A personal data processing method and device based on zero-knowledge proof

Abstract

The present invention discloses a personal data processing method and device based on zero-knowledge proof. The method obtains a user information verification request. After a bank receives an instruction from an application software service provider requesting data, it matches a proof rule digital set according to the user information verification request, and verifies the proof verification instruction and the data verification module. If the data verification accuracy is within a preset range, a user information verification proof private key is generated; the user information verification proof private key is matched with the user verification information proof public key. If the matching information is correct, a personal information approval proof list is generated and stored on a blockchain. The application software company and the bank can use the data together, and the data can be verified in real time without repeatedly signing agreements. Multiple application software and multiple banks can share data while ensuring user privacy.

Description

Technical Field

[0001] The present invention relates to the field of financial technology, and in particular to a personal data processing method and device based on zero-knowledge proof. Background Art

[0002] With the development of the times, more and more people are starting to use mobile terminal devices such as tablets and mobile phones. Mobile terminals will install many application software. Users will leave a lot of data when using terminal application software. Banks can mine the data left by users in mobile terminal application software to predict the business that users want to obtain in the bank. If application software production companies want to carry out financial business, they also need bank user data, but bank user data and application software user data both involve user privacy. Although banks can reach an agreement with application software companies to achieve data sharing, since bank user data and application software company user data both involve user privacy, the scope of data retrieval and the authenticity of each data request command sent need to be verified. If multiple application software companies and multiple banks conduct deep mining of privacy data, the existing data command request verification and user data confidentiality are not supported. The workload of verifying the authenticity of these data request information is huge. In order to solve this problem, a personal data processing method and device based on zero-knowledge proof is developed. Summary of the invention

[0003] The purpose of the present invention is to provide a personal data processing method and device based on zero-knowledge proof to solve the problems that the privacy of user data cannot be protected in the current user data exchange process and the workload of requesting the authenticity of commands is huge.

[0004] In a first aspect, the present invention provides a personal data processing method based on zero-knowledge proof, comprising:

[0005] Obtain user information verification request;

[0006] According to the user information verification request, the proof rule digital set is matched, and nine groups of random numbers in the proof rule digital set are randomly retrieved;

[0007] After the nine groups of random numbers are privacy-calculated using a preset algorithm, a proof verification instruction and a public key for verifying user information are generated;

[0008] Verify the data according to the verification instruction and the data verification module, and if the data verification accuracy is within a preset range, generate a user information verification certificate private key;

[0009] The user information verification certificate private key is matched with the user information verification certificate public key to generate a personal information approval certificate list and store it on the blockchain.

[0010] Furthermore, after the nine groups of random numbers are subjected to privacy calculation through a preset algorithm, a proof verification instruction and a user information verification proof public key are generated, including:

[0011] Obtain the trust level of the verification object and generate proof verification instructions;

[0012] According to the proof verification instruction, matching corresponding nine groups of random numbers;

[0013] Sending the nine groups of random numbers to a preset privacy computing model to obtain a random number privacy computing result;

[0014] The random privacy calculation result is passed through a random hash algorithm to generate proof verification instructions and verify the user information to verify the proof public key.

[0015] Further, verification is performed according to the proof verification instruction and the data verification module, and if the data verification accuracy is within a preset range, a user information verification proof private key is generated, including:

[0016] The certification verification instructions correspond to a plurality of different user verification modules;

[0017] Verify and match the multiple different users with a specified privacy computing model to establish a data verification module;

[0018] Retrieve the proof verification instruction and match it with the data verification module to generate a proof verification data group;

[0019] The proof verification data is verified by a data verification module, and if the data verification accuracy is within a preset range, a user information verification proof private key is generated.

[0020] Further, the user information verification certificate private key is matched with the user verification information certificate public key to generate a personal information approval certificate list and store it on the blockchain, including;

[0021] The user information verification proof private key is matched with the user information verification proof public key through privacy calculation to obtain a privacy calculation result of the user information verification proof secret key;

[0022] Verify the privacy calculation result of the proof key based on the user information and generate the scope of the personal information approval proof;

[0023] Based on the scope of personal information approval certification, a personal information approval certification list is generated and stored on the blockchain.

[0024] In a second aspect, the present invention provides a personal data processing device based on zero-knowledge proof, comprising:

[0025] An acquisition unit, which acquires a user information verification request;

[0026] A rule matching unit matches the proof rule digital set according to the user information verification request, and randomly retrieves nine groups of random numbers from the proof rule digital set;

[0027] The data fusion unit performs privacy calculation on nine sets of random numbers through a preset algorithm, and then generates a proof verification instruction and a public key for verifying user information;

[0028] A data verification unit performs verification according to the proof verification instruction and the data verification module, and generates a user information verification proof private key if the data verification accuracy is within a preset range;

[0029] The proof unit matches the user information verification proof private key with the user information verification proof public key, generates a personal information approval proof list and stores it on the blockchain.

[0030] Furthermore, the data fusion unit includes:

[0031] An instruction generation unit, which obtains the trust level of the verification object and generates a proof verification instruction;

[0032] A verification instruction matching unit, matching corresponding nine groups of random numbers according to the proof verification instruction;

[0033] A first computing unit sends the nine groups of random numbers to a preset privacy computing model to obtain a random number privacy computing result;

[0034] The second computing unit uses a random hash algorithm to generate a proof verification instruction and a user information verification proof public key for the random privacy calculation result.

[0035] Furthermore, the data verification unit includes:

[0036] An instruction matching unit, wherein the proof verification instruction corresponds to a plurality of different user verification modules;

[0037] A data verification unit, which verifies and matches the multiple different users with a specified privacy computing model to establish a data verification module;

[0038] A proof data generation unit, which calls the proof verification instruction and matches it with the data verification module to generate a proof verification data group;

[0039] The proof data verification unit verifies the proof verification data through the data verification module, and if the data verification accuracy is within a preset range, generates a user information verification proof private key.

[0040] Furthermore, the certification unit includes:

[0041] The secret key generation unit matches the user information verification proof private key with the user verification information proof public key through privacy calculation to obtain a privacy calculation result of the user information verification proof secret key;

[0042] The information verification unit verifies the privacy calculation result of the proof key based on the user information and generates the scope of the personal information verification proof;

[0043] The proof generation unit generates a list of personal information approval certificates based on the scope of the personal information approval certificates and stores it on the blockchain.

[0044] The beneficial effects of the present invention are as follows: a personal data processing method and device based on zero-knowledge proof provided by the present invention obtains a user information verification request. After the bank receives the instruction of the application software service provider requesting data, it matches the proof rule number set according to the user information verification request and randomly retrieves nine groups of random numbers in the proof rule number set; to avoid leakage of user information and random numbers, the nine groups of random numbers are subjected to privacy calculation through a preset algorithm, and a proof verification instruction and a user information verification proof public key are generated; verification is performed according to the proof verification instruction and the data verification module, and if the data verification accuracy is within a preset range, a user information verification proof private key is generated; the user information verification proof private key is matched with the user verification information proof public key, and if the matching information is correct, a personal information approval proof list is generated and stored on the blockchain, the application software company and the bank can use the data together, and the data can be verified in real time without repeatedly signing agreements, and multiple application software and multiple banks can share data while ensuring user privacy. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the technical solution of the present invention, the drawings required for use in the embodiments are briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0046] Figure 1 A flow chart of a personal data processing method based on zero-knowledge proof provided by an embodiment of the present invention;

[0047] Figure 2 A flowchart of step S103 of the personal data processing method based on zero-knowledge proof provided in an embodiment of the present invention;

[0048] Figure 3 A flowchart of a personal data processing method S104 based on zero-knowledge proof provided in an embodiment of the present invention;

[0049] Figure 4 A flowchart of a personal data processing method S105 based on zero-knowledge proof provided in an embodiment of the present invention;

[0050] Figure 5 A schematic diagram of a personal data processing device based on zero-knowledge proof provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0051] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described in conjunction with the specific embodiments of the present invention and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention. The technical solutions provided by the embodiments of the present invention are described in detail below in conjunction with the drawings.

[0052] See also Figure 1 The present invention provides a personal data processing method based on zero-knowledge proof, comprising:

[0053] S101, obtaining a user information verification request;

[0054] The bank receives a data request from an application software service provider, which may be sent simultaneously between multiple application software service providers and multiple banks;

[0055] S102, matching the proof rule digital set according to the user information verification request, and randomly retrieving nine groups of random numbers from the proof rule digital set;

[0056] Based on the characteristics of the software service provider and the matching of data with the bank system, the previously agreed set of random verification identity numbers is retrieved to prove the authenticity of the data request instruction.

[0057] S103, after the nine groups of random numbers are subjected to privacy calculation by a preset algorithm, a proof verification instruction and a user information verification proof public key are generated;

[0058] In order to protect the privacy of bank users and prevent the leakage of verification digital sets, privacy calculations are performed on bank user data and verification digital sets according to the previously agreed privacy calculation model to generate proof verification instructions and verify user information verification public keys. In the process of information transmission between software service providers and banks, there will be no problem of data leakage.

[0059] S104, verifying the data verification module according to the proof verification instruction, and generating a user information verification proof private key if the data verification accuracy is within a preset range;

[0060] Verification is performed according to the proof verification instruction and the data verification module. It can be verification between a bank and a software service provider, or between multiple banks and multiple service providers. There is no need to repeatedly sign the agreement, only digital verification is required. If the data verification accuracy is within the preset range, a user information verification proof private key is generated.

[0061] S105, matching the user information verification certificate private key with the user information verification certificate public key, generating a personal information approval certificate list and storing it on the blockchain.

[0062] The user information verification certificate private key is matched with the user verification information certificate public key. If the matching information is correct, a personal information approval certificate list is generated and stored on the blockchain. Application software companies and banks can use the data together, and the data can be verified in real time without repeatedly signing agreements. Multiple application software and multiple banks can share data while ensuring user privacy.

[0063] For further information, see Figure 2 , after the nine groups of random numbers are privacy-calculated through a preset algorithm, a proof verification instruction and a user information verification proof public key are generated, including;

[0064] S301, obtaining the trust level of the verification object and generating a proof verification instruction;

[0065] In order to protect the privacy data security of bank users, different software service providers are divided into different levels. Software service providers of different levels have different user data acquisition rights. Even if the software service providers want to obtain more user data, the system will not support it.

[0066] S302, matching corresponding nine groups of random numbers according to the proof verification instruction;

[0067] According to the proof verification instruction, matching corresponding nine groups of random numbers is used to implement zero-knowledge identity authentication;

[0068] S303, sending the nine groups of random numbers to a preset privacy calculation model to obtain a random number privacy calculation result;

[0069] To prevent leakage of user information and random numbers, nine groups of random numbers are subjected to privacy calculations using a preset algorithm to generate proof verification instructions and verify user information and a public key for verification.

[0070] S304, the random privacy calculation result is used through a random hash algorithm to generate a proof verification instruction and verify the user information verification proof public key.

[0071] In order to prevent the proof verification instructions and the verification of user information and the proof public key from being modified, the random privacy calculation results are passed through a random hash algorithm to achieve tamper-proof effect.

[0072] For further information, see Figure 3 , verifying the data verification module according to the verification instruction, and if the data verification accuracy is within a preset range, generating a user information verification proof private key, including:

[0073] S401, the certification verification instruction corresponds to a plurality of different user verification modules;

[0074] S402, verifying and matching the multiple different users with a specified privacy computing model to establish a data verification module;

[0075] S403, calling the proof verification instruction to match with the data verification module to generate a proof verification data group;

[0076] S404: Verify the proof verification data through a data verification module. If the data verification accuracy is within a preset range, generate a user information verification proof private key.

[0077] Verification is performed according to the proof verification instruction and the data verification module. It can be verification between a bank and a software service provider, or verification between multiple banks and multiple service providers. There is no need to repeatedly sign the agreement, only digital verification is required. If the data verification accuracy is within the preset range, a user information verification proof private key is generated.

[0078] For further information, see Figure 4 , match the user information verification certificate private key with the user information verification certificate public key, generate a personal information approval certificate list and store it on the blockchain, including:

[0079] S501, matching the user information verification proof private key with the user information verification proof public key through privacy calculation to obtain a privacy calculation result of the user information verification proof secret key;

[0080] S502, verify the privacy calculation result of the proof key according to the user information and generate the personal information approval proof scope;

[0081] S503, based on the scope of the personal information approval certificate, generate a personal information approval certificate list and store it on the blockchain.

[0082] Obtain user information verification request. After the bank receives the instruction from the application software service provider requesting data, it matches the proof rule number set according to the user information verification request and randomly retrieves nine groups of random numbers from the proof rule number set. To avoid leakage of user information and random numbers, the nine groups of random numbers are subjected to privacy calculation through a preset algorithm to generate a proof verification instruction and a user information verification proof public key. Verification is performed according to the proof verification instruction and the data verification module. If the data verification accuracy is within the preset range, a user information verification proof private key is generated. The user information verification proof private key is matched with the user verification information proof public key. If the matching information is correct, a personal information approval certificate list is generated and stored on the blockchain. The application software company and the bank can use the data together, and the data can be verified in real time without repeatedly signing agreements. Multiple application software and multiple banks can share data while ensuring user privacy. Banks can use the data on the application software. For example, if the application software searches for a lot of data on how to get a loan, the bank can infer that the current loan demand is large based on the data, and then promote loan products. Through low-cost identity authentication, user feature data can be obtained in real time.

[0083] See also Figure 5 , an embodiment of the present invention also provides a personal data processing device based on zero-knowledge proof, including:

[0084] S601, an acquiring unit acquires a user information verification request;

[0085] S602, a rule matching unit matches the proof rule digital set according to the user information verification request, and randomly retrieves nine groups of random numbers from the proof rule digital set;

[0086] S603, the data fusion unit performs privacy calculation on the nine groups of random numbers through a preset algorithm, and generates a proof verification instruction and a user information verification proof public key;

[0087] S604, the data verification unit performs verification according to the proof verification instruction and the data verification module, and generates a user information verification proof private key if the data verification accuracy is within a preset range;

[0088] S605, the certification unit matches the user information verification certification private key with the user information verification certification public key, generates a personal information approval certification list and stores it on the blockchain.

[0089] Furthermore, the data fusion unit includes:

[0090] An instruction generation unit, which obtains the trust level of the verification object and generates a proof verification instruction;

[0091] A verification instruction matching unit, matching corresponding nine groups of random numbers according to the proof verification instruction;

[0092] A first computing unit sends the nine groups of random numbers to a preset privacy computing model to obtain a random number privacy computing result;

[0093] The second computing unit uses a random hash algorithm to generate a proof verification instruction and a user information verification proof public key for the random privacy calculation result.

[0094] Furthermore, the data verification unit includes:

[0095] An instruction matching unit, wherein the proof verification instruction corresponds to a plurality of different user verification modules;

[0096] A data verification unit, which verifies and matches the multiple different users with a specified privacy computing model to establish a data verification module;

[0097] A proof data generation unit, which calls the proof verification instruction and matches it with the data verification module to generate a proof verification data group;

[0098] The proof data verification unit verifies the proof verification data through the data verification module, and if the data verification accuracy is within a preset range, generates a user information verification proof private key.

[0099] Furthermore, the certification unit includes:

[0100] The secret key generation unit matches the user information verification proof private key with the user verification information proof public key through privacy calculation to obtain a privacy calculation result of the user information verification proof secret key;

[0101] The information verification unit verifies the privacy calculation result of the proof key based on the user information and generates the scope of the personal information verification proof;

[0102] The proof generation unit generates a list of personal information approval certificates based on the scope of the personal information approval certificates and stores it on the blockchain.

[0103] As can be seen from the above embodiments, the present invention provides a method and device for processing personal data based on zero-knowledge proof, obtains a user information verification request, and after the bank receives the instruction of the application software service provider requesting data, it matches the proof rule number set according to the user information verification request, and randomly retrieves nine groups of random numbers in the proof rule number set; in order to avoid leakage of user information and random numbers, the nine groups of random numbers are subjected to privacy calculation by a preset algorithm, and then a proof verification instruction and a user information verification proof public key are generated; verification is performed according to the proof verification instruction and the data verification module, and if the data verification accuracy is within a preset range, a user information verification proof private key is generated; the user information verification proof private key is matched with the user verification information proof public key, and if the matching information is correct, a personal information approval proof list is generated and stored on the blockchain, the application software company and the bank can use the data together, and the data can be verified in real time without repeatedly signing the agreement, and multiple application software and multiple banks can share data while ensuring user privacy, and the bank can use the data on the application software, for example, if the application software searches for more data on how to get a loan, the bank can infer that the current loan demand is large based on the data, and then promote loan products, and obtain user feature data in real time through low-cost identity authentication.

[0104] The embodiment of the present invention further provides a storage medium, and the embodiment of the present invention further provides a storage medium, wherein a computer program is stored in the storage medium, and when the computer program is executed by a processor, some or all of the steps in each embodiment of the personal data processing method based on zero-knowledge proof provided by the present invention are implemented. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM).

[0105] Those skilled in the art can clearly understand that the technology in the embodiments of the present invention can be implemented by means of software plus a necessary general hardware platform. Based on this understanding, the technical solution in the embodiments of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which can be stored in a storage medium such as ROM / RAM, a disk, an optical disk, etc., and includes a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present invention or some parts of the embodiments.

[0106] The same or similar parts between the various embodiments in this specification can be referred to each other. In particular, for the personal data processing device embodiment based on zero-knowledge proof, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description in the method embodiment.

[0107] The above-described embodiments of the present invention do not limit the protection scope of the present invention.

Claims

1. A personal data processing method based on zero-knowledge proof, characterized in that: include; Obtain user information verification request; According to the user information verification request, the proof rule digital set is matched, and nine groups of random numbers in the proof rule digital set are randomly retrieved; After the nine groups of random numbers are privacy-calculated using a preset algorithm, a proof verification instruction and a public key for verifying user information are generated; Verify the data according to the verification instruction and the data verification module, and if the data verification accuracy is within a preset range, generate a user information verification certificate private key; Match the user information verification certificate private key with the user information verification certificate public key, generate a personal information approval certificate list and store it on the blockchain; After the nine groups of random numbers are privacy-calculated using a preset algorithm, a proof verification instruction and a user information verification proof public key are generated, including; Obtain the trust level of the verification object and generate proof verification instructions; According to the proof verification instruction, matching corresponding nine groups of random numbers; Sending the nine groups of random numbers to a preset privacy computing model to obtain a random number privacy computing result; The random privacy calculation result is passed through a random hash algorithm to generate proof verification instructions and verify the user information to verify the proof public key.

2. The method according to claim 1, characterized in that Verification is performed according to the proof verification instruction and the data verification module. If the data verification accuracy is within a preset range, a user information verification proof private key is generated, including: The certification verification instructions correspond to a plurality of different user verification modules; Verify and match the multiple different users with a specified privacy computing model to establish a data verification module; Retrieve the proof verification instruction and match it with the data verification module to generate a proof verification data group; The proof verification data is verified by a data verification module, and if the data verification accuracy is within a preset range, a user information verification proof private key is generated.

3. The method according to claim 1, characterized in that Match the user information verification certificate private key with the user information verification certificate public key to generate a personal information approval certificate list and store it on the blockchain, including: The user information verification proof private key is matched with the user information verification proof public key through privacy calculation to obtain a privacy calculation result of the user information verification proof secret key; Verify the privacy calculation result of the proof key based on the user information and generate the scope of the personal information approval proof; Based on the scope of personal information approval certification, a personal information approval certification list is generated and stored on the blockchain.

4. A personal data processing device based on zero-knowledge proof, characterized in that: include: An acquisition unit, which acquires a user information verification request; A rule matching unit matches the proof rule digital set according to the user information verification request, and randomly retrieves nine groups of random numbers from the proof rule digital set; The data fusion unit performs privacy calculation on nine sets of random numbers through a preset algorithm, and then generates a proof verification instruction and a public key for verifying user information; A data verification unit performs verification according to the proof verification instruction and the data verification module, and generates a user information verification proof private key if the data verification accuracy is within a preset range; The certification unit matches the user information verification certification private key with the user information verification certification public key, generates a personal information approval certification list and stores it on the blockchain; The data fusion unit comprises: An instruction generation unit, which obtains the trust level of the verification object and generates a proof verification instruction; A verification instruction matching unit, matching corresponding nine groups of random numbers according to the proof verification instruction; A first computing unit sends the nine groups of random numbers to a preset privacy computing model to obtain a random number privacy computing result; The second computing unit uses a random hash algorithm to generate a proof verification instruction and a user information verification proof public key for the random privacy calculation result.

5. The device according to claim 4, characterized in that The data verification unit comprises: An instruction matching unit, wherein the proof verification instruction corresponds to a plurality of different user verification modules; A data verification unit, which verifies and matches the multiple different users with a specified privacy computing model to establish a data verification module; A proof data generation unit, which calls the proof verification instruction and matches it with the data verification module to generate a proof verification data group; The proof data verification unit verifies the proof verification data through the data verification module, and if the data verification accuracy is within a preset range, generates a user information verification proof private key.

6. The device according to claim 4, characterized in that The certification unit includes: The secret key generation unit matches the user information verification proof private key with the user verification information proof public key through privacy calculation to obtain a privacy calculation result of the user information verification proof secret key; The information verification unit verifies the privacy calculation result of the proof key based on the user information and generates the scope of the personal information verification proof; The proof generation unit generates a list of personal information approval certificates based on the scope of the personal information approval certificates and stores it on the blockchain.

Images