Information using method, device, equipment and readable storage medium

Abstract

This invention discloses a method, apparatus, device, and readable storage medium for using information, belonging to the field of computer technology, and solves the risk problem of user key information usage. The method includes: determining the operation type of a smart communication card receiving a request to perform a predetermined operation on key information; wherein the key information is encrypted and stored within the smart communication card, and is in a read-refused state when the mobile terminal where the smart communication card is located is connected to the network; acquiring verification information corresponding to the operation type; and performing the predetermined operation within the smart communication card using the encrypted key information based on the acquired verification information, to obtain an operation result corresponding to the key information. This method can improve the security of user key information usage.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to an information using method, device, equipment and readable storage medium. Background Art

[0002] The Metaverse is a virtual world that is linked and created using technological means, mapped and interacted with the real world, and is a digital living space with a new social system.

[0003] User information and assets in the metaverse exist in digital form. The identification of user identity depends on the user's key information. If the key information is lost, it means the collapse of the user's personal universe. Therefore, it is necessary to improve the security of the use of user key information. Summary of the invention

[0004] To this end, the present invention provides an information usage method, apparatus, device and readable storage medium to improve the security of user key information usage.

[0005] In order to achieve the above-mentioned purpose, the first aspect of the present invention provides an information usage method, which is applied to a smart communication card, and the method includes: determining the operation type received by the smart communication card to perform a predetermined operation on key information; wherein the key information is encrypted and stored in the smart communication card, and when the mobile terminal where the smart communication card is located is connected to the Internet, the key information is in a read-rejected state; obtaining verification information corresponding to the operation type; and performing the predetermined operation in the smart communication card based on the obtained verification information using the encrypted and stored key information to obtain an operation result corresponding to the key information.

[0006] Among them, the key information is private key information; before determining the operation type of the smart communication card received to perform a predetermined operation on the key information, it also includes: receiving the encrypted private key information sent by the mobile terminal to the smart communication card; storing the encrypted private key information inside the smart communication card, and obtaining the private key information encrypted and stored in the smart communication card.

[0007] Among them, the encrypted private key information is the information obtained by the mobile terminal performing a key generation process, and the key generation process includes: the mobile terminal generates public key information and private key information locally on the mobile terminal when accessing the metaverse system; sends the public key information to the blockchain system associated with the metaverse system; uses a preset encryption algorithm and a predetermined password information to encrypt the private key information to obtain the encrypted private key information; and deletes the private key information and the encrypted private key information located locally on the mobile terminal.

[0008] Among them, the key information is private key information, the operation type includes cryptographic calculation operations in the metaverse system, and the verification information is user password information; the acquisition of verification information corresponding to the operation type includes: receiving data to be processed and user password information to obtain the user password information.

[0009] Among them, the predetermined operation is performed in the smart communication card according to the obtained verification information, using the encrypted stored key information to obtain an operation result corresponding to the key information, including: using a preset decryption algorithm in the smart communication card, using the user password information to decrypt the encrypted stored private key information to obtain decrypted private key information; using the decrypted private key information to perform the cryptographic operation on the data to be processed to obtain a cryptographic operation result of the data to be processed; sending the cryptographic operation result to the mobile terminal, so as to send the cryptographic operation result to other participating devices in the Metaverse system through the mobile terminal; deleting the decrypted private key information in the smart communication card.

[0010] Among them, the cryptographic operation includes: decryption operation or signature operation; the cryptographic operation result of the data to be processed includes: the decryption result obtained by performing a decryption operation on the data to be processed, or the data to be processed carrying the signature of the smart communication card obtained by performing a smart communication card signature on the data to be processed.

[0011] Among them, the operation type includes a key reading operation, and the verification information is an operator password and a smart communication card password; the predetermined operation is performed in the smart communication card according to the obtained verification information, using the encrypted stored key information to obtain an operation result corresponding to the key information, including: in response to the received key reading instruction, detecting the type of the terminal device where the smart communication card is located and performing current signal detection; if it is detected that the terminal device where the smart communication card is located is a designated dedicated card reader, and it is detected that a specific current signal is received, it is determined that the key information is in a state where it is allowed to be read; when the operator password and the smart communication card password are received, the encrypted stored key information is sent to the dedicated card reader.

[0012] Among them, the information usage method also includes: regularly sending heartbeat information to the operator server through the signaling channel between the operator server and the operator server; synchronizing the position of the mobile terminal with the mobile terminal where the smart communication card is located; and sending the real-time position of the mobile terminal obtained by the position synchronization to the operator server.

[0013] Among them, the information usage method also includes: in response to the location acquisition instruction of the operator server received through the signaling channel, the real-time location of the mobile terminal obtained by the location synchronization is sent to the operator server, so as to perform location detection on the smart communication card when the smart communication card is reported lost.

[0014] The second aspect of the present invention provides an information usage device, which includes: an operation determination module, which is used to determine the operation type of a smart communication card received to perform a predetermined operation on key information; wherein the key information is encrypted and stored in the smart communication card, and when the mobile terminal where the smart communication card is located is connected to the Internet, the key information is in a read-rejected state; an information acquisition module, which is used to obtain verification information corresponding to the operation type; and an operation execution module, which is used to perform the predetermined operation in the smart communication card based on the obtained verification information and using the encrypted and stored key information to obtain an operation result corresponding to the key information.

[0015] The third aspect of the present invention provides an electronic device, comprising: one or more processors; a memory on which one or more programs are stored, and when the one or more programs are executed by the one or more processors, the one or more processors implement the information usage method of the present invention; one or more I / O interfaces, connected between the processor and the memory, and configured to implement information interaction between the processor and the memory.

[0016] A fourth aspect of the present invention provides a computer-readable medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the above-mentioned information use method according to the present invention.

[0017] According to the information usage method of the embodiment of the present invention, the key information is encrypted and saved in the smart communication card of the mobile terminal. If the mobile terminal where the smart communication card is located is connected to the Internet, the key information is in a read-rejection state to ensure that the key information does not participate in the network calculation and will not be read from the smart communication card when the mobile terminal is connected to the Internet, so that key leakage will not occur, thereby improving the security of key information storage; when the key information needs to be used, it is necessary to first provide verification information corresponding to the corresponding operation type, and after obtaining the verification information that needs to be provided, the corresponding operation is performed on the encrypted key information, thereby ensuring that the key information encrypted and stored in the smart communication card is used safely and reliably, thereby improving the security of user key information use. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. Together with the following specific embodiments, they are used to explain the present invention, but do not constitute a limitation of the present invention.

[0019] Figure 1 A flowchart of an information use method provided by an embodiment of the present invention;

[0020] Figure 2 A schematic diagram of the structure of an information using device provided by an embodiment of the present invention;

[0021] Figure 3 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0022] The specific implementation of the present invention is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the present invention, and is not used to limit the present invention.

[0023] As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items.

[0024] The terms used in the present invention are only used to describe specific embodiments and are not intended to limit the present invention. As used in the present invention, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

[0025] When the terms “comprising” and / or “made of…” are used in the present invention, it specifies the existence of features, integers, steps, operations, elements and / or components, but does not exclude the existence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof.

[0026] Embodiments of the present invention may be described with reference to plan views and / or cross-sectional views by way of ideal schematic views of the present invention. Therefore, the exemplary illustrations may be modified according to manufacturing techniques and / or tolerances.

[0027] Unless otherwise defined, all terms (including technical and scientific terms) used in the present invention have the same meaning as those commonly understood by those of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and the present invention, and will not be interpreted as having an idealized or overly formal meaning unless the present invention clearly defines it as such.

[0028] In an embodiment of the present invention, the metaverse is a virtual world that is linked and created by scientific and technological means, mapped and interacted with the real world, and has a digital living space of a new social system. The metaverse is essentially a virtualization and digitization process of the real world, which requires a lot of transformation of content production, economic system, user experience, and content in the physical world. However, the development of the metaverse is gradual. It is supported by shared infrastructure, standards, and protocols, and is finally formed by the continuous integration and evolution of many tools and platforms. It provides an immersive experience based on extended reality technology, generates a mirror image of the real world based on digital twin technology, builds an economic system based on blockchain technology, closely integrates the virtual world with the real world in the economic system, social system, and identity system, and allows each user to produce content and edit the world. From the perspective of space and time, the metaverse is a digital world that is virtual in the spatial dimension but real in the temporal dimension; from the perspective of authenticity, the metaverse contains both digital replicas of the real world and creations of the virtual world; from the perspective of independence, the metaverse is a parallel space that is both closely connected to the external real world and highly independent; from the perspective of connectivity, the metaverse is a sustainable, wide-coverage virtual reality system that encompasses networks, hardware terminals, and users.

[0029] According to the research of relevant scholars and records of technical data, the metaverse itself is not a technology, but an idea and concept. It needs to integrate different new technologies, such as the fifth generation mobile communication technology (5G), the sixth generation mobile communication technology (6G), artificial intelligence, big data, etc., emphasizing the integration of virtual and real.

[0030] The Metaverse mainly has the following core technologies: First, extended reality technology, including virtual reality (VR) and augmented reality (AR). Extended reality technology can provide an immersive experience and solve problems that mobile phones cannot solve. Second, digital twins can mirror the real world into the virtual world. This also means that in the Metaverse, we can see many of our own virtual avatars. The third is to use blockchain to build an economic system. As the Metaverse develops further and the degree of simulation of the entire real society is strengthened, we can also carry out a series of resource exchange processes in the Metaverse, such as resource acquisition and resource allocation, and for example, economic activities such as expense expenditure and expense income (such as spending money and making money), thereby forming a resource system and economic system in the virtual world.

[0031] User information and assets in the Metaverse exist in digital form. The identification of user identity depends on the user's private key. If the private key is lost, it means the collapse of the user's personal universe. With the private key, you have the power to control all personal assets, and losing the private key means that these digital assets on the chain will always sleep in the Metaverse and cannot be controlled. How to reliably save your private key without losing it on the one hand and leaking it on the other hand has become a very critical issue in the Metaverse. So how to safely save the user's private key in the Metaverse is the problem that this patent needs to solve.

[0032] The following describes in detail the information use method, device, equipment and readable storage medium of the embodiments of the present invention in conjunction with the accompanying drawings. The following embodiments can be applied to the system architecture of the present embodiment. For the sake of brevity, the following embodiments can refer to and quote each other.

[0033] In a first aspect, an embodiment of the present invention provides an information use method.

[0034] Figure 1 FIG. 4 is a flow chart showing a method for using information according to an embodiment of the present invention. Figure 1 As shown, the information using method in the embodiment of the present invention includes the following steps.

[0035] S110, determining the type of operation received by the smart communication card to perform a predetermined operation on the key information; wherein the key information is encrypted and stored in the smart communication card, and when the mobile terminal where the smart communication card is located is connected to the Internet, the key information is in a read-rejection state.

[0036] In some embodiments, the smart communication card may include but is not limited to: any one of a subscriber identity module (SIM) card, a universal subscriber identity module (USIM) card, an access network system identifier (UIM) card, and a flash memory card (TF). The smart communication card may also be other types of smart card security devices, which may be set according to actual needs, and the embodiments of the present application do not make specific limitations.

[0037] In some embodiments, the mobile terminal may include but is not limited to: a personal computer, a smart phone, a tablet computer, a personal digital assistant, a server, etc. When the smart communication card is installed in the mobile terminal, the mobile terminal can be understood as a reader / writer of the smart communication card, and the reading and writing communication between the smart communication card and the mobile terminal is realized through a predetermined machine-card communication mechanism.

[0038] It should be noted that the machine-card communication mechanism can refer to the communication mechanism between a mobile terminal and an installed smart communication card (such as a smart phone and a SIM card in the smart phone) in the related art, and the embodiment of the present invention does not make any specific limitation.

[0039] S120, obtaining verification information corresponding to the operation type.

[0040] In some embodiments, the operation type involves the use and reading of the key information. Exemplarily, the type of the predetermined operation performed on the key information includes, but is not limited to, at least one of a cryptographic operation and a key reading operation.

[0041] S130, executing a predetermined operation in the smart communication card according to the acquired verification information using the encrypted stored key information to obtain an operation result corresponding to the key information.

[0042] According to the information usage method of the embodiment of the present invention, the key information is encrypted and saved in the smart communication card of the mobile terminal. If the mobile terminal where the smart communication card is located is connected to the Internet, the key information is in a read-rejection state to ensure that the key information does not participate in the network calculation and will not be read from the smart communication card when the mobile terminal is connected to the Internet, so that key leakage will not occur, thereby improving the security of key information storage; when the key information needs to be used, it is necessary to first provide verification information corresponding to the corresponding operation type, and after obtaining the verification information that needs to be provided, the corresponding operation is performed on the encrypted key information, thereby ensuring that the key information encrypted and stored in the smart communication card is used safely and reliably, thereby improving the security of user key information use.

[0043] For the purpose of simplifying the description, the following multiple embodiments of this article take the case where the smart communication card is a SIM card and the mobile terminal is a smart phone (referred to as a mobile phone) as an example to illustrate the specific implementation of the information use method of the embodiment of the present invention. However, this description cannot be interpreted as limiting the scope or implementation possibility of this solution. The information use method corresponding to other smart communication cards and mobile terminals other than SIM cards and mobile phones is consistent with the processing method for SIM cards and mobile phones.

[0044] In some embodiments, the key information is secret-key (SK) information; before step S110, the method for using the information further includes the following steps.

[0045] S11, receiving the encrypted private key information sent by the mobile terminal to the smart communication card; S12, storing the encrypted private key information inside the smart communication card to obtain the private key information encrypted and stored in the smart communication card.

[0046] Through the above steps S11-S12, the private key is encrypted and saved in the mobile phone SIM card to ensure that it does not participate in network calculations, thereby ensuring that the private key information will never leave (will not be read out) the SIM card when the mobile phone where the SIM is located is connected to the Internet, thereby ensuring the security of the private key information encrypted and saved in the SIM card.

[0047] In this embodiment, the encrypted private key information is information obtained by the mobile terminal performing a key generation process, and the key generation process includes the following steps.

[0048] S21, when the mobile terminal accesses the Metaverse system, the mobile terminal generates public key information and private key information locally in the mobile terminal; S22, sends the public key information to the blockchain system associated with the Metaverse system; S23, uses a preset encryption algorithm and a predetermined password information to encrypt the private key information to obtain the encrypted private key information; and S24, deletes the private key information and the encrypted private key information located locally in the mobile terminal.

[0049] The metaverse system in step S21 and the blockchain system in step S22 are two parallel worlds in time and space involved in the embodiments of the present invention, one is the virtual world of the metaverse (which can correspond to the metaverse system), and the other is the real world (also called real scene, real world, which can correspond to the blockchain system).

[0050] In this embodiment, as an example, when a user node accesses the Metaverse system, the user node generates a public-private key pair by itself, and publishes the public key (Public Key, PK) in the blockchain associated with the Metaverse, and encrypts the private key locally with a password to obtain the encrypted private key information.

[0051] Exemplarily, the user node generating the public-private key pair by itself may be that a mobile terminal corresponding to the user node generates the public-private key pair using a processing device of the mobile terminal itself.

[0052] In some embodiments, the formula for locally encrypting the private key using a password is: SK'=Ekey(SK), where SK' represents the encrypted private key information, SK represents the private key information (unencrypted), E represents the encryption algorithm used, and key represents the password used by the encryption algorithm.

[0053] Exemplarily, the encryption algorithm E may include, but is not limited to, any one of the symmetric encryption algorithms such as Password Based Encryption (PBE) algorithm, Data Encryption Standard (DES) algorithm, 3DES (Triple DES) algorithm, Advanced Encryption Standard (AES) algorithm, etc. When the present application uses a symmetric encryption algorithm to encrypt and decrypt a private key, it is required that the encryption and decryption of the private key use the key corresponding to the same password.

[0054] Through the above steps S21-S24, the private key SK' generated and encrypted by the mobile terminal is stored in the SIM card. Once the encrypted private key information is stored in the SIM card, the SIM card can refuse to read the SIM card of the mobile terminal. After the mobile terminal sends SK' to the SIM card, the local SK and SK' of the mobile terminal can be deleted to avoid leakage of SK and SK', ensure that SK and SK' will not be lost from the mobile terminal, and improve the security of key storage.

[0055] In some embodiments, the key information is private key information, the operation type includes cryptographic operations in the Metaverse system, and the verification information is user password information.

[0056] In this embodiment, step S120 may specifically include: receiving the data to be processed and the user password information to obtain the user password information.

[0057] In this step, the user password information may be password information received from the user and inputted, and the user password information is subsequently used as a user decryption key to decrypt the encrypted private key information.

[0058] In this embodiment, step S130 may specifically include the following steps.

[0059] S31, using a preset decryption algorithm in the smart communication card, using the user password information to decrypt the encrypted and stored private key information to obtain the decrypted private key information.

[0060] In step S31, the preset decryption algorithm corresponds to the encryption algorithm used when the private key information is encrypted using the predetermined password information in the above embodiment. In this step, when the user password information used for decryption is consistent with the predetermined password information used for encrypting the private key information, the encrypted and stored private key information can be successfully decrypted to obtain the decrypted private key information.

[0061] S32, using the decrypted private key information to perform a cryptographic operation on the data to be processed, to obtain a cryptographic operation result of the data to be processed.

[0062] In some embodiments, the cryptographic operation includes: decryption operation or signature operation; the cryptographic operation result of the data to be processed includes: the decryption result obtained by performing a decryption operation on the data to be processed, or the data to be processed carrying the signature of the smart communication card obtained by performing a smart communication card signature on the data to be processed.

[0063] Exemplarily, when the activities of the user node in the metaverse require the use of a private key for signing or decryption authentication, the user node sends the data to be processed that needs to be signed or decrypted, such as information (Message, M) and user password information (password key) to the SIM card; the SIM card uses Key to decrypt SK' inside the SIM card to obtain SK.

[0064] When the cryptographic operation is a decryption operation, that is, a private key is required to decrypt the data to be processed, the obtained SK is used to perform confidential operation on the data to be processed to obtain the decryption result of the data to be processed; when the cryptographic operation is a signature operation, SK is used to sign the information M to obtain information M (denoted as Msig) carrying the signature of the smart communication card.

[0065] S33, sending the cryptographic operation result to the mobile terminal, so as to send the cryptographic operation result to other participant devices in the Metaverse system through the mobile terminal.

[0066] Exemplarily, the SIM card sends the cryptographic operation result (decryption result of the data to be processed or Msig) to the mobile phone where the SIM card is located, and then the cryptographic operation result is transmitted to other participating devices in the Metaverse system through the mobile phone.

[0067] S34, deleting the decrypted private key information in the smart communication card.

[0068] According to the above steps S31-S34, when the private key is needed, the data to be processed can be sent to the smart communication card, and when the user decryption key (the same as the corresponding encryption key) is provided to the smart communication card, the smart communication card decrypts the encrypted private key information to obtain the private key, and then uses the private key to perform cryptographic operations for decryption or signing in the smart communication card, and the smart communication card sends the cryptographic operation results to the mobile terminal where the smart communication card is located.

[0069] According to the information usage method of the embodiment of the present invention, the smart communication card can determine that the decrypted private key has been used up, and immediately delete the decrypted private key locally on the smart communication card, thereby ensuring that when the private key is used daily, the private key will never leave the smart communication card because it refuses to be accessed when the mobile terminal where the smart communication card is located is connected to the Internet. After the decrypted private key is used, it will not leave the smart communication card because it is immediately deleted from the smart communication card, thereby avoiding the possibility of being stolen by hackers and improving the security of private key use.

[0070] In some embodiments, the operation type includes a key reading operation, and the verification information is an operator password and a smart communication card password.

[0071] In this embodiment, S130 may specifically include the following steps.

[0072] S41, in response to the received key reading instruction, detecting the type of the terminal device where the smart communication card is located and performing current signal detection.

[0073] In this step, when the SIM card needs to be replaced or the SK is obtained through a reading operation, the key reading instruction is sent to the smart communication card through a designated dedicated card reader.

[0074] S42: If it is detected that the terminal device where the smart communication card is located is a designated dedicated card reader and it is detected that a specific current signal is received, it is determined that the key information is in a state of being allowed to be read.

[0075] Exemplarily, when the mobile terminal needs to replace the SIM card, the private key information SK' encrypted and stored in the SIM card needs to be read out. After receiving the key reading instruction, if it is detected that the terminal device where the smart communication card is currently located is not the original mobile terminal but a dedicated card reader, it can be determined that the SIM card has been taken out of the original mobile terminal and placed in the dedicated card reader; in the embodiment of the present invention, the SIM card is only allowed to be read when it is taken out of the mobile terminal and placed in the dedicated card reader to give a specific current signal.

[0076] In some embodiments, there are multiple ways for the smart communication card to determine that the current terminal device is not the original mobile terminal but a dedicated card reader.

[0077] For example, when a key reading instruction is received, the smart communication card communicates with the terminal device where the smart communication card is currently located to obtain the device identification of the current terminal device. If the acquired device identification is not the device identification of the original mobile terminal but the device identification of a dedicated card reader, the smart communication card can determine that the current terminal device is not the original mobile terminal but a dedicated card reader.

[0078] For another example, when receiving a key reading instruction, the smart communication card communicates with the terminal device where the smart communication card is currently located to send a device determination request message to the terminal device where the smart communication card is currently located. If the device determination response message returned by the terminal device where the current location responds to the device identity determination request is a pre-agreed first response message, the terminal device where the current location is located is determined to be the original mobile terminal; if the device determination response message is a pre-agreed second response message, the terminal device where the current location is located is determined to be a dedicated card reader. The first response message and the second response message contain different information, which can be determined according to actual needs, and the embodiment of the present invention does not make specific limitations.

[0079] In actual applications, the smart communication card may also determine that the current terminal device is not the original mobile terminal but a dedicated card reader by other means, which is not specifically limited in the embodiment of the present invention.

[0080] In some embodiments, the specific current signal may be a current signal within a predetermined current value range, and / or may be a current signal received by the smart communication card through a predetermined signal interface, which may be different from the interface through which the smart communication card communicates with the terminal device.

[0081] In practical applications, the specific current signal can be configured according to actual needs, and the embodiment of the present invention does not make any specific limitation.

[0082] S43, when the operator password and the smart communication card password are received, the encrypted and stored key information is sent to the dedicated card reader.

[0083] In some embodiments, the encrypted key information stored in the dedicated card reader can be read in two ways: online reading and offline reading.

[0084] For example, if online reading is performed, the processing device equipped with the dedicated card reader needs to receive the specified operator password and the user's SIM card password at the same time to obtain the SK' in the dedicated card reader, and when the SIM card needs to be replaced, the obtained SK' can be written into another SIM card. Among them, since it is online reading, the operator password and the user's SIM card password can be obtained online, for example, pre-stored in the processing device for loading the dedicated card reader; or, the processing device sends a password acquisition request to the server corresponding to the operator, and the server corresponding to the operator responds to the password acquisition request and returns the operator password, and the processing device receives the SIM card password entered by the user.

[0085] Exemplarily, offline reading of the dedicated card reader also requires the operator password and the user's SIM card password. In some scenarios, the user can bring the SIM card to the operator's business hall and present the identity authentication information (such as the user's relevant identity document) and the SIM card password to the business hall staff. When the identity authentication is successful according to the identity authentication information presented by the user, the business hall staff uses the dedicated card reader and reads the encrypted stored key information obtained from the SIM card into the dedicated card reader through the method described in the above embodiment (corresponding to the above steps S41-S43), and loads the dedicated card reader through a predetermined processing device. The processing device obtains the encrypted private key information SK' in the dedicated card reader when it is determined that the operator password and the SIM card password provided by the user are received.

[0086] The operator password in the embodiment of the present application can be a password set by the operator's corresponding server for the key information encrypted and stored in the SIM card; the user's SIM card password can be a SIM card password set by the user himself, or the SIM card password initial value is set by the operator's corresponding server, and the user subsequently logs in to the predetermined management platform system to modify the SIM card password initial value to obtain the password.

[0087] In this embodiment, if it is necessary to replace the SIM card or obtain the encrypted key information stored in the SIM card by reading it, the encrypted key information stored in the SIM card can be obtained by using a dedicated card reader and entering the operator's password and the user's SIM card password at the same time, and the obtained encrypted key information can be written into another SIM card; even if the encrypted key information that has been read in the dedicated card reader is read offline, two passwords including the operator's key and the user's SIM card password need to be provided. When the user takes the SIM card to the operator's business hall, relevant identity authentication and password are provided to obtain SK'.

[0088] Through the method of the embodiment of the present invention, the encrypted private key data in the SIM card can be read out through a dedicated card reader only after the SIM card leaves the mobile terminal, and the encrypted private key data is encrypted and stored inside the SIM card. Even if it is read out by providing the operator's password and the user's SIM card password, the encrypted private key data needs to be decrypted by the user's password before use, thereby completely preventing online hackers from stealing private keys and improving the storage and use security of private key data.

[0089] In some embodiments, the information usage method also includes the following steps.

[0090] S51, sending heartbeat information to the operator server regularly through the signaling channel between the operator server; S52, synchronizing the position of the mobile terminal with the mobile terminal where the smart communication card is located; S53, sending the real-time position of the mobile terminal obtained by the position synchronization to the operator server.

[0091] In this embodiment, the SIM card can maintain a heartbeat with the operator's server through a signaling channel (not a data channel for Internet access) on a daily basis, and synchronize location information with the current mobile terminal in real time, and send the location to the operator regularly. The mobile terminal where the SIM card is currently located can be the mobile terminal that the user has lost, or any mobile terminal where the SIM card is located after being taken out of the lost mobile terminal. As long as the mobile terminal where the SIM card is currently located is turned on, the above-mentioned heartbeat information and location synchronization can be sent through the signaling channel.

[0092] In some embodiments, the information usage method also includes: in response to a location acquisition instruction received from an operator server through a signaling channel, sending the mobile terminal with synchronized location to the operator server, so as to perform location detection on the smart communication card when the smart communication card is reported lost.

[0093] In this embodiment, once the SIM card is lost, the user can report the loss, and the operator's server can obtain the location of the SIM card through the signaling channel, and then retrieve the SIM card through a permitted and authorized investigation process.

[0094] In this embodiment, the SIM card synchronizes location information with the mobile phone in real time. As long as the mobile phone is powered on, the positioning information is sent to the operator in real time through the signaling channel (for example, including but not limited to the telecommunications channel) of the operator to which the SIM card belongs. Even if the SIM card is lost, it can be found in real time based on the positioning information, thereby ensuring the security of the key information in the SIM card and promoting the application and development of Metaverse technology.

[0095] According to the information usage method of the embodiment of the present application, it can be used as a usage mechanism of private keys in the metaverse system. The private key is encrypted and saved in the mobile phone SIM card to ensure that it does not participate in network calculations. The private key will never leave the SIM card when the mobile phone where the SIM is located is connected to the Internet. Only when the private key is needed, the information is sent to the SIM card, and the user decryption key is provided to the SIM card. The SIM card decrypts the private key and then performs calculations. After the calculation, the result is returned to the mobile phone or other terminal. After the SIM card uses the decrypted private key, it is immediately deleted locally.

[0096] In addition, the private key data in the SIM card can only be read out through a dedicated card reader after the SIM card leaves the mobile terminal. The private key is encrypted and stored inside the SIM card. Even if it is read out, it needs the user's password to decrypt it before it can be used, thus completely preventing online hackers from stealing the private key. In addition, the SIM card can synchronize location information with the mobile phone in real time. As long as it is powered on, the positioning information will be sent to the operator in real time through the signaling channel of the SIM card's operator. Even if it is lost, it can be found in real time based on the positioning information.

[0097] Based on the information usage method described in the above embodiment of the present invention, private keys can be reliably saved so that private key information is not lost, private keys can be safely used so that private key information is not leaked, and private keys can be safely saved and used in the metaverse system, thereby promoting the application and development of metaverse technology.

[0098] The step division of the above methods is only for the purpose of clear description. When implemented, they can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this patent; adding insignificant modifications to the algorithm or process or introducing insignificant designs without changing the core design of the algorithm and process are all within the scope of protection of this patent.

[0099] In a second aspect, an embodiment of the present invention provides an information using device.

[0100] Figure 2 FIG. 2 shows a schematic diagram of the structure of an information using device provided according to an embodiment of the present invention. Figure 2 As shown, the information using device 200 includes the following modules.

[0101] The operation determination module 210 is used to determine the type of operation received by the smart communication card to perform a predetermined operation on the key information; wherein the key information is encrypted and stored in the smart communication card, and when the mobile terminal where the smart communication card is located is connected to the Internet, the key information is in a read-rejected state.

[0102] The information acquisition module 220 is used to acquire verification information corresponding to the operation type.

[0103] The operation execution module 230 is used to execute a predetermined operation in the smart communication card according to the obtained verification information and using the encrypted and stored key information to obtain an operation result corresponding to the key information.

[0104] In some embodiments, the key information is private key information; the information using device 200 also includes: a receiving module, which is used to receive the encrypted private key information sent by the mobile terminal to the smart communication card before determining the type of operation received by the smart communication card to perform a predetermined operation on the key information; a storage module, which is used to store the encrypted private key information inside the smart communication card to obtain the private key information encrypted and stored in the smart communication card.

[0105] In some embodiments, the encrypted private key information is information obtained by the mobile terminal when performing a key generation process. The mobile terminal includes a key generation module for performing a key generation process. When performing the key generation process, it is specifically used for: generating public key information and private key information locally on the mobile terminal when the mobile terminal accesses the metaverse system; sending the public key information to the blockchain system associated with the metaverse system; using a preset encryption algorithm and using predetermined password information to encrypt the private key information to obtain encrypted private key information; and deleting the private key information and the encrypted private key information located locally on the mobile terminal.

[0106] In some embodiments, the key information is private key information, the operation type includes cryptographic operations in the metaverse system, and the verification information is user password information; the information acquisition module 220 is specifically used to: receive data to be processed and user password information to obtain user password information.

[0107] The operation execution module 230 may specifically include: a decryption unit, which is used to adopt a preset decryption algorithm in the smart communication card, use the user password information to decrypt the encrypted and stored private key information, and obtain the decrypted private key information; an operation unit, which is used to use the decrypted private key information to perform cryptographic operations on the data to be processed, and obtain the cryptographic operation results of the data to be processed; a first sending unit, which is used to send the cryptographic operation results to the mobile terminal, so as to send the cryptographic operation results to other participating devices in the metaverse system through the mobile terminal; a deletion unit, which is used to delete the decrypted private key information in the smart communication card.

[0108] In some embodiments, the cryptographic operation includes: decryption operation or signature operation; the cryptographic operation result of the data to be processed includes: the decryption result obtained by performing a decryption operation on the data to be processed, or the data to be processed carrying the signature of the smart communication card obtained by performing a smart communication card signature on the data to be processed.

[0109] In some embodiments, the operation type includes a key reading operation, and the verification information is an operator password and a smart communication card password.

[0110] The operation execution module 230 may specifically include: a detection unit, which is used to detect the type of the terminal device where the smart communication card is located and perform current signal detection in response to the received key reading instruction; a determination unit, which is used to determine that the key information is allowed to be read if it is detected that the terminal device where the smart communication card is located is a designated dedicated card reader and a specific current signal is received; a second sending unit, which is used to send the encrypted stored key information to the dedicated card reader when the operator password and the smart communication card password are received.

[0111] In some embodiments, the information usage device also includes: a heartbeat maintenance module, which is used to periodically send heartbeat information to the operator server through the signaling channel between the operator server; a location synchronization module, which is used to synchronize the location of the mobile terminal with the mobile terminal where the smart communication card is located; and a location sending module, which is used to send the real-time location of the mobile terminal obtained by location synchronization to the operator server.

[0112] In some embodiments, the location sending module is also used to send the mobile terminal obtained by location synchronization to the operator server in response to a location acquisition instruction received from the operator server through a signaling channel, so as to perform location detection on the smart communication card when the smart communication card is reported lost.

[0113] According to the information usage device of the embodiment of the present invention, the key information can be encrypted and saved in the smart communication card of the mobile terminal. If the mobile terminal where the smart communication card is located is connected to the Internet, the key information is in a read-rejection state to ensure that the key information does not participate in the network calculation and will not be read from the smart communication card when the mobile terminal is connected to the Internet, so that key leakage will not occur, thereby improving the security of key information storage; when the key information needs to be used, it is necessary to first provide verification information corresponding to the corresponding operation type, and after obtaining the verification information that needs to be provided, the corresponding operation is performed on the encrypted key information, thereby ensuring that the key information encrypted and stored in the smart communication card is used safely and reliably, thereby improving the security of user key information use.

[0114] It should be clear that the present invention is not limited to the specific configurations and processes described in the above embodiments and shown in the figures. For the convenience and brevity of description, a detailed description of the known methods is omitted here, and the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, which will not be repeated here.

[0115] Reference Figure 3 , an embodiment of the present invention provides an electronic device, comprising:

[0116] One or more processors 301;

[0117] A memory 302 having one or more programs stored thereon, which, when executed by one or more processors, enables the one or more processors to implement any one of the above-mentioned information use methods;

[0118] One or more I / O interfaces 303 are connected between the processor 301 and the memory 302 and are configured to implement information exchange between the processor 301 and the memory 302 .

[0119] Among them, the processor 301 is a device with data processing capabilities, including but not limited to a central processing unit (CPU), etc.; the memory 302 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory (FLASH); the I / O interface (read-write interface) 303 is connected between the processor 301 and the memory 302, and can realize information interaction between the processor 301 and the memory 302, including but not limited to a data bus (Bus), etc.

[0120] In some embodiments, the processor 301 , the memory 302 , and the I / O interface 303 are connected to each other through a bus, and further connected to other components of the computing device.

[0121] This embodiment also provides a computer-readable medium on which a computer program is stored. When the program is executed by a processor, the information usage method provided by this embodiment is implemented. To avoid repeated description, the specific steps of the information usage method of this embodiment are not repeated here.

[0122] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the invented method described above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some physical components or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0123] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0124] Those skilled in the art will understand that although some embodiments described herein include certain features included in other embodiments but not other features, the combination of features from different embodiments is meant to be within the scope of the present embodiment and to form different embodiments.

[0125] It is to be understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of the present invention, but the present invention is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also considered to be within the scope of protection of the present invention.

Claims

1. A method for using information, characterized in that: Applied to a smart communication card, the method comprises: Determine the type of operation received by the smart communication card to perform a predetermined operation on the key information; wherein the key information is encrypted and stored in the smart communication card, and when the mobile terminal where the smart communication card is located is connected to the network, the key information is in a read-rejection state; Get the verification information corresponding to the operation type; In the smart communication card, according to the obtained verification information, the predetermined operation is performed using the encrypted and stored key information to obtain an operation result corresponding to the key information; Wherein, the operation type includes a key reading operation, and the verification information is an operator password and a smart communication card password; The method of performing the predetermined operation in the smart communication card according to the acquired verification information and using the encrypted stored key information to obtain an operation result corresponding to the key information includes: In response to the received key reading instruction, detecting the type of the terminal device where the smart communication card is located and performing current signal detection; If it is detected that the terminal device where the smart communication card is located is a designated dedicated card reader and it is detected that a specific current signal is received, it is determined that the key information is in a state of being allowed to be read; Upon receiving the operator password and the smart communication card password, the encrypted stored key information is sent to the dedicated card reader.

2. The method according to claim 1, characterized in that The key information is private key information; before determining the type of operation of performing a predetermined operation on the key information received by the smart communication card, the method further includes: receiving encrypted private key information sent by the mobile terminal to the smart communication card; Storing the encrypted private key information in the smart communication card to obtain the private key information encrypted and stored in the smart communication card; The encrypted private key information is information obtained by the mobile terminal performing a key generation process, and the key generation process includes: When the mobile terminal accesses the Metaverse system, it generates public key information and private key information locally on the mobile terminal; sends the public key information to the blockchain system associated with the Metaverse system; uses a preset encryption algorithm and a predetermined password information to encrypt the private key information to obtain the encrypted private key information; and deletes the private key information and the encrypted private key information locally on the mobile terminal.

3. The method according to claim 1, characterized in that The key information is private key information, the operation type includes cryptographic operation in the Metaverse system, and the verification information is user password information; The obtaining of verification information corresponding to the operation type includes: receiving the data to be processed and user password information to obtain the user password information; The method of performing the predetermined operation in the smart communication card according to the acquired verification information and using the encrypted stored key information to obtain an operation result corresponding to the key information includes: Using a preset decryption algorithm in the smart communication card, using the user password information to decrypt the encrypted and stored private key information to obtain decrypted private key information; Using the decrypted private key information to perform the cryptographic operation on the data to be processed, to obtain a cryptographic operation result of the data to be processed; Sending the cryptographic operation result to the mobile terminal, so as to send the cryptographic operation result to other participant devices in the Metaverse system through the mobile terminal; The decrypted private key information in the smart communication card is deleted.

4. The method according to claim 3, characterized in that The cryptographic operation includes: decryption operation or signature operation; The cryptographic operation result of the data to be processed includes: a decryption result obtained by performing a decryption operation on the data to be processed, or the data to be processed carrying the signature of the smart communication card obtained by performing a smart communication card signature on the data to be processed.

5. The method according to claim 1, characterized in that Also includes: Send heartbeat information to the operator server regularly through the signaling channel between the operator server and the operator server; Synchronizing the location of the mobile terminal with the mobile terminal where the smart communication card is located; The real-time position of the mobile terminal obtained by position synchronization is sent to the operator server.

6. The method according to claim 5, characterized in that Also includes: In response to the location acquisition instruction received from the operator server through the signaling channel, the real-time location of the mobile terminal obtained by the location synchronization is sent to the operator server for location detection of the smart communication card when the smart communication card is reported lost.

7. An information using device, characterized in that: include: An operation determination module, used to determine the type of operation received by the smart communication card to perform a predetermined operation on the key information; wherein the key information is encrypted and stored in the smart communication card, and when the mobile terminal where the smart communication card is located is connected to the Internet, the key information is in a read-rejection state; An information acquisition module, used to acquire verification information corresponding to the operation type; An operation execution module, configured to execute the predetermined operation in the smart communication card according to the acquired verification information and using the encrypted stored key information to obtain an operation result corresponding to the key information; Wherein, the operation type includes a key reading operation, and the verification information is an operator password and a smart communication card password; The method of performing the predetermined operation in the smart communication card according to the acquired verification information and using the encrypted stored key information to obtain an operation result corresponding to the key information includes: In response to the received key reading instruction, detecting the type of the terminal device where the smart communication card is located and performing current signal detection; If it is detected that the terminal device where the smart communication card is located is a designated dedicated card reader and it is detected that a specific current signal is received, it is determined that the key information is in a state of being allowed to be read; Upon receiving the operator password and the smart communication card password, the encrypted stored key information is sent to the dedicated card reader.

8. An electronic device, characterized in that: include: one or more processors; A memory having one or more programs stored thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 6; One or more I / O interfaces are connected between the processor and the memory and are configured to implement information interaction between the processor and the memory.

9. A computer readable medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the method according to any one of claims 1 to 6.

Images