CN116055057A - Information sharing method and device, storage medium and electronic equipment - Google Patents

Abstract

The invention provides an information sharing method and device, a storage medium and electronic equipment, comprising the following steps: determining each airport to be selected based on the information sharing request sent by the passenger; determining authorized airports selected by passengers from all the airports to be selected; encrypting boarding authentication information of the passenger by using a public key of an authorized airport to obtain encrypted data, and adding the generated digital signature into the encrypted data to obtain shared data; uploading the shared data to a blockchain, triggering an authorized airport to carry out signature verification on the shared data, and storing boarding authentication information in the shared data and updating an authorized tourist list when the shared data passes the signature verification. The boarding authentication information of the passengers is uploaded to the blockchain after being signed, encrypted and the like, and the authorized airports are triggered to acquire the boarding authentication information of the passengers from the blockchain, so that information sharing is completed, the passengers can directly use OneID service at each authorized airport, and the use experience of the passengers is improved.

Description

Information sharing method and device, storage medium and electronic equipment

technical field

The present invention relates to the technical field of information processing, in particular to an information sharing method and device, a storage medium and electronic equipment.

Background technique

OneID is a concept proposed by the International Air Transport Association (IATA), which aims to apply identity management and biometric technology to avoid passengers' dependence on identity documents during travel, thereby optimizing the travel experience of passengers. The core idea of OneID is to allow passengers to share their digital identities and other required documents with airlines, airports and other agencies before travelling, thereby eliminating the repeated identity verification process during travel and reducing the time spent on check-in, consignment, boarding, and access. The waiting time consumed by customs and other links.

The ideal state of the OneID service is that passengers can use their authenticated digital identities to go through all the necessary processes and enjoy corresponding services from the time they enter the airport of departure until they leave the airport of destination. At present, airports cannot share the authentication information required by passengers to use the OneID service, so that passengers need to register and enter the information required for authentication every time they arrive at a new airport before they can use the OneID service, resulting in a bad experience for passengers. good.

Contents of the invention

In view of this, the present invention provides an information sharing method and device, storage medium and electronic equipment, which can share passenger information among various airports, ensure that passengers can directly use OneID services after arriving at the airport, and provide passengers with better services .

In order to achieve the above purpose, embodiments of the present invention provide the following technical solutions:

A method of sharing information, comprising:

Receive the information sharing request sent by the passenger, and determine each candidate airport based on the information sharing request;

determining the authorized airport selected by said passenger among each of said candidate airports;

Collect the boarding authentication information of the passenger, and use the public key of the authorized airport to encrypt the boarding authentication information to obtain encrypted data;

generating a digital signature of the boarding authentication information, and adding the digital signature to the encrypted data to obtain shared data;

Upload the shared data to the preset blockchain, and send a consensus request to the authorized airport;

Trigger the authorized airport to obtain the shared data in the block chain based on the consensus request, and perform signature verification on the shared data, and when the shared data passes the signature verification, the The boarding authentication information is saved and the list of authorized tourists is updated.

In the above method, optionally, the determining each candidate airport based on the information sharing request includes:

Analyzing the preset airport data sharing agreement to obtain the signing information in the airport data sharing agreement;

Based on the signing information, determine each participating airport that has signed the airport data sharing agreement;

Each of the participating airports is determined as a candidate airport.

In the above method, optionally, generating the digital signature of the boarding authentication information includes:

Determine the private key of the airport where the passenger is located, and use the private key to sign the boarding authentication information to obtain a digital signature.

In the above method, optionally, saving and updating the authorized tourist list in the boarding authentication information in the shared data includes:

The authorized airport obtains the encrypted data in the shared data, and calls its own private key to decrypt the encrypted data to obtain the boarding authentication information;

The boarding authentication information is saved, and the information of the passenger is updated to the list of authorized tourists.

The above method, optionally, after determining the authorized airport selected by the passenger in each of the candidate airports, further includes:

Obtain a list of historical authorizations for the passenger;

Based on each of the authorized airports and the historical authorization list, it is judged whether there is an airport whose authorization has been cancelled;

When it is determined that there is an airport with deauthorization, an information deletion request is sent to the airport with deauthorization, so that the airport with deauthorization deletes the passenger's information based on the information deletion request.

An information sharing device, comprising:

a receiving unit, configured to receive an information sharing request sent by a passenger, and determine each candidate airport based on the information sharing request;

a determination unit, configured to determine the authorized airport selected by the passenger among each of the candidate airports;

The collection unit is used to collect the boarding authentication information of the passenger, and use the public key of the authorized airport to encrypt the boarding authentication information to obtain encrypted data;

A generating unit, configured to generate a digital signature of the boarding authentication information, and add the digital signature to the encrypted data to obtain shared data;

a sending unit, configured to upload the shared data to a preset blockchain, and send a consensus request to the authorized airport;

A trigger unit, configured to trigger the authorized airport to obtain the shared data in the block chain based on the consensus request, and perform signature verification on the shared data, and when the shared data passes the signature verification, the The boarding authentication information in the above-mentioned shared data saves and updates the list of authorized tourists.

In the above device, optionally, the receiving unit includes:

The first acquisition subunit is configured to analyze the preset airport data sharing agreement, and acquire the signing information in the airport data sharing agreement;

The first determination subunit is configured to determine each participating airport that has signed the airport data sharing agreement based on the contract information;

The second determination subunit is configured to determine each of the participating airports as candidate airports.

In the above device, optionally, the generating unit includes:

The third determining subunit is configured to determine the private key of the airport where the passenger is located, and use the private key to sign the boarding authentication information to obtain a digital signature.

The above device, optionally, the trigger unit includes:

Calling a subunit, used for the authorized airport to obtain the encrypted data in the shared data, and call its own private key to decrypt the encrypted data to obtain the boarding authentication information;

The saving subunit is used to save the boarding authentication information, and update the information of the passenger to the list of authorized tourists.

The above-mentioned device, optionally, also includes:

The second obtaining subunit is used to obtain the historical authorization list of the passenger;

A judging subunit, configured to judge whether there is an airport that has been deauthorized based on each of the authorized airports and the historical authorization list;

The deletion subunit is configured to send an information deletion request to the deauthorization airport when it is determined that there is an airport deauthorization, so that the deauthorization airport deletes the passenger's information based on the information deletion request.

A storage medium, the storage medium includes stored instructions, wherein when the instructions are run, the device where the storage medium is located is controlled to execute the information sharing method as described above.

An electronic device includes a memory and one or more instructions, wherein the one or more instructions are stored in the memory and are configured to be executed by one or more processors as described above in the information sharing method.

Compared with background technology, the present invention has the following advantages:

In the information sharing method and device, storage medium and electronic equipment provided by the present invention, an information sharing request sent by a passenger is received, and based on the information sharing request, each candidate airport is determined; and the authorized airport selected by the passenger among each candidate airport is determined; Collect the passenger's boarding authentication information, and use the public key of the authorized airport to encrypt the boarding authentication information to obtain encrypted data; generate a digital signature of the boarding authentication information, and add the digital signature to the encrypted data to obtain shared data; Upload the shared data to the preset blockchain, and send a consensus request to the authorized airport; trigger the authorized airport to obtain the shared data in the blockchain based on the consensus request, and perform signature verification on the shared data. When the shared data passes the signature verification , save the boarding authentication information in the shared data and update the list of authorized tourists. After signing and encrypting the passenger's boarding authentication information, upload it to the blockchain, and send a consensus request to the corresponding authorized airport, so that the authorized airport can obtain the passenger's boarding authentication information from the blockchain and complete the information sharing , so that passengers can directly use OneID service at each authorized airport, provide passengers with high-quality services, improve the passenger experience, and the whole process of information sharing ensures the safe transmission of information and prevents information from being tampered with.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can also obtain other drawings according to the provided drawings without creative work.

Fig. 1 is a method flowchart of an information sharing method provided by an embodiment of the present invention;

FIG. 2 is a flowchart of a method for determining each candidate airport based on an information sharing request provided by an embodiment of the present invention;

3 is a flow chart of a method for saving boarding authentication information in shared data and updating a list of authorized tourists provided by an embodiment of the present invention;

FIG. 4 is a flowchart of a method for canceling information sharing provided by an embodiment of the present invention;

FIG. 5 is an example diagram of an information sharing scenario provided by an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of an information sharing device provided by an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of an electronic device provided by an embodiment of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

In this application, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes none. other elements specifically listed, or also include elements inherent in such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

The invention is applicable to numerous general purpose or special purpose computing device environments or configurations. For example: personal computer, server computer, handheld or portable device, tablet type device, multiprocessor device, distributed computing environment including any of the above devices or devices, etc. The present invention can be applied to the system of the airport, and the execution body can be the processor of the system.

Referring to Fig. 1, it is a method flowchart of an information sharing method provided by an embodiment of the present invention, and the specific description is as follows:

S101. Receive an information sharing request sent by a passenger, and determine each candidate airport based on the information sharing request.

The system of the airport where the passenger is currently located receives the information sharing request sent by the passenger. Preferably, the passenger can use a mobile terminal to connect to the airport system, and then send an information sharing request to the system, or send an information sharing request to the system through the airport's APP .

Furthermore, the passenger may be a passenger who has already registered for OneID service at the airport, a passenger who has newly registered for OneID service, or a passenger who has registered for OneID service for a period of time.

The information sharing request is used to trigger the processing system to provide information sharing services for passengers, so that passengers can choose the airport for information sharing, and then share the information required for boarding among these airports, so that OneID service can be used between various airports, and then realize Passengers use the OneID service to check in during the period from entering the departure airport to departure from the destination airport.

Referring to Fig. 2, it is a flow chart of the method for determining each candidate airport based on the information sharing request provided by the embodiment of the present invention, and the specific description is as follows:

S201. Analyze the preset airport data sharing agreement, and acquire the signing information in the airport data sharing agreement.

The airport data sharing agreement is a pre-saved agreement, which is an agreement signed by the airport and other airports that share data and saved. Further, the airports that have signed this agreement will save the agreement.

For example, it is determined that information sharing can be carried out between airport A, airport B, and airport C, then airport A, airport B, and airport C sign a data sharing agreement, and the signed data sharing agreement includes the airport information of airport A, airport B, and airport C , as well as the content of the agreement that each airport needs to abide by, the specific data that can be shared, etc.

Analyze the airport data sharing agreement, and obtain the signing information in the airport data sharing agreement.

S202. Based on the signing information, determine each participating airport that has signed the airport data sharing agreement.

The signing information includes the information of each airport participating in the signing of the airport data sharing agreement, such as the name of the airport, the representative of the signing airport, and the airport logo.

Each airport in the signing information is determined as a participating airport, and the participating airport here can be understood as the airport that signed the airport data sharing agreement.

S203. Determine each participating airport as a candidate airport.

It should be noted that the airport to be selected is an airport where passengers can choose to share data, that is, the airport is authorized to obtain personal information of passengers, so that passengers can use the airport's OneID service to support various identity verification services at the airport.

S102. Determine the authorized airport selected by the passenger among each candidate airport.

Further, a list of airports to be selected is generated based on each airport to be selected, and the list of airports to be selected includes information such as the airport name and the airport identification number of each airport to be selected; the list of airports to be selected is displayed to passengers, so that passengers can Need to select the airport, preferably, the passenger can select the airport according to the current travel itinerary. The airport selection information input by the passenger is acquired, and the airport selection information includes at least one selection identifier; for each selection identifier, the airport to which the airport identifier identical to the selection identifier belongs is determined as an authorized airport.

Optionally, after each authorized airport is determined, the airport's system generates an authorization agreement based on each authorized airport. The content of passenger information used by each authorized airport, as well as the rules and precautions that passengers and each authorized airport need to abide by. Preferably, the passenger needs to sign the authorization agreement with each authorized airport.

The number of authorized airports is at least one, and the process of sharing information for each authorized airport is the same.

S103. Collect the passenger's boarding authentication information, and use the public key of the authorized airport to encrypt the boarding authentication information to obtain encrypted data.

Boarding authentication information includes but is not limited to passengers' biometric information, basic information, and authorization information. Further, biometric information can be collected using a biometric system. Biometric information includes but is not limited to passengers' face pictures, irises, and fingerprints. , voice information, etc. Preferably, in order to improve the accuracy of subsequent authentication, the face picture can be the picture collected this time.

Basic information includes, but is not limited to, the passenger's name, gender, date of birth, flight information for travel itinerary, etc.

Authorization information includes, but is not limited to, the above-mentioned authorization agreement and information on each authorized airport, such as the airport name and airport identification of each authorized airport.

It should be noted that each authorized airport has a public-private key pair, and the public key can be released by broadcast or other means. The public key of each authorized airport is different. For each authorized airport, the public key of the authorized airport is used to encrypt the boarding authentication information to obtain the encrypted data corresponding to the authorized airport.

S104. Generate a digital signature of the boarding authentication information, and add the digital signature to the encrypted data to obtain shared data.

Determine the private key of the airport where the passenger is, and use the private key to sign the boarding authentication information to obtain a digital signature; preferably, the airport where the passenger is is the airport of the current system.

Preferably, the summary information of the boarding authentication information is signed using the private key of the airport where the passenger is located to obtain a digital signature; the private key can also be used to sign all the contents of the boarding authentication information to obtain a digital signature ; It should be noted that the method of generating digital signatures in the present invention is not limited to the methods exemplified in the present invention, and other methods can also be used to generate digital signatures.

After the digital signature is generated, the digital signature and encrypted data can be used as shared data.

S105. Upload the shared data to a preset blockchain, and send a consensus request to the authorized airport.

Uploading the shared data to the blockchain can prevent criminals from tampering with the shared data, and the shared data is encrypted data, which can avoid the situation that the shared data is called, improve the security of data sharing between airports, and ensure that the data is shared when it is shared. reliability.

A consensus request is sent to each authorized airport. Preferably, the authorized airport in the present invention may include the airport where the passenger is currently located, or may not include the airport where the passenger is currently located.

Consensus requests are used to trigger authorized airports to obtain information shared by passengers. Preferably, the consensus request includes the identification code of the shared data uploaded to the block chain.

S106. Trigger the authorized airport to obtain the shared data in the blockchain based on the consensus request, and perform signature verification on the shared data. When the shared data passes the signature verification, save the boarding authentication information in the shared data and update the list of authorized tourists.

It should be noted that each authorized airport must implement the step S106.

Authorize the airport to obtain the shared data in the blockchain according to the identification code in the consensus request. Using the identification code can accurately obtain the shared data and avoid obtaining wrong data.

Authorize the airport to determine the system that uploads the shared data, and use the public key of the airport to which the system belongs to sign and authenticate the shared data, thereby verifying the identity of the system that uploaded the shared data, effectively preventing criminals from posing as the system to upload data, and improving Security of the data sharing environment.

When the shared data passes the signature verification, it proves that the system uploading the shared data is a trusted system, and the shared data is safe data; when the shared data fails the signature verification, it means that the system uploading the shared data is a fake system, The shared data is risk data. At this time, no operations should be performed on the shared data, and an alarm can be issued, so that risk investigators can process it to ensure the security of data sharing.

Referring to Fig. 3, it is a flow chart of a method for saving and updating the authorized tourist list in the boarding authentication information in the shared data provided by the embodiment of the present invention, and the specific description is as follows:

S301. Authorize the airport to obtain encrypted data in the shared data, and use its own private key to decrypt the encrypted data to obtain boarding authentication information.

S302. Save the boarding authentication information, and update the passenger information to the list of authorized tourists.

It should be noted that the authorized passenger list stores the information of passengers who use their own information at the authorized airport, such as the passenger's name, ID number and gender. Exemplarily, assuming that there are passenger 1, passenger 2, passenger 3 and airport A, passenger 1 and passenger 2 use their own information at authorized airport A, then the authorized passenger list of airport A contains the information of passenger 1 and the information of passenger 2 .

When storing boarding authentication information, the structured storage is responsible for storing the basic data and authorization information of passengers; the unstructured storage is responsible for storing the biometric information of passengers, such as face pictures.

Preferably, the authorized airport completes information sharing after saving the boarding authentication information and updating the list of authorized tourists; thus, after arriving at the authorized airport, passengers can use the OneID service of the authorized airport without registering or uploading information. Various services in the airport that require identity authentication; Realize that passengers use the OneID service to realize various identity authentication services in the airport from entering the departure airport to leaving the destination airport, so that passengers do not need to verify their identities at the airport. Searching for ID cards and other documents shortens the time for passengers to verify their identity during check-in and luggage storage, provides passengers with better services, and improves passengers' experience at the airport.

In the method provided by the embodiment of the present invention, the information sharing request sent by the passenger is received, and based on the information sharing request, each candidate airport is determined; the authorized airport selected by the passenger in each candidate airport is determined; the boarding authentication information of the passenger is collected, And use the public key of the authorized airport to encrypt the boarding authentication information to obtain encrypted data; generate a digital signature of the boarding authentication information, and add the digital signature to the encrypted data to obtain shared data; upload the shared data to the preset Blockchain, and send a consensus request to the authorized airport; trigger the authorized airport to obtain the shared data in the blockchain based on the consensus request, and perform signature verification on the shared data. When the shared data passes the signature verification, the boarding in the shared data will be Authentication information is saved and the list of authorized visitors is updated. The invention encrypts the boarding authentication information that needs to be shared to obtain encrypted data, and adds a digital signature to the encrypted data to obtain shared data, uploads the shared data to the block chain, and triggers the authorized airport selected by the passenger to transfer from the block chain Obtain the shared data in the airport and save it when the shared data is verified, and then complete the sharing of information; by sharing passenger data between various airports, passengers do not need to register and enter the required authentication information when arriving at a new airport. Information, you can use the airport's OneID service to realize the cross-airport OneID service, so as to provide passengers with better services, and in the process of data sharing, through the use of blockchain technology, encryption technology and signature technology, the shared Data has the characteristics of unforgeable, non-fictional, and non-tamperable, and also builds a credible and safe sharing environment.

Preferably, in the process of information sharing, it is also possible to receive sharing requests sent by passengers in batches, and then share the passenger information with the airport in batches. For example, passenger 1 and passenger 2 both choose airport B as the authorized airport, then The public key of airport B can be used to encrypt the boarding authentication information of passenger 1 and the boarding authentication information of passenger 2 to obtain encrypted data, upload the encrypted data to the blockchain and send a consensus corresponding to the encrypted data to airport B Request, the encrypted data here contains the boarding authentication information of passenger 1 and the boarding authentication information of passenger 2. Preferably, the public key of airport B can also be used to encrypt the boarding authentication information of passenger 1 and passenger 2 respectively, and then the encrypted data 1 corresponding to passenger 1 and the encrypted data 2 corresponding to passenger 2 are obtained, and then the two After the encrypted data is uploaded to the blockchain, a consensus request corresponding to encrypted data 1 and a consensus request corresponding to encrypted data 2 are sent to airport B.

Referring to FIG. 4, it is a flowchart of a method for canceling information sharing provided by an embodiment of the present invention, and the specific description is as follows:

S401. Obtain the historical authorization list of the passenger.

The historical authorization list is the airport authorization list generated when the passenger requested information sharing last time. When the historical authorization list is not empty, the historical authorization list contains at least one historical authorized airport. It should be noted that when the passenger requests information sharing for the first time, Historical authorization list is empty.

S402. Based on each authorized airport and the historical authorization list, judge whether there is an airport that has been deauthorized; when it is determined that there is an airport that has been deauthorized, perform S403; when it is determined that there is no airport that has been deauthorized, perform S404.

For each historical authorized airport in the historical authorization list, determine whether the historical authorized airport exists in each authorized airport, if it exists, then determine that the historical authorized airport is not an airport for deauthorization, if not, then determine the historical authorized airport for the canceled airport.

S403. Send an information deletion request to the deauthorized airport, so that the deauthorized airport deletes the passenger's information based on the information deletion request.

S404, end.

It should be noted that the airport that canceled the authorization deleted all the information about the passenger in the local area based on the information deletion request. So far, there is no information about the passenger in the airport, and the passenger cannot use the OneID service in the airport.

Preferably, the airport to be deauthorized can also be selected by the passenger. For example, airport A is initially the airport that was authorized to use information by the passenger last time, but when the information is shared this time, the passenger sets airport A as the airport to be deauthorized.

By deleting the passenger's information at the airport where the authorization is cancelled, the leakage of the passenger's information can be avoided and the safety of the passenger's personal information can be ensured.

Referring to FIG. 5 , it is an example diagram of an information sharing scenario provided by an embodiment of the present invention, and the specific description is as follows.

The figure includes system A of the airport where the passenger is, system B of the authorized airport selected by the passenger, and other systems. Further, other systems include a biometric information collection system, a passenger data supply system, and a OneID service provision system; When system A sends an information sharing request, system A calls the biometric information collection system to collect the passenger's biometric information, and calls the passenger data supply system to collect the passenger's basic information, and determines the generated identification information and basic information as the passenger's boarding authentication information Passengers determine each authorized airport through the authorization information management system in system A, and encrypt and sign the boarding authentication information to obtain encrypted data, upload the encrypted data to the blockchain, and send a formula request to each authorized airport ; Preferably, if the airport A is the authorized airport selected by the passenger, then the system A can save the boarding authentication information.

After the system B of the authorized airport receives the consensus request, it obtains the encrypted data from the blockchain based on the consensus request, performs signature authentication and decryption on the encrypted data, obtains the boarding authentication information, and saves the boarding authentication information. Thus, airport A and airport B share passenger information, and passengers can enjoy the OneID service provided by the OneID service provision system at airport A and airport B.

Preferably, when the airport system in the present invention saves the boarding authentication information, the saving methods include structured storage, unstructured storage and cache. Structured storage is responsible for saving passenger data and authorization information; unstructured storage is responsible for saving picture information; cache is responsible for loading data from the database into memory in advance to improve access speed.

Further, when the system saves the boarding authentication information, if there is no information about the passenger in the local storage, the passenger's information will be updated to the local storage; if the registered passenger modifies the authorization information and the airport is still in the authorization list, Then update the passenger authorization information. Preferably, if the passenger cancels the authorization to the airport, the deauthorized airport needs to delete the corresponding passenger information from the local storage; preferably, the data in the local storage is used to provide OneID service at the airport.

The present invention also provides specific scene examples for illustration. Assume that there are three passengers: Passenger 1, Passenger 2, and Passenger 3. All three passengers depart from the airport of origin A and take flight Z to destination B airport. Airport A and Airport B have reached a data sharing agreement. Passenger 1 has not performed face registration; Passenger 2 and Passenger 3 have registered face information at Airport A, Passenger 2 has authorized Airport A to use his biometric information, and Passenger 3 has authorized Airport A and Airport B to use his biometric information at the same time. identifying information.

Step 1. Data collection.

The data collection is performed by the system of the airport where the passenger is located, that is, the system of Airport A. The specific process of data collection is as follows:

Step 1.1, obtain passenger data. Passenger 1, passenger 2, and passenger 3 basic passenger information are obtained through the passenger data supply system.

Step 1.2, obtaining biometric information. Obtain the face pictures of Passenger 1, Passenger 2, and Passenger 3 through the biometric information collection system.

Step 2, authorization information management.

Authorization information management is to obtain the authorization information provided by the passenger. The authorization information provided by the passenger can be the information of the authorized airport and the information of the canceled airport. Execute, as follows:

Step 2.1. Check the data sharing agreement between airports.

Airport A checks the existing data sharing agreement between airports and confirms that it can share passenger biometric information with airport B.

Step 2.2, updating the passenger's authorization information.

Passenger 1 performs the face registration operation. Airport A feeds back the list of authorized airports to passenger 1. The list of authorized airports includes airports A and B. Passenger 1 authorizes both airports A and B to use his biometric information at the same time; passenger 2 passes the value The aircraft system adds authorization to use biometric information for airport B; Passenger 3 cancels the authorization for airport B to use his biometric information through the mobile APP.

So far, the information of the airports that passenger 1, passenger 2, and passenger 3 have selected to be authorized and the airports that have been canceled is obtained.

Step 3. Check the passenger authorization information and add a digital signature.

Passenger 1 and Passenger 2 authorized Airport B to use biometric information, and Passenger 3 canceled the authorization of Airport B to use biometric information, so the public key of Airport B was used to encrypt the basic information, face pictures, and authorization information of the three passengers . Airport A uses a specific hash function to generate a summary of passenger basic information, face pictures, and authorization information, and encrypts the summary with airport A's private key to generate a digital signature.

Step 4. Upload data to the blockchain.

Airport A uploads the encrypted information with digital signature to the blockchain and initiates a consensus request to Airport B.

Step 5, data storage.

Update the information of the newly registered passenger 1 to the local storage. Passenger 2 and passenger 3 modify the authorization and airport A is still in the authorization list, then update the authorization information of passenger 2 and passenger 3 in the local storage. Passenger 1, Passenger 2, and Passenger 3 can enjoy OneID services in check-in, baggage check-in, security check, boarding, and smart flight display at Airport A.

Step 6. Verify the shared data and process it.

After receiving the consensus request, Airport B uses the private key of Airport B to decrypt the basic passenger information, face pictures, and authorization information of Passenger 1, Passenger 2, and Passenger 3; uses the public key of Airport A to analyze the digital signature to obtain the summary generated by Airport A , and use the same hash function as that of airport A to process passenger basic information, face pictures, and authorization information to generate a summary. After checking, the summaries generated by Airport A and Airport B are consistent, indicating that the uploader of the shared information is indeed Airport A and the information has not been tampered with. Airport B and Airport A have reached a consensus to complete the data reception. The system of Airport B executes step 7. content.

Step 7, data storage.

There is no information about passenger 1 and passenger 2 in the local storage of airport B, and the information of the two passengers is updated to the local storage. Passenger 3 revokes Airport B's authorization to use his biometric information, so Airport B deletes Passenger 3's information from local storage.

It should be noted that Passenger 1 and Passenger 2 can still enjoy the OneID service after arriving at Airport B; Passenger 3 has canceled the authorization of Airport B to use his biometric information, so he cannot enjoy OneID service after arriving at Airport B.

The present invention utilizes the asymmetric encryption technology of the block chain and the characteristics that information cannot be forged and tampered with to transmit sensitive information such as passenger biometric identification and authorization information. At the same time, the management process of passenger biometric information authorization has been optimized. Passengers can dynamically modify the scope of authorization, and airports can share passenger biometric and authorization information in real time according to changes in passenger authorization information. After the implementation of this technical solution, it can provide a completely credible data transmission environment between airports, effectively solve the problem that data between airports cannot be trusted, and at the same time allow passengers to authorize cross-airport biometric information, so that passengers can register through one time Enjoy OneID service at multiple airports.

Furthermore, the present invention also allows passengers to change the authorization status of biometric information in real time, and judge which airports need to update the change information in real time according to the authorization list, and encrypt the information with the corresponding private key and transmit it. As a result, passenger change information can be synchronized to all nodes that need to participate in data change in real time, so that there is no time delay in information synchronization.

Corresponding to the method shown in FIG. 1 , the present invention also provides an information sharing device, which is used to support the specific realization of the method shown in FIG. 1 , and the device can be applied to a processing system of an airport.

Referring to FIG. 6, it is a schematic structural diagram of an information sharing device provided by an embodiment of the present invention, and the specific description is as follows:

The receiving unit 501 is configured to receive an information sharing request sent by a passenger, and determine each candidate airport based on the information sharing request;

A determining unit 502, configured to determine the authorized airport selected by the passenger among each of the candidate airports;

The collection unit 503 is configured to collect the boarding authentication information of the passenger, and use the public key of the authorized airport to encrypt the boarding authentication information to obtain encrypted data;

A generating unit 504, configured to generate a digital signature of the boarding authentication information, and add the digital signature to the encrypted data to obtain shared data;

A sending unit 505, configured to upload the shared data to a preset blockchain, and send a consensus request to the authorized airport;

A triggering unit 506, configured to trigger the authorized airport to obtain the shared data in the block chain based on the consensus request, and perform signature verification on the shared data, and when the shared data passes the signature verification, the The boarding authentication information in the shared data saves and updates the list of authorized tourists.

In another device provided by an embodiment of the present invention, the receiving unit 501 of the device includes:

The first acquisition subunit is configured to analyze the preset airport data sharing agreement, and acquire the signing information in the airport data sharing agreement;

The first determination subunit is configured to determine each participating airport that has signed the airport data sharing agreement based on the contract information;

The second determination subunit is configured to determine each of the participating airports as candidate airports.

In another device provided by an embodiment of the present invention, the generating unit 504 of the device includes:

The third determining subunit is configured to determine the private key of the airport where the passenger is located, and use the private key to sign the boarding authentication information to obtain a digital signature.

In another device provided by an embodiment of the present invention, the trigger unit 506 of the device includes:

Calling a subunit, used for the authorized airport to obtain the encrypted data in the shared data, and call its own private key to decrypt the encrypted data to obtain the boarding authentication information;

The saving subunit is used to save the boarding authentication information, and update the information of the passenger to the list of authorized tourists.

In another device provided by an embodiment of the present invention, the device further includes:

The second obtaining subunit is used to obtain the historical authorization list of the passenger;

A judging subunit, configured to judge whether there is an airport that has been deauthorized based on each of the authorized airports and the historical authorization list;

The deletion subunit is configured to send an information deletion request to the deauthorization airport when it is determined that there is an airport deauthorization, so that the deauthorization airport deletes the passenger's information based on the information deletion request.

An embodiment of the present invention also provides a storage medium, where the storage medium includes stored instructions, wherein when the instructions are run, the device where the storage medium is located is controlled to execute the above information sharing method.

The embodiment of the present invention also provides an electronic device, the structural diagram of which is shown in FIG. It is configured to be executed by one or more processors 603 to execute the one or more instructions 602 to implement the above information sharing method.

The specific implementation process of each of the above embodiments and its derivation methods are within the protection scope of the present invention.

Each embodiment in this specification is described in a progressive manner, the same and similar parts of each embodiment can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system or the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment. The systems and system embodiments described above are only illustrative, and the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is It can be located in one place, or it can be distributed to multiple network elements. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. It can be understood and implemented by those skilled in the art without creative effort.

Professionals can further realize that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software or a combination of the two. In order to clearly illustrate the possible For interchangeability, in the above description, the composition and steps of each example have been generally described according to their functions. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

The above description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the present invention will not be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (10)

1. An information sharing method, comprising:

receiving an information sharing request sent by a passenger, and determining each airport to be selected based on the information sharing request;

determining authorized airports selected by the passenger from the selected airports;

collecting boarding authentication information of the passenger, and encrypting the boarding authentication information by using a public key of the authorized airport to obtain encrypted data;

generating a digital signature of the boarding authentication information, and adding the digital signature into the encrypted data to obtain shared data;

uploading the shared data to a preset blockchain and sending a consensus request to the authorized airport;

triggering the authorized airport to acquire the shared data from the blockchain based on the consensus request, carrying out signature verification on the shared data, and storing boarding authentication information in the shared data and updating an authorized tourist list when the shared data passes the signature verification.

2. The method of claim 1, wherein the determining each candidate airport based on the information sharing request comprises:

analyzing a preset airport data sharing protocol to obtain subscription information in the airport data sharing protocol;

Determining each airport participating in signing the airport data sharing agreement based on the subscription information;

and determining each participating airport as a candidate airport.

3. The method of claim 1, wherein the generating the digital signature of the boarding authentication information comprises:

and determining a private key of an airport where the passenger is located, and carrying out signature processing on the boarding authentication information by using the private key to obtain a digital signature.

4. The method of claim 1, wherein the saving and updating boarding authentication information in the shared data includes:

the authorized airport obtains encrypted data in the shared data, and calls a private key of the authorized airport to decrypt the encrypted data to obtain boarding authentication information;

and storing the boarding authentication information, and updating the information of the passenger into the authorized tourist list.

5. The method of claim 1, further comprising, after determining authorized airports selected by the passenger among the respective candidate airports:

acquiring a history authorization list of the passenger;

judging whether an authorized airport exists or not based on each authorized airport and the historical authorized list;

When it is determined that there is a cancel authorized airport, an information deletion request is sent to the cancel authorized airport, so that the cancel authorized airport deletes the information of the traveler based on the information deletion request.

6. An information sharing apparatus, comprising:

the receiving unit is used for receiving information sharing requests sent by passengers and determining various airports to be selected based on the information sharing requests;

a determining unit configured to determine authorized airports selected by the passenger among the respective airports to be selected;

the collecting unit is used for collecting boarding authentication information of the passenger, encrypting the boarding authentication information by using a public key of the authorized airport, and obtaining encrypted data;

the generation unit is used for generating a digital signature of the boarding authentication information and adding the digital signature into the encrypted data to obtain shared data;

the sending unit is used for uploading the shared data to a preset block chain and sending a consensus request to the authorized airport;

the triggering unit is used for triggering the authorized airport to acquire the shared data from the blockchain based on the consensus request, carrying out signature verification on the shared data, and storing boarding authentication information in the shared data and updating an authorized tourist list when the shared data passes the signature verification.

7. The apparatus of claim 6, wherein the receiving unit comprises:

the first acquisition subunit is used for analyzing a preset airport data sharing protocol and acquiring subscription information in the airport data sharing protocol;

a first determining subunit, configured to determine, based on the subscription information, each airport participating in the airport data sharing protocol;

and the second determining subunit is used for determining each participating airport as an airport to be selected.

8. The apparatus of claim 6, wherein the generating unit comprises:

and the third determining subunit is used for determining a private key of the airport where the passenger is located, and carrying out signature processing on the boarding authentication information by using the private key to obtain a digital signature.

9. A storage medium comprising stored instructions, wherein the instructions, when executed, control a device in which the storage medium is located to perform the information sharing method of any one of claims 1-5.

10. An electronic device comprising a memory and one or more instructions, wherein the one or more instructions are stored in the memory and configured to perform the information sharing method of any of claims 1-5 by one or more processors.

Images