Information processing method, trusted server, and cloud server

• US 10,063,655 B2
• Filed: 08/07/2015
• Issued: 08/28/2018
• Est. Priority Date: 03/21/2013
• Status: Active Grant

• Current Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Device Dongguan Co Ltd (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wang, Chan, Wu, Huangwei
• Primary Examiner(s): Armouche, Hadi S
• Assistant Examiner(s): Doan, Huan V
• Application Number:
  US14/820,673
• Publication Number:
  US 20150350375A1
• Time in Patent Office: 1,117 Days
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

An information processing method, a trusted server, and a cloud server. The method includes acquiring user data of a user terminal, extracting summary information of the user data, where the summary information includes privacy information and non-privacy information of a user, generating a unique identifier (UID) for the privacy information, and transmitting the non-privacy information and the UID to a cloud server, so that the cloud server saves a correspondence between the non-privacy information and the UID.

Claims

1. A system, comprising:

a cloud server comprising a memory; and

a trusted server in communication with the cloud server, the trusted server comprising;

a processor; and

a memory coupled to the processor and configured to store executable program code, the processor being configured to execute the executable program code to;

receive a key request message including a user identity from a user terminal;

return an encryption key to the user terminal such that the user terminal uploads encrypted user data to the cloud server, the encrypted user data being encrypted using the encryption key;

receive a notification message from the user terminal indicating that the encrypted user data has been uploaded to the cloud server;

send a data request message including the user identity to the cloud server to request for the encrypted user data;

receive the encrypted user data from the cloud server;

decrypt the encrypted user data using the encryption key to obtain user data;

extract summary information of the user data, the summary information comprising privacy information and non-privacy information of a user;

generate a unique identifier (UID) for the privacy information; and

transmit the non-privacy information and the UID to the cloud server;

the cloud server being configured to;

save the non-privacy information, the UID, and a correspondence between the non-privacy information and the UID;

receive requirement information from a third party terminal; and

send the UID to the third party terminal when the non-privacy information matches the requirement information; and

the trusted server being further configured to;

save a correspondence between the privacy information and the UID;

receive push information and the UID from the third party terminal;

obtain the privacy information corresponding to the UID; and

send the push information to the user terminal according to user address information comprised in the privacy information.

2. The system of claim 1, wherein the trusted server is deployed between the cloud server and the user terminal.

3. The system of claim 1, wherein the trusted server is configured with a certificate authority (CA) center configured to implement identity authentication between the cloud server, the user terminal, and the third party terminal.