System and method for mining data and storage medium

Patent metadata

Field	Value
Publication number	US-12204551-B2
Application number	US-202117249939-A
Country	US
Kind code	B2
Filing date	Mar 19, 2021
Priority date	Apr 26, 2020
Publication date	Jan 21, 2025
Grant date	Jan 21, 2025

Abstract

Embodiments of the present disclosure provide a data mining system, a data mining method, and a storage medium. The data mining system includes a transfer device, a first trusted execution space and a second trusted execution space. The transfer device is configured to receive a data calling request of the second trusted execution space, obtain data to be called from the first trusted execution space according to the data calling request, and provide the data to be called to the second trusted execution space, so as to perform data mining based on the data to be called and the mining-related data to obtain a data mining result and to provide the data mining result to a device of the data user.

First claim

What is claimed is:

1. A data mining system comprising a transfer party, a first trusted memory and calculator and a second trusted memory and calculator, wherein the data mining system is set on a server cluster, and the server cluster comprises at least one server, the first trusted memory and calculator and the second trusted memory and calculator are set on at least one virtual machine in the server cluster, and the transfer party is a virtual machine in the server cluster;
wherein only the transfer party has an access permission to the first trusted memory and calculator and the second trusted memory and calculator;
the transfer party is configured to be connected to a device of a data user, and is configured to obtain mining-related data sent by the device of the data user and to send the mining-related data to the second trusted memory and calculator for storage;
the transfer party is configured to be connected to a device of a data provider, and is configured to obtain available data sent by the device of the data provider, and to send the available data to the first trusted memory and calculator for storage; and
the transfer party is configured to receive a data calling request of the second trusted memory and calculator, obtain data to be called from the first trusted memory and calculator according to the data calling request, and provide the data to be called to the second trusted memory and calculator, such that the second trusted memory and calculator performs data mining based on the data to be called and the mining-related data to determine a data mining result, and the transfer party obtains the data mining result and provides the data mining result to the device of the data user;
wherein the transfer party is further configured to obtain attribute information of the mining-related data, create a new second trusted memory and calculator for the data user according to the attribute information when the second trusted memory and calculator is in a non-idle state, and send the mining-related data to the new second trusted memory and calculator for storage.

2. The system according to claim 1 , wherein the available data comprises: a plurality of pieces of data and permission information for each piece of data;
the data calling request comprises: an identifier of the data user and an identifier of the data to be called; and
the first trusted memory and calculator is configured to determine whether the data user has a permission to call the data to be called based on the identifier of the data user and the identifier of the data to be called in the data calling request, and the permission information for each piece of data; and to return the data to be called to the transfer party when it is determined that the data user has the permission to call the data to be called.

3. The system according to claim 1 , wherein the data mining result comprises: at least one mining result and permission information for each mining result;
the transfer party is configured to receive a mining result acquisition request sent by the device of the data user, and the mining result acquisition request comprises the identifier of the data user and an identifier of a mining result to be obtained;
determining whether the data user has a permission to acquire the mining result to be obtained based on the identifier of data user, the identifier of the mining result to be obtained, and permission information for each mining result; and
sending the mining result to be obtained to the transfer party when the data user has the permission to acquire the mining result to be obtained, so that the transfer party sends the mining result to be obtained to the device of the data user.

4. The system according to claim 1 , wherein there are a plurality of the first trusted memories and calculators, and each first trusted memory and calculator corresponds to one data provider; and/or,
there are a plurality of the second trusted memories and calculators, and each second trusted memory and calculator corresponds to one data user.

5. The system according to claim 1 , wherein the transfer party is configured to:
determine a service life of the first trusted memory and calculator and a service life of the second trusted memory and calculator;
clear content in the first trusted memory and calculator when the service life of the first trusted memory and calculator expires; and
clear content in the second trusted memory and calculator when the service life of the second trusted memory and calculator expires.

6. The system according to claim 1 , wherein the transfer party is further configured to:
determine a service life of the new second trusted memory and calculator; and
destroy the new second trusted memory and calculator when the service life of the new second trusted memory and calculator expires.

7. A data mining method, applied to a second trusted memory and calculator corresponding to a data user, comprising:
sending a data calling request to a first trusted memory and calculator corresponding to a data provider through a transfer party, and the data calling request comprising an identifier of the data user and an identifier of data to be called, wherein only the transfer party has an access permission to the first trusted memory and calculator and the second trusted memory and calculator, the first trusted memory and calculator is configured to store available data of the data provider, the available data is data obtained by the transfer party from a device of a data provider and sent to the first trusted memory and calculator, and the second trusted memory and calculator is configured to store the mining-related data of the data user;
obtaining, via the transfer party, the data to be called returned by the first trusted memory and calculator when the data user has a permission to call the data to be called;
determining a data mining result based on the data to be called and mining-related data of the data user; and
providing the data mining result to a device of the data user through the transfer party;
wherein a new second trusted memory and calculator is created for the data user according to attribute information of the mining-related data when the second trusted memory and calculator is in a non-idle state, and the mining-related data is send to the new second trusted memory and calculator for storage.

8. An electronic device, comprising:
at least one processor; and
a memory communicatively connected to the at least one processor, wherein the memory stores instructions executable by the at least one processor, and when the instructions are executed by the at least one processor, the at least one processor is enabled to implement the data mining method according to claim 7 .

9. A non-transitory computer-readable storage medium storing computer instructions, wherein the computer instructions are used to make the computer implement a data mining method, the method is applied to a trusted memory and calculator corresponding to a data user, and the method comprises:
sending a data calling request to a first trusted memory and calculator corresponding to a data provider through a transfer party, and the data calling request comprising an identifier of the data user and an identifier of data to be called, wherein only the transfer party has an access permission to the first trusted memory and calculator and the second trusted memory and calculator, the first trusted memory and calculator is configured to store available data of the data provider, the available data is data obtained by the transfer party from a device of a data provider and sent to the first trusted memory and calculator, and the second trusted memory and calculator is configured to

Assignees

• Beijing Baidu Netcom Sci & Tech Co Ltd

Inventors

• Liu Ji
• Xiong Haoyi
• Dou Dejing
• Huang Siyu
• Huang Jizhou
• Feng Zhi
• An Haozhe

Classifications

• G06F2221/034

  Test or assess a computer or a system · CPC title

• G06F2216/03

  Data mining · CPC title

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G16H50/80

  for detecting, monitoring or modelling epidemics or pandemics, e.g. flu · CPC title

• G16H50/70

  for mining of medical data, e.g. analysing previous cases of other patients · CPC title