Information query method, security module, system, device and program product

Abstract

The present application relates to an information query method, a security module, a system, a device and a program product. The method includes detecting whether a host computer matches a security module when the security module is started; when the host computer matches the security module, in response to a first epidemic prevention information query request, encrypting the identity information to be queried in the first epidemic prevention query request using a first encryption key to obtain first encrypted information; sending a second epidemic prevention information query request to the server based on a communication connection with the server, the second epidemic prevention information query request including the first encrypted information; because the security module processes the first epidemic prevention query request only when the host computer matches the security module, the security of the epidemic prevention information query system can be improved from the data access end, and the requirements for the use scenarios of the host computer can be reduced, thereby broadening the use scenarios of the epidemic prevention information query method.

Description

Technical Field

[0001] The present application relates to the field of information query, and in particular to an information query method, system, device and program product. Background Art

[0002] Epidemic prevention information refers to information used for epidemic prevention and control. Epidemic prevention information can be queried through identity information, which can be citizen ID number, facial information, health code information, etc. Identity information is collected with the permission of the inquirer.

[0003] In the related technology, the epidemic prevention information query method is to obtain the identity information of the inquirer through the host computer, query the epidemic prevention information corresponding to the identity information in the epidemic prevention information database, and display the epidemic prevention information through the host computer.

[0004] However, since epidemic prevention information involves personal privacy, in order to avoid information leakage in the epidemic prevention information database, the host computer is strictly managed. For example, the unit holding the host computer needs to have relevant qualifications, which leads to the problem of limited application scenarios of epidemic prevention information query methods. Summary of the invention

[0005] In order to help improve the problem of limited application scenarios of information query methods, the present application provides epidemic prevention information query methods, systems, devices and program products.

[0006] In the first aspect, the present application provides a method for querying epidemic prevention information, which adopts the following technical solution:

[0007] A method for querying epidemic prevention information is used in a security module, wherein the security module is communicatively connected to a server and a host computer, and the method comprises:

[0008] When the security module is started, detecting whether the host computer matches the security module;

[0009] When the host computer matches the security module, in response to the first epidemic prevention information query request, the identity information to be queried in the first epidemic prevention query request is encrypted using a first encryption key to obtain first encrypted information, where the identity information to be queried is used to represent the identity of the person to be queried;

[0010] Sending a second epidemic prevention information query request to the server based on the communication connection with the server, where the second epidemic prevention information query request includes the first encrypted information;

[0011] By adopting the above technical solution, the security module will process the first epidemic prevention query request only when the host computer and the security module match. The security of the epidemic prevention information query system can be improved from the data access end, and the requirements for the use scenarios of the host computer can be reduced. Therefore, the use scenarios of the epidemic prevention information query method can be broadened.

[0012] Optionally, the method further includes:

[0013] Receiving response information returned by the server, wherein the response information includes second encrypted information;

[0014] Decrypt the second encrypted information using the second decryption key corresponding to the second encryption key to obtain the epidemic prevention information;

[0015] The epidemic prevention information is sent to the host computer based on the communication connection with the host computer, so that the host computer outputs the epidemic prevention information.

[0016] By adopting the above technical solution, the epidemic prevention information is encrypted and transmitted between the server and the security module, thereby improving the security of the epidemic prevention information transmission process.

[0017] Optionally, the security module stores a first device fingerprint of a host computer bound to the security module, and the detecting whether the host computer matches the security module includes:

[0018] Obtaining a second device fingerprint of the host computer;

[0019] determining whether the second device fingerprint matches the first device fingerprint;

[0020] If the second device fingerprint matches the first device fingerprint, determining that the host computer matches the security module;

[0021] When the second device fingerprint does not match the first device fingerprint, it is determined that the host computer does not match the security module.

[0022] By adopting the above technical solution, whether the host computer and the security module match is detected based on the device fingerprint. Since the device fingerprint cannot be tampered with and the device fingerprints of different host computers are different, it is possible to effectively avoid copying one host computer to multiple host computers for use, thereby improving the security of the host computer connected to the epidemic prevention information query system.

[0023] Optionally, the security module is further connected to a terminal reading device, and the terminal reading device is used to collect the identity information to be queried. The method further includes:

[0024] In response to the first epidemic prevention information query instruction sent by the terminal reading device, an information acquisition success instruction is sent to the host computer based on the communication connection between the terminal and the host computer.

[0025] By adopting the above technical solution, the host computer can prompt the user that the information is successfully obtained, which can avoid the problem that the user repeatedly inputs information through the acquisition component, resulting in channel resources being occupied and the query speed being slow. Therefore, the query efficiency can be improved.

[0026] In the second aspect, the present application provides a method for querying epidemic prevention information, which adopts the following technical solution:

[0027] A method for querying epidemic prevention information is used in a server, wherein the server is communicatively connected to a security module, and the method comprises:

[0028] In response to the second epidemic prevention information query request sent by the security module, decrypt the first encrypted information in the second epidemic prevention information query request using the first decryption key corresponding to the first encryption key to obtain the identity information to be queried, wherein the first encrypted information is obtained by the security module, in response to the first epidemic prevention information query request, using the first encryption key to encrypt the identity information to be queried in the first epidemic prevention query request when the host computer matches the security module;

[0029] Query the epidemic prevention information corresponding to the identity information to be queried.

[0030] Optionally, the identity information to be queried includes identity card information, and the identity card information is encrypted information. The querying of the epidemic prevention information corresponding to the identity information to be queried includes:

[0031] Decoding the ID card information to obtain citizen identity information corresponding to the ID card information;

[0032] Query the epidemic prevention information corresponding to the citizen identity information.

[0033] By adopting the above technical solution, the ID card information is decoded on the server side, which can reduce the requirements for the host computer and facilitate the deployment of the host computer. At the same time, it can also avoid the problem of information leakage that may be caused by decoding on the host computer, thereby improving the security and reliability of the method for obtaining epidemic prevention information.

[0034] In a third aspect, the present application provides a security module, which adopts the following technical solution:

[0035] A security module, comprising a controller, a wired communication module, an encryption chip and a wireless communication module; the wired communication module, the encryption chip and the wireless communication module are all connected to the controller; the wired communication module is connected to a host computer for communication; the wireless communication module is connected to a server for communication; the controller is used for:

[0036] When the security module is started, detecting whether the host computer matches the security module through the information obtained by the wired communication module;

[0037] In the case where the host computer matches the security module, in response to a first epidemic prevention information query request transmitted through the wired communication module, the identity information to be queried in the first epidemic prevention request is encrypted through the encryption chip using a first encryption key to obtain first encrypted information, where the identity information to be queried is used to characterize the identity of the person to be queried;

[0038] Control the wireless communication module to send a second epidemic prevention information query request to the server, where the second epidemic prevention information query request includes the first encrypted information.

[0039] By adopting the above technical solution, the encryption chip is used to physically encrypt the identity information to be queried, which can improve the security of the data transmission process.

[0040] In the fourth aspect, the present application provides an epidemic prevention information query system, which adopts the following technical solutions:

[0041] An epidemic prevention information query system, the system comprising a security module and a server;

[0042] The security module is used to detect whether the host computer matches the security module when the security module is started; when the host computer matches the security module, in response to the first epidemic prevention information query request, use the first encryption key to encrypt the identity information to be queried in the first epidemic prevention information query request to obtain first encrypted information, wherein the identity information to be queried is used to characterize the identity of the person to be queried; based on the communication connection with the server, send a second epidemic prevention information query request to the server, wherein the second epidemic prevention information query request includes the first encrypted information;

[0043] The server is used to, upon receiving a second epidemic prevention information query request sent by the security module, use the first decryption key corresponding to the first encryption key to decrypt the first encrypted information to obtain the identity information to be queried; and query the epidemic prevention information corresponding to the identity information to be queried.

[0044] In a fifth aspect, the present application provides a computer device, which adopts the following technical solution:

[0045] A computer device comprises a memory and a processor, wherein the memory stores a computer program that can be loaded by the processor and executes any one of the methods provided in the first aspect or the second aspect.

[0046] In a sixth aspect, the present application provides a computer program product, which adopts the following technical solution:

[0047] A computer program product comprises computer instructions. When the computer program product is run on a computer device, the computer device is caused to execute any one of the methods provided in the first aspect or the second aspect.

[0048] In summary, the present application includes at least one of the following beneficial technical effects:

[0049] 1. By adopting the above technical solution, the security module processes the first epidemic prevention query request only when the host computer and the security module match, which can improve the security of the epidemic prevention information query system from the data access end, and reduce the requirements for the use scenario of the host computer. Therefore, the use scenario of the epidemic prevention information query method can be broadened;

[0050] 2. By adopting the above technical solution, the host computer can prompt the user that the information is successfully obtained, which can avoid the problem that the user repeatedly inputs information through the acquisition component, resulting in the occupation of channel resources and slow query speed. Therefore, the query efficiency can be improved;

[0051] 3. By adopting the above technical solution, the ID card information is decoded on the server side, which can reduce the requirements for the host computer and facilitate the deployment of the host computer; at the same time, it can also avoid the problem of information leakage that may be caused by decoding on the host computer, thereby improving the security and reliability of the method for obtaining epidemic prevention information. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 It is a flowchart of an epidemic prevention information query method provided by an embodiment of the present application;

[0053] Figure 2 It is a flowchart of another epidemic prevention information query method provided in an embodiment of the present application;

[0054] Figure 3 It is a structural diagram of an epidemic prevention information query system provided by an embodiment of the present application;

[0055] Figure 4 It is a structural diagram of another epidemic prevention information query system provided in an embodiment of the present application;

[0056] Figure 5 It is a schematic diagram of the structure of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0057] In order to make the purpose, technical solutions and advantages of this application more clear, the following Figure 1-5 It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0058] First, several terms involved in the embodiments of this application are introduced. It should be noted that during the implementation of this application, the permission of the person to be queried is required before obtaining the information to be queried and querying the epidemic prevention, and the way of processing the information to be queried and the epidemic prevention information needs to comply with relevant regulations.

[0059] Radio Frequency Identification (RFID) refers to: an automatic recognition technology that uses wireless radio frequency to conduct non-contact two-way data communication and uses wireless radio frequency to read and write recording media (electronic tags or radio frequency cards) to achieve the purpose of identifying targets and exchanging data.

[0060] Near Field Communication (NFC) is an integration of radio frequency identification (RFID) and interconnection technology. It integrates the functions of inductive card reader, inductive card and point-to-point communication on a single chip, and uses mobile terminals to realize mobile payment, electronic ticketing, access control, mobile identity recognition, anti-counterfeiting and other applications.

[0061] In my country's second-generation ID card, there is an induction coil. When the ID card enters the induction range of the ID card reader, it can receive the radio frequency signal sent by the reader. The induction coil in the ID card obtains energy through electromagnetic induction and briefly powers itself, thereby completing the information exchange. At this time, the ID card reader can read the ID card information. The ID card information read by the ID card reader is encrypted, and the ID card information needs to be decoded to obtain the citizen identity information.

[0062] The embodiment of the present application discloses a method for querying epidemic prevention information, which is used in a security module. The security module can be a microcontroller unit (MCU), a functional module designed based on an open computer system (OpenCPU), a microcomputer, or any other device with computing and communication functions. The security module is connected to the upper computer in the server. Figure 1 , the method comprises the following steps:

[0063] Step 101, when the security module is started, detect whether the host computer matches the security module.

[0064] When the host computer and the security module match, step 102 is executed.

[0065] In the case where the host computer and the security module do not match, it is determined that the host computer is illegal.

[0066] Optionally, the security module is connected to the host computer via a wired communication module.

[0067] Optionally, the security module is started, which means that the security module enters a working state. When the security module is in the working state, the security module can communicate with the server based on the communication connection between the security module and the server.

[0068] In one example, when power is turned on, the security module starts up, and at this time, the security module is powered by the host computer.

[0069] In another example, when the host computer access is detected, the security module is started.

[0070] Optionally, the security module may detect access to the host computer by receiving an access request sent by the host computer, or may detect that a communication port corresponding to the host computer is occupied. This embodiment does not limit the manner in which the security module detects access to the host computer.

[0071] Optionally, the security module stores a second device fingerprint of a host computer bound to the security module, and detecting whether the host computer and the security module match includes: obtaining a first device fingerprint of the host computer; determining whether the second device fingerprint matches the first device fingerprint; if the second device fingerprint matches the first device fingerprint, determining that the host computer and the security module match; if the second device fingerprint does not match the first device fingerprint, determining that the host computer and the security module do not match.

[0072] The device fingerprint refers to: a device feature or unique device identifier that can be used to uniquely identify the host computer, and different host computers have different device fingerprints. The device fingerprint can be the host computer's product serial number (Serial Number, SN), or it can also be the host computer's local area network address (Media Access Control Address, MAC), or it can also be the host computer's International Mobile Equipment Identity (International Mobile Equipment Identity, IMEI). This embodiment does not limit the type of device fingerprint.

[0073] Optionally, the first device fingerprint may be the device fingerprint of the host computer obtained when the security module is connected to the host computer for the first time, or it may be pre-written when the security module leaves the factory, or it may be written by the administrator in other ways, such as: sent to the security module through a server. This embodiment does not limit the method for obtaining the first device fingerprint.

[0074] In one example, when the security module is connected to the host computer for the first time, the initial device fingerprint and the registered location information of the current location of the security module and the host computer to which the security module is connected are obtained, and a registration request is sent to the server based on the above initial fingerprint and registration location information and the module information of the security module to complete the registration of the security module on the server; when the registration success feedback sent by the server is received, the initial device fingerprint is determined as the first device fingerprint; when the registration success feedback sent by the server is not received or the registration failure feedback sent by the server is received, it is determined that the host computer and the security module do not match.

[0075] Optionally, the location information of the security module can be determined based on the location information of a wireless base station that is in communication with the security module, or can be determined based on a positioning device installed on the security module. This embodiment does not limit the method for determining the location information of the security module.

[0076] Optionally, when the security module is started, detecting whether the host computer matches the security module includes: when the security module is started, obtaining the location information of the security module, and if the location information of the security module matches the location range to which the registered location belongs, detecting whether the host computer matches the security module, and if the location information of the security module does not match the preset location range, determining that the host computer is illegal. This can prevent the security module from being used in areas other than the registered location.

[0077] Optionally, the methods for obtaining the second device fingerprint of the host computer include the following:

[0078] In the first type, the second device fingerprint is sent by the host computer to the security module. In this case, obtaining the second device fingerprint of the host computer includes: responding to an access request from the host computer and determining the second device fingerprint of the host computer based on the access request.

[0079] Optionally, a host computer program is running on the host computer. When the host computer is started, the host computer program controls the host computer to obtain the second device fingerprint of the host computer, generates an access request based on the device fingerprint, and sends the access request to the security module.

[0080] In order to improve the security of the process of obtaining the second device fingerprint, the host computer program running on the host computer is provided by a designated provider, such as a security module provider, so that it can be ensured that the obtained second device fingerprint is the real device fingerprint of the host computer.

[0081] Correspondingly, determining the second device fingerprint of the host computer based on the access request includes: determining whether the access request is legal; if the access request is legal, determining the second device fingerprint of the host computer based on the access request; if the access request is illegal, determining that the host computer does not match the security module.

[0082] Optionally, determining whether the access request is legal includes: determining whether the access request is generated by a designated host computer program; if the access request is generated by a designated host computer program, determining that the access request is legal; if the access request is not generated by a designated host computer program, determining that the access request is illegal.

[0083] In one example, determining whether an access request is generated by a designated upper computer program includes: determining whether the access request conforms to a preset format; if the access request conforms to the preset format, determining that the access request is legal; if the access request does not conform to the preset format, determining that the access request is illegal.

[0084] Optionally, a method for generating an access request in a preset format is pre-stored in a designated host computer program, and when generating an access request, the designated host computer program will use the method to generate an access request in a preset format.

[0085] In another example, determining whether an access request is generated by a designated upper computer program includes: determining whether the access request is encrypted in a preset manner; if the access request is encrypted in a preset manner, determining that the access request is legal; if the access request is not encrypted in a preset manner, determining that the access request is illegal.

[0086] Optionally, a method for encrypting an access request is pre-stored in a designated host computer program. When generating an access request, the designated host computer program will use the method to encrypt the access request to obtain an access request encrypted in a preset method.

[0087] In actual implementation, it is also possible to determine whether the access request is generated by a designated host computer program in other ways, for example, by determining whether the host computer program running on the host computer is a designated host computer program, and determining whether the access request is generated by the designated host computer program. This embodiment does not limit the method for determining whether the access request is generated by the designated host computer program.

[0088] The second type is that the second device fingerprint security module actively obtains it. At this time, obtaining the second device fingerprint of the host computer includes: capturing the boot information (boot log) of the host computer; and determining the second device fingerprint of the host computer based on the boot information.

[0089] Optionally, the security module is connected to the host computer through a wired communication module. When the host computer is turned on, the security module can capture the startup information of the host computer through the wired communication module.

[0090] In actual implementation, the second device fingerprint of the host computer may also be obtained by other means, for example, the second fingerprint of the host computer may be obtained through a debug bridge (Android Debug Bridge, adb). This embodiment does not limit the method of obtaining the second device fingerprint of the host computer.

[0091] Optionally, determining whether the second device fingerprint matches the first device fingerprint includes: determining whether the second device fingerprint is the same as the first identification fingerprint; if the second device fingerprint is the same as the first device fingerprint, determining that the second device fingerprint matches the first device fingerprint; if the second device fingerprint is not the same as the first device fingerprint, determining that the second device fingerprint does not match the first device fingerprint.

[0092] In actual implementation, it is possible to detect whether the host computer and the security module match based on a certain type of device fingerprint, or to use a combination of multiple different types of device fingerprints to verify whether the host computer and the security module match. This embodiment does not limit the method of determining whether the host computer and the security module match based on the device fingerprint.

[0093] In one example, a plurality of different types of device fingerprints are used in combination. In this case, determining whether the second device fingerprint is the same as the first identification fingerprint includes: for each second device fingerprint, determining whether the second device fingerprint is the same as the corresponding first identification fingerprint; when each second device fingerprint is the same as the corresponding first identification fingerprint, determining that the second device fingerprint is the same as the first device fingerprint; and when there is a second identification fingerprint that is different from the corresponding first identification fingerprint, determining that the second device fingerprint is different from the first device fingerprint.

[0094] Optionally, when it is determined that the upper computer is illegal, the communication connection with the upper computer is disconnected.

[0095] In one example, disconnecting the communication connection with the host computer includes: closing / disconnecting the communication port connected to the host computer.

[0096] Optionally, if the host computer is determined to be illegal, an error message is output.

[0097] Optionally, the method for outputting an error prompt may be to send an alarm prompt to the server based on the communication connection with the server, or may be to output an alarm prompt based on an alarm component installed by itself, for example: broadcasting an alarm sound based on an audio output component installed by itself. This embodiment does not limit the method for outputting an error prompt.

[0098] In actual implementation, other operations may be performed when it is determined that the host computer is illegal, such as deleting the information cached inside the security module. This embodiment does not limit the operations performed when it is determined that the host computer is illegal.

[0099] Step 102, when the host computer matches the security module, in response to the first epidemic prevention information query request, the identity information to be queried in the first epidemic prevention query request is encrypted using the first encryption key to obtain the first encrypted information.

[0100] The identity information to be queried is used to represent the identity of the person to be queried. The identity information to be queried may be information such as ID card information, face information, health code information, etc. This embodiment does not limit the type of identity information to be queried.

[0101] In one example, the security module may provide a communication port for receiving a first epidemic prevention information query request issued by a host computer or other components communicatively connected to the security module. The first epidemic prevention information query request may include identity information to be queried and other information. In some embodiments, the information may be data input by a user into the host computer or other components. The data may be in the form of specific parameters, such as an ID number. In another embodiment, the information may also be collected by the host computer or other components, such as through an image acquisition component or a wireless near-field communication component. In this way, the identity information to be queried can be directly obtained without relying on manual input. The operation is simple and input errors caused by errors in manual input can be avoided.

[0102] In one example, the first epidemic prevention information query request is sent by the host computer.

[0103] In another example, the security module is also connected to a terminal reading device, which is used to collect identity information to be queried. At this time, the first epidemic prevention information query request can be sent by the host computer, or it can also be sent by the terminal reading device.

[0104] Optionally, the epidemic prevention information query method provided in the present application also includes: in response to a first epidemic prevention information query instruction sent by the terminal reading device, sending an information acquisition success instruction to the host computer based on the communication connection between the host computer and the host computer.

[0105] Correspondingly, the host computer responds to the successful information acquisition instruction and outputs a successful information acquisition prompt. Optionally, the successful information acquisition prompt can be displayed by a display component of the host computer, or can also be broadcasted by an audio output component installed on the host computer. This embodiment does not limit the way of outputting the successful information acquisition prompt.

[0106] Optionally, the host computer obtains first image information within the facial image acquisition area in response to a prompt indicating successful information acquisition.

[0107] In one example, the host computer sends the first image information to the security module based on the communication connection between the host computer and the security module.

[0108] Optionally, the first encryption key may be a key used for symmetric encryption, or may be a key used for non-symmetric encryption. When the first key is a key used for asymmetric encryption, the first encryption key is a public key. This embodiment does not limit the type of the first encryption key.

[0109] In one example, the first encryption key is used to encrypt the identity information to be queried in the first epidemic prevention query request to obtain the first encrypted information, including: using the first encryption key to encrypt the identity information to be queried in the first epidemic prevention query request based on the national encryption SM2 algorithm and the national encryption SM4 algorithm to obtain the first encrypted information.

[0110] Optionally, the security module also includes an encryption chip. In this case, the first encryption key is used to encrypt the identity information to be queried in the first epidemic prevention query request, including: using the first encryption key to encrypt the identity information to be queried in the first epidemic prevention query request through the encryption chip.

[0111] Among them, the encryption chip can be a national secret encryption chip, or it can also be any chip that can implement symmetric and / or asymmetric data encryption. This embodiment does not limit the type of encryption chip.

[0112] In one example, the encryption chip is a national encryption chip that integrates national encryption algorithms such as SM1, SM2, SM3, and SM4.

[0113] Step 103: Send a second epidemic prevention information query request to the server based on the communication connection with the server, where the second epidemic prevention information query request includes the first encrypted information.

[0114] Optionally, the security module and the server may be connected based on cellular mobile communication (Cellular Mobile Communication), or may be connected based on satellite communication (Satellite Communication). When the security module and the server are connected based on cellular mobile communication, the communication connection may be established based on 2G, 3G, 4G or 5G. This embodiment does not limit the manner in which the communication connection is established between the security module and the server.

[0115] In one example, the security module is connected to the server based on 4G cellular mobile communication.

[0116] Correspondingly, the server is used to respond to the second epidemic prevention information query request, use the first decryption key corresponding to the first encryption key to decrypt the first encrypted information in the second epidemic prevention information query request, and obtain the identity information to be queried; and query the epidemic prevention information corresponding to the identity information to be queried.

[0117] Optionally, the first decryption key is pre-stored in the server and is determined based on the first encryption key and the encryption method.

[0118] Optionally, when encryption is performed using a symmetric encryption method, the first decryption key is the same as the first encryption key; when encryption is performed using an asymmetric encryption method, the first decryption key is a private key corresponding to the first encryption key.

[0119] In one example, the first encrypted information is decrypted using the first decryption key to obtain the identity information to be queried, including: using the first encryption key to decrypt the first encrypted information based on the national encryption SM2 algorithm and the national encryption SM4 algorithm to obtain the identity information to be queried.

[0120] Among them, epidemic prevention information refers to information used for epidemic prevention and control.

[0121] Optionally, the epidemic prevention information is information that has been desensitized. For example, the name "Li Xhua" and the ID number "37xxxxxxxxxxxxxx23".

[0122] Optionally, in order to distinguish different query results, querying the epidemic prevention information corresponding to the identity information to be queried further includes: obtaining an information query identifier corresponding to this query. The information query identifier corresponding to each information query is different.

[0123] Optionally, the information query identifier may be a number, or a letter, or a combination of numbers and letters. This embodiment does not limit the representation method of the information query identifier.

[0124] Since the information query identifier corresponding to each information query is different, different information query contents and information query results can be determined based on the information query identifier. At the same time, since the information query identifier is desensitized information, the risk of information leakage can be reduced.

[0125] Optionally, the server is also used to encrypt the epidemic prevention information using a second encryption key to obtain second encrypted information; and send response information to the security module based on the communication connection with the security module, wherein the response information includes the second encrypted information.

[0126] Optionally, the second encryption key can be a key used for symmetric encryption, or it can be a key used for asymmetric encryption. When the second key is a key used for asymmetric encryption, the second encryption key is a public key. This embodiment does not limit the type of the second encryption key.

[0127] Optionally, the second encryption key is the same as or different from the first encryption key.

[0128] The method of encrypting the epidemic prevention data using the second encryption key is the same as the method of encrypting the identity information to be queried using the first encryption key in the above step 102, which will not be repeated in this embodiment.

[0129] In one example, the epidemic prevention information is encrypted using a second encryption key to obtain second encrypted information, including: the epidemic prevention information and an information query identifier are encrypting using the second encryption key to obtain second encrypted information.

[0130] In another example, the response information also includes an information query identifier.

[0131] Optionally, the epidemic prevention information query method provided in this embodiment also includes: receiving response information returned by the server, and second encrypted information included in the response information; decrypting the second encrypted information using a second decryption key corresponding to the second encryption key to obtain epidemic prevention information; and sending epidemic prevention information query results to the host computer based on the communication connection with the host computer, so that the host computer can output the epidemic prevention information query results.

[0132] Among them, the epidemic prevention information query results include epidemic prevention information.

[0133] In one example, the security module may provide a communication port for receiving a response message returned by the server, which may include epidemic prevention information and other information. Optionally, the other information includes a device fingerprint of the server, which is used to verify the identity of the server.

[0134] Optionally, the second decryption key is pre-stored in the security module and is determined based on the second encryption key and the encryption method.

[0135] Optionally, when encryption is performed using a symmetric encryption method, the second decryption key is the same as the second encryption key; when encryption is performed using an asymmetric encryption method, the second decryption key is a private key corresponding to the second encryption key.

[0136] In one example, the second encrypted information is decrypted using the second decryption key to obtain the epidemic prevention information, including: using the second encryption key to decrypt the second encrypted information based on the national encryption SM2 algorithm and the national encryption SM4 algorithm to obtain the epidemic prevention information.

[0137] Optionally, the second encrypted information is decrypted using a second decryption key to obtain epidemic prevention information, including: using the second decryption key to decrypt the second encrypted information through an encryption chip to obtain epidemic prevention information.

[0138] In one example, the second encrypted information is obtained by encrypting the epidemic prevention information and the information query identifier using the second encryption key. At this time, the second decryption key corresponding to the second encryption key is used to decrypt the second encrypted information in the response information to obtain the epidemic prevention information and the information query identifier.

[0139] In another example, the response information further includes an information query identifier.

[0140] Optionally, the epidemic prevention information query results also include an information query identifier.

[0141] Optionally, the host computer may output the query result of the epidemic prevention information by displaying it through a display component of the host computer, such as displaying "X shots of vaccination, negative result", or it may be broadcasted through an audio output component installed on the host computer, such as broadcasting "Please pass". This embodiment does not limit the way in which the host computer outputs the epidemic prevention information.

[0142] Optionally, the epidemic prevention information also includes second image information corresponding to the identity information to be queried, and the second image information includes facial image information corresponding to the identity information to be queried.

[0143] In one example, before sending the epidemic prevention information query result to the host computer based on the communication connection with the host computer, it also includes: acquiring the facial image in the first image information; in the case of failure in acquiring the facial image, sending facial recognition failure feedback to the host computer based on the communication connection with the host computer; in the case of successful acquisition of the facial image, determining whether the facial image in the first image information matches the facial image in the second image information, and in the case that the facial image in the first image information matches the facial image in the second image information, sending the epidemic prevention information query result to the host computer based on the communication connection with the host computer, and in the case that the facial image in the first image information does not match the facial image in the second image information, sending facial recognition failure feedback to the host computer based on the communication connection with the host computer, so that the host computer can respond to receiving the failure feedback and output an alarm prompt.

[0144] Since the epidemic prevention information query results are sent to the host computer only when the facial information collected by the host computer matches the facial information in the epidemic prevention information, the problem of using other people's identity information to query epidemic prevention information can be avoided, thereby improving the accuracy of epidemic prevention information query.

[0145] In actual implementation, facial information comparison can also be completed on the host computer. At this time, the second image information is sent to the host computer together with the epidemic prevention information query result for the host computer to perform facial information comparison.

[0146] The implementation principle of the embodiment of the present application is: when the security module is started, it is detected whether the host computer and the security module match; when the host computer and the security module match, in response to the first epidemic prevention information query request, the identity information to be queried in the first epidemic prevention query request is encrypted using the first encryption key to obtain the first encrypted information; based on the communication connection with the server, a second epidemic prevention information query request is sent to the server, and the second epidemic prevention information query request includes the first encrypted information; because the security module processes the first epidemic prevention query request only when the host computer and the security module match, the security of the epidemic prevention information query system can be improved from the data access end, and the requirements for the use scenarios of the host computer can be reduced. Therefore, the use scenarios of the epidemic prevention information query method can be broadened.

[0147] The embodiment of the present application also discloses a method for querying epidemic prevention information, which is used in a server. The server can be any device with computing and communication functions, such as a computer or a tablet computer. The server is connected to the security module for communication, and the security module is used to execute the above Figure 1 The method for querying epidemic prevention information is shown in the figure. Figure 2 , the method comprising:

[0148] Step 201, in response to the second epidemic prevention information query request sent by the security module, the first encrypted information in the second epidemic prevention information query request is decrypted using the first decryption key corresponding to the first encryption key to obtain the identity information to be queried.

[0149] Optionally, the first decryption key is pre-stored in the server and is determined based on the first encryption key and the encryption method.

[0150] Optionally, when encryption is performed using a symmetric encryption method, the first decryption key is the same as the first encryption key; when encryption is performed using an asymmetric encryption method, the first decryption key is a private key corresponding to the first encryption key.

[0151] In one example, the first encrypted information is decrypted using the first decryption key to obtain the identity information to be queried, including: using the first encryption key to decrypt the first encrypted information based on the national encryption SM2 algorithm and the national encryption SM4 algorithm to obtain the identity information to be queried.

[0152] Step 202, query the epidemic prevention information corresponding to the identity information to be queried.

[0153] Optionally, querying the epidemic prevention information corresponding to the identity information to be queried includes: inputting the identity information to be queried into an epidemic prevention database to obtain the epidemic prevention information corresponding to the information to be queried.

[0154] Among them, epidemic prevention information refers to information used for epidemic prevention and control.

[0155] The epidemic prevention database stores identity information and epidemic prevention information, as well as the corresponding relationship between the identity information and the epidemic prevention information. Therefore, the epidemic prevention information corresponding to the identity information can be queried in the epidemic prevention database based on the identity information.

[0156] Optionally, the epidemic prevention information is information that has been desensitized. For example, the name "Li Xhua" and the ID number "37xxxxxxxxxxxxxx23".

[0157] Optionally, the epidemic prevention database may be set on a server, or may be set on other devices that are communicatively connected to the server. This embodiment does not limit the installation location of the epidemic prevention database.

[0158] Optionally, when the epidemic prevention database is set on other devices that are communicatively connected to the server, the identity information to be queried is input into the epidemic prevention database to obtain epidemic prevention information corresponding to the information to be queried, including: sending a third epidemic prevention information query request to the device where the epidemic prevention database is located based on the communication connection between the device where the epidemic prevention database is located, the third epidemic prevention information query request includes the identity information to be queried, so that the device where the epidemic prevention database is located inputs the identity information to be queried into the epidemic prevention database, obtains the epidemic prevention information corresponding to the identity information to be queried, and feeds back the query result to the server based on the communication connection between the server, the query result includes the epidemic prevention information corresponding to the identity information to be queried; receiving the query result returned by the device where the epidemic prevention database is located to obtain the epidemic prevention information.

[0159] Optionally, the identity information to be queried includes ID card information, which is encrypted information. Querying the epidemic prevention information corresponding to the identity information to be queried includes: decoding the ID card information to obtain the citizen identity information corresponding to the ID card information; and querying the epidemic prevention information corresponding to the citizen identity information.

[0160] In one example, the citizen identification information includes a citizen identification number.

[0161] Optionally, the ID card information is obtained by performing near field communication (NFC) recognition on the second-generation resident ID card.

[0162] In one example, the server is also communicatively connected to the ID card information decoding module to decode the ID card information and obtain the citizen identity information corresponding to the ID card information, including: inputting the ID card information into the ID card information decoding module based on the communication connection between the ID card information decoding module, so that the ID card information decryption module decodes the ID card information to obtain the citizen identity information, and feedbacks the citizen identity information to the server based on the communication connection between the server; receiving the citizen identity information returned by the ID card information decoding module.

[0163] In another example, an ID card information decoding program is run in the server to decode the ID card information to obtain citizen identity information corresponding to the ID card information, including: inputting the ID card information into the ID card information decoding program and receiving the citizen identity information output by the ID card information decoding program.

[0164] Optionally, in order to distinguish different query results, query the epidemic prevention information corresponding to the identity information to be queried, including: inputting the identity information to be queried into the epidemic prevention database, and obtaining the epidemic prevention information and information query identifier corresponding to the information to be queried.

[0165] Optionally, the information query identifier may be a number, or a letter, or a combination of numbers and letters. This embodiment does not limit the representation method of the information query identifier.

[0166] Since the information query identifier corresponding to each information query is different, different information query contents and information query results can be determined based on the information query identifier. At the same time, since the information query identifier is desensitized information, the risk of information leakage can be reduced.

[0167] Optionally, the epidemic prevention information query method provided in this embodiment also includes: encrypting the epidemic prevention information using a second encryption key; and sending the second encrypted information to the security module based on the communication connection with the security module.

[0168] Optionally, the second encryption key may be a key used for symmetric encryption, or may be a key used for non-symmetric encryption. When the second key is a key used for asymmetric encryption, the second encryption key is a public key. This embodiment does not limit the type of the second encryption key.

[0169] Optionally, the second encryption key is the same as or different from the first encryption key.

[0170] The method of encrypting the epidemic prevention data using the second encryption key is the same as the method of encrypting the identity information to be queried using the first encryption key in the above step 102, and this embodiment will not be repeated here.

[0171] In one example, the epidemic prevention information is encrypted using a second encryption key to obtain second encrypted information, including: the epidemic prevention information and an information query identifier are encrypting using the second encryption key to obtain second encrypted information.

[0172] In another example, the response information also includes an information query identifier.

[0173] The implementation principle of the embodiment of the present application is: decoding the ID card information on the server side can reduce the requirements for the host computer and facilitate the deployment of the host computer; at the same time, it can also avoid the problem of information leakage that may be caused by decryption on the host computer, thereby improving the security and reliability of the method for obtaining epidemic prevention information.

[0174] The present application also discloses an epidemic prevention information query system. Figure 3 The epidemic prevention information query system includes a host computer 310, a security module 320 and a server 330, wherein the security module 320 is used to execute the above Figure 1 The epidemic prevention information query method shown in the figure, the server 320 is used to execute the above Figure 2 The epidemic prevention information query method shown.

[0175] The host computer 310 refers to a device used to collect identity information to be queried and display epidemic prevention information. The host computer 310 can be any device with information collection, information display and communication functions, such as a gate terminal, a computer, a tablet computer, etc. This embodiment does not limit the device type of the host computer 310.

[0176] In this embodiment, the host computer 310 is used to collect the identity information to be queried during the epidemic prevention information query process.

[0177] In one example, the identity information to be queried is ID card information, and in this case, the host computer 310 includes a wireless near-field communication module 311. During the information collection process, the second-generation ID card of the inquirer is placed close to the wireless near-field communication module 311, and after the ID card enters the sensing range of the wireless near-field communication module 311, the wireless near-field communication module 311 can obtain the ID card information corresponding to the ID card.

[0178] Optionally, the wireless near field communication module 311 is an NFC reader.

[0179] In another example, the identity information to be queried is face information or health code information, and in this case, the host computer 310 further includes an image acquisition component 312. During the information acquisition process, the inquirer approaches the image acquisition component 312, and in this case, the image acquisition component 312 can acquire the face information of the inquirer, or the inquirer brings the health code close to the image acquisition component 312, and in this case, the image acquisition component 312 can acquire the health code information.

[0180] In actual implementation, according to the needs of different usage scenarios, the host computer 310 also includes other collection components, such as: a temperature collection component for collecting the body temperature information of the inquirer. This embodiment does not limit the type of collection components installed on the host computer 310.

[0181] In this embodiment, the host computer 310 further includes a first wired communication module 313 , and the first wired communication module 313 is communicatively connected to the host computer 110 .

[0182] Optionally, the first wired communication module 313 may include a universal asynchronous receiver / transmitter (UART) interface, or may include a universal serial bus (USB) interface, or may include any other interface that can implement hardware communication. This embodiment does not limit the type of communication interface included in the first wired communication module 313.

[0183] Optionally, the epidemic prevention information query system provided in this embodiment further includes a terminal reading device 340, which is independent of the host computer 310 and is used to collect identity information to be queried. The terminal reading device 340 may include any component with information collection and communication functions, such as a wireless near-field communication component, an image acquisition component, and a temperature acquisition component. This embodiment does not limit the device type of the terminal reading device 340.

[0184] In one example, the terminal reading device 340 includes a wireless near-field communication module for obtaining the ID card information of the inquirer.

[0185] Optionally, the terminal reading device 340 is communicatively connected to the security module 320 . The communication connection method between the terminal reading device 340 and the security module 320 is the same as the communication connection method between the host computer 310 and the security module 320 , which will not be described in detail in this embodiment.

[0186] The security module 320 is a module used for information encryption and decryption. The security module 320 can be any device with computing and communication functions, such as a control unit, a microcomputer, etc. This embodiment does not limit the type of the security module 120.

[0187] In this embodiment, the security module 320 includes a first controller 321 , a second wired communication module 322 , an encryption chip 323 and a wireless communication module 324 ; the second wired communication module 322 , the encryption chip 323 and the first wireless communication module 324 are all connected to the first controller 321 .

[0188] The second wired communication module 322 is communicatively connected to the first wired communication module 313 to establish a communication connection between the security module 320 and the host computer 310 .

[0189] The encryption chip 323 is used to encrypt information.

[0190] The first wireless communication module 324 is in communication connection with the server 330 .

[0191] The first controller 321 is used to, when the security module 320 is started, detect whether the host computer 310 matches the security module 320 through the information obtained by the second wired communication module 322; when the host computer 310 matches the security module 320, in response to the first epidemic prevention information query request transmitted through the second wired communication module 322, use the first encryption key to encrypt the identity information to be queried in the first epidemic prevention request through the encryption chip 323 to obtain the first encrypted information, and the identity information to be queried is used to characterize the identity of the person to be queried; control the first wireless communication module 324 to send a second epidemic prevention information query request to the server 330, and the second epidemic prevention information query request includes the first encrypted information.

[0192] Optionally, the second wired communication module 322 may include a universal asynchronous receiver / transmitter (UART) interface, or may include a universal serial bus (USB) interface, or may include any other interface that can implement hardware communication. This embodiment does not limit the type of communication interface included in the second wired communication module 322.

[0193] Optionally, the communication connection established between the second wired communication module 322 and the first wired communication module 313 may be parallel communication, or serial communication, and may be synchronous or asynchronous. This embodiment does not limit the manner in which the communication connection is established between the second wired communication module 322 and the first wired communication module 313.

[0194] In one example, the second wired communication module 322 is connected to the first wired communication module 313 via UART and communicates using the RS-485 protocol. The serial communication interface of the RS-485 protocol includes two data communication ports, RS485-TX and RS485-RX.

[0195] In another example, the second wired communication module 322 is connected to the first wired communication module 313 via UART and communicates using the RS-232 protocol. The serial communication interface of the RS-232 protocol includes two data communication ports, RS232-TX and RS232-RX.

[0196] Optionally, the encryption chip 323 may be a national secret encryption chip, or may be any chip that can implement symmetric and / or asymmetric data encryption. This embodiment does not limit the type of the encryption chip 323.

[0197] In one example, the encryption chip 323 is a national encryption chip that integrates national encryption algorithms such as SM1, SM2, SM3, and SM4.

[0198] The server 330 refers to a device used for information query. The server 330 can be any device with computing and communication functions, such as a computer or a tablet computer. This embodiment does not limit the device type of the server 330.

[0199] The server 330 includes a second controller 331 and a second wireless communication component 332 , and the second wireless communication component 332 is communicatively connected with the first wireless communication component 324 .

[0200] The second controller 331 is used to, when receiving a second epidemic prevention information query request sent by the security module 320 through the first wireless communication component 324, use the first decryption key corresponding to the first encryption key to decrypt the first encrypted information in the second epidemic prevention information query request to obtain the identity information to be queried, where the first encrypted information is obtained by the security module using the first encryption key to encrypt the identity information to be queried; and query the epidemic prevention information corresponding to the identity information to be queried.

[0201] The implementation principle of the embodiment of the present application is: using an encryption chip to physically encrypt the identity information to be queried can improve the security of the data transmission process.

[0202] The embodiment of the present application also discloses a security component, and its specific implementation method is similar to Figure 3 The implementation method of the security module 320 in the epidemic prevention information query system shown is the same, and this embodiment will not be repeated here.

[0203] The present application also discloses an epidemic prevention information query system. Figure 4 The epidemic prevention information query system includes a security module 410 and a server 420.

[0204] Security module 410 is used to detect whether the host computer and the security module match when the security module is started; when the host computer and the security module match, in response to the first epidemic prevention information query request, the identity information to be queried in the first epidemic prevention information query request is encrypted using the first encryption key to obtain the first encrypted information, and the identity information to be queried is used to characterize the identity of the person to be queried; based on the communication connection with the server, a second epidemic prevention information query request is sent to the server, and the second epidemic prevention information query request includes the first encrypted information.

[0205] Server 420 is used to decrypt the first encrypted information using the first decryption key corresponding to the first encryption key to obtain the identity information to be queried when receiving the second epidemic prevention information query request sent by the security module; and query the epidemic prevention information corresponding to the identity information to be queried.

[0206] For relevant details, refer to the method and system section of this embodiment.

[0207] The embodiment of the present application also discloses a computer device.

[0208] Specifically, the computer device includes a memory and a processor.

[0209] like Figure 5 As shown, a server disclosed in the present application is shown, the computer device includes a memory 510 and a processor 520. The number of the processors 520 in the computer device can be one or more. Figure 5 A processor 520 is taken as an example; the memory 510 and the processor 520 in the device may be connected via a bus or other means. Figure 5 The example of connecting through bus is taken in the following.

[0210] The memory 510, as a computer-readable storage medium, can be used to store software programs, computer executable programs and modules, such as program instructions / modules corresponding to the epidemic prevention information query method in the embodiment of the present invention; the processor 520 executes various functional applications and data processing of the device / terminal / device by running the software programs, instructions and modules stored in the memory 510, thereby realizing the above-mentioned epidemic prevention information query method.

[0211] In the above embodiments, all or part of the embodiments may be implemented by software, hardware, firmware or any combination thereof. When implemented by software, all or part of the embodiments may be implemented in the form of a computer program product.

[0212] The embodiment of the present application also discloses a computer program product.

[0213] Specifically, the computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, all or part of the processes or functions according to the embodiments of the present application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website site, a computer, a training device or a data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, training device or data center. The computer-readable storage medium can be any available medium that a computer can store or a data storage device such as a training device, a data center, etc. that includes one or more available media integration. Available media can be magnetic media, (e.g., floppy disk, hard disk, tape), optical media (e.g., DVD), or semiconductor media (e.g., solid-state drive (SSD)), etc.

[0214] The above are all preferred embodiments of the present application, and are not intended to limit the protection scope of the present application. Any feature disclosed in this specification (including the abstract and drawings), unless otherwise stated, can be replaced by other equivalent or alternative features with similar purposes. That is, unless otherwise stated, each feature is only an example of a series of equivalent or similar features.

Claims

1. A method for querying epidemic prevention information, characterized in that: Used in a security module, the security module is communicatively connected with an information collection device, a server and a host computer, and the method includes: When the security module is started, the location information of the security module is obtained, and if the location information of the security module meets the location range to which the registered location belongs, whether the host computer matches the security module is detected; if the location information does not meet the location range, the host computer is determined to be illegal, and the communication connection with the host computer is disconnected; In the case where the host computer matches the security module, in response to the first epidemic prevention information query request sent by the information collection device, the identity information to be queried in the first epidemic prevention query request is encrypted using a first encryption key to obtain first encrypted information, and an information acquisition success instruction is sent to the host computer based on the communication connection between the host computers, so that the host computer can collect the first image information based on the information acquisition instruction and return it to the security module; the identity information to be queried is collected by the information collection device and is used to characterize the identity of the person to be queried; Sending a second epidemic prevention information query request to the server based on the communication connection with the server, where the second epidemic prevention information query request includes the first encrypted information; Receiving response information returned by the server, wherein the response information includes second encrypted information; decrypting the second encrypted information using a second decryption key corresponding to the second encryption key to obtain the epidemic prevention information, where the epidemic prevention information includes the second image information corresponding to the identity information to be queried, and the second image information includes the face image information corresponding to the identity information to be queried; Acquire the face image in the first image information; if the face image acquisition fails, send face recognition failure feedback to the host computer based on the communication connection between the host computer and the host computer; if the face image acquisition succeeds, determine whether the face image in the first image information matches the face image in the second image information; When the face image in the first image information matches the face image in the second image information, sending the epidemic prevention information query result to the host computer based on the communication connection with the host computer, so that the host computer outputs the epidemic prevention information query result, and the epidemic prevention information query result includes epidemic prevention information; In the case where the facial image in the first image information does not match the facial image in the second image information, a facial recognition failure feedback is sent to the host computer based on the communication connection with the host computer.

2. The method according to claim 1, characterized in that The security module stores a first device fingerprint of a host computer bound to the security module, and the detecting whether the host computer matches the security module includes: Obtaining a second device fingerprint of the host computer; determining whether the second device fingerprint matches the first device fingerprint; If the second device fingerprint matches the first device fingerprint, determining that the host computer matches the security module; When the second device fingerprint does not match the first device fingerprint, it is determined that the host computer does not match the security module.

3. A method for querying epidemic prevention information, characterized in that: Used in a server, the server is communicatively connected to a security module, and the method includes: In response to a second epidemic prevention information query request sent by the security module, the first encrypted information in the second epidemic prevention information query request is decrypted using a first decryption key corresponding to the first encryption key to obtain the identity information to be queried, wherein the first encrypted information is obtained by encrypting the identity information to be queried in the first epidemic prevention query request using the first encryption key in response to a first epidemic prevention information query request sent by an information collection device that is communicatively connected to the security module, when the location information conforms to the location range to which the registered location belongs and the host computer matches the security module; Querying the epidemic prevention information corresponding to the identity information to be queried, the epidemic prevention information including the second image information corresponding to the identity information to be queried, and the second image information including the face image information corresponding to the identity information to be queried; Encrypting the epidemic prevention information based on a second encryption key to obtain second encrypted information; Return a response message containing the second encrypted information to the security module, so that the security module can use the second decryption key corresponding to the second encryption key to decrypt the second encrypted information to obtain the epidemic prevention information; and when the acquired first image information contains a face image and the face image in the first image information matches the face image in the second image information, send an epidemic prevention information query result to the host computer based on the communication connection with the host computer, so that the host computer can output the epidemic prevention information query result, and the epidemic prevention information query result includes epidemic prevention information; the first image information is collected and sent to the host computer when the host computer receives the information acquisition success instruction sent by the security module; the information acquisition success instruction is actually generated by the security module when it receives the first epidemic prevention information query request.

4. The method according to claim 3, characterized in that The identity information to be queried includes identity card information, and the identity card information is encrypted information. The querying of the epidemic prevention information corresponding to the identity information to be queried includes: Decoding the ID card information to obtain citizen identity information corresponding to the ID card information; Query the epidemic prevention information corresponding to the citizen identity information.

5. A security module, characterized in that: The security module includes a controller, a wired communication module, an encryption chip and a wireless communication module; the wired communication module, the encryption chip and the wireless communication module are all connected to the controller; the wired communication module communicates with the host computer and is connected to the information collection device; the wireless communication module is connected to the server; the controller is used to: When the security module is started, the location information of the security module is obtained, and when the location information does not conform to the location range to which the registered location belongs, the host computer is determined to be illegal, and the communication connection with the host computer is disconnected; When the location information of the security module matches the location range, detecting whether the host computer matches the security module through the information obtained by the wired communication module; In the case where the host computer matches the security module, in response to the first epidemic prevention information query request transmitted by the information collection device through the wired communication module, the identity information to be queried in the first epidemic prevention request is encrypted through the encryption chip using a first encryption key to obtain first encrypted information, and an information acquisition success instruction is sent to the host computer based on the wired communication module, so that the host computer can collect the first image information based on the information acquisition instruction and return it through the wired communication module; the identity information to be queried is collected by the information collection device and is used to characterize the identity of the person to be queried; Control the wireless communication module to send a second epidemic prevention information query request to the server, where the second epidemic prevention information query request includes the first encrypted information; Receiving, through the wireless receiving module, a response message returned by the server, wherein the response message includes the second encrypted information; decrypting the second encrypted information using a second decryption key corresponding to the second encryption key to obtain the epidemic prevention information, where the epidemic prevention information includes the second image information corresponding to the identity information to be queried, and the second image information includes the face image information corresponding to the identity information to be queried; Acquire a face image in the first image information; if the face image acquisition fails, send face recognition failure feedback to the host computer based on the wired communication module; In the case where the facial image is successfully acquired, determining whether the facial image in the first image information matches the facial image in the second image information; When the face image in the first image information matches the face image in the second image information, sending the epidemic prevention information query result to the host computer based on the wired communication module, so that the host computer outputs the epidemic prevention information query result, and the epidemic prevention information query result includes epidemic prevention information; In the case where the facial image in the first image information does not match the facial image in the second image information, a facial recognition failure feedback is sent to a host computer based on the wired communication module.

6. An epidemic prevention information query system, characterized in that: The system includes a security module, an information collection device and a server; The security module is used to determine that the host computer is illegal and disconnect the communication connection with the host computer when the location information does not conform to the location range to which the registered location belongs when the security module is started; Acquire the location information of the security module, and if the location information of the security module meets the location range, detect whether the host computer matches the security module; if the host computer matches the security module, in response to the first epidemic prevention information query request sent by the information collection device, use the first encryption key to encrypt the identity information to be queried in the first epidemic prevention information query request to obtain the first encrypted information, and send an information acquisition success instruction to the host computer based on the communication connection between the host computers, so that the host computer can collect the first image information based on the information acquisition instruction and return it to the security module; the identity information to be queried is collected by the information collection device and is used to characterize the identity of the person to be queried; Sending a second epidemic prevention information query request to the server based on the communication connection with the server, where the second epidemic prevention information query request includes the first encrypted information; The server is configured to, upon receiving a second epidemic prevention information query request sent by the security module, decrypt the first encrypted information using a first decryption key corresponding to the first encryption key to obtain the identity information to be queried; query the epidemic prevention information corresponding to the identity information to be queried, the epidemic prevention information including second image information corresponding to the identity information to be queried, the second image information including face image information corresponding to the identity information to be queried; encrypt the epidemic prevention information based on the second encryption key to obtain second encrypted information; Returning a response message including the second encrypted information to the security module; The security module is further used to receive the response information returned by the server; decrypt the second encrypted information using the second decryption key corresponding to the second encryption key to obtain the epidemic prevention information; obtain the face image in the first image information; and send face recognition failure feedback to the host computer based on the communication connection with the host computer when the face image acquisition fails; When the facial image is successfully acquired, determine whether the facial image in the first image information matches the facial image in the second image information; when the facial image in the first image information matches the facial image in the second image information, send the epidemic prevention information query result to the host computer based on the communication connection with the host computer, so that the host computer outputs the epidemic prevention information query result, and the epidemic prevention information query result includes epidemic prevention information; when the facial image in the first image information does not match the facial image in the second image information, send facial recognition failure feedback to the host computer based on the communication connection with the host computer.

7. A computer device, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program that can be loaded by the processor and execute the method according to claim 1 or 2, or the method according to claim 3 or 4.

8. A computer program product comprising computer instructions, characterized in that: When the computer program product is executed on a computer device, the computer device is caused to execute the method according to claim 1 or 2, or the method according to claim 3 or 4.

Images