Acquired information sharing method and system based on dual authentication and multiple protection measures

Abstract

The invention discloses an acquired information sharing method and a system based on dual authentication multiple protection measures, and relates to an acquired information sharing method. In the prior art, head information is used for transmitting user identity verification information, and user information is easy to intercept in the method. The method comprises the following steps: a client initiates an account authentication request; if the authentication is passed, randomly generating a temporary token, and returning the temporary token to the receiver; initiating the data request againafter obtaining the temporary token by the receiver, and decrypting the token by the sender after receiving the request and judging the validity of the token and the timeliness of the token; if the verification is passed, entering links of extracting data and assembling the data; the server extracts the acquired data and performs data desensitization; signing the data and encrypting the data; andsending the original text and the encrypted abstract to a receiver together. According to the method, an authentication method combining account authentication and token authentication is used, identity authentication service and data providing service are separated, and the security of interface interaction is greatly improved.

Description

technical field [0001] The invention relates to a collection information sharing method, in particular to a collection information sharing method and system based on double authentication and multiple protection measures. Background technique [0002] With the rapid advancement of the construction of the electricity consumption information collection system, the electricity consumption information collection system has fully entered the stage of deepening the application, and the information interaction and sharing between the electricity consumption information collection system and other business application systems is becoming more and more frequent, and the collected data is relatively sensitive. This also puts forward higher requirements for the security of collecting data, publishing and sharing. [0003] At present, the methods of data interaction and sharing between heterogeneous systems mainly include Web Service technology, message middleware, FTP / file sharing serv...

AI Technical Summary

Problems solved by technology

[0004] In terms of security authentication, traditional Web Service interface interactions mostly use header information (SoapHeader) to transmit user authentication information. This authentication method is easy to intercept user information and has certain security risks; the size of transmitted data is limited, and the There is a bottleneck in th

Images