WO2020034527A1 - 用户个人信息加密授权方法、装置、设备及可读存储介质 - Google Patents
用户个人信息加密授权方法、装置、设备及可读存储介质 Download PDFInfo
- Publication number
- WO2020034527A1 WO2020034527A1 PCT/CN2018/122636 CN2018122636W WO2020034527A1 WO 2020034527 A1 WO2020034527 A1 WO 2020034527A1 CN 2018122636 W CN2018122636 W CN 2018122636W WO 2020034527 A1 WO2020034527 A1 WO 2020034527A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- user
- personal information
- information
- authorized
- added value
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
Definitions
- the present application relates to the technical field of the Internet, and in particular, to a method, device, device, and readable storage medium for user personal information encryption authorization.
- APP Application Program
- users to use when users use the APP, they need to register the corresponding account and upload the user's personal information, such as ID card, mobile phone number and resident address, etc.
- users For financial loan apps, they also need to Upload more important user personal information such as bank card number, education, company name, company position, industry, age and marital status.
- the uploaded user's personal information is stored in the server, and the user itself does not encrypt the personal information, so that the company developing the APP can query the user's personal information in the server. If the company developing the APP abuses the user's personal information, it will easily lead to the user's personal The leakage of information cannot guarantee the security of personal information of users.
- the main purpose of this application is to provide a user personal information encryption and authorization method, device, device, and readable storage medium, which aims to improve the security of user personal information.
- the present application provides a method for encrypting and authorizing a user's personal information.
- the method for encrypting and authorizing a user's personal information includes the following steps:
- the information to be authenticated is authenticated, and after the authentication is passed, the user's personal information is encrypted, and the encrypted user's personal information is stored in the blockchain in;
- the corresponding user personal information in the blockchain is decrypted and screened, and the screened user personal information is encrypted and transmitted to the
- the institution authorization request corresponds to a corresponding institution terminal.
- the present application also provides a user personal information encryption authorization device, and the user personal information encryption authorization device includes:
- a receiving determining module configured to receive user personal information uploaded by a user terminal, and determine whether there is information to be authenticated in the user personal information
- An authentication and encryption module is configured to authenticate the information to be authenticated if the user's personal information exists, and to encrypt the user's personal information after the authentication is passed, and to encrypt the encrypted user's personal information.
- Information is stored in the blockchain;
- An information authorization module is used for decrypting and filtering the corresponding user personal information in the blockchain according to the organization authorization request received by the user authorization request sent by the user terminal, and filtering the filtered user personal information After being encrypted, it is transmitted to the institution terminal corresponding to the institution authorization request.
- the present application also provides a user personal information encryption authorization device, where the user personal information encryption authorization device includes a processor, a memory, and a processor stored in the memory and executable by the processor.
- the user personal information encryption authorization readable instruction wherein when the user personal information encryption authorization readable instruction is executed by the processor, the steps of the user personal information encryption authorization method as described above are implemented.
- the present application also provides a readable storage medium storing user personal information encryption authorization readable instructions, wherein the user personal information encryption authorization readable instructions are processed by a processor When executed, the steps of the method for encrypting and authorizing a user's personal information are realized.
- This application provides a user personal information encryption and authorization method, device, device, and readable storage medium.
- This application authenticates the user's personal information, encrypts the authenticated user's personal information, and stores it in the blockchain after receiving it.
- the agency authorization request is received, the corresponding user personal information stored in the blockchain is decrypted and screened, and the filtered user personal information is encrypted and transmitted to the corresponding agency terminal. Since the user personal information is authenticated, it is valid Guarantee the accuracy of the user's personal information, and store the user's personal information encrypted in the blockchain, which can prevent others from tampering with the user's personal information.
- the owner of the user's personal information needs to be authorized by the organization. Only institutions can query, which effectively improves the security of users' personal information.
- FIG. 2 is a schematic flowchart of a first embodiment of a method for encrypting and authorizing personal information of a user of this application;
- FIG. 3 is a schematic flowchart of a second embodiment of a method for encrypting and authorizing personal information of a user of this application;
- FIG. 4 is a functional module schematic diagram of a first embodiment of an apparatus for encrypting and authorizing personal information of a user of the present application.
- the method for encrypting and authorizing personal information of a user involved in the embodiment of the present application is mainly applied to a device for encrypting and authorizing personal information of a user, and the device for encrypting and authorizing personal information of a user may be a PC (personal computer personal computer), portable computers, mobile terminals and other devices with display and processing functions.
- PC personal computer personal computer
- FIG. 1 is a schematic diagram of a hardware structure of a user personal information encryption and authorization device involved in a solution according to an embodiment of the present application.
- the user personal information encryption and authorization device may include a processor 1001 (for example, a central processor Central Processing Unit, CPU), communication bus 1002, user interface 1003, network interface 1004, and memory 1005.
- the communication bus 1002 is used to implement connection and communication between these components.
- the user interface 1003 may include a display and an input unit such as a keyboard.
- the network interface 1004 may optionally include a standard wired interface and a wireless interface.
- the memory 1005 can be a high-speed RAM memory or a stable memory (non-volatile memory), such as a disk memory, the memory 1005 may optionally be a storage device independent of the foregoing processor 1001.
- the hardware structure shown in FIG. 1 does not constitute a limitation on the present application, and may include more or fewer components than shown in the figure, or combine some components, or arrange different components.
- the memory 1005 as a readable storage medium in FIG. 1 may include an operating system, a network communication module, and a user's personal information encryption authorization readable instruction.
- the network communication module is mainly used to connect to the server and perform data communication with the server; and the processor 1001 may call the user personal information stored in the memory 1005 to encrypt and authorize the readable instructions, and execute the user personal provided in the embodiment of this application Information encryption authorization method.
- the embodiment of the present application provides a method for encrypting and authorizing a user's personal information.
- FIG. 2 is a schematic flowchart of a first embodiment of a method for encrypting and authorizing personal information of a user of this application.
- the user personal information encryption authorization method is implemented by a user personal information encryption authorization device.
- the user personal information encryption authorization device may be a terminal device such as a PC, a handheld computer, and a tablet computer, and may be selected as the device shown in FIG. 1
- the method of encrypting and authorizing the user's personal information includes the following steps:
- Step S101 Receive user personal information uploaded by a user terminal, and determine whether there is information to be authenticated in the user personal information;
- step S102 if there is information to be authenticated in the user's personal information, the information to be authenticated is authenticated, and after the authentication is passed, the user's personal information is encrypted, and the encrypted user's personal information is stored in the blockchain;
- Step S103 When receiving the agency authorization request sent by the user terminal, according to the agency authorization request, the corresponding personal information of the user in the blockchain is decrypted and filtered, and the filtered user personal information is encrypted and transmitted to the agency.
- the organization terminal corresponding to the authorization request When receiving the agency authorization request sent by the user terminal, according to the agency authorization request, the corresponding personal information of the user in the blockchain is decrypted and filtered, and the filtered user personal information is encrypted and transmitted to the agency.
- the organization terminal corresponding to the authorization request is described in the authorization request.
- the user's personal information is stored in the server, and the user itself does not encrypt the personal information, so that the company developing the APP can query the user's personal information in the server. If the company developing the APP abuses the user's personal information, it will easily lead to the leakage of the user's personal information. We cannot guarantee the security of personal information of users.
- a method for encrypting and authorizing a user's personal information is proposed in this embodiment. The specific steps of the method for encrypting and authorizing a user's personal information are detailed below:
- Step S101 Receive user personal information uploaded by a user terminal, and determine whether there is information to be authenticated in the user personal information;
- the user terminal includes, but is not limited to, a PC, a notebook computer, a smartphone, and a tablet computer.
- the personal information of the user includes, but is not limited to, an ID card, a mobile phone number, a contact address, a bank card number, a driver's license, a degree, a company name, Company position, industry, age and marital status.
- a user inputs user personal information through an information input interface of a user terminal. After the user personal information is input, the user terminal uploads the input user personal information to the user personal information encryption and authorization device, and the device receives the user uploaded by the user terminal.
- Personal information and determine whether there is information to be authenticated in the user's personal information, that is, to determine whether the user's personal information needs to be authenticated, if there is information to be authenticated in the user's personal information, the user's personal information needs to be authenticated, otherwise, If there is no information to be authenticated in the user's personal information, the user's personal information does not need to be authenticated.
- the device determines whether at least one information field in the user personal information exists in the preset field group, and if at least one information field exists in the user personal information in the preset field group , It can be determined that there is information to be authenticated in the user's personal information, that is, authentication is required, and the information to be authenticated is specific information corresponding to the at least one information field. If the information fields in the user's personal information are not in the preset field group, then It can be determined that there is no information to be authenticated in the user's personal information, that is, authentication is not required.
- the information fields include, but are not limited to, age, identity card, education, bank card number, driver's license, real estate certificate, mobile phone number, and company name. need. It should be noted that the above-mentioned preset field group can be set by those skilled in the art based on actual conditions, which is not specifically limited in this embodiment.
- step S102 if there is information to be authenticated in the user's personal information, the information to be authenticated is authenticated, and after the authentication is passed, the user's personal information is encrypted, and the encrypted user's personal information is stored in the blockchain;
- the information to be authenticated is authenticated, that is, the authenticity of the user's personal information is verified, where the information to be authenticated is an ID card number and name, a mobile phone number, a bank card number, and a degree One or more of them.
- the authentication interface to which the information to be authenticated belongs is determined, that is, the information field is extracted from the information to be authenticated, the mapping relationship table between the information field and the authentication interface is queried, and the authentication interface corresponding to the information field in the information to be authenticated is determined as the authentication interface.
- the authentication interface to which the authentication information belongs and authenticates the information to be authenticated through the authentication interface to which the authentication information belongs.
- the authentication interface includes, but is not limited to, the Ministry of Public Security interface, the operator interface, the bank interface, and the Xuexin network interface.
- the name and ID number are authenticated through the interface of the Ministry of Public Security
- the mobile phone number is authenticated through the operator interface
- the bank card number is authenticated through each bank interface.
- the academic network interface certification qualifications are included in the authentication interface.
- the ID number and name can be authenticated first, that is, the user first enters the ID information, including the name and ID number, and uploads it to the device, and the device passes the Ministry of Public Security
- the interface authenticates the ID card information, and after the ID card information passes the authentication, prompts the user for face recognition to determine whether the entered ID card information is his own information. After determining that the entered ID card information is his own information, the user is prompted to enter other information.
- User personal information combined with identity information to authenticate other user personal information.
- the device After the authentication is passed, the device encrypts the user's personal information and stores the encrypted user's personal information in the blockchain, that is, the device uses an asymmetric encryption algorithm to generate a pair of users' publickey and private key. (Privatekey), and encrypts the authenticated user's personal information according to the public key, and stores the encrypted user's personal information in the blockchain.
- asymmetric encryption algorithms include, but are not limited to, RSA encryption algorithm, Elgamal algorithm, backpack algorithm, prime test algorithm, DH (Diffie-Hellman) algorithm, and elliptic curve encryption algorithm. It should be noted that the above-mentioned asymmetric encryption algorithm can be used in this field.
- Step S103 When receiving the agency authorization request sent by the user terminal, according to the agency authorization request, the corresponding personal information of the user in the blockchain is decrypted and filtered, and the filtered user personal information is encrypted and transmitted to the agency.
- the organization terminal corresponding to the authorization request When receiving the agency authorization request sent by the user terminal, according to the agency authorization request, the corresponding personal information of the user in the blockchain is decrypted and filtered, and the filtered user personal information is encrypted and transmitted to the agency.
- the organization terminal corresponding to the authorization request is described in the authorization request.
- the information type of the user's personal information to be queried is determined through the organization terminal, that is, the type of information to be queried, and the public private key of the corresponding user to be queried is obtained, and then based on the The public and private key encrypts the type of information to be queried, generates a query authorization request containing the type of information to be queried, and sends the query authorization request to the user terminal.
- institutional terminals include, but are not limited to, PCs, laptops, smartphones, and tablets.
- Information types include ID cards, mobile phone numbers, contact addresses, bank card numbers, academic qualifications, company names, company titles, industry, age, and marital status. Information type.
- the user terminal receives the query authorization request sent by the organization terminal, and decrypts the type of the information to be queried in the query authorization request according to the private key of the machine, and then displays the authorization including the type of the information to be queried, the consent authorization control, and the denial authorization control.
- Interface if the user clicks the Deny Authorization Control, the query authorization process ends and the corresponding information is returned to the agency terminal; if the user clicks the Authorization Authorization Control, a message containing the authorization information type and agency key information (the agency's public key) is generated ), User authorization information, user key information (user's private key), and organization terminal identification code for the organization authorization request, and send the organization authorization request to the device.
- the device When the device receives the organization authorization request sent by the user terminal, it decrypts and filters the corresponding user's personal information in the blockchain according to the organization authorization request. Specifically, the device reads the authorization information type and user identity from the organization authorization request. Identification code and user key information, and read the user's personal information corresponding to the user identification code from the blockchain, and then decrypt the user's personal information according to the user key information, that is, the user's private key According to the type of authorization information, the authorized user personal information is filtered from the decrypted user personal information, and finally the filtered user personal information, that is, the authorized user personal information, is encrypted and transmitted to the corresponding authority authorization request.
- Institutional terminal which reads the organization terminal identification code and the organization key information from the authorization request of the organization, and encrypts the filtered user personal information, that is, the authorized user's personal information, according to the organization key information, that is, the organization's public key. And transmit the encrypted personal information of authorized users to the organization terminal corresponding to the organization terminal identification code .
- the organization terminal receives the personal information of the authorized user sent by the device, and decrypts the personal information of the authorized user according to the organization's private key.
- the personal information of the authorized user has a valid duration, and the personal information of the authorized user is automatically deleted when the storage time of the personal information of the authorized user exceeds the valid duration.
- the present application authenticates the user's personal information and encrypts the authenticated user's personal information and stores it in the blockchain.
- the corresponding user stored in the blockchain is Decrypt and screen personal information, and encrypt the screened personal information of the user and transfer it to the corresponding agency terminal. Since the user's personal information is authenticated, the accuracy of the user's personal information is effectively guaranteed, and the user's personal information is stored after being encrypted.
- the blockchain it is possible to prevent others from tampering with the user's personal information, and when the organization needs to query the user's personal information, the owner of the user's personal information must be authorized by the organization before the organization can query, which effectively improves the security of the user's personal information.
- step S103 a second embodiment of a method for encrypting and authorizing personal information of a user of the present application is proposed.
- the difference from the foregoing embodiment is that after step S103, the method further includes:
- Step S104 Count the number of authorized organizations of the user's personal information, and determine the credit added value of the user's personal information according to the number of authorized organizations;
- the device when the device receives the organization authorization request sent by the user terminal, it records the organization terminal identification code in the organization authorization request.
- Each authorized organization has a unique organization terminal identification code, and each time it receives a different organization terminal identification The number of organizations authorized by the code request is increased by one.
- the device regularly counts the number of authorized organizations of the user's personal information, and determines the credit added value of the user's personal information according to the number of authorized organizations, that is, queries the mapping relationship table between the number of pre-stored authorized organizations and the credit added value to obtain the corresponding number of authorized organizations.
- mapping relationship table between the number of authorized institutions and the credit added value can be set by those skilled in the art based on the actual situation, which is not specifically limited in this embodiment.
- Step S105 Determine the credibility level of the user's personal information according to the basic credit value and the credit added value of the user's personal information.
- the device determines the credibility level of the user personal information according to the basic credit value and the credit added value of the user personal information, that is, obtains the basic information value of the user personal information. And use the basic information value plus the credit added value to obtain the total credit value of the user's personal information, then determine the credit value interval in which the total credit value is located, and query the mapping between the pre-stored credit interval and the credibility level Relation table to obtain the credibility level corresponding to the credit interval.
- the higher the level of reliability the higher the degree of credibility of the user's personal information, and the lower the level of reliability, the lower the level of credibility of the user's personal information. It should be noted that the mapping relationship table between the above credit interval and credibility level can be set by a person skilled in the art based on actual conditions, which is not specifically limited in this embodiment.
- this application determines the credibility level of the user's personal information based on the number of authorized organizations of the user's personal information, so that the user and the organization can intuitively know the credibility of the user's personal information.
- a third embodiment of the user personal information encryption authorization method of the present application is proposed.
- the difference from the foregoing embodiment is that after step S104, the user personal information encryption authorization method further includes:
- Step a Count the total authorized times of the user's personal information, and determine whether the credit added value needs to be adjusted according to the total authorized times;
- each time the device receives an organization authorization request that carries a different organization terminal identification code the total number of authorized users' personal information is increased by 1, and the device counts the user's personal information after the user's personal information credit increases.
- the total number of authorizations and determine whether the total number of authorizations exceeds the preset number of authorizations, that is, whether to adjust the credit added value. If the total number of authorizations exceeds the preset number of authorizations, you need to adjust the credit added value. If the number of authorizations does not exceed the preset number of authorizations, the credit added value needs to be adjusted.
- the preset number of authorized times may be set by a person skilled in the art based on actual conditions, which is not specifically limited in this embodiment.
- step b if the total number of authorizations exceeds the preset number of authorizations, the credit added value of the user's personal information is re-determined according to the total number of authorizations and the number of authorized institutions.
- the credit added value of the user's personal information is re-determined based on the total authorized number and the number of authorized institutions, that is, the query between the pre-stored total authorized number and the credit added value is determined.
- the mapping relationship table determines the credit added value corresponding to the total number of authorizations as the first credit added value of the user's personal information, and queries the mapping relationship table between the number of pre-stored authorized institutions and the credit added value, which will be related to the authorization
- the credit added value corresponding to the number of institutions is determined as the second credit added value of the user's personal information, and then the first preset weight coefficient and the second preset weight coefficient are obtained, and the first preset weight coefficient is multiplied by the first credit added value To obtain a first weighted credit added value, and multiply the second credit added value with a second preset weight coefficient to obtain a second weighted credit added value, and finally increase the first weighted credit added value and the second weighted credit added
- the sum of the values is determined as the credit added value of the user's personal information.
- mapping relationship table between the total number of authorized times and the credit added value can be obtained from this A person skilled in the art makes settings based on actual conditions, and this embodiment does not specifically limit this.
- the present application combines the number of authorized institutions and the total number of authorizations to determine the credit added value of the user's personal information, effectively improve the accuracy of the credit added value, and thereby improve the accuracy of the credibility level.
- a fourth embodiment of a method for encrypting and authorizing personal information of a user of the present application is proposed.
- the difference from the foregoing embodiment is that the method for encrypting and authorizing personal information of a user further includes:
- Step c Count the number of authorizations of each authorized institution of the user's personal information, and determine the credit added value of the user's personal information according to the number of authorized times of each authorized institution;
- the device when the device receives the organization authorization request sent by the user terminal, it records the organization terminal identification code in the organization authorization request.
- Each authorized organization has a unique organization terminal identification code.
- Each time it receives an organization authorization request it is The authorized number of authorized users' personal information is increased by 1.
- the device counts the number of authorizations of each authorized institution of the user's personal information, and determines the added value of credit of the user's personal information based on the number of authorized times of each authorized institution.
- the device queries the mapping relationship table between the pre-stored authorization times and credit added value, determines the credit added value of each authorized institution, and then reads the institution type label of each authorized institution, and queries the pre-stored institution type label and weight coefficient.
- the mapping relationship table between them determines the credit added value of each authorized institution of the user's personal information, and then reads the institution type tags of each authorized institution, and queries the mapping relationship table between the pre-stored institution type tags and weight coefficients to determine The weight coefficient of each credit added value.
- each credit added value is multiplied by the corresponding weight coefficient of each credit added value, and the products are accumulated, and the accumulated value is determined as the credit added value of the user's personal information to re-determine the user. Credit added value of personal information.
- institution type labels include, but are not limited to, bank labels and loan companies. It should be noted that the mapping relationship table between the institution type label and the weight coefficient and the mapping relationship table between the institution type label and the weight coefficient can be set by those skilled in the art based on the actual situation, which is not specifically limited in this embodiment. .
- Step d Determine the credibility level of the user's personal information according to the basic credit value and the credit added value of the user's personal information.
- the device determines the credibility level of the user personal information according to the basic credit value and the credit added value of the user personal information, that is, obtains the basic information value of the user personal information. And use the basic information value plus the credit added value to obtain the total credit value of the user's personal information, then determine the credit value interval in which the total credit value is located, and query the mapping between the pre-stored credit interval and the credibility level Relation table to obtain the credibility level corresponding to the credit interval.
- the mapping relationship table between the above credit interval and credibility level can be set by a person skilled in the art based on actual conditions, which is not specifically limited in this embodiment.
- the present application can more accurately determine the credibility level of the user's personal information based on the number of authorizations of each authorized institution of the user's personal information, and it is convenient for users and institutions to intuitively know the credibility of the user's personal information.
- the embodiment of the present application also provides a device for encrypting and authorizing user personal information.
- FIG. 4 is a schematic diagram of functional modules of a first embodiment of a device for encrypting and authorizing personal information of a user of the present application.
- the user personal information encryption authorization device of this application is a virtual device, which is stored in the memory 1005 of the user personal information encryption authorization device shown in FIG. 1 and is used to implement all functions of the user personal information encryption authorization read instruction; the user who receives the upload from the user terminal Personal information, and determine whether there is information to be authenticated in the user's personal information; if there is information to be authenticated in the user's personal information, the information to be authenticated is authenticated, and after the authentication is passed, the user personally The information is encrypted, and the encrypted user personal information is stored in the blockchain; when an institution authorization request is received from the user terminal, the corresponding user personal information in the blockchain is received according to the institution authorization request Decryption and screening are performed, and the filtered user personal information is encrypted and transmitted to the agency terminal corresponding to the agency authorization request.
- the user personal information encryption and authorization device includes:
- the receiving determination module 101 is configured to receive user personal information uploaded by a user terminal, and determine whether there is information to be authenticated in the user personal information;
- the authentication and encryption module 102 is configured to authenticate the information to be authenticated if the user's personal information exists, and to encrypt the personal information of the user after the authentication is passed, and to encrypt the encrypted user.
- Personal information is stored in the blockchain;
- An information authorization module 103 is configured to, when receiving an organization authorization request sent by a user terminal, decrypt and screen the personal information of the corresponding user in the blockchain according to the organization authorization request, and filter the screened individual users.
- the information is encrypted and transmitted to the institution terminal corresponding to the institution authorization request.
- the receiving determining module 101 is further configured to:
- At least one information field in the user personal information exists in a preset field group, it is determined that there is information to be authenticated in the user personal information.
- the information authorization module 103 is further configured to:
- the personal information of the authorized user is filtered from the decrypted personal information of the user.
- the device for encrypting and authorizing personal information of a user further includes:
- a statistical determination module configured to count the number of authorized organizations of the user's personal information, and determine the credit added value of the user's personal information according to the number of authorized organizations
- the credibility determining module is configured to determine a credibility level of the user personal information according to a basic credit value of the user personal information and the credit added value.
- the statistical determination module is further configured to:
- the credit added value of the user's personal information is re-determined based on the total number of authorizations and the number of authorized institutions.
- the statistical determination module is further configured to count the number of authorizations of each authorized institution of the user's personal information, and determine the credit added value of the user's personal information according to the number of authorized times of each authorized institution;
- the credibility determination module is further configured to determine a credibility level of the user personal information according to a basic credit value of the user personal information and the credit added value.
- the statistical determination module is further configured to:
- mapping relationship table between the pre-stored authorization times and the credit added value, and determine the credit added value of each authorized institution of the user personal information
- each product is accumulated, and the accumulated value is determined as the credit added value of the user's personal information.
- each module in the user personal information encryption and authorization device corresponds to each step in the embodiment of the user personal information encryption and authorization method, and the functions and implementation processes thereof are not repeated here one by one.
- an embodiment of the present application further provides a readable storage medium.
- a user personal information encryption authorization readable instruction is stored on the readable storage medium of this application, and when the user personal information encryption authorization readable instruction is executed by a processor, the steps of the user personal information encryption authorization method as described above are implemented.
- the readable storage medium may be a non-volatile computer-readable storage medium.
- the readable storage medium may be a non-volatile computer-readable storage medium.
- the methods in the above embodiments can be implemented by means of software plus a necessary universal hardware platform, and of course, also by hardware, but in many cases the former is better.
- Implementation Based on such an understanding, the technical solution of this application that is essentially or contributes to the existing technology can be embodied in the form of a software product.
- the computer software product is stored in a storage medium (such as ROM / RAM) as described above. , Magnetic disk, optical disc), including a number of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in the embodiments of the present application.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Storage Device Security (AREA)
Abstract
本申请提供一种用户个人信息加密授权方法、装置、设备及可读存储介质，该方法包括：接收用户终端上传的用户个人信息，并确定所述用户个人信息中是否存在待认证信息；若所述用户个人信息中存在待认证信息，则对所述待认证信息进行认证，并在认证通过后，对所述用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；当接收到用户终端发送的机构授权请求时，依据所述机构授权请求，对所述区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端。本申请能够有效的提高用户个人信息的安全性。
Description
本申请要求于2018年8月17日提交中国专利局、申请号为201810941440.5、发明名称为“用户个人信息加密授权方法、装置、设备及可读存储介质”的中国专利申请的优先权，其全部内容通过引用结合在申请中。
技术领域
本申请涉及互联网的技术领域，尤其涉及一种用户个人信息加密授权方法、装置、设备及可读存储介质。
背景技术
随着互联网的快速发展，各行各业都采用互联网技术推广、销售和维护产品，即开发APP（Application
Program，应用程序），供用户使用，用户使用APP时，需要注册相应的账号，并向服务器上传用户的个人信息，如身份证、手机号码和常驻地址等，金融贷款类APP，还需要需要上传如银行卡号、学历、公司名称、公司职位、所属行业、年龄和婚姻状况等较为重要的用户个人信息。
然而，上传的用户个人信息存储在服务器中，用户本身并未对个人信息加密，使得开发APP的公司能够在服务器中查询到用户个人信息，如果开发APP的公司滥用用户个人信息，容易导致用户个人信息的泄露，无法保证用户个人信息的安全性。
因此，如何提高用户个人信息的安全性是目前亟待解决的问题。
发明内容
本申请的主要目的在于提供一种用户个人信息加密授权方法、装置、设备及可读存储介质，旨在提高用户个人信息的安全性。
为实现上述目的，本申请提供一种用户个人信息加密授权方法，所述用户个人信息加密授权方法包括以下步骤：
接收用户终端上传的用户个人信息，并确定所述用户个人信息中是否存在待认证信息；
若所述用户个人信息中存在待认证信息，则对所述待认证信息进行认证，并在认证通过后，对所述用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；
当接收到用户终端发送的机构授权请求时，依据所述机构授权请求，对所述区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端。
此外，为实现上述目的，本申请还提供一种用户个人信息加密授权装置，所述用户个人信息加密授权装置包括：
接收确定模块，用于接收用户终端上传的用户个人信息，并确定所述用户个人信息中是否存在待认证信息；
认证加密模块，用于若所述用户个人信息中存在待认证信息，则对所述待认证信息进行认证，并在认证通过后，对所述用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；
信息授权模块，用于当接收到用户终端发送的机构授权请求时，依据所述机构授权请求，对所述区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端。
此外，为实现上述目的，本申请还提供一种用户个人信息加密授权设备，所述用户个人信息加密授权设备包括处理器、存储器、以及存储在所述存储器上并可被所述处理器执行的用户个人信息加密授权可读指令，其中所述用户个人信息加密授权可读指令被所述处理器执行时，实现如上述的用户个人信息加密授权方法的步骤。
此外，为实现上述目的，本申请还提供一种可读存储介质，所述可读存储介质上存储有用户个人信息加密授权可读指令，其中所述用户个人信息加密授权可读指令被处理器执行时，实现如上述的用户个人信息加密授权方法的步骤。
本申请提供一种用户个人信息加密授权方法、装置、设备及可读存储介质，本申请通过对用户个人信息进行认证，并将通过认证的用户个人信息加密后存储至区块链中，当接收到机构授权请求时，对存储在区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与对应的机构终端，由于用户个人信息经过认证，有效保证用户个人信息的准确性，且用户个人信息经过加密后存储在区块链中，可以防止他人篡改用户个人信息，且机构需要查询用户个人信息时，需要用户个人信息的拥有者授权给机构，机构才能够查询，有效的提高了用户个人信息的安全性。
附图说明
图1为本申请各实施例涉及的用户个人信息加密授权设备的硬件结构示意图；
图2为本申请用户个人信息加密授权方法第一实施例的流程示意图；
图3为本申请用户个人信息加密授权方法第二实施例的流程示意图；
图4为本申请用户个人信息加密授权装置第一实施例的功能模块示意图。
本申请目的的实现、功能特点及优点将结合实施例，参照附图做进一步说明。
具体实施方式
应当理解，此处所描述的具体实施例仅仅用以解释本申请，并不用于限定本申请。
本申请实施例涉及的用户个人信息加密授权方法主要应用于用户个人信息加密授权设备，该用户个人信息加密授权设备可以是PC（个人计算机personal
computer）、便携计算机、移动终端等具有显示和处理功能的设备。
参照图1，图1为本申请实施例方案中涉及的用户个人信息加密授权设备的硬件结构示意图。本申请实施例中，用户个人信息加密授权设备可以包括处理器1001（例如中央处理器Central
Processing
Unit、CPU），通信总线1002，用户接口1003，网络接口1004，存储器1005。其中，通信总线1002用于实现这些组件之间的连接通信；用户接口1003可以包括显示屏（Display）、输入单元比如键盘（Keyboard）；网络接口1004可选的可以包括标准的有线接口、无线接口（如WI-FI接口）；存储器1005可以是高速RAM存储器，也可以是稳定的存储器（non-volatile
memory），例如磁盘存储器，存储器1005可选的还可以是独立于前述处理器1001的存储装置。本领域技术人员可以理解，图1中示出的硬件结构并不构成对本申请的限定，可以包括比图示更多或更少的部件，或者组合某些部件，或者不同的部件布置。
继续参照图1，图1中作为一种可读存储介质的存储器1005可以包括操作系统、网络通信模块以及用户个人信息加密授权可读指令。在图1中，网络通信模块主要用于连接服务器，与服务器进行数据通信；而处理器1001可以调用存储器1005中存储的用户个人信息加密授权可读指令，并执行本申请实施例提供的用户个人信息加密授权方法。
本申请实施例提供了一种用户个人信息加密授权方法。
参照图2，图2为本申请用户个人信息加密授权方法第一实施例的流程示意图。
本实施例中，该用户个人信息加密授权方法由用户个人信息加密授权设备实现，该用户个人信息加密授权设备可以是PC、掌上电脑和平板电脑等终端设备，可选为图1所示的设备，该用户个人信息加密授权方法包括以下步骤：
步骤S101，接收用户终端上传的用户个人信息，并确定用户个人信息中是否存在待认证信息；
步骤S102，若用户个人信息中存在待认证信息，则对待认证信息进行认证，并在认证通过后，对用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；
步骤S103，当接收到用户终端发送的机构授权请求时，依据机构授权请求，对区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与机构授权请求对应的机构终端。
用户个人信息存储在服务器中，用户本身并未对个人信息加密，使得开发APP的公司能够在服务器中查询到用户个人信息，如果开发APP的公司滥用用户个人信息，容易导致用户个人信息的泄露，无法保证用户个人信息的安全性。考虑到上述问题，本实施例中提出一种用户个人信息加密授权方法，以下详细介绍用户个人信息加密授权方法的具体步骤：
步骤S101，接收用户终端上传的用户个人信息，并确定用户个人信息中是否存在待认证信息；
本实施例中，该用户终端包括但不限于PC、笔记本电脑、智能手机和平板电脑，该用户个人信息包括但不限于身份证、手机号码、联系地址、银行卡号、驾照、学历、公司名称、公司职位、所属行业、年龄和婚姻状况。具体实施中，用户通过用户终端的信息输入界面输入用户个人信息，在用户个人信息输入完成之后，用户终端将输入的用户个人信息上传至用户个人信息加密授权设备，该设备接收用户终端上传的用户个人信息，并确定用户个人信息中是否存在待认证信息，即确定是否需要对该用户个人信息进行认证，如果该用户个人信息中存在待认证信息，则需要对该用户个人信息进行认证，反之，如果该用户个人信息中不存在待认证信息，则不需要对该用户个人信息进行认证。
具体地，当接收到用户终端上传的用户个人信息时，设备确定该用户个人信息中是否存在至少一信息字段位于预设字段组，如果该用户个人信息中存在至少一信息字段位于预设字段组，则可以确定用户个人信息中存在待认证信息，即需要认证，且待认证信息为该至少一信息字段对应的具体信息，如果该用户个人信息中的信息字段均不位于预设字段组，则可以确定用户个人信息中不存在待认证信息，即不需要认证。其中，信息字段包括但不限于年龄、身份证、学历、银行卡号、驾照、房产证、手机号码和公司名称。需要。需要说明的是，上述预设字段组可由本领域技术人员基于实际情况进行设置，本实施例对此不作具体限定。
步骤S102，若用户个人信息中存在待认证信息，则对待认证信息进行认证，并在认证通过后，对用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；
本实施例中，如果用户个人信息中存在待认证信息，则对待认证信息进行认证，即验证用户个人信息的真实性，其中，待认证信息为身份证号码与姓名、手机号码、银行卡号和学历等中的一种或几种。具体地，确定待认证信息所属的认证接口，即从待认证信息中提取信息字段，查询信息字段与认证接口之间的映射关系表，将与待认证信息中信息字段对应的认证接口确定为待认证信息所属的认证接口，并通过所属的认证接口对该待认证信息进行认证。其中，认证接口包括但不限于公安部接口、运营商接口、银行接口和学信网接口，通过公安部接口认证姓名和身份证号码、通过运营商接口认证手机号码、通过各银行接口认证银行卡号以及通过学信网接口认证学历。
具体实施中，为了保证输入的用户个人信息为本人的信息，可先认证身份证号码与姓名，即用户首先输入身份证信息，包括姓名和身份证号码，并上传到设备，由设备通过公安部接口认证身份证信息，并在身份证信息通过认证后，提示用户人脸识别，确定输入的身份证信息是否为本人的信息，在确定输入的身份证信息为本人的信息之后，提醒用户输入其他用户个人信息，结合身份证信息对其他用户个人信息进行认证。
在认证通过后，设备对用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中，即设备利用非对称加密算法生成一对用户的公开密钥（publickey）和私有密钥（privatekey），并根据该公有密钥对认证后的用户个人信息加密，并将加密后的用户个人信息存储至区块链中。其中，非对称加密算法包括但不限于RSA加密算法、Elgamal算法、背包算法、素数测试算法、D-H（Diffie-Hellman）算法和椭圆曲线加密算法，需要说明的是，上述非对称加密算法可由本领域技术人员基于实际情况进行设置，本专利提案对此不作具体限定。可以理解的是，由私有密钥可以算出公有私钥，而由公有私钥反向算出私有密钥是不可行的，因此只有用户自己的私有密钥，才能解密和阅读自己的用户个人信息，有效保护了个人隐私，保证用户个人信息的安全性。
步骤S103，当接收到用户终端发送的机构授权请求时，依据机构授权请求，对区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与机构授权请求对应的机构终端。
本实施例中，机构需要查询对应用户的用户个人信息时，通过机构终端确定需要查询的用户个人信息的信息类型，即待查询信息类型，并获取需要查询对应用户的公有私钥，然后基于该公有私钥对该待查询信息类型进行加密，并生成一包含加密的待查询信息类型的查询授权请求，且将该查询授权请求发送至用户终端。其中，机构终端包括但不限于PC、笔记本电脑、智能手机和平板电脑，信息类型包括身份证、手机号码、联系地址、银行卡号、学历、公司名称、公司职位、所属行业、年龄和婚姻状况等信息类型。
用户终端接收机构终端发送的查询授权请求，并依据本机的私有密钥对该查询授权请求中的待查询信息类型进行解密，然后显示包含有待查询信息类型、同意授权控件和拒绝授权控件的授权界面，如果用户点击拒绝授权控件，则查询授权流程结束，并向机构终端返回对应的信息；如果用户点击同意授权控件，则生成一包含有授权信息类型、机构密钥信息（机构的公有密钥）、用户身份识别码、用户密钥信息（用户的私有密钥）和机构终端识别码的机构授权请求，并向设备发送该机构授权请求。
设备接收到用户终端发送的机构授权请求时，依据该机构授权请求，对区块链中的对应用户个人信息进行解密与筛选，具体地，设备从机构授权请求中读取授权信息类型、用户身份识别码和用户密钥信息，并从区块链中读取与该用户身份识别码对应的用户个人信息，然后依据该用户密钥信息，即用户的私钥密钥对该用户个人信息进行解密，并依据该授权信息类型，从解密后的用户个人信息中，筛选出授权用户个人信息，最后将筛选后的用户个人信息，即授权用户个人信息，经加密后传输至与机构授权请求对应的机构终端，即从该机构授权请求中读取机构终端识别码和机构密钥信息，并依据机构密钥信息，即机构的公有密钥对筛选后的用户个人信息，即授权用户个人信息进行加密，并将加密后授权用户个人信息传输至与机构终端识别码对应的机构终端。机构终端接收设备发送的授权用户个人信息，并依据机构的私有密钥对授权用户个人信息解密。具体实施中，授权用户个人信息具备有效时长，当授权用户个人信息的存储时间超过有效时长之后，自动删除授权用户个人信息。
本实施例中，本申请通过对用户个人信息进行认证，并将通过认证的用户个人信息加密后存储至区块链中，当接收到机构授权请求时，对存储在区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与对应的机构终端，由于用户个人信息经过认证，有效保证用户个人信息的准确性，且用户个人信息经过加密后存储在区块链中，可以防止他人篡改用户个人信息，且机构需要查询用户个人信息时，需要用户个人信息的拥有者授权给机构，机构才能够查询，有效的提高了用户个人信息的安全性。
进一步地，参照图3，基于上述第一实施例，提出了本申请用户个人信息加密授权方法的第二实施例，与前述实施例的区别在于，步骤S103之后，还包括：
步骤S104，统计用户个人信息的授权机构数量，并依据授权机构数量确定用户个人信息的信用增加值；
本实施例中，当设备接收到用户终端发送的机构授权请求时，记录机构授权请求中的机构终端识别码，每一授权机构具有唯一的机构终端识别码，每接收到携带有不同机构终端识别码的机构授权请求，则被授权的用户个人信息的授权机构数量加1。设备定时统计用户个人信息的授权机构数量，并依据该授权机构数量确定用户个人信息的信用增加值，即查询预存的授权机构数量与信用增加值之间的映射关系表，获取该授权机构数量对应的信用增加值，或者确定该授权机构数量所属的数量区间，并查询预存的数量区间与信用增加值的映射关系表，获取该授权机构数量所处的数量区间对应的信用增加值。需要说明的是，上述授权机构数量与信用增加值之间的映射关系表以及数量区间与信用增加值的映射关系表可由本领域技术人员基于实际情况进行设置，本实施例对此不作具体限定。
步骤S105，依据用户个人信息的基础信用值和信用增加值确定用户个人信息的可信度等级。
本实施例中，设备在确定用户个人信息的信用增加值之后，依据用户个人信息的基础信用值和信用增加值确定用户个人信息的可信度等级，即获取该用户个人信息的基础信息值，并用该基础信息值加上该信用增加值，以获取该用户个人信息的总信用值，然后确定该总信用值所处的信用值区间，查询预存的信用区间与可信度等级之间的映射关系表，获取该信用区间对应的可信度等级。其中，可信度等级越高，则表示用户个人信息的可信程度越高，而可信度等级越低，则表示用户个人信息的可信程度越低。需要说明的是，上述信用区间与可信度等级之间的映射关系表可由本领域技术人员基于实际情况进行设置，本实施例对此不作具体限定。
本实施例中，本申请依据用户个人信息的授权机构数量，确定用户个人信息的可信度等级，便于用户和机构直观的知晓用户个人信息的可信程度。
进一步地，基于上述第二实施例，提出了本申请用户个人信息加密授权方法的第三实施例，与前述实施例的区别在于，该步骤S104之后，该用户个人信息加密授权方法还包括：
步骤a，统计用户个人信息的总授权次数，并依据总授权次数确定是否需要调整所述信用增加值；
本实施例中，设备每接收到携带有不同机构终端识别码的机构授权请求，则被授权的用户个人信息的总授权次数加1，设备在用户个人信息的信用增加值之后，统计用户个人信息的总授权次数，并确定该总授权次数是否超过预设授权次数，即确定是否需要调整信用增加值，如果该总授权次数超过预设授权次数，则需要调整信用增加值，反之，如果该总授权次数未超过预设授权次数，则需要调整信用增加值。需要说明的是，上述预设授权次数可由本领域技术人员基于实际情况进行设置，本实施例对此不作具体限定。
步骤b，若总授权次数超过预设授权次数，则依据总授权次数和授权机构数量重新确定用户个人信息的信用增加值。
本实施例中，如果总授权次数超过预设授权次数，则依据该总授权次数和该授权机构数量重新确定用户个人信息的信用增加值，即查询预存的总授权次数与信用增加值之间的映射关系表，将与该总授权次数对应的信用增加值确定为用户个人信息的第一信用增加值，以及查询预存的授权机构数量与与信用增加值之间的映射关系表，将与该授权机构数量对应的信用增加值确定为用户个人信息的第二信用增加值，然后获取第一预设权重系数和第二预设权重系数，并用第一预设权重系数乘以该第一信用增加值，以获取第一权重信用增加值，以及用第二预设权重系数乘以该第二信用增加值，以获取第二权重信用增加值，最后将第一权重信用增加值与第二权重信用增加值之和确定为用户个人信息的信用增加值。需要说明的是，总授权次数与信用增加值之间的映射关系表、上述授权机构数量与与信用增加值之间的映射关系表、第一预设权重系数和第二预设权重系数可由本领域技术人员基于实际情况进行设置，本实施例对此不作具体限定。
本实施例中，本申请结合授权机构数量和总授权次数，确定用户个人信息的信用增加值，有效的提高信用增加值的准确性，从而提高可信度等级的准确性。
进一步地，基于上述第一或第二实施例，提出了本申请用户个人信息加密授权方法的第四实施例，与前述实施例的区别在于，该用户个人信息加密授权方法还包括：
步骤c，统计用户个人信息的各授权机构的授权次数，并依据各授权机构的授权次数确定用户个人信息的信用增加值；
本实施例中，当设备接收到用户终端发送的机构授权请求时，记录机构授权请求中的机构终端识别码，每一授权机构具有唯一的机构终端识别码，每接收到机构授权请求，则被授权的用户个人信息的对应授权机构的授权次数加1。设备统计用户个人信息的各授权机构的授权次数，并依据各授权机构的授权次数确定该用户个人信息的信用增加值。
具体地，设备查询预存的授权次数与信用增加值之间的映射关系表，确定各授权机构的信用增加值，然后读取各授权机构的机构类型标签，并查询预存的机构类型标签与权重系数之间的映射关系表，确定该用户个人信息的各授权机构的信用增加值，然后读取各授权机构的机构类型标签，并查询预存的机构类型标签与权重系数之间的映射关系表，确定各信用增加值的权重系数，最后用各信用增加值，乘以各信用增加值的对应权重系数之后，累加各乘积，并将累加值确定为该用户个人信息的信用增加值，以重新确定用户个人信息的信用增加值。其中，机构类型标签包括但不限于银行标签和贷款公司。需要说明的是，上述机构类型标签与权重系数之间的映射关系表以及机构类型标签与权重系数之间的映射关系表可由本领域技术人员基于实际情况进行设置，本实施例对此不作具体限定。
步骤d，依据用户个人信息的基础信用值和信用增加值确定用户个人信息的可信度等级。
本实施例中，设备在确定用户个人信息的信用增加值之后，依据用户个人信息的基础信用值和信用增加值确定用户个人信息的可信度等级，即获取该用户个人信息的基础信息值，并用该基础信息值加上该信用增加值，以获取该用户个人信息的总信用值，然后确定该总信用值所处的信用值区间，查询预存的信用区间与可信度等级之间的映射关系表，获取该信用区间对应的可信度等级。需要说明的是，上述信用区间与可信度等级之间的映射关系表可由本领域技术人员基于实际情况进行设置，本实施例对此不作具体限定。
本实施例中，本申请依据用户个人信息的各授权机构的授权次数，能够更加准确的确定用户个人信息的可信度等级，便于用户和机构直观的知晓用户个人信息的可信程度。
此外，本申请实施例还提供一种用户个人信息加密授权装置。
参照图4，图4为本申请用户个人信息加密授权装置第一实施例的功能模块示意图。
本申请用户个人信息加密授权装置为虚拟装置，存储于图1所示用户个人信息加密授权设备的存储器1005中，用于实现用户个人信息加密授权可读指令的所有功能；接收用户终端上传的用户个人信息，并确定所述用户个人信息中是否存在待认证信息；若所述用户个人信息中存在待认证信息，则对所述待认证信息进行认证，并在认证通过后，对所述用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；当接收到用户终端发送的机构授权请求时，依据所述机构授权请求，对所述区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端。
具体的，本实施例中，所述用户个人信息加密授权装置包括：
接收确定模块101，用于接收用户终端上传的用户个人信息，并确定所述用户个人信息中是否存在待认证信息；
认证加密模块102，用于若所述用户个人信息中存在待认证信息，则对所述待认证信息进行认证，并在认证通过后，对所述用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；
信息授权模块103，用于当接收到用户终端发送的机构授权请求时，依据所述机构授权请求，对所述区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端。
进一步地，所述接收确定模块101还用于：
确定所述用户个人信息中是否存在至少一信息字段位于预设字段组；
若所述用户个人信息中存在至少一信息字段位于预设字段组，则确定所述用户个人信息中存在待认证信息。
进一步地，所述信息授权模块103还用于：
从所述机构授权请求中读取授权信息类型、用户身份识别码和用户密钥信息；
从所述区块链中读取与所述用户身份识别码对应的用户个人信息，并依据所述用户密钥信息对所述用户个人信息进行解密；
依据所述授权信息类型，从解密后的用户个人信息中，筛选出授权用户个人信息。
进一步地，所述用户个人信息加密授权装置还包括：
统计确定模块，用于统计所述用户个人信息的授权机构数量，并依据所述授权机构数量确定所述用户个人信息的信用增加值；
可信度确定模块，用于依据所述用户个人信息的基础信用值和所述信用增加值确定所述用户个人信息的可信度等级。
进一步地，所述统计确定模块还用于：
统计所述用户个人信息的总授权次数，并确定所述总授权次数是否超过预设授权次数；
若所述总授权次数超过预设授权次数，则依据所述总授权次数和所述授权机构数量重新确定所述用户个人信息的信用增加值。
进一步地，所述统计确定模块还用于统计所述用户个人信息的各授权机构的授权次数，并依据各授权机构的授权次数确定所述用户个人信息的信用增加值；
所述可信度确定模块，还用于依据所述用户个人信息的基础信用值和所述信用增加值确定所述用户个人信息的可信度等级。
进一步地，所述所述统计确定模块还用于：
查询预存的授权次数与信用增加值之间的映射关系表，确定所述用户个人信息的各授权机构的信用增加值；
读取各授权机构的机构类型标签，并查询预存的机构类型标签与权重系数之间的映射关系表，确定各信用增加值的权重系数；
用各信用增加值，乘以各信用增加值的对应权重系数之后，累加各乘积，并将累加值确定为所述用户个人信息的信用增加值。
其中，上述用户个人信息加密授权装置中各个模块的功能实现与上述用户个人信息加密授权方法实施例中各步骤相对应，其功能和实现过程在此处不再一一赘述。
此外，本申请实施例还提供一种可读存储介质。
本申请可读存储介质上存储有用户个人信息加密授权可读指令，其中所述用户个人信息加密授权可读指令被处理器执行时，实现如上述的用户个人信息加密授权方法的步骤。
其中，该可读存储介质可以为非易失性计算机可读存储介质，该用户个人信息加密授权可读指令被执行时所实现的方法可参照本申请用户个人信息加密授权方法的各个实施例，此处不再赘述。
需要说明的是，在本文中，术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含，从而使得包括一系列要素的过程、方法、物品或者系统不仅包括那些要素，而且还包括没有明确列出的其他要素，或者是还包括为这种过程、方法、物品或者系统所固有的要素。在没有更多限制的情况下，由语句“包括一个……”限定的要素，并不排除在包括该要素的过程、方法、物品或者系统中还存在另外的相同要素。
上述本申请实施例序号仅仅为了描述，不代表实施例的优劣。
通过以上的实施方式的描述，本领域的技术人员可以清楚地了解到上述实施例方法可借助软件加必需的通用硬件平台的方式来实现，当然也可以通过硬件，但很多情况下前者是更佳的实施方式。基于这样的理解，本申请的技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来，该计算机软件产品存储在如上所述的一个存储介质(如ROM/RAM、磁碟、光盘)中，包括若干指令用以使得一台终端设备(可以是手机，计算机，服务器，空调器，或者网络设备等)执行本申请各个实施例所述的方法。
以上仅为本申请的优选实施例，并非因此限制本申请的专利范围，凡是利用本申请说明书及附图内容所作的等效结构或等效流程变换，或直接或间接运用在其他相关的技术领域，均同理包括在本申请的专利保护范围内。
Claims (20)
- 一种用户个人信息加密授权方法，其特征在于，所述用户个人信息加密授权方法包括以下步骤：接收用户终端上传的用户个人信息，并确定所述用户个人信息中是否存在待认证信息；若所述用户个人信息中存在待认证信息，则对所述待认证信息进行认证，并在认证通过后，对所述用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；当接收到用户终端发送的机构授权请求时，依据所述机构授权请求，对所述区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端。
- 如权利要求1所述的用户个人信息加密授权方法，其特征在于，确定所述用户个人信息中是否存在待认证信息的步骤包括：确定所述用户个人信息中是否存在至少一信息字段位于预设字段组；若所述用户个人信息中存在至少一信息字段位于预设字段组，则确定所述用户个人信息中存在待认证信息。
- 如权利要求1所述的用户个人信息加密授权方法，其特征在于，对所述区块链中的对应用户个人信息进行解密与筛选的步骤包括：从所述机构授权请求中读取授权信息类型、用户身份识别码和用户密钥信息；从所述区块链中读取与所述用户身份识别码对应的用户个人信息，并依据所述用户密钥信息对所述用户个人信息进行解密；依据所述授权信息类型，从解密后的用户个人信息中，筛选出授权用户个人信息。
- 如权利要求1所述的用户个人信息加密授权方法，其特征在于，所述将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端的步骤之后，还包括：统计所述用户个人信息的授权机构数量，并依据所述授权机构数量确定所述用户个人信息的信用增加值；依据所述用户个人信息的基础信用值和所述信用增加值确定所述用户个人信息的可信度等级。
- 如权利要求4所述的用户个人信息加密授权方法，其特征在于，依据所述授权机构数量确定所述用户个人信息的信用增加值的步骤之后，还包括：统计所述用户个人信息的总授权次数，并确定所述总授权次数是否超过预设授权次数；若所述总授权次数超过预设授权次数，则依据所述总授权次数和所述授权机构数量重新确定所述用户个人信息的信用增加值。
- 如权利要求4所述的用户个人信息加密授权方法，其特征在于，所述将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端的步骤之后，还包括：统计所述用户个人信息的各授权机构的授权次数，并依据各授权机构的授权次数确定所述用户个人信息的信用增加值；依据所述用户个人信息的基础信用值和所述信用增加值确定所述用户个人信息的可信度等级。
- 如权利要求6所述的用户个人信息加密授权方法，其特征在于，所述依据各授权机构的授权次数确定所述用户个人信息的信用增加值的步骤包括：查询预存的授权次数与信用增加值之间的映射关系表，确定所述用户个人信息的各授权机构的信用增加值；读取各授权机构的机构类型标签，并查询预存的机构类型标签与权重系数之间的映射关系表，确定各信用增加值的权重系数；用各信用增加值，乘以各信用增加值的对应权重系数之后，累加各乘积，并将累加值确定为所述用户个人信息的信用增加值。
- 一种用户个人信息加密授权装置，其特征在于，所述用户个人信息加密授权装置包括：接收确定模块，用于接收用户终端上传的用户个人信息，并确定所述用户个人信息中是否存在待认证信息；认证加密模块，用于若所述用户个人信息中存在待认证信息，则对所述待认证信息进行认证，并在认证通过后，对所述用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；信息授权模块，用于当接收到用户终端发送的机构授权请求时，依据所述机构授权请求，对所述区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端。
- 一种用户个人信息加密授权设备，其特征在于，所述用户个人信息加密授权设备包括处理器、存储器、以及存储在所述存储器上并可被所述处理器执行的用户个人信息加密授权可读指令，其中所述用户个人信息加密授权可读指令被所述处理器执行时，实现以下步骤：接收用户终端上传的用户个人信息，并确定所述用户个人信息中是否存在待认证信息；若所述用户个人信息中存在待认证信息，则对所述待认证信息进行认证，并在认证通过后，对所述用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；当接收到用户终端发送的机构授权请求时，依据所述机构授权请求，对所述区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端。
- 如权利要求9所述的用户个人信息加密授权设备，其特征在于，确定所述用户个人信息中是否存在待认证信息的步骤包括：确定所述用户个人信息中是否存在至少一信息字段位于预设字段组；若所述用户个人信息中存在至少一信息字段位于预设字段组，则确定所述用户个人信息中存在待认证信息。
- 如权利要求9所述的用户个人信息加密授权设备，其特征在于，对所述区块链中的对应用户个人信息进行解密与筛选的步骤包括：从所述机构授权请求中读取授权信息类型、用户身份识别码和用户密钥信息；从所述区块链中读取与所述用户身份识别码对应的用户个人信息，并依据所述用户密钥信息对所述用户个人信息进行解密；依据所述授权信息类型，从解密后的用户个人信息中，筛选出授权用户个人信息。
- 如权利要求9所述的用户个人信息加密授权设备，其特征在于，所述将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端的步骤之后，还包括：统计所述用户个人信息的授权机构数量，并依据所述授权机构数量确定所述用户个人信息的信用增加值；依据所述用户个人信息的基础信用值和所述信用增加值确定所述用户个人信息的可信度等级。
- 如权利要求12所述的用户个人信息加密授权设备，其特征在于，依据所述授权机构数量确定所述用户个人信息的信用增加值的步骤之后，还包括：统计所述用户个人信息的总授权次数，并确定所述总授权次数是否超过预设授权次数；若所述总授权次数超过预设授权次数，则依据所述总授权次数和所述授权机构数量重新确定所述用户个人信息的信用增加值。
- 如权利要求12所述的用户个人信息加密授权设备，其特征在于，所述将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端的步骤之后，还包括：统计所述用户个人信息的各授权机构的授权次数，并依据各授权机构的授权次数确定所述用户个人信息的信用增加值；依据所述用户个人信息的基础信用值和所述信用增加值确定所述用户个人信息的可信度等级。
- 如权利要求14所述的用户个人信息加密授权设备，其特征在于，所述依据各授权机构的授权次数确定所述用户个人信息的信用增加值的步骤包括：查询预存的授权次数与信用增加值之间的映射关系表，确定所述用户个人信息的各授权机构的信用增加值；读取各授权机构的机构类型标签，并查询预存的机构类型标签与权重系数之间的映射关系表，确定各信用增加值的权重系数；用各信用增加值，乘以各信用增加值的对应权重系数之后，累加各乘积，并将累加值确定为所述用户个人信息的信用增加值。
- 一种可读存储介质，其特征在于，所述可读存储介质上存储有用户个人信息加密授权可读指令，其中所述用户个人信息加密授权可读指令被处理器执行时，实现以下步骤：接收用户终端上传的用户个人信息，并确定所述用户个人信息中是否存在待认证信息；若所述用户个人信息中存在待认证信息，则对所述待认证信息进行认证，并在认证通过后，对所述用户个人信息进行加密，且将加密后的用户个人信息存储至区块链中；当接收到用户终端发送的机构授权请求时，依据所述机构授权请求，对所述区块链中的对应用户个人信息进行解密与筛选，并将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端。
- 如权利要求16所述的可读存储介质，其特征在于，确定所述用户个人信息中是否存在待认证信息的步骤包括：确定所述用户个人信息中是否存在至少一信息字段位于预设字段组；若所述用户个人信息中存在至少一信息字段位于预设字段组，则确定所述用户个人信息中存在待认证信息。
- 如权利要求16所述的可读存储介质，其特征在于，对所述区块链中的对应用户个人信息进行解密与筛选的步骤包括：从所述机构授权请求中读取授权信息类型、用户身份识别码和用户密钥信息；从所述区块链中读取与所述用户身份识别码对应的用户个人信息，并依据所述用户密钥信息对所述用户个人信息进行解密；依据所述授权信息类型，从解密后的用户个人信息中，筛选出授权用户个人信息。
- 如权利要求16所述的可读存储介质，其特征在于，所述将筛选后的用户个人信息经加密后传输至与所述机构授权请求对应的机构终端的步骤之后，还包括：统计所述用户个人信息的授权机构数量，并依据所述授权机构数量确定所述用户个人信息的信用增加值；依据所述用户个人信息的基础信用值和所述信用增加值确定所述用户个人信息的可信度等级。
- 如权利要求19所述的可读存储介质，其特征在于，依据所述授权机构数量确定所述用户个人信息的信用增加值的步骤之后，还包括：统计所述用户个人信息的总授权次数，并确定所述总授权次数是否超过预设授权次数；若所述总授权次数超过预设授权次数，则依据所述总授权次数和所述授权机构数量重新确定所述用户个人信息的信用增加值。
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810941440.5 | 2018-08-17 | ||
| CN201810941440.5A CN109391611B (zh) | 2018-08-17 | 2018-08-17 | 用户个人信息加密授权方法、装置、设备及可读存储介质 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2020034527A1 true WO2020034527A1 (zh) | 2020-02-20 |
Family
ID=65418481
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/CN2018/122636 Ceased WO2020034527A1 (zh) | 2018-08-17 | 2018-12-21 | 用户个人信息加密授权方法、装置、设备及可读存储介质 |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN109391611B (zh) |
| WO (1) | WO2020034527A1 (zh) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| IT202100021920A1 (it) * | 2021-08-16 | 2023-02-16 | Cyberdeck S R L | Metodo di gestione per l’archiviazione e la condivisione di informazioni personali |
Families Citing this family (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20220012727A1 (en) * | 2019-03-14 | 2022-01-13 | Hitachi, Ltd. | Personal information management system, personal information management apparatus, personal information management method |
| CN110263573A (zh) * | 2019-05-22 | 2019-09-20 | 西安邮电大学 | 基于区块链个人身份的表示方法 |
| CN110535913A (zh) * | 2019-07-31 | 2019-12-03 | 苏州白杨软件有限公司 | 一种基于区块链的用户授权及确权方法 |
| CN111553710B (zh) * | 2020-04-08 | 2022-09-02 | 深圳壹账通智能科技有限公司 | 基于区块链的企业数据处理方法、装置、设备和存储介质 |
| CN113342900B (zh) * | 2021-08-02 | 2021-10-29 | 成都天府市民云服务有限公司 | 一种基于区块链的个人信息授权方法及系统 |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102647430A (zh) * | 2012-05-09 | 2012-08-22 | 司文 | 一种隐藏身份信息的实名制认证系统和方法 |
| US20150039889A1 (en) * | 2013-08-02 | 2015-02-05 | Zeva Incorporated | System and method for email and file decryption without direct access to required decryption key |
| CN104618401A (zh) * | 2015-03-10 | 2015-05-13 | 四川省宁潮科技有限公司 | 基于实名制的wifi一键登录方法 |
| CN105072108A (zh) * | 2015-08-04 | 2015-11-18 | 小米科技有限责任公司 | 用户信息的传输方法、装置及系统 |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106534097B (zh) * | 2016-10-27 | 2018-05-18 | 上海亿账通区块链科技有限公司 | 基于区块链交易的权限管制方法及系统 |
| CN108259438B (zh) * | 2016-12-29 | 2021-02-05 | 中移(苏州)软件技术有限公司 | 一种基于区块链技术的认证的方法和装置 |
| CN107169371B (zh) * | 2017-04-27 | 2019-11-22 | 北京众享比特科技有限公司 | 一种基于区块链的数据库操作方法和系统 |
| CN107181765A (zh) * | 2017-07-25 | 2017-09-19 | 光载无限（北京）科技有限公司 | 基于区块链技术的网络数字身份认证方法 |
| CN108023894B (zh) * | 2017-12-18 | 2020-09-11 | 苏州优千网络科技有限公司 | 基于区块链的签证信息系统及其处理方法 |
-
2018
- 2018-08-17 CN CN201810941440.5A patent/CN109391611B/zh not_active Expired - Fee Related
- 2018-12-21 WO PCT/CN2018/122636 patent/WO2020034527A1/zh not_active Ceased
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102647430A (zh) * | 2012-05-09 | 2012-08-22 | 司文 | 一种隐藏身份信息的实名制认证系统和方法 |
| US20150039889A1 (en) * | 2013-08-02 | 2015-02-05 | Zeva Incorporated | System and method for email and file decryption without direct access to required decryption key |
| CN104618401A (zh) * | 2015-03-10 | 2015-05-13 | 四川省宁潮科技有限公司 | 基于实名制的wifi一键登录方法 |
| CN105072108A (zh) * | 2015-08-04 | 2015-11-18 | 小米科技有限责任公司 | 用户信息的传输方法、装置及系统 |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| IT202100021920A1 (it) * | 2021-08-16 | 2023-02-16 | Cyberdeck S R L | Metodo di gestione per l’archiviazione e la condivisione di informazioni personali |
| WO2023021373A1 (en) * | 2021-08-16 | 2023-02-23 | Cyberdeck Srl | Management method for storing and sharing personal information |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109391611A (zh) | 2019-02-26 |
| CN109391611B (zh) | 2021-03-02 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| WO2020034527A1 (zh) | 用户个人信息加密授权方法、装置、设备及可读存储介质 | |
| WO2020062642A1 (zh) | 基于区块链的电子合同签署方法、装置、设备及存储介质 | |
| AU2006205272B2 (en) | Security code production method and methods of using the same, and programmable device therefor | |
| WO2020190099A1 (en) | Electronic device for managing personal information and operating method thereof | |
| WO2021092973A1 (zh) | 敏感信息处理方法、设备及可读存储介质 | |
| WO2017119564A1 (ko) | 본인인증용 정보 보안 전송시스템 및 방법 | |
| WO2018124857A1 (ko) | 블록체인 기반의 모바일 아이디를 이용하여 사용자를 비대면 인증하는 방법, 단말 및 이를 이용한 서버 | |
| WO2017088441A1 (zh) | 身份认证方法、服务器及存储介质 | |
| WO2021010766A1 (ko) | 블록 체인을 이용한 전자 인증 장치 및 그 방법 | |
| WO2019074326A1 (en) | SECURE OFFLINE PAYMENT METHOD AND APPARATUS | |
| WO2018194379A1 (ko) | 블록체인 및 이와 연동되는 머클 트리 구조 기반의 토큰 아이디를 이용하여 카드 사용을 승인하는 방법 및 이를 이용한 서버 | |
| US20030005291A1 (en) | Hardware token self enrollment process | |
| WO2020147384A1 (zh) | 基于区块链的安全交易方法、装置、设备及存储介质 | |
| CN101512540B (zh) | 信息处理装置及其方法 | |
| WO2017111383A1 (ko) | 생체 정보 기반 인증 장치, 이와 연동하는 제어 서버, 그리고 이들의 생체 정보 기반 로그인 방법 | |
| WO2018192472A1 (zh) | 访问认证的方法及服务器、智能终端和存储装置 | |
| WO2017094998A1 (ko) | 이동통신단말기에 저장된 금융카드정보를 이용한 생체정보 본인 인증 시스템 및 방법 | |
| WO2019024126A1 (zh) | 基于区块链的知识管理方法、终端及服务器 | |
| WO2019132272A1 (ko) | 블록체인 기반의 서비스로서의 아이디 | |
| WO2015069028A1 (ko) | 이동통신단말기를 이용한 다채널 인증과 금융 이체 방법 및 시스템 | |
| WO2018124856A1 (ko) | 블록체인 데이터베이스를 통해 모바일 아이디를 이용하여 사용자를 인증하는 방법, 단말 및 이를 이용한 서버 | |
| WO2017105072A1 (ko) | 생체 정보 기반 인증 장치 그리고 이의 동작 방법 | |
| WO2016206530A1 (zh) | 一种高级安全的移动支付方法、装置及系统 | |
| WO2015037887A1 (ko) | 스마트 칩 인증 서버 및 그 방법 | |
| WO2014104539A1 (ko) | 패스코드 관리 방법 및 장치 |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 18930402 Country of ref document: EP Kind code of ref document: A1 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| 32PN | Ep: public notification in the ep bulletin as address of the adressee cannot be established |
Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205 DATED 24/06/2021) |
|
| 122 | Ep: pct application non-entry in european phase |
Ref document number: 18930402 Country of ref document: EP Kind code of ref document: A1 |