WO2021120579A1

WO2021120579A1 - Method for securely reporting data, and apparatus and computer-readable storage medium

Info

Publication number: WO2021120579A1
Application number: PCT/CN2020/099067
Authority: WO
Inventors: 张文伟
Original assignee: 平安国际智慧城市科技股份有限公司
Priority date: 2019-12-18
Filing date: 2020-06-30
Publication date: 2021-06-24
Also published as: CN111064578B; CN111064578A

Abstract

The present application relates to big data. Disclosed are a method for securely reporting data, and an apparatus and a computer-readable storage medium. The method for securely reporting data comprises: sending registration information of a user to a secure data reporting system; acquiring a certificate signed and issued by the secure data reporting system on the basis of the registration information; acquiring current image information of the user, performing real-name registration on the basis of the current image information and the registration information, and taking the user which completes the real-name registration as a member of a group signature of the secure data reporting system; receiving reporting information input by the user; performing a group signature operation on the reporting information on the basis of group signature technology; sending the reporting information which is subjected to the group signature operation to the secure data reporting system, such that the secure data reporting system verifies the signature validity of the reporting information by means of a signature verification operation on the group signature; and receiving a verification result fed back by the secure data reporting system.

Description

Data security reporting method, device and computer readable storage medium

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on December 18, 2019, the application number is 201911321927.4, and the invention title is "Data security reporting method, device and computer-readable storage medium", the entire content of which is incorporated by reference Incorporate in the application.

Technical field

This application relates to the field of data processing, and in particular to a method, device and computer-readable storage medium for data security reporting.

Background technique

In real life, the inventor realizes that the data security reporting system (such as the reporting system) has the problem of information leakage of the reporter (or called the reporter). The general system can directly see the basic information of the reporter. Reporters who do not know the information easily will have some scruples.

technical problem

How to solve the authenticity of the source of the reported information and protect the personal information of the reporter from being easily obtained is a problem that needs to be solved urgently. In view of this, this application provides a data security reporting method, device, and computer-readable storage medium, the main purpose of which is to effectively ensure the security of the whistleblower, and to ensure the real name and authenticity of the whistleblower.

Technical solutions

To achieve the above objective, the present application provides a data security reporting method, and the data security reporting method includes:

This application provides a data security reporting method, which is applied to an electronic device, and the data security reporting method includes:

Send the user's registration information to the data security reporting system;

Obtaining a certificate issued by the data security reporting system based on the registration information;

Acquiring the current image information of the user, performing real-name registration based on the current image information and the registration information, and setting the user who has completed the real-name registration as a member of the group signature of the data security reporting system;

Receiving the report information input by the user;

Perform a group signature operation on the reported information based on the group signature technology;

Sending the report information of the group signature operation to the data security reporting system, so that the data security reporting system verifies the validity of the signature of the report information through the group signature verification operation;

Receiving the verification result fed back by the data security reporting system.

The present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a data security reporting program that can run on the processor, and the data security reporting program is used by the processor. The following steps are implemented during execution:

Send the user's registration information to the data security reporting system;

Acquiring the current image information of the user, performing real-name registration based on the current image information and the registration information, and making the user who has completed the real-name registration as a member of the group signature of the data security reporting system;

Receiving the report information input by the user;

The present application also provides a computer-readable storage medium having a data security reporting program stored on the computer-readable storage medium, and the data security reporting program can be executed by one or more processors to implement the following steps:

Send the user's registration information to the data security reporting system;

Receiving the report information input by the user;

This application also provides a data security reporting device, the data security reporting device includes:

The sending module is used to send the user's registration information to the data security reporting system, and send the report information of the group signature operation to the data security reporting system, so that the data security reporting system can pass the group signature verification operation to the data security reporting system. Verifying the validity of the signature of the reported information;

An obtaining module, configured to obtain a certificate issued by the data security reporting system based on the registration information;

The registration module is used to obtain the current image information of the user, perform real-name registration based on the current image information and the registration information, and treat the user who has completed the real-name registration as a member of the group signature of the data security reporting system ；

The receiving module is configured to: receive the report information input by the user, and receive the verification result fed back by the data security reporting system;

The signature module is used to perform a group signature operation on the reported information based on the group signature technology.

Beneficial effect

The data security reporting method, device, and computer-readable storage medium provided in this application use group signature technology to sign and verify reported information. Since group signature members require real names when registering, and group signature operations on reported information are anonymous operations. This can effectively ensure the real name of the report and at the same time ensure the concealment of the reporter.

Description of the drawings

FIG. 1 is a schematic flowchart of a data security reporting method provided by an embodiment of this application;

2 is a schematic diagram of the internal structure of an electronic device provided by an embodiment of the application;

FIG. 3 is a schematic diagram of modules based on a data security reporting program in an electronic device provided by an embodiment of the application.

The realization, functional characteristics, and advantages of the purpose of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings.

The best mode of the present invention

In order to make the purpose, technical solutions, and advantages of this application clearer and clearer, the following further describes the application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the application, and are not used to limit the application. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this application.

This application provides a data security reporting method. Referring to FIG. 1, it is a schematic flowchart of a data security reporting method provided by an embodiment of this application. The method may be executed by a device, and the device may be implemented by software and/or hardware. In this embodiment, the device is an intelligent terminal.

In this embodiment, the data security reporting method includes:

S101, send the user's registration information to the data security reporting system;

S102: Obtain a certificate issued by the data security reporting system based on the registration information;

S103: Acquire current image information of the user, perform real-name registration based on the current image information and the registration information, and use the real-name registered user as a member of the group signature of the data security reporting system;

S104: Receive report information input by the user;

S105: Perform a group signature operation on the reported information based on the group signature technology;

S106: Send the report information of the group signature operation to the data security reporting system, so that the data security reporting system verifies the validity of the signature of the report information through the group signature verification operation;

S107: Receive a verification result fed back by the data security reporting system.

The main purpose of the data security reporting method provided in this embodiment is to be able to effectively ensure the safety of the reporter, and to ensure the real name and authenticity of the reporter.

In this embodiment, the data security reporting system is an anonymous reporting system.

Before the step of receiving the report information input by the user, the method further includes:

Distribute group members' private keys to the users.

The step of performing a group signature operation on the report information based on the group signature technology includes:

Sign the report information by using the private key of the user's group member.

A group signature is a digital signature scheme that includes the following processes:

(1) Creation: A probabilistic polynomial time algorithm to generate group public and private keys.

(2) Join: An interactive agreement between a user and a group administrator to become a group administrator. The implementation of this protocol can generate the private key and member certificate of the group member, and enable the group administrator to obtain the private key of the group member.

(3) Signature: A probabilistic algorithm, when a message and the private key of a group member are input, the signature of the message is output.

(4) Verification: A probabilistic algorithm, when a bad message and a private key of a group member are input, the signature of the message is output.

(5) Open: An algorithm that confirms the legal identity of the signer under the condition of a given signature and group private key.

The basic meaning of group signature is to sign digitally in the name of the group. Group members include an administrator and several group members. Any group member has its own private key and group public key, and can sign on behalf of the group. When there is a dispute over the signature result, the administrator can track the identity of the group membership of the signature, thereby realizing effective accountability. Group signature has the following characteristics:

Only group members can sign messages;

The recipient can verify the validity of the signature and can determine whether the signature is from a specific group, but does not know which member of the group signed it;

If necessary (in the event of a dispute), the signature can be made public, and the identity of the signing member can be confirmed by the administrator.

Group signature can be regarded as a general "group member anonymous identity authentication", that is, a member can prove which group he belongs to, but does not reveal his identity. Its security requirements include:

Unforgeability: the group signature cannot be forged by anyone other than the group members;

Anonymity: Signed group members cannot be identified by anyone other than the administrator;

Traceability: The administrator can effectively track the signed group members;

Anti-collusion attack: Group members cannot forge the signatures of other group members in total.

The registration information includes the ID information of the user, and the step of obtaining the current image information of the user and performing real-name registration based on the current image information and the registration information includes:

Capture the current image of the user through the image capture element of the electronic device to obtain the current image information;

In a case where it is determined that the current image information matches the user's identity document information, real-name registration is performed based on the current image information and the registration information.

The step of receiving the verification result fed back by the data security reporting system includes:

When the data security reporting system fails to verify the validity of the signature of the reported information, receiving a verification result that the signature of the reported information is incorrect;

When the data security reporting system successfully verifies the validity of the signature of the report information, it receives a verification result that the signature verification of the report information passes.

Before the step of sending the user's registration information to the data security reporting system, the data security reporting method further includes opening an interface of the data security reporting system on the electronic device to receive the registration information.

The report information includes information of the reported person, and the information of the reported person includes the name of the reported person, the name of the unit, the address of the unit, and the current position.

The data security reporting method proposed in this embodiment uses group signature technology to sign and verify reported information. Since group signature members need real names when registering, and group signature operations on reported information are anonymous operations, this can effectively ensure the real name of the report. At the same time, it can ensure the concealment of the whistleblower; and when a malicious report occurs, the system can locate the identity of the malicious whistleblower through the group of signature operations of "open", and assist in judicial investigations.

Embodiments of the present invention

It should be noted that the descriptions related to "first", "second", etc. in this application are only for descriptive purposes, and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of indicated technical features . Therefore, the features defined with "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but it must be based on what can be achieved by a person of ordinary skill in the art. When the combination of technical solutions is contradictory or cannot be achieved, it should be considered that such a combination of technical solutions does not exist. , Is not within the scope of protection required by this application.

The application also provides an electronic device 1. Referring to FIG. 2, it is a schematic diagram of the internal structure of an electronic device provided by an embodiment of this application.

In this embodiment, the electronic device 1 may be a computer, a smart terminal or a server. The electronic device 1 at least includes a memory 11, a processor 13, a communication bus 15, and a network interface 17. In this embodiment, the electronic device 1 is an intelligent terminal.

The memory 11 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, hard disk, multimedia card, card-type memory (for example, SD or DX memory, etc.), magnetic memory, magnetic disk, optical disk, and the like. In some embodiments, the memory 11 may be an internal storage unit of the electronic device, such as a hard disk of the electronic device. In some other embodiments, the memory 11 may also be an external storage device of the electronic device, for example, a plug-in hard disk equipped on the electronic device, a smart memory card (Smart Media Card, SMC), Secure Digital (SD) card, Flash Card, etc. Further, the memory 11 may also include both an internal storage unit of an electronic device and an external storage device. The memory 11 can be used not only to store application software and various data installed in the electronic device 1, such as the code of the data security reporting program 111, etc., but also to temporarily store data that has been output or will be output.

The processor 13 may be a central processing unit (Central Processing Unit) in some embodiments. Processing Unit (CPU), a controller, a microcontroller, a microprocessor or other data processing chips are used to run program codes or process data stored in the memory 11.

The communication bus 15 is used to realize the connection and communication between these components.

The network interface 17 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface), and is generally used to establish a communication connection between the electronic device 1 and other electronic devices.

Optionally, the electronic device 1 may further include a user interface. The user interface may include a display (Display) and an input unit such as a keyboard (Keyboard). The optional user interface may also include a standard wired interface and a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, and an OLED (Organic Light-Emitting Diode, organic light-emitting diode) touch device, etc. Among them, the display can also be appropriately called a display screen or a display unit, which is used to display information processed in the electronic device and to display a visualized user interface.

FIG. 2 only shows the electronic device 1 with components 11-17. Those skilled in the art can understand that the structure shown in FIG. 2 does not constitute a limitation on the electronic device, and may include fewer or more components than shown in the figure. Component, or combination of some components, or different component arrangements.

In the embodiment of the electronic device 1 shown in FIG. 2, a data security reporting program 111 is stored in the memory 11; when the processor 13 executes the data security reporting program 111 stored in the memory 11, the following steps are implemented:

Send the user's registration information to the data security reporting system;

Receiving the report information input by the user;

The main purpose of the electronic device 1 provided in this embodiment is to effectively ensure the safety of the reporter, and to ensure the authenticity and authenticity of the reporter.

Before the step of receiving the report information input by the user, when the processor 13 executes the data security report program 111 stored in the memory 11, the following steps are further implemented:

Distribute group members' private keys to the users.

The basic meaning of group signature is to sign digitally in the name of the group. Group members include an administrator and several group members. Any group member has its own private key and group public key, and can sign on behalf of the group. When there is a dispute over the result of the signature, the administrator can track the identity of the group membership of the signature, thereby realizing effective accountability. Group signature has the following characteristics:

Only group members can sign messages;

Traceability: The administrator can effectively track the signed group members;

The registration information includes the identity document information of the user, and the step of acquiring the current image information of the user and performing real-name registration based on the current image information and the registration information includes:

When the data security reporting system successfully verifies the validity of the signature of the reported information, it receives verification feedback information that the signature of the reported information is verified.

Before the step of sending the user's registration information to the data security reporting system, when the processor 13 executes the data security reporting program 111 stored in the memory 11, the following steps are implemented: opening the interface interface of the data security reporting system on the electronic device In order to receive the registration information.

In addition, an embodiment of the present application also proposes a computer-readable storage medium that stores a data security reporting program 111 on the computer-readable storage medium, and the data security reporting program 111 can be executed by one or more processors to To achieve the following operations:

Send the user's registration information to the data security reporting system;

Receiving the report information input by the user;

The specific implementation of the computer-readable storage medium of the present application is basically the same as the above-mentioned embodiments of the electronic device and method, and will not be repeated here.

Optionally, in other embodiments, the data security reporting program 111 may also be divided into one or more modules, and the one or more modules are stored in the memory 11 and run by one or more processors (this The embodiment is executed by the processor 13) to complete the application. The module referred to in the application refers to a series of computer program instruction segments capable of completing specific functions, and is used to describe the execution process of the data security reporting program in the electronic device.

For example, referring to FIG. 3, a schematic diagram of the program modules of the data security reporting program 111 in an embodiment of the electronic device of this application. In this embodiment, the data security reporting program 111 can be divided into a sending module 10, an acquiring module 20, The registration module 30, the receiving module 40, and the signature module 50, exemplarily:

The sending module 10 is used to send the user's registration information to the data security reporting system;

The obtaining module 20 is configured to obtain a certificate issued by the data security reporting system based on the registration information;

The registration module 30 is configured to obtain the current image information of the user and complete the real-name registration in combination with the registration information, so that the user becomes a member of the group signature of the data security reporting system;

The receiving module 40 is configured to receive report information input by the user;

The signature module 50 is configured to perform a group signature operation on the reported information based on group signature technology;

The sending module 10 is also used to send the report information of the group signature operation to the data security reporting system, so that the data security reporting system verifies the signature validity of the report information through the group signature verification operation;

The receiving module 40 is also used to receive the verification feedback information returned by the data security reporting system.

The functions or operation steps implemented by the program modules such as the sending module 10, the acquiring module 20, the registering module 30, the receiving module 40, and the signature module 50 are substantially the same as those in the above-mentioned embodiment, and will not be repeated here.

It should be noted that the serial numbers of the foregoing embodiments of the present application are only for description, and do not represent the advantages and disadvantages of the embodiments. And the terms "include", "include" or any other variants thereof in this article are intended to cover non-exclusive inclusion, so that a process, device, article or method including a series of elements not only includes those elements, but also includes those elements that are not explicitly included. The other elements listed may also include elements inherent to the process, device, article, or method. Without more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, device, article, or method that includes the element.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method of the above embodiments can be implemented by means of software plus the necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is better.的实施方式。 Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM/RAM) as described above. , Magnetic disk, optical disk), including several instructions to make a terminal device (can be a mobile phone, a computer, a server, or a network device, etc.) execute the method described in each embodiment of the present application. The computer-readable storage medium may be non-volatile or volatile.

The above are only the preferred embodiments of the application, and do not limit the scope of the patent for this application. Any equivalent structure or equivalent process transformation made using the content of the description and drawings of the application, or directly or indirectly applied to other related technical fields , The same reason is included in the scope of patent protection of this application.

Claims

A data security reporting method, applied to an electronic device, the data security reporting method includes:

Send the user's registration information to the data security reporting system;

Obtaining a certificate issued by the data security reporting system based on the registration information;

Acquiring the current image information of the user, performing real-name registration based on the current image information and the registration information, and making the user who has completed the real-name registration as a member of the group signature of the data security reporting system;

Receiving the report information input by the user;

Perform a group signature operation on the reported information based on the group signature technology;

Sending the report information of the group signature operation to the data security reporting system, so that the data security reporting system verifies the validity of the signature of the report information through the group signature verification operation;

Receiving the verification result fed back by the data security reporting system.
The data security reporting method according to claim 1, wherein, before the step of receiving the report information input by the user, the method further comprises:

Distribute group members' private keys to the users.
The data security reporting method according to claim 2, wherein the step of performing a group signature operation on the reported information based on the group signature technology comprises:

Sign the report information by using the private key of the user's group member.
The data security reporting method according to claim 1, wherein the registration information includes the user’s identity document information, and the acquisition of the current image information of the user is performed based on the current image information and the registration information. The steps of real-name registration include:

Capture the current image of the user through the image capture element of the electronic device to obtain the current image information;

In a case where it is determined that the current image information matches the user's identity document information, real-name registration is performed based on the current image information and the registration information.
The data security reporting method according to claim 1, wherein the step of receiving the verification result fed back by the data security reporting system comprises:

When the data security reporting system fails to verify the validity of the signature of the reported information through the group signature verification operation, receiving the verification result that the reported information signature verification is incorrect;

When the data security reporting system successfully verifies the signature validity of the reported information through the group signature verification operation, it receives the verification result that the reported information has passed the signature verification.
The data security reporting method according to claim 1, wherein, before the step of sending the user's registration information to the data security reporting system, the method further comprises:

Turn on the interface interface of the data security reporting system on the electronic device to receive the registration information.
An electronic device, wherein the electronic device includes a memory and a processor, the memory stores a data security reporting program that can run on the processor, and when the data security reporting program is executed by the processor To achieve the following steps:

Send the user's registration information to the data security reporting system;

Obtaining a certificate issued by the data security reporting system based on the registration information;

Acquiring the current image information of the user, performing real-name registration based on the current image information and the registration information, and making the user who has completed the real-name registration as a member of the group signature of the data security reporting system;

Receiving the report information input by the user;

Perform a group signature operation on the reported information based on the group signature technology;

Sending the report information of the group signature operation to the data security reporting system, so that the data security reporting system verifies the validity of the signature of the report information through the group signature verification operation;

Receiving the verification result fed back by the data security reporting system.
8. The electronic device according to claim 7, wherein before the step of receiving the report information input by the user, the method further comprises:

Distribute group members' private keys to the users.
8. The electronic device of claim 8, wherein the step of performing a group signature operation on the report information based on the group signature technology comprises:

Sign the report information by using the private key of the user's group member.
The electronic device according to claim 7, wherein the registration information includes the user’s ID information, the acquisition of the current image information of the user, and the real-name registration based on the current image information and the registration information The steps include:

Capture the current image of the user through the image capture element of the electronic device to obtain the current image information;

In a case where it is determined that the current image information matches the user's identity document information, real-name registration is performed based on the current image information and the registration information.
8. The electronic device according to claim 7, wherein the step of receiving the verification result fed back by the data security reporting system comprises:

When the data security reporting system fails to verify the validity of the signature of the reported information, receiving a verification result that the signature of the reported information is incorrect;

When the data security reporting system successfully verifies the validity of the signature of the report information, it receives a verification result that the signature verification of the report information passes.
8. The electronic device according to claim 7, wherein before the step of sending the user's registration information to the data security reporting system, the method further comprises:

Turn on the interface interface of the data security reporting system on the electronic device to receive the registration information.
A computer-readable storage medium, wherein a data security reporting program is stored on the computer-readable storage medium, and the data security reporting program can be executed by one or more processors to implement the following steps:

Send the user's registration information to the data security reporting system;

Obtaining a certificate issued by the data security reporting system based on the registration information;

Acquiring the current image information of the user, performing real-name registration based on the current image information and the registration information, and making the user who has completed the real-name registration as a member of the group signature of the data security reporting system;

Receiving the report information input by the user;

Perform a group signature operation on the reported information based on the group signature technology;

Sending the report information of the group signature operation to the data security reporting system, so that the data security reporting system verifies the validity of the signature of the report information through the group signature verification operation;

Receiving the verification result fed back by the data security reporting system.
The computer-readable storage medium of claim 13, wherein before the step of receiving the report information input by the user, the method further comprises:

Distribute group members' private keys to the users.
15. The computer-readable storage medium of claim 14, wherein the step of performing a group signature operation on the report information based on a group signature technology comprises:

Sign the report information by using the private key of the user's group member.
The computer-readable storage medium according to claim 13, wherein the registration information includes the user's identity document information, and the obtaining of the current image information of the user is based on the current image information and the registration information The steps for real-name registration include:

Capture the current image of the user through the image capture element of the electronic device to obtain the current image information;

In a case where it is determined that the current image information matches the user's identity document information, real-name registration is performed based on the current image information and the registration information.
15. The computer-readable storage medium of claim 13, wherein the step of receiving the verification result fed back by the data security reporting system comprises:

When the data security reporting system fails to verify the validity of the signature of the reported information through the group signature verification operation, receiving the verification result that the reported information signature verification is incorrect;

When the data security reporting system successfully verifies the signature validity of the reported information through the group signature verification operation, it receives the verification result that the reported information has passed the signature verification.
The computer-readable storage medium of claim 13, wherein before the step of sending the user's registration information to the data security reporting system, the method further comprises:

Turn on the interface interface of the data security reporting system on the electronic device to receive the registration information.
A data security reporting device, wherein the data security reporting device includes:

The sending module is used to send the user's registration information to the data security reporting system, and send the report information of the group signature operation to the data security reporting system, so that the data security reporting system can pass the group signature verification operation to the data security reporting system. Verifying the validity of the signature of the reported information;

An obtaining module, configured to obtain a certificate issued by the data security reporting system based on the registration information;

The registration module is used to obtain the current image information of the user, perform real-name registration based on the current image information and the registration information, and treat the user who has completed the real-name registration as a member of the group signature of the data security reporting system ；

The receiving module is configured to: receive the report information input by the user, and receive the verification result fed back by the data security reporting system;

The signature module is used to perform a group signature operation on the reported information based on the group signature technology.
The data security reporting device according to claim 19, wherein the step of receiving the verification result fed back by the data security reporting system comprises:

When the data security reporting system fails to verify the validity of the signature of the reported information, receiving a verification result that the signature of the reported information is incorrect;

When the data security reporting system successfully verifies the validity of the signature of the report information, it receives a verification result that the signature verification of the report information passes.