WO2021003977A1

WO2021003977A1 - Default information query method and apparatus, and computer device and storage medium

Info

Publication number: WO2021003977A1
Application number: PCT/CN2019/122729
Authority: WO
Inventors: 赖骏; 刘恩科; 王梦寒; 高建欣
Original assignee: 深圳壹账通智能科技有限公司
Priority date: 2019-07-08
Filing date: 2019-12-03
Publication date: 2021-01-14
Also published as: CN110489393A

Abstract

A default information query method, comprising: acquiring a default information query request sent by a query terminal, wherein the default information query request carries a query identifier and first user information; verifying an access permission of the query terminal according to the query identifier; when verification of the access permission of the query terminal is passed, acquiring, from a blockchain, a first encrypted blacklist corresponding to the first user information, wherein the blockchain is used for storing the encrypted blacklist; inputting the first encrypted blacklist into a trained zero-knowledge encryption model to obtain a default determination result corresponding to the first user information; and sending the default determination result to the query terminal.

Description

Method, device, computer equipment and storage medium for querying breach information

Cross references to related applications

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on July 8, 2019. The application number is 2019106101615 and the application name is "Methods, devices, computer equipment and storage media for querying breach of contract information." The entire contents of which are by reference Incorporated in this application.

Technical field

This application relates to a method, device, computer equipment and storage medium for querying breach information.

Background technique

The user blacklist generated in the transaction business of financial enterprises is very important data, which can help enterprises to predict and avoid risks when processing business. Some enterprises will also share their user blacklist with other partners in the process of cooperation. The querying party can determine the user’s default risk by querying the user blacklist of other partners.

However, the inventor realizes that the partners directly send the blacklist to each other, or use data encryption to protect the transmitted data during the transmission process; however, when the blacklist circulation between more than two companies is involved, because The cooperative relationship between enterprises is complicated, and the traditional sharing method cannot protect the security of the shared blacklist.

Summary of the invention

According to various embodiments disclosed in the present application, a method, device, computer equipment, and storage medium for querying breach information are provided.

A method for querying breach information, including:

Acquiring a default information query request sent by the query terminal, where the default information query request carries the query identifier and the first user information;

Verifying the access authority of the query terminal according to the query identifier;

When the access permission of the query terminal is verified, obtain the first encrypted blacklist corresponding to the first user information from the blockchain, and the blockchain is used to store the encrypted blacklist;

Input the first encryption blacklist into a trained zero-knowledge encryption model to obtain a default determination result corresponding to the first user information, wherein the zero-knowledge encryption model encrypts the first encryption blacklist Obtain a model that does not expose the specific information of the first encrypted blacklist, and only retains whether the first encrypted blacklist represents the result of the default determination of the user in breach of the contract; and

Sending the result of the default determination to the query terminal.

A query device for breach of contract information, including:

The query request obtaining module is configured to obtain the default information query request sent by the query terminal, and the default information query request carries the query identifier and the first user information;

A query verification module, configured to verify the access authority of the query terminal according to the query identifier;

The blacklist query module is used to obtain the first encrypted blacklist corresponding to the first user information from the blockchain when the access authority of the query terminal is verified, and the blockchain is used to store the encrypted blacklist ；

The query result encryption module is used to input the first encryption blacklist into the trained zero-knowledge encryption model to obtain the default determination result corresponding to the first user information, wherein the zero-knowledge encryption model is for the The first encryption blacklist is encrypted to obtain a model that does not expose the specific information of the first encryption blacklist, and only retains whether the first encrypted blacklist represents the first user information as a default determination result of the user in breach; and

The query result return module is used to send the default determination result to the query terminal.

A computer device includes a memory and one or more processors. The memory stores computer readable instructions. When the computer readable instructions are executed by the processor, the steps of the method for querying breach information provided in any embodiment of the present application are implemented.

One or more non-volatile storage media storing computer-readable instructions. When the computer-readable instructions are executed by one or more processors, the one or more processors realize the default provided in any of the embodiments of the present application. The steps of the information query method.

The details of one or more embodiments of the application are set forth in the following drawings and description. Other features and advantages of this application will become apparent from the description, drawings and claims.

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings needed in the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative work.

Fig. 1 is an application scenario diagram of a method for querying breach information according to one or more embodiments.

Fig. 2 is a schematic flowchart of a method for querying breach information according to one or more embodiments.

Fig. 3 is a schematic flowchart of a blacklist obtaining step according to one or more embodiments.

Fig. 4 is a schematic flowchart of a blacklist upload step according to one or more embodiments.

Fig. 5 is a schematic flowchart of step S408 according to one or more embodiments;

Fig. 6 is a block diagram of a device for querying breach information according to one or more embodiments.

Figure 7 is a block diagram of a computer device according to one or more embodiments.

Detailed ways

In order to make the technical solutions and advantages of the present application clearer, the following further describes the present application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the application, and not used to limit the application.

The method for querying breach information provided in this application can be applied to the application environment as shown in FIG. 1. The terminal 102 communicates with the server 104 through the network through the network. The server 104 establishes a blockchain that stores the blacklists of multiple cooperative enterprises. When a cooperative enterprise wants to check whether a user has a breach record in other cooperative enterprises from the blockchain, it will send the inquiry terminal to the blockchain end. Send a query request for breach of contract information, and the cooperative enterprise that requested the query for breach of contract information can act as the querying party. The server first verifies whether the querying terminal has the authority to access the blockchain. If so, it queries the blockchain to obtain the first to be obtained by the querying party. Encrypt the blacklist, and encrypt the first encrypted blacklist through the trained zero-knowledge encryption model, and only return a breach determination result to the query terminal without revealing the information of the blacklist uploader and the specific blacklist information; the above method , Manage the blacklists provided by multiple cooperative enterprises through the blockchain to avoid tampering with the blacklist before being acquired by other cooperative enterprises, and protect the information stored on the blockchain through a zero-knowledge encryption model, even when accessing the terminal of the blockchain It is also impossible to directly obtain the data on the blockchain, but only a result of zero-knowledge encryption can be obtained, which can effectively realize the safe circulation of blacklists among multiple enterprises. The terminal 102 may be, but is not limited to, various personal computers, notebook computers, smart phones, tablet computers, and portable wearable devices. The server 104 may be implemented by an independent server or a server cluster composed of multiple servers.

In one of the embodiments, as shown in FIG. 2, a method for querying breach information is provided. Taking the method applied to the server 104 in FIG. 1 as an example, the method includes the following steps:

S202: Obtain a default information query request sent by the query terminal, where the default information query request carries the query identifier and the first user information.

The query terminal is the terminal that needs to obtain the blacklist data on the blockchain, that is, the terminal of the querying party of the blacklist stored in the blockchain, which can be, but is not limited to, various personal computers, laptops, smart phones, tablets and portables Wearable device.

The query request for breach of contract information refers to a request sent by the query terminal to the server to query whether a certain user has a breach of contract. The server or blockchain end can provide a query entry to the query terminal. The query entry may be a query entry provided by a sub-application running in the parent application, or a query entry provided by the application client, or a browser web page entry, etc. The query terminal can add an application with the query function to the parent application, or install an application client with the query function, or install a browser application. The query terminal obtains the user name and password entered by the user on the login interface, or fingerprint verification information, or voiceprint verification information, etc., and uploads them to the server for verification. After the verification is passed, the login is successful; the trigger operation for the query entry is obtained, and according to the trigger Operate to enter the query interface, receive the information input by the user through the query interface, and generate a breach information query request based on the input information. The query terminal obtains the user information of the user to be queried that is input by the user on the query interface, that is, the first user information, and generates a breach information query request according to the input first user information. For example, if you need to query whether a company or organization is in the blacklist of its cooperative enterprise, the first user information can be the full name of the company, registration number, etc.; if you need to inquire whether a person is on the blacklist of its cooperative enterprise, the first user information The user information can be the person's name, ID number, mobile phone number, etc. as the first user information.

The query identifier is a proof used to identify whether the query terminal has the authority to obtain the blacklist stored on the blockchain. After the user corresponding to the query terminal signs a cooperation agreement with the blockchain provider, the blockchain provider can assign a query identifier for the enterprise to access the blacklist shared on the blockchain. The query identifier can be a string assigned by the blockchain provider. The character string may include at least one of letters, numbers, or characters. The query identifier may occupy fixed bytes in the blacklist acquisition request, etc.

Specifically, the querying party needs to query whether a company, organization, or individual has a default record in the blockchain cooperative enterprise in the blockchain, and can send a query request for default information to the server through the query terminal. The query request for default information includes A query identifier for identifying whether the query terminal has the authority to access data on the blockchain and the first user information of the enterprise or individual to be queried.

S204: Verify the access authority of the query terminal according to the query identifier.

Specifically, after the server receives the query request for breach information of the query terminal, it first verifies the access authority of the query terminal according to the query identifier carried therein, that is, verifies whether the query identifier is in the cooperation agreement.

S206: When the access permission of the query terminal is verified, obtain the first encrypted blacklist corresponding to the first user information from the blockchain, and the blockchain is used to store the encrypted blacklist.

The first encrypted blacklist is the data encrypted by the blacklist stored on the blockchain of the first user information that the querying party queried this time. The blockchain is a way to block data in chronological order or other set logical order A chain data structure that is combined in a sequential manner, and is a cryptographically guaranteed non-tamperable and non-forgeable distributed ledger. Due to the non-tamperable feature of the blockchain, the blacklist stored on the chain can be guaranteed The data is authentic and safe. The block chain stores the blacklist provided by each partner for sharing. The block chain encrypts the uploaded blacklist before obtaining the encrypted blacklist and then stores it on the chain. The data encryption method can be for each block on the chain. Data encryption to obtain the hash value, and the hash value of each block is managed by the Merkel tree (a binary tree conduction management method). The blockchain data encryption method is not limited to the above-mentioned hash value, and the commonly used Encryption Algorithm.

Specifically, if the server verifies the access authority of the query terminal successfully, the query terminal is allowed to access the blockchain, and the server can query the corresponding encrypted blacklist on the blockchain according to the first user information in the breach information query request. That is, the first encryption blacklist; if the access permission verification fails, the query terminal is not allowed to access the blockchain. In addition, when the access authority verification fails, the server may return an error message to the query terminal to inform the query terminal of the reason for the failure of this access, so that the query terminal can access the blockchain again after obtaining the access authority.

S208. Input the first encryption blacklist into the trained zero-knowledge encryption model to obtain a default determination result corresponding to the first user information, where the zero-knowledge encryption model encrypts the first encryption blacklist to obtain the first non-disclosure The specific information of the encrypted blacklist is a model that only keeps the first encrypted blacklist whether the first user information is the default determination result of the user in breach.

The zero-knowledge encryption model is based on the zero-knowledge proof (Zero-Knowledge Proof, a way of proof that the prover can convince the verifier that a certain assertion is correct without providing any useful information to the verifier) as the basis for encryption , Taking the query results in a large number of historical query records and the corresponding probability of default as the training sample, the training obtained can encrypt the input query result of the first encrypted blacklist to obtain a specific information that does not expose the query result The model of the result of default determination. The zero-knowledge encryption model includes two functions: the first is to obtain the default probability corresponding to the input first encrypted blacklist. This function is to perform big data based on the query results in the historical query records in the training sample and the corresponding default probability The second is to use the zero-knowledge proof algorithm (zk-SNARK) at the output of the model to encrypt the probability of default corresponding to the first encrypted blacklist to obtain the default determination result. If the server needs to prove the accuracy of the encryption result, then Only other certification information can be obtained, but the encrypted result cannot be decrypted.

The default determination result is the determination result of whether the first user information in the default information query request sent by the server to the query terminal is a default risk user, that is, two determination results of a default risk user or a default risk user.

S210: Send the default determination result to the query terminal.

Specifically, after the server obtains the default determination result in step S208, it sends it to the query terminal to complete the query operation of the query terminal for the default information this time.

In the above method for querying breach information, a blockchain is established to store the blacklists of multiple cooperative enterprises. When a cooperative enterprise wants to check whether a user has a breach record in other cooperative enterprises from the blockchain, the query terminal is used Send a query request for breach of contract information to the blockchain, and the cooperative enterprise that has filed a request for query on breach of contract can be the query party. The server first verifies whether the query terminal has access to the block chain, and if so, queries the block chain to obtain the query party The first encrypted blacklist to be obtained, and the trained zero-knowledge encryption model is used to encrypt the first encrypted blacklist. Only a breach determination result is returned to the query terminal without revealing the information of the blacklist uploader and the specific blacklist. List information; the above method manages the blacklist provided by multiple cooperative enterprises through the blockchain, avoids tampering with the blacklist before being obtained by other cooperative enterprises, and protects the information stored on the blockchain through a zero-knowledge encryption model, even if access The terminal of the blockchain cannot directly obtain the data on the blockchain, but can only obtain a zero-knowledge encrypted result, which can effectively realize the safe circulation of blacklists among multiple enterprises.

In one of the embodiments, after sending the default determination result to the query terminal in step S210, it may further include: receiving a verification request sent by the query terminal according to the default determination result; and obtaining and defaulting from the zero-knowledge encryption model according to the verification request. The verification return information corresponding to the determination result is the information provided by the zero-knowledge encryption model that can prove the accuracy of the default determination result except for the first encryption blacklist.

The verification request is a request for the query terminal to request the server to provide proof of the default determination result after receiving the default determination result sent by the server. After sending the default determination result to the query terminal through the above method, if the user has doubts about the default determination result, he can send a verification request to the server. In order to ensure that the specific information of the blacklist is not exposed, the server can return a violation with the zero-knowledge encryption model. The verification return information corresponding to the determination result serves as a proof, and the query terminal can determine the authenticity of the default determination result by detecting the accuracy of the verification return information. When training the zero-knowledge encryption model, it has the function of associating the query result with the verification return information; for example, the zero-knowledge encryption model can obtain the identity information related to user A or encrypt the blacklist record of user A The encryption coefficient at the time is used as the verification return information to prove the accuracy of the default determination result to the inquiring party.

In the foregoing embodiment, the verification return information is provided to the query terminal to prove the accuracy of the default determination result sent by the server.

In one of the embodiments, referring to FIG. 3, after the above step S210 sends the default determination result to the query terminal, it may also include a blacklist obtaining step, which specifically includes:

S302: Receive a blacklist acquisition request sent by the query terminal according to the default determination result.

Specifically, the blacklist acquisition request is a request initiated by the query terminal to the server connected to the blockchain to acquire specific blacklist data, and may be a network message sent to the server through the aforementioned interface. If the query terminal needs to obtain the specific information of the blacklist corresponding to the first user information, it may send a blacklist obtaining request to the server.

S304: Obtain the first encryption blacklist, and identify uploader information corresponding to the first encryption blacklist.

Specifically, after the server receives the blacklist obtaining request sent by the query terminal, it identifies the uploader information of the first encrypted blacklist to be obtained by the query terminal, such as uploading the enterprise name, registration number, or cooperation code of the enterprise. If the server does not find the first encrypted blacklist corresponding to the first user information from the blockchain in step S206, the server may generate a message prompting that the query terminal has not obtained the success.

S306: Generate an authorization verification request according to the uploader information, and send the authorization verification request to the query terminal.

The authorization verification request is used for the blacklist uploader requesting the querying party to provide the first encrypted blacklist to allow the querying terminal to obtain its shared blacklist, and may be in the form of information identified by the querying terminal interface or email.

Specifically, the server needs to verify whether the uploader of the blacklist authorizes the querying party to provide the blacklist shared by the uploading party to the querying terminal. The server generates an authorization verification request and sends it to the querying terminal so that the querying terminal provides authorization certification.

S308: Receive the authorization certificate returned by the query terminal, where the authorization certificate is obtained according to the authorization verification request.

Specifically, after receiving the authorization verification request, the query terminal returns the authorization certificate of the blacklist uploader of the first encrypted blacklist to the server.

S310: Decrypt the obtained first encryption blacklist according to the authorization certificate to obtain the query blacklist.

Specifically, after receiving the authorization certificate of the blacklist uploader, the server obtains the corresponding first encrypted blacklist from the blockchain, and decrypts the query blacklist by using a decryption algorithm opposite to the encryption algorithm.

S312: Send the query blacklist to the query terminal.

Specifically, after obtaining the query blacklist in step S208, the server sends the query blacklist to the query terminal to complete the operation of the query terminal to obtain the blacklist from the blockchain this time.

Optionally, after the query terminal obtains the blacklist data, the risk of the corresponding enterprise or individual can be determined according to the breach records of the related users in the blacklist data. That is, the query terminal can perform a one-step analysis on the blacklist according to its own business, and set the user's risk level based on the user's default information reflected on the blacklist data (such as the repayment overdue time and overdue amount of the customer on the blacklist) , To determine the risk of users on this blacklist data. It can also be combined with the credibility of the blacklist uploader to judge the credibility of its blacklist data (if the blacklist uploader is a bank, the credibility of the blacklist data uploaded by it is considered to be high, if it is an individual financial Institutions, the credibility is lower).

In the above embodiment, the query terminal can obtain the blacklist uploaded by the uploader from the blockchain by sending the uploader's authorization certificate to the server.

In one of the embodiments, referring to FIG. 4, the above-mentioned method for querying breach information may further include a blacklist uploading step, which specifically includes:

S402: Receive a blacklist upload request sent by an upload terminal, where the blacklist upload request carries an upload identifier.

The upload terminal is the terminal of a cooperative enterprise that needs to upload data to the blockchain, that is, the terminal of the uploader of the blacklist stored in the blockchain, which can be, but not limited to, various personal computers, laptops, smart phones, tablets, and portable computers. Wearable device.

A blacklist upload request is a request from the uploading terminal to the server or the blockchain connected to the blockchain to store the local shared blacklist on the blockchain. It can be raised by the user on the interface provided by the technical staff developed by the blockchain Request message.

The upload identifier is used to identify whether the upload terminal has the right to upload data to the blockchain. After the last time the partner company corresponding to the terminal signs a cooperation agreement with the blockchain provider, the blockchain provider can assign the upload identifier for This company uploads data to the blockchain; the upload identifier can be a string that occupies a fixed byte in the blacklist acquisition request, or it can be in other identifiable forms.

Specifically, when the uploader needs to upload the blacklist to the blockchain, it can send the last blacklist request to the server. The blacklist upload request includes an upload identifier for identifying whether the uploading terminal has the authority to upload data to the blockchain.

S404: Verify the upload authority of the upload terminal according to the upload identifier.

Specifically, the server verifies the upload authority of the upload terminal to upload data to the blockchain according to the upload identifier.

S406: Receive a shared blacklist sent by the upload terminal when the upload permission of the upload terminal is verified.

Among them, the shared blacklist is the blacklist data that the uploader wants to store in the blockchain last time and is shared by partners authorized by the uploader. It can include relevant information, transaction records, etc. of blacklisted companies and blacklisted individuals.

Specifically, if the server passes the verification of the upload authority of the upload terminal to upload data to the blockchain, the upload terminal obtains its shared blacklist to be saved on the blockchain.

S408: Encrypt the shared blacklist to obtain a second encrypted blacklist, and save the second encrypted blacklist on the blockchain.

Among them, the second encrypted blacklist is data encrypted by the shared blacklist, and its encryption method is consistent with that of the first encrypted blacklist, and both are in the format of the data stored on the blockchain.

Specifically, the server encrypts the shared blacklist to generate the second encrypted blacklist and saves it on the blockchain before the shared blacklist is uploaded to the chain, and completes this data entry operation.

In the above embodiment, the blacklist data shared in the blockchain is sent by the uploader to the server through the upload terminal, and the server needs to verify the upload authority of the upload terminal before the data enters the chain.

In one of the embodiments, referring to FIG. 5, the second encrypted blacklist is obtained after the shared blacklist is encrypted in step S408 in the above embodiment, and the second encrypted blacklist is stored on the blockchain. Specifically, include:,

S502: Identify the second user information in the shared blacklist and the breach data corresponding to the second user information.

Among them, the second user information is the information of the defaulting user included in the shared blacklist, where the defaulting user may be a defaulting enterprise or individual; for example, the second user information may include user account information, user identity information, user communication information, etc., user Identity information may include identity number, name, driver's license information, etc., user communication information may include mobile phone number, instant messaging number, e-mail address, etc. Then the default data corresponding to the second user information is the default history record of the defaulting company or individual during the uploading party’s transaction, which can be the overdue repayment record of the defaulting company or individual when purchasing credit products, or the company’s non-performing loans Records, etc., this breach information can be collected according to the uploader’s business type.

Specifically, the shared blacklist uploaded by the uploader includes two parts: the second user information and the breach data corresponding to the second user information. After the server obtains the shared blacklist uploaded by the uploader, it needs to extract the contents of these two parts first. The extraction method may include: identifying keywords related to the second user information or default data in the shared blacklist, and sharing the blacklist The information is divided into the second user information and the default data corresponding to the second user information. For example, when the shared blacklist is a spreadsheet (such as Excel), the table contains the name and registration number of the defaulting company, and each defaulting company For the overdue time and the amount of arrears, you can set the name of the company and the company’s registration number as the keywords of the second user information. The time and amount of the overdue corporate accounts are the keywords of the default data. When the server recognizes When these keywords are output, the information of the shared blacklist is divided into the second user information and the breach data corresponding to the second user information. Before uploading, the uploader can create a separate table according to the storage format of the blockchain, so that the server can identify the above two parts.

S504: Generate a second user mark according to the second user information.

Among them, the second user ID is used to query and store the second user’s default data on the blockchain, and can be a string of strings used to distinguish different users, such as the registration number of the defaulting company or the name of the individual, An encrypted string generated by encrypting information such as ID number and telephone.

Specifically, in order to facilitate subsequent query parties to quickly traverse the blockchain for data query, the user identification method is used to manage the user's default information stored on the blockchain. The server needs to generate a unique and server-recognizable user ID from the user information to be saved before saving the data on the blockchain. The shared blacklist uploaded this time includes the second user’s breach record, then the second user’s information Generate a second user logo.

S506: Encrypt the breached data to generate a second encrypted blacklist, and save the second encrypted blacklist in the first block of the blockchain, where the position of the first block in the blockchain is represented by the first label .

The first block is a block on the blockchain used to save the shared blacklist uploaded by the uploader. The technical staff of the blockchain can set data upload rules to manage the uploaded data. For example, the shared blacklist uploaded by the uploader can be stored in new blocks in sequence in chronological order, or managed according to the uploader's information. Moreover, the technician creates a label for each block on the blockchain, and the label of the first block can be expressed as the first label.

Specifically, the server then encrypts the breached data corresponding to the second user information in the shared blacklist to be uploaded, and saves it in the first block obtained according to the set data upload rule, and the storage method is the general area. The block chain stores data, such as generating the hash value of this block based on the hash value of the previous block and the data stored in this block.

After storing the second encryption blacklist on the blockchain in step S408, the following steps may also be included:

S508: Save the second user ID and the first label correspondingly to the established query list.

Among them, the query list is a management list established for the convenience of querying data on the blockchain, and it should contain the mapping relationship between the user identifier corresponding to the user information and the block label corresponding to the data storage block. Specifically, when new data is added to the blockchain on the blockchain, the server will add the second user ID corresponding to the second user information in the newly entered data to the second user ID corresponding to the block storing the default data corresponding to the second user information. A label is correspondingly saved to the established query list.

In the foregoing embodiment, the storage process of the blockchain when acquiring new in-chain data is described, and the query speed is improved by user identification and management of the default user information stored in the chain, and the security of the data is ensured.

In one of the embodiments, obtaining the first encrypted blacklist corresponding to the first user information from the blockchain in step S206 may include: obtaining the first user identifier corresponding to the first user information; obtaining the query list, and querying The first user in the query list indicates the corresponding second label; the first encryption blacklist is obtained from the second block corresponding to the second label in the blockchain.

Among them, the first user ID is the user ID of the first user information, and its format is the same as that of the second user ID. It can be a string of characters used to distinguish different users, such as the registration number of the breaching company or the name of the individual. An encrypted string generated by encrypting information such as ID number and telephone.

The second label is the label of the block stored on the blockchain in which the default data corresponding to the first user label is queried by the server, and its format is the same as the first label.

Specifically, the process for the server to obtain the first encrypted blacklist from the blockchain is to obtain the first user ID stored on the blockchain by the first user information, and query and manage the query of the storage content of each block on the blockchain Whether there is a second label corresponding to the first user label in the list, if so, locate the second block on the blockchain through the second label, and obtain the first encrypted blacklist from the second block. If there is no second label corresponding to the first user mark in the query list, the blockchain does not store the first encrypted blacklist corresponding to the first user information.

In the above embodiment, according to the storage method of the blacklist data in the blockchain, the steps of the server inquiring from the blockchain whether the first encrypted blacklist corresponding to the first user information is included according to the user identifier in the breach information query request are described in detail .

It should be understood that, although the steps in the flowcharts of FIGS. 2-5 are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless specifically stated in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least some of the steps in Figures 2-5 may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. These sub-steps or stages The execution order of is not necessarily performed sequentially, but may be performed alternately or alternately with at least a part of other steps or sub-steps or stages of other steps.

In one of the embodiments, as shown in FIG. 6, a device for querying breach information is provided, including: query request acquisition module 100, query verification module 200, blacklist query module 300, query result encryption module 400, and query result return Module 500, where:

The query request obtaining module 100 is configured to obtain a default information query request sent by a query terminal, and the default information query request carries a query identifier and first user information.

The query verification module 200 is configured to verify the access authority of the query terminal according to the query identifier.

The blacklist query module 300 is configured to obtain the first encrypted blacklist corresponding to the first user information from the blockchain when the access authority of the query terminal is verified. The blockchain is used to store the encrypted blacklist.

The query result encryption module 400 is used to input the first encryption blacklist into the trained zero-knowledge encryption model to obtain the default determination result corresponding to the first user information, wherein the zero-knowledge encryption model encrypts the first encryption blacklist , To obtain a model that does not expose the specific information of the first encrypted blacklist, and only keeps whether the first encrypted blacklist represents the first user information as the default determination result of the user in breach.

The query result return module 500 is used to send the default determination result to the query terminal.

In one of the embodiments, the above-mentioned breach information query device may further include:

The verification request receiving module is used to receive the verification request sent by the query terminal according to the breach determination result.

The verification module is used to obtain the verification return information corresponding to the default determination result from the zero-knowledge encryption model according to the verification request. The verification return information is provided by the zero-knowledge encryption model except for the first encryption blacklist and can prove that the default determination result is accurate Information.

The blacklist acquisition request receiving module is used to receive the blacklist acquisition request sent by the query terminal according to the default determination result.

The uploader information identification module is used to obtain the first encrypted blacklist and identify the uploader information corresponding to the first encrypted blacklist;

The authorization request module is used to generate an authorization verification request based on the uploader's information, and send the authorization verification request to the query terminal.

The authorization certificate receiving module is used to receive the authorization certificate returned by the query terminal, and the authorization certificate is obtained according to the authorization verification request.

The decryption module is used to decrypt the obtained first encrypted blacklist according to the authorization certificate to obtain the query blacklist.

The blacklist sending module is used to send the query blacklist to the query terminal.

The upload request receiving module is used to receive the blacklist upload request sent by the upload terminal, and the blacklist upload request carries the upload identifier.

The upload authority verification module is used to verify the upload authority of the upload terminal according to the upload identifier.

The data receiving module is used for receiving the shared blacklist sent by the uploading terminal when the uploading permission of the uploading terminal is verified.

The data storage module is used to encrypt the shared blacklist to obtain the second encrypted blacklist, and save the second encrypted blacklist on the blockchain.

In one of the embodiments, the data storage module in the above-mentioned breach information query device may include:

The data segmentation unit is used to identify the second user information in the shared blacklist and the breach data corresponding to the second user information.

The user identification generating unit is configured to generate a second user identification according to the second user information.

The block storage unit is used to encrypt the default data to generate a second encrypted blacklist, and save the second encrypted blacklist in the first block of the blockchain, where the position of the first block in the blockchain Denoted as the first label.

The list update unit is used for saving the second user ID and the first label in the established query list.

In one of the embodiments, the blacklist query module in the above-mentioned breach information query device may include:

The first user identification acquiring unit is configured to acquire the first user identification corresponding to the first user information.

The storage positioning unit is used to obtain the query list, and query the second label corresponding to the first user in the query list.

The blacklist obtaining unit is configured to obtain the first encrypted blacklist from the second block corresponding to the second label in the block chain.

For the specific limitation of the default information query device, please refer to the above limitation on the default information query method, which will not be repeated here. Each module in the above-mentioned breach information query device can be implemented in whole or in part by software, hardware and a combination thereof. The foregoing modules may be embedded in the form of hardware or independent of the processor in the computer device, or may be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the foregoing modules.

In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. 7. The computer equipment includes a processor, a memory, a network interface and a database connected through a system bus. Among them, the processor of the computer device is used to provide calculation and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, computer readable instructions, and a database. The internal memory provides an environment for the operation of the operating system and computer-readable instructions in the non-volatile storage medium. The database of the computer equipment is used to store the default information query data. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer-readable instruction is executed by the processor, a method for querying breach information is realized.

Those skilled in the art can understand that the structure shown in FIG. 7 is only a block diagram of part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may Including more or fewer parts than shown in the figure, or combining some parts, or having a different arrangement of parts.

One or more non-volatile storage media storing computer-readable instructions. When the computer-readable instructions are executed by one or more processors, the one or more processors realize the default provided in any of the embodiments of the present application. The steps of the information query method. A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing relevant hardware through computer-readable instructions, which can be stored in a non-volatile computer. In a readable storage medium, when the computer-readable instructions are executed, they may include the processes of the above-mentioned method embodiments. Wherein, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and/or volatile memory. Non-volatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not a limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Channel (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

The technical features of the above embodiments can be combined arbitrarily. In order to make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction between the combinations of these technical features, they should It is considered as the range described in this specification.

The above-mentioned embodiments only express several implementation manners of the present application, and the description is relatively specific and detailed, but it should not be understood as a limitation on the scope of the invention patent. It should be pointed out that for those of ordinary skill in the art, without departing from the concept of this application, several modifications and improvements can be made, and these all fall within the protection scope of this application. Therefore, the scope of protection of the patent of this application shall be subject to the appended claims.

Claims

A method for querying breach information, including:

Acquiring a default information query request sent by the query terminal, where the default information query request carries the query identifier and the first user information;

Verifying the access authority of the query terminal according to the query identifier;

When the access permission of the query terminal is verified, obtain the first encrypted blacklist corresponding to the first user information from the blockchain, and the blockchain is used to store the encrypted blacklist;

Input the first encryption blacklist into a trained zero-knowledge encryption model to obtain a default determination result corresponding to the first user information, wherein the zero-knowledge encryption model encrypts the first encryption blacklist Obtain a model that does not expose the specific information of the first encrypted blacklist, and only retains whether the first encrypted blacklist represents the result of the default determination of the user in breach of the contract; and

Sending the result of the default determination to the query terminal.
The method according to claim 1, wherein after the sending the result of the default determination to the query terminal, the method further comprises:

Receiving the verification request sent by the query terminal according to the default determination result; and

Obtain verification return information corresponding to the default determination result from the zero-knowledge encryption model according to the verification request, where the verification return information is provided by the zero-knowledge encryption model except for the first encryption blacklist , Information that can prove that the result of the breach determination is accurate.
The method according to claim 1, wherein after the sending the result of the default determination to the query terminal, the method further comprises:

Receiving the blacklist acquisition request sent by the query terminal according to the default determination result;

Acquiring the first encrypted blacklist, and identifying uploader information corresponding to the first encrypted blacklist;

Generating an authorization verification request according to the uploader information, and sending the authorization verification request to the query terminal;

Receiving an authorization certificate returned by the query terminal, where the authorization certificate is obtained according to the authorization verification request;

Decrypt the obtained first encrypted blacklist according to the authorization certificate to obtain the query blacklist; and

Send the query blacklist to the query terminal.
The method of claim 1, wherein the method further comprises:

Receiving a blacklist upload request sent by an upload terminal, where the blacklist upload request carries an upload identifier;

Verify the upload authority of the upload terminal according to the upload identifier;

When the upload authority verification of the upload terminal is passed, receiving the shared blacklist sent by the upload terminal; and

After encrypting the shared blacklist, a second encrypted blacklist is obtained, and the second encrypted blacklist is stored on the blockchain.
The method according to claim 4, wherein said encrypting said shared blacklist to obtain a second encrypted blacklist, and storing said second encrypted blacklist on said blockchain, comprises:

Identifying the second user information in the shared blacklist and the breach data corresponding to the second user information;

Generating a second user identifier according to the second user information;

Encrypt the default data to generate a second encrypted blacklist, and save the second encrypted blacklist in the first block of the blockchain, where the first block is in the blockchain The position is expressed as the first label; and

After storing the second encryption blacklist on the blockchain, it further includes:

The second user identification and the first identification number are correspondingly saved in the established query list.
The method according to claim 5, wherein the obtaining the first encrypted blacklist corresponding to the first user information from the blockchain comprises:

Acquiring the first user identifier corresponding to the first user information;

Acquiring the query list, and querying the second label corresponding to the first user mark in the query list; and

Obtain the first encryption blacklist from the second block corresponding to the second label in the block chain.
A device for querying breach of contract information, characterized in that the device comprises:

The query request obtaining module is configured to obtain the default information query request sent by the query terminal, and the default information query request carries the query identifier and the first user information;

A query verification module, configured to verify the access authority of the query terminal according to the query identifier;

The blacklist query module is used to obtain the first encrypted blacklist corresponding to the first user information from the blockchain when the access authority of the query terminal is verified, and the blockchain is used to store the encrypted blacklist ；

The query result encryption module is used to input the first encryption blacklist into the trained zero-knowledge encryption model to obtain the default determination result corresponding to the first user information, wherein the zero-knowledge encryption model is for the The first encryption blacklist is encrypted to obtain a model that does not expose the specific information of the first encryption blacklist, and only retains whether the first encrypted blacklist represents the first user information as a default determination result of the user in breach; and

The query result return module is used to send the default determination result to the query terminal.
The device according to claim 7, wherein the device further comprises:

A verification request receiving module, configured to receive a verification request sent by the query terminal according to the default determination result; and

The verification module is configured to obtain verification return information corresponding to the default determination result from the zero-knowledge encryption model according to the verification request, where the verification return information is provided by the zero-knowledge encryption model divided by the first Encrypt information outside the blacklist that can prove the accuracy of the breach determination result.
The device according to claim 6, wherein the device further comprises:

A blacklist acquisition request receiving module, configured to receive a blacklist acquisition request sent by the query terminal according to the default determination result;

The uploader information identification module is configured to obtain the first encrypted blacklist and identify uploader information corresponding to the first encrypted blacklist;

An authorization request module, configured to generate an authorization verification request according to the uploader information, and send the authorization verification request to the query terminal;

An authorization voucher receiving module, configured to receive an authorization voucher returned by the query terminal, where the authorization voucher is obtained according to the authorization verification request;

The decryption module is configured to decrypt the obtained first encrypted blacklist according to the authorization certificate to obtain the query blacklist; and

The blacklist sending module is used to send the query blacklist to the query terminal.
A computer device includes a memory and one or more processors. The memory stores computer-readable instructions. When the computer-readable instructions are executed by the one or more processors, the one or more Each processor performs the following steps:

Acquiring a default information query request sent by the query terminal, where the default information query request carries the query identifier and the first user information;

Verifying the access authority of the query terminal according to the query identifier;

When the access permission of the query terminal is verified, obtain the first encrypted blacklist corresponding to the first user information from the blockchain, and the blockchain is used to store the encrypted blacklist;

Input the first encryption blacklist into a trained zero-knowledge encryption model to obtain a default determination result corresponding to the first user information, wherein the zero-knowledge encryption model encrypts the first encryption blacklist Obtain a model that does not expose the specific information of the first encrypted blacklist, and only retains whether the first encrypted blacklist represents the result of the default determination of the user in breach of the contract; and

Sending the result of the default determination to the query terminal.
The computer device according to claim 10, wherein after the sending of the default determination result to the query terminal, which is implemented when the processor executes the computer-readable instruction, further comprises:

Receiving the verification request sent by the query terminal according to the default determination result; and

Obtain verification return information corresponding to the default determination result from the zero-knowledge encryption model according to the verification request, where the verification return information is provided by the zero-knowledge encryption model except for the first encryption blacklist , Information that can prove that the result of the breach determination is accurate.
The computer device according to claim 10, wherein after the sending of the default determination result to the query terminal, which is implemented when the processor executes the computer-readable instruction, further comprises:

Receiving the blacklist acquisition request sent by the query terminal according to the default determination result;

Acquiring the first encrypted blacklist, and identifying uploader information corresponding to the first encrypted blacklist;

Generating an authorization verification request according to the uploader information, and sending the authorization verification request to the query terminal;

Receiving an authorization certificate returned by the query terminal, where the authorization certificate is obtained according to the authorization verification request;

Decrypt the obtained first encrypted blacklist according to the authorization certificate to obtain the query blacklist; and

Send the query blacklist to the query terminal.
The computer device according to claim 10, wherein the processor further executes the following steps when executing the computer-readable instructions: receiving a blacklist upload request sent by an upload terminal, and the blacklist upload request carries Upload logo;

Verify the upload authority of the upload terminal according to the upload identifier;

When the upload authority verification of the upload terminal is passed, receiving the shared blacklist sent by the upload terminal; and

After encrypting the shared blacklist, a second encrypted blacklist is obtained, and the second encrypted blacklist is stored on the blockchain.
The computer device according to claim 13, wherein the said processor implements the said shared blacklist to obtain the second encrypted blacklist after the said shared blacklist is encrypted when the said computer-readable instruction is executed, and the said The second encryption blacklist is stored on the blockchain and includes:

Identifying the second user information in the shared blacklist and the breach data corresponding to the second user information;

Generating a second user identifier according to the second user information;

Encrypt the default data to generate a second encrypted blacklist, and save the second encrypted blacklist in the first block of the blockchain, where the first block is in the blockchain The position is expressed as the first label; and

After the storing of the second encrypted blacklist on the blockchain, implemented when the processor executes the computer-readable instruction, further includes:

The second user identification and the first identification number are correspondingly saved in the established query list.
The computer device according to claim 14, wherein the first encrypted blacklist corresponding to the first user information obtained from the blockchain is implemented when the processor executes the computer-readable instruction ,include:

Acquiring the first user identifier corresponding to the first user information;

Acquiring the query list, and querying the second label corresponding to the first user mark in the query list; and

Obtain the first encryption blacklist from the second block corresponding to the second label in the block chain.
One or more non-volatile computer-readable storage media storing computer-readable instructions. When the computer-readable instructions are executed by one or more processors, the one or more processors perform the following steps:

Acquiring a default information query request sent by the query terminal, where the default information query request carries the query identifier and the first user information;

Verifying the access authority of the query terminal according to the query identifier;

When the access permission of the query terminal is verified, obtain the first encrypted blacklist corresponding to the first user information from the blockchain, and the blockchain is used to store the encrypted blacklist;

Input the first encryption blacklist into a trained zero-knowledge encryption model to obtain a default determination result corresponding to the first user information, wherein the zero-knowledge encryption model encrypts the first encryption blacklist Obtain a model that does not expose the specific information of the first encrypted blacklist, and only retains whether the first encrypted blacklist represents the result of the default determination of the user in breach of the contract; and

Sending the result of the default determination to the query terminal.
15. The storage medium according to claim 16, wherein after the sending of the default determination result to the query terminal is realized when the computer-readable instruction is executed by the processor, the method further comprises:

Receiving the verification request sent by the query terminal according to the default determination result; and

Obtain verification return information corresponding to the default determination result from the zero-knowledge encryption model according to the verification request, where the verification return information is provided by the zero-knowledge encryption model except for the first encryption blacklist , Information that can prove that the result of the breach determination is accurate.
15. The storage medium according to claim 16, wherein after the sending of the default determination result to the query terminal is realized when the computer-readable instruction is executed by the processor, the method further comprises:

Receiving the blacklist acquisition request sent by the query terminal according to the default determination result;

Acquiring the first encrypted blacklist, and identifying uploader information corresponding to the first encrypted blacklist;

Generating an authorization verification request according to the uploader information, and sending the authorization verification request to the query terminal;

Receiving an authorization certificate returned by the query terminal, where the authorization certificate is obtained according to the authorization verification request;

Decrypt the obtained first encrypted blacklist according to the authorization certificate to obtain the query blacklist; and

Send the query blacklist to the query terminal.
The storage medium according to claim 16, wherein when the computer-readable instructions are executed by the processor, the following steps are further performed: receiving a blacklist upload request sent by an upload terminal, and the blacklist upload request carries Have upload logo;

Verify the upload authority of the upload terminal according to the upload identifier;

When the upload authority verification of the upload terminal is passed, receiving the shared blacklist sent by the upload terminal; and

After encrypting the shared blacklist, a second encrypted blacklist is obtained, and the second encrypted blacklist is stored on the blockchain.
The storage medium according to claim 19, wherein the second encrypted blacklist is obtained after the shared blacklist is encrypted when the computer-readable instructions are executed by the processor, and the The second encryption blacklist is stored on the blockchain and includes:

Identifying the second user information in the shared blacklist and the breach data corresponding to the second user information;

Generating a second user identifier according to the second user information;

Encrypt the default data to generate a second encrypted blacklist, and save the second encrypted blacklist in the first block of the blockchain, where the first block is in the blockchain The position is expressed as the first label; and

After the storing of the second encrypted blacklist on the blockchain, implemented when the computer-readable instruction is executed by the processor, further includes:

The second user identification and the first identification number are correspondingly saved in the established query list.