CN103067918B - Method, device and system of privacy data anonymization in communication network - Google Patents

Abstract

Provided is a method, a device and a system of privacy data anonymization in a communication network. The method of the privacy data anonymization in the communication network comprises the following steps of receiving a directive of opening an anonymization function sent by an anonymization control center, recognizing privacy data in raw information generated by operating business, and carrying out anonymization process of the privacy data in the raw information generated by operating business. When the method, the device and the system of the privacy data anonymization in the communication network are in use, sensitive data in the raw information is processed in an anonymization mode, equipment maintenance businessmen are incapable of restoring the sensitive data form data which are processed in the anonymization mode, and leakage of the sensitive data is avoided.

Description

A method, device and system for anonymizing private data in a communication network

technical field

The present invention relates to the communication field, in particular to a method, device and system for anonymizing private data in a communication network.

Background technique

Privacy protection has become a basic concern of individuals or institutions, and the emergence of various data mining tools has made the problem of privacy leakage increasingly prominent. Generally, publishing data by removing identifiers cannot prevent privacy leaks, and attackers can still obtain users' private data with a high probability through link operations. Anonymization is one of the main technologies to achieve privacy protection in the current data publishing environment.

In the current communication network, there is a large amount of personal information, such as the user's mobile phone number, IMSI (International Mobile Subscriber Identification, IMSI for short), the IP address of the user's device, and the user's Internet access records. When equipment providers perform communication network maintenance, such as fault location, etc., they generally need to capture information at the signaling level to diagnose the cause of the problem, but this information usually includes personal information. According to laws in some countries, personal information data It is private data, and it is forbidden to carry it out from the operator's internal network, which will make it impossible to use this information to locate and diagnose problems.

Contents of the invention

Embodiments of the present invention provide a method, device and system for anonymizing private data in a communication network to solve the problem in the prior art that the original information containing sensitive data is prohibited from being carried out, so the communication system cannot be maintained.

In order to solve the above technical problems, the first aspect of the embodiment of the present invention provides a method for anonymizing private data in a communication network, including:

Receive an instruction to enable the anonymization function sent by the anonymization control center;

Identify private data in raw information generated by running a business;

According to the instruction of enabling the anonymization function, the private data in the original information generated by running the business is anonymized.

In the first possible implementation manner, after anonymizing the private data in the original information, further include:

Reporting the anonymized private data and the non-private data in the original information to the anonymization control center.

With reference to the first possible implementation of the first aspect, in a second possible implementation, the anonymizing the private data in the original information includes:

Converting the original information into tree structure data, the leaf node data of the tree structure data includes private data and non-private data;

An anonymization function is used to anonymize the private data in the leaf node. In combination with the second possible implementation of the first aspect, in the third possible implementation, different anonymization functions are used to anonymize the private data in different leaf nodes, and the different anonymization functions are different hashing functions. Greek mapping.

In combination with the first aspect, in a fourth possible implementation manner, the identification of private data in the original information generated by running the business includes:

According to the data type of the private data contained in the indication of the anonymization function, it is identified that the data matching the data type in the original data is private data; or

The network element side device pre-configures the data type of the private data, and identifies the data matching the data type in the original data as the private data.

The second aspect of the present invention provides a device for anonymizing private data in a communication network, including:

An instruction receiving module, configured to receive an instruction to enable the anonymization function sent by the anonymization control center;

The identification module is used to identify the private data in the original information generated by running the business;

An anonymization processing module, configured to anonymize the private data identified by the identification module according to the instruction to enable the anonymization function.

In the first possible implementation manner, it also includes:

The information reporting module is configured to report the anonymized private data and the non-private data in the original information to the anonymization control center.

In combination with the second aspect and the first possible implementation manner of the second aspect, in a second possible implementation manner, the anonymous processing module includes:

a data conversion unit, which converts the original information into tree-structured data, and the leaf node data of the tree-structured data includes private data and non-private data;

An anonymization processing unit, configured to anonymize the private data in the leaf node using an anonymization function.

In combination with the second possible implementation of the second aspect, the third possible implementation also includes:

The anonymous processing unit includes:

A hash mapping unit, configured to anonymize private data in different leaf nodes using different anonymization functions, where the different anonymization functions are different hash maps.

With reference to the second aspect, in a fourth possible implementation manner, the identification module,

According to the data type of the privacy data included in the indication of the anonymization function received by the indication receiving module, identify the data matching the data type in the original data as privacy data; or

It is used to preconfigure the data type of the private data, and identify the data matching the data type in the original data as the private data.

A third aspect of the present invention provides a communication system, including an anonymization control center and any device in the fourth possible implementation manners of the second aspect to the second aspect.

Implementing the embodiment of the present invention has the following beneficial effects:

By anonymizing the sensitive data in the original information, the equipment maintenance provider cannot restore the sensitive data from the anonymized data, avoiding the leakage of sensitive data, so the equipment supplier can carry the original information out of the operator's internal network to meet the Legal requirements for operators to protect personal privacy without compromising the maintenance efficiency of communication equipment.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

1 is a schematic flow diagram of a method for anonymizing private data in a communication network according to the present invention;

Fig. 2 is another schematic flowchart of a method for anonymizing private data in a communication network according to the present invention;

Fig. 3 is a schematic diagram of anonymization processing in Fig. 2;

Fig. 4 is a schematic structural diagram of a device for anonymizing private data in a communication network according to the present invention;

FIG. 5 is another structural schematic diagram of a device for anonymizing private data in a communication network according to the present invention;

Fig. 6 is a schematic structural diagram of the anonymous processing module in Fig. 5;

Fig. 7 is a schematic structural diagram of the anonymous processing unit in Fig. 6;

Fig. 8 is a schematic structural diagram of a communication system of the present invention;

Fig. 9 is another structural schematic diagram of a device for anonymizing private data in a communication network according to the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

Referring to Fig. 1, it is a schematic flow diagram of a method for anonymizing private data in a communication network of the present invention, including:

Step 101, receiving an instruction to enable the anonymization function sent by the anonymization control center;

Specifically, the device on the network element side receives an instruction to enable the anonymization function sent by the anonymization control center deployed in the network element management system. Here, the device on the network element side is a device different from the network element management system, and may be a mobile switching center, a home location register, a call session control functional entity, etc.; the network element management system may be a network management center, etc., the embodiment of the present invention is in This is not limited.

Step 102, identifying private data in the original information generated by the business;

The identification method may be to identify, according to the data type of the private data included in the indication of the anonymization function, that the data matching the data type in the original data is private data. Optionally, before step 101, the step of identifying the private data in the original information generated by running the service may pre-configure the data type of the private data on the network element side device, and match the original information with the data type to obtain private data. The embodiment of the present invention does not limit the specific identification method.

Step 103 , according to the instruction of enabling the anonymization function, anonymize the private data in the original information generated by running the business.

Specifically, the original information includes private data and non-private data, and the private data includes at least one of IMSI, phone number, and user surfing records, and may also be other private data. The network element side device has an anonymization function library stored in advance, and when the network element side device receives the instruction to enable the anonymization function sent by the anonymization control center, it loads the anonymization function in the anonymization function library, which will affect the operation of the business. The data is anonymized. Anonymization refers to the encryption of sensitive data in the original information using a security algorithm, such as a hash function, which can be a different hash mapping algorithm, or a replacement function, such as adding an asterisk to some digits of a phone number. Publishers will not cause leakage of sensitive data when publishing these original information, and at the same time can restore sensitive data in the original information under certain conditions. Here, the type of the anonymous function is not limited. In addition, the operation service in the embodiment of the present invention may be various signalings generated in the communication network such as calling, surfing the Internet, and transmitting data. When a network fault occurs, it is necessary to extract the data generated by running services for fault location.

The sensitive data in the original information, that is, the private data, has been anonymized by the network element side equipment, and the anonymized information can be released together with the non-private information in the original information, without worrying about the sensitive data being leaked. At the same time, the above-mentioned anonymized information and non-private information in the original information can be saved in a local specified file, which is used to realize local positioning of the network element side device.

Optionally, for anonymization of multiple network element side devices, the data obtained after each network element side device anonymizes private data, together with non-private information in the original information, can be reported to the anonymization control center , which is stored as a file by the anonymized control center and used to locate faults across the network.

Implementing the embodiment of the present invention, the sensitive data in the original information is anonymized, and the equipment maintainer cannot restore the sensitive data from the anonymized data, which avoids the leakage of sensitive data, so the equipment supplier can anonymize the above-mentioned The final information and the non-private information in the original information are carried out of the operator's internal network to meet the operator's legal requirements for protecting personal privacy without affecting the maintenance efficiency of communication equipment.

Referring to Fig. 2 and Fig. 3, it is another schematic flowchart of a method for anonymizing private data in a communication network according to the present invention, including:

Step 201. Receive an instruction to enable the anonymization function sent by the anonymization control center.

Specifically, the network element side device receives an instruction to enable the anonymization function sent by the anonymization control center deployed in the network element management system, and the instruction is used to control the network element side device to enable the anonymization function. It can be understood that when When the network element side device receives the instruction to disable the anonymization function sent by the anonymization control center, the network element side device will no longer anonymize the original information generated by running services. Here, the device on the network element side is a device different from the network element management system, and may be a mobile switching center, a home location register, a call session control functional entity, etc.; the network element management system may be a network management center, etc., the embodiment of the present invention is in This is not limited.

Step 202, identifying private data in the original information generated by running the business;

Specifically, the identification method may be to identify the data matching the data type in the original data as private data according to the data type of the private data contained in the indication of the anonymization function received by the indication receiving module; or The data type of the private data is preconfigured, and the data matching the data type in the original data is identified as the private data. The embodiment of the present invention does not limit the specific identification method.

Step 203: According to the instruction of enabling the anonymization function, convert the original information generated by the running business into tree-structured data, and the leaf node data of the tree-structured data includes private data and non-private data

Specifically, the data type of the original information generated by the network element side equipment is usually unstructured data, such as a message in TLV (Type-Length-Value, label-length-value, TLV for short) format. The message is unstructured data, which is not easy to process and analyze, so it needs to be converted into structured data for subsequent anonymization.

As shown in Figure 3, it is a schematic diagram of the tree-structured data converted from the original information generated by the operation of the equipment on the network element side. In the tree-structured data, each leaf node represents various data in the original information, such as a mobile phone number , name, attribution, IMSI number, user IP address and user online records, etc. These leaf nodes include both private data and non-private data. In the figure, the black leaf nodes represent private data, and the white leaf nodes represent non-private data. private data. After the original information is converted into tree-structured data, it is convenient for the computer to process the tree-structured data, and it is also easy to query the private data in the original information that needs to be anonymized, which improves the efficiency of operation.

Step 204, anonymize private data in different leaf nodes using different anonymization functions, where the anonymization function includes hash mapping.

Specifically, the configuration method of the anonymization function may be to specify the anonymization function by the anonymization control center, and directly send an indication of enabling the anonymization function including the specified anonymization function to the network element side device; The anonymization function library is configured on the network element device side, and a unique function identifier is assigned to each anonymization function at the same time. The anonymization control center sends an instruction to enable the anonymization function including the function identifier. The function in the anonymization function library identifies the corresponding anonymization function. Different anonymization functions may be different hash maps, or other types of functions, which are not limited in the present invention.

As shown in Figure 3, in the original information, the private data is a black leaf node, and the non-private data is a white leaf node, such as mobile phone number, name, attribution, IMSI number, and user online records are private data. The number of leaf nodes of private data is 5, and anonymization function 1, anonymization function 2, anonymization function 3, anonymization function 4 and anonymization function 5 are respectively configured for 5 nodes, and different privacy data configurations are respectively Different anonymization functions make it more difficult to crack the data after the network element side device loads the anonymization function for anonymization processing, and improves the security of the data. The loading method of the anonymized function can adopt the methods of static compilation and dynamic loading, which are disclosed in the prior art and will not be described here.

Step 205: Report the anonymized private data and the non-private data in the original information to the anonymization control center.

Specifically, usually in a communication system, a network element management system manages several network element side devices, and SOAP (Simple Object Access Protocol, SOAP for short) interface is used for communication between the two. The device on the network element side uses the SFTP (Secure File Transfer Protocol, SFTP for short) interface or the FPTS (File Transfer Protocol over Secure sockets layer) interface to anonymize the private data and the non-private data in the original information Upload to the anonymized control center deployed in the network element management system to locate and diagnose network-wide problems.

In the embodiment of the present invention, the sensitive data in the original information is anonymized, and the equipment maintainer cannot restore the sensitive data from the anonymized data, which avoids the leakage of sensitive data. Therefore, the equipment supplier can anonymize the above-mentioned processed The information carried out of the operator's internal network meets the operator's legal requirements for protecting personal privacy without affecting the maintenance efficiency of communication equipment.

Referring to Fig. 4, it is a privacy data anonymization device in a communication network of the present invention, which is characterized in that it includes:

The instruction receiving module 11 is configured to receive the instruction to enable the anonymization function sent by the anonymization control center.

Specifically, the instruction receiving module 11 receives an instruction to enable the anonymization function sent by the anonymization control center deployed in the network element management system, and the instruction includes the type of the anonymization function and the type of data that needs to be anonymized.

The identification module 12 is used to identify the private data in the original information generated by running the business;

The anonymization processing module 13 is configured to anonymize the private data identified by the identification module 12 according to the instruction to enable the anonymization function.

Specifically, the original information includes private data and non-private data, and the private data includes at least one of IMSI, phone number, and user surfing records, and may also be other private data. The network element side device pre-stores an anonymization function library, and instructs the receiving module 11 to load the anonymization function pair in the anonymization function library when receiving the instruction to enable the anonymization function sent by the anonymization control center. The data generated by running the business is anonymized. Anonymization refers to the use of security algorithms to encrypt sensitive data in the original information. When the publisher publishes the original information, the sensitive data will not be leaked, and at the same time, the sensitive data in the original information can be restored under certain conditions. Here, the type of the anonymous function is not limited.

Sensitive data in the original information, that is, private data, has been anonymized by the device on the network element side, and the original information can be released to the outside world without worrying about sensitive data being leaked. At the same time, the original information is saved in a local specified file, so that the original information can be used for fault location and other maintenance work during maintenance operations.

Further, referring to FIG. 5-FIG. 7, it is another schematic structural diagram of a device for anonymizing private data in a communication network according to the present invention. In addition to the instruction receiving module 11, the identification module 12 and the anonymity processing module 13, it also includes:

The information reporting module 14 is configured to report the anonymized private data and the non-private data in the original information to the anonymization control center.

Specifically, usually in a communication system, a network element management system manages several network element side devices, and SOAP (Simple Object Access Protocol, SOAP for short) interface is used for communication between the two. The information reporting module 14 uploads the anonymized private data and the non-private data in the original information to the anonymized control center deployed in the network element management system through the SFTP interface or FPTS interface, so as to realize the positioning of the whole network problem and diagnosis.

Wherein, the anonymous processing module 13 includes:

The data conversion unit 131 converts the original information into tree-structured data, and the leaf node data of the tree-structured data includes private data and non-private data.

Specifically, the data type of the original information generated by the network element side equipment is usually unstructured data, such as a message in TLV (Type-Length-Value, label-length-value, TLV for short) format. The message is unstructured data, which is difficult to process and analyze. Therefore, the data conversion unit 131 needs to convert unstructured original information into structured data for subsequent anonymization processing.

An anonymization processing unit 132, configured to anonymize the private data in the leaf node using an anonymization function.

Specifically, the anonymization processing unit 132 uses an anonymization function to anonymize the private data in the leaf nodes. Different private data can be configured with different anonymization functions, such as different hash maps, or the same anonymization function can be configured. , the present invention is not limited.

Further, the anonymization processing unit 132 includes:

The hash mapping unit 1321 is configured to anonymize private data in different leaf nodes using different anonymization functions, where the anonymization function includes hash mapping.

Specifically, as shown in the structured data example in Figure 3, in the original information, the private data is a black leaf node, and the non-private data is a white leaf node, such as mobile phone number, name, attribution, IMSI number, and user online records are private data . The number of leaf nodes of private data is 5, and anonymization function 1, anonymization function 2, anonymization function 3, anonymization function 4 and anonymization function 5 are respectively configured for 5 nodes, and different privacy data configurations are respectively With different anonymization functions, the hash mapping unit 1321 loads the anonymization function to anonymize the data, which is more difficult to crack, which improves the security of the data. The loading method of the anonymized function can adopt the methods of static compilation and dynamic loading, which are disclosed in the prior art and will not be described here.

Further, the identification module 12 is specifically used for,

According to the data type of the private data contained in the indication of the anonymization function received by the indication receiving module, it is identified that the data matching the data type in the original data is private data; or

The data type of the private data is preconfigured, and the data matching the data type in the original data is identified as the private data.

In the embodiment of the present invention, the sensitive data in the original information is anonymized, and the equipment maintainer cannot restore the sensitive data from the anonymized data, which avoids the leakage of sensitive data. Therefore, the equipment supplier can anonymize the above-mentioned processed The information carried out of the operator's internal network meets the operator's legal requirements for protecting personal privacy without affecting the maintenance efficiency of communication equipment.

Referring to FIG. 8, it is a schematic structural diagram of a communication system of the present invention, including an anonymization control center 2 and devices 1a-1c, wherein the anonymization control center is deployed on the side of the network element management system, and the device is deployed on the side of the network element equipment. The device is the privacy data anonymization device in the communication network in the above embodiment, and the number of the devices is not limited. Taking the working process between the anonymization control center 2 and the device 1a as an example, other devices have the same interaction process with the anonymization control center.

The anonymization control center 2 sends an instruction to enable the anonymization function to the device 1a, and when the device 1a receives the instruction to enable the anonymization function, it anonymizes the private data included in the original information generated by the network element side equipment running services processing,. After the anonymization process is completed, the device 1a uploads the anonymized private data and the non-private data in the original information to the anonymization control center deployed in the network element management system through the SFTP interface or the FPTS interface, so that the network element The management system realizes the positioning and diagnosis of network-wide problems.

Implementing the embodiment of the present invention, the sensitive data in the original information is anonymized, and the equipment maintainer cannot restore the sensitive data from the anonymized data, avoiding the leakage of sensitive data, so the equipment supplier can carry the original information Access to the operator's internal network meets the operator's legal requirements for protecting personal privacy without affecting the maintenance efficiency of communication equipment.

Referring to FIG. 9 , it is another structural schematic diagram of a device for anonymizing private data in a communication network of the present invention, including a processor 61, a memory 62, an input device 63 and an output device 64. The number of processors 61 of the device 1 can be One or more, FIG. 9 takes a processor as an example. In some embodiments of the present invention, the processor 61 , the memory 62 , the input device 63 and the output device 64 may be connected via a bus or in other ways, and bus connection is taken as an example in FIG. 9 .

Wherein, a set of program codes are stored in the memory 62, and the processor 61 is used to call the program codes stored in the memory 62 to perform the following operations:

Receive an instruction to enable the anonymization function sent by the anonymization control center;

Identify private data in raw information generated by running a business;

According to the instruction of enabling the anonymization function, the private data in the original information generated by running the business is anonymized.

In some embodiments of the present invention, the processor 61 is further configured to: report the anonymized private data and the non-private data in the original information to the anonymization control center.

In some embodiments of the present invention, the processor 61 is specifically configured to execute:

Converting the original information into tree structure data, the leaf node data of the tree structure data includes private data and non-private data;

An anonymization function is used to anonymize the private data in the leaf node.

In some embodiments of the present invention, the processor 61 is specifically configured to execute:

The privacy data in different leaf nodes are anonymized using different anonymization functions, and the different anonymization functions are different hash maps.

In some embodiments of the present invention, the processor 61 is specifically configured to execute:

According to the data type of the private data contained in the indication of the anonymization function, it is identified that the data matching the data type in the original data is private data; or

The network element side device pre-configures the data type of the private data, and identifies the data matching the data type in the original data as the private data.

In the embodiment of the present invention, the sensitive data in the original information is anonymized, and the equipment maintainer cannot restore the sensitive data from the anonymized data, which avoids the leakage of sensitive data. Therefore, the equipment supplier can anonymize the above-mentioned processed The information carried out of the operator's internal network meets the operator's legal requirements for protecting personal privacy without affecting the maintenance efficiency of communication equipment.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented through computer programs to instruct related hardware, and the programs can be stored in a computer-readable storage medium. During execution, it may include the processes of the embodiments of the above-mentioned methods. Wherein, the storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM) or a random access memory (Random Access Memory, RAM) and the like.

What is disclosed above is only a preferred embodiment of the present invention, and of course it cannot limit the scope of rights of the present invention. Those of ordinary skill in the art can understand all or part of the process for realizing the above embodiments, and according to the rights of the present invention The equivalent changes required still belong to the scope covered by the invention.

Claims (5)

1. A method for anonymizing private data in a communication network, comprising: Receive an instruction to enable the anonymization function sent by the anonymization control center; According to the data type of the private data included in the indication of the anonymization function, identify the data that matches the data type in the original information as private data; According to the instruction to enable the anonymization function, anonymize the private data in the original information generated by running the business; Wherein, the anonymizing the private data in the original information includes: Converting the original information into tree structure data, the leaf node data of the tree structure data includes private data and non-private data; The privacy data in different leaf nodes are anonymized using different anonymization functions, and the different anonymization functions are different hash maps. 2. The method according to claim 1, wherein after said anonymizing the private data in the original information, further comprising: Reporting the anonymized private data and the non-private data in the original information to the anonymization control center. 3. A device for anonymizing private data in a communication network, characterized in that it comprises: An instruction receiving module, configured to receive an instruction to enable the anonymization function sent by the anonymization control center; An identification module, configured to identify the data that matches the data type in the original information as private data according to the data type of the private data contained in the indication of the anonymization function received by the indication receiving module; An anonymous processing module, configured to anonymize the private data identified by the identification module according to the instruction to enable the anonymization function; Wherein, the anonymous processing module includes: a data conversion unit, converting the original information into tree-structured data, the leaf node data of the tree-structured data includes private data and non-private data; An anonymization processing unit, configured to anonymize private data in different leaf nodes using different anonymization functions, where the different anonymization functions are different hash maps. 4. The device of claim 3, further comprising: The information reporting module is configured to report the anonymized private data and the non-private data in the original information to the anonymization control center. 5. A communication system, comprising an anonymous control center and the device according to claim 3 or 4.