A hardware encryption-based identity information configuration method and system

Abstract

The embodiment of the present application discloses a kind of identity information configuration method and system based on hardware encryption.The method comprises the following steps: when the server receives the identity certification request sent by the request object terminal, then based on the identity certification request, the target terminal information of the target user terminal currently needing to complete identity certification is determined;The server determines whether the request object terminal has the right to perform identity certification for the target user terminal based on the target terminal information, the request terminal information of the request object terminal and the pre-stored permission corresponding relationship;If yes, the server generates target user information based on the identity certification request, and sends the target user information to the target user terminal to make the target user terminal send the stored target user information to the health platform for identity information configuration when triggered;Wherein, the target user information is encrypted information.The technical scheme of the embodiment of the present application realizes the quick completion of identity information configuration, and improves the security and user experience.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of information processing technology, and in particular to a method and system for configuring identity information based on hardware encryption. Background Technology

[0002] In recent years, under the circumstances of epidemic prevention and control, people need information such as "health code" and "travel trajectory" when traveling to facilitate the tracing of virus transmission and play a very important role in the prevention and control of infection.

[0003] Currently, information such as "health codes" and "travel itineraries" are primarily processed on smartphones, requiring individuals to register their personal information through dedicated mobile apps or public accounts before the information can be displayed. However, operating smartphones presents difficulties for the elderly and certain special groups, hindering their ability to quickly and conveniently complete identity verification and display "health codes" and "travel itineraries" during travel, thus causing inconvenience for their journeys. Summary of the Invention

[0004] This invention provides a hardware-encrypted identity information configuration method and system, enabling identity verification without the target user's own operation. This facilitates identity verification for elderly people or certain special groups who have difficulty operating smartphones, allows for rapid access to health information, and improves the user experience.

[0005] In a first aspect, embodiments of the present invention provide a method for configuring identity information based on hardware encryption, including:

[0006] When the server receives an identity verification request from the requesting terminal, it determines the target terminal information of the target user terminal that needs to complete the identity verification based on the identity verification request.

[0007] The server determines whether the requesting terminal has the authority to authenticate the target user terminal based on the target terminal information, the requesting terminal information of the requesting object terminal, and the pre-stored permission correspondence.

[0008] If so, the server generates target user information based on the identity verification request and sends the target user information to the target user terminal so that the target user terminal, when triggered, sends the stored target user information to the health platform for identity information configuration;

[0009] The target user information is encrypted.

[0010] Secondly, embodiments of the present invention also provide a hardware-encrypted identity information configuration system, the system comprising a server, a requesting terminal, a target user terminal, and a health platform, wherein the server comprises:

[0011] The target terminal information determination module is used to determine the target terminal information of the target user terminal that needs to complete the identity verification based on the identity verification request when it receives the identity verification request sent by the requesting target terminal.

[0012] The permission determination module is used to determine whether the requesting terminal has the permission to authenticate the target user terminal based on the target terminal information, the requesting terminal information of the requesting object terminal, and the pre-stored permission correspondence; if so, it proceeds to the information sending module.

[0013] The information sending module is used to generate target user information based on the identity verification request, and send the target user information to the target user terminal so that the target user terminal, when triggered, sends the stored target user information to the health platform for identity information configuration;

[0014] The target user information is encrypted.

[0015] This invention provides a hardware-encrypted identity information configuration method. When a server receives an identity verification request from a requesting terminal, it determines the target terminal information of the target user terminal that needs to complete identity verification based on the identity verification request. The server then determines whether the requesting terminal has the authority to perform identity verification for the target user terminal based on the target terminal information, the requesting terminal information of the requesting terminal, and a pre-stored permission mapping. If so, the server generates target user information based on the identity verification request and sends it to the target user terminal so that the target user terminal, when triggered, sends the stored target user information to the health platform for identity information configuration. The target user information is encrypted. In this invention, the server generates target user information through the identity verification request sent by the requesting terminal and sends it to the target user terminal, thereby enabling the target user information to be obtained without the target user's own operation. When health information is needed, triggering the target user terminal will send the target user information to the health platform, providing convenience for elderly people or certain special groups who have difficulty operating smartphones to complete identity verification, achieving rapid access to health information, and improving security and user experience.

[0016] Furthermore, the hardware-encrypted identity information configuration system provided by this invention corresponds to the above-mentioned method and has the same beneficial effects. Attached Figure Description

[0017] To more clearly illustrate the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0018] Figure 1 A flowchart illustrating a hardware-encrypted identity information configuration method provided in this embodiment of the invention;

[0019] Figure 2 A flowchart illustrating another hardware-encrypted identity information configuration method provided in this embodiment of the invention;

[0020] Figure 3 This is a schematic diagram illustrating a health information acquisition process provided in an embodiment of the present invention;

[0021] Figure 4 A structural diagram of an epidemic prevention display device provided in an embodiment of the present invention;

[0022] Figure 5 This is a structural diagram of an identity information configuration system based on hardware encryption, provided in an embodiment of the present invention. Detailed Implementation

[0023] The present invention will now be described in further detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and not intended to limit it. Furthermore, it should be noted that, for ease of description, the accompanying drawings show only the parts relevant to the present invention, and not all of the structures.

[0024] It should also be noted that, for ease of description, the accompanying drawings show only the parts relevant to the invention and not all of them. Before discussing exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although the flowcharts describe the operations (or steps) as sequential processes, many of the operations can be performed in parallel, concurrently, or simultaneously. Furthermore, the order of the operations can be rearranged. The process can be terminated when its operation is completed, but it may also have additional steps not included in the drawings. The process may correspond to a method, function, procedure, subroutine, subprogram, etc.

[0025] To enable those skilled in the art to better understand the present invention, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0026] Example 1

[0027] Figure 1 This is a flowchart illustrating a hardware-encrypted identity information configuration method provided in an embodiment of the present invention. This method can be executed by a hardware-encrypted identity information configuration system, which can be implemented through software and / or hardware, and can be configured in a terminal and / or server to implement the hardware-encrypted identity information configuration method in this embodiment of the invention.

[0028] like Figure 1 As shown, the method in this embodiment may specifically include:

[0029] S101. When the server receives an identity verification request sent by the requesting terminal, it determines the target terminal information of the target user terminal that needs to complete the identity verification based on the identity verification request.

[0030] In practice, before a target user terminal can obtain the target user's health information, it needs to complete the identity verification of the target user corresponding to the target user terminal on the health platform. To improve the convenience of the target user's identity verification and reduce the number of steps, the identity verification of the target user can be achieved based on the identity verification request sent by the requesting terminal.

[0031] For example, the number of requesting terminals is at least one. The requesting terminal can establish a communication connection with the server used to manage each user terminal via Bluetooth, wireless mobile communication networks, and Wi-Fi (wireless network communication technology). The wireless mobile communication network may include at least one of 2G (2-Generation wireless telephone technology), 3G (3rd-Generation), 4G (4th-generation mobile communication technology), and 5G (5th-generation mobile communication technology). For example, the server may store user information, terminal information, and the permission mapping relationship between user terminals and requesting terminals.

[0032] Specifically, when a requesting terminal verifies the identity of a target user, it can generate an identity verification request based on the target user information and send the request to the server. Based on the received identity verification request, the server can determine the target terminal information of the target user terminal that needs to be verified. For example, the target terminal information includes at least one of the following: target terminal identifier, target terminal name, and communication records between the target terminal and the server. The target user information includes the target user's ID number, name, age, and gender.

[0033] S102. Based on the target terminal information, the requesting terminal information of the requesting object terminal, and the pre-stored permission correspondence, the server determines whether the requesting object terminal has the permission to authenticate the target user terminal; if so, proceed to S103.

[0034] In practice, the server can pre-store information on requesting terminals with editing permissions for the target user's identity information. By establishing the permission mapping between the target terminal information and the requesting terminal information, it can determine whether the currently received requesting terminal has the permission to complete the target user terminal's identity authentication. If it has permission, it can complete the identity authentication of the target user terminal according to the authentication request sent by the requesting terminal; otherwise, it sends a permission request instruction to the target user terminal to request editing permissions for the requesting terminal.

[0035] Specifically, based on the target terminal information, the server can determine the editing request target terminal with the permission to perform identity verification and editing operations on the target user terminal, as well as the editing request terminal information of each editing request target terminal, from the pre-stored permission mapping relationship. Based on the request target terminal currently sending the identity verification request, the server can determine the request terminal information of the current request target terminal, and compare the currently determined request terminal information with the information of each editing request terminal to determine whether there is any information in the information of each editing request terminal that is consistent with the currently determined request terminal information. If it is consistent, it means that the request target terminal currently sending the identity verification request has the permission to perform identity verification and editing operations on the target user terminal; if it is not consistent, it means that the request target terminal currently sending the identity verification request does not have the permission to perform identity verification and editing operations on the target user terminal.

[0036] Furthermore, the server can update the pre-stored permission mapping relationship based on the permission update request sent by the target user terminal. For example, the permission update request includes at least one of the following: adding a permission terminal, deleting a permission terminal, and modifying permission terminal information.

[0037] S103. The server generates target user information based on the identity verification request and sends the target user information to the target user terminal so that the target user terminal sends the stored target user information to the health platform for identity information configuration when triggered.

[0038] In practice, the server generates target user information based on the identity verification request and sends it to the target user terminal. Further, the target user terminal binds the target user information to itself and stores it locally. The target user information is encrypted using a hardware encryption chip embedded in the target user terminal, ensuring secure transmission. When the target user terminal is triggered, the encrypted target user information is sent to the health platform, allowing the platform to securely receive it, configure the target user's identity information based on this information, and determine the corresponding target health information to send to the target user terminal. It's important to note that since the target user terminal stores the target user information and is bound to it, triggering the target user terminal automatically sends the stored target user information to the health platform without requiring complex operations.

[0039] For example, the target user terminal displays the received target health information in a preset format. The preset format may include image, data table, and text formats. For instance, the target user terminal converts the target health information into a QR code image format and displays it on the display interface.

[0040] Optionally, it also includes: after receiving the target user information, the health platform configures the target user's identity information based on the target user information, determines the target health information corresponding to the target user information in the pre-established user health information database, and sends the target health information to the target user's terminal.

[0041] Specifically, a user health information database can be pre-established in the health platform to store users' health information, and target health information corresponding to the target user information can be identified in the user health information database.

[0042] Optionally, before configuring the identity information of the target user based on the target user information, the method further includes: the health platform determining whether the identity verification information of the target user is complete based on the target user information; if so, configuring the identity information of the target user based on the target user information.

[0043] Furthermore, if not, the health platform can generate a re-identification instruction and send it to the target user terminal so that the target user terminal can re-upload the target user information configured with user identity information; based on the updated target user information fed back by the target user terminal, the health platform determines the target health information corresponding to the target user terminal and sends the target health information to the target user terminal.

[0044] Furthermore, if the received updated target user information is still insufficient to complete the identification of the target user or the target user's identification information is still incomplete, an authentication failure instruction indicating the missing identification information can be sent to the target user's terminal, so that the target user's terminal can promptly detect the problem and avoid affecting daily needs such as travel.

[0045] Specifically, when a server receives an identity verification request, it can determine whether the request is legitimate and whether the target user information corresponding to the request is complete, thereby ensuring user information security and effectively managing the user terminal and the requesting terminal.

[0046] Optionally, embodiments of the present invention further include: the health platform obtaining the location information of the target user terminal, and updating the target health information of the target user terminal based on the location information.

[0047] In practice, the health platform can periodically acquire the location information of target user terminals and update the target user's health information based on this location information. It should be noted that the location information of the target user's terminal can determine the target user's movement trajectory. Based on this trajectory, it can be determined whether the target user has been in contact with individuals in hazardous areas, thus updating the target's health information. This allows for a more accurate and comprehensive assessment of the target user's health status and helps in the timely detection of health problems.

[0048] Optionally, the health platform obtains the location information of the target user terminal, including: the health platform establishes a connection with the positioning device corresponding to the target user terminal, and obtains the location information of the target user terminal monitored by the positioning device;

[0049] For example, the positioning device includes at least one of the Galileo satellite navigation system, the Global Positioning System, the BeiDou satellite navigation system, and the GLONASS satellite navigation system. The positioning device can be embedded in the target user terminal for real-time monitoring of the target user terminal's location information.

[0050] This invention provides a hardware-encrypted identity information configuration method. When a server receives an identity verification request from a requesting terminal, it determines the target terminal information of the target user terminal that needs to complete identity verification based on the identity verification request. The server then determines whether the requesting terminal has the authority to perform identity verification for the target user terminal based on the target terminal information, the requesting terminal information of the requesting terminal, and a pre-stored permission mapping. If so, the server generates target user information based on the identity verification request and sends it to the target user terminal so that the target user terminal, when triggered, sends the stored target user information to the health platform for identity information configuration. The target user information is encrypted. In this invention, the server generates target user information through the identity verification request sent by the requesting terminal and sends it to the target user terminal, thereby enabling the target user information to be obtained without the target user's own operation. When health information is needed, triggering the target user terminal will send the target user information to the health platform, providing convenience for elderly people or certain special groups who have difficulty operating smartphones to complete identity verification, achieving rapid access to health information, and improving security and user experience.

[0051] Example 2

[0052] Figure 2 This is a flowchart illustrating another hardware-encrypted identity information configuration method provided in this embodiment of the invention. This embodiment is based on and optimized from the aforementioned technical solutions. Optionally, it further includes: when the requesting terminal recognizes the identity invitation image displayed by the target user terminal, it displays an identity verification input interface; the requesting terminal generates an identity verification request based on the target terminal information and target user information received on the identity verification input interface, and sends the identity verification request to the server via wireless communication. Optionally, after sending the target user information to the target user terminal, it further includes: the target user terminal stores the target user information, and when it detects that the start button is triggered, it sends the target user information to the health platform. When the requesting terminal recognizes the identity invitation image displayed by the target user terminal, it displays an identity verification input interface; the requesting terminal generates an identity verification request based on the target terminal information and target user information received on the identity verification input interface, and sends the identity verification request to the server via wireless communication. Optionally, upon receiving a health information retrieval request from a target user terminal, before sending the target health information corresponding to the target user terminal to the target user terminal, the method further includes: when the target user terminal detects that the start button has been triggered, generating a health information retrieval request containing target terminal information, and sending the health information retrieval request to the server. The explanations of terms that are the same as or corresponding to those in the above embodiments will not be repeated here.

[0053] like Figure 2 As shown, the method in this embodiment may specifically include:

[0054] S201. When the requesting terminal recognizes the authentication invitation image displayed by the target user terminal, it displays the authentication entry interface; the requesting terminal generates an authentication request based on the target terminal information and target user information received in the authentication entry interface, and sends the authentication request to the server via wireless communication.

[0055] In practice, the requesting terminal can complete the identification of the target user through two methods: local configuration and remote configuration. For local configuration, the requesting terminal can recognize the identification invitation image displayed by the target user terminal. For example, the identification invitation image can be displayed in the form of a QR code. After recognizing the information in the identification invitation image, the requesting terminal displays an identification entry interface on the display device. The requesting party can input target terminal information and target user information on the identification entry interface using an input device; the target user information includes at least one of the target user's name, ID number, and contact information. Based on the received target terminal information and target user information, the requesting terminal generates an identification request and sends the identification request to the server via wireless communication.

[0056] S202. When the server receives an identity verification request sent by the requesting terminal, it determines the target terminal information of the target user terminal that needs to complete the identity verification based on the identity verification request.

[0057] S203. Based on the target terminal information, the requesting terminal information of the requesting object terminal, and the pre-stored permission correspondence, the server determines whether the requesting object terminal has the permission to authenticate the target user terminal; if so, proceed to S204.

[0058] S204. The server generates target user information based on the identity verification request and sends the target user information to the target user terminal.

[0059] S205. The target user terminal stores the target user information and, upon detecting that the start button is triggered, sends the target user information to the health platform for identity information configuration.

[0060] In practice, when a target user terminal needs to obtain the target user's target health information, it can do so by clicking or pressing a start button embedded on the target user terminal. When the start button is detected to be triggered, the locally stored target user information can be sent to the health platform via wireless communication. The health platform then configures the target user's identity information based on the received target user information and can obtain the corresponding target health information and feed it back to the target user terminal.

[0061] In this embodiment of the invention, the target user can complete the configuration of identity information and the acquisition of health information by simply operating the start button, which is convenient and simple and improves convenience; the requesting terminal can obtain and display the information of the identity verification entry interface by recognizing the recognition invitation image, which improves the efficiency of completing the identity verification process and enhances the user experience.

[0062] Example 3

[0063] The embodiments of the hardware-encrypted identity information configuration method have been described in detail above. In order to enable those skilled in the art to further understand the technical solution of this method, the following description takes the process of obtaining a health code in an epidemic prevention application scenario as an example.

[0064] Figure 3 This is a schematic diagram of a health information acquisition process provided by an embodiment of the present invention; as shown below. Figure 3 As shown, the epidemic prevention display device can serve as a target user terminal, displaying the target user's health code. In specific implementations, the device identification number of the epidemic prevention display device and the ID number of the target user can be entered by the requesting terminal. Identity verification of the target user can be completed through local configuration and / or remote configuration. For example, the processes of local configuration and remote configuration are as follows:

[0065] 1. Local configuration method: The requesting terminal establishes a connection with the server via Bluetooth or WIFI, and scans the invitation QR code displayed on the epidemic prevention display device for identity verification to enter the epidemic prevention mini-program or epidemic prevention official account, and enters the target user's identity information, the device identification number of the epidemic prevention display device, etc., thereby binding the target user information used for target user identity configuration to the epidemic prevention display device.

[0066] 2. Remote Configuration Method: The requesting terminal logs into an application, mini-program, or official account. The system transmits the target user's identity information and the device identification number of the epidemic prevention display device to the server via wireless mobile communication. The server then sends the target user information to the target user's terminal, completing the binding between the target user terminal and the target user information. Wireless mobile communication methods include 4G or 5G. When the epidemic prevention display device is activated, it can automatically send the target user information to the epidemic prevention information server to obtain the target user's health information. For example, the epidemic prevention information server can be a health platform.

[0067] Furthermore, when a user wants to access target health information through the epidemic prevention display device, the user simply presses or clicks the start button on the device. After a single button press, the pre-bound target user information is uploaded to the epidemic prevention information server for identity verification, and the latest epidemic prevention information, namely the user's health information, is downloaded and displayed on the device as a QR code image. This information includes the user's health status, vaccination record, and other relevant data. For epidemic prevention display devices using remote configuration, a single button press directly retrieves the user's health information stored on the epidemic prevention information server.

[0068] Furthermore, the epidemic prevention display device can automatically obtain user health information from the epidemic prevention information server at regular intervals and refresh the displayed QR code image at regular intervals; when the display time reaches a preset threshold, the epidemic prevention display device can automatically turn off the screen and enter automatic sleep mode, realizing long standby of the epidemic prevention display device and saving the power of the epidemic prevention display device.

[0069] Figure 4 A structural diagram of an epidemic prevention display device provided in an embodiment of the present invention; as shown. Figure 4 As shown, the epidemic prevention display device mainly includes a control unit, a display unit, a user operation unit, a wireless mobile communication unit, a satellite communication unit, a power management unit, and a battery charging unit. The functions of each unit are described below:

[0070] Control Unit: Responsible for monitoring user operations. When the start button is pressed, it turns on the display screen, automatically connects to the wireless mobile communication unit, and retrieves the user's health information from the epidemic prevention information server, sending it to the display unit for display. Simultaneously, it connects to the satellite communication unit, obtains the current location information detected by the satellite communication unit, and uploads it to a designated server. Furthermore, it is responsible for internal power management and battery charging management, enabling automatic sleep and standby management.

[0071] Wireless mobile communication unit: including 2G, 3G, 4G and 5G wireless mobile communication methods, which can use IoT chip cards or user identification cards to transmit the control unit's instructions and data to the epidemic prevention information server or download data from the epidemic prevention information server.

[0072] Satellite communication unit: including Galileo satellite navigation system, Global Positioning System, BeiDou satellite navigation system and GLONASS satellite navigation system, responsible for sending positioning data to the control unit.

[0073] Display unit: including LCD screen, e-ink screen, light-emitting diode screen, etc., responsible for displaying the control unit's data to the user.

[0074] User operation unit: responsible for converting user operations into data and sending it to the control unit. The implementation methods include, but are not limited to, common methods such as touch screen and buttons.

[0075] Power Management Unit: Responsible for power conversion of each unit in the epidemic prevention display device.

[0076] Battery charging management unit: responsible for battery charging management, including but not limited to all lithium-ion batteries, nickel-metal hydride batteries, and disposable batteries.

[0077] In this embodiment of the invention, the target user can complete the acquisition of health information simply by operating the start button, which is convenient and simple and improves the ease of obtaining health information; it also provides convenience for elderly people or some special groups who have difficulty operating smartphones to complete identity verification, thus improving the user experience.

[0078] Example 4

[0079] Figure 5 This is a structural diagram of a hardware-encrypted identity information configuration system provided in an embodiment of the present invention. This system is used to execute the hardware-encrypted identity information configuration method provided in any of the above embodiments. This system and the hardware-encrypted identity information configuration methods in the above embodiments belong to the same inventive concept. Details not described in detail in the system embodiments can be found in the embodiments of the hardware-encrypted identity information configuration methods described above. The system includes a server 10, a requesting terminal 11, a target user terminal 12, and a health platform 13, wherein the server 10 includes:

[0080] The target terminal information determination module 101 is used to determine the target terminal information of the target user terminal 12 that needs to complete the identity verification based on the identity verification request when it receives the identity verification request sent by the requesting target terminal 11.

[0081] The permission determination module 102 is used to determine whether the requesting terminal 11 has the permission to authenticate the target user terminal 12 based on the target terminal information, the requesting terminal information of the requesting terminal 11, and the pre-stored permission correspondence; if so, it proceeds to the information sending module.

[0082] The information sending module 103 is used to generate target user information based on the identity authentication request and send the target user information to the target user terminal 12 so that the target user terminal 12 sends the stored target user information to the health platform 13 for identity information configuration when it is triggered;

[0083] The target user information is encrypted.

[0084] Based on any optional technical solution in the embodiments of the present invention, the health platform may optionally include:

[0085] The target health information sending unit is used to receive target user information, configure the target user's identity information based on the target user information, determine the target health information corresponding to the target user information in the pre-established user health information database, and send the target health information to the target user terminal.

[0086] Based on any of the optional technical solutions in the embodiments of the present invention, the health platform may optionally further include:

[0087] The information integrity verification unit is used to determine whether the identity verification information of the target user is complete before configuring the identity information of the target user based on the target user information; if so, the target user's identity information is configured based on the target user information.

[0088] Based on any of the optional technical solutions in the embodiments of the present invention, the health platform may optionally further include:

[0089] The location information acquisition module is used to acquire the location information of the target user terminal and update the target health information of the target user terminal based on the location information.

[0090] Based on any optional technical solution in the embodiments of the present invention, the location information acquisition module optionally includes:

[0091] The connection establishment unit is used to establish a connection with the positioning device corresponding to the target user terminal and to obtain the location information of the target user terminal monitored by the positioning device.

[0092] The positioning equipment includes at least one of the Galileo satellite navigation system, the Global Positioning System, the BeiDou satellite navigation system, and the GLONASS satellite navigation system.

[0093] Based on any optional technical solution in the embodiments of the present invention, optionally, the requesting target terminal includes:

[0094] The identification module is used to display the identity verification and entry interface when it recognizes the identity verification invitation image displayed on the target user terminal.

[0095] The request sending module is used to generate an identity verification request based on the target terminal information and target user information received in the identity verification entry interface, and send the identity verification request to the server via wireless communication.

[0096] Based on any optional technical solution in the embodiments of the present invention, the target user terminal may optionally include:

[0097] The health information acquisition request generation module is used to store the target user information after sending it to the target user terminal, and to send the target user information to the health platform for identity information configuration when the start button is triggered.

[0098] The hardware-encrypted identity information configuration system provided in this invention can implement the following method: When the server receives an identity verification request sent by a requesting terminal, it determines the target terminal information of the target user terminal that needs to complete identity verification based on the identity verification request; the server determines whether the requesting terminal has the permission to perform identity verification for the target user terminal based on the target terminal information, the requesting terminal information of the requesting terminal, and the pre-stored permission correspondence; if so, the server generates target user information based on the identity verification request and sends the target user information to the target user terminal so that the target user terminal, when triggered, sends the stored target user information to the health platform for identity information configuration; wherein, the target user information is encrypted information. In this invention, the server generates target user information through the identity verification request sent by the requesting terminal and sends the target user information to the target user terminal, thereby realizing that the target user information can be obtained without the target user's own operation. When health information needs to be obtained, the target user terminal can be triggered to send the target user information to the health platform, which provides convenience for elderly people or some special groups who have difficulty operating smartphones to complete identity verification, realizes rapid access to health information, and improves security and user experience.

[0099] It is worth noting that in the above embodiments of the identity information configuration system based on hardware encryption, the various units and modules included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be achieved; in addition, the specific names of each functional unit are only for easy differentiation and are not used to limit the scope of protection of the present invention.

[0100] Note that the above description is merely a preferred embodiment of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions can be made without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and may include many other equivalent embodiments without departing from the concept of the present invention, the scope of which is determined by the scope of the appended claims.

Claims

1. A hardware encryption-based identity information configuration method, characterized by, The method comprises the following steps: When the server receives an identity authentication request sent by a request object terminal, target terminal information of a target user terminal currently required to complete identity authentication is determined based on the identity authentication request; The server determines whether the request object terminal has the right to perform identity authentication on the target user terminal based on the target terminal information, request terminal information of the request object terminal, and a pre-stored right correspondence; If yes, the server generates target user information based on the identity authentication request and sends the target user information to the target user terminal to enable the target user terminal to send the stored target user information to a health platform to configure identity information when triggered; The target user information is encrypted information; The server determines whether the request object terminal has the right to perform identity authentication on the target user terminal based on the target terminal information, request terminal information of the request object terminal, and a pre-stored right correspondence, which comprises the following steps: The server determines a plurality of editing request object terminals having the right to perform identity authentication editing operation on the target user terminal and editing request terminal information corresponding to the plurality of editing request object terminals in the pre-stored right correspondence based on the target terminal information, determines the request terminal information of the request object terminal based on the request object terminal, compares the request terminal information with the plurality of editing request terminal information, and determines whether the request object terminal has the right to perform identity authentication on the target user terminal.

2. The method of claim 1, wherein, The method further comprises the following steps: After the health platform receives the target user information, the target user is configured with identity information based on the target user information, target health information corresponding to the target user information is determined in a pre-established user health information library, and the target health information is sent to the target user terminal.

3. The method of claim 2, wherein, Before the target user is configured with identity information based on the target user information, the method further comprises the following steps: The health platform determines whether the identity authentication information of the target user is complete based on the target user information; If yes, the target user is configured with identity information based on the target user information.

4. The method of claim 1, wherein, The method further comprises the following steps: The health platform acquires location information of the target user terminal and updates the target health information of the target user terminal based on the location information.

5. The method of claim 4, wherein, The health platform acquires location information of the target user terminal, which comprises the following steps: The health platform establishes a connection with a positioning device corresponding to the target user terminal and acquires location information of the target user terminal monitored by the positioning device; The positioning device comprises at least one of a Galileo satellite navigation system, a global positioning system, a Beidou satellite navigation system, and a GLONASS satellite navigation system.

6. The method of claim 1, wherein, The method further comprises the following steps: When the request object terminal identifies an authentication invitation image displayed by the target user terminal, an identity authentication entry interface is displayed. The request object terminal generates the identity certification request based on the target terminal information and the target user information received at the identity certification entry interface, and sends the identity certification request to the server through a wireless communication mode.

7. The method of claim 1, wherein, After the server generates the target user information based on the identity certification request and sends the target user information to the target user terminal, the method further comprises: The target user terminal stores the target user information, and when a start key is triggered, sends the target user information to the health platform for identity information configuration.

8. A hardware encryption-based identity information configuration system, characterized by comprising: The system comprises a server, a request object terminal, a target user terminal and a health platform, wherein the server comprises: A target terminal information determination module, configured to, when receiving an identity certification request sent by a request object terminal, determine target terminal information of a target user terminal currently requiring identity certification based on the identity certification request; An authority determination module, configured to determine whether the request object terminal has the authority to perform identity certification for the target user terminal based on the target terminal information, request terminal information of the request object terminal and a pre-stored authority correspondence relationship; if yes, proceed to an information sending module; The information sending module is configured to generate target user information based on the identity certification request, and send the target user information to the target user terminal so that the target user terminal sends the stored target user information to the health platform for identity information configuration when triggered; The target user information is encrypted information; The authority determination module is specifically configured to: Based on the target terminal information, determine a plurality of editing request object terminals having the authority to perform identity certification editing operation for the target user terminal and editing request terminal information corresponding to the plurality of editing request object terminals in the pre-stored authority correspondence relationship, determine the request terminal information of the request object terminal based on the request object terminal, compare the request terminal information with the plurality of editing request terminal information, and determine whether the request object terminal has the authority to perform identity certification for the target user terminal.

9. The system of claim 8, wherein, The health platform comprises: A target health information sending unit, configured to, after receiving the target user information, perform identity information configuration on a target user based on the target user information, determine target health information corresponding to the target user information in a pre-established user health information library, and send the target health information to the target user terminal.

10. The system of claim 9, wherein, The health platform further comprises: An information completeness confirmation unit, configured to, before performing identity information configuration on a target user based on the target user information, determine whether identity certification information of the target user is complete based on the target user information; if yes, perform identity information configuration on the target user based on the target user information.

Images