App user ID information protection device, method, electronic device and storage medium

Abstract

The present invention relates to a device, method, electronic device and storage medium for protecting mobile App user ID information. The device for protecting mobile App user ID information includes: an operator account protection SKD, which is embedded in the App of a user terminal, and has a gateway number acquisition capability and an ID protection capability. The operator account protection SKD generates user ID information and App side verification information after encryption, and sends it to an operator account registration server; the operator account registration server is located on the operator side, and the operator account registration server receives the user ID information and App side verification information transmitted by the operator account protection SKD of the user terminal through the network. The operator account registration server has a verification capability and an algorithm encryption capability. The operator account registration server generates App side user ID information and verification information after verification and encryption, and transmits them to the App side node of the App service provider. According to the present invention, safe App registration and account privacy protection can be provided for users.

Description

Technical Field

[0001] The present invention relates to the field of mobile communications, and in particular to a device, method, electronic device and storage medium for protecting mobile App user ID information. Background Art

[0002] When using mobile apps and browsing the mobile Internet, mobile terminal users are often required to enter their mobile phone numbers and ID numbers to register. During registration, first, user information is stored in plain text by third-party apps, causing personal information security issues; second, customers' personal information may be illegally resold by app operators, causing reputation and property losses to mobile users; further, some malicious counterfeit phishing apps are similar to normal app interfaces, and when customers log in to phishing apps without knowing it, it will cause serious security issues.

[0003] Currently, there are user information protection solutions, but they have the following common weaknesses:

[0004] 1. Customers are required to input information themselves, and the plain text they input may still be intercepted.

[0005] 2. There is no capability based on the operator's network side, but on the App manufacturer's capability. The main information is exchanged and transmitted in a non-blockchain Internet environment. App manufacturers have centralized dominance and may decipher and illegally use user information.

[0006] 3. Due to the non-uniqueness of the ID (account), user management has caused confusion for App manufacturers.

[0007] 4. It cannot prevent phishing apps and counterfeit apps from luring customers to log in, causing security issues.

[0008] 5. Some blockchain-based identity authentication system solutions can only solve the information storage and tamper-proofing of decentralized ledgers, and cannot authenticate and protect the original identity information in combination with authoritative data sources (such as operators). Summary of the invention

[0009] The technical problem to be solved by the present invention is to utilize the network capability of the gateway number acquisition of mobile phone network operators (mobile phone network operators, such as China Telecom, China Mobile, China Unicom, etc.), combined with the computing power of user terminals as blockchain nodes, to provide users with a secure App registration and privacy protection method, and to prevent the theft of user accounts.

[0010] To solve the above technical problems, according to one aspect of the present invention, a device for protecting App user ID information is provided, including: an operator account protection SKD (Software Development Kit), the operator account protection SKD is embedded in the App of the user terminal, the operator account protection SKD has a gateway number acquisition capability and an ID protection capability, the ID protection capability is realized by encrypting the user operator ID obtained by the gateway number acquisition through a user data encryption method, the operator account protection SKD generates user ID encryption information and App side verification information after encryption, the operator account protection SKD can send the user ID information, encryption information and App side verification information to the operator account registration server; the operator account registration server, the operator account registration server is located on the operator side, and is a node server for managing App and App accounts, the operator account registration server receives the user ID information, encryption information and App side verification information transmitted by the operator account protection SKD of the user terminal through the network The operator account registration server has verification capability and algorithm encryption capability. The verification capability is used to verify whether the App and operator account protection SKD of the user terminal are authenticated and not forged. The algorithm encryption capability is realized by encrypting the received user ID information through the user data encryption method. The operator account registration server generates the user ID encryption information and App side verification information on the App service provider side after verification and encryption, and transmits the user ID encryption information and App side verification information to the App side node of the APP service provider. Among them, the user ID information, encryption information and verification information are recorded and synchronized on the three-end nodes of the operator side, the user terminal side and the App service provider side through the blockchain ledger formed by the operator account protection SKD and the operator account registration server to prevent tampering and form a alliance blockchain protection mechanism.

[0011] According to an embodiment of the present invention, the user data encryption method may be a national encryption algorithm (a national encryption algorithm is an algorithm standardized by the State Cryptography Bureau) or an elliptic curve algorithm (ECC, Elliptic Curve Cryptography) encryption. The specific encryption algorithm is not limited thereto.

[0012] According to an embodiment of the present invention, the operator account protection SKD may also have an information confirmation interface, which is used to pop up the local ID number to be confirmed by the user and whether to authorize the use of the local number for registration during the App registration or use process, so as to remind the user and provide confirmation for the user.

[0013] According to the second aspect of the present invention, there is provided a method for protecting App user ID information, which is implemented based on the pre-installation of operator account protection SDK into the user terminal APP and the operator end having an operator account registration server, wherein the operator account protection SDK has gateway number acquisition capability and ID protection capability, the operator account registration server is located on the operator side, and is a node server for managing App and App accounts, and the operator account registration server has verification capability and algorithm encryption capability. The method has the following steps: the ID protection capability of the operator account protection SKD encrypts the user operator ID obtained by the gateway through the user data encryption method, and then generates the user ID information, the encrypted information and the App side verification information, and the operator account protection SKD sends the user ID information, the encrypted information and the App side verification information to the operator account registration server; the operator account registration server receives the user ID information, the encrypted information and the App side verification information transmitted by the operator account protection SKD of the user terminal through the network, and verifies whether the App of the user terminal and the operator account protection SKD are authenticated and non-forged through the verification capability, the algorithm encryption capability encrypts the received user ID information through the user data encryption method, and the operator account registration server generates the user ID encryption information and the App side verification information on the App service provider side after verification and encryption, and transmits the user ID encryption information and the App side verification information to the App side node of the App service provider, wherein the user ID information, the encrypted information and the verification information are recorded and synchronized at the three-end nodes of the operator side, the user terminal side and the App service provider side by means of the blockchain ledger formed by the operator account protection SKD and the operator account registration server to prevent tampering, so as to form a consortium blockchain protection mechanism.

[0014] According to an embodiment of the present invention, the user data encryption method is a national encryption algorithm or an elliptic curve algorithm. The specific encryption algorithm is not limited thereto.

[0015] According to an embodiment of the present invention, the method for protecting App user ID information may include App user registration, and the registration steps are as follows: S11, the user initiates registration through an App in which an operator account protection SDK is embedded in the user terminal; S12, the App on the user terminal side obtains the registration request, and the App software side calls up the operator account protection SDK; S13, the operator account protection SDK obtains the user operator ID through gateway number acquisition, and pops up a user information confirmation interface. The user does not need to manually enter the mobile phone number, and the information can be confirmed on the interface. After the user confirms, the operator account protection SDK encrypts the user operator ID obtained by the gateway number acquisition through the user data encryption method, and then generates the user ID encryption information and the App side verification information. The operator account protection SDK encrypts the user ID information, the encrypted information and the App side verification information. The verification information is sent to the operator account registration server; S14, the operator account registration server receives the user ID information, encryption information and App-side verification information transmitted by the operator account protection SKD of the user terminal through the network, and verifies whether the App and the operator account protection SKD of the user terminal are authenticated and non-forged through the verification capability. The algorithm encryption capability encrypts the received user ID information through the user data encryption method. The operator account registration server generates the user ID encryption information and App-side verification information on the App service provider side after verification and encryption, and transmits the user ID encryption information and App-side verification information to the App service provider's App-side node; S15, the App service provider's App-side node receives the user ID encryption information and App-side verification information for subsequent login and verification.

[0016] According to an embodiment of the present invention, the method for protecting App user ID information may include App user login, and the login steps are as follows: S21, the user initiates login through the App in which the operator account protection SDK is embedded in the user terminal; S22, the App on the user terminal side obtains the login request, and the App software side calls the operator account protection SDK; S23, the operator account protection SDK obtains the user operator ID through the gateway number, compares the current user's login ID with the last time through verification information to see if it is consistent and whether there is any abnormality, and sends the user ID information, App side verification information and login verification request to the operator account registration server; S24, the operator account The registration server receives the user ID information and App-side verification information transmitted through the network by the operator account protection SKD of the user terminal, and verifies whether the App and the operator account protection SKD of the user terminal are authenticated and not forged through the verification capability. The operator account registration server transmits the App-side user ID and verification information to the App-side node of the APP service provider; S25, the App-side node of the App service provider receives the App-side user ID and verification information, and after comparing and verifying with the verification information provided by the operator account protection SKD of the user terminal through an algorithm and finding no problem, the login is released, and the user terminal App user performs subsequent operations in the logged-in state.

[0017] According to a third aspect of the present invention, there is provided an electronic device, comprising: a memory, a processor, and an App user ID information protection program stored in the memory and executable on the processor, wherein the App user ID information protection program implements the steps of the above-mentioned App user ID information protection method when executed by the processor.

[0018] According to a fourth aspect of the present invention, a computer storage medium is provided, wherein an App user ID information protection program is stored on the computer storage medium, and when the App user ID information protection program is executed by a processor, the steps of the above-mentioned App user ID information protection method are implemented.

[0019] Compared with the prior art, the technical solution provided by the embodiments of the present invention can at least achieve the following beneficial effects:

[0020] This solution uses the operator's network number acquisition capability, does not require customers to enter plain text, and sensitive IDs such as user mobile phone numbers are not visible to the App. It provides users with secure App registration and account privacy protection, and also provides App operators with a well-regulated user ID registration and usage interactive interface.

[0021] This solution can prevent phishing apps from impersonating the login interface: since phishing apps cannot obtain the official gateway number acquisition capability, they cannot pop up the one-click login and account protection interface and are easily recognized by end users. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings of the embodiments will be briefly introduced below. Obviously, the drawings in the following description only relate to some embodiments of the present invention, but are not intended to limit the present invention.

[0023] Figure 1 is a three-terminal schematic diagram showing an App user ID information protection device according to an embodiment of the present invention.

[0024] Figure 2 It is a signaling flow chart showing the method for protecting App user ID information according to an embodiment of the present invention.

[0025] Figure 3 is a registration flow chart showing the method for protecting App user ID information according to an embodiment of the present invention.

[0026] Figure 4 is a login flow chart showing the method for protecting App user ID information according to an embodiment of the present invention. DETAILED DESCRIPTION

[0027] In order to make the purpose, technical solution and advantages of the embodiment of the present invention clearer, the technical solution of the embodiment of the present invention will be clearly and completely described below in conjunction with the accompanying drawings of the embodiment of the present invention. Obviously, the described embodiment is a part of the embodiment of the present invention, not all of the embodiments. Based on the described embodiment of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] Unless otherwise defined, the technical or scientific terms used herein shall have the common meanings understood by persons with ordinary skills in the field to which the present invention belongs. The words "first", "second" and similar words used in the patent application specification and claims of the present invention do not indicate any order, quantity or importance, but are only used to distinguish different components. Similarly, words such as "one" or "a" do not indicate a quantity limitation, but indicate the existence of at least one.

[0029] Figure 1 is a three-terminal schematic diagram showing an App user ID information protection device according to an embodiment of the present invention.

[0030] like Figure 1 As shown, the device for protecting App user ID information includes: an operator account protection SKD and an operator account registration server.

[0031] The operator account protection SKD is embedded in the App of the user terminal. The operator account protection SKD has the gateway number acquisition capability and ID protection capability. The ID protection capability is achieved by encrypting the user operator ID obtained by the gateway number acquisition through the user data encryption method. After encryption, the operator account protection SKD generates user ID encryption information and App-side verification information. The operator account protection SKD can send the user ID information, encryption information and App-side verification information to the operator account registration server.

[0032] The operator account registration server is located on the operator side and is a node server for managing apps and app accounts. The operator account registration server receives user ID information, encryption information and App-side verification information transmitted through the network by the operator account protection SKD of the user terminal. The operator account registration server has verification capability and algorithm encryption capability. The verification capability is used to verify whether the App and operator account protection SKD of the user terminal are authenticated and non-forged. The algorithm encryption capability is implemented by encrypting the received user ID information through the user data encryption method. After verification and encryption, the operator account registration server generates the user ID encryption information and App-side verification information on the App service provider side, and transmits the user ID encryption information and App-side verification information to the App service provider's App-side node.

[0033] Among them, user ID information, encryption information and verification information are recorded and synchronized at the three-end nodes of the operator side, user terminal side and App service provider side through the blockchain ledger formed by the operator account protection SKD and the operator account registration server to prevent tampering and form a consortium blockchain protection mechanism.

[0034] Consortium blockchains, also known as community blockchains, are referred to as "consortium chains".

[0035] A consortium chain refers to a blockchain that is subject to pre-selected nodes in the consensus process.

[0036] The blockchain technology of the consortium chain refers to a blockchain that can be controlled by pre-selected nodes during the consensus process. As the consortium chain continues to develop, there may be no way to allow all people involved in the transaction to see everyone's transaction data, but in some ways, the protection of data and privacy is beyond doubt.

[0037] Physical isolation is commonly used in traditional solutions to ensure that transaction records are only stored in the physical space of each trader. The advantage of blockchain technology is that a "consensus ledger" is formed during the transaction process, but under the background of the same ledger, the consortium chain can protect transaction data and privacy.

[0038] The three-end ID and blockchain ledger storage mechanism is as follows: generation of user client ID verification information node, App side user ID verification information node, operator side user ID verification information node and alliance blockchain protection mechanism diagram.

[0039] The storage of user ID verification information (verification information, not original ID information) on each node is verified, encrypted and written to the storage using blockchain ledger block encryption. The general method is as follows: Figure 1 Schematic diagram. The multi-node alliance chain approach has high reading and writing efficiency.

[0040] According to one or some embodiments of the present invention, the user data encryption method may be a national encryption algorithm or an elliptic curve algorithm encryption. The specific encryption algorithm is not limited thereto.

[0041] According to one or some embodiments of the present invention, the operator account protection SKD may also have an information confirmation interface, which is used to pop up the local ID number to be confirmed by the user and whether to authorize the use of the local number for registration during the App registration or use process, so as to remind the user and provide confirmation for the user.

[0042] The present invention proposes a method, software and background server system for providing user registration ID for mobile App while protecting user personal information based on the operator's mobile gateway capability, combined with the computing capability of the user's mobile terminal and the SDK developed by the operator.

[0043] Figure 2 It is a signaling flow chart showing the method for protecting App user ID information according to an embodiment of the present invention.

[0044] like Figure 2 As shown, the method for protecting App user ID information. The method is implemented based on the user terminal App pre-installing the operator account protection SDK and the operator end having an operator account registration server. Among them, the operator account protection SDK has the gateway number acquisition capability and ID protection capability. The operator account registration server is located on the operator side and is used to manage the node server of the App and App account. The operator account registration server has the verification capability and algorithm encryption capability.

[0045] The steps for protecting App user ID information are as follows:

[0046] The ID protection capability of the operator account protection SKD encrypts the user operator ID obtained by the gateway through the user data encryption method, and then generates user ID information, encryption information and App-side verification information. The operator account protection SKD sends the user ID information, encryption information and App-side verification information to the operator account registration server.

[0047] The operator account registration server receives the user ID information, encryption information and App-side verification information transmitted through the network by the operator account protection SKD of the user terminal, and verifies whether the App and operator account protection SKD of the user terminal are authenticated and non-forged through the verification capability. The algorithm encryption capability encrypts the received user ID information through the user data encryption method. After verification and encryption, the operator account registration server generates the user ID encryption information and App-side verification information on the App service provider side, and transmits the user ID encryption information and App-side verification information to the App service provider's App-side node.

[0048] Among them, user ID information, encryption information and verification information are recorded and synchronized at the three-end nodes of the operator side, user terminal side and App service provider side through the blockchain ledger formed by the operator account protection SKD and the operator account registration server to prevent tampering and form a consortium blockchain protection mechanism.

[0049] This solution uses the operator's network number acquisition capability, does not require customers to enter plain text, and sensitive IDs such as user mobile phone numbers are not visible to the App. It provides users with secure App registration and account privacy protection, and also provides App operators with a well-regulated user ID registration and usage interactive interface.

[0050] According to one or some embodiments of the present invention, the user data encryption method is a national encryption algorithm or an elliptic curve algorithm. The specific encryption algorithm is not limited thereto.

[0051] Figure 3 is a registration flow chart showing the method for protecting App user ID information according to an embodiment of the present invention.

[0052] like Figure 3 As shown, the method for protecting App user ID information includes App user registration, and the registration steps are as follows:

[0053] S11. The user initiates registration through an App embedded with the operator account protection SDK in the user terminal;

[0054] S12, the user terminal side App obtains the registration request, and the App software side calls the operator account protection SDK;

[0055] S13. The operator account protection SDK obtains the user operator's mobile phone number and other IDs through the gateway, and pops up a user information confirmation interface. The user does not need to manually enter the mobile phone number, and the interface can confirm the information. After the user confirms, the operator account protection SDK encrypts the user operator ID obtained by the gateway through the user data encryption method, and can combine the operator ID and some mobile terminal features obtained by the SDK to perform calculation encryption, and then generate user ID encryption information and App side verification information. The operator account protection SDK sends the user ID information, encryption information and App side verification information to the operator account registration server of the node server used by the operator to manage Apps and App accounts;

[0056] S14, the operator account registration server receives the user ID information, encryption information and APP side verification information transmitted by the operator account protection SKD of the user terminal through the network, verifies whether the App and the operator account protection SKD of the user terminal are authenticated and not forged through the verification capability, and encrypts the received user ID information through the user data encryption method through the algorithm encryption capability. After verification and encryption, the operator account registration server generates the user ID encryption information and App side verification information on the App service provider side, and transmits the user ID encryption information and App side verification information to the App side node of the App service provider;

[0057] S15. The App-side node of the App service provider receives the encrypted user ID information and App-side verification information for subsequent login and verification.

[0058] When an App requires mobile users to register with their mobile phone numbers, customers no longer need to enter their mobile phone numbers directly. Instead, the operator's user ID protection SDK is called. The App side gets a string of encrypted and irreversibly decrypted ciphertext IDs (hereinafter referred to as App-side IDs) that are stored on the blockchain. That is, when a user registers, the operator provides a registration encryption SDK, which directly obtains the mapping ID after the customer's terminal feature ID, the mobile App's registration information on the operator side, and the mobile ID are combined and encrypted, and stored in the form of distributed nodes on the user terminal, mobile App, and operator side. In the subsequent user use phase, the operator's SDK provides the mobile App with an App-side user ID as the registration ID in its system, which effectively hides the original ID. When the App and the user need to perform transaction confirmation, retrieve passwords, and other interactions that require mobile phone numbers, they need to interact with the operator through the SDK, and the original number is not visible.

[0059] Figure 4 is a login flow chart showing the method for protecting App user ID information according to an embodiment of the present invention.

[0060] like Figure 4As shown, the method for protecting App user ID information includes App user login, and the login steps are as follows:

[0061] S21. The user initiates login through the App in which the operator account protection SDK is embedded in the user terminal;

[0062] S22: The user terminal side App obtains a login request, and the App software side calls the operator account protection SDK;

[0063] S23, the operator account protection SDK obtains the user's mobile phone number and other IDs in the operator through the gateway, compares the current user's login ID with the previous one through verification information to see if it is consistent and whether there is any abnormality, and sends the user ID information, App side verification information and login verification request to the operator account registration server;

[0064] S24, the operator account registration server receives the user ID information and App-side verification information transmitted by the operator account protection SKD of the user terminal through the network, verifies whether the App and the operator account protection SKD of the user terminal are authenticated and not forged through the verification capability, and transmits the App-side user ID and verification information to the App-side node of the App service provider;

[0065] S25. The App side node of the App service provider receives the App side user ID and verification information, and after comparing it with the verification information provided by the operator account protection SKD of the user terminal through an algorithm and verifying that there is no problem, the login is released, and the user terminal App user performs subsequent operations in the logged-in state.

[0066] This solution can prevent phishing apps from impersonating the login interface: since phishing apps cannot obtain the official gateway number acquisition capability, they cannot pop up the one-click login and account protection interface and are easily recognized by end users.

[0067] According to another aspect of the present invention, a device for protecting App user ID information is provided, comprising: a memory, a processor, and an App user ID information protection program stored in the memory and executable on the processor, wherein the steps of the above-mentioned App user ID information protection method are implemented when the App user ID information protection program is executed by the processor.

[0068] According to the present invention, a computer storage medium is also provided.

[0069] An App user ID information protection program is stored on the computer storage medium, and when the App user ID information protection program is executed by the processor, the steps of the above-mentioned App user ID information protection method are implemented.

[0070] Among them, the method implemented when the App user ID information protection program running on the processor is executed can refer to the various embodiments of the App user ID information protection method of the present invention, and will not be repeated here.

[0071] The present invention also provides a computer program product.

[0072] The computer program product of the present invention includes an App user ID information protection program, which implements the steps of the App user ID information protection method described above when executed by a processor.

[0073] Among them, the method implemented when the App user ID information protection program running on the processor is executed can refer to the various embodiments of the App user ID information protection method of the present invention, and will not be repeated here.

[0074] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) as described above, and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present invention.

[0075] The above description is merely an exemplary embodiment of the present invention and is not intended to limit the protection scope of the present invention. The protection scope of the present invention is determined by the appended claims.

Claims

1. A device for protecting App user ID information, comprising: Operator account protection SKD, the operator account protection SKD is embedded in the App of the user terminal, the operator account protection SKD has gateway number acquisition capability and ID protection capability, the ID protection capability is implemented by encrypting the user ID information of the user operator ID obtained by gateway number acquisition through a user data encryption method, the operator account protection SKD generates user ID encryption information and App side verification information after encryption, the operator account protection SKD sends the user ID information, user ID encryption information and App side verification information to the operator account registration server; An operator account registration server, which is located on the operator side and is a node server for managing apps and app accounts. The operator account registration server receives user ID information, user ID encryption information and App side verification information transmitted through the network by the operator account protection SKD of the user terminal. The operator account registration server has verification capability and algorithm encryption capability. The verification capability is used to verify whether the App and operator account protection SKD of the user terminal are authenticated and non-forged. The algorithm encryption capability is implemented by encrypting the received user ID information through a user data encryption method. The operator account registration server generates user ID encryption information and App side verification information on the App service provider side after verification and encryption, and transmits the user ID encryption information and App side verification information to the App service provider's App side node. Among them, the user ID information, user ID encryption information and App side verification information are recorded and synchronized at the three-end nodes of the operator side, the user terminal side and the App service provider side through the blockchain ledger formed by the operator account protection SKD and the operator account registration server to prevent tampering and form a consortium blockchain protection mechanism.

2. The device according to claim 1, wherein: The user data encryption method is a national secret algorithm or an elliptic curve algorithm.

3. The device according to claim 1, wherein: The operator account protection SKD also has an information confirmation interface, which is used to pop up the local ID number for user confirmation and whether to authorize the use of the local number registration information during the App registration or use process.

4. A method for protecting App user ID information, based on the user terminal App pre-installing the operator account protection SDK and the operator end having an operator account registration server, wherein: The operator account protection SKD has the gateway number acquisition capability and ID protection capability. The operator account registration server is located on the operator side and is a node server for managing apps and app accounts. The operator account registration server has verification capability and algorithm encryption capability. The method comprises the following steps: The ID protection capability of the operator account protection SKD encrypts the user operator ID obtained by the gateway through the user data encryption method, and then generates the user ID encryption information and the App side verification information. The operator account protection SKD sends the user ID information, user ID encryption information and App side verification information to the operator account registration server; The operator account registration server receives the user ID information, user ID encryption information and App side verification information transmitted by the operator account protection SKD of the user terminal through the network, verifies whether the App and the operator account protection SKD of the user terminal are authenticated and not forged through the verification capability, and the algorithm encryption capability encrypts the received user ID information through the user data encryption method. The operator account registration server generates the user ID encryption information and App side verification information of the App service provider side after verification and encryption, and transmits the user ID encryption information and App side verification information to the App side node of the App service provider. Among them, the user ID information, user ID encryption information and APP side verification information are recorded and synchronized at the three-end nodes of the operator side, the user terminal side and the App service provider side through the blockchain ledger formed by the operator account protection SKD and the operator account registration server to prevent tampering and form a consortium blockchain protection mechanism.

5. According to the method as claimed in claim 4, the user data encryption method is a national secret algorithm or an elliptic curve algorithm.

6. The method as claimed in claim 4, comprising the step of App user registration: S11. The user initiates registration through an App embedded with the operator account protection SDK in the user terminal; S12, the user terminal side App obtains the registration request, and the App software side calls the operator account protection SDK; S13, the operator account protection SDK obtains the user operator ID through the gateway number, and pops up the user information confirmation interface. The user does not need to manually enter the mobile phone number, and the interface can confirm the information. After the user confirms, the operator account protection SDK encrypts the user operator ID obtained by the gateway number through the user data encryption method, and then generates the user ID encryption information and the App side verification information. The operator account protection SDK sends the user ID information, user ID encryption information and App side verification information to the operator account registration server; S14, the operator account registration server receives the user ID information, user ID encryption information and APP side verification information transmitted by the operator account protection SKD of the user terminal through the network, verifies whether the App and the operator account protection SKD of the user terminal are authenticated and not forged through the verification capability, the algorithm encryption capability encrypts the received user ID information through the user data encryption method, the operator account registration server generates the user ID encryption information and App side verification information of the App service provider side after verification and encryption, and transmits the user ID encryption information and App side verification information to the App side node of the App service provider; S15. The App side node of the App service provider receives the user ID encryption information and App side verification information for subsequent login and verification.

7. The method as claimed in claim 4, comprising the step of App user login: S21. The user initiates login through the App in which the operator account protection SDK is embedded in the user terminal; S22: The user terminal side App obtains a login request, and the App software side calls the operator account protection SDK; S23, the operator account protection SDK obtains the user operator ID through the gateway, compares the current user's login ID with the previous one through the APP side verification information and whether there is any abnormality, and sends the user ID information, the App side verification information and the login verification request to the operator account registration server; S24, the operator account registration server receives the user ID information and the APP side verification information transmitted by the operator account protection SKD of the user terminal through the network, verifies whether the App of the user terminal and the operator account protection SKD are authenticated and not forged through the verification capability, and the operator account registration server transmits the encrypted user ID information and the App side verification information of the App service provider side to the App side node of the App service provider; S25. The App side node of the App service provider receives the encrypted user ID information and App side verification information from the App service provider, and after comparing the information with the App side verification information provided by the operator account protection SKD of the user terminal through an algorithm and verifying that there is no problem, the login is released, and the user terminal App user performs subsequent operations in the logged-in state.

8. An electronic device comprising: A memory, a processor, and an App user ID information protection program stored in the memory and executable on the processor, wherein the App user ID information protection program, when executed by the processor, implements the steps of the App user ID information protection method as described in any one of claims 4 to 7.

9. A computer storage medium, wherein: The computer storage medium stores an App user ID information protection program, which, when executed by a processor, implements the steps of the App user ID information protection method according to any one of claims 4 to 7.

Images