Method and system for realizing trusted circulation of user information between non-cooperative subjects based on distributed network

Abstract

The invention provides a method for realizing trusted circulation of user information between non-cooperative subjects based on a distributed network. The method comprises the following steps: an information subject user terminal sends a user information query request and a user identity certificate to an information controller server; the information controller server verifies the identity of theinformation subject, digitally signs the user information requested to be queried by the information subject, and sends the digitally signed user information to the information subject user terminal;the information subject user terminal sends the user identity certificate, the received user information and the digital signature to an information receiver server; and the information receiver server verifies the digital signature and the information subject identity and receives user information. According to the method for realizing trusted circulation of the user information between the non-cooperative subjects based on the distributed network provided by the invention, stable, safe and compliant trusted circulation of the user information between the non-cooperative subjects can be realized.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a method and system capable of realizing trusted transfer of user information between non-cooperating entities based on a distributed network. Background technique [0002] In recent years, with the rapid development of information technology and the popularization of Internet applications, more and more organizations collect and use a large amount of personal information, which brings convenience to people's life, but also illegal collection, abuse and disclosure of personal information And other issues, personal information security is facing serious threats. In response to personal information security issues, the National Information Security Standardization Technical Committee (SAC / TC260) formulated a new "Information Security Technology Personal Information Security Specifications GB / T 35273-2020, which clarifies the relevant behavioral requirements of...

AI Technical Summary

Problems solved by technology

Scenario 1 is a widely used user information transfer method, and there are a large number of related patents; Scenario 2, for example, patent CN103942502B "Ferry-style secure data exchange method and device" (hereinafter referred to as "existing patent 1") discloses a The main problem to be solved by the method of information transfer in a physically isolated network between cooperative entities is: there is a need for information transmission between offline cooperative institutions, but their storage media are all offline and cannot directly transmit information through the Internet; therefore, they are generally used Mobile storage media realizes information transmission offline

[0004] Online circulation of user information between non-cooperative entities (Scenario 4) has not yet been implemented with relevant solutions and technologies, mainly because the demand for online user information circulation between non-cooperative entities has emerged with the development of the Internet and the process of social informatization Therefore, the lack of its solutions and technologies is affected by factors such as historical reasons, the development process of cryptography and Internet technology, and the development of laws and regulations: in terms of technical implementation, it is necessary to solve the validity and integrity of user information under the premise of non-cooperation In terms of historical reasons, the continuous development of the Internet and social informatization has continuously strengthened the demand for efficient data transfer, while offline transfer methods are increasingly difficult to meet the needs of social and economic development; in terms of legal factors, it is necessary to ensure that relevant Solutions and technologies can comply with current and future information-related laws and regulations of different countries and regions

Images