encrypted data and the current data group serial number to the device to be queried, so that the device to be queried obtains at least one current data corresponding to the current data group serial number, according to the third preset prime number, the first preset The prime number and at least one current data are calculated to obtain the first encrypted data set, the second encrypted data is obtained by calculating the first encrypted data and the third preset prime number, the first encrypted data set and the second encrypted data are received, and the first encrypted data set is received according to the first encrypted data set. The second encrypted data set is obtained by calculating with the second preset prime number, and the query result corresponding to the data to be queried is determined according to the second encrypted data and the second encrypted data set.

In one embodiment, the current data group sequence number corresponding to the data to be queried is determined according to the data to be queried and the ordered interval point set, including:

Step 301: Acquire two adjacent target interval points corresponding to the data to be queried from the ordered interval point set.

Step 302: Determine the current data group serial number corresponding to the data to be queried according to the two target interval points.

The corresponding data group interval points are determined according to the data in each candidate data group. Specifically, the current candidate data group is obtained, the current candidate hash data corresponding to the current candidate data group is obtained, and the target corresponding to the previous candidate data group is obtained. The candidate hash data, according to the current candidate hash data and the target candidate hash data, to obtain the current data group interval point, obtain the next candidate data group, take the next candidate data group as the current candidate data group, and return to the step to obtain the current candidate data The current candidate hash data corresponding to the group is obtained until the interval points of each data group are obtained, and the interval points of each data group are sorted to obtain an ordered set of interval points of the data group. Wherein, the current candidate hash data may be the first candidate hash data of the current candidate data group, and the target candidate hash data may be the last candidate hash data of the previous candidate data group.

The sequence number of the current data group here is the sequence number corresponding to the data group where the data to be queried is located. The current data group serial number may be, specifically, obtaining two adjacent target interval points from the ordered interval point set according to the data to be queried, and then determining the current data group serial number corresponding to the data to be queried according to the two target interval points. Wherein, if the data to be queried is equal to one of two adjacent target interval points, or the data to be queried has only one adjacent interval point, it means that the data to be queried is not in the candidate data set, and the data query is ended.

For example, the target candidate data set obtained by hash function processing on the candidate data set is: 55, 270, 317, 553, 682, 847, 987, 1203, and the target candidate data set is grouped to obtain: [55, 270], [ 317, 553], [682, 847], [987, 1203], the ordered interval point set is: the data group interval point between the first group and the second group is 293.5, between the second group and the third group The interval point of the data group is 617.5, and the interval point of the data group between the third and fourth groups is 917. If the data to be queried is processed by the hash function, it is 583. Since the data to be queried is between 293.5 and 617.5, therefore, It can be determined that the current data group serial number corresponding to the data to be queried is 2.

In one embodiment, the first encrypted data is calculated according to the first preset prime number, the second preset prime number and the data to be queried, and the first preset prime number, the first encrypted data and the current data group serial number are sent to the device to be queried , so that the device to be queried obtains at least one current data corresponding to the sequence number of the current data set, calculates the first encrypted data set according to the third preset prime number, the first preset prime number and at least one current data, and obtains the first encrypted data set according to the first encrypted data and the first encrypted data set. Three preset prime numbers are calculated to obtain the second encrypted data, including:

Step 401: Randomly generate a first preset prime number and a second preset prime number.

Step 402: Use the first preset prime number as the modulus of the first encryption, use the second preset prime number as the exponent of the data to be queried, and perform a modulus exponent operation calculation on the data to be queried to obtain the first encrypted data.

The first preset prime number and the second preset prime number are both large enough prime numbers generated randomly. When generating prime numbers randomly, first randomly select an odd number with a given bit number, and then use the prime number discrimination method to determine whether it is a prime number. If not, reselect. However, according to the prime number theorem, given a number x, the number of prime numbers less than x is about x/lnx, that is, given a number, the probability of it being a prime number is about 1/lnx. Even if the given number is odd, its probability can only go up to 2/lnx. If the prime number requirement is 2048 bits, then an odd number is randomly selected, and the probability that it can pass the prime number test is about 2/2048*log(e)=0.22%. The randomly generated prime numbers in the embodiments of the present application are all preferably 2048 bits, more than 2048 bits, the computational efficiency is reduced, and less than 2048 bits, the security cannot be satisfied. When the computing power is exhausted, the computing power required for the number of digits is large. At present, 2048 bits are generally used in important occasions.

Specifically, the query device randomly generates two prime numbers as the first preset prime number and the second preset prime number, respectively, and obtains the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, wherein, The calculation method may be as follows: the first preset prime number is used as the modulus of the first encryption, the second preset prime number is used as the index of the data to be queried, and the first modulus index calculation is performed on the data to be queried to obtain the first encrypted data.

B _P = B ^P modN

Step 403: Send the first preset prime number, the first encrypted data and the current data group serial number to the device to be queried, so that the device to be queried obtains at least one corresponding current data according to the current data group serial number, and randomly generates a third preset prime number , using the third preset prime number as the exponent of the current data, using the first preset prime number as the modulus of the second encryption, performing modulus exponent calculation on at least one current data to obtain the first encrypted data set, and using the third preset prime number as the modulus of the second encryption. As the exponent of the first encrypted data, modulo exponent calculation is performed on the first encrypted data to obtain the second encrypted data.

Specifically, the inquiring device sends the first preset prime number, the first encrypted data and the current group serial number together to the device to be inquired, and after the inquiring device receives the first preset prime number, the first encrypted data and the current group serial number, it randomly generates The third preset prime number. The third preset prime number can be a 2048-bit prime number. At the same time, the corresponding current data is obtained according to the current group serial number. The current data here refers to all the data in the current group serial number. The candidate data set is obtained after processing. The target candidate data set is grouped, and multiple candidate data groups are obtained. Each candidate data group includes the corresponding target candidate data and the corresponding group serial number. Therefore, all the targets in the current group serial number can be Candidate data can be used as current data. Secondly, the third preset prime number may be used as the exponent of the current data, the first preset prime number may be used as the modulus of the second encryption, and the second modulus exponent calculation may be performed on the current data, thereby obtaining the first encrypted data set.

Specifically, it can be shown in the following formula:

Wherein, if there are multiple current data in the current group number i, the third preset prime number Q can be used as the prime number of each current data A ⁱ , and the first preset prime number N can be used as the modulus of the second encryption. All current data in the group serial number i is subjected to modulo index calculation to obtain the corresponding first encrypted data set.

For example, the query device randomly generates a 2048-bit first preset prime number N and a second preset prime number P, uses the first preset prime number N as the encrypted modulus, and uses the second preset prime number P as the index of the data B to be queried, The modulus index calculation is performed on the data B with query to obtain the first encrypted data Bp, which can be specifically shown in the following formula:

B _P = B ^P modN

The inquiring device sends the first encrypted data Bp to the device to be inquired, the device to be inquired randomly generates a 2048-bit third preset prime number Q, uses the third preset prime number Q as an index of the first encrypted data, and performs The modulus index is calculated to obtain the second encrypted data B _PQ , which can be shown in the following formula:

B _PQ =(B ^P ) ^Q modN=B ^PQ modN

In one embodiment, calculating and obtaining the second encrypted data set according to the first encrypted data set and the second preset prime number includes: using the second preset prime number as an index of the first encrypted data set, and performing The modulus index is calculated to obtain the second encrypted data set.

Wherein, after receiving the first encrypted data set and the second encrypted data returned by the device to be queried, the querying device may encrypt the first encrypted data set again to obtain the second encrypted data set, wherein the encryption process may be based on The first encrypted data set and the second preset index are encrypted and calculated to obtain a second encrypted data set. Specifically, the second preset index is used as the index of the first encrypted data set, and the fourth modular index calculation is performed on the first encrypted data set to obtain the second encrypted data set.

Specifically, it can be shown in the following formula:

Encrypt data for the second time

The exponent of the first encrypted dataset

Perform the modulus index calculation to obtain the second encrypted data set

Specifically, it can be shown in the following formula:

In one embodiment, determining a query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set includes:

Step 501: When the second encrypted data is the same as an element of the second encrypted data set, determine that the query result corresponding to the data to be queried is the first query result, and the first query result is that the data to be queried is in the candidate data set.

Step 502: When the second encrypted data is different from any element of the second encrypted data set, determine that the query result corresponding to the data to be queried is the second query result, and the second query result is that the data to be queried is not in the candidate data set.

Specifically, after obtaining the second encrypted data and the second encrypted data set, the query device can determine the query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set. Specifically, the query device can compare the second encrypted data and the second encrypted data set. Whether the second encrypted data set matches, wherein if the second encrypted data matches an element of the second encrypted data set, the query result corresponding to the data to be queried is determined to be the first query result, and the first query result indicates the data to be queried. In the candidate data set, if the second encrypted data does not match any element of the second encrypted data set, the query result corresponding to the data to be queried is determined to be the second query result, and the second query result indicates that the data to be queried is not in the candidate data set in the data set. Wherein, whether the second encrypted data matches the second encrypted data set may be comparing whether an element of the second encrypted data and the second encrypted data set is the same, or comparing the second encrypted data and any element of the second encrypted data set Are all equal.

Wherein, if there are multiple pieces of data to be queried and there are multiple pieces of data in the current group serial number, then there are multiple pieces of second encrypted data and multiple sets of second encrypted data, and each second encrypted data is associated with each piece of data. The second encrypted data sets are compared, and if any second encrypted data is identical or equal to any second encrypted data set, it can be determined that the query result corresponding to the data to be queried is the first query result, indicating that the data to be queried is in the In the candidate data set, if there is no second encrypted data that is identical or equal to any second encrypted data set, it can be determined that the query result corresponding to the data to be queried is the second query result, indicating that the data to be queried is not in the candidate data. in the collection.

In one embodiment, the generating step of the ordered interval point set includes:

Step 601: The device to be queried acquires a candidate data set, where the candidate data set includes at least one candidate data.

Step 602: The device to be queried processes the candidate data in the candidate data set according to the preset hash function to obtain a target candidate data set, where the target candidate data set includes at least one candidate hash data.

Wherein, the device to be queried here may be the device to be queried where the data user is located, and stores a candidate data set. The candidate data set includes at least one candidate data. The candidate data set is processed to obtain a target candidate data set, and the target candidate data set is processed. Grouping is performed to obtain a plurality of candidate data groups, corresponding data group interval points are determined according to the data in each candidate data group, and these data group interval points are sorted to obtain an ordered data group interval point set.

Among them, the ordered interval point set here refers to a set consisting of data group interval points in a certain order, and the data group interval point refers to the interval value between the candidate data groups corresponding to the candidate data set, and the pre-set on the device to be queried A candidate data set is stored, where the candidate data set includes at least one candidate data, and the candidate data set is processed to obtain a target candidate data set.

The candidate data set is processed to obtain the target candidate data set. Specifically, a preset hash function is obtained, and each candidate data in the candidate data set is hashed by the preset hash function to obtain the corresponding candidate data set. Hash data, the target candidate data set is composed of each candidate hash data.

For example, all candidate data in the candidate data set are processed by the same hash (hash) function to obtain candidate hash data by the following formula, and the target candidate data set is composed of the candidate hash data:

Step 603: The device to be queried groups the target candidate data sets according to preset rules to obtain multiple candidate data groups.

Step 604: The device to be queried determines the corresponding data group interval points according to the candidate hash data in each candidate data group, and generates an ordered data group interval point set according to each data group interval point.

Specifically, after obtaining the target candidate data set, which includes at least one candidate hash data, the device to be queried groups the target candidate data set to obtain multiple candidate data groups. According to the data in each candidate data group Corresponding data group interval points are determined, and these data group interval points are sorted to obtain an ordered data group interval point set. Specifically, the device to be queried groups the target candidate data set according to a preset rule to obtain multiple candidate data groups, wherein the preset rule may be to sort the candidate hash data in the target candidate data set , the sorting can be in ascending order or descending order to obtain the sorted target candidate data set, and then group the sorted target candidate data set according to the preset group size, thereby obtaining multiple candidate data groups.

Specifically, the candidate hash data in the target candidate data set may be sorted according to an ascending rule, or the candidate hash data in the target candidate data set may be sorted in descending order according to a descending rule to obtain the sorted target candidate data Set, and then obtain the preset group size. The so-called group size refers to the maximum bearing capacity corresponding to the corresponding group. The preset group size can be determined according to business requirements, application scenarios or product requirements, and the sorted targets are based on the preset group size. The candidate data sets are grouped to obtain each grouped candidate data group. Further, the corresponding data group interval points are determined according to the data in each candidate data group. Specifically, the current candidate data group is obtained, the current candidate hash data corresponding to the current candidate data group is obtained, and the last candidate data group is obtained. The target candidate hash data of the The current candidate hash data corresponding to the candidate data group is obtained until each data group interval point is obtained, and the various data group interval points are sorted to obtain an ordered data group interval point set. Wherein, the current candidate hash data may be the first candidate hash data of the current candidate data group, and the target candidate hash data may be the last candidate hash data of the previous candidate data group.

For example, the target candidate data set obtained by hash function processing on the candidate data set is: 55, 270, 317, 553, 682, 847, 987, 1203, and the target candidate data set is grouped to obtain: [55, 270], [ 317, 553], [682, 847], [987, 1203], the ordered interval point set is: the data group interval point between the first group and the second group is 293.5, between the second group and the third group The data group interval point is 617.5, the data group interval point between the third and fourth groups is 917, and the ordered data group interval point set is: {293.5, 617.5, 917}. Wherein, the data group interval point between the first group and the second group can be calculated according to the last candidate hash data of the first group and the first candidate hash data of the second group, for example, the last candidate hash data of the first group The bit candidate hash data is 270, the first candidate hash data of the second group is 317, and the data group interval point between the first group and the second group may be: (270+317)/2=293.5. Similarly, the data group interval point between the second group and the third group can be calculated according to the last candidate hash data of the second group and the first candidate hash data of the third group, for example, the second group of The last candidate hash data is 553, the first candidate hash data of the third group is 682, and the data group interval point between the second group and the third group may be: (553+682)/2=617.5. By analogy, the data group interval point between the third group and the fourth group can be calculated according to the last candidate hash data of the third group and the first candidate hash data of the fourth group. For example, the last candidate hash data of the third group The hash data is 847, the first candidate hash data of the fourth group is 987, and the data group interval point between the third group and the fourth group may be: (847+987)/2=917.

In one embodiment, the device to be queried determines the corresponding data group interval points according to the candidate hash data in each candidate data group, including: the device to be queried obtains the current candidate data group, and obtains the current candidate hash in the current candidate data group. data, obtain the target candidate hash data in the previous candidate data group, calculate the interval point of the current data group according to the current candidate hash data and the target candidate hash data, obtain the next candidate data group, and use the next candidate data group as For the current candidate data group, the returning step obtains the current candidate hash data in the current candidate data group until the data group interval point is obtained. Specifically, the corresponding data group interval points are determined according to the data in each candidate data group. Specifically, the current candidate data group may be obtained, the current candidate hash data corresponding to the current candidate data group may be obtained, and the current candidate data group corresponding to the current candidate data group may be obtained. The target candidate hash data, according to the current candidate hash data and the target candidate hash data, calculate the current data group interval point, obtain the next candidate data group, take the next candidate data group as the current candidate data group, and return to the step to obtain the current candidate data group The current candidate hash data corresponding to the data group is obtained until each data group interval point is obtained, and the data group interval points are sorted to obtain an ordered data group interval point set. The current candidate data group may be randomly selected from each candidate data group as the current candidate data group, or the candidate data group may be determined as the current candidate data group in sequence.

In another embodiment, the current candidate hash data may be the first candidate hash data in the current candidate data group, and the target candidate hash data may be the last candidate hash data in the previous candidate data group. Specifically, it may be The device to be queried obtains the current candidate data group, obtains the first candidate hash data in the current candidate data group, and obtains the last candidate hash data in the previous candidate data group, according to the first candidate hash data and the last candidate hash data. Calculate the interval point of the current data group, obtain the next candidate data group, take the next candidate data group as the current candidate data group, and return to the step to obtain the first candidate hash data in the current candidate data group, until the interval point of the data group is obtained.

In one embodiment, the data query method further includes: sending a current ordered interval point set version number query request to the device to be queried, where the current ordered interval point set version number query request includes the current ordered interval point set version number, so that The device to be queried obtains the version number of the candidate ordered interval point set, and compares whether the version number of the current ordered interval point set is consistent with the version number of the candidate ordered interval point set. Determine the second version number information, and return it, where the version number of the candidate ordered interval point set is the version number corresponding to the current ordered interval point set in the device to be queried, receive the first version number information returned by the device to be queried, and obtain the history Ordered interval point set, take the historical ordered interval point set as the ordered interval point set, and enter the step to obtain the data to be queried, or; after receiving the second version number information returned by the device to be queried, enter the step to send a data query request to Device to be queried.

Among them, the current ordered interval point set version number query request here is used to request to query the current ordered interval point set version number, and the current ordered interval point set version number is the version identification number corresponding to the current ordered interval point set, Each time the current ordered interval point set sent by the device to be queried includes the corresponding version number of the current ordered interval point set. The ordered interval point set version number returned by the device to be queried. In subsequent queries, the inquiring device carries the current ordered interval point set version number query request to the to-be-queried device, and the to-be-queried device compares the current ordered interval point set version numbers. Whether the version number of the candidate interval point set stored locally is consistent, if it is consistent, it is determined as the first version number information, if not, it is determined as the second version number information, and returned, where the version number of the candidate ordered interval point set is The version number corresponding to the current ordered interval point set in the device to be queried, and the first version number information or the second version number information is returned to the query device.

Further, if the inquiring device receives the first version number information, indicating that the version number of the current ordered interval point set is consistent with the version number of the candidate interval point set locally stored by the device to be inquired, then the ordered interval point cached by the inquiring device itself can be determined. It is an ordered interval point set. Specifically, the historical ordered interval point set can be obtained. The so-called historical ordered interval point set refers to the ordered interval point set cached locally by the query device, and the historical ordered interval point set is used as the ordered interval point. Set, enter the step to obtain the data to be queried.

Among them, if the query device receives the second version number information, it means that the version number of the current ordered interval point set is inconsistent with the version number of the candidate interval point set stored locally by the device to be queried, and then enters the step of sending a data query request to the device to be queried. , and replace the subsequently received ordered interval point set with the historical ordered interval point set stored locally by the query device, that is, update the locally stored historical ordered interval point set according to the subsequently received ordered interval point set.

In a specific embodiment, a data query method is provided, which specifically includes the following steps:

1. The device to be queried acquires a candidate data set, where the candidate data set includes at least one candidate data.

2. The device to be queried processes the candidate data in the candidate data set according to the preset hash function to obtain a target candidate data set, where the target candidate data set includes at least one candidate hash data.

3. The device to be queried groups the target candidate data sets according to preset rules to obtain multiple candidate data groups.

4. The device to be queried determines a corresponding data group interval point according to the candidate hash data in each candidate data group, and generates an ordered data group interval point set according to each data group interval point.

5. Send the current ordered interval point set version number query request to the device to be queried, and determine the first version number information or the second version number information.

6. Receive the first version number information returned by the device to be queried, obtain the historical ordered interval point set, then use the historical ordered interval point set as the ordered interval point set, and go to step 10 .

7. Receive the second version number information returned by the device to be queried, and go to step 8.

8. Send a data query request to the device to be queried.

9. Receive an ordered interval point set, where the ordered interval point set includes the ordered data group interval points corresponding to the candidate data set obtained by the device to be queried according to the data query request.

10. Acquire the data to be queried, and determine the serial number of the current data group corresponding to the data to be queried according to the data to be queried and the ordered interval point set.

11. Calculate and obtain the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, and send the first preset prime number, the first encrypted data and the serial number of the current data group to the device to be queried, so that the data to be queried is sent to the device to be queried. The query device obtains at least one current data corresponding to the serial number of the current data set, calculates and obtains the first encrypted data set according to the third preset prime number, the first preset prime number and the at least one current data, and obtains the first encrypted data set according to the first encrypted data and the third preset prime number Calculated to obtain the second encrypted data.

12. Receive the first encrypted data set and the second encrypted data, and calculate and obtain the second encrypted data set according to the first encrypted data set and the second preset prime number.

13. Determine a query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set.

In one embodiment, a data set processing method is provided, including the following steps: obtaining a candidate data set, the candidate data set includes at least one candidate data, and performing a processing on the at least one candidate data in the candidate data set according to a preset hash function processing to obtain a target candidate data set, the target candidate data set including at least one candidate hash data, grouping the target candidate data set according to a preset rule to obtain a plurality of candidate data groups, and according to the candidate hash data in each candidate data group The data determines the corresponding data group interval points, and generates an ordered data group interval point set according to each data group interval point.

In one embodiment, determining the corresponding data group interval point according to the candidate hash data in each candidate data group includes: acquiring the current candidate data group, acquiring the current candidate hash data in the current candidate data group, acquiring the previous candidate data group For the target candidate hash data in the data group, calculate the interval point of the current data group according to the current candidate hash data and the target candidate hash data, obtain the next candidate data group, take the next candidate data group as the current candidate data group, and return The step is to obtain the current candidate hash data in the current candidate data group until the data group interval point is obtained.

In one embodiment, the data set processing method further includes: receiving newly added candidate hash data, inserting the newly added candidate hash data into its corresponding first data group, and determining whether the amount of data in the first data group is If it exceeds the set range, if it is, then re-determine the data group interval points from the first data group, and update the ordered data group interval point set according to each data group interval point.

The first data group here refers to the data group into which the newly added candidate hash data needs to be inserted, and the first data group corresponding to the newly added candidate hash data can be determined according to the interval point of each data group, and then the first data group Whether the amount of data in the data exceeds the set range, and if so, then re-determine the data group interval points from the first data group, and update the ordered data group interval point set according to each data group interval point. For example, the data group interval point between the first group and the second group is 293.5, the data group interval point between the second group and the third group is 617.5, and the newly added candidate hash data is 530, then it is determined that the new addition The candidate hash data is that the second group is the first data group, and then it is judged whether the amount of data in the first data group exceeds the set range. Data group interval points update the ordered data group interval point set.

It should be understood that although the steps in the above flow charts are shown in sequence according to the arrows, these steps are not necessarily executed in the sequence shown by the arrows. Unless explicitly stated herein, the execution of these steps is not strictly limited to the order, and the steps may be executed in other orders. Moreover, at least a part of the steps in the above flow chart may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but may be executed at different times. The order of execution is also not necessarily sequential, but may be performed alternately or alternately with other steps or at least a portion of sub-steps or stages of other steps.

In one embodiment, as shown in FIG. 3, a data query device 700 is provided, including: a query request sending module 701, an ordered interval set receiving module 702, a data group serial number determination module 703, an encrypted data calculation module 704, The encrypted data processing module 705 and the query result determination module 706, wherein: the query request sending module 701 is used for sending a data query request to the device to be queried. The ordered interval set receiving module 702 is configured to receive an ordered interval point set, where the ordered interval point set includes the ordered data group interval points corresponding to the candidate data set obtained by the device to be queried according to the data query request. The data group serial number determining module 703 is configured to acquire the data to be queried, and determine the current data group serial number corresponding to the data to be queried according to the data to be queried and the ordered interval point set. The encrypted data calculation module 704 is used to calculate and obtain the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, and send the first preset prime number, the first encrypted data and the current data group serial number to the to-be-queried data. The query device, so that the device to be queried obtains at least one current data corresponding to the serial number of the current data set, calculates and obtains the first encrypted data set according to the third preset prime number, the first preset prime number and the at least one current data, and obtains the first encrypted data set according to the first encrypted data and the third preset prime number to obtain the second encrypted data. The encrypted data processing module 705 is configured to receive the first encrypted data set and the second encrypted data, and calculate and obtain the second encrypted data set according to the first encrypted data set and the second preset prime number. The query result determination module 706 is configured to determine the query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set.

For the specific limitation of the data query device, reference may be made to the limitation of the data query method above, which will not be repeated here. Each module in the above-mentioned data query device can be implemented in whole or in part by software, hardware and combinations thereof. The above modules can be embedded in or independent of the processor in the computer device in the form of hardware, or stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

In one embodiment, as shown in FIG. 4 , a data query system 800 is provided. The system includes: a query device 801 for acquiring a data query request and sending the data query request to the device to be queried. The device to be queried 802 is configured to obtain the ordered interval point set corresponding to the candidate data set according to the data query request, and return the ordered interval point set to the query device, where the ordered interval point set includes the ordered data corresponding to the candidate data set Group interval points. The query device 801 is further configured to receive the ordered interval point set, obtain the data to be queried, determine the sequence number of the current data group corresponding to the to-be-queried data according to the to-be-queried data and the ordered interval point set, and according to the first preset prime number, the second preset The first encrypted data is obtained by calculating the prime number and the data to be queried, and the first preset prime number, the first encrypted data and the serial number of the current data group are sent to the device to be queried. The device to be queried 802 is further configured to obtain at least one current data corresponding to the serial number of the current data set, calculate and obtain a first encrypted data set according to the third preset prime number, the first preset prime number and the at least one current data, and obtain the first encrypted data set according to the first encrypted data and the third preset prime number to obtain second encrypted data, and return the first encrypted data set and the second encrypted data to the query device. The query device 801 is further configured to receive the first encrypted data set and the second encrypted data, calculate and obtain the second encrypted data set according to the first encrypted data set and the second preset prime number, and obtain the second encrypted data set according to the second encrypted data and the second encrypted data set Determine the query result corresponding to the data to be queried.

In one embodiment, a computer device is provided, the computer device may be a query device, the query device may be a server, and an internal structure diagram thereof may be shown in FIG. 5 . The computer device includes a processor, memory, a network interface, and a database connected by a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium, an internal memory. The nonvolatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the execution of the operating system and computer programs in the non-volatile storage medium. The computer device's database is used to store ordered interval point sets and query results. The network interface of the computer device is used to communicate with an external terminal through a network connection. The computer program, when executed by the processor, implements a data query method.

Those skilled in the art can understand that the structure shown in FIG. 5 is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer equipment to which the solution of the present application is applied. Include more or fewer components than shown in the figures, or combine certain components, or have a different arrangement of components.

The technical features of the above embodiments can be combined arbitrarily. For the sake of brevity, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, all It is considered to be the range described in this specification.

The above-mentioned embodiments only represent several embodiments of the present application, and the descriptions thereof are specific and detailed, but should not be construed as a limitation on the scope of the invention patent. It should be pointed out that for those skilled in the art, without departing from the concept of the present application, several modifications and improvements can be made, which all belong to the protection scope of the present application. Therefore, the scope of protection of the patent of the present application shall be subject to the appended claims.

Claims

A data query method, characterized in that the method comprises:

Send a data query request to the device to be queried;

receiving an ordered interval point set, where the ordered interval point set includes the to-be-queried device acquiring ordered data group interval points corresponding to the candidate data set according to the data query request;

Obtaining the data to be queried, and determining the current data group serial number corresponding to the data to be queried according to the data to be queried and the ordered interval point set;

Calculate the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, and send the first preset prime number, the first encrypted data and the current data group serial number to the the device to be queried, so that the device to be queried obtains at least one current data corresponding to the serial number of the current data group, and obtains the first an encrypted data set, calculating and obtaining second encrypted data according to the first encrypted data and the third preset prime number;

receiving the first encrypted data set and the second encrypted data, and calculating the second encrypted data set according to the first encrypted data set and the second preset prime number;

A query result corresponding to the data to be queried is determined according to the second encrypted data and the second encrypted data set.
The method according to claim 1, wherein the determining the current data group serial number corresponding to the data to be queried according to the data to be queried and the ordered interval point set comprises:

Obtain two adjacent target interval points corresponding to the data to be queried from the ordered interval point set;

The current data group serial number corresponding to the data to be queried is determined according to the two target interval points.
The method according to claim 1, wherein the method further comprises:

Send the current ordered interval point set version number query request to the device to be queried, the current ordered interval point set version number query request includes the current ordered interval point set version number, so that the to-be-queried device obtains the candidate ordered interval Point set version number, compare whether the current ordered interval point set version number and the candidate ordered interval point set version number are consistent, if they are consistent, it is determined as the first version number information, if not, it is determined as the second version number. The version number information is returned, where the version number of the candidate ordered interval point set is the version number corresponding to the current ordered interval point set in the device to be queried;

Receive the first version number information returned by the device to be queried, and obtain the historical ordered interval point set, then use the historical ordered interval point set as the ordered interval point set, and enter the step to obtain the data to be queried, or;

After receiving the second version number information returned by the device to be queried, enter the step of sending a data query request to the device to be queried.
The method according to claim 1, wherein the first encrypted data is obtained by calculating according to the first preset prime number, the second preset prime number and the data to be queried, and the first preset prime number, the all The first encrypted data and the sequence number of the current data group are sent to the device to be queried, so that the device to be queried obtains at least one current data corresponding to the sequence number of the current data group, according to the third preset prime number, the The first encrypted data set is obtained by calculating the first preset prime number and the at least one current data, and the second encrypted data is obtained by calculating the first encrypted data and the third preset prime number, including:

randomly generating a first preset prime number and a second preset prime number;

The first preset prime number is used as the modulus of the first encryption, the second preset prime number is used as the exponent of the data to be queried, and the modulus exponent calculation is performed on the data to be queried to obtain the first encrypted data ;

sending the first preset prime number, the first encrypted data and the current data group sequence number to the device to be queried, so that the device to be queried obtains at least one corresponding current data according to the current data group sequence number, Randomly generating a third preset prime number, using the third preset prime number as the exponent of the current data, using the first preset prime number as the modulus of the second encryption, and performing the modulus exponent on the at least one current data calculating to obtain a first encrypted data set, using the third preset prime number as an exponent of the first encrypted data, and performing modulo exponent calculation on the first encrypted data to obtain second encrypted data.
The method according to claim 1, wherein the calculating and obtaining the second encrypted data set according to the first encrypted data set and the second preset prime number comprises:

The second preset prime number is used as an exponent of the first encrypted data set, and a modulo exponent calculation is performed on the first encrypted data set to obtain a second encrypted data set.
The method according to claim 1, wherein the determining the query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set comprises:

When the second encrypted data is the same as an element of the second encrypted data set, it is determined that the query result corresponding to the data to be queried is the first query result, and the first query result is the data to be queried in the candidate data set;

When the second encrypted data is different from any element of the second encrypted data set, it is determined that the query result corresponding to the data to be queried is the second query result, and the second query result is the to-be-queried data Data is not in the candidate data set.
The method according to claim 1, wherein the step of generating the ordered interval point set comprises:

The device to be queried acquires a candidate data set, where the candidate data set includes at least one candidate data;

The device to be queried processes the candidate data in the candidate data set according to a preset hash function to obtain a target candidate data set, where the target candidate data set includes at least one candidate hash data;

The device to be queried groups the target candidate data set according to a preset rule to obtain a plurality of candidate data groups;

The device to be queried determines a corresponding data group interval point according to the candidate hash data in each of the candidate data groups, and generates an ordered data group interval point set according to each of the data group interval points.
The method according to claim 7, wherein the device to be queried determines the corresponding data group interval points according to the candidate hash data in each of the candidate data groups, comprising:

The device to be queried obtains the current candidate data group, obtains the current candidate hash data in the current candidate data group, and obtains the target candidate hash data in the previous candidate data group, according to the current candidate hash data and the target The candidate hash data is calculated to obtain the current data group interval point, the next candidate data group is obtained, the next candidate data group is used as the current candidate data group, and the return step is to obtain the current candidate hash data in the current candidate data group, until the The data set interval points.
A data set processing method, comprising:

Obtaining a candidate data set, the candidate data set includes at least one candidate data;

According to the preset hash function, at least one candidate data in the candidate data set is processed to obtain a target candidate data set, and the target candidate data set includes at least one candidate hash data;

Group the target candidate data sets according to preset rules to obtain multiple candidate data groups;

A corresponding data group interval point is determined according to the candidate hash data in each of the candidate data groups, and an ordered data group interval point set is generated according to each of the data group interval points.
The method according to claim 9, wherein the determining a corresponding data group interval point according to the candidate hash data in each of the candidate data groups comprises:

Obtain the current candidate data group, obtain the current candidate hash data in the current candidate data group, obtain the target candidate hash data in the previous candidate data group, and calculate according to the current candidate hash data and the target candidate hash data Obtain the current data group interval point, obtain the next candidate data group, take the next candidate data group as the current candidate data group, and return to the step to obtain the current candidate hash data in the current candidate data group, until the data group interval is obtained point.
The method according to claim 9 or 10, wherein the method further comprises:

Receive the newly added candidate hash data, and insert the newly added candidate hash data into its corresponding first data group;

Determine whether the amount of data in the first data group exceeds the set range:

If so, re-determine the data group interval points from the first data group, and update the ordered data group interval point set according to each data group interval point.
A data query device, characterized in that the device comprises:

The query request sending module is used to send a data query request to the device to be queried;

an ordered interval set receiving module, configured to receive an ordered interval point set, where the ordered interval point set includes the ordered data group interval points corresponding to the candidate data set obtained by the device to be queried according to the data query request;

a data group serial number determining module, configured to acquire the data to be queried, and determine the current data group serial number corresponding to the data to be queried according to the data to be queried and the ordered interval point set;

An encrypted data calculation module, configured to calculate and obtain the first encrypted data according to the first preset prime number, the second preset prime number and the data to be queried, and calculate the first preset prime number, the first encrypted data and the The serial number of the current data group is sent to the device to be queried, so that the device to be queried obtains at least one current data corresponding to the serial number of the current data group, according to the third preset prime number, the first preset prime number and the at least one The current data is calculated to obtain the first encrypted data set, and the second encrypted data is obtained by calculation according to the first encrypted data and the third preset prime number;

an encrypted data processing module, configured to receive the first encrypted data set and the second encrypted data, and calculate and obtain a second encrypted data set according to the first encrypted data set and the second preset prime number; and

A query result determination module, configured to determine a query result corresponding to the data to be queried according to the second encrypted data and the second encrypted data set.
A data query system, characterized in that the system includes:

an inquiry device, configured to obtain a data inquiry request and send the data inquiry request to the device to be inquired; and

A device to be queried, configured to obtain an ordered interval point set corresponding to the candidate data set according to the data query request, and return the ordered interval point set to the query device, where the ordered interval point set includes all The ordered data group interval corresponding to the candidate data set;

The query device is further configured to receive an ordered interval point set, obtain the data to be queried, determine the current data group serial number corresponding to the to-be-queried data according to the to-be-queried data and the ordered interval point set, and according to the first The preset prime number, the second preset prime number and the data to be queried are calculated to obtain the first encrypted data, and the first preset prime number, the first encrypted data and the sequence number of the current data group are sent to the to-be-queried data equipment;

The device to be queried is further configured to obtain at least one current data corresponding to the current data group serial number, and obtain the first encrypted data according to the third preset prime number, the first preset prime number and the at least one current data set, calculate and obtain second encrypted data according to the first encrypted data and the third preset prime number, and return the first encrypted data set and the second encrypted data to the query device;

The query device is further configured to receive the first encrypted data set and the second encrypted data, calculate and obtain a second encrypted data set according to the first encrypted data set and the second preset prime number, and obtain the second encrypted data set according to the first encrypted data set and the second preset prime number. The second encrypted data and the second encrypted data set determine a query result corresponding to the data to be queried.
A computer device, comprising a memory, a processor and a computer program stored on the memory and running on the processor, characterized in that, when the processor executes the computer program, any one of claims 1 to 11 is implemented the steps of the method.
A computer-readable storage medium on which a computer program is stored, characterized in that, when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 11 are implemented.