CN111800256B - Old people two-dimensional code electronic license application method and system - Google Patents
Old people two-dimensional code electronic license application method and system Download PDFInfo
- Publication number
- CN111800256B CN111800256B CN202010637435.2A CN202010637435A CN111800256B CN 111800256 B CN111800256 B CN 111800256B CN 202010637435 A CN202010637435 A CN 202010637435A CN 111800256 B CN111800256 B CN 111800256B
- Authority
- CN
- China
- Prior art keywords
- electronic certificate
- packet data
- index information
- electronic
- fragment packet
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
- H04L9/0643—Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
- H04L9/3213—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority using tickets or tokens, e.g. Kerberos
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02W—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO WASTEWATER TREATMENT OR WASTE MANAGEMENT
- Y02W90/00—Enabling technologies or technologies with a potential or indirect contribution to greenhouse gas [GHG] emissions mitigation
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Power Engineering (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention discloses a two-dimensional code electronic license application method and a two-dimensional code electronic license application system for the elderly, wherein the method comprises the following steps: the processing center node stores an electronic certificate generation rule, the electronic certificate is a two-dimensional code picture, and the processing center node is used for generating the electronic certificate; the merchant nodes are multiple, and the merchant nodes are stored with identification codes of the processing center nodes and are used for receiving and verifying electronic certificates; the processing center node generates a user photo identification code according to the user photo, and generates an electronic certificate according to the user photo identification code, the identity number and the effective time length and the two-dimensional code rule; the processing center node generates electronic certificate index information according to the electronic certificates, and encrypts the user photos and the credit amount into photo data packets by using the identity numbers as encryption passwords. The invention realizes the decentralization of the use and verification of the electronic certificate and realizes the consumption use record of the electronic certificate.
Description
Technical Field
The invention relates to the technical field of electronic certificate processing, in particular to a two-dimensional code electronic certificate application method and system for old people.
Background
In the prior art, physical certificates are used to indicate the identity information of a user. When a user goes to transact a matter related to himself, a certificate needs to be presented in order to verify the user identity and record the user information. However, at present, the credentials of the user are easy to lose, the credentials are falsified after the credentials are lost, and the credentials have no history record in use, namely, the credentials of the user are falsified by other people. In particular, the loss of credentials is more likely to occur due to the reduced memory of the elderly. The old is one of the large-scale constitution of tourists, and at present, a plurality of consumption points exist in one scenic spot, but partial merchants have random price rising and opaque price at the consumption points, so that the scenic spot image is affected. The core is that the business and tourist pay by cash or network, the trade is not recorded, and the supervision can not be carried out.
Disclosure of Invention
Therefore, it is necessary to provide a method and a system for applying the two-dimensional code electronic license of the elderly, which solve the problems that the physical certificate of the elderly is easy to lose, does not have transaction records, and the like.
In order to achieve the above purpose, the inventor provides a two-dimensional code electronic license application method for the elderly, comprising the following steps:
the processing center node stores an electronic certificate generation rule, the electronic certificate is a two-dimensional code picture, and the processing center node is used for generating the electronic certificate; the merchant nodes are multiple, and the merchant nodes are stored with identification codes of the processing center nodes and are used for receiving and verifying electronic certificates;
the merchant node shoots a user photo, generates an identity number of the user according to the sequence of the user, and sends the identity number to the processing center node;
the processing center node generates a user photo identification code according to the user photo, generates an electronic certificate according to a two-dimensional code rule by using the user photo identification code, an identity number and an effective time length, and sends the electronic certificate to a merchant node for shooting the user photo, and the merchant node receives the electronic certificate and sends the electronic certificate to palm equipment of the user;
the processing center node generates electronic certificate index information according to the electronic certificates, and encrypts the user photos and the credit amount into photo data packets by using the identity numbers as encryption passwords;
the processing center node divides the electronic certificate into a preset number of electronic certificate fragments, the sizes of the divided electronic certificate fragments are the same, sequence numbers are generated according to the sequence of the electronic certificate fragments, and the electronic certificate index information, each sequence number, the corresponding electronic certificate fragments and the photo data packet are packed into fragment packet data to form the preset number of fragment packet data;
transmitting all the fragment packet data to different nodes, wherein each node receives one fragment packet data;
after each node receives fragment packet data, the fragment packet data is cached in a memory, electronic certificate index information is obtained according to the fragment packet data, the node judges whether a validity notification of the electronic certificate index information is contained in the received notification message, and if the validity notification exists, whether the fragment packet data is stored is determined according to the result of the validity notification;
if the validity notification is not provided, the electronic certificate index information is sent to the processing center node for verification, if the verification passing information is received, the verification result is considered to be legal, otherwise, the verification result is considered to be illegal;
if the checking result is legal, storing the fragment packet data into a memory, and if the checking result is illegal, deleting the fragment packet data; broadcasting the electronic certificate index information and the verification result as validity notification of the electronic certificate index information to other nodes, and simultaneously recording the validity notification into a data chain;
the merchant node acquires the electronic certificate through code scanning, generates electronic certificate index information according to the electronic certificate, acquires stored fragment packet data according to the electronic certificate index information, segments the electronic certificate according to the size of the fragment packet data, and acquires fragment packet data and corresponding sequence numbers after segmentation; the merchant node broadcasts the index information of the electronic certificate to other nodes, and the other nodes reply the sequence numbers; the merchant node sends corresponding segmented electronic certificate data according to the received sequence numbers, other nodes compare the received electronic certificate fragments with the electronic certificate fragments in the fragment packet data to generate and reply comparison results, and the comparison results comprise electronic certificate index information and electronic certificate sequence numbers; after comparison, recording a comparison result into a data chain;
after the merchant node receives the comparison result of all electronic certificate serial numbers and meets the legal requirement, analyzing the electronic certificates to obtain electronic certificate data, decrypting photo package data according to the identity numbers in the electronic certificate data to obtain user photos, checking whether the user photos are consistent with the current personnel or not by node personnel, inputting checking results, consumption items and consumption amount, wherein the checking results, the consumption items and the consumption amount comprise electronic certificate index information, updating the checking results, the consumption items and the consumption amount to a data chain by the merchant node, broadcasting the checking results, the consumption items and the consumption amount, and updating the checking results, the consumption items and the consumption amount to the data chain by other nodes after receiving.
Further, the determining whether to store the fragment packet data according to the result of the validity notification includes the steps of:
judging whether the number of the legal notices is larger than a first preset value, if so, judging whether the number of the same results in the legal notices is larger than a second preset value, if so, taking the same results as the results of verification notices of the electronic certificate index information, and determining whether to store the fragment packet data according to the results;
if the number of the legal notices is smaller than or equal to a first preset value, ignoring the legal notices;
and if the number of the same results indicated in the validity notification is smaller than or equal to a second preset value, ignoring the validity notification.
Further, the processing center node segments the electronic certificate, including the steps of:
the processing center node copies the electronic certificates into a plurality of groups and generates group identification numbers, each group of electronic certificates is divided after being combined with the group identification numbers, and the preset number of the electronic certificate fragments divided in each group is different in size;
said packaging into a fragment packet data comprises the steps of:
packaging the group identification number corresponding to the fragment packet data into the fragment packet data;
the comparison result comprises the electronic certificate index information and the electronic certificate sequence number, and the method comprises the following steps:
the comparison result comprises electronic certificate index information, electronic certificate sequence numbers and group identification numbers.
Further, the step of transmitting all the fragment packet data to different nodes includes the steps of:
dividing the fields of the IP addresses into IP groups with the same number as the preset number according to the preset number, wherein one IP group corresponds to one fragment packet data;
and then the fragment packet data is sent to the node with the IP conforming to the corresponding IP group format.
Further, all nodes comprise a master node; after determining to store the fragment packet data, the master node further comprises the steps of:
the main node caches fragment packet data with preset time length in the memory;
and when the step of generating the electronic certificate index information according to the electronic certificate and acquiring the stored fragment packet data according to the electronic certificate index information comprises the following steps: and the master node acquires the fragment packet data cached in the memory from the memory according to the electronic certificate index information, and if the stored fragment packet data is not acquired from the memory any more.
Further, the merchant node broadcasts the electronic certificate index information and the cancellation information to other nodes according to the request of reporting loss or cancellation of the user, and all the nodes record the electronic certificate index information and the cancellation information into own data chains;
and when the electronic certificate index information is generated according to the electronic certificate, the method comprises the following steps: and searching whether the electronic certificate index information and the cancellation information exist in the data chain, if so, directly generating a comparison result of the error request, otherwise, performing a subsequent segmentation step.
The invention provides a safe electronic certificate processing system, which comprises a plurality of nodes, wherein the nodes comprise a memory and a processor, and a computer program is stored in the memory, and the computer program realizes the steps of the method according to any one of the embodiments of the invention when being executed by the processor.
Compared with the prior art, the technical scheme is characterized in that the electronic certificate is generated through the processing center node, the uniqueness of certificate generation is realized, then the electronic certificate data can be segmented and distributed to different nodes, at the initial stage, the nodes can be verified with the node for generating the electronic certificate, then the verification result is diffused, and the follow-up nodes can directly store segmented fragment packet data of the electronic certificate according to the verification result. Therefore, the electronic certificate data is partial data for other nodes, all original data cannot be acquired, and safety is guaranteed. And then the user acquires the electronic certificate and stores the electronic certificate. When the consumption authentication is needed, the merchant node can scan the electronic certificate, then broadcast the electronic certificate after acquiring the electronic certificate, and other nodes verify the electronic certificate according to the fragment packet data stored by the merchant node. After a large number of nodes pass the verification, photo data can be obtained according to the data in the electronic certificate, and then whether the certificate is used by the user or not is checked according to the photo. All verification processes and certificate consumption and use processes are recorded in a data chain, and a user can know the use history of own certificates at any time. After knowing that someone is faked, the certificate before logging off can be requested to regenerate the certificate, so that the certificate before logging off can be disabled, and the security of the electronic certificate is ensured.
Drawings
FIG. 1 is a flow chart of a method according to an embodiment;
FIG. 2 is a flow chart of a method according to an embodiment;
fig. 3 is a schematic illustration of segmentation according to an embodiment.
Detailed Description
In order to describe the technical content, constructional features, achieved objects and effects of the technical solution in detail, the following description is made in connection with the specific embodiments in conjunction with the accompanying drawings.
Referring to fig. 1 to 3, the present embodiment provides a two-dimensional code electronic license application method for the elderly, wherein the processing procedure is performed between a processing center node and a merchant node. The processing center node stores an electronic certificate generation rule; so as to generate the two-dimension code picture of the electronic certificate according to the data. The processing center node can be arranged at the entrance of the scenic spot, a plurality of merchant nodes are arranged, and the merchant nodes are used for carrying out consumption processing, for example, the processing center node can be arranged on each store and need to verify the electronic certificate provided by the user. The merchant node does not have the generation authority of the electronic certificate, but only has the verification authority and the consumption record authority. The merchant node stores an identification code of the processing center node for receiving and verifying the electronic certificate. Of course, in order to obtain the picture information of the two-dimension code of the electronic certificate, the merchant node stores an analysis rule for analyzing the picture of the electronic certificate to obtain the information contained in the picture of the electronic certificate.
Step S100, the processing center node shoots the user photos and generates the identity numbers of the users according to the sequence of the users. The user sequence is the sequence of generating the electronic certificate by the user. Because in specific places such as scenic spots, people are relatively fewer, the user numbers are relatively short and are relatively easy to remember.
Step S101, a processing center node generates a user photo identification code according to a user photo, generates an electronic certificate according to a two-dimensional code rule by using the user photo identification code, an identity number and an effective time length, and sends the electronic certificate to palm equipment of a user. The electronic certificate can be sent to the user by the help of the personnel of the processing center node, and can be sent in a WeChat mode. The electronic certificate is stored on the user's palm device (e.g., on a cell phone). Thus, the electronic certificate is arranged on the mobile phone of the old and is convenient to use. And can send a copy to the user mailbox for backup. Wherein: the user photo is the head photo of the user, is used for subsequently consulting whether the current user is consistent with the photo user or not, and the user photo identification code is a unique code generated according to the user photo. The identity number is a number which is convenient for people to memorize, and each person has a unique identity number. The effective time length can be set as a cut-off time, after the electronic certificate is obtained through subsequent code scanning, the electronic certificate is analyzed to obtain the effective time, if the effective time is smaller than the current time, the electronic certificate is invalid, and the data in the electronic certificate is not responded subsequently. The processing center node identification code is used for identifying the processing center node, and fixed-point communication between the merchant node and the processing center node is realized.
Step S102, the processing center node generates electronic certificate index information according to the electronic certificate, where the generated unique code, such as MD5 code, should be generated. And the user photo and the credit amount are encrypted into a photo data packet by using the identity number as an encryption password, in some embodiments, the user password can be encrypted into the photo data packet together, and the user password is a password set by the user and can be input when the user uses the password. Of course, the old can easily forget the password, and the password can not be adopted here. The encryption is similar to the compression of a compressed package, and only if the correct identity number and the user password are obtained, the user photo can be decompressed and obtained, and the user photo can be checked for use later. The credit amount may be determined based on prepaid funds paid by the user, or may be otherwise determined, as set by the processing center node personnel.
Step S103, the processing center node divides the electronic certificate into a preset number of electronic certificate fragments, the sizes of the divided electronic certificate fragments are the same, sequence numbers are generated according to the sequence of the electronic certificate fragments, and the electronic certificate index information, each sequence number, the corresponding electronic certificate fragments and the photo data packet are packed into fragment packet data to form the preset number of fragment packet data. In order to make the sizes of the fragments of the electronic certificates after being segmented the same, the current electronic certificate total data size can be divided by a preset number to see whether the fragments can be divided or not, and if so, the sizes after being segmented are the same. If the electronic certificate fragments cannot be divided completely, subtracting one from the preset number to serve as a divisor, dividing the divisor by the total electronic certificate data size to obtain the sizes of the electronic certificate fragments, wherein the surplus remainder is the last electronic certificate fragment data, and filling blank data to enable the last electronic certificate fragment data to be the same as the previous electronic certificate fragment data in size.
Step S104, transmitting all the fragment packet data to different nodes, wherein each node receives one fragment packet data; as shown in fig. 3, which includes fragments 1 through N, each node receives one fragment packet data, and since there are more nodes than fragments, different nodes may receive the same fragment packet data.
In step S105, after each node receives a fragment packet data, the fragment packet data is buffered in a memory, where the memory is a volatile memory, unlike a nonvolatile memory such as a hard disk. And acquiring the electronic certificate index information from the fragment packet data, judging whether the received notification message contains a validity notification of the electronic certificate index information by the node, and if so, entering S115 to determine whether to store the fragment packet data according to the result of the validity notification. The validity notification is a validity message containing the electronic certificate index information, and is a validity message verified by other nodes. Of course, if the node currently receiving the fragment packet subsequently has verification, the validity notification is also generated, and the other nodes receive the validity notification. Through the validity notification, each node does not need to go to process the verification of the central node, and if the node verification is passed, the node is broadcasted in the whole network, and the subsequent node can directly operate according to the received node message. Wherein, according to the result of the validity notification, whether to store the fragment packet data is determined to generally satisfy that the number of the validity notifications is greater than a preset number, such as 100 node notifications. If a notification is received that is greater than the preset number and the notification indicates legal, the fragment packet is stored. If a notification is received that is greater than the preset number and the notification indicates illegal, the fragment packet is deleted. If the simultaneous presence notification result indicates legal and illegal, the same result is subject to a large number.
If the validity notification is not provided, step S106 sends the index information of the electronic certificate to the processing center node for verification, if the information passing the verification is received, the verification result is considered to be legal, otherwise, the verification result is considered to be illegal. Since the electronic certificate index information is unique and the processing center node identification code is also unique, it needs to be verified by the node that originally generated the data (i.e., the processing center node above) before there is no other node verification notification. If the electronic certificate index information is generated by the previous processing center node, the previous node replies legal information which passes verification, and if the electronic certificate index information is not generated by the own node, the previous node replies illegal information.
If the check result is legal, step S107 stores the fragmented packet data into a memory, where the memory is a nonvolatile memory. To preserve the fragmented packet data, the fragmented packet data may be packed into a check chain. The check chain is different from the data chain, the data chain is used for storing data information, the check chain is used for storing the check information such as fragment packet data, and the performance of different working processes can be improved by separately storing the check information. If the verification result is illegal, step S108 deletes the fragment packet data; and after the execution of the step S107 is completed or the execution of the step S108 is completed, the step S109 is entered to broadcast the electronic certificate index information and the verification result as the validity notification of the electronic certificate index information to other nodes, and the validity notification is recorded in a data chain. The other nodes may then implement a direct check of the fragmented packet data based on the notification, i.e. the received notification message in step S105. In this way, the processing center node can be taken offline for maintenance when no electronic certificate is generated, wherein the fragmented packet data containing the electronic certificate data is received and stored across the network.
At this time, all electronic certificate data cannot be acquired by other nodes, and only part of electronic certificate data is acquired. And then the processing center node can send the generated electronic certificate to the user, the user stores the electronic certificate, the user can directly show the two-dimensional code of the electronic certificate when using the electronic certificate later, and the merchant node can scan and acquire the two-dimensional code of the electronic certificate. And then entering step S201, the merchant node acquires the electronic certificate through code scanning, generates electronic certificate index information according to the electronic certificate, acquires stored fragment packet data according to the electronic certificate index information, segments the electronic certificate according to the size of the fragment packet data, and acquires the fragment packet data and the corresponding sequence number after segmentation. When the electronic certificate is divided, similar to the case of generating the fragment packet data, the division is performed in a predetermined order, such as converting the electronic certificate into binary data, and then the division is performed on the received electronic certificate according to the size of the electronic certificate data in the fragment packet data. I.e. in a reverse direction in such a way that the segmentation of the nodes of the electronic document was generated before, if it is the same electronic document before, the segmented data should be consistent. Step S202, the merchant node broadcasts the index information of the electronic certificate to other nodes, and the other nodes reply the sequence numbers; and the merchant node transmits the corresponding segmented electronic certificate data according to the received sequence numbers. And step S203, comparing the received electronic certificate fragments with the fragment packet data by other nodes to generate and reply a comparison result, wherein the comparison result comprises electronic certificate index information and electronic certificate sequence numbers.
And step S204, the merchant node receives the comparison result of all electronic certificate serial numbers, wherein all electronic certificate serial numbers correspond to all numbers of a complete electronic certificate. If the electronic certificate is divided into 20 shares, the sequential encoding should have 1-20. And after the validity requirement is met, the validity requirement is a set requirement, for example, each number needs to be provided with a notice that verification passes, wherein the number is larger than a preset number (for example, 100). And then analyzing the electronic certificate to obtain electronic certificate data, decrypting the photo package data according to the identity number in the electronic certificate data to obtain a user photo and a credit amount in step S205, and if the user password exists, inputting the password by the user. The node personnel checks whether the user photo is consistent with the current personnel or not, inputs a checking result, updates the checking result to the data chain and broadcasts the checking result to other nodes, and the other nodes update the checking result to the data chain after receiving the checking result; the checking result comprises electronic certificate index information, the merchant node obtains historical consumption amount from the data chain according to the electronic certificate index information, when the sum of the amount of the data chain and the current consumption amount is smaller than or equal to the credit amount, the checking result, the current consumption item and the current consumption amount are updated to the data chain, the checking result, the current consumption item and the current consumption amount are broadcasted, and other nodes receive and update to the data chain; the processing center node acquires the electronic certificate through code scanning, acquires the historical consumption amount and consumption items from the data chain according to the index information of the electronic certificate, updates the settlement amount to the data chain after receiving the money paid by the user, and broadcasts the settlement amount to other nodes, and updates the data chain of the other nodes after the other nodes receive the money. Therefore, the checksum using and consuming process of the electronic certificate can be stored in the data chain, and the user can review the using condition of the electronic certificate, so that the problem that the user is unaware after the existing entity certificate is used is avoided. The processing center node can also verify the consumption process to determine whether unreasonable consumption conditions exist, and can help clients to solve the problems in time.
In some embodiments, the determining whether to store the fragment packet data according to the result of the validity notification includes the steps of: judging whether the number of the legal notices is larger than a first preset value, if so, judging whether the number of the same results in the legal notices is larger than a second preset value, if so, taking the same results as the results of verification notices of the electronic certificate index information, and determining whether to store the fragment packet data according to the results; if the number of the legal notices is smaller than or equal to a first preset value, ignoring the legal notices; and if the number of the same results indicated in the validity notification is smaller than or equal to a second preset value, ignoring the validity notification. In this way, it can be ensured that the validity notification is relatively reliable.
In order to further improve the security of the electronic document fragment packet data, the processing center node segments the electronic document, including the steps of: the processing center node copies the electronic certificates into a plurality of groups and generates group identification numbers, each group of electronic certificates is divided after being combined with the group identification numbers, and the preset number of the electronic certificate fragments divided in each group is different in size; so that different sets of fragment packet data cannot be combined. Even if the original electronic certificate data is obtained, the original electronic certificate data cannot be combined and restored, and the safety of the electronic certificate is ensured. Said packaging into a fragment packet data comprises the steps of: and packing the group identification number corresponding to the fragment packet data into the fragment packet data. The comparison result comprises the electronic certificate index information and the electronic certificate sequence number, and the method comprises the following steps: the comparison result comprises electronic certificate index information, electronic certificate sequence numbers and group identification numbers. And then the group identification number is required to be carried when packaging, transmitting and subsequent checking. Thus, after the verification of all the fragment packets of different groups is completed, the verification of the electronic certificate can be completed once. And other users can obtain all data of the electronic certificate corresponding to the original node more difficult, so that the security of the electronic certificate is ensured.
To increase the speed at the time of verification, different fragmented packet data may be classified into specific IP groups, i.e., IP classification optimization. At the time of distribution, said transmitting all the fragmented packet data to the different nodes comprises the steps of: dividing the fields of the IP addresses into IP groups with the same number as the preset number according to the preset number, wherein one IP group corresponds to one fragment packet data; and then the fragment packet data is sent to the node with the IP conforming to the corresponding IP group format. If the IP6 address, the last field, and the preset number of fragments are 16 groups, the last field is a group of every 4096 IPs. The first fragmented packet data is then assigned to the IP address of the first group 4096 in sequence, the second fragmented packet data is assigned to the IP address of the second group 4096, and so on. Therefore, when the subsequent code scanning verification is performed, part of IP addresses of each group can be preferentially distributed to perform verification, verification of all numbers of the electronic certificate can be rapidly completed, and the verification speed is improved. When the electronic certificates are copied and randomly segmented, the field of the IP address can be divided into IP groups with the same number as the group identification number according to the number of the group identification numbers on the other field of the IP address, and then other fields in the IP corresponding to each group identification number are divided into IP groups with the same preset number as the segmented IP groups, so that the follow-up verification speed can be further improved, and the safety is also improved through verification of different groups.
In order to ensure the rapid operation of the nodes, all the nodes comprise a main node, and the system processing performance of the main node is larger than that of other nodes, and the main node is generally composed of a server host. After determining to store the fragment packet data, the master node further comprises the steps of: the main node caches fragment packet data with preset time length in the memory; and when the step of generating the electronic certificate index information according to the electronic certificate and acquiring the stored fragment packet data according to the electronic certificate index information comprises the following steps: and the master node acquires the fragment packet data cached in the memory from the memory according to the electronic certificate index information, and if the stored fragment packet data is not acquired from the memory any more. Therefore, the master node can cache the latest fragment packet data, and can quickly take out the data for verification in the follow-up verification process without going to a hard disk for data acquisition, so that the verification speed of the electronic certificate is improved.
In order to cancel the previous electronic certificate after the user finds that the electronic certificate is falsified or lost, the security is ensured. The method also comprises the step of logging off: and the merchant node broadcasts the electronic certificate index information and the cancellation information to other nodes according to the request of reporting loss or cancellation of the user, and all the nodes record the electronic certificate index information and the cancellation information into own data chains. And when the electronic certificate index information is generated according to the electronic certificate, the method comprises the following steps: and searching whether the electronic certificate index information and the cancellation information exist in the data chain, if so, directly generating a comparison result of the error request, otherwise, performing a subsequent segmentation step. Wherein the cancellation information indicates that the electronic certificate index information is in a cancellation state. If the electronic certificate index information is received again later, the electronic certificate index information can be directly prompted to be logged off, and no check sum check operation is performed.
The invention can also comprise an active loss reporting step, and after the merchant node finds that the current user cannot pass the check of the user photo, the merchant node stores the loss reporting information and the electronic certificate index information into a data chain and broadcasts the loss reporting information and the electronic certificate index information so that the electronic certificate is in a loss reporting state. The user can then process the central node to regenerate the electronic certificate, and the electronic certificate which was previously lost or logged off cannot be used continuously. When the user needs to consult the historical consumption record of the electronic certificate, the merchant node reads and displays the historical consumption record from the current data chain after checking the identity of the user, so that the user can know the previous consumption items and the consumption amount.
The invention provides a safe electronic certificate processing system, which comprises a plurality of nodes, wherein the nodes comprise a memory and a processor, and a computer program is stored in the memory, and the computer program realizes the steps of the method according to any one of the embodiments of the invention when being executed by the processor. The system can realize the safe processing process of the electronic certificate.
It should be noted that, although the foregoing embodiments have been described herein, the scope of the present invention is not limited thereby. Therefore, based on the innovative concepts of the present invention, alterations and modifications to the embodiments described herein, or equivalent structures or equivalent flow transformations made by the present description and drawings, apply the above technical solution, directly or indirectly, to other relevant technical fields, all of which are included in the scope of the invention.
Claims (7)
1. The application method of the two-dimensional code electronic license for the elderly is characterized by comprising the following steps of:
the processing center node stores an electronic certificate generation rule, the electronic certificate is a two-dimensional code picture, and the processing center node is used for generating the electronic certificate; the merchant nodes are multiple, and the merchant nodes are stored with identification codes of the processing center nodes and are used for receiving and verifying electronic certificates;
the processing center node shoots a user photo and generates an identity number of the user according to the sequence of the user;
the processing center node generates a user photo identification code according to the user photo, generates an electronic certificate according to a two-dimensional code rule by using the user photo identification code, the identity number and the effective time length, and sends the electronic certificate to palm equipment of a user;
the processing center node generates electronic certificate index information according to the electronic certificates, generates credit amount according to the identity numbers, and encrypts the user photos and the credit amount into photo data packets by using the identity numbers as encryption passwords;
the processing center node divides the electronic certificate into a preset number of electronic certificate fragments, the sizes of the divided electronic certificate fragments are the same, sequence numbers are generated according to the sequence of the electronic certificate fragments, and the electronic certificate index information, each sequence number, the corresponding electronic certificate fragments and the photo data packet are packed into fragment packet data to form the preset number of fragment packet data;
transmitting all the fragment packet data to different nodes, wherein each node receives one fragment packet data;
after each node receives fragment packet data, the fragment packet data is cached in a memory, electronic certificate index information is obtained according to the fragment packet data, the node judges whether a validity notification of the electronic certificate index information is contained in the received notification message, and if the validity notification exists, whether the fragment packet data is stored is determined according to the result of the validity notification;
if the validity notification is not provided, the electronic certificate index information is sent to the processing center node for verification, if the verification passing information is received, the verification result is considered to be legal, otherwise, the verification result is considered to be illegal;
if the checking result is legal, storing the fragment packet data into a memory, and if the checking result is illegal, deleting the fragment packet data; broadcasting the electronic certificate index information and the verification result as validity notification of the electronic certificate index information to other nodes, and simultaneously recording the validity notification into a data chain;
the merchant node acquires the electronic certificate through code scanning, generates electronic certificate index information according to the electronic certificate, acquires stored fragment packet data according to the electronic certificate index information, segments the electronic certificate according to the size of the fragment packet data, and acquires fragment packet data and corresponding sequence numbers after segmentation; the merchant node broadcasts the index information of the electronic certificate to other nodes, and the other nodes reply the sequence numbers; the merchant node sends corresponding segmented electronic certificate data according to the received sequence numbers, other nodes compare the received electronic certificate fragments with the electronic certificate fragments in the fragment packet data to generate and reply comparison results, and the comparison results comprise electronic certificate index information and electronic certificate sequence numbers; after comparison, recording a comparison result into a data chain;
after the merchant node receives the comparison result of all electronic certificate serial numbers and meets the legal requirement, analyzing the electronic certificates to obtain electronic certificate data, decrypting photo package data according to the identity numbers in the electronic certificate data to obtain user photos and credit amount, checking whether the user photos are consistent with the current personnel or not by node personnel, inputting the checking result, updating the checking result to a data chain, broadcasting the checking result to other nodes, and updating the checking result to the data chain after the other nodes receive the checking result; the checking result comprises electronic certificate index information, the merchant node obtains historical consumption amount from the data chain according to the electronic certificate index information, when the sum of the amount of the data chain and the current consumption amount is smaller than or equal to the credit amount, the checking result, the current consumption item and the current consumption amount are updated to the data chain, the checking result, the current consumption item and the current consumption amount are broadcasted, and other nodes receive and update to the data chain;
the processing center node acquires the electronic certificate through code scanning, acquires the historical consumption amount and consumption items from the data chain according to the index information of the electronic certificate, updates the settlement amount to the data chain after receiving the money paid by the user, and broadcasts the settlement amount to other nodes, and updates the data chain of the other nodes after the other nodes receive the money.
2. The application method of the two-dimensional code electronic license for the elderly according to claim 1, wherein the application method is characterized by comprising the following steps of: the step of determining whether to store the fragment packet data according to the result of the validity notification includes the steps of:
judging whether the number of the legal notices is larger than a first preset value, if so, judging whether the number of the same results in the legal notices is larger than a second preset value, if so, taking the same results as the results of verification notices of the electronic certificate index information, and determining whether to store the fragment packet data according to the results;
if the number of the legal notices is smaller than or equal to a first preset value, ignoring the legal notices;
and if the number of the same results indicated in the validity notification is smaller than or equal to a second preset value, ignoring the validity notification.
3. The application method of the two-dimensional code electronic license for the elderly according to claim 1, wherein the application method is characterized by comprising the following steps of:
the processing center node divides the electronic certificate, which comprises the following steps:
the processing center node copies the electronic certificates into a plurality of groups and generates group identification numbers, each group of electronic certificates is divided after being combined with the group identification numbers, and the preset number of the electronic certificate fragments divided in each group is different in size;
said packaging into a fragment packet data comprises the steps of:
packaging the group identification number corresponding to the fragment packet data into the fragment packet data;
the comparison result comprises the electronic certificate index information and the electronic certificate sequence number, and the method comprises the following steps:
the comparison result comprises electronic certificate index information, electronic certificate sequence numbers and group identification numbers.
4. The old two-dimensional code electronic license application method of claim 1, wherein the step of transmitting all the fragment packet data to different nodes comprises the steps of:
dividing the fields of the IP addresses into IP groups with the same number as the preset number according to the preset number, wherein one IP group corresponds to one fragment packet data;
and then the fragment packet data is sent to the node with the IP conforming to the corresponding IP group format.
5. The old two-dimensional code electronic license application method of claim 1, wherein all nodes comprise a master node; after determining to store the fragment packet data, the master node further comprises the steps of:
the main node caches fragment packet data with preset time length in the memory;
and when the step of generating the electronic certificate index information according to the electronic certificate and acquiring the stored fragment packet data according to the electronic certificate index information comprises the following steps: and the master node acquires the fragment packet data cached in the memory from the memory according to the electronic certificate index information, and if the stored fragment packet data is not acquired from the memory any more.
6. The application method of the two-dimensional code electronic license for the elderly according to claim 1, wherein the application method is characterized by comprising the following steps of: the method also comprises the steps of: the merchant node broadcasts the electronic certificate index information and the cancellation information to other nodes according to the request of reporting loss or cancellation of the user, and all the nodes record the electronic certificate index information and the cancellation information into own data chains;
and when the electronic certificate index information is generated according to the electronic certificate, the method comprises the following steps: and searching whether the electronic certificate index information and the cancellation information exist in the data chain, if so, directly generating a comparison result of the error request, otherwise, performing a subsequent segmentation step.
7. The utility model provides an old person's two-dimensional code electronic license application system which characterized in that: comprising a plurality of nodes comprising a memory, a processor, said memory having stored thereon a computer program which, when executed by the processor, implements the steps of the method according to any of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010637435.2A CN111800256B (en) | 2020-07-03 | 2020-07-03 | Old people two-dimensional code electronic license application method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010637435.2A CN111800256B (en) | 2020-07-03 | 2020-07-03 | Old people two-dimensional code electronic license application method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111800256A CN111800256A (en) | 2020-10-20 |
| CN111800256B true CN111800256B (en) | 2023-05-19 |
Family
ID=72810236
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010637435.2A Active CN111800256B (en) | 2020-07-03 | 2020-07-03 | Old people two-dimensional code electronic license application method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111800256B (en) |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107959568A (en) * | 2017-10-19 | 2018-04-24 | 陈伟麟 | A kind of measurement verification calibration digital certificates intelligent generation method and system |
| CN108717431A (en) * | 2018-05-11 | 2018-10-30 | 中国科学院软件研究所 | A kind of electronic evidence based on block chain deposits card, verification method and system |
| CN109309573A (en) * | 2018-09-21 | 2019-02-05 | 福建南威软件有限公司 | A kind of electronics license based on two dimensional code authorizes sharing application method |
| CN109558918A (en) * | 2018-10-10 | 2019-04-02 | 山西特信环宇信息技术有限公司 | A kind of certificate chain real estate electronics license system and its application method |
| CN109583166A (en) * | 2018-11-09 | 2019-04-05 | 山西特信环宇信息技术有限公司 | A kind of certificate chain electronic certificate system |
| CN109919274A (en) * | 2018-12-21 | 2019-06-21 | 北京印刷学院 | Stealthy complementary identification anti-counterfeit method of credentials |
| CN110739037A (en) * | 2019-09-25 | 2020-01-31 | 北京爱接力科技发展有限公司 | Medication management and control method, device, system, computer equipment and storage medium |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106527673B (en) * | 2015-09-11 | 2019-09-06 | 阿里巴巴集团控股有限公司 | Bind method and apparatus, electric paying method and the device of wearable device |
-
2020
- 2020-07-03 CN CN202010637435.2A patent/CN111800256B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107959568A (en) * | 2017-10-19 | 2018-04-24 | 陈伟麟 | A kind of measurement verification calibration digital certificates intelligent generation method and system |
| CN108717431A (en) * | 2018-05-11 | 2018-10-30 | 中国科学院软件研究所 | A kind of electronic evidence based on block chain deposits card, verification method and system |
| CN109309573A (en) * | 2018-09-21 | 2019-02-05 | 福建南威软件有限公司 | A kind of electronics license based on two dimensional code authorizes sharing application method |
| CN109558918A (en) * | 2018-10-10 | 2019-04-02 | 山西特信环宇信息技术有限公司 | A kind of certificate chain real estate electronics license system and its application method |
| CN109583166A (en) * | 2018-11-09 | 2019-04-05 | 山西特信环宇信息技术有限公司 | A kind of certificate chain electronic certificate system |
| CN109919274A (en) * | 2018-12-21 | 2019-06-21 | 北京印刷学院 | Stealthy complementary identification anti-counterfeit method of credentials |
| CN110739037A (en) * | 2019-09-25 | 2020-01-31 | 北京爱接力科技发展有限公司 | Medication management and control method, device, system, computer equipment and storage medium |
Non-Patent Citations (1)
| Title |
|---|
| 刘山山 ; .一种融合二维码的体检身份认证系统.实用医药杂志.2016,(06),全文. * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111800256A (en) | 2020-10-20 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110024357B (en) | System and method for data processing using distributed ledgers | |
| CN107342867B (en) | Signature verification method and device | |
| CN110383757B (en) | System and method for secure processing of electronic identities | |
| US10491396B2 (en) | Method and server for providing notary service for file and verifying file recorded by notary service | |
| US10235538B2 (en) | Method and server for providing notary service for file and verifying file recorded by notary service | |
| JP2020517200A (en) | Block chain-based document management method using UTXO-based protocol and document management server using this method | |
| CN105262779B (en) | Identity authentication method, device and system | |
| US8661262B2 (en) | User authentication system, terminal used in the same, authentication verification device, and program | |
| CN108009445B (en) | Semi-centralized trusted data management system | |
| CN111723385B (en) | Data information processing method, device, electronic equipment and storage medium | |
| CN105516110A (en) | Mobile equipment secure data transmission method | |
| CN105765941A (en) | Illegal access server prevention method and device | |
| CN109242666A (en) | Personal reference method, apparatus and computer equipment are obtained based on block chain | |
| CN114127724A (en) | Integrity audit for multi-copy storage | |
| CN111488626A (en) | Data processing method, device, equipment and medium based on block chain | |
| CN108846671B (en) | Online secure transaction method and system based on block chain | |
| CN110914826B (en) | System and method for distributed data mapping | |
| CN111783918B (en) | Safe two-dimensional code distribution method and system | |
| US11544786B2 (en) | Systems and methods for provably fair atomic swaps of private digital assets | |
| CN112256799A (en) | Data processing method and device based on block chain, server and storage medium | |
| CN111800256B (en) | Old people two-dimensional code electronic license application method and system | |
| CN111783154B (en) | Old people electronic license generation method and system | |
| CN111783157B (en) | Trusted two-dimensional code electronic certificate processing method and system | |
| CN115756255A (en) | Method, device and equipment for processing equipment parameters of parking lot equipment and storage medium | |
| CN115643047A (en) | Block chain identity authentication method based on honest rewards |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |