Encrypted data exchange

Patent metadata

Field	Value
Publication number	US-2020175178-A1
Application number	US-202016778989-A
Country	US
Kind code	A1
Filing date	Jan 31, 2020
Priority date	Aug 1, 2019
Publication date	Jun 4, 2020
Grant date	—

Abstract

A computer-implemented method includes: encrypting, by a first data party, identification data to generate a first identification data ciphertext, in which the first data party holds an identification dataset including the identification data; sending a first ciphertext set to a second data party, in which the first ciphertext set includes the first identification data ciphertext; receiving a second ciphertext set from the second data party; decrypting the second identification data ciphertext to generate a third identification data ciphertext, in which a third ciphertext set includes the third identification data ciphertext; receiving a fourth ciphertext set from the second data party, obtaining the third identification data ciphertext common to the third ciphertext set and the fourth ciphertext set; calculating a homomorphic addition result of the business data ciphertext corresponding to the third identification data ciphertext; and sending the homomorphic addition result to the second data party.

First claim

What is claimed is:

1 . A computer-implemented method, comprising
encrypting, by a first data party, identification data to generate a first identification data ciphertext, wherein the first data party holds an identification dataset comprising the identification data; sending a first ciphertext set to a second data party, wherein the first ciphertext set comprises the first identification data ciphertext; receiving a second ciphertext set from the second data party, wherein the second ciphertext set comprises second identification data ciphertext, and wherein the second identification data ciphertext is obtained by encrypting the first identification data ciphertext; decrypting the second identification data ciphertext to generate a third identification data ciphertext, wherein a third ciphertext set comprises the third identification data ciphertext; receiving a fourth ciphertext set from the second data party,
wherein the fourth ciphertext set comprises a ciphertext subset,
wherein the ciphertext subset comprises the third identification data ciphertext and a business data ciphertext,
wherein the third identification data ciphertext has a mapping relationship with the business data ciphertext, and
wherein the business data ciphertext comprises a homomorphic ciphertext;
obtaining the third identification data ciphertext common to the third ciphertext set and the fourth ciphertext set; calculating a homomorphic addition result of the business data ciphertext corresponding to the third identification data ciphertext; and sending the homomorphic addition result to the second data party.

2 . The computer-implemented method of claim 1 , wherein encrypting the identification data comprises:
obtaining a code of the identification data; and encrypting the code of the identification data.

3 . The computer-implemented method of claim 1 ,
wherein the first data party holds an encryption key; wherein encrypting the identification data comprises encrypting the identification data using the encryption key; and wherein decrypting the second identification data ciphertext comprises decrypting the second identification data ciphertext using a decryption key corresponding to the encryption key.

4 . The computer-implemented method of claim 1 , wherein decrypting the second identification data ciphertext to generate the third identification data ciphertext comprises:
decrypting the second identification data ciphertext to obtain a decryption result; and obtaining a code of the decryption result as the third identification data ciphertext in the third ciphertext set.

5 . The computer-implemented method of claim 4 , wherein the code comprises a hash value.

6 . The computer-implemented method of claim 1 , wherein sending the first ciphertext set to the second data party comprises:
reordering identification data ciphertexts in the first ciphertext set to obtain an out-of-order first ciphertext set; and sending the out-of-order first ciphertext set to the second data party.

7 . A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising
encrypting, by a first data party, identification data to generate a first identification data ciphertext, wherein the first data party holds an identification dataset comprising the identification data; sending a first ciphertext set to a second data party, wherein the first ciphertext set comprises the first identification data ciphertext; receiving a second ciphertext set from the second data party, wherein the second ciphertext set comprises second identification data ciphertext, and wherein the second identification data ciphertext is obtained by encrypting the first identification data ciphertext; decrypting the second identification data ciphertext to generate a third identification data ciphertext, wherein a third ciphertext set comprises the third identification data ciphertext; receiving a fourth ciphertext set from the second data party,
wherein the fourth ciphertext set comprises a ciphertext subset,
wherein the ciphertext subset comprises the third identification data ciphertext and a business data ciphertext,
wherein the third identification data ciphertext has a mapping relationship with the business data ciphertext, and
wherein the business data ciphertext comprises a homomorphic ciphertext;
obtaining the third identification data ciphertext common to the third ciphertext set and the fourth ciphertext set; calculating a homomorphic addition result of the business data ciphertext corresponding to the third identification data ciphertext; and sending the homomorphic addition result to the second data party.

8 . The non-transitory, computer-readable medium of claim 7 , wherein encrypting the identification data comprises:
obtaining a code of the identification data; and encrypting the code of the identification data.

9 . The non-transitory, computer-readable medium of claim 7 ,
wherein the first data party holds an encryption key; wherein encrypting the identification data comprises encrypting the identification data using the encryption key; and wherein decrypting the second identification data ciphertext comprises decrypting the second identification data ciphertext using a decryption key corresponding to the encryption key.

10 . The non-transitory, computer-readable medium of claim 7 , wherein decrypting the second identification data ciphertext to generate the third identification data ciphertext comprises:
decrypting the second identification data ciphertext to obtain a decryption result; and obtaining a code of the decryption result as the third identification data ciphertext in the third ciphertext set.

11 . The non-transitory, computer-readable medium of claim 10 , wherein the code comprises a hash value.

12 . The non-transitory, computer-readable medium of claim 7 , wherein sending the first ciphertext set to the second data party comprises:
reordering identification data ciphertexts in the first ciphertext set to obtain an out-of-order first ciphertext set; and sending the out-of-order first ciphertext set to the second data party.

13 . A computer-implemented system, comprising:
one or more computers; and one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
encrypting, by a first data party, identification data to generate a first identification data ciphertext, wherein the first data party holds an identification dataset comprising the identification data;
sending a first ciphertext set to a second data party, wherein the first ciphertext set comprises the first identification data ciphertext;
receiving a second ciphertext set from the second data party, wherein the second ciphertext set comprises second identification data ciphertext, and wherein the second identification data ciphertext is obtained by encrypting the first identification data ciphertext;
decrypting the second identification data ciphertext to generate a third identification data ciphertext, wherein a third ciphertext set comprises the third identification data ciphertext;
receiving a fourth ciphertext set from the second data party,
wherein the fourth ciphertext set comprises a ciphertext subset,
wherein the ciphertext subset comprises the third identification data ciphertext and a business data ciphertext,
wherein the third identification data ciphertext

Assignees

• Alibaba Group Holding Ltd

Inventors

• Li Lichun
• Lin Wenzhen
• Yin Shan

Classifications

• H04L9/008 Primary

  involving homomorphic encryption · CPC title

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06F21/60 Primary

  Protecting data · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title