Electronic ticket generation and verification system based on network trusted identity

Abstract

The invention relates to the field of identity verification, in particular to an electronic ticket generation and verification system based on a network trusted identity, which comprises a verification analysis module used for responding to an authentication update condition to determine the category of each target verification identity; the node analysis module is used for responding to the node state condition to determine the node state of each key analysis node and determining a node analysis strategy according to the node state; the first node execution module is used for responding to the combination division condition to determine a combination division mode and determine a combination analysis mode of each node analysis combination; the second node execution module is used for responding to the flow verification condition to judge whether abnormal communication analysis is carried out on the associated node or not; and the ticket processing module is used for generating a target electronic ticket and a target identity verification code and determining whether to respond to the permission application or not according to the permission authentication coefficient. According to the invention, the accuracy of a reliability judgment result of node monitoring and the management efficiency of the passing permission are improved.

Description

Technical Field

[0001] The present invention relates to the field of identity authentication, and in particular to an electronic ticket generation and verification system based on network trusted identity. Background Art

[0002] Currently, the generation and verification operations of electronic tickets are based on the network verification results of the verification target, and real-time monitoring is performed on the network nodes that perform network identity authentication to ensure the reliability of the identity authentication results of the network nodes. This can effectively improve the accuracy of the electronic ticket generation and verification results. However, the operation status of the network nodes and the connection relationship between the network nodes can easily affect the judgment results of the reliability of the network nodes. Therefore, how to determine the targeted node analysis method based on the actual nodes to improve the reliability of the monitoring results of the network nodes is an urgent problem to be solved by technical personnel in this field.

[0003] Chinese Patent Application Publication No. CN115643047A discloses a blockchain identity authentication method based on integrity rewards, which includes: a user client sends an identity authentication request to an authentication blockchain network. The authentication blockchain network arranges for the three nodes that first secure the authentication process to perform the authentication process. If the number of suspicious nodes among the three authentication nodes that first secure the authentication process exceeds the number of trusted nodes, or if the authentication results of the three authentication nodes are inconsistent, a credibility randomization algorithm is used to randomly select several nodes from the trusted nodes for a second identity authentication, ensuring that the number of trusted nodes exceeds the number of suspicious nodes and that the final result has a majority of votes. Finally, the authentication blockchain network returns the final result to the client and performs the identity authentication reward. Chinese Patent Publication No. CN117974170A discloses a scenic spot data management method and system based on electronic ticket verification, belonging to the field of encrypted communication technology. In this scenic spot data management method based on electronic ticket verification, a mobile device sends a first ciphertext and a second ciphertext to a scenic spot terminal. The scenic spot terminal decrypts the first and second ciphertexts to verify the mobile device's access rights. After ticket verification, the mobile device encrypts the purchase code according to a third encryption parameter to generate a third ciphertext. The resource server generates a third private key based on the master key. The resource server decrypts the third ciphertext using the third private key to obtain the ticket purchase code, and then pushes the multimedia data to the mobile device. The above technical solution suffers from the following issues: It fails to further analyze the reliability of network nodes based on the connectivity between them in actual work scenarios, resulting in low accuracy in determining the reliability of node monitoring. Summary of the Invention

[0004] To this end, the present invention provides an electronic ticket generation and verification system based on network trusted identity to overcome the problem in the prior art that the reliability of network nodes is not further analyzed according to the connection conditions between network nodes in actual working scenarios, resulting in low accuracy of the reliability judgment results of node monitoring.

[0005] To achieve the above objectives, the present invention provides an electronic ticket generation and verification system based on a network trusted identity, comprising: a verification analysis module for determining a category of each target verification identity in response to the authentication update condition; a node analysis module connected to the verification analysis module, for periodically responding to node status conditions to determine the node status of each key analysis node, and responding to the node status of each key analysis node to determine a node analysis strategy, wherein the node analysis strategy is to perform analysis combination settings for the key analysis nodes, or to perform associated node analysis for the key analysis nodes; a first node execution module, connected to the node analysis module, for responding to a combination division condition to determine a combination division method, and for responding to different division conditions to determine a combination analysis method for each node analysis combination, the combination analysis method including determining a verification reliability coefficient based on a proportion of key monitoring nodes and a reference monitoring coefficient, and determining a verification reliability coefficient based on a reference association duration and a reference density coefficient; a second node execution module, connected to the node analysis module, for responding to a traffic verification condition to determine whether to perform abnormal communication analysis on a node associated with the key analysis node, and determining whether the key analysis node can perform network identity authentication based on a reference abnormal communication coefficient; A ticket processing module is respectively connected to the verification analysis module, the first node execution module and the second node execution module. The ticket processing module includes a ticket generation unit and a ticket verification unit, wherein the ticket generation unit is used to generate a target electronic ticket and a target identity verification code, and the ticket verification unit determines whether to respond to the permission application based on the permission authentication coefficient of the target verification person.

[0006] Further, the verification analysis module is responsive to the authentication update condition to periodically determine the category of each target verification identity; Verify identity against a single target, If the authentication update condition responded by the verification analysis module is that the authority change coefficient is greater than the preset authority change coefficient or the authentication duration coefficient is greater than the preset authentication duration coefficient, then the target authentication identity is determined to be an authentication update identity; If the authentication update condition responded by the verification analysis module is that the authority change coefficient is less than or equal to the preset authority change coefficient and the authentication duration coefficient is less than or equal to the preset authentication duration coefficient, the target verification identity is determined to be a regular verification identity.

[0007] Further, the node analysis module is responsive to the node status condition to periodically determine the node status of each key analysis node; For a single key analysis node, If the node status condition responded by the node analysis module is that the verification update ratio is greater than the preset verification update ratio or the node communication parameter is greater than the preset node communication parameter, it is determined that the key analysis node is in the first preset node state; If the node status condition responded by the node analysis module is that the verification update ratio is less than or equal to the preset verification update ratio and the node communication parameter is less than or equal to the preset node communication parameter, it is determined that the key analysis node is in the second preset node state; The key analysis node is a network authentication node that needs to perform network identity authentication for verifying the updated identity.

[0008] Furthermore, the node analysis module responds to the node status of each key analysis node to periodically determine the node analysis strategy of each key analysis node; If the node analysis condition responded by the node analysis module is that the key analysis node is in the first preset node state, it is determined to perform analysis combination setting on the key analysis node; The node analysis condition responded by the node analysis module is that the key analysis node is in the second preset node state, and then it is determined to perform association analysis on the key analysis node.

[0009] Furthermore, the first node execution module performs node analysis combination division on the key analysis node and its associated nodes in response to the first node analysis condition; The first node execution module determines a combination partitioning mode in response to the combination partitioning condition; If the combination division condition of the response of the first node execution module is that the proportion of central nodes is greater than the preset proportion of central nodes, the node analysis combination is determined according to the topological connection coefficient; If the combination division condition of the response of the first node execution module is that the proportion of central nodes is less than or equal to the preset proportion of central nodes, the node analysis combination is determined according to the node density coefficient; The first node analysis condition is that the node analysis module determines to perform analysis combination setting for a key analysis node.

[0010] Furthermore, the first node execution module determines the key monitoring coefficient of each associated central node in response to the first division condition according to the key communication frequency and the associated difference coefficient to determine the key monitoring node; Determine the verification reliability coefficient of key analysis nodes based on the proportion of key monitoring nodes and reference monitoring coefficients; The first division condition is that a node analysis combination is determined according to a topological connection coefficient, and a reference topological connection coefficient of the node analysis combination is greater than a preset reference topological connection coefficient.

[0011] Furthermore, the first node execution module determines, in response to the second division condition, a verification reliability coefficient of a key analysis node corresponding to the node analysis combination according to a reference association duration and a reference density coefficient; The verification reliability coefficient is positively correlated with the reference association duration and the reference density coefficient respectively; The second division condition is that a node analysis combination is determined according to a node density coefficient, and a reference density coefficient of the node analysis combination is greater than a preset reference density coefficient.

[0012] Furthermore, the second node execution module detects the communication message ratio of each associated node of the key analysis node in response to the second node analysis condition, and determines the abnormal ratio difference coefficient of the key analysis node according to the communication message ratio of each associated node; If the traffic verification condition responded by the second node execution module is that the abnormal proportion difference coefficient is greater than the preset abnormal proportion difference coefficient, it is determined to perform abnormal communication analysis on the associated nodes of the key analysis node; The second node analysis condition is that the node analysis module determines to perform association analysis on a key analysis node.

[0013] Furthermore, the second node execution module responds to the abnormal analysis condition and determines the abnormal communication coefficient of each associated node of the key analysis node according to the associated connection frequency and the traffic difference parameter; If the node determination condition responded by the second node execution module is that the reference abnormal communication coefficient is less than the preset reference abnormal communication coefficient, the key analysis node is determined to be a verification node; The reference abnormal communication coefficient is the average value of the abnormal communication coefficients of each associated node of the key analysis node; The abnormal analysis condition is that the second node execution module determines to perform abnormal communication analysis on the associated nodes of a key analysis node.

[0014] Furthermore, the ticket generation unit generates a target electronic ticket and a target identity verification code based on the target verification identity in response to the verification completion condition, and sends the target electronic ticket and the target identity verification code together to the target verification person corresponding to the target verification identity; The ticket verification unit responds to the authority authentication condition and determines the authority authentication coefficient of the target verification person based on the reference feature similarity and the authority range matching degree; The permission response condition responded by the ticket verification unit is that the permission authentication coefficient of a target verification person is greater than the preset permission authentication coefficient, and then the permission application of the target verification person is determined to be responded to; The verification completion condition is that a target verification identity is a regular verification identity or a verification update identity completes the verification update process, and the authority authentication condition is that the ticket verification unit obtains the authority application of a target verification person.

[0015] Compared with the prior art, the beneficial effect of the present invention lies in that the node analysis module in the technical solution of the present invention determines the degree of influence of each key analysis node on the overall authentication result and its own influence on other network authentication nodes based on the verification update ratio and the node communication parameters, and determines the corresponding targeted node analysis strategy, so that the analysis process of each key analysis node is more in line with the actual work scenario, further improving the effectiveness of the monitoring results of the network authentication nodes in the target management park, thereby reducing the risk of authentication errors in the target management park, and the present invention improves the management efficiency of the access rights of the target management park.

[0016] Furthermore, the present invention determines the node status of each key analysis node based on the verification update ratio and the node communication parameters, which is used to characterize the degree of influence of each key analysis node on the overall management process of the target management park and the degree to which it is susceptible to the influence of other network nodes, so that the subsequent selection of node analysis strategies is more in line with the needs of actual work scenarios, so as to improve the effectiveness of the monitoring results of network authentication nodes.

[0017] Furthermore, in the present invention, for the key analysis nodes in the first preset node state, the corresponding node analysis combination division method and the subsequent combination analysis method are determined according to the central node proportion of each key analysis node. Since the key analysis nodes in the first preset node state have a greater impact on the overall management process of the target management park or are more susceptible to the influence of associated nodes, a combination analysis is performed on such key analysis nodes, and targeted analysis methods are determined for different node analysis combinations. This can effectively improve the effectiveness of the monitoring results of the network authentication nodes in the target management park, thereby improving the management efficiency of the access rights of the target management park.

[0018] Furthermore, in the present invention, for the key analysis node in the second preset node state, it is determined whether to perform further abnormal communication analysis based on the difference in the proportion of communication messages of the associated nodes of the key analysis node, and the credibility of the key analysis node is determined based on the obtained abnormal communication coefficient. Since the key analysis node in the second preset node state has a smaller impact on the overall management process of the target management park and is not easily affected by the associated nodes, the reliability of the key analysis node is determined based on the difference in the proportion of communication messages between its different associated nodes, which improves the analysis efficiency while ensuring the validity of the monitoring results of the corresponding network authentication node. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 This is a module connection diagram of the electronic ticket generation and verification system based on network trusted identity of the present invention; Figure 2 A flow chart of the node analysis module of the present invention determining the node status of each key analysis node in response to the node status condition; Figure 3 A flowchart of a node analysis strategy for determining each key analysis node by a node analysis module of the present invention in response to a node status; Figure 4 This is a flowchart of the first node execution module of the present invention responding to the combination partitioning condition to determine the combination partitioning method. DETAILED DESCRIPTION

[0020] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are merely used to explain the present invention and are not intended to limit the present invention.

[0021] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the scope of protection of the present invention.

[0022] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside", and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the accompanying drawings. This is only for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation on the present invention.

[0023] Furthermore, it should be noted that, in the description of the present invention, unless otherwise expressly specified or limited, the terms "mounted," "connected," and "connected" should be understood in a broad sense. For example, they may refer to fixed connections, detachable connections, or integral connections; mechanical connections or electrical connections; direct connections or indirect connections through an intermediate medium; and internal communication between two components. Those skilled in the art will understand the specific meanings of the above terms in the present invention based on specific circumstances.

[0024] See also Figures 1 to 4 As shown, the present invention provides an electronic ticket generation and verification system based on network trusted identity, comprising: a verification analysis module for determining a category of each target verification identity in response to the authentication update condition; a node analysis module connected to the verification analysis module, for periodically responding to node status conditions to determine the node status of each key analysis node, and responding to the node status of each key analysis node to determine a node analysis strategy, wherein the node analysis strategy is to perform analysis combination settings for the key analysis nodes, or to perform associated node analysis for the key analysis nodes; a first node execution module, connected to the node analysis module, for responding to a combination partitioning condition to determine a combination partitioning method, and in response to different partitioning conditions, determining a combination analysis method for each node analysis combination to determine a verification reliability coefficient of a key analysis node, wherein the combination analysis method includes determining the verification reliability coefficient based on a proportion of key monitoring nodes and a reference monitoring coefficient, and determining the verification reliability coefficient based on a reference association duration and a reference density coefficient; a second node execution module, connected to the node analysis module, for responding to a traffic verification condition to determine whether to perform abnormal communication analysis on a node associated with the key analysis node, and determining whether the key analysis node can perform network identity authentication based on a reference abnormal communication coefficient; A ticket processing module is connected to the verification analysis module, the first node execution module and the second node execution module. The ticket processing module includes a ticket generation unit and a ticket verification unit, wherein the ticket generation unit is used to generate a target electronic ticket and a target identity verification code, and the ticket verification unit determines whether to respond to the permission application based on the permission authentication coefficient of the target verification person.

[0025] The present invention is used to manage access rights in a park. While ensuring the effectiveness of access management within the park through electronic tickets, it can also improve the flexibility of the management process. It is understandable that the park described in the present invention requires personnel to verify their identities and access rights through corresponding authentication methods before they can enter the park and specific locations within the park. The park that requires communication authority management is recorded as a target management park, and the personnel who need to obtain access rights in the target management park are recorded as target verification personnel. Each target verification personnel has a corresponding target verification identity. The information contained in the target verification identity contains the authentication time of each time and the access rights of the corresponding target verification personnel. The access rights are the areas that can be passed set for the target verification personnel. Several communication management records are applied in the present invention, and any access management record records the authority change coefficient, authentication time coefficient, verification update ratio, node communication parameters, central node ratio, reference topology connection coefficient, key monitoring coefficient, verification reliability coefficient of each verification node, reference density coefficient, abnormality ratio difference coefficient, reference abnormal communication coefficient and authority authentication coefficient in the process of communication authority management for a target management park at least once, and each access management record corresponds to a qualified mark, which records whether the management efficiency of the communication authority of the target management park meets user needs.

[0026] Specifically, the verification analysis module is responsive to the authentication update condition to periodically determine the category of each target verification identity; Verify identity against a single target, If the authentication update condition responded by the verification analysis module is that the authority change coefficient is greater than the preset authority change coefficient or the authentication duration coefficient is greater than the preset authentication duration coefficient, then the target authentication identity is determined to be an authentication update identity; If the authentication update condition responded by the verification analysis module is that the authority change coefficient is less than or equal to the preset authority change coefficient and the authentication duration coefficient is less than or equal to the preset authentication duration coefficient, the target verification identity is determined to be a regular verification identity.

[0027] Among them, for a single target verification identity, the authority change coefficient = the area of ​​the changed authority area / the area of ​​the area included in the access authority set for the target verification identity, the changed authority area is the area of ​​the newly added area in the communication authority corresponding to the target verification identity at the end time of the current identity authentication cycle compared to the end time of the previous identity authentication cycle, the authentication time coefficient = ln (authentication update frequency / authentication interval duration), the authentication update frequency is the number of times the target verification identity completes the authentication update within the preset frequency analysis duration, the value of the preset frequency analysis duration can be determined by the user according to the actual work scenario, for example, the user can set it according to historical analysis records. The higher the user's requirements for the management efficiency of the communication authority of the target management park, the greater the value of the preset frequency analysis time. A value of the preset frequency analysis time is provided. The value of the preset frequency analysis time is 10 times the duration of the current identity authentication cycle. The authentication interval is the interval between the current moment and the most recent authentication update moment of the target authentication identity. The authentication update moment is when any network authentication node completes the authentication update for the target authentication identity, that is, the network authentication node verifies the information contained in the target authentication identity. How the network authentication node verifies the information contained in the target authentication identity is content that can be easily understood by those skilled in the art. The values ​​of the preset authority change coefficient and the preset authentication time coefficient can be determined by the user according to the actual work scenario. For example, the user can set them according to the historical analysis records. The higher the user's requirements for the management efficiency of the communication authority of the target management park, the smaller the value of the preset authority change coefficient and the smaller the value of the preset authentication time coefficient. A method for determining the value of the preset authority change coefficient is provided, and the minimum value of the authority change coefficient for verifying and updating the identity in the historical analysis records that meet the user's requirements for the management efficiency of the communication authority of the target management park is recorded as the preset authority change coefficient. A method for determining the value of the preset authentication time coefficient is provided, and the minimum value of the authentication time coefficient for verifying and updating the identity in the historical analysis records that meet the user's requirements for the management efficiency of the communication authority of the target management park is recorded as the preset authentication time coefficient. The present invention applies a cyclic identity authentication cycle, and the duration of the identity authentication cycle can be determined by the user. The higher the user's requirements for the management efficiency of the communication authority of the target management park, the shorter the duration of the identity authentication cycle. An identity authentication cycle duration is provided, and the identity authentication cycle is 1 hour. The end time of each identity authentication cycle is judged according to the category of each target verification identity.

[0028] Specifically, the node analysis module is responsive to the node status condition to periodically determine the node status of each key analysis node; For a single key analysis node, If the node status condition responded by the node analysis module is that the verification update ratio is greater than the preset verification update ratio or the node communication parameter is greater than the preset node communication parameter, it is determined that the key analysis node is in the first preset node state; If the node status condition responded by the node analysis module is that the verification update ratio is less than or equal to the preset verification update ratio and the node communication parameter is less than or equal to the preset node communication parameter, it is determined that the key analysis node is in the second preset node state; The key analysis node is a network authentication node that needs to perform network identity authentication for verifying the updated identity.

[0029] Among them, there are several network authentication nodes in the present invention, which are used to store and verify and update various types of information contained in each target verification identity. For a single key analysis node, the verification update ratio = the number of verification update identities that the key analysis node needs to complete verification and update / the number of target verification identities stored in the key analysis node. The node communication parameters are determined according to the number of associated nodes of the key analysis node and the reference association coverage. The node communication parameters are the sum of the products of the number of associated nodes and the reference association coverage with the corresponding influence coefficients. The associated nodes are network authentication nodes that have communication connections with the key analysis node. The reference association coverage is the average value of the number of network authentication nodes that have communication connections with each associated node. The number of associated nodes and the value of the influence coefficient corresponding to the reference association coverage can be determined by the user according to the actual work scenario. The value of the influence coefficient corresponding to the number of associated nodes and the reference association coverage is provided. The value of the influence coefficient corresponding to the number of associated nodes is 0.6, and the value of the influence coefficient corresponding to the reference association coverage is 0.4; The preset verification update ratio and the value of the preset node communication parameter can be determined by the user according to the actual working scenario. For example, the user can set it according to the historical analysis record. The higher the user's requirement for the management efficiency of the communication authority of the target management park, the smaller the value of the preset verification update ratio and the smaller the value of the preset node communication parameter. A method for determining the value of the preset verification update ratio is provided. The minimum value of the verification update ratio of the key analysis nodes in the historical analysis records that meet the user's requirement for the management efficiency of the communication authority of the target management park is recorded as the preset verification update ratio. A value of the preset verification update ratio is provided. The value of the preset verification update ratio is 0.4. A method for determining the value of the preset node communication parameter is provided. The minimum value of the node communication parameter of the key analysis nodes in the historical analysis records that meet the user's requirement for the management efficiency of the communication authority of the target management park is recorded as the preset node communication parameter. The present invention applies a cyclic node analysis cycle, and the duration of the node analysis cycle can be determined by the user. The higher the user's requirements for the management efficiency of the communication rights of the target management park, the shorter the duration of the node analysis cycle. A node analysis cycle duration is provided, and the node analysis cycle is 5 hours. At the end time of each node analysis cycle, the node status of each key analysis node is detected and the node analysis is performed according to the corresponding node analysis strategy.

[0030] Specifically, the node analysis module responds to the node status of each key analysis node to determine the node analysis strategy of each key analysis node; If the node analysis condition responded by the node analysis module is that the key analysis node is in the first preset node state, it is determined to perform analysis combination setting on the key analysis node; The node analysis condition responded by the node analysis module is that the key analysis node is in the second preset node state, and then it is determined to perform association analysis on the key analysis node.

[0031] Specifically, the first node execution module responds to the first node analysis condition and performs node analysis combination division on the key analysis node and its associated nodes; The first node execution module determines a combination partitioning mode in response to the combination partitioning condition; If the combination division condition of the response of the first node execution module is that the proportion of central nodes is greater than the preset proportion of central nodes, the node analysis combination is determined according to the topological connection coefficient; If the combination division condition of the response of the first node execution module is that the proportion of central nodes is less than or equal to the preset proportion of central nodes, the node analysis combination is determined according to the node density coefficient; The first node analysis condition is that the node analysis module determines to perform analysis combination setting for a key analysis node.

[0032] Among them, for a single key analysis node in the first preset node state, the central node ratio = the number of central nodes included in the associated nodes of the key analysis node / the number of associated nodes of the key analysis node. The central node is an associated node with a number of network authentication nodes with communication connections that is greater than the preset number of nodes. The value of the preset central node ratio can be determined by the user according to the actual work scenario. For example, the user can set it according to historical analysis records, and a method for determining the value of the preset central node ratio is provided. The historical analysis records of the node analysis combination determined according to the topological connection coefficient are recorded as combination reference records, and the average value of the central node ratio of each key analysis node in the combination reference record that meets the user's management efficiency requirements for the communication authority of the target management park is recorded as the preset central node ratio. A value of the preset central node ratio is provided, and the value of the preset central node ratio is 0.4. The obtained node analysis combination is a set of the key analysis node and some associated nodes of the key analysis node.

[0033] Specifically, the first node execution module responds to the first division condition and determines the key monitoring coefficient of each associated central node according to the key communication frequency and the associated difference coefficient; If the node monitoring condition responded by the first node execution module is that the key monitoring coefficient of an associated central node is greater than the preset key monitoring coefficient, the associated central node is recorded as the key monitoring node of the key analysis node corresponding to the node analysis combination, and the verification reliability coefficient of the key analysis node is determined according to the proportion of the key monitoring nodes and the reference monitoring coefficient; The first division condition is that a node analysis combination is determined according to a topological connection coefficient, and a reference topological connection coefficient of the node analysis combination is greater than a preset reference topological connection coefficient.

[0034] Among them, if a node analysis combination is determined according to the topological connection coefficient, the reference topological connection coefficient of the node analysis combination is the average value of the topological connection coefficients of each associated node and the key analysis node in the node analysis combination. For a single associated node, the topological connection coefficient is the number of associated nodes that are both the associated node and the key analysis node. The value of the preset reference topological connection coefficient can be determined by the user according to the actual work scenario. For example, the user can set it according to the historical analysis record. The higher the user's requirement for the management efficiency of the communication authority of the target management park, the larger the value of the preset reference topological connection coefficient. A method for determining the value of the preset reference topological connection coefficient is provided, and the minimum value of the reference topological connection coefficient of each node analysis combination in the combined reference record that meets the user's requirement for the management efficiency of the communication authority of the target management park is recorded as the preset reference topological connection coefficient; For a single node analysis combination, the associated central node is the associated node that serves as the central node in the node analysis combination. For a single associated central node, the key monitoring coefficient is the natural logarithm of the product of the key communication frequency and the associated difference coefficient. The associated communication frequency is the sum of the number of times the associated central node completes message transmission and reception with its associated nodes in the current node analysis cycle. The associated difference coefficient is the absolute value of the difference between the maximum and minimum numbers of times the associated central node completes message transmission and reception with its associated nodes in the current node analysis cycle. The value of the preset key monitoring coefficient can be determined by the user according to the actual working scenario. For example, the user can set it according to historical analysis records. The higher the user's requirements for the management efficiency of the communication authority of the target management park, the larger the value of the preset key monitoring coefficient. A method for determining the value of the preset key monitoring coefficient is provided to satisfy The average value of the key monitoring coefficients of each key monitoring node in the combined reference record of the user's management efficiency requirements for the communication authority of the target management park is recorded as the preset key monitoring coefficient. The verification reliability coefficient of the key analysis node in the node analysis combination = 1 / (key monitoring node proportion + reference monitoring coefficient), the key monitoring node proportion = the number of key monitoring nodes in the node analysis combination / the number of associated nodes in the node analysis combination, and the reference monitoring coefficient is the average value of the key monitoring coefficients of each associated node in the node analysis combination. If the verification reliability coefficient of the key analysis node is greater than the preset first verification coefficient, it is determined that the key analysis node can be used as a verification node. If the verification reliability coefficient of the key analysis node is less than or equal to the preset first verification coefficient, an early warning message is sent to the user, prompting that there is a risk in the verification update result of the target verification identity of the key analysis node; The value of the preset first verification coefficient can be determined by the user according to the actual work scenario. For example, the user can set it according to historical analysis records. The higher the user's requirements for the management efficiency of the communication authority of the target management park, the larger the value of the preset first verification coefficient. A method for determining the value of the preset first verification coefficient is provided, and the minimum value of the verification reliability coefficient of the verification node in the combined reference record that meets the user's requirements for the management efficiency of the communication authority of the target management park is recorded as the preset first verification coefficient.

[0035] Specifically, the first node execution module responds to the second division condition and determines the verification reliability coefficient of the key analysis node corresponding to the node analysis combination according to the reference association duration and the reference density coefficient; The verification reliability coefficient is positively correlated with the reference association duration and the reference density coefficient respectively; The second division condition is that a node analysis combination is determined according to a node density coefficient, and a reference density coefficient of the node analysis combination is greater than a preset reference density coefficient.

[0036] Among them, for a single associated node, its node density coefficient with the key analysis node is the natural logarithm of the product of the associated connection frequency and the associated communication ratio, the associated communication ratio = the number of times the associated node and the key analysis node complete message sending and receiving in the current node analysis period / the number of times the associated node completes message sending and receiving in the current node analysis period. For a single node analysis combination determined according to the node density coefficient, the reference density coefficient is the average value of the node density coefficients of each associated node and the key analysis node in the node analysis combination. The value of the preset reference density coefficient can be determined by the user according to the actual work scenario. For example, the user can set it according to the historical analysis record. The higher the user's requirement for the management efficiency of the communication authority of the target management park, the larger the value of the preset reference density coefficient. A method for determining the value of the preset reference density coefficient is provided. The historical analysis record of the node analysis combination determined according to the node density coefficient is recorded as a dense reference record, and the minimum value of the reference density coefficient of each node analysis combination in the dense reference record that meets the user's requirement for the management efficiency of the communication authority of the target management park is recorded as the preset reference density coefficient. For a single node analysis combination determined based on a node density coefficient, the verification reliability coefficient of the key analysis node in the node analysis combination is the sum of the product of the reference association duration and the reference density coefficient, respectively, and the corresponding verification influence coefficient. The reference association duration is the average of the maximum connection durations between each associated node in the node combination and the key analysis node during the current node analysis cycle. The connection duration is the duration during which messages can be continuously sent and received between the associated node and the key analysis node. The values ​​of the reference association duration and the verification influence coefficient corresponding to the reference density coefficient can be determined by the user based on actual work scenarios. A value of the verification influence coefficient corresponding to the reference association duration is 0.6, and a value of the verification influence coefficient corresponding to the reference density coefficient is 0.4. If the verification reliability coefficient of the key analysis node is greater than a preset second verification coefficient, the key analysis node is determined to be eligible for use as a verification node. If the verification reliability coefficient of the key analysis node is less than or equal to the preset second verification coefficient, a warning message is sent to the user, indicating that there is a risk in the verification update result of the target verification identity for the key analysis node. The value of the preset second verification coefficient can be determined by the user according to the actual work scenario. For example, the user can set it according to historical analysis records. The higher the user's requirements for the management efficiency of the communication authority of the target management park, the larger the value of the preset second verification coefficient. A method for determining the value of the preset second verification coefficient is provided, and the minimum value of the verification reliability coefficient of the verification node in the dense reference record that meets the user's requirements for the management efficiency of the communication authority of the target management park is recorded as the preset second verification coefficient.

[0037] Specifically, the second node execution module responds to the second node analysis condition, detects the communication message ratio of each associated node of the key analysis node, and determines the abnormal ratio difference coefficient of the key analysis node according to the communication message ratio of each associated node; If the traffic verification condition responded by the second node execution module is that the abnormal proportion difference coefficient is greater than the preset abnormal proportion difference coefficient, it is determined to perform abnormal communication analysis on the associated nodes of the key analysis node; The second node analysis condition is that the node analysis module determines to perform association analysis on a key analysis node.

[0038] Among them, for any key analysis node that needs to be associated with the analysis node, the communication message ratio of each associated node of the key analysis node is detected, and the abnormal ratio difference coefficient of the key analysis node = the maximum value of the abnormal ratio difference value of each associated node / the average value of the absolute value of the abnormal ratio difference value of each associated node; for a single associated node, the communication message ratio = the number of completed message transmission and reception between the associated node and the key analysis node / the number of completed message transmission and reception by the key analysis node; the abnormal ratio difference value = the communication message ratio of the associated node - the reference message ratio of the key analysis node; the reference message ratio is the average value of the communication message ratio of each associated node of the key analysis node; when a network node is attacked from the outside, the communication message ratio between its different associated nodes will vary greatly; the abnormal ratio difference coefficient can effectively characterize whether each key analysis node has the risk of being attacked; The value of the preset abnormality proportion difference coefficient can be determined by the user according to the actual work scenario. For example, the user can set it according to the historical analysis records. The higher the user's requirements for the management efficiency of the communication authority of the target management park, the smaller the value of the preset abnormality proportion difference coefficient. A method for determining the value of the preset abnormality proportion difference coefficient is provided, and the minimum value of the abnormality proportion difference coefficient of each key analysis node for abnormal communication analysis of the associated nodes in the historical analysis records that meet the user's requirements for the management efficiency of the communication authority of the target management park is recorded as the preset abnormality proportion difference coefficient.

[0039] Specifically, the second node execution module responds to the abnormal analysis condition and determines the abnormal communication coefficient of each associated node of the key analysis node according to the associated connection frequency and the traffic difference parameter; If the node determination condition responded by the second node execution module is that the reference abnormal communication coefficient is less than the preset reference abnormal communication coefficient, the key analysis node is determined to be a verification node; The reference abnormal communication coefficient is the average value of the abnormal communication coefficients of each associated node of the key analysis node; The abnormal analysis condition is that the second node execution module determines to perform abnormal communication analysis on the associated nodes of a key analysis node.

[0040] Among them, if the associated node of a key analysis node needs to perform abnormal communication analysis, for a single associated node, the abnormal communication coefficient is the natural logarithm of the product of the associated connection frequency and the traffic difference parameter, the associated connection frequency is the number of times a communication connection is established between the associated node and the key analysis node during the current node analysis period, and the traffic difference parameter is the amount of data received by the associated node during the current node analysis period. The value of the preset reference abnormal communication coefficient can be determined by the user according to the actual working scenario. For example, the user can set it according to the historical analysis record. The higher the user's requirements for the management efficiency of the communication authority of the target management park, the smaller the value of the preset reference abnormal communication coefficient. A method for determining the value of the preset reference abnormal communication coefficient is provided, and the historical analysis record of the verification node determined according to the reference abnormal communication coefficient is recorded as a second reference record. The maximum value of the reference abnormal communication coefficient of each verification node in the second reference record that meets the user's requirements for the management efficiency of the communication authority of the target management park is recorded as the preset reference abnormal communication coefficient; Among them, the verification nodes determined by different node analysis strategies can perform verification and update on the verification and update identity to determine whether the verification and update identity is a network trusted identity. Only the network trusted identity can obtain the target electronic ticket. How each verification node performs verification and update on the verification and update identity is easy to understand for those skilled in the art and will not be elaborated here.

[0041] Specifically, the ticket generation unit generates a target electronic ticket and a target identity verification code based on the target verification identity in response to the verification completion condition, and sends the target electronic ticket and the target identity verification code together to the target verification person corresponding to the target verification identity; The ticket verification unit responds to the authority authentication condition and determines the authority authentication coefficient of the target verification person based on the reference feature similarity and the authority range matching degree; The permission response condition responded by the ticket verification unit is that the permission authentication coefficient of a target verification person is greater than the preset permission authentication coefficient, and then the permission application of the target verification person is determined to be responded to; The verification completion condition is that a target verification identity is a regular verification identity or a verification update identity completes the verification update process, and the authority authentication condition is that the ticket verification unit obtains the authority application of a target verification person.

[0042] Among them, if a target verification identity is a regular verification identity or a verification update identity that has completed the verification update process, a target electronic ticket is generated based on the information contained in the target verification identity. The information category displayed on the generated target electronic ticket can be set by the user according to the actual work scenario. The information category contained in the target verification identity and that can be displayed on the target electronic ticket includes but is not limited to: verification personnel image, name, gender and job information. The verification personnel image is the facial image of the target verification personnel. When the target electronic ticket is generated, a target identity verification code is generated for authority authentication. The ticket verification unit obtains the corresponding target verification personnel facial image and access authority by scanning the target identity verification code. If a target verification personnel submits an authority application and a target identity verification code, the authority application is for the target verification personnel. For the area where the person needs to pass, a facial image of the person who applies for permission is obtained and recorded as the applicant image. Facial features are extracted from the applicant image and the verification person image corresponding to the target identity verification code provided by the applicant, and the feature similarity of each facial feature between the applicant image and the verification person image is detected. The average value of the feature similarity of each facial feature is recorded as the reference feature similarity of the target verification person. If the area corresponding to the permission application submitted by the target verification person is not within the area included in the access permission corresponding to his target identity verification code, the target verification person's permission range matching degree is determined to be 0. If the area corresponding to the permission application submitted by the target verification person is within the area included in the access permission corresponding to his target identity verification code, the target verification person's permission range matching degree is determined to be 1. The authority authentication coefficient is the sum of the reference feature similarity and the authority range matching degree. The value of the preset authority authentication coefficient can be determined by the user according to the actual work scenario. For example, the user can set it according to the historical analysis record. The higher the user's requirements for the management efficiency of the communication authority of the target management park, the larger the value of the preset authority authentication coefficient. A method for determining the value of the preset authority authentication coefficient is provided. The average value of the authority authentication coefficients of the target verification personnel corresponding to the authority application responded to in the historical analysis record that meets the user's requirements for the management efficiency of the communication authority of the target management park is recorded as the preset authority authentication coefficient. Responding to the authority application of a target verification personnel means allowing the target verification personnel to pass the area corresponding to their authority application. How to generate a target electronic ticket and a target identity verification code based on the information contained in the target verification identity, how to obtain the corresponding target verification personnel's facial image and access authority by identifying the target identity verification code, and how to determine the feature similarity of each facial feature between the applicant personnel image and the verification personnel image are contents that are already mastered by those skilled in the art and will not be elaborated here.

[0043] Thus far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it will be readily understood by those skilled in the art that the scope of protection of the present invention is obviously not limited to these specific embodiments. Without departing from the principles of the present invention, those skilled in the art may make equivalent changes or substitutions to the relevant technical features, and the technical solutions after such changes or substitutions will fall within the scope of protection of the present invention.

[0044] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that the present invention is susceptible to various modifications and variations. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention are intended to be within the scope of protection of the present invention.

Claims

1. An electronic ticket generation and verification system based on network trusted identity, characterized in that: include: A verification analysis module, responsive to the authentication update condition, to determine the category of each target verification identity; A node analysis module, which is connected to the verification analysis module, and is used to periodically respond to node status conditions to determine the node status of each key analysis node, and respond to the node status of each key analysis node to determine a node analysis strategy, wherein the node analysis strategy is to perform analysis combination settings for key analysis nodes, or to perform associated node analysis for key analysis nodes; A first node execution module, which is connected to the node analysis module, is used to respond to the combination division condition to determine the combination division method, and respond to different division conditions to determine the combination analysis method of each node analysis combination, the combination analysis method includes determining the verification reliability coefficient according to the proportion of key monitoring nodes and the reference monitoring coefficient, and determining the verification reliability coefficient according to the reference association duration and the reference density coefficient; a second node execution module, connected to the node analysis module, for responding to the traffic verification condition to determine whether to perform abnormal communication analysis on the associated node of the key analysis node, and determining whether the key analysis node can perform network identity authentication according to the reference abnormal communication coefficient; A ticket processing module, which is respectively connected to the verification analysis module, the first node execution module and the second node execution module, and the ticket processing module includes a ticket generation unit and a ticket verification unit, wherein the ticket generation unit is used to generate a target electronic ticket and a target identity verification code, and the ticket verification unit determines whether to respond to the permission application based on the permission authentication coefficient of the target verification person.

2. The electronic ticket generation and verification system based on network trusted identity according to claim 1 is characterized in that: The verification analysis module is responsive to the authentication update condition to periodically determine the category of each target verification identity; Verify identity against a single target, If the authentication update condition responded by the authentication analysis module is that the authority change coefficient is greater than the preset authority change coefficient or the authentication duration coefficient is greater than the preset authentication duration coefficient, the target authentication identity is determined to be an authentication update identity; If the authentication update condition responded by the authentication analysis module is that the authority change coefficient is less than or equal to the preset authority change coefficient and the authentication duration coefficient is less than or equal to the preset authentication duration coefficient, the target authentication identity is determined to be a regular authentication identity.

3. The electronic ticket generation and verification system based on network trusted identity according to claim 2 is characterized in that: The node analysis module is responsive to the node status condition to periodically determine the node status of each key analysis node; For a single key analysis node, If the node status condition responded by the node analysis module is that the verification update ratio is greater than the preset verification update ratio or the node communication parameter is greater than the preset node communication parameter, it is determined that the key analysis node is in the first preset node state; If the node status condition responded by the node analysis module is that the verification update ratio is less than or equal to the preset verification update ratio and the node communication parameter is less than or equal to the preset node communication parameter, it is determined that the key analysis node is in the second preset node state; The key analysis node is a network authentication node that needs to perform network identity authentication for verifying the updated identity.

4. The electronic ticket generation and verification system based on network trusted identity according to claim 3 is characterized in that: The node analysis module responds to the node status of each key analysis node to periodically determine the node analysis strategy of each key analysis node; If the node analysis condition responded by the node analysis module is that the key analysis node is in the first preset node state, it is determined to perform analysis combination setting for the key analysis node; The node analysis condition responded by the node analysis module is that the key analysis node is in the second preset node state, and then it is determined to perform association analysis on the key analysis node.

5. The electronic ticket generation and verification system based on network trusted identity according to claim 4 is characterized in that: The first node execution module responds to the first node analysis condition and performs node analysis combination division on the key analysis node and its associated nodes; The first node execution module responds to the combination partitioning condition to determine the combination partitioning mode; If the combination division condition responded by the first node execution module is that the proportion of central nodes is greater than the preset proportion of central nodes, the node analysis combination is determined according to the topological connection coefficient; If the combination division condition responded by the first node execution module is that the proportion of central nodes is less than or equal to the preset proportion of central nodes, the node analysis combination is determined according to the node density coefficient; The first node analysis condition is that the node analysis module determines to perform analysis combination setting for a key analysis node.

6. The electronic ticket generation and verification system based on network trusted identity according to claim 5 is characterized in that: The first node execution module responds to the first division condition and determines the key monitoring coefficient of each associated central node according to the key communication frequency and the associated difference coefficient to determine the key monitoring node; Determine the verification reliability coefficient of key analysis nodes based on the proportion of key monitoring nodes and reference monitoring coefficient; The first division condition is that a node analysis combination is determined according to a topological connection coefficient, and a reference topological connection coefficient of the node analysis combination is greater than a preset reference topological connection coefficient.

7. The electronic ticket generation and verification system based on network trusted identity according to claim 6 is characterized in that: The first node execution module responds to the second division condition and determines the verification reliability coefficient of the key analysis node corresponding to the node analysis combination according to the reference association duration and the reference density coefficient; The verification reliability coefficient is positively correlated with the reference association duration and the reference density coefficient respectively; The second division condition is that a node analysis combination is determined according to a node density coefficient, and a reference density coefficient of the node analysis combination is greater than a preset reference density coefficient.

8. The electronic ticket generation and verification system based on network trusted identity according to claim 7, characterized in that: The second node execution module detects the communication message proportion of each associated node of the key analysis node in response to the second node analysis condition, and determines the abnormal proportion difference coefficient of the key analysis node according to the communication message proportion of each associated node; If the traffic verification condition responded by the second node execution module is that the abnormal proportion difference coefficient is greater than the preset abnormal proportion difference coefficient, it is determined to perform abnormal communication analysis on the associated nodes of the key analysis node; The second node analysis condition is that the node analysis module determines to perform association analysis on a key analysis node.

9. The electronic ticket generation and verification system based on network trusted identity according to claim 8, characterized in that: The second node execution module responds to the abnormal analysis condition and determines the abnormal communication coefficient of each associated node of the key analysis node according to the associated connection frequency and the flow difference parameter; The node determination condition responded by the second node execution module is that the reference abnormal communication coefficient is less than the preset reference abnormal communication coefficient, then the key analysis node is determined to be a verification node; The reference abnormal communication coefficient is an average value of the abnormal communication coefficients of each associated node of the key analysis node; The abnormal analysis condition is that the second node execution module determines to perform abnormal communication analysis on a node associated with a key analysis node.

10. The electronic ticket generation and verification system based on network trusted identity according to claim 9, characterized in that: The ticket generation unit generates a target electronic ticket and a target identity verification code based on the target identity verification in response to the verification completion condition, and sends the target electronic ticket and the target identity verification code together to the target verification person corresponding to the target identity verification; The ticket verification unit responds to the authority authentication condition and determines the authority authentication coefficient of the target verification person according to the reference feature similarity and the authority range matching degree; The permission response condition responded by the ticket verification unit is that the permission authentication coefficient of a target verification person is greater than the preset permission authentication coefficient, and then it is determined to respond to the permission application of the target verification person; The verification completion condition is that a target verification identity is a regular verification identity or a verification update identity completes the verification update process, and the authority authentication condition is that the ticket verification unit obtains an authority application from a target verification person.

Images