Information Processing Method, Trusted Server, and Cloud Server

• US 20150350375A1
• Filed: 08/07/2015
• Published: 12/03/2015
• Est. Priority Date: 03/21/2013
• Status: Active Grant

• Current Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wang, Chan, Wu, Huangwei
• Granted Patent: US 10,063,655 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

An information processing method, a trusted server, and a cloud server. The method includes acquiring user data of a user terminal, extracting summary information of the user data, where the summary information includes privacy information and non-privacy information of a user, generating a unique identifier (UID) for the privacy information, and transmitting the non-privacy information and the UID to a cloud server, so that the cloud server saves a correspondence between the non-privacy information and the UID.

Claims

1. An information processing method applied to a trusted server, wherein the method comprises:

acquiring user data of a user terminal;

extracting summary information of the user data, wherein the summary information comprises privacy information and non-privacy information of a user;

generating a unique identifier (UID) for the privacy information; and

transmitting the non-privacy information and the UID to a cloud server, so that the cloud server saves a correspondence between the non-privacy information and the UID.

2. The method according to claim 1, wherein after extracting the summary information of the user data, the method further comprises saving a correspondence between the privacy information and the UID.

3. The method according to claim 1, wherein acquiring the user data of the user terminal comprises:

receiving a notification message from the user terminal, wherein the notification message is used to notify that encrypted user data has been uploaded to the cloud server by the user terminal, and the encrypted user data is obtained by the user terminal after encrypting the user data according to a delivered encryption key;

sending, to the cloud server according to the notification message, a data request message, wherein the data request message is used to request for the encrypted user data;

receiving the encrypted user data that is returned by the cloud server according to the data request message; and

decrypting the encrypted user data by using the encryption key, to obtain decrypted user data.

4. The method according to claim 3, wherein before receiving the notification message from the user terminal, the method further comprises:

receiving a key request message sent by the user terminal; and

delivering the encryption key to the user terminal according to the key request message, so that the user terminal transmits the encrypted user data to the cloud server after encrypting the user data according to the encryption key.

5. The method according to claim 1, wherein the acquiring user data of the user terminal comprises:

receiving the user data of the user terminal, wherein the user data is uploaded by the user terminal;

encrypting the user data by using an encryption key agreed with the user terminal; and

transmitting encrypted user data to the cloud server.

6. The method according to claim 2, wherein the method further comprises:

receiving push information and a UID from a third party terminal, wherein the UID is obtained and sent to the third party terminal by the cloud server after receiving requirement information from the third party terminal corresponding to non-privacy information matching the requirement information;

obtaining privacy information corresponding to the UID; and

sending the push information according to user address information comprised in the privacy information.

7. An information processing method, wherein the method comprises:

receiving non-privacy information and a unique identification (UID) of a user that are transmitted by a trusted server, wherein the non-privacy information is information comprised in summary information that is extracted by the trusted server from acquired user data, wherein the summary information further comprises privacy information of the user, and wherein the UID is generated for the privacy information by the trusted server; and

saving a correspondence between the non-privacy information and the UID.

8. The method according to claim 7, wherein the method further comprises:

receiving requirement information from a third party terminal;

matching saved non-privacy information to the requirement information to obtain a UID corresponding to non-privacy information that matches the requirement information; and

sending obtained UID corresponding to the non-privacy information to the third party terminal, so that, after the third party terminal sends the UID and push information to the trusted server, the trusted server sends the push information according to user address information comprised in privacy information corresponding to the UID.

9. A trusted server, wherein the trusted server comprises:

an acquiring unit configured to acquire user data of a user terminal;

an extracting unit configured to extract summary information of the user data acquired by the acquiring unit, wherein the summary information comprises privacy information and non-privacy information of a user;

a generating unit configured to generate a unique identifier (UID) for the privacy information in the summary information extracted by the extracting unit; and

a transmitting unit configured to transmit, to a cloud server, the non-privacy information in the summary information extracted by the extracting unit and the UID generated by the generating unit, so that the cloud server saves a correspondence between the non-privacy information and the UID.

10. The trusted server according to claim 9, wherein the trusted server further comprises a saving unit configured to save a correspondence between the privacy information in the summary information extracted by the extracting unit and the UID generated by the generating unit.

11. The trusted server according to claim 9, wherein the acquiring unit comprises:

a notification message receiving sub-unit configured to receive a notification message from the user terminal, wherein the notification message is used to notify that encrypted user data has been uploaded to the cloud server by the user terminal, and wherein the encrypted user data is obtained by the user terminal after encrypting the user data according to a delivered encryption key;

a data request sending sub-unit configured to send, to the cloud server according to the notification message received by the notification message receiving sub-unit, a data request message that is used to request for the encrypted user data;

an encrypted data receiving sub-unit configured to receive the encrypted user data that is returned by the cloud server according to the data request message from the request message sending sub-unit; and

an encrypted data decrypting sub-unit configured to decrypt, by using the encryption key, the encrypted user data received by the encrypted data receiving sub-unit, to obtain decrypted user data.

12. The trusted server according to claim 11, wherein the trusted server further comprises:

a first receiving unit configured to receive a key request message from the user terminal; and

a delivering unit configured to deliver the encryption key to the user terminal according to the key request message received by the first receiving unit, so that the user terminal transmits the encrypted user data to the cloud server after encrypting the user data according to the encryption key.

13. The trusted server according to claim 9, wherein the acquiring unit comprises a user data receiving sub-unit configured to receive the user data, wherein the user data of the user terminal is uploaded by the user terminal, and wherein the trusted server further comprises an encrypting unit configured to encrypt, by using an encryption key agreed with the user terminal, the user data received by the user data receiving sub-unit, wherein the transmitting unit is further configured to transmit, to the cloud server, encrypted user data that is output by the encrypting unit.

14. The trusted server according to claim 10, wherein the trusted server further comprises:

a second receiving unit configured to receive push information and a UID from a third party terminal, wherein the UID is obtained and sent to the third party terminal by the cloud server after receiving requirement information from the third party terminal corresponding to non-privacy information matching the requirement information;

an obtaining unit configured to obtain privacy information corresponding to the UID received by the second receiving unit; and

a sending unit configured to send the push information according to user address information comprised in the privacy information acquired by the obtaining unit.

15. A cloud server, wherein the cloud server comprises:

a first receiving unit configured to receive non-privacy information and a unique identification (UID) of a user that are transmitted by a trusted server, wherein the non-privacy information is information comprised in summary information that is extracted by the trusted server from acquired user data, wherein the summary information further comprises privacy information of the user, and wherein the UID is generated for the privacy information by the trusted server; and

a saving unit configured to save a correspondence between the non-privacy information and the UID that are received by the first receiving unit.

16. The cloud server according to claim 15, wherein the cloud server further comprises:

a second receiving unit configured to receive requirement information from a third party terminal;

a matching unit configured to match the non-privacy information saved by the saving unit to the requirement information received by the second receiving unit, to obtain a UID corresponding to non-privacy information that matches the requirement information; and

a sending unit configured to send the UID corresponding to the non-privacy information and obtained by the matching unit to the third party terminal, so that, after the third party terminal sends the UID and push information to the trusted server, the trusted server sends the push information according to user address information comprised in privacy information corresponding to the UID.