Method and system for trusted transfer of user information among non-cooperative subjects in a distributed network

Abstract

The present invention provides a method for realizing trusted transfer of user information between non-cooperating subjects based on a distributed network, including: the user terminal of the information subject sends a user information query request and user identity certificate to the information controller server; the information controller server verifies the information Subject identity, digitally sign the user information requested by the information subject and send it to the information subject user terminal; the information subject user terminal sends the user identity certificate, received user information and digital signature to the information receiver server; the information receiver The server verifies the digital signature and the identity of the information subject, and receives user information. The method for realizing trusted circulation of user information between non-cooperating entities based on a distributed network provided by the present invention can realize stable, safe, and compliant trusted circulation of user information among non-cooperative entities.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a method and system capable of realizing trusted transfer of user information between non-cooperating entities based on a distributed network. Background technique [0002] In recent years, with the rapid development of information technology and the popularization of Internet applications, more and more organizations collect and use a large amount of personal information, which brings convenience to people's life, but also illegal collection, abuse and disclosure of personal information And other issues, personal information security is facing serious threats. In response to personal information security issues, the National Information Security Standardization Technical Committee (SAC / TC260) formulated a new "Information Security Technology Personal Information Security Specifications GB / T 35273-2020, which clarifies the relevant behavioral requirements of...

AI Technical Summary

Problems solved by technology

Scenario 1 is a widely used user information transfer method, and there are a large number of related patents; Scenario 2, for example, patent CN103942502B "Ferry-style secure data exchange method and device" (hereinafter referred to as "existing patent 1") discloses a The main problem to be solved by the method of information transfer in a physically isolated network between cooperative entities is: there is a need for information transmission between offline cooperative institutions, but their storage media are all offline and cannot directly transmit information through the Internet; therefore, they are generally used Mobile storage media realizes information transmission offline

[0004] Online circulation of user information between non-cooperative entities (Scenario 4) has not yet been implemented with relevant solutions and technologies, mainly because the demand for online user information circulation between non-cooperative entities has emerged with the development of the Internet and the process of social informatization Therefore, the lack of its solutions and technologies is affected by factors such as historical reasons, the development process of cryptography and Internet technology, and the development of laws and regulations: in terms of technical implementation, it is necessary to solve the validity and integrity of user information under the premise of non-cooperation In terms of historical reasons, the continuous development of the Internet and social informatization has continuously strengthened the demand for efficient data transfer, while offline transfer methods are increasingly difficult to meet the needs of social and economic development; in terms of legal factors, it is necessary to ensure that relevant Solutions and technologies can comply with current and future information-related laws and regulations of different countries and regions

Images