A kind of service competition method based on cloud platform under secret protection
Technical field
The present invention relates to computer techno-stress technical field, and in particular to the service based on cloud platform under a kind of secret protection
Competing method.
Background technology
With Internet of Things, internet+, the fast development of the science and technology such as intelligence manufacture, and living standard by
Step is improved, requirement more and more higher of the people to quality of the life, also more focuses on the personalization in life so that " customization " becomes
A kind of life style and attitude, it is small to personal belongings such as clothing, cup, jewellery, decorate greatly, wedding is planned, can enter to house
Row personalized customization.All kinds of customization versions, limited edition commodity also emerge in an endless stream, and have not only been related to virtual goodses but also including physical goods.
Manufactured along with cloud, intelligence manufacture, the proposition of the advanced concept such as service orientation type enterprise, Personalized service steps
Gone out a bigger step, public users can not only customize simple articles for daily use, basic service for life, it might even be possible to compared with
High performance-price ratio, which customizes unique automobile product, research equipment, health diagnosis and treatment instrument etc., has the article of high scientific and technological content.
The continuous popularization of Personalized service, can promote to vie each other between enterprise.Be different from traditional technology competition,
Price competition, advertising promotion competition etc., the service competition brought by personalized customization are a kind of brand-new competing under market economy
Form is striven, it is enterprise for the real needs for meeting client, the trust for targetedly winning high-quality user, lifting user
Satisfaction, the market competition for expanding business impact power and carrying out.It was verified that the outstanding representation in service competition is enterprise
Dominate the market the magic weapon of commanding elevation, is the strategic choice in enterprise operation.
In existing personalized customization method, what is often maintained between demand for services side and service provider is a kind of a pair
One relation, i.e., the form such as provide by means of the network promotion, advertisement, after the foundation of demand for services side and corresponding service provider is contacted,
Clear and definite customized demand is provided and service details are further discussed.For example, by taking the designing and producing of resume as an example, demand for services side
Relevant design service provider and printing service provider are required to look up, needs to include in after getting in touch with them there is provided resume
Detailed content, discussion design style and the problems such as expense, carry out processing and fabricating after reaching an agreement.
The above-mentioned prominent question existed in the prior art following aspects:
One is that demand for services side generally requires to disclose the customized demand comprising privacy information to a certain extent, causes privacy
Safety can not ensure;
Two be service provider's limited amount that demand for services side can be inquired and the good and bad jumbled together, and service quality can not be protected
Card;
Three, which are the absence of party intermediary, carries out the work such as corresponding work is consulted, contradiction reconciles.
The content of the invention
In view of the shortcomings of the prior art, problem solved by the invention is how to set up one kind to realize to demand for services
The secret protection of side, meet the personalized service demand of demand for services side, and with higher efficiency of service and service quality
Service competition method.
In order to solve the above technical problems, the technical scheme that provides of the present invention is to be based on cloud platform service under a kind of secret protection
The service competition method of device, this method can be completed to include demand for services on the premise of demand for services side's personal secrets are ensured
Issue, the selected of service provider, the negotiation of service procedure, order status tracking, the process such as service offering and examination it is complete
Periodic duty, including such as the next stage:
(1) the system preparatory stage, mainly comprising demand for services side's server, service provider server in cloud platform service
Registration on device and trusted authorization central server, trusted authorization central server runs the processes such as attribute base encryption policy;Tool
Body is comprised the following steps:
1) demand for services side's server completes to register in cloud platform server;
2) service provider server completes to register in cloud platform server;
3) trusted authorization central server is set up secure communication with demand for services side's server, service provider server and led to
Road, and run the Setup algorithms in attribute base encryption policy, generation system public key PK, master key MK.
(2) demand for services generation and presentation stage, mainly formulate demand for services comprising demand for services side's server, formulate and visit
Control strategy AP is asked, demand for services is encrypted and cloud platform server is uploaded to;Specifically comprise the following steps:
1) demand for services side's server formulates detailed demand for services, and is expressed as data M with plaintext version;
2) demand for services side's server formulates access control policy AP;
3) demand for services side's server obtains the system public key PK at trusted authorization center;
4) the Encrypt algorithms in demand for services side's server operation attribute base encryption policy, by means of access control plan
The demand for services data M of plaintext version is encrypted slightly AP, obtains the demand for services data CT of ciphertext form;
5) the demand for services data CT of ciphertext form is uploaded to cloud platform server by demand for services side's server.
(3) service competition and screening stage, mainly comprising service provider server download service demand and attempt decryption,
Decide whether to participate in service competition, demand for services side's server sieves all service provider servers for participating in competition
Select and be uploaded to cloud platform server with winning competitor's negotiation formulation service plan, vital document and carry out the process such as backing up;Tool
Body is comprised the following steps:
1) service provider server provides attribute set S and gives trusted authorization central server;
2) the Keygen algorithms in trusted authorization central server operation attribute base encryption policy, are service according to set S
Provider server generation private key SK;
3) private key SK is sent to service provider server by trusted authorization central server;
4) service provider server passes through cloud platform server downloading data CT;
5) the Decrypt algorithms in service provider server operation attribute base encryption policy, by means of private key SK logarithms
It is decrypted according to CT, and if only if when attribute set S meets AP successful decryption and the demand for services M for obtaining plaintext version.If solution
Close success, then proceed competition, otherwise terminate competition process;
6) service provider server checks demand for services M, and decides whether to participate in service competition.If participating in competition,
Continue next step operation, otherwise terminate competition process;
7) service provider server formulates service plan according to demand for services;
8) service plan is uploaded to cloud platform server by service provider server;
9) demand for services side's server receives all service plans that service provider server is submitted, and chooses the best alternatives
The service provider server for winning competition is selected, and bulletin is issued via cloud platform server;
10) the service provider server login cloud platform server for participating in competition checks bulletin, if winning current competitive,
Then continue next step operation, otherwise terminate competition process;
11) service provider server for winning current competitive is consulted to formulate detailed clothes with demand for services side's server
Business scheme simultaneously signs service contract;
12) demand for services side's server and service provider server respectively by the service plan produced in negotiations process,
The vital documents such as agreement contract are uploaded to cloud platform server archive.
(4) service offering and acceptance phase, mainly provide phase comprising service provider server according to given service scheme
It should service, cloud platform server carries out management and control, demand for services side's server to service process and the process such as service carried out an acceptance inspection;Tool
Body is comprised the following steps:
1) demand for services side's server down payment and real-time tracking order status;
2) service provider server progressively provides respective service according to given service scheme, and enters in cloud platform server
Row real-time status updates;
3) cloud platform server carries out management and control to service provider server, such as sampling check for quality, progress supervision;
4) service provider server completes to service according to given service scheme, and carrying out registration in cloud platform server takes out
Inspection;
5) service provider server is delivered the service that examination passes through;
6) demand for services side's server closes remaining fund after confirming;
7) demand for services side's server services in cloud platform server registers and completes and service is scored.
So far, competitive service terminates.
As a further improvement on the present invention, after service terminates, in the event of Transaction Disputes, demand for services side's server
With any one party in service provider server, it can initiate to appeal by cloud platform server, and in demand for services side's clothes
It is engaged in after device, service provider server and cloud platform server tripartite deliberation, is made the award by cloud platform server.
Access control to demand for services can be realized using technical scheme, ensure demand for services side's server
Personal secrets, Standard Service design, improve efficiency of service and quality, shorten service cycle, realize complete period management and control, control user
Demand, reduction operation cost of enterprises, enhancing enterprise competitiveness, promotion industry development, and it is overall with preferable scalability.
Brief description of the drawings
Fig. 1 is the system structural framework figure of the present invention;
Fig. 2 is the block schematic illustration for being used for realizing the attribute base encryption policy of secret protection in the present invention;
Fig. 3 is flow chart of the present invention;
Fig. 4 is flow chart of the embodiment of the present invention.
Embodiment
The embodiment to the present invention is further described with reference to the accompanying drawings and examples, but is not to this hair
Bright restriction.
Fig. 1 shows the service competition system based on cloud platform under a kind of secret protection, including:Demand for services side is serviced
Device, cloud platform server, service provider server, trusted authorization central server, system are ensureing the demand for services side
On the premise of server personal secrets, the issue comprising demand for services, the selected of service provider server, service procedure are completed
Negotiation, order status tracking, service offering with check and accept etc. process complete period sex work.
Fig. 2 shows the attribute base encryption policy for realizing secret protection, includes following algorithm:
(1) Setup algorithms, are performed, primary operational by trusted authorization central server:Generation system public key PK and master key
MK;
(2) Encrypt algorithms, are performed, primary operational by demand for services side's server:
1) the system public key PK of trusted authorization central server generation is obtained;
2) corresponding access structure is generated according to pre-defined access control policy;
3) cryptographic operation to the demand for services data M of plaintext version is further completed based on the access structure;
4) the ciphertext form demand for services data CT of generation is uploaded to cloud platform server;
(3) Keygen algorithms, are performed, primary operational by trusted authorization central server:
1) the attribute set S that provider server is provided is received;
2) private key for user SK is generated according to attribute set S;
(4) Decrypt algorithms, are performed by service provider server, primary operational:
1) service provider server obtains the demand for services data CT of ciphertext form from cloud platform server;
2) decryption to ciphertext form demand for services data CT is completed according to owned private key SK, obtains plaintext version
Demand for services data M.
Fig. 3 shows flow chart of the present invention, a kind of service competition method based on cloud platform server under secret protection, should
Method can be completed comprising the issue of demand for services, service provider on the premise of demand for services side's personal secrets are ensured
The complete period sex work of the processes such as the selected, negotiation of service procedure, order status tracking, service offering and examination, including it is as follows
Stage:
(1) the system preparatory stage, mainly comprising demand for services side's server, service provider server in cloud platform service
Registration on device and trusted authorization central server, trusted authorization central server runs the processes such as attribute base encryption policy;Tool
Body is comprised the following steps:
1) demand for services side's server completes to register in cloud platform server;
2) service provider server completes to register in cloud platform server;
3) trusted authorization central server is set up secure communication with demand for services side's server, service provider server and led to
Road, and run the Setup algorithms in attribute base encryption policy, generation system public key PK, master key MK.
(2) demand for services generation and presentation stage, mainly formulate demand for services comprising demand for services side's server, formulate and visit
Control strategy AP is asked, demand for services is encrypted and cloud platform server is uploaded to;Specifically comprise the following steps:
1) demand for services side's server formulates detailed demand for services, and is expressed as data M with plaintext version;
2) demand for services side's server formulates access control policy AP;
3) demand for services side's server obtains the system public key PK at trusted authorization center;
4) the Encrypt algorithms in demand for services side's server operation attribute base encryption policy, by means of access control plan
The demand for services data M of plaintext version is encrypted slightly AP, obtains the demand for services data CT of ciphertext form;
5) the demand for services data CT of ciphertext form is uploaded to cloud platform server by demand for services side's server.
(3) service competition and screening stage, mainly comprising service provider server download service demand and attempt decryption,
Decide whether to participate in service competition, demand for services side's server sieves all service provider servers for participating in competition
Select and be uploaded to cloud platform server with winning competitor's negotiation formulation service plan, vital document and carry out the process such as backing up;Tool
Body is comprised the following steps:
1) service provider server provides attribute set S and gives trusted authorization central server;
2) the Keygen algorithms in trusted authorization central server operation attribute base encryption policy, are service according to set S
Provider server generation private key SK;
3) private key SK is sent to service provider server by trusted authorization central server;
4) service provider server passes through cloud platform server downloading data CT;
5) the Decrypt algorithms in service provider server operation attribute base encryption policy, by means of private key SK logarithms
It is decrypted according to CT, and if only if when attribute set S meets AP successful decryption and the demand for services M for obtaining plaintext version.If solution
Close success, then proceed competition, otherwise terminate competition process;
6) service provider server checks demand for services M, and decides whether to participate in service competition.If participating in competition,
Continue next step operation, otherwise terminate competition process;
7) service provider server formulates service plan according to demand for services;
8) service plan is uploaded to cloud platform server by service provider server;
9) demand for services side's server receives all service plans that service provider server is submitted, and chooses the best alternatives
The service provider server for winning competition is selected, and bulletin is issued via cloud platform server;
10) the service provider server login cloud platform server for participating in competition checks bulletin, if winning current competitive,
Then continue next step operation, otherwise terminate competition process;
11) service provider server for winning current competitive is consulted to formulate detailed clothes with demand for services side's server
Business scheme (this process may be carried out repeatedly) simultaneously signs service contract;
12) demand for services side's server and service provider server respectively by the service plan produced in negotiations process,
The vital documents such as agreement contract are uploaded to cloud platform server archive.
(4) service offering and acceptance phase, mainly provide phase comprising service provider server according to given service scheme
It should service, cloud platform server carries out management and control, demand for services side's server to service process and the process such as service carried out an acceptance inspection;Tool
Body is comprised the following steps:
1) demand for services side's server down payment and real-time tracking order status;
2) service provider server progressively provides respective service according to given service scheme, and enters in cloud platform server
Row real-time status updates;
3) cloud platform server carries out management and control to service provider server, such as sampling check for quality, progress supervision;
4) service provider server completes to service according to given service scheme, and carrying out registration in cloud platform server takes out
Inspection;
5) service provider server is delivered the service that examination passes through;
6) demand for services side's server closes remaining fund after confirming;
7) demand for services side's server services in cloud platform server registers and completes and service is scored.
So far, competitive service terminates.
Embodiment:
It is each in service competition system so that enterprise B is by competing medicine equipment customization processing service of the completion to user A as an example
The data interaction of individual inter-entity as shown in figure 4, under the secret protection service competition based on cloud platform be divided into four-stage:
(1) the system preparatory stage
1) demand for services side's server such as user A completes to register in cloud platform server;
2) service provider server such as enterprise B completes to register in cloud platform server;
3) trusted authorization central server is set up secure communication with demand for services side's server, service provider server and led to
Road, and run the generation system public key of the Setup algorithms in attribute base encryption policy PK, master key MK.
(2) demand for services generation and presentation stage
1) user A formulates detailed demand for services, such as purposes of the medicine equipment, size, applicable crowd, Material Processing
Deng, and data M is expressed as with plaintext version;
2) user A formulates access control policy AP, such as:Possessing medicine equipment production qualification ∧, ((client is full by listed company ∨
Meaning degree>90% ∧ registered capitals>5000000 yuan));
3) user A obtains the system public key PK at trusted authorization center;
4) user A runs the Encrypt algorithms in attribute base encryption policy, by means of control strategy AP to plaintext version
Demand for services data M is encrypted, and obtains the demand for services data CT of ciphertext form;
5) the demand for services data CT of ciphertext form is uploaded to cloud platform server by user A;
(3) service competition and screening stage
1) service provider server provides attribute set S and gives trusted authorization central server;
2) the Keygen algorithms in trusted authorization central server operation attribute base encryption policy, according to attribute set S, be
Service provider server generation private key SK;
3) private key SK is sent to service provider server by trusted authorization central server;
4) service provider server passes through cloud platform server downloading data CT;
5) the Decrypt algorithms in service provider server operation attribute base encryption policy, by means of private key SK logarithms
It is decrypted according to CT, and if only if when attribute set S meets AP successful decryption and the demand for services M for obtaining plaintext version.
By taking enterprise B as an example, its attribute possessed is (to possess medicine equipment production qualification, CSAT=98%, registration
Fund=8,000,000 yuan), it is clear that the access control policy AP of user A formulations, therefore successful decryption are met, proceeds competition;And
The attribute that enterprise C possesses is (not possessing medicine equipment production qualification, CSAT=5%, registered capital=500,000 yuan), nothing
Method meets the access control policy AP of user A formulations, therefore decryption failure, terminates competition process;
The process can cross the privacy information (individual such as name, sex, morbid state and home address for ensureing user A
Information, the sequence information such as medicine equipment species, quantity and parameter) the poor enterprise C of credit worthiness is not leaked to, so that in certain journey
Ensure the information security of user on degree.
6) service provider server checks demand for services M, and decides whether to participate in service competition.If participating in competition,
Continue next step operation, otherwise terminate competition process;
7) service provider server formulates medicine equipment customization processing scheme according to demand for services;
8) medicine equipment each formulated customization processing scheme is uploaded to cloud platform clothes by service provider server respectively
Business device;
9) demand for services side's server receives all medicine equipments customization processing scheme that service provider server is submitted,
And all service provider servers are ranked up to choose the best alternatives, that is, select the service provider's (vacation for winning competition
It is set to enterprise B) and issue bulletin via cloud platform server;
Enterprise can participate in competition to get a profit, expand the reasons such as popularity, therefore, and this process ensure that flat
There are enough enterprises to participate in competition on platform so that user can possess enough selections, and excite enterprise to a certain extent
The creativity of industry, the competitiveness for strengthening enterprise.
Wherein, the sequencer procedure of all service provider servers can be scored by means of related mathematical theory,
Highest scoring person wins competition.Such as:The service provider server i score function for participating in competition is:
Wherein, Si(hundred-mark system) is scored for the service plan that service provider server i is uploaded;CiTaken for service provider
The conventional service quality of device i of being engaged in scores (being evaluated jointly by cloud platform server and conventional user), CmaxTo be serviced in similar service provider
Quality score peak;TiThe punctual delivery rate serviced in the past for service provider server i, TmaxTo be taken in similar service provider
The peak for punctual delivery rate of being engaged in.
10) the service provider server login cloud platform server for participating in competition checks bulletin, if winning current competitive,
Then continue next step operation (enterprise B), otherwise terminate competition process (enterprise of all participations competition in addition to enterprise B);
11) enterprise B consults to formulate detailed service plan (this process may be carried out repeatedly) and sign clothes with user A
Business contract;
12) vital documents such as the service plan produced in negotiations process, agreement contract are uploaded to by user A, enterprise B respectively
Cloud platform server is achieved.
(4) service offering and acceptance phase
1) user A down payment and real-time tracking order status;
2) enterprise B progressively provides respective service according to given service scheme, and carries out real-time status in cloud platform server
Update;
3) cloud platform server carries out management and control to enterprise B, such as sampling check for quality, progress supervision;
4) enterprise B is completed to service according to given service scheme, and registration sampling observation is carried out in cloud platform server;
5) enterprise B is delivered the service that examination passes through;
6) user A closes remaining fund after confirming;
7) user A is serviced in cloud platform server registers and is completed and service is scored.
So far, enterprise B is completed by competition and customizes processing service to user A medicine equipment.
Access control to demand for services can be realized using technical scheme, ensure demand for services side's server
Personal secrets, Standard Service design, improve efficiency of service and quality, shorten service cycle, realize complete period management and control, control user
Demand, reduction operation cost of enterprises, enhancing enterprise competitiveness, promotion industry development, and it is overall with preferable scalability.
Embodiments of the present invention are made that with detailed description above in association with accompanying drawing, but the present invention be not limited to it is described
Embodiment.To those skilled in the art, without departing from the principles and spirit of the present invention, these are implemented
Mode carries out various change, modification, replacement and modification and still fallen within protection scope of the present invention.