An information disclosure method and device

Abstract

The present invention discloses an information disclosure method and apparatus. The method is as follows: A first user device generates contact information of the second user device based on a client application of an institutional server, at least according to a second encrypted identifier broadcast by the second user device; the first user device updates a local contact information database of the client application based on the contact information of the second user device; the first user device generates a status identification code of the first user device based on the client application, at least according to the local contact information database. When the above method is applied to financial technology (Fintech), the risk of user privacy leakage can be effectively reduced.

Description

Technical Field

[0001] The present invention relates to the field of computer software in the field of financial technology (Fintech), and particularly relates to an information disclosure method and device. Background Art

[0002] With the development of computer technology, more and more technologies are applied in the financial field, and the traditional financial industry is gradually transforming towards financial technology (Fintech). However, due to the security and real-time requirements of the financial industry, higher requirements are also put forward for technologies. There are connections and contacts between users in finance, and some states of users will change accordingly with the contact situations between users. For example, in the scenario of infectious diseases, the safety state of users is closely related to the contact situations between users. Each financial institution has introduced a way to track the user state.

[0003] Currently, the mainstream tracking method is the status identification code. Specifically, it is based on the user's active real-name authentication declaration. The user needs to actively authorize through a service provider (such as a financial institution) and register information, fill in information related to the user state, and the service provider makes a background judgment and issues a status identification code. In this process, the service provider uses the ID card as a unified identifier, obtains the movement trajectory through the data of the telecommunications operator, and generates a status identification code according to the real-time data of the service provider and the data actively declared by the user. Obviously, in the above method, the user needs to report a large amount of personal information to the service provider, and the service provider may use the collected personal information for other purposes, and there is a risk of user privacy leakage, which is an urgent problem to be solved. Summary of the Invention

[0004] The present invention provides an information disclosure method and device, which solves the problem of the risk of user privacy leakage in the prior art.

[0005] In a first aspect, the present invention provides an information disclosure method, including: a first user device generates contact information of a second user device based on a client application of an institutional server, at least according to a second encrypted identifier broadcast by the second user device; the second encrypted identifier is obtained by the institutional server encrypting the device identifier of the second user device; the first user device updates a local contact information database of the client application based on the contact information of the second user device; the local contact information database records the contact information between the first user device and each second user device; the second user device is any user device of each second user device; the first user device generates a status identification code of the first user device based on the client application, at least according to the local contact information database.

[0006] In the above method, the contact information recorded in the local contact information database can be generated at least based on the second encryption identifier of the second user device. Only the first user device can update the local contact information database and the client application based on the institution server according to the identifier of the anonymous second user device. Therefore, contact information can be collected without exposing personal information, and the status identification code of the first user device can be generated.

[0007] Optionally, the first user device generates the public key of the first user device and the private key of the first user device; the first user device sends the device identifier of the first user device and the public key of the first user device to the institution server; the first user device obtains the first encryption identifier from the institution server; the first encryption identifier is obtained by the institution server encrypting the device identifier of the first user device with the public key of the first user device; the first user device broadcasts the first encryption identifier.

[0008] In the above method, the first user device does not directly broadcast the device identifier of the first user device. Instead, after generating the public key of the first user device and the private key of the first user device, the first user device sends the device identifier of the first user device and the public key of the first user device to the institution server, obtains the first encryption identifier encrypted by the institution server, and broadcasts the first encryption identifier. Thus, the first encryption identifier replaces the device identifier of the first user device. By broadcasting the anonymous encryption identifier, the devices receiving the first encryption identifier are aware of the existence of the first user device.

[0009] Optionally, before the client application based on the institution server generates the contact information of the second user device at least according to the second encryption identifier broadcast by the second user device; it further includes: the first user device obtains the signal strength of the second user device broadcasting the second encryption identifier; the first user device determines that the signal strength is greater than or equal to a preset strength threshold.

[0010] In the above method, before generating the contact information of the second user device, the first user device obtains the signal strength of the second user device broadcasting the second encryption identifier and determines that the signal strength is greater than or equal to a preset strength threshold, so as to determine whether to generate the contact information of the second user device by setting the preset strength threshold.

[0011] Optionally, the first user device obtains a warning notice from the institutional server; the warning notice indicates a third encryption identifier of a device of a first type of user and / or a fourth encryption identifier of a device of a second type of user; the first user device generates a status identification code of the first user device based on the client application and at least according to the local contact information database, including: the first user device generates the status identification code of the first user device based on the client application, according to the local contact information database and the encryption identifier indicated by the warning notice.

[0012] In the above manner, when the first user device obtains a warning notice from the institutional server, since the warning notice indicates the third encryption identifier and / or the fourth encryption identifier, the status identification code of the first user device can be generated according to the local contact information database and the encryption identifier indicated by the warning notice, so as to generate the status identification code of the first user device in a timely manner according to the warning notice.

[0013] Optionally, the first user device deletes the contact information in the local contact information database that is outside the preset time range; the preset time range is determined according to the preset time set by the institutional server.

[0014] In the above manner, for the users contacted by the first user device, whether they are patients or not, they will show some manifestations within the preset time. When it is outside the preset time, the contact information recorded in the local contact information database has become invalid. Therefore, the preset time range is determined according to the preset time set by the institutional server, and further, the contact information in the local contact information database that is outside the preset time range is deleted, so that the invalid contact information can be deleted in a timely manner, saving storage space.

[0015] Optionally, the first user device receives the second encryption identifier through a short-range communication mode.

[0016] In the above manner, compared with mobile communication, an effective encryption identifier is obtained through a low communication overhead method.

[0017] In a second aspect, the present invention provides an information disclosure method, including: the institutional server obtains device identifiers from each user device; for each user device among the user devices, the institutional server encrypts the device identifier of the user device to obtain an encryption identifier of the user device; the institutional server sends the encryption identifier of the user device to the user device; the encryption identifiers of the user devices are used to generate status identification codes of the user devices through broadcasting and / or receiving of the user devices.

[0018] In the above manner, the institutional server encrypts the device identifiers of each user device, and after obtaining the encrypted identifiers of each user device, distributes them to each user device, so that each of the user devices can generate the status identification codes of the user devices by broadcasting and / or receiving anonymous encrypted identifiers without disclosing other information.

[0019] Optionally, the institutional server obtains the status evaluation information corresponding to the encrypted identifier of the user device; according to each data item in the status evaluation information and the obfuscation information of the data item, the institutional server obtains the signature of the status evaluation information according to a preset signature algorithm; the institutional server generates a status evaluation certificate corresponding to the encrypted identifier of the user device according to the signature of the status evaluation information and the status evaluation information.

[0020] In the above manner, after the institutional server obtains the status evaluation information corresponding to the encrypted identifier of the user device, according to each data item and the obfuscation information, the institutional server obtains the signature of the status evaluation information according to a preset signature algorithm, so as to authenticate the status evaluation information, and further generates a status evaluation certificate according to the status evaluation information and the signature, so that the status evaluation information corresponding to the encrypted identifier of the user device can be authenticated in the case of user anonymity.

[0021] Optionally, the institutional server is a node on the blockchain; further included are: the institutional server generates encrypted information of each data item according to each data item allowed to be disclosed in the preset disclosure policy and the obfuscation information of each data item in the preset disclosure policy; the institutional server generates a selective disclosure status evaluation certificate corresponding to the encrypted identifier of the user device according to the encrypted information of each data item; the institutional server uploads the selective disclosure status evaluation certificate to the blockchain through the node on the blockchain.

[0022] In the above manner, when the institutional server is a node on the blockchain, after the institutional server generates a selective disclosure status evaluation certificate corresponding to the encrypted identifier of the user device, the institutional server uploads the selective disclosure status evaluation certificate to the blockchain, so as to publish the selective disclosure status evaluation certificate to the blockchain, enabling all nodes of the entire blockchain to share the selective disclosure status evaluation certificate.

[0023] Optionally, if the institutional server determines, based on the status evaluation information corresponding to the encryption identifier of the local user device, that the local user device is a device of a first type of user and / or a device of a second type of user, the institutional server broadcasts the encryption identifier of the local user device to some or all of the user devices; and / or if the institutional server determines, based on the selectively disclosed status evaluation certificate corresponding to the encryption identifier of the external user device, that the external user device is a device of a first type of user and / or a device of a second type of user, the institutional server broadcasts the encryption identifier of the external user device to some or all of the user devices.

[0024] In the above manner, after the institutional server determines that the local user device is a device of a first type of user and / or a device of a second type of user, or determines that the external user device is a device of a first type of user and / or a device of a second type of user, it broadcasts the encryption identifier of the corresponding device to some or all of the user devices, thereby promptly announcing the status.

[0025] Optionally, for any authorized user device among the authorized user devices of each user device, the institutional server records the encryption identifier broadcast by the user device received by the authorized user device; the institutional server broadcasts the encryption identifier of the local user device to some or all of the user devices; including: the institutional server broadcasts the encryption identifier of the local user device to: the authorized user devices among the authorized user devices that have recorded the encryption identifier of the local user device, and the unauthorized user devices among each user device; the institutional server broadcasts the encryption identifier of the external user device to some or all of the user devices; including: the institutional server broadcasts the encryption identifier of the external user device to: the authorized user devices among the authorized user devices that have recorded the encryption identifier of the external user device, and the unauthorized user devices.

[0026] In the above manner, when the encryption identifier of the local user device or the encryption identifier of the external user device needs to be broadcast to the authorized user devices that have recorded the encryption identifier of the local user device, for more targeted broadcasting, for each unauthorized user device, it is sent to all of them, thereby improving the status tracking efficiency.

[0027] In a third aspect, the present invention provides an information disclosure device, including: a processing module, configured to generate contact information of a second user device based on a client application of an institutional server, at least according to a second encrypted identifier broadcast by the second user device; the second encrypted identifier is obtained by encrypting a device identifier of the second user device by the institutional server; update a local contact information database of the client application based on the contact information of the second user device; the local contact information database records contact information of the first user device and each second user device; the second user device is any one of the second user devices; a generating module, configured to generate a status identification code of the first user device based on the client application, at least according to the local contact information database.

[0028] Optionally, the processing module is further configured to: generate a public key of the first user device and a private key of the first user device; send the device identifier of the first user device and the public key of the first user device to the institutional server; obtain a first encrypted identifier from the institutional server; the first encrypted identifier is obtained by encrypting the device identifier of the first user device by the institutional server according to the public key of the first user device; broadcast the first encrypted identifier.

[0029] Optionally, the processing module is further configured to: obtain a signal strength of the second user device broadcasting the second encrypted identifier; determine that the signal strength is greater than or equal to a preset strength threshold.

[0030] Optionally, the processing module is further configured to: obtain a warning notice from the institutional server; the warning notice indicates a third encrypted identifier of a device of a first type of user and / or a fourth encrypted identifier of a device of a second type of user; the generating module is specifically configured to: generate a status identification code of the first user device based on the client application, according to the local contact information database and the encrypted identifiers indicated by the warning notice.

[0031] Optionally, the processing module is further configured to: delete contact information in the local contact information database that is outside a preset duration range; the preset duration range is determined according to a preset duration set by the institutional server.

[0032] Optionally, the device receives the second encrypted identifier through a short-range communication mode.

[0033] For the beneficial effects of the above third aspect and each optional device of the third aspect, reference may be made to the beneficial effects of the above first aspect and each optional method of the first aspect, which will not be elaborated here.

[0034] Fourthly, the present invention provides an information disclosure device, including: an acquisition module, configured to acquire device identifiers from each user device; for each user device among the user devices, encrypt the device identifier of the user device to obtain an encrypted identifier of the user device; a transmission module, configured to send the encrypted identifier of the user device to the user device; the encrypted identifiers of the user devices are used to generate status identification codes of the user devices through broadcasting and / or receiving by the user devices.

[0035] Optionally, the acquisition module is further configured to: acquire status evaluation information corresponding to the encrypted identifier of the user device; the processing module is further configured to: according to each data item in the status evaluation information and the obfuscation information of the data item, obtain a signature of the status evaluation information according to a preset signature algorithm; generate a status evaluation certificate corresponding to the encrypted identifier of the user device according to the signature of the status evaluation information and the status evaluation information.

[0036] Optionally, the device is a node on a blockchain; the processing module is further configured to: according to a preset disclosure policy, generate encrypted information of each data item in the status evaluation information allowed to be disclosed in the preset disclosure policy and the obfuscation information of each data item; generate a selective disclosure status evaluation certificate corresponding to the encrypted identifier of the user device according to the encrypted information of each data item; upload the selective disclosure status evaluation certificate to the blockchain through the node on the blockchain.

[0037] Optionally, the processing module is further configured to: if it is determined that the local user device is a device of a first type of user and / or a second type of user according to the status evaluation information corresponding to the encrypted identifier of the local user device, broadcast the encrypted identifier of the local user device to some or all of the user devices; and / or if it is determined that the external user device is a device of a first type of user and / or a second type of user according to the selective disclosure status evaluation certificate corresponding to the encrypted identifier of the external user device, broadcast the encrypted identifier of the external user device to some or all of the user devices.

[0038] Optionally, for any authorized user device among the authorized user devices of each user device, the device records the encrypted identifier broadcast by the user device received by the authorized user device; specifically, the processing module is configured to broadcast the encrypted identifier of the local user device to: the authorized user devices that record the encrypted identifier of the local user device among the authorized user devices, and each unauthorized user device among the user devices; broadcast the encrypted identifier of the external user device to: the authorized user devices that record the encrypted identifier of the external user device among the authorized user devices, and each unauthorized user device.

[0039] For the beneficial effects of the above fourth aspect and each optional device of the fourth aspect, reference may be made to the beneficial effects of the above second aspect and each optional method of the second aspect, which will not be elaborated here.

[0040] In a fifth aspect, the present invention provides a computer device, including a program or instruction, which, when executed, is used to execute the above first aspect or second aspect and each optional method.

[0041] In a sixth aspect, the present invention provides a storage medium, including a program or instruction, which, when executed, is used to execute the above first aspect or second aspect and each optional method. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for description in the embodiments.

[0043] Figure 1 A schematic structural diagram to which an information disclosure method provided by an embodiment of the present application can be applied;

[0044] Figure 2 A schematic process diagram of institutional registration in an information disclosure method provided by an embodiment of the present application;

[0045] Figure 3 A schematic step - flow diagram of an information disclosure method provided by an embodiment of the present application;

[0046] Figure 4 A schematic structural diagram of an information disclosure device provided by an embodiment of the present application;

[0047] Figure 5 A schematic structural diagram of an information disclosure device provided by an embodiment of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0048] In order to better understand the above - mentioned technical solutions, the following will combine the accompanying drawings of the specification and specific implementation manners to elaborate on the above - mentioned technical solutions in detail. It should be understood that the embodiments of the present application and the specific features in the embodiments are detailed descriptions of the technical solutions of the present application, rather than limitations on the technical solutions of the present application. Without conflict, the technical features in the embodiments of the present application and the embodiments can be combined with each other.

[0049] The following first lists the noun interpretations that appear in the present application.

[0050] Credential: A portable data structure that can verify authenticity, whether it has been tampered with, whether it has expired, and whether it has been revoked, including metadata (including credential identifier (ID), creation time, expiration date, issuer, version number, etc.), data content, and a signature value generated by the issuer using its private key. In this article, "status evaluation information" is stored in the credential format.

[0051] In the process of financial institutions (banking institutions, insurance institutions, or securities institutions) tracking the status of their operations (such as loan operations, deposit operations, etc. in banks), a status identifier is often used to identify a person's status (such as a person's monitoring status in an infectious disease scenario). In the current method, users need to declare a large amount of personal information to the service provider, and the service provider may use the collected personal information for other purposes, posing a risk of privacy leakage for users. This is an urgent problem to be solved. Therefore, this application provides an information disclosure method. As Figure 1 shown, it is a schematic diagram of the architecture to which an information disclosure method provided by this application can be applied. Figure 1 The main bodies included in the shown architecture diagram are as follows:

[0052] User device: The user's handheld device, which can be a Bluetooth device, etc. The user device can apply for registration with the institutional server to obtain an encrypted identifier bound to the user device, and the encrypted identifier can be used as a basis for contact between people.

[0053] Institutional server: The institutional server of an institution (such as a hospital) can be used to register and maintain the encrypted identifiers of the managed user devices, and can also share and disclose the status evaluation information corresponding to the encrypted identifiers of the managed user devices to other institutions. It should be noted that an institution can divide the server into two types of institutional servers according to maintaining the encrypted identifiers of user devices and disclosing status evaluation information to other institutions, or integrate the two functions into the institutional server of one institution. In addition, the institutional servers of different institutions can share status evaluation information through the blockchain, such as the institutional servers of different institutions forming a consortium chain.

[0054] It should be noted that the following details an information disclosure method provided by this application through specific stages. It is divided into four stages: user device registration, user device use, status evaluation information disclosure, and epidemic notification. Each stage will be specifically introduced below.

[0055] User device registration stage:

[0056] This stage can be further divided into institutional registration and registration of the encrypted identifier of the user device.

[0057] The process of institutional registration is as Figure 2As shown, taking the institutional servers of different institutions to form a blockchain (such as a consortium blockchain) as an example, each institution registers on the consortium blockchain. Each institution can agree on an asymmetric encryption algorithm to generate its own public and private key pairs; each institution securely stores its own private key and uploads its public key to the blockchain. In addition, the institution needs to develop a client application so that the user device can generate a status identification code, etc. according to the specifications of the client application. For example, the client application can be a mobile application or an integrated chip board of Bluetooth. The institution can preset the background server of the local machine that the client application can access.

[0058] Taking the first user device as an example, the encryption identification registration process of the user device can be as follows:

[0059] The first user device generates the public key of the first user device and the private key of the first user device; the first user device sends the device identification of the first user device and the public key of the first user device to the institutional server; the first user device obtains the first encryption identification from the institutional server.

[0060] The first encryption identification is specifically obtained by the institutional server encrypting the device identification of the first user device according to the public key of the first user device.

[0061] Specifically, the encryption identification registration process of the user device can be:

[0062] Step (1-1): The user device downloads the client application, starts the communication module (such as Bluetooth), and performs self-check of the user device.

[0063] Step (1-2): The user device generates a set of public and private key pairs, that is, the public key of the user device and the private key of the user device, on the local user device through the client application according to a pre-agreed asymmetric encryption algorithm.

[0064] Step (1-3): The user device accesses the institutional server through the client application and sends the device identification of the user device and the public key of the user device.

[0065] In step (1-3), for example, the access method for the user device to access the institutional server through the client application can be the HTTP / S method to access through the public network, and the device identification of the user device can be the hardware address of the user device, the hardware address of the Bluetooth chip of the user device, etc.

[0066] Step (1-4): The institutional server encrypts the device identification of the user device according to the public key of the user device to obtain the user's encryption identification.

[0067] Specifically, the institutional server uses Hash(bluetooth hardware address + public key address), where Hash represents the hashing function, + represents the concatenation of the bluetooth hardware address and the public key address. The result of concatenating the bluetooth hardware address and the public key address is used as the input parameter of the hashing function to generate a unique identity ID (encrypted identifier) for the user device, and the ID is returned to the user. The encrypted identifier can also be written into the blockchain.

[0068] Steps (1-5): The user device stores the encrypted identifier of the user device through the client application, and at the same time automatically registers a push channel with the institutional server, returning "registration successful".

[0069] It should be noted that the client application and the institutional server can use this push channel for data interaction subsequently.

[0070] After the first user device obtains the first encrypted identifier from the institutional server, it can broadcast the first encrypted identifier. The specific form of the first user device broadcasting the first encrypted identifier can be achieved by broadcasting the first identifier information, and the first identifier information includes the first encrypted identifier. For example, after the first user device turns on the communication module (such as the bluetooth module), it broadcasts the encrypted identifier of the first user device through the client application at a preset cycle.

[0071] User device usage stage:

[0072] The specific step process of this stage is as Figure 3 shown. Specifically:

[0073] Step 301: The first user device generates contact information of the second user device based on the client application of the institutional server, at least according to the second encrypted identifier broadcast by the second user device.

[0074] Step 302: The first user device updates the local contact information database of the client application based on the contact information of the second user device.

[0075] Step 303: The first user device generates a status identification code of the first user device based on the client application, at least according to the local contact information database.

[0076] In steps 301 to 303, the second encryption identifier is the encryption of the device identifier of the second user device by the institutional server. The local contact information database records the contact information between the first user device and each second user device. The second user device is any one of the second user devices. It should be noted that the form of the status identification code of the first user device can be various. For example, the status identification code of the first user device is in the form of a QR code. The local contact information database can be generated in the following manner:

[0077] When the first user device receives the identification information of any second user device through the client application, it indicates that the user devices broadcasting the same encryption identifier are around itself. Then, based on the client application, at least the second encryption identifier of the second user device is generated.

[0078] In steps 301 to 303, the first user device and each second user device can be Bluetooth devices. Bluetooth devices are typical devices for short-range communication and are very suitable for recording contact information between people. In addition, it can also be broadcast by sending a WiFi signal through a terminal device, etc. Therefore, in an alternative embodiment, the first user device receives the second encryption identifier through a short-range communication mode (such as through Bluetooth communication). In particular, when this method is applied to the field of infectious diseases, since infectious diseases are generally transmitted through short-range contact, receiving the second encryption identifier through a short-range communication mode can match the contact method of infectious diseases.

[0079] It should be noted that the user device can broadcast its own encryption identifier and receive the encryption identifiers of other devices simultaneously. Taking the first user device as an example, when each user device broadcasts or receives the encryption identifier of the user device, the encryption identifier of the first user device may be received by other user devices through broadcasting, and the first user device can also receive the encryption identifiers of other user devices.

[0080] For the institutional server, it cannot directly generate the status identification code. It can only indirectly generate the status identification code by the user device in the following manner:

[0081] The institutional server obtains the device identifiers from each user device; for each user device among the user devices, the institutional server encrypts the device identifier of the user device to obtain the encryption identifier of the user device; the institutional server sends the encryption identifier of the user device to the user device.

[0082] The encryption identifiers of the user devices are used to generate the status identification codes of the user devices through the broadcasting and / or receiving of the user devices.

[0083] In an alternative embodiment, before step 301, the following steps may be performed:

[0084] The first user device obtains the signal strength of the signal by which the second user device broadcasts the second encryption identifier; the first user device determines that the signal strength is greater than or equal to a preset strength threshold.

[0085] Specifically, the first user device receives the broadcast message of the second user device.

[0086] The broadcast message of the second user device includes: the timestamp of the broadcast message of the second user device; the signal strength of the broadcast message of the second user device; the second encryption identifier.

[0087] Based on the above broadcast message, step 302 may specifically be performed in the following implementation manner:

[0088] The first user device generates contact information of the second user device based on the client application, according to the timestamp of the broadcast message of the second user device, the signal strength of the broadcast message of the second user device, and the second encryption identifier.

[0089] It should be noted that a judgment condition may be added before the above embodiment. After determining that the signal strength of the broadcast message of the second user device is greater than or equal to the preset strength threshold, the above embodiment is executed. The specific value of the preset strength threshold may be updated by the institutional server.

[0090] More specifically, the client application records the encryption identifier of the received device, the signal strength of the broadcast message of the second user device, and the timestamp of the broadcast message of the second user device and stores them in the local contact information database. The exemplary format is shown in Table 1:

[0091]

[0092] Table 1 Storage format of the broadcast message of the second user device

[0093] In an alternative embodiment, before step 303, the following steps may be performed:

[0094] The first user device obtains a warning notice from the institutional server; the warning notice indicates the third encryption identifier of the device of the first type of user and / or the fourth encryption identifier of the device of the second type of user; then step 303 may specifically be:

[0095] The first user device generates a status identification code of the first user device based on the client application, according to the local contact information database and the encryption identifier indicated by the warning notice.

[0096] For example, in the scenario of infectious diseases, the first type of user is a confirmed patient, and the second type of user is a suspected patient. If the device encryption identifier of the first type of user and / or the device encryption identifier of the second type of user are included in the local contact information database, the status indication of the status identification code of the first user device indicates a high epidemic risk level at this time.

[0097] Another example is that if the device encryption identifier of the first type of user and / or the device encryption identifier of the second type of user are not included in the local contact information database, the status indication of the status identification code of the first user device indicates a low epidemic risk level at this time.

[0098] Furthermore, the local contact information database can also be maintained in the following manner. Specifically:

[0099] The first user device deletes the contact information in the local contact information database that is outside the preset time range.

[0100] The preset time range is determined according to the preset time set by the institutional server. In the scenario of infectious diseases, the institutional server can set the preset time according to the medical incubation period. Specifically, if the institutional server sets the preset time to 14 days, then the first user device deletes the contact information 14 days before the current moment.

[0101] Status assessment information disclosure stage:

[0102] For the institutional server, it cannot directly generate a status identification code. It can only indirectly generate a status identification code for the user device through the following method:

[0103] The institutional server obtains the device identifiers from each user device; for each user device among the user devices, the institutional server encrypts the device identifier of the user device to obtain the encrypted identifier of the user device; the institutional server sends the encrypted identifier of the user device to the user device.

[0104] The encrypted identifiers of the user devices are used to generate the status identification codes of the user devices through the broadcast and / or reception of the user devices.

[0105] An optional implementation method is:

[0106] The institutional server obtains the status evaluation information corresponding to the encrypted identifier of the user device; the institutional server obtains the signature of the status evaluation information according to each data item in the status evaluation information and the obfuscation information of the data item according to a preset signature algorithm; the institutional server generates a status evaluation certificate corresponding to the encrypted identifier of the user device according to the signature of the status evaluation information and the status evaluation information.

[0107] It should be noted that the status evaluation information corresponding to the encrypted identifier of the user device can be reported by the patient through the patient's user device, or read by the institutional server from an authorized status evaluation information database. For example, if the institutional server is a hospital, the hospital has its own status evaluation information database and can directly read from it. To protect the privacy of patients, the status evaluation information is used to obtain the status evaluation certificate through the obfuscation information of each data item.

[0108] It should be noted that the status evaluation information corresponding to the encrypted identifier of the user device can be included in various types of reported messages.

[0109] For example, when the institution receives the reported information of the first type of user, the generated status evaluation certificate is a confirmation certificate, and the certificate content includes the status evaluation information and the patient ID. The certificate format is shown in Table 2:

[0110]

[0111]

[0112] Table 2 Certificate Content

[0113] Among them, the data content salt value is the obfuscation information of each data item in the status evaluation information, which can be randomly generated by the institutional server, and the format can be the same as the data content item. The calculation of the signature value can be specifically as follows:

[0114] First, it is necessary to serialize the status evaluation certificate in lexicographical order. Among them, the keys of each data item in the data content remain unchanged, and the values corresponding to the keys of each data item can be Hash(original data value + salt value), where Hash represents the hash function, + represents the concatenation of the original data value and the salt value, and the result of concatenating the original data value and the salt value is used as the input parameter of the hash function. In this way, it is ensured that the signature value will not change due to the subsequent disclosure of fewer data items. The institutional server signs with a private key previously agreed upon with other institutions. The private key can be a private key that meets the following conditions: a signature algorithm consistent with the public-private key pair algorithm at the time of registration of the institutional server, generated before being passed into the institutional server, and corresponding to the public key uploaded to the chain. In summary, the signature value in the status evaluation certificate can be expressed as follows:

[0115] Signature value = Sign(serialize(Credential <Data content: (key -> key, value -> Hash(value + salt))>)); Sign means encrypting with a private key.

[0116] Further, when the institutional server wants to disclose the status evaluation credential to other institutions, it can selectively disclose, that is, only disclose some data item contents in the status evaluation information. When the institutional server is a node on the blockchain; one implementation is as follows:

[0117] The institutional server generates encrypted information for each data item in the status evaluation information allowed to be disclosed in the preset disclosure policy, as well as the obfuscation information of each data item, according to the preset disclosure policy; the institutional server generates a selectively disclosed status evaluation credential corresponding to the encrypted identifier of the user device based on the encrypted information of each data item; the institutional server uploads the selectively disclosed status evaluation credential to the blockchain through the nodes on the blockchain.

[0118] The institution makes a minimized selective disclosure of the confirmed credential, only disclosing the patient ID content, and not disclosing the status evaluation information. The specific selective disclosure algorithm is: the content of each data item = Hash(original data value + salt value), which is consistent with the processing method in the above signature algorithm. Subsequently, this selectively disclosed credential is transferred to all participating institutions on the chain through a on-chain or off-chain method. A credential example of a selectively disclosed status evaluation credential is as follows:

[0119]

[0120] Table 3 Credential example of selectively disclosed status evaluation credential

[0121] Epidemic notification stage:

[0122] It should be noted that when the institutional server receives a new reported message or a selectively disclosed status evaluation credential forwarded by the server of other institutions, it can push a warning notice to the managed user devices.

[0123] When the institutional server receives a selectively disclosed status evaluation credential forwarded by the server of other institutions, it can verify the selectively disclosed status evaluation credential in the following way:

[0124] Verify that the selectively disclosed status evaluation credential has not expired, and the creation date and expiration date are legal; verify that the data content of the selectively disclosed status evaluation credential is not missing; query the public key corresponding to the institutional server through the blockchain, and call the signature verification operation of the signature algorithm to pass the signature verification of the selectively disclosed status evaluation credential.

[0125] After verification, the institutional server can notify the managed user devices in the following ways:

[0126] If the institutional server determines that the local user device is a device of a first-type user and / or a device of a second-type user based on the status evaluation information corresponding to the encryption identifier of the local user device, the institutional server broadcasts the encryption identifier of the local user device to some or all of the user devices; and / or if the institutional server determines that the external user device is a device of a first-type user and / or a device of a second-type user based on the selective disclosure status evaluation certificate corresponding to the encryption identifier of the external user device, the institutional server broadcasts the encryption identifier of the external user device to some or all of the user devices.

[0127] For example, in the application scenario of infectious diseases, if the verification is legal and the selective disclosure status evaluation certificate is a confirmed case certificate or a suspected infection certificate, the institutional server can record the encryption identifier of the user device corresponding to the confirmed case certificate or the suspected infection certificate. The institution can regularly push the IDs of all newly added first-type users to all device IDs registered through this institution.

[0128] Furthermore, if the user authorizes access to information, for any authorized user device among the authorized user devices in each of the user devices, the institutional server records the encryption identifier broadcast by the user device received by the authorized user device; an alternative implementation of the institutional server broadcasting the encryption identifier of the local user device to some or all of the user devices can be:

[0129] The institutional server broadcasts the encryption identifier of the local user device to: the authorized user devices that have recorded the encryption identifier of the local user device among the authorized user devices, and the unauthorized user devices among the user devices.

[0130] An alternative implementation of the institutional server broadcasting the encryption identifier of the external user device to some or all of the user devices can be:

[0131] The institutional server broadcasts the encryption identifier of the external user device to: the authorized user devices that have recorded the encryption identifier of the external user device among the authorized user devices, and the unauthorized user devices.

[0132] Specifically, if the user authorizes the contact information, the institutional server can write this information into the status evaluation certificate through the client application, send it to other authorizations, and then when pushing the alarm notification, only push the alarm notification to the user devices that have contact with the encrypted identifier of the user device in the status evaluation certificate, which can reduce the target devices pushed by the institutional server.

[0133] When the user device receives the contact push from the institutional server through the client application, it will check the local contact information database of the user device. If it finds that the encrypted identifier of the confirmed user appears in the local contact information database of the user device, it will pop up a prompt message, which can be used to prompt the user to detect or isolate; if not, it will be directly ignored.

[0134] As Figure 4 shown, the present invention provides an information disclosure device, including: a processing module 401, configured to generate contact information of a second user device based on a client application of an institutional server at least according to a second encrypted identifier broadcast by the received second user device; the second encrypted identifier is obtained by the institutional server encrypting the device identifier of the second user device; update the local contact information database of the client application based on the contact information of the second user device; the local contact information database records the contact information between the first user device and each second user device; the second user device is any user device of each second user device; a generating module 402, configured to generate a status identification code of the first user device based on the client application at least according to the local contact information database.

[0135] Optionally, the processing module 401 is further configured to: generate a public key of the first user device and a private key of the first user device; send the device identifier of the first user device and the public key of the first user device to the institutional server; obtain a first encrypted identifier from the institutional server; the first encrypted identifier is obtained by the institutional server encrypting the device identifier of the first user device according to the public key of the first user device; broadcast the first encrypted identifier.

[0136] Optionally, the processing module 401 is further configured to: obtain the signal strength of the second user device broadcasting the second encrypted identifier; determine that the signal strength is greater than or equal to a preset strength threshold.

[0137] Optionally, the processing module 401 is further configured to: obtain a warning notice from the institutional server; the warning notice indicates a third encrypted identifier of a device of a first type of user and / or a fourth encrypted identifier of a device of a second type of user; the generating module 402 is specifically configured to: based on the client application, generate a status identification code of the first user device according to the local contact information database and the encrypted identifiers indicated by the warning notice.

[0138] Optionally, the processing module 401 is further configured to: delete contact information in the local contact information database that is outside a preset time range; the preset time range is determined according to a preset time set by the institutional server.

[0139] Optionally, the device receives the second encrypted identifier through a near-field communication mode.

[0140] As Figure 5 shown, the present invention provides an information disclosure device, including: an obtaining module 501, configured to obtain device identifiers from each user device; for each user device among the user devices, encrypt the device identifier of the user device to obtain an encrypted identifier of the user device; a transmission module 502, configured to send the encrypted identifier of the user device to the user device; the encrypted identifiers of the user devices are used to generate status identification codes of the user devices through broadcasting and / or receiving of the user devices.

[0141] Optionally, the obtaining module 501 is further configured to: obtain status evaluation information corresponding to the encrypted identifier of the user device; the processing module is further configured to: according to each data item in the status evaluation information and the obfuscation information of the data item, obtain a signature of the status evaluation information according to a preset signature algorithm; generate a status evaluation certificate corresponding to the encrypted identifier of the user device according to the signature of the status evaluation information and the status evaluation information.

[0142] Optionally, the device is a node on a blockchain; the processing module is further configured to: according to a preset disclosure policy, generate encrypted information of each data item in the status evaluation information allowed to be disclosed in the preset disclosure policy and the obfuscation information of each data item; generate a selective disclosure status evaluation certificate corresponding to the encrypted identifier of the user device according to the encrypted information of each data item; upload the selective disclosure status evaluation certificate to the blockchain through the node on the blockchain.

[0143] Optionally, the processing module is further configured to: if it is determined, based on the status evaluation information corresponding to the encryption identifier of the local user device, that the local user device is a device of a first type of user and / or a device of a second type of user, broadcast the encryption identifier of the local user device to some or all of the user devices; and / or if it is determined, based on the selective disclosure status evaluation certificate corresponding to the encryption identifier of the external user device, that the external user device is a device of a first type of user and / or a device of a second type of user, broadcast the encryption identifier of the external user device to some or all of the user devices.

[0144] Optionally, for any authorized user device among the authorized user devices of each user device, the apparatus records the encryption identifier broadcast by the user device received by the authorized user device; specifically, the processing module is configured to: broadcast the encryption identifier of the local user device to: the authorized user devices that have recorded the encryption identifier of the local user device among the authorized user devices, and the unauthorized user devices among the user devices; broadcast the encryption identifier of the external user device to: the authorized user devices that have recorded the encryption identifier of the external user device among the authorized user devices, and the unauthorized user devices.

[0145] An embodiment of the present application provides a computer device, including a program or instruction, which when executed, is used to execute an information disclosure method provided by an embodiment of the present application and any optional method.

[0146] An embodiment of the present application provides a storage medium, including a program or instruction, which when executed, is used to execute an information disclosure method provided by an embodiment of the present application and any optional method.

[0147] Finally, it should be noted that those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, optical storage, etc.) containing computer-usable program code.

[0148] This application is described with reference to the flowcharts and / or block diagrams of methods, apparatus (systems), and computer program products according to the application. It should be understood that each flow and / or block in the flowchart and / or block diagram, and the combination of flows and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing device to generate a machine, such that the instructions executed by the processor of the computer or other programmable data processing device generate means for implementing the specified functions in the Figure 1 one or more flows and / or blocks Figure 1 one or more blocks.

[0149] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, such that the instructions stored in the computer-readable memory generate a manufactured article including instruction means that implement the specified functions in the Figure 1 one or more flows and / or blocks Figure 1 one or more blocks.

[0150] Obviously, those skilled in the art can make various changes and modifications to this application without departing from the scope of this application. Thus, if these modifications and variations of this application fall within the scope of the claims of this application and their equivalent technologies, this application is also intended to include these changes and modifications.

Claims

1. An information disclosure method, characterized in that, Including: The first user device, based on the client application of the institutional server, generates contact information of the second user device at least according to the second encrypted identifier broadcast by the received second user device; The second encrypted identifier is obtained by the institutional server encrypting the device identifier of the second user device; wherein, the institutional server is a node on the blockchain; each institutional server forms a consortium chain, and the encrypted identifiers of each user device are used to generate status identification codes of each user device through broadcasting and receiving by each user device; the encrypted identifiers of each user device are determined by each institutional server according to the device identifier and public key of each user device, and each institutional server writes the corresponding encrypted identifier into the blockchain; the first user device receives the second encrypted identifier through a short-range communication mode; The first user device updates the local contact information database of the client application based on the contact information of the second user device; the local contact information database records the contact information between the first user device and each second user device; the second user device is any one of each second user device; The first user device generates a status identification code of the first user device based on the client application at least according to the local contact information database; the client application is used to receive the encrypted identifier corresponding to the user device that passes the verification of the selectively disclosed status evaluation voucher; wherein, the selectively disclosed status evaluation voucher is generated by the institutional server according to a preset disclosure policy, encrypting each data item in the status evaluation information allowed to be disclosed in the preset disclosure policy and the confusion information of each data item to generate encrypted information of each data item; and is generated according to the encrypted information of each data item; the institutional server uploads the selectively disclosed status evaluation voucher to the blockchain through the node on the blockchain.

2. The method according to claim 1, wherein, Also including: The first user device generates a public key and a private key of the first user device; The first user device sends the device identifier and the public key of the first user device to the institutional server; The first user device obtains a first encrypted identifier from the institutional server; the first encrypted identifier is obtained by the institutional server encrypting the device identifier of the first user device according to the public key of the first user device; The first user device broadcasts the first encrypted identifier.

3. The method according to claim 1, characterized in that, Before the client application based on the institutional server generates the contact information of the second user device at least according to the second encrypted identifier broadcast by the received second user device; also including: The first user device obtains the signal strength of the second user device broadcasting the second encrypted identifier; The first user device determines that the signal strength is greater than or equal to a preset strength threshold.

4. The method according to claim 1, wherein Also including: The first user device obtains a warning notice from the institutional server; the warning notice indicates a third encrypted identifier of a device of a first type of user and / or a fourth encrypted identifier of a device of a second type of user; The first user device generates a status identification code of the first user device based on the client application and at least according to the local contact information database, including: The first user device generates the status identification code of the first user device based on the client application, according to the local contact information database and the encryption identification indicated by the warning notice.

5. The method according to any one of claims 1 to 4, characterized in that It further includes: The first user device deletes the contact information in the local contact information database that is outside the preset time range; the preset time range is determined according to the preset time set by the institutional server.

6. An information disclosure method, characterized in that, It includes: The institutional server obtains the device identifiers of each user device; wherein, the institutional server is a node on the blockchain; each institutional server forms a consortium chain; For each user device among the user devices, the institutional server encrypts the device identifier of the user device to obtain the encrypted identifier of the user device; wherein, the encrypted identifiers of the user devices are used to generate the status identification codes of the user devices through broadcasting and receiving by the user devices; the encrypted identifiers of the user devices are determined by each institutional server according to the device identifier and the public key of each user device, and each institutional server writes the corresponding encrypted identifier into the blockchain; the encrypted identifiers of other user devices received by each user device through the short-range communication mode; The institutional server sends the encrypted identifier of the user device to the user device; the encrypted identifiers of the user devices are used to generate the status identification codes of the user devices through broadcasting and receiving by the user devices; The institutional server generates encrypted information of each data item according to each data item in the status evaluation information allowed to be disclosed in the preset disclosure policy and the obfuscation information of each data item; The institutional server generates a selective disclosure status evaluation voucher corresponding to the encrypted identifier of the user device according to the encrypted information of each data item; The institutional server uploads the selective disclosure status evaluation voucher to the blockchain through the node on the blockchain.

7. The method according to claim 6, characterized in that, It further includes: The institutional server obtains the status evaluation information corresponding to the encrypted identifier of the user device; The institutional server obtains the signature of the status evaluation information according to each data item in the status evaluation information and the obfuscation information of the data item, according to the preset signature algorithm; The institutional server generates a status evaluation voucher corresponding to the encrypted identifier of the user device according to the signature of the status evaluation information and the status evaluation information.

8. The method according to claim 7, characterized in that, It further includes: The institutional server determines that the local user device is a device of a first type of user and / or a device of a second type of user according to the status evaluation information corresponding to the encrypted identifier of the local user device, and the institutional server broadcasts the encrypted identifier of the local user device to some or all of the user devices; and / or The institutional server evaluates a credential based on a selective disclosure status corresponding to an encrypted identifier of an external user device, determines that the external user device is a device of a first type of user and / or a device of a second type of user, and the institutional server broadcasts the encrypted identifier of the external user device to some or all of the user devices.

9. The method according to claim 8, characterized in that, For any authorized user device among the authorized user devices of each of the user devices, the institutional server records the encrypted identifier broadcast by the user device received by the authorized user device; The institutional server broadcasts the encrypted identifier of the local user device to some or all of the user devices; including: The institutional server broadcasts the encrypted identifier of the local user device to: the authorized user devices that have recorded the encrypted identifier of the local user device among the authorized user devices, and each unauthorized user device among the user devices; The institutional server broadcasts the encrypted identifier of the external user device to some or all of the user devices; including: The institutional server broadcasts the encrypted identifier of the external user device to: the authorized user devices that have recorded the encrypted identifier of the external user device among the authorized user devices, and each unauthorized user device.

10. A computer device, characterized in that, Including a program or instruction, when the program or instruction is executed, the method according to any one of claims 1 to 5 or 6 to 9 is executed.

11. A storage medium, characterized in that, Including a program or instruction, when the program or instruction is executed, the method according to any one of claims 1 to 5 or 6 to 9 is executed.

Images