Method and device for security assessment of encryption models

1. A method for security assessment of encryption models, the method comprising:

a first device training a data model and performing homomorphic encryption on one or more plaintext model parameters of the data model to obtain ciphertext model parameters of the data model, and shuffling the ciphertext model parameters of the data model to change an order of the ciphertext model parameters of the data model;

the first device sending to a second device a deployment request for deploying a homomorphically-encrypted data model on the second device, wherein the deployment request comprises the shuffled ciphertext model parameters of the data model and a public key for the homomorphic encryption;

the second device obtaining a first ciphertext security assessment index through computation using the shuffled ciphertext model parameters, wherein the first ciphertext security assessment index is obtained by calculating a variance of the shuffled ciphertext model parameters, and sending the first ciphertext security assessment index to the first device;

the first device decrypting the received first ciphertext security assessment index using a private key corresponding to the public key to generate a plaintext security assessment index, and forwarding the plaintext security assessment index to the second device; and

the second device encrypting the plaintext security assessment index using the public key to generate a second ciphertext security assessment index, comparing the first ciphertext security assessment index with the second ciphertext security assessment index to determine consistency thereof, and determining whether to deploy the homomorphically-encrypted data model according to the comparing.

2. The method according to claim 1 , further comprising:

the second device generating a model security assessment report for determining whether to deploy the homomorphically-encrypted data model based on comparison results of a plurality of first ciphertext security assessment indices and a plurality of second ciphertext security assessment indices.

3. The method according to claim 1 , wherein the deployment request further comprises a random number such that using the public key with the random number results in a consistent encryption result for the same data.

4. The method according to claim 1 , further comprising:

the second device denying the deployment request in response to determining that the first ciphertext security assessment index and the second ciphertext security assessment index are not consistent.

5. The method according to claim 1 , further comprising:

the second device deploys the homomorphically-encrypted data model in response to determining that the first ciphertext security assessment index and the second ciphertext security assessment index are consistent.

6. A method for security assessment of encryption models, the method comprising:

a first device training a data model and performing homomorphic encryption on one or more plaintext model parameters of the data model to obtain ciphertext model parameters of the data model, and shuffling the ciphertext model parameters of the data model to change an order of the ciphertext model parameters of the data model;

the first device sending to a second device a deployment request for deploying a homomorphically-encrypted data model on the second device, wherein the deployment request comprises the shuffled ciphertext model parameters of the data model and a public key for the homomorphic encryption;

the second device forwarding the shuffled ciphertext model parameters and the public key to a security assessment device;

the first device obtaining a first ciphertext security assessment index that is generated by the security assessment device using the shuffled ciphertext model parameters and the public key, wherein the first ciphertext security assessment index is obtained by calculating a variance of the shuffled ciphertext model parameters, decrypting the first ciphertext security assessment index using a private key corresponding to the public key to generate a plaintext security assessment index, and forwarding the plaintext security assessment index to the security assessment device;

the second device obtaining a model security assessment report from the security assessment device, wherein the model security assessment report is generated by the security assessment device encrypting the plaintext security assessment index using the public key to generate a second ciphertext security assessment index and comparing the first ciphertext security assessment index with the second ciphertext security assessment index to determine consistency thereof; and

the second device determining whether to deploy the homomorphically-encrypted data model according to the model security assessment report.

7. The method according to claim 6 , wherein:

the security assessment device is configured for generating a comprehensive model security assessment report for the second device to determine whether to deploy the homomorphically-encrypted data model by considering comparison results of a plurality of first ciphertext security assessment indices and a plurality of second ciphertext security assessment indices.

8. The method according to claim 6 , wherein the deployment request further comprises a random number such that using the public key with the random number results in a consistent encryption result for the same data.

9. The method according to claim 6 , further comprising:

the second device denying the deployment request in response to that the model security assessment report indicates that the first ciphertext security assessment index and the second ciphertext security assessment index are not consistent.

10. The method according to claim 6 , further comprising:

the second device deploys the homomorphically-encrypted data model in response to that the model security assessment report indicates that the first ciphertext security assessment index and the second ciphertext security assessment index are consistent.

11. One or more non-transitory computer-readable storage media storing instructions executable by one or more processors to cause the one or more processors to perform operations including:

a first device training a data model and performing homomorphic encryption on one or more plaintext model parameters of the data model to obtain ciphertext model parameters of the data model, and shuffling the ciphertext model parameters of the data model to change an order of the ciphertext model parameters of the data model;

the first device sending to a second device a deployment request for deploying a homomorphically-encrypted data model on the second device, wherein the deployment request comprises the shuffled ciphertext model parameters of the data model and a public key for the homomorphic encryption;

the second device obtaining a first ciphertext security assessment index through computation using the shuffled ciphertext model parameters, wherein the first ciphertext security assessment index is obtained by calculating a variance of the shuffled ciphertext model parameters, and sending the first ciphertext security assessment index to the first device;

the first device decrypting the received first ciphertext security assessment index using a private key corresponding to the public key to generate a plaintext security assessment index, and forwarding the plaintext security assessment index to the second device; and

the second device encrypting the plaintext security assessment index using the public key to generate a second ciphertext security assessment index, comparing the first ciphertext security assessment index with the second ciphertext security assessment index to determine consistency thereof, and determining whether to deploy the homomorphically-encrypted data model according to the comparing.

12. The one or more non-transitory computer-readable storage media according to claim 11 , wherein the operations further comprise:

the second device generating a comprehensive model security assessment report for determining whether to deploy the homomorphically-encrypted data model by comprehensively considering comparison results of a plurality of first ciphertext security assessment indices and a plurality of second ciphertext security assessment indices.

13. The one or more non-transitory computer-readable storage media according to claim 11 , wherein the deployment request further comprises a random number such that using the public key with random number results in a consistent encryption result for the same data.

14. The one or more non-transitory computer-readable storage media according to claim 11 , wherein the operations further comprise:

the second device denying the deployment request in response to that the model security assessment report indicates that the first ciphertext security assessment index with the second ciphertext security assessment index are not consistent.

15. The one or more non-transitory computer-readable storage media according to claim 11 , wherein the operations further comprise:

the second device deploys the homomorphically-encrypted data model in response to that the model security assessment report indicates that the first ciphertext security assessment index and the second ciphertext security assessment index are consistent.