A cloud platform management system that does not involve privacy

Abstract

The present invention relates to a cloud platform management system that does not involve privacy, characterized in that it includes at least an information receiving module (300) connected to at least one TOF image sensor (301), the scene that is not within a limited temperature range collected by the TOF image sensor is displayed in real color, so that the complete image collected by the TOF image sensor includes a scene image displayed in real color and a three-dimensional contour image displayed in non-real color, and the filled area of ​​the non-real color filled contour image is filled with a color representing the body temperature of an individual, thereby forming a three-dimensional contour image with body temperature characteristics, and when management terminals of several communities are connected to the cloud platform system, the management terminals determine the dynamic distribution of the population and abnormal personnel flow through the flow of dynamic three-dimensional contour images collected by several terminals equipped with TOF image sensors. The present invention protects privacy by not displaying the non-real three-dimensional contour image.

Description

[0001] This invention is a divisional application of the invention patent with application number 202010649578.5, application type is invention, patent name is a cloud platform system based on intelligent Internet of Things, and application date is July 8, 2020. Technical Field

[0002] The present invention relates to the technical field of Internet of Things, and in particular to a cloud platform management system that does not involve privacy. Background Art

[0003] Smart city (community) refers to a new concept of community management and a new model of social management innovation under the new situation. It makes full use of the Internet and the Internet of Things, involving many fields such as smart buildings, smart homes, road network monitoring, personal health and digital life, and gives full play to the advantages of developed information and communication (ICT) industry, excellent telecommunications services and information infrastructure. By building ICT infrastructure, certification, security and other platforms and demonstration projects, we will accelerate the research of key industrial technologies, build a smart environment for the development of city (community), form new life, industrial development, social management and other models based on massive information and intelligent filtering and processing, and build a new city (community) form for the future.

[0004] Chinese patent CN108122347A discloses a smart unmanned community service cloud cabinet system, including a smart community cloud platform, an unmanned community service cloud cabinet, a mobile terminal, a computer service terminal and a transmission network; the smart community cloud platform includes a background management module, a smart party building module, a volunteer service management module, a property service management module, an unmanned community service cloud cabinet module, a community information management module and a community e-commerce module; the smart community cloud platform, the unmanned community service cloud cabinet, the mobile terminal and the computer service terminal transmit data through the transmission network. The system sends instructions to the main control board of the service cloud cabinet through the mobile Internet, and the main control board controls the electric locks of each cabinet box by controlling the lock control board. It improves residents' satisfaction and community service efficiency, reduces the time and process burden of residents' affairs, and has high practical value. The present invention also discloses an application method of a smart unmanned community service cloud cabinet system.

[0005] Chinese patent CN110807715A discloses a smart community cloud platform, which includes: a user information acquisition unit, which is used to acquire the user's face information through face recognition technology; a cloud platform function realization unit, which is used to realize smart shopping, smart property, smart recruitment, smart life, smart finance, smart legal affairs, smart government affairs, smart education, smart medical care, payment and recharge services, and ticket booking services for the user; a cloud platform profit unit, which is used to ensure that the cloud platform is in a profitable state; a cloud platform active unit, which is used to feedback points matching the consumption behavior to the user when the user generates consumption behavior, wherein the points are used as cash deducted during the consumption process. The smart community cloud platform provided by this application can integrate various life services and provide users with integrated life services.

[0006] Chinese patent CN105119998B discloses an Internet smart community cloud, including: a community cloud platform; multiple community sub-platforms, which correspond to each community and are all connected to the community cloud platform; wherein, for any community sub-platform, it includes: a home security system, which is connected to the community sub-platform for home security management; a parking system, which is connected to the community sub-platform for parking and parking space management; a property management system, which is connected to the community sub-platform for property management; a business district service system, which is connected to the community sub-platform for providing business district services. The present invention is based on the Internet and uses the Internet of Things technology to integrate the smart home and security system in the family, the parking system, security system and community business district services in the community, so that property managers, owners and various smart systems can form a rich and colorful information interaction.

[0007] As mentioned above, the existing cloud platforms of smart communities focus on integrating home security equipment, community information acquisition, and daily improvements. However, in the actual smart cloud platform, the management of smart communities inevitably involves a large amount of personal identity information and daily identity authentication management procedures. For example, the identity identification of community personnel entering and leaving the residential area must be registered with the ID number. However, the existing cloud platforms of smart communities have ignored the protection of identity privacy information. In the process of identity verification, the entire identity information of the residents is always displayed, or the identity authentication terminal can view the entire identity information of the user on the cloud platform as long as it has the viewing permission. The smart community includes not only the information of community residents, but also the management or association of several information such as the association of hospital information in the community, the association of community water and electricity information, and the association of community school information. Therefore, the cloud platform of the community stores several types of information such as the identity information and behavior information of residents. A single category in the identity information of residents does not necessarily belong to personal privacy. For example, the name and gender of the resident do not belong to personal privacy because of the duplicate name. The phenomenon of duplicate gender exists and is common. However, bundling personal information with its behavior information is combined into personal privacy information. For example, a person went to the hospital to see a doctor, bought a high-speed rail ticket from Beijing to Changsha, and so on, and the information is associated together to form private information. For the party that owns the identity verification terminal with lax information management, there is a phenomenon of leaking the obtained personal information without spreading it, which leads to the spread of residents' private information. Therefore, how to enable the authority verification end to view the necessary information during the identity verification process while preventing it from viewing all the identity information of the residents is a technical problem that must be solved.

[0008] In addition, on the one hand, there are differences in understanding among those skilled in the art; on the other hand, the inventor studied a large number of documents and patents when making the present invention, but due to space limitations, not all details and contents are listed in detail. However, this does not mean that the present invention does not have the characteristics of these prior arts. On the contrary, the present invention already has all the characteristics of the prior art, and the applicant reserves the right to add relevant prior art to the background technology. Summary of the invention

[0009] The existing cloud platform of smart communities ignores the protection of identity privacy information. During the identity verification process, it always displays the complete identity information of residents, or the identity verification terminal can view the user's complete identity information on the cloud platform as long as it has viewing permission, which is not conducive to the protection of user privacy information.

[0010] In view of the shortcomings of the prior art, the present invention provides a cloud platform system based on intelligent Internet of Things, which at least includes a verification module, a data processing module, a database and a management module. The verification module and the data processing module respectively establish data connections with the database in a one-way encrypted ferry mode, the management module establishes a data connection with the data processing module, and the management module establishes data connections with several management terminals and several user terminals. The database associates at least one user information combination with a verification factor with security parameters and / or a viewing authority level based on user-defined setting information. The verification module verifies the viewing authority level and / or the verification factor of the verification terminal that issues the information request. The data processing module responds to the verification result of the verification module and feeds back a request result containing necessary information corresponding to the information request to the verification terminal or the user terminal, wherein the verification module determines the consistency between the user and the holder of the user terminal based on the similarity between the three-dimensional contour image uploaded by the user terminal and / or the verification terminal and the historical three-dimensional contour image stored in the data path. The present invention not only realizes verification but also protects the privacy of the user by providing the verification terminal with necessary information content or a request result without user information.

[0011] The cloud platform system also includes an information receiving module connected to at least one TOF image sensor, the information receiving module establishes data connections with the verification module and the data processing module respectively, the information receiving module sends the received three-dimensional contour image to the data processing module, the data processing module sends the three-dimensional contour image to the database or management module, so that at least one management terminal connected to the management module displays a dynamic three-dimensional contour image of an individual; wherein the three-dimensional contour image collected by the TOF image sensor includes a point set contour image of non-real color and a filled contour image of non-real color. The present invention protects the facial information of an individual and avoids the leakage of personal privacy information by using a TOF image sensor to collect a three-dimensional contour image without a personal identifier.

[0012] The scenes captured by the TOF image sensor that are not within the limited temperature range are displayed in real colors, so that the complete image captured by the TOF image sensor includes a scene image displayed in real colors and a three-dimensional contour image displayed in non-real colors. The TOF image sensor determines the contour and depth of an object based on infrared light reflection, so it is able to collect the temperature of the object and distinguish the temperature. The temperature of an object is significantly different from the temperature of the human body and the dynamic posture changes. Therefore, the scene information is distinguished from the three-dimensional contour information of the human body and animals through temperature characteristics, presenting mitigation monitoring information that does not leak personal facial images, which is conducive to the viewing and understanding of management personnel.

[0013] Preferably, the filled area of ​​the non-real color filled contour image is filled with a color representing the individual's body temperature, thereby forming a three-dimensional contour image with body temperature characteristics. When necessary, such as during epidemic monitoring, the three-dimensional contour image with body temperature characteristics is more conducive to monitoring and controlling people with abnormal body temperature, and is also conducive to controlling whether designated people leave the limited area.

[0014] Preferably, the user terminal includes a display component, and when the data processing module sends a request result to the verification terminal based on the instruction of the verification module, the display component of the user terminal simultaneously receives the request result, or, when the verification terminal sends an information request to the verification module, the display component of the user terminal receives and displays the request result sent by the data processing module. The display component can be a display screen. The present invention is conducive to the user seeing the specific information obtained by the verification terminal, and avoids the verification terminal obtaining information that the user does not allow.

[0015] Preferably, the user's identity identification is set on the surface of the user terminal or displayed by the display component of the user terminal. The verification terminal sends the identity identification and information request obtained by contacting the user terminal to the verification module. The data processing module retrieves the information corresponding to the identity identification and the information request from the database based on the verification result sent by the verification module and feeds back the request result, which is part of the user information or a request result corresponding to the information request without information content. The advantage of the identity identification is that it can facilitate the verification terminal to perform identity authentication when it is inconvenient for the user terminal to establish a connection with the verification terminal. In this case, the data processing module delays the storage of the feedback content or request result, and feeds it back to the user terminal in the form of information record when the user terminal is connected to the verification terminal.

[0016] Preferably, the authentication factor with security parameters includes at least a computer code, a biometric factor, a three-dimensional profile image and a password, and the biometric factor includes at least a unique fingerprint, iris, lip print, palm print and gesture. The setting of security parameters enables users to clearly understand the security level of their customized authentication factors to avoid insufficient protection due to insufficient security.

[0017] The verification factor with security parameters includes a dedicated verification factor, based on which the verification terminal can obtain part or all of the necessary user information beyond the user's customized viewing permission level. The dedicated verification factor involves national government management and life-saving emergency.

[0018] Preferably, the data processing module updates the identity identification by adding a warning symbol pattern based on the abnormal body temperature information of the user collected by the TOF image sensor and sends it to the user terminal, management terminal and / or verification terminal, which is conducive to the management personnel or verification terminal to quickly judge the user's abnormality and take corresponding measures.

[0019] Preferably, when at least two of the verification terminals within a specified time belong to the same verification party and have different information requests, the verification module requests a verification factor corresponding to the user information type combination requested for verification by the verification party from at least one verification terminal, and sends a warning message to the user terminal when the verification terminal fails to provide the verification factor within the specified time. This is beneficial in preventing the verification party from obtaining the user's privacy information by various means by bypassing the restrictions on the viewing permission level, making it easier for users to view and block it.

[0020] The present invention also provides a cloud platform management system that does not involve privacy, characterized in that it includes at least an information receiving module connected to at least one TOF image sensor, and the scene that is not within the limited temperature range collected by the TOF image sensor is displayed in real color, so that the complete image collected by the TOF image sensor includes a scene image displayed in real color and a three-dimensional contour image displayed in non-real color, and the filled area of ​​the non-real color filled contour image is filled with a color representing the individual's body temperature, thereby forming a three-dimensional contour image with body temperature characteristics.

[0021] When the management terminals of several communities are connected to the cloud platform system, the management terminals can determine the dynamic distribution of the population and abnormal flow of people through the flow of dynamic three-dimensional contour images collected by several terminals equipped with TOF image sensors.

[0022] Preferably, it also includes a data processing module and a management module. The data processing module adds a landmark identification to the identity identification of the user entering the designated place at the designated time based on the management instructions of at least one management module to facilitate the identity verification of the verification terminal or verification personnel.

[0023] Preferably, the information receiving module collects a three-dimensional contour image with attached body temperature information through at least one TOF image sensor based on the management instructions of at least one management module, and the data processing module attaches a warning symbol pattern to the identity tag based on the user's abnormal body temperature information to prompt the user's abnormal body temperature.

[0024] Preferably, the data processing module counts individual behavior trajectories and the distance between at least two three-dimensional contour images based on management instructions from at least one management terminal and designated three-dimensional contour image collection locations.

[0025] Preferably, a database is also included, and the community management terminal determines whether the user has entered the epidemic area based on the verification address information temporarily written into the database by the verification terminal.

[0026] Preferably, a verification module is included, and in an emergency situation where a patient is in a coma, a verification terminal of a medical institution obtains the patient's medical history information by inputting a dedicated verification factor and a three-dimensional contour image of the patient with real colors.

[0027] Preferably, the non-real color is a color different from the real color of the image of the individual himself.

[0028] Non-real colors include single colors, non-real colors, and colors based on dynamic changes.

[0029] The present invention also provides an epidemic management system based on a cloud platform, characterized in that it comprises at least an information receiving module, a data processing module and a management module connected to at least one TOF image sensor, wherein the complete image collected by the TOF image sensor comprises a scene image displayed in real colors and a three-dimensional contour image displayed in non-real colors,

[0030] The filled area of ​​the non-real color filled contour image is filled with a color representing the individual's body temperature, thereby forming a three-dimensional contour image with body temperature characteristics. The information receiving module collects the three-dimensional contour image with body temperature characteristics through at least one TOF image sensor based on the management instructions of at least one management module. The data processing module adds a warning symbol pattern to the identity identification based on the user's abnormal body temperature information to prompt the user of abnormal body temperature.

[0031] Preferably, the data processing module counts individual behavior trajectories and the distance between at least two three-dimensional contour images based on the management instructions of at least one management terminal and the designated three-dimensional contour image collection location, so as to determine close contacts of confirmed cases during the epidemic.

[0032] Preferably, during the epidemic monitoring period, the management terminal collects three-dimensional contour images with additional body temperature characteristics based on the TOF image sensor to monitor whether the designated person leaves the specified area. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 It is a logical module diagram of the cloud platform system based on intelligent Internet of Things of the present invention;

[0034] Figure 2 It is a schematic diagram of the information structure stored in the database of the cloud platform;

[0035] Figure 3 is a schematic diagram of a point set contour image of a TOF image sensor; and

[0036] Figure 4 is a schematic diagram of a filled-in outline image of a TOF image sensor.

[0037] Reference numerals list

[0038] 100: verification module; 200: data processing module; 300: information receiving module; 301: TOF image sensor; 400: database; 500: management module; 501: management terminal; 502: user terminal; 600: verification terminal. DETAILED DESCRIPTION

[0039] The following is a detailed description with reference to the accompanying drawings.

[0040] The cloud platform system based on intelligent Internet of Things of the present invention is also called a cloud platform management system for an intelligent community, or a cloud platform management system for an intelligent park, or an identity authentication cloud platform system based on protecting privacy information.

[0041] The cloud platform system based on intelligent Internet of Things of the present invention comprises at least a verification module 100, a data processing module 200, a database 400 and a management module 500 which are data-connected to each other. Figure 1 As shown, the verification module 100 and the data processing module 200 respectively establish a one-way data connection with the database 400 in a ferrying manner. The management module 500 establishes a data connection with the data processing module 200. The verification module 100 is used to confirm the information viewing authority level of the verification terminal 600 that issues the information request. After the viewing authority level of the verification terminal 600 is confirmed, the data processing module 200 is used to retrieve relevant information from the database 400 for processing according to the viewing authority level and information request of the verification terminal 600, and feedback relevant information or relevant information request results to the verification terminal 600. The database 400 is used to store information in a structured storage manner. The management module 500 is used to establish a data connection with a number of management terminals 501 and user terminals 502, which is convenient for management personnel and users to manage and set. The cloud platform system also includes a communication device for sending and receiving information.

[0042] The present invention also includes an information receiving module 300. The information receiving module 300 establishes data connections with the verification module 100 and the data processing module 200 respectively. The information receiving module 300 is used to receive, classify and store the transmission information of several TOF image sensors 301 that establish data connections with the cloud platform system in a database 400. The acquisition terminal connected to the information receiving module 300 is not limited to the TOF image sensor 301, and can also include several sensors or sensing devices such as humidity sensors and smoke sensors.

[0043] The verification module 100, data processing module 200, information receiving module 300, database 400 and management module 500 in the present invention can be one or more of an integrated chip, a server, a processor or a server group with dedicated functions. For example, when the storage capacity of the database 400 is large, the database 400 is a server group. The management terminal 501 can be a computer, an intelligent electronic device or a combination thereof.

[0044] The user terminal 502 stores information data consistent with the cloud platform database 400. The user terminal 502 can be connected to the verification terminal 600 in a contact contact manner, or in a laser communication interface manner, or in a near-field radio manner. Preferably, the user terminal 502 and the verification terminal 600 perform a one-to-one security authentication based on at least one password information through a connection port. The user terminal 502 can be a card with a storage chip and a portable electronic device. Portable electronic devices include mobile phones, bracelets, watches, electronic rings, necklaces, etc., as long as they are easy to carry.

[0045] Preferably, the user terminal 502 is provided with a display component, which can display the identity identification, the information fed back to the verification terminal 600, and the information that the verification terminal 600 needs to verify. Preferably, the identity identification is a QR code or other identification pattern. For example, the QR code information contains one or more of the following information: a custom name, an identification code that needs to be read by a dedicated card reader, etc.

[0046] Preferably, the identity information displayed by the electronic device is provided with an anti-counterfeiting mark, such as a QR code. Such a setting has the advantage that during the verification process, a fake identity is prevented from disturbing the verification information, and the identity is prevented from being forged and used by others.

[0047] In the prior art, it is common to limit and associate the types of information with the viewing permission levels. This results in the following drawbacks: as long as there is viewing permission, the user's real information can be obtained, for example, when checking age, the real name + ID number is displayed, or the real name + date of birth, etc. The information display method in the prior art still leaks the user's privacy information and provides additional information beyond what the verification terminal 600 needs.

[0048] In the present invention, the viewing result is displayed according to the viewing level and the viewing requirement information instead of directly displaying the specific identity information by splitting the structure of the identity information, thereby achieving the purpose of not leaking private information. The present invention adds a unique verification factor as the verification content, and associates the verification factor with the three-dimensional contour image, so that the user's identity can be identified and verified online, and can also be identified and verified offline on-site through the verification terminal 600.

[0049] like Figure 2 The user information stored in the database 400 includes at least a custom name A, a real name B, three-dimensional profile information C, facial information D, an ID number E and several N verification factors. N verification factors refer to verification factors with different verification strengths. The user information also includes additional data H. Additional data H refers to data information temporarily uploaded to the database 400 by the verification terminal 600, such as the location and time of the verification site. Preferably, the N verification factors are unique verification factors. User information can form several information combinations. When viewing information including the real name, verification factors are required for verification. When verifying other behavioral information of the user information, the name part is displayed as a custom name. This allows the real name and behavioral information to be separated, preventing others from obtaining personal privacy and life patterns through real name + behavioral information.

[0050] Preferably, the custom name of the present invention is a verification factor that is uniquely associated with a real name or a specific real identity. The custom name is not limited to being unique, and can be a limited number of names. The custom name is declared and used by the user under the supervision of the administrator of the cloud platform system.

[0051] Preferably, the user information also includes segmented data F. The segmented data F includes at least two parts: a basic data segment F1 and an authorized data segment F2. Each user holding identity card information has a personal data account in the database 400, and the personal data account is saved and supervised through the blockchain. For the supervision of the regular population, the user is the only daily supervisor of the personal data account. For the supervision of key populations, personal data accounts are supervised by adding supervisors. For example, the personal data accounts of key populations are supervised by the public security department. At least one additional identification information is set in the segmented data of the key population. During the verification process, only the verification terminal 600 of the institution granted the additional identification authority by the public security department can verify the additional identification information of the key population.

[0052] Preferably, the basic data segment F1 in the segmented data includes at least information such as age F11, gender F12, and permanent residence F13. Preferably, the basic data segment in the segmented data may also include driver's license F14, credit report F15, and other categories of information. The categories of the basic data segments are required and set by the legal national departments. The information in the basic data segments belongs to the information that can be jointly mastered by the national public security department, community department and verification party. Therefore, this part of information may be stored in the server connected to the offline verification terminal and the online verification terminal. Therefore, setting the category of the basic data segment is conducive to the verification party to obtain the request result of the corresponding information based on the viewing authority level, avoiding obtaining information that is not related to the verification requirements, thereby avoiding privacy leakage caused by the leakage of a large amount of category information.

[0053] Preferably, the authorized data segment F2 may include medical information segment F21, education information segment F22, specialty information segment F23, social insurance information segment F24 or other information. The information category of the authorized data segment is collected and recorded by the user voluntarily, which is conducive to forming rich personal data information.

[0054] The user data of the present invention includes other basic information G, and the types of this information can be specifically defined and set by national statutory agencies so as to perform reasonable management and identity authentication based on national conditions.

[0055] In the management of smart communities, due to the connection and data interaction of the Internet of Things, the types of user data stored in the cloud management platform will become increasingly rich, and the privacy of users will be more easily leaked. Especially in the development trend of face-swiping payment, face-swiping registration, and face-swiping authentication, when the technology of software face-changing and plastic surgery is mature, facial images are as important as real names as personal identifiers. Facial images + behavioral information constitute personal privacy. Therefore, avoiding the leakage and spread of facial images is also an important means to avoid the leakage of private information.

[0056] The N verification factors in the present invention are associated with security parameters N1, N2, N3, N4... The security parameters of the verification factors of the present invention are evaluated based on the scope and degree of influence of the behavior of the actor. That is, the security parameters of the verification factors of the present invention can authenticate the identity information of the user with different strengths. For example, when publishing life information, it is only necessary to authenticate the user with relatively low security parameters. For payment behaviors, it is necessary to authenticate the user with relatively high security parameters. However, no matter how high the security parameters are, the verification factor must be unique and uniquely associated with user data such as real name, ID number, household registration place, permanent residence, etc. in the privacy information.

[0057] The security parameter of the verification factor of the present invention refers to the uniqueness guarantee and the possibility of cracking the verification factor. The security parameter can be a specific value or a language description of the cracking difficulty level, such as strong, strong, medium strength, weak, weak, etc., which represent the evaluation result of the difficulty level. The security parameter can also be a numerical description of the cracking difficulty level, such as using 1 to 5 to represent an increase in the difficulty level or a decrease in the difficulty level. The security parameter can also be a description of the color, shape and combination of the cracking difficulty level, such as a gradual change from green to red to represent an increase in the difficulty level or a decrease in the difficulty level.

[0058] For example, when the verification factor is a computer code, the length and complexity of the computer code have a certain collision rate and the possibility of being cracked. 6= 64 combinations. If tens of thousands of people use 6-digit codes, the collision rate will be very high, easy to crack, and the security parameter will be low. If it is a 256-bit binary code, it will be 2 256 If the same number of people use the same combination, the collision rate will be reduced and the cracking difficulty will be increased, that is, the security parameter is higher. If the fingerprint is used as the verification factor, the collision rate of the biological factor is lower, that is, the possibility of cracking is low and the security parameter is higher. Therefore, the verification factor of the present invention is associated with its own security parameter, and the security level of important information types can be improved by increasing the difficulty level of the verification factor, further reducing the possibility of illegal theft and leakage of information.

[0059] The verification factors with different security parameters in the present invention are not limited to computer codes, but also include private keys or public keys of asymmetric encryption, or all types of biometric factors that can indicate unique characteristics, such as fingerprints, voiceprints, iris features, etc. During verification, it can be determined according to the strength parameters of the authentication whether to perform single authentication based on a single factor or to perform joint authentication based on multiple factors. That is, the present invention evaluates the security parameters of the verification factors so that a certain category of user information is protected by the verification factors with corresponding security parameters, thereby avoiding insufficient security protection of a certain category of information.

[0060] Preferably, the three-dimensional contour image of the present invention is collected by a TOF image sensor 301. A TOF (Time of Flight) image sensor is a device that uses TOF technology to collect a three-dimensional contour image of a user or any person, animal, or other individual through infrared pulses. The three-dimensional contour image includes a point set contour image formed by non-real colors, such as Figure 3 As shown in Figure 1. Non-real colors are colors that are different from the real colors of the image of the individual. Non-real colors include single colors, non-real colors, and colors based on dynamic changes. Dynamically changing colors, such as dynamic colors displayed based on changes in body temperature. 3D contour images also include filled 3D images that only show the contours of the human body, such as Figure 4 As shown in the figure. Since it does not have real color, the 3D contour image cannot be directly authenticated by the human eye or machine, thus avoiding the leakage of facial image privacy and the possibility of others judging individual privacy information through facial features and behavior. In addition, the data of the facial features of a person is unique, has a low collision rate, and has high security parameters, and can be used as one of the verification factors for identity authentication.

[0061] In the present invention, the database 400 stores the association between the user-defined viewing authority level, verification factors and information types and their combinations, such as Figure 2As shown. The verification module 100 verifies and confirms the viewing permission level of the registration information of the verification terminal 600 that makes the information request. After determining the viewing permission level of the verification terminal 600, the viewing permission level information of the verification terminal 600, the uploaded identity identification and information request are fed back to the data processing module 200. The data processing module 200 retrieves the real name or custom name from the database 400 based on the viewing permission level feedback of the verification terminal 600, and based on the information request feedback, does not contain the user information request result. For example, when the verification terminal 600 verifies whether the user is a resident of this community, the data processing module 200 feeds back information of "yes" or "no" to the verification terminal 600 based on the address information associated with the user's identity identification, and does not display the user's address, thereby achieving identity authentication and avoiding the leakage of the user's privacy. When the viewing permission level of the verification terminal 600 is not lower than the custom viewing permission level, the data processing module 200 feeds back the real name, otherwise the custom name is fed back.

[0062] The database 400 stores the relationship between the user-defined viewing permission level, verification factors and the degree of information detail. For example, parks and scenic spots in the community are open to people over 60 years old for free. When the verification terminal 600 scans the identity and sends an information request to the cloud platform as "whether you are over 60 years old", the data processing module 200 retrieves the information of the year of birth according to the viewing permission level and information request fed back by the verification module 100 and feeds back "yes" or "no" to the verification terminal 600. Assuming that the information request of the verification terminal 600 is "request for age information", the data processing module 200 retrieves the information of the year of birth according to the viewing permission level and information request fed back by the verification module 100, and feeds back the specific age or year of birth to the verification terminal 600 if the viewing permission level is not lower than the customized viewing permission level. The scenic spot verifies the person's permission to enter the venue without obtaining the person's real name, gender, ID number and other privacy information, thereby avoiding the possibility of leakage and spread of the user's privacy information. For example, when the viewing permission level is not lower than the custom viewing permission level associated with the ID card number, the data processing module 200 retrieves the entire content of the ID card number from the database 400 and feeds back the display component of the user terminal 502 or the verification terminal 600, otherwise it only displays the information detail corresponding to its viewing permission level.

[0063] For example, when the user customizes the information combination of "real name + address + license plate number" and is associated with at least one verification factor, the verification module 100 verifies the verification factor input by the user terminal 502 or the verification factor input by the verification terminal 600, and sends a feedback instruction to the data processing module 200 when the set verification factor is correct and the viewing permission level exists. The data processing module 200 retrieves information and feedbacks the results based on the feedback instruction and information request. The advantage of such a setting is that it further avoids the verification module 100 from obtaining multiple information of the user and privately combining them into private information.

[0064] Preferably, when the types of information acquired by the verification terminal 600 in a multiple manner within a specified time exceeds the type threshold, the verification module 100 requests the verification terminal 600 for a customized verification factor corresponding to the combination of the acquired information types, and sends a warning message to the user terminal 502 when the verification terminal 600 fails to provide the verification factor within the specified time. For example, the same verification terminal 600 obtains the user's real name, license plate number, and address information through three verifications on the same day, but the viewing authority level of the verification terminal 600 is lower than the customized viewing authority level of "real name + license plate number + address information", or the corresponding verification factor cannot be provided, then the verification terminal 600 is illegally acquiring private information multiple times. The present invention can provide information warning of privacy theft for such illegal behavior.

[0065] Preferably, when multiple verification terminals 600 belong to the same verification party and have different information requests within a specified time, the verification module 100 requests a verification factor corresponding to the information type combination requested by the verification party from at least one verification terminal 600, and sends a warning message to the user terminal 502 when the verification terminal 600 fails to provide the verification factor within the specified time. For example, multiple verification terminals 600 of the same verification party obtain multiple information categories of "custom name + facial image + address information + age" of the same person on the same day, but the verification party and its verification terminal 600 do not have the information viewing authority level to obtain the information combination, and the verification terminal 600 does not receive the corresponding verification factor sent by at least one verification terminal 600 or the user terminal 502. The verification party is suspected of obtaining the user's private information without authorization, and the verification terminal 600 sends an information warning and the verification party's information to the user terminal 502, so that the user can know that his or her private information is being illegally obtained.

[0066] Preferably, when the user terminal 502 establishes a data connection with the cloud platform, the data processing module 200 will synchronously send the information content or request result fed back to the verification terminal 600 to the user terminal 502 and display it on the display component, so that the user can understand what information the verification party has obtained, and thus adjust the customized viewing permission level based on the scope of life, and avoid the verification terminal 600 from privately obtaining unnecessary identity information.

[0067] In order to prevent the user terminal 502 from being illegally used and forged, the verification module 100 verifies whether the three-dimensional profile image collected by the user terminal 502 or the verification terminal 600 is consistent with the historical three-dimensional profile image stored in the database 400 based on the information request of the verification terminal 600, thereby preventing the user terminal 502 from being held by an unauthorized person and entering an important place. Even if the verification terminal 600 does not have the viewing authority level of the facial image, without inputting other verification factors, it is possible to obtain the verification result of whether the holder is consistent with the owner of the user terminal 502.

[0068] Furthermore, when the verification terminal 600 has a permission level to view facial images, the verification personnel compares the facial image displayed by the verification terminal 600 with the holder of the user terminal 502, thereby preventing the user terminal from being illegally held.

[0069] Preferably, the verification terminal 600 of the national statutory department and the designated medical institution is provided with a dedicated verification factor associated with the highest security parameter. The national statutory department and the designated medical institution have a strict personal information management system, so their viewing authority level is relatively high. The dedicated verification factor can obtain the necessary identity information beyond the user's customized viewing authority level. For example, in the case of suspected public security department investigation information, the verification terminal 600 of the national public security department obtains all the information of the individual in the database 400 of the cloud platform by inputting the dedicated verification factor. For example, in an emergency situation where a patient is in a coma, the verification terminal 600 of the medical institution obtains the patient's medical history information by inputting a dedicated verification factor and a three-dimensional contour image of the patient with real color, so as to avoid using the wrong first aid means in emergency situations and quickly treat the patient.

[0070] As described above, when the management terminal 501 of several communities is connected to the cloud platform system, the user carries the user terminal 502 for identity authentication, which has a better privacy protection effect than the identity card, and the verification is fast and convenient. For example, when the management personnel of the community monitor the dynamic distribution of the community population through the management terminal 501, the dynamic distribution of the population and the abnormal flow of personnel can be determined by the flow of dynamic three-dimensional contour images collected by several terminals equipped with TOF image sensors 301, eliminating the facial images and real names with iconic information, and avoiding the acquisition of behavioral privacy by the management personnel who know the real name or facial image. The user terminal 502 of the present invention can complete the same verification function as the identity card. Not only that, according to the verification address information temporarily written into the database 400 by the verification terminal 600, the management terminal 501 of the community can quickly determine whether the user has entered the epidemic area.

[0071] Preferably, the data processing module 200 adds a symbol mark to the identity mark of the user who enters the designated place at the designated time based on the management instruction of at least one management module 500, so as to facilitate the identity verification of the verification terminal 600 or the verification personnel. For example, the color of the identity mark is changed, a designated symbol pattern is added, etc., so that the verification terminal 600 or the verification personnel can quickly know that the user has entered the epidemic area at the designated time through the identity mark.

[0072] Preferably, the information receiving module 300 collects a three-dimensional contour image with attached body temperature information through at least one TOF image sensor 301 based on the management instruction of at least one management module 500, and the data processing module 200 attaches a warning symbol pattern to the identity tag based on the abnormal body temperature information of the user to prompt the user's abnormal body temperature. Since the three-dimensional contour image of the user is unique, the three-dimensional contour image with attached body temperature information has a lower error rate in determining the specified monitoring object. Existing monitoring video images require manual identification of planar video objects through video, and do not have the accuracy of the present invention.

[0073] Preferably, the data processing module 200 can quickly count the individual's behavior trajectory and the distance between at least two three-dimensional contour images based on the management instructions of at least one management module 500 and the designated collection location of the three-dimensional contour image. The present invention facilitates the contact between confirmed patients and their close contacts during the epidemic through data interaction of the Internet of Things, thereby assisting government departments in epidemic control.

[0074] Preferably, the verification module 100, the data processing module 200 and the database 400 of the present invention transmit data through an encrypted one-way ferry channel. The verification module 100 and the data processing module 200 transmit data to the collection terminal and the verification terminal 600 in an information encryption manner to prevent the information from being tampered with.

[0075] The information receiving module 300 of the cloud platform system of the present invention is also used for virus information detection, so as to prevent the cloud platform system from being attacked by viruses. The data in the database 400 are digitally signed using a zero-knowledge proof algorithm based on cryptography, and are equipped with a standardized signature algorithm model library. Various signature algorithm models are responsible for secondary processing and desensitization of the original structured data, which can maximize the privacy protection of user data used in the scene. At the same time, the signature algorithm model library can provide matching algorithm support according to national or community privacy protection regulations.

[0076] It should be noted that the above specific embodiments are exemplary, and those skilled in the art can come up with various solutions inspired by the disclosure of the present invention, and these solutions also belong to the disclosure scope of the present invention and fall within the protection scope of the present invention. Those skilled in the art should understand that the present invention description and its drawings are illustrative and do not constitute a limitation of the claims. The protection scope of the present invention is defined by the claims and their equivalents.

Claims

1. A cloud platform management system that does not involve privacy, characterized in that: At least comprising an information receiving module (300) connected to at least one TOF image sensor (301), The scene captured by the TOF image sensor (301) that is not within the limited temperature range is displayed in real color, so that the complete image captured by the TOF image sensor (301) includes a scene image displayed in real color and a three-dimensional contour image of the facial features with unique contours displayed in non-real color. The filled area of ​​the filled contour image that only displays the contour of a human body in non-real color is filled with a color representing the body temperature of an individual, thereby forming the three-dimensional contour image with body temperature characteristics, so as to determine the designated monitoring object according to the three-dimensional contour image with body temperature information attached, and when the verification terminal (600) does not have a viewing authority level for facial images and no other verification factors are input, the verification module (100) verifies based on the information request of the verification terminal (600) whether the three-dimensional contour image collected by the user terminal (502) or the verification terminal (600) is consistent with the historical three-dimensional contour image stored in the database (400), so that the verification terminal (600) obtains a verification result of whether the holder is consistent with the owner of the user terminal (502); When the management terminals (501) of several communities are connected to the cloud platform management system, the management terminals (501) determine the dynamic distribution of the population and abnormal flow of people through the flow of dynamic three-dimensional contour images collected by several terminals equipped with TOF image sensors (301).

2. The cloud platform management system not involving privacy according to claim 1, characterized in that: The data processing module (200) adds a symbolic mark to the identity mark of a user entering a designated place at a designated time based on a management instruction of at least one management module (500), so as to facilitate identity verification of a verification terminal (600) or a verification person.

3. The cloud platform management system not involving privacy according to claim 2 is characterized in that: The information receiving module (300) collects a three-dimensional contour image with body temperature information attached through at least one TOF image sensor (301) based on a management instruction of at least one management module (500), and the data processing module (200) attaches a warning symbol pattern to the identity mark based on the abnormal body temperature information of the user to prompt the user of abnormal body temperature.

4. The cloud platform management system not involving privacy according to claim 3 is characterized in that: The data processing module (200) counts the individual's behavior trajectory and the distance between at least two three-dimensional contour images based on the management instructions of at least one management module (500) and the designated three-dimensional contour image collection location.

5. The cloud platform management system not involving privacy according to claim 4 is characterized in that: Also includes a database (400), The management terminal (501) of the community determines whether the user has entered the epidemic area according to the verification address information temporarily written into the database (400) by the verification terminal (600).

6. The cloud platform management system not involving privacy according to any one of claims 1 to 5, characterized in that: comprising a verification terminal (600), In an emergency situation where a patient is in a coma, a verification terminal (600) of a medical institution obtains the patient's medical history information by inputting a dedicated verification factor and a three-dimensional contour image of the patient with real color.

7. The cloud platform management system not involving privacy according to claim 6, characterized in that: Non-real colors are colors that are different from the true colors of the image itself. Non-real colors include single colors, non-real colors, and colors based on dynamic changes.

8. An epidemic management system based on a cloud platform, characterized in that: At least comprising an information receiving module (300) connected to at least one TOF image sensor (301), a data processing module (200) and a management module (500), The complete image captured by the TOF image sensor (301) comprises a scene image displayed in real colors and a three-dimensional contour image with unique contours of facial features displayed in non-real colors. The filled area of ​​the non-real color filled contour image showing only the human body contour is filled with a color representing the body temperature of the individual, thereby forming the three-dimensional contour image with body temperature characteristics, so as to determine the designated monitoring object according to the three-dimensional contour image with attached body temperature information, In the case where the verification terminal (600) does not have a level of authority to view facial images and no other verification factors are input, the verification module (100) verifies based on the information request of the verification terminal (600) whether the three-dimensional profile image collected by the user terminal (502) or the verification terminal (600) is consistent with the historical three-dimensional profile image stored in the database (400), so that the verification terminal (600) obtains a verification result indicating whether the holder is consistent with the owner of the user terminal (502); The information receiving module (300) collects a three-dimensional contour image with body temperature characteristics attached through at least one TOF image sensor (301) based on a management instruction of at least one management module (500), and the data processing module (200) attaches a warning symbol pattern to the identity mark based on the abnormal body temperature information of the user to prompt the user of abnormal body temperature.

9. The cloud platform-based epidemic management system according to claim 8, characterized in that: The data processing module (200) counts individual behavior trajectories and the distance between at least two three-dimensional contour images based on the management instructions of at least one management module (500) and the designated collection location of the three-dimensional contour images, so as to determine close contacts of confirmed patients during the epidemic.

10. The cloud platform-based epidemic management system according to claim 8, characterized in that: During the epidemic monitoring period, The management terminal (501) collects a three-dimensional contour image with body temperature characteristics based on the TOF image sensor (301) to monitor whether the designated person leaves the limited area.

Images