CN110619225A - Practitioner electronic identity card generation method suitable for dynamic public security management and control - Google Patents

Abstract

The invention relates to a practitioner electronic identity card generation method suitable for dynamic public security management and control. Which comprises the following steps: step 1, encrypting the provided basic identity information to obtain basic information data cipher text Sk of the practitioner_bsAnd the length L of the basic information data ciphertext of the practitioner_skAnd encrypting the key string K_bs(ii) a Step 2, providing a basic base map, and superposing basic identity information of a practitioner and a front photo of the practitioner on the basic base map; step 3, according to the basic base map and the basic information data ciphertext length L of the practitioner_skAnd encrypting the key string K_bsGenerating a non-repeating random coordinate number sequence; step 4, using the non-repeated random coordinate series to encrypt the basic information data cipher text Sk of the practitioner_bsMerged with the base picture. The invention can effectively generate the electronic identity card of the practitioner, and is convenient for checking the practitionerAnd whether the registration is normal or not is performed, and management control of the practitioner is strengthened.

Description

Practitioner electronic identity card generation method suitable for dynamic public security management and control

Technical Field

The invention relates to a method, in particular to a method for generating an electronic identity card of a practitioner, which is suitable for dynamic management and control of public security.

Background

The management and control of the personnel in the public security and public security industry are always the key focus of public security, and the personnel identity, the personnel engaged in the industry work and the like can be on duty after being authenticated and registered.

In the past, a card issuing system is adopted, and before a practitioner goes on duty, the practitioner goes to a specified place to register and issues a post-issuing certificate card. Nowadays, with the technical upgrade, practitioners registered for each registration no longer use physical cards, but use electronic virtual cards instead, and how to effectively generate electronic identity cards for the practitioners is a current technical problem.

Disclosure of Invention

The invention aims to overcome the defects in the prior art and provide a method for generating an electronic identity card of a practitioner suitable for dynamic public security management and control, which can effectively generate the electronic identity card of the practitioner, is convenient for checking whether the practitioner is normally registered or not and enhances the management and control of the practitioner.

According to the technical scheme provided by the invention, the generation method of the electronic identity card of the practitioner suitable for dynamic management and control of the public security comprises the following steps:

step 1, providing basic identity information of a practitioner, and encrypting the provided basic identity information to obtain basic information data cipher text Sk of the practitioner_bsAnd the length L of the basic information data ciphertext of the practitioner_skAnd encrypting the key string K_bsThe basic identity information comprises a name, an identity card number and a registration date;

step 2, providing a basic base map of the electronic identity card of the practitioner, and superposing basic identity information of the practitioner and a front photo of the practitioner on the basic base map of the electronic identity card of the practitioner;

step 3,According to the basic base map and the basic information data ciphertext length L of the practitioner_skAnd encrypting the key string K_bsGenerating a non-repeating random coordinate number sequence;

step 4, using the non-repeated random coordinate series to encrypt the basic information data cipher text Sk of the practitioner_bsAnd combining with the basic picture to obtain the required electronic identity card of the practitioner.

In the step 1, the method specifically comprises the following steps:

step 1.1, obtaining basic information data variable S of the practitioner according to the basic identity information of the practitioner_bs；

Step 1.2, utilizing abstract algorithm SHA1 to carry out basic information data variable S on the practitioner_bsEncrypting to obtain an encryption key string K with a 20-byte string_bsThe encryption key string K_bsThe key string length of is LK;

step 1.3, encrypting the secret key string K_bsA matrix M1 of 2 x 10, the matrix M1 being

Preparing an operator matrix M of 2 x 3_subOperator matrix M_subIs composed ofThe operator matrix M_subConvolution operation is carried out on the DES secret key DK and the matrix M1 to generate 8 bytes_bsSaid DES key DK_bsIs composed ofKey DK according to DES_bsCan obtain basic information data cipher text Sk of the practitioner_bsSaid practitioner basic information data cipher text Sk_bsIs Sk_bs＝F_DES(S_bs,K_bs) Wherein F is_DESFor the encryption function of DES, the basic information data cipher text Sk of the practitioner_bsHas a length of L_sk。

In the step 2, the method specifically comprises the following steps:

step 2.1, providing the required basic base map, wherein the format of the basic base map is BMP, the resolution is 720 x 472, the bit depth is 24, and the size of the basic picture file is L_bpWidth of picture W_bpPicture height of H_bp；

And 2.2, superposing the basic identity information of the practitioner and the front photo of the practitioner to the position required by the basic base map of the electronic identity card of the practitioner to obtain the appearance of the electronic identity card of the practitioner.

In the step 3, the method specifically comprises the following steps:

step 3.1, utilizing the encryption key string K_bsObtaining random number seed R_sThe random number seed R_sIs composed of

Step 3.2, setting coordinate variable array P [ len]Wherein, the size of len and the length L of the basic information data cryptograph of the practitioner_skSame as, P2]＝{P[0],P[1]…P[len-1]Each P [ i ]]Is a structure body, i has a value range of 0-len, Pi]Coordinates in two directions of an X axis and a Y axis are included, and a coordinate system is established by taking the upper left corner of the basic base map as the origin of the coordinates;

step 3.3, setting a random coordinate array R [ len ], wherein R [ ] [ { R [0], R [1] … R [ len-1] }, each R [ j ] is a structure, and the value range of j is 0-len, so as to obtain,

R[j].x＝rand(R_s)；

R[j].y＝rand(R_s)；

P[j].x＝R[j].x modW_bp*3；

P[j].y＝R[j].y mod H_bp；

wherein j ═ {0, L_sk-1, rand being a random number generating function; in the presence of a ligand to obtain P [ j]Then, P [ j ] is added]With already obtained P [1]]To P [ j-1]By comparison, if P [ j ]]And P1]To P [ j-1]When the same value exists in the P [ j ], the P [ j ] is regenerated]；

Step 3.4 obtaining the array according to the above stepsLength L_skIs random coordinate series of (2)]。

In step 4, the 1-dimensional array D2 is defined herein]，D[]＝{D[0],D[1]…D[m-1]}，m＝L_skEach of which is a 1-dimensional array D [ n ]]The calculation formula is as follows:

D[n]＝P[n].y*W_bp*3+P[n].x，n＝{0,m-1}；

setting the memory first address pointer of the data part of the basic base map as Buf, and setting Sk_bs[n]According to the value of D [ n ]]The positions are written into the data part of the basic base map one by one to replace the original RGB values, and the specific replacement mode is as follows:

Buf[D[n]]＝Sk_bs[n]；

after the replacement is completed, the cipher text Sk of the basic information data of the practitioner is realized_bsAnd combining with the basic picture to obtain the required electronic identity card of the practitioner.

The invention has the advantages that: can effectively generate the electronic identity card file of the practitioner which can not be counterfeited and encrypt the basic information data Sk of the practitioner_bsThe method is characterized in that a mode of discrete coordinates is combined with a basic base map, a secret key used for encryption and a random number seed used for calculating the discrete coordinates are obtained from summary data calculated by a summary algorithm SHA1 in basic identity information of practitioners, the method has uniqueness and irreproducibility for each practitioner, an electronic identity card file can be stored in a mobile phone and can be used for identity verification at any time, and as a public security and public security management department, the method is of great help for verifying whether the practitioner is normally registered and enhancing the management control degree of the practitioner.

Drawings

FIG. 1 is a schematic diagram of the basic base diagram of the present invention.

Fig. 2 is a schematic diagram of basic identity information of a practitioner and a front photograph of the practitioner superimposed on a basic base map of an electronic identity card of the practitioner according to the present invention.

FIG. 3 is a schematic diagram of establishing a coordinate system according to the base map.

FIG. 4 is a diagram of the data portion of the underlying base map of the present invention.

Detailed Description

The invention is further illustrated by the following specific figures and examples.

In order to effectively generate an electronic identity card of a practitioner, facilitate checking whether the practitioner normally registers or not and strengthen management control on the practitioner, the invention provides basic identity information of the practitioner and encrypts the provided basic identity information to obtain basic information data cipher text Sk of the practitioner in step 1_bsAnd the length L of the basic information data ciphertext of the practitioner_skAnd encrypting the key string K_bsThe basic identity information comprises a name, an identity card number and a registration date;

specifically, step 1 mainly includes the following steps:

step 1.1, obtaining basic information data variable S of the practitioner according to the basic identity information of the practitioner_bs；

In the embodiment of the invention, the basic information name, the identity card number and the registration date of a practitioner and the information content adopt a fixed-length mode to form a fixed-length content character string, wherein:

name: defining the name XM, the length is 32 bytes, and the longest length supports 16 Chinese characters;

identification card number: defining a name SFZH, length 18 bytes;

the registration date: defining a name DJRQ, 8 bytes in length (yesterday YYYYMMDD);

defining the basic information data variable of the practitioner as S_bsDefining a data variable S of the basic information of the practitioner_bsLength L_bs32+16+ 8-56 (bytes), S_bs＝XM&SFZH&DJRQ。

Step 1.2, utilizing SHA1 abstract algorithm to carry out data variable S on basic information of practitioner_bsEncrypting to obtain an encryption key string K with a 20-byte string_bsThe encryption key string K_bsIs a key ofThe string length is LK;

in the embodiment of the present invention, the key generation decision adopts a relatively fixed key manner, that is, each defined practitioner has a specific key, the key is obtained by calculation according to the basic information of the practitioner, and the key is a unique term for each practitioner and is not repeated. In particular, the data variable S is based on the aforementioned practitioner basic information_bsGenerating a secret key by the internal character string for subsequent text encryption and other purposes; defining an encryption key as K_bsAdopting SHA1 abstract algorithm, and obtaining basic information data variable S of practitioner_bsThe character string is used for calculating and obtaining the key string.

Defining SHA1 cryptographic function name as FSHA1, from which

K_bs＝FSHA1(S_bs)；

Final encryption key string K_bsIs a 160-bit, i.e., 20-byte, string. LK is defined as the length of the encryption key string, and is defined according to SHA1 as a fixed value of 20.

Step 1.3, encrypting the secret key string K_bsA matrix M1 of 2 x 10, the matrix M1 being

Preparing an operator matrix M of 2 x 3_subOperator matrix M_subIs composed ofThe operator matrix M_subConvolution operation is carried out on the DES secret key DK and the matrix M1 to generate 8 bytes_bsSaid DES key DK_bsIs composed ofKey DK according to DES_bsCan obtain basic information data cipher text Sk of the practitioner_bsSaid practitioner basic information data cipher text Sk_bsIs Sk_bs＝F_DES(S_bs,K_bs) Wherein F is_DESFor DES encryption functionNumber, practitioner basic information data cipher text Sk_bsHas a length of L_sk。

In the embodiment of the invention, the basic identity information of the practitioner is encrypted, and a plaintext is processed into a ciphertext; because the data information is not used for online data transmission in subsequent use, the DES encryption algorithm is adopted to encrypt the basic identity information of the practitioner, and the key is the encryption key string K generated in the previous step_bs. The generated cipher text is used as a component of the electronic identity card of the practitioner.

Here, the basic information data ciphertext of the practitioner is defined as Sk_bsThe DES key string is DK_bsFirstly, a DES key string is calculated according to the encrypted key string Kbs, the DES key is 64 bits (8 bytes), and the calculation process is as follows:

20 bytes of encryption key string K_bsConversion to 2 x 10 matrix M1

Preparing a 2 x 3 operator matrix M_sub，And generating an 8-byte DES key by convolution of the two matrixes:the specific convolution calculation process is well known to those skilled in the art and will not be described herein. V0, V1, … and V7 are DES key strings obtained by convolution calculation.

Finally, the DES secret key DK obtained by the calculation_bsTo calculate the encryption; defining DES encryption function name F_DESFrom which Sk is obtained_bs＝FDES(S_bs,K_bs)。

Here, a practitioner basic information data ciphertext Sk is defined_bsHas a length of L_sk(unit: byte), the above process can eventually be applied to severalThe numerical items can be used for subsequent process treatment: basic information data cipher text Sk of practitioner_bsAnd the length L of the basic information data ciphertext of the practitioner_sk(unit: byte), encryption key string K_bs(20 bytes).

Step 2, providing a basic base map of the electronic identity card of the practitioner, and superposing basic identity information of the practitioner and a front photo of the practitioner on the basic base map of the electronic identity card of the practitioner;

in the embodiment of the invention, the electronic identity card file of the practitioner is finally the picture file, in the using process, in order to prevent counterfeiting by people, fixed values are adopted on various parameters such as format, resolution ratio and the like of the picture file, so that the authenticity can be distinguished when the verification is carried out, and the picture format and the fixed parameters are defined as follows:

the picture format is as follows: BMP; resolution ratio: 720 x 472 (width 720 pixels, height 472 pixels); bit depth: 24.

defining a base picture file size of L_bpWidth of picture W_bpPicture height of H_bpFrom the parameters of the base map, we can obtain:

W_bp＝720；

H_bp＝472；

L_bp＝54+W_bp*H_bp3 +720 + 472 + 3-1019574 (unit: byte).

The case of the base image is shown as breast 1. On the basis of the basic base map, information superposition is needed to be carried out on the electronic identity card pictures of the employees. Including basic information of the practitioner and the front photo of the practitioner, the electronic identity card picture can be finished in appearance after superposition. The contents to be superimposed are as follows:

the name of the practitioner, the identification card number of the practitioner, the electronic identity card number of the practitioner, the registration date of the practitioner and the front photo of the practitioner. The situation after the superimposition is shown in fig. 2.

Each content is superimposed on the designated coordinate position of the base picture. And (4) completing the appearance processing of the electronic card picture by the practitioner, preparing to merge the picture and the data, and generating an electronic identity card file.

Step 3, according to the basic base map and the basic information data ciphertext length L of the practitioner_skAnd encrypting the key string K_bsGenerating a non-repeating random coordinate number sequence;

the method specifically comprises the following steps:

step 3.1, utilizing the encryption key string K_bsObtaining random number seed R_sThe random number seed R_sIs composed of

The work of the stage is to generate a random coordinate position of data superposition by using a random number sequence so as to generate the basic information data cipher text Sk of the practitioner generated in the previous stage_bsDiscretely incorporated into the picture file.

The random numbers generated by the rand function are not completely random in nature but are a group of pseudo-random number sequences, but are not false random numbers, the values of the continuously generated random number sequences are determined by the values of the random number seeds, and the same random number sequences can be generated by setting the same values of the random number seeds through the srand function. By utilizing this characteristic, the encryption key string K can be generated from the basic information of each worker_bsTo dynamically generate a relatively fixed random number seed for each practitioner to obtain a set of random number sequences corresponding to each practitioner. In the embodiment of the invention, the random number seed R_sIs composed of

Step 3.2, setting coordinate variable array P [ len]Wherein, the size of len and the length L of the basic information data cryptograph of the practitioner_skSame as, P2]＝{P[0],P[1]…P[len-1]Each P [ i ]]Is a structure body, i has a value range of 0-len, Pi]Coordinates in two directions of an X axis and a Y axis are included, and a coordinate system is established by taking the upper left corner of the basic base map as the origin of the coordinates;

in the embodiment of the invention, the step is to generate a set of non-repeating random coordinates according to the produced continuous random number sequence. Defining random coordinate variable array P [ len ]]Wherein len is array length, and its value and practitioner basic information data ciphertext length L_skThe same is true.

Establishing a coordinate system by using the base map, taking the upper left corner of the picture as the origin of coordinates, the horizontal direction as the X axis, and the vertical direction as the Y axis, wherein the X axis is in bytes, that is, each pixel value of the base map with 24-bit depth contains 3 bytes, and deriving the X axis and the Y axis as follows:

the Y axis is the height of the picture, and the value range is that { Y |0 is less than or equal to Y<H_bp}; hbp was previously defined as the height of the base map; the X axis is the width of the picture, and the value range is { X |0 ≦ X<W_bp*3}，W_bpPreviously defined as the width of the underlying base map. As shown in fig. 3 and 4.

Step 3.3, setting a random coordinate array R [ len ], wherein R [ ] [ { R [0], R [1] … R [ len-1] }, each R [ j ] is a structure, and the value range of j is 0-len, so as to obtain,

R[j].x＝rand(R_s)；

R[j].y＝rand(R_s)；

P[j].x＝R[j].x modW_bp*3；

P[j].y＝R[j].y mod H_bp；

wherein j ═ {0, L_sk-1, rand being a random number generating function; in the presence of a ligand to obtain P [ j]Then, P [ j ] is added]With already obtained P [1]]To P [ j-1]By comparison, if P [ j ]]And P1]To P [ j-1]When the same value exists in the P [ j ], the P [ j ] is regenerated]；

Step 3.4, obtaining the length L of the array according to the steps_skIs random coordinate series of (2)]。

In the embodiment of the invention, the non-repeated random coordinate number sequence can be generated after the steps are carried out.

Step 4, using the non-repeated random coordinate series to encrypt the basic information data cipher text Sk of the practitioner_bsAnd combining with the basic picture to obtain the required electronic identity card of the practitioner.

In the BMP picture format, the data portion of the BMP picture format is a continuous memory segment, and the coordinate data needs to be converted from 2-dimensional data to 1-dimensional data for practical use.

Here, the 1-dimensional array D2 is defined]，D[]＝{D[0],D[1]…D[m-1]}，m＝L_skEach of which is a 1-dimensional array D [ n ]]The calculation formula is as follows:

D[n]＝P[n].y*W_bp*3+P[n].x，n＝{0,m-1}；

setting the memory first address pointer of the data part of the basic base map as Buf, and setting Sk_bs[n]According to the value of D [ n ]]The positions are written into the data part of the basic base map one by one to replace the original RGB values, and the specific replacement mode is as follows:

Buf[D[n]]＝Sk_bs[n]；

after the replacement is completed, the basic information data cipher text Skbs of the practitioner is merged with the basic picture, so that the required electronic identity card of the practitioner is obtained.

In the embodiment of the invention, the encrypted practitioner basic remaining information is discretely merged with the basic base map, the number of bytes of ciphertext data is less than that of the whole BMP file, the display of the BMP file picture is not influenced after the discrete merging, and the file formed by merging the data and the picture is used as the electronic identity card file of the practitioner.

The invention can effectively generate the electronic identity card file of the practitioner who can not be counterfeited and encrypt the basic information data Sk of the practitioner_bsThe method is characterized in that a mode of discrete coordinates is combined with a basic base map, a secret key used for encryption and a random number seed used for calculating the discrete coordinates are obtained from abstract data calculated by an abstract algorithm SHA1 in basic identity information of practitioners, the method has uniqueness and irreproducibility for each practitioner, an electronic identity card file can be stored in a mobile phone, the practitioner can move an APP or open a WEB of the mobile phone, the picture can be verified after being selected, identity verification can be performed at any time, and as a public security and public security management department, the method is greatly helpful for verifying whether the practitioner is normally registered or not and enhancing the management control degree of the practitioner.

Claims (5)

1. A practitioner electronic identity card generation method suitable for dynamic public security management and control is characterized by comprising the following steps:

step 1, providing basic identity information of a practitioner, and encrypting the provided basic identity information to obtain basic information data cipher text Sk of the practitioner_bsAnd the length L of the basic information data ciphertext of the practitioner_skAnd encrypting the key string K_bsThe basic identity information comprises a name, an identity card number and a registration date;

step 2, providing a basic base map of the electronic identity card of the practitioner, and superposing basic identity information of the practitioner and a front photo of the practitioner on the basic base map of the electronic identity card of the practitioner;

step 3, according to the basic base map and the basic information data ciphertext length L of the practitioner_skAnd encrypting the key string K_bsGenerating a non-repeating random coordinate number sequence;

step 4, using the non-repeated random coordinate series to encrypt the basic information data cipher text Sk of the practitioner_bsAnd combining with the basic picture to obtain the required electronic identity card of the practitioner.

2. The method for generating an electronic identity card for a practitioner, suitable for dynamic management and control of public security as claimed in claim 1, wherein the step 1 specifically comprises the following steps:

step 1.1, obtaining basic information data variable S of the practitioner according to the basic identity information of the practitioner_bs；

Step 1.2, utilizing abstract algorithm SHA1 to carry out basic information data variable S on the practitioner_bsEncrypting to obtain an encryption key string K with a 20-byte string_bsThe encryption key string K_bsThe key string length of is LK;

step 1.3, encrypting the secret key string K_bsA matrix M1 of 2 x 10, the matrix M1 being

Preparing an operator matrix M of 2 x 3_subOperator matrix M_subIs composed ofThe operator matrix M_subConvolution operation is carried out on the DES secret key DK and the matrix M1 to generate 8 bytes_bsSaid DES key DK_bsIs composed ofKey DK according to DES_bsCan obtain basic information data cipher text Sk of the practitioner_bsSaid practitioner basic information data cipher text Sk_bsIs Sk_bs＝F_DES(S_bs,K_bs) Wherein F is_DESFor the encryption function of DES, the basic information data cipher text Sk of the practitioner_bsHas a length of L_sk。

3. The practitioner electronic identity card generation method suitable for dynamic police management and control according to claim 1, wherein the step 2 specifically comprises the following steps:

step 2.1, providing the required basic base map, wherein the format of the basic base map is BMP, the resolution is 720 x 472, the bit depth is 24, and the size of the basic picture file is L_bpWidth of picture W_bpPicture height of H_bp；

And 2.2, superposing the basic identity information of the practitioner and the front photo of the practitioner to the position required by the basic base map of the electronic identity card of the practitioner to obtain the appearance of the electronic identity card of the practitioner.

4. The practitioner electronic identity card generation method suitable for dynamic police management and control according to claim 3, wherein in step 3, the method specifically comprises the following steps:

step 3.1, utilizing the encryption key string K_bsObtaining random number seed R_sThe random number seed R_sIs composed of

Step 3.2, setting coordinate variable array P [ len]Wherein, the size of len and the length L of the basic information data cryptograph of the practitioner_skSame as, P2]＝{P[0],P[1]…P[len-1]Each P [ i ]]Is a structure body, i has a value range of 0-len, Pi]Coordinates in two directions of an X axis and a Y axis are included, and a coordinate system is established by taking the upper left corner of the basic base map as the origin of the coordinates;

step 3.3, setting a random coordinate array R [ len ], wherein R [ ] [ { R [0], R [1] … R [ len-1] }, each R [ j ] is a structure, and the value range of j is 0-len, so as to obtain,

R[j].x＝rand(R_s)；

R[j].y＝rand(R_s)；

P[j].x＝R[j].x mod W_bp*3；

P[j].y＝R[j].y mod H_bp；

wherein j ═ {0, L_sk-1, rand being a random number generating function; in the presence of a ligand to obtain P [ j]Then, P [ j ] is added]With already obtained P [1]]To P [ j-1]By comparison, if P [ j ]]And P1]To P [ j-1]When the same value exists in the P [ j ], the P [ j ] is regenerated]；

Step 3.4, obtaining the length L of the array according to the steps_skIs random coordinate series of (2)]。

5. The method as claimed in claim 4, wherein in step 4, the 1-dimensional array D2 is defined as]，D[]＝{D[0],D[1]…D[m-1]}，m＝L_skEach of which is a 1-dimensional array D [ n ]]The calculation formula is as follows:

D[n]＝P[n].y*W_bp*3+P[n].x，n＝{0,m-1}；

setting the memory first address pointer of the data part of the basic base map as Buf, and setting Sk_bs[n]According to the value of D [ n ]]The data portions of the base map are written one by one in place of the original RGB valuesThe body replacement mode is as follows:

Buf[D[n]]＝Sk_bs[n]；

after the replacement is completed, the cipher text Sk of the basic information data of the practitioner is realized_bsAnd combining with the basic picture to obtain the required electronic identity card of the practitioner.