A comprehensive code engine and a method for generating and checking codes of the comprehensive code engine

Abstract

The application discloses a kind of comprehensive code engine and the method of comprehensive code engine, comprising the following modules: access gateway module, comprehensive code module, access management front-end module and access management back-end module;The system provides the access registration of city code platform, inquiry and the link route authority management between city platforms by unified access specification, standardized service interface and simple and easy UI interface.Linkage between city platforms is provided with comprehensive code full segment, identity segment coding and coding verification capability, and basic ability elements of cooperation are provided for cross-domain intercommunication and mutual recognition of comprehensive code.The central routing node of multi-city code communication is constructed to establish the channel of cross-domain code exchange and data sharing, realize the cross-domain intercommunication of city code, and support cross-domain data sharing.Relying on trusted identity authentication platform, a multi-level digital identity system is constructed to provide identity authentication capability in the process of using comprehensive code, and solve the problem of non-recognition of multiple city code identities.

Description

TECHNICAL FIELD

[0001] The present application relates to a comprehensive code engine and a comprehensive code engine code generation and verification method, belonging to the field of information technology. BACKGROUND

[0002] The background technology of the comprehensive code patent combined with the blockchain mainly includes two aspects: comprehensive code technology and blockchain technology.

[0003] Comprehensive code technology is a technology that encodes multiple information forms (such as text, images, audio, video, etc.) into a two-dimensional code or bar code. It can contain multiple information on the same code, thereby improving information transmission efficiency, and can also be used for anti-counterfeiting, traceability and tracking of goods, etc.

[0004] Blockchain technology is a decentralized database technology that distributes data across multiple nodes in the network to achieve data sharing, verification and transactions. Blockchain technology has the characteristics of decentralization, tamper resistance, security and trust, and can be applied to multiple fields such as finance, supply chain, medical care, etc.

[0005] Combining comprehensive code technology and blockchain technology can achieve encryption, verification and traceability of comprehensive codes, thereby improving the security and anti-counterfeiting of comprehensive codes. At the same time, blockchain technology can also be applied to product traceability, production process monitoring and other fields, and has broad application prospects and economic value.

[0006] As one of the important information carriers of urban services, two-dimensional codes are widely used in many urban service business scenarios. However, the existing city codes have problems such as difficulty in multi-code compatibility, application incompatibility, and data mistrust in actual application. The present application aims to unify the identification of codes, create an identity mutual recognition mechanism between cross-regional and cross-systems, an identity information traceability and verification mechanism.

[0007] In the process of digitalization and intelligentization transformation of cities, electronic certificates with legal effect are introduced as electronic certificates with legal effect and administrative effect, which is of great significance to improve the convenience of citizens' life and business and support government information service.

[0008] The comprehensive code engine for cross-domain interconnection and mutual trust adopts B / S structure, adopts the idea of "high cohesion and low coupling", uses front-end development language to develop system operation interface, provides system basic function service and background management function, uses open source framework to develop and publish system service interface, provides interface for remote calling for users, uses relational database to realize system data persistence.

[0009] Digital identity is a way of identity identification, which is a pair of keys, one of which only she / he knows, that is, private key, and the other is public key. If digital identity is compared to a certificate, then digital certificate is a seal or stamp or signature added to the digital identity by the identity authentication agency, indicating that the identity authentication agency has identified and endorsed the digital identity of the person. A digital identity without any endorsement / stamp / signature / digital certificate has no practical significance. Generally speaking, if the identity authentication agency issues a digital certificate for a certain digital identity, that is, the identity authentication agency signs the digital identity, then the digital identity does not need to be signed by other people or other agencies again. If the digital certificate of a certain digital identity is issued by a certain individual, then multiple people need to sign the digital identity. This is the case of PGP and GPG system. The key is used when signing, and the public key is used when verifying the signature. Because anyone can sign claiming that he / she is you, the public key must be registered with the identity authentication agency trusted by the recipient. After registration, the identity authentication agency issues a digital certificate to you. After signing the file, you send the digital certificate together with the file and the signature to the recipient, and the recipient verifies with the identity authentication agency whether the file is really signed with your key. SUMMARY

[0010] The present application solves the problem: In view of the problems of multiple code compatibility, application non-interoperability, and data non-trust in city code, a comprehensive code engine and code generation and verification method are designed to realize code identification unification, identity mutual recognition mechanism between cross-domain and cross-system, identity information tracing and verification.

[0011] The technical solution of the present application: A comprehensive code engine provides access registration, query and link routing permission management between city platforms through unified access specifications, standardized service interfaces and simple and easy-to-use UI interfaces. It provides comprehensive code full segment and identity segment code generation and verification capabilities to various city service platforms, and provides basic collaboration capability elements for comprehensive code cross-domain interconnection and mutual recognition between city platforms. A central routing node for multi-city code communication is built to establish a channel for cross-domain code exchange and data sharing, realize city code cross-domain interconnection, and support cross-domain data sharing. Relying on a trusted identity authentication platform, a multi-level digital identity system is built to provide identity authentication capabilities during the use of comprehensive codes and solve the problem of non-mutual recognition of multiple city code identities. The blockchain underlying technology developed independently is integrated to build a trusted code chain based on digital identity, and important data such as the association relationship between comprehensive code use information, authorization information and identity data is stored and verified on the chain.

[0012] The system comprises an access gateway module, a comprehensive code module, an access management front-end module, and an access management back-end module.

[0013] Access Gateway Module: The Access Gateway Module is responsible for implementing access authentication, traffic control, anti-replay, and signature verification functions. Access authentication relies on the authorization management data of the access management backend service to verify the permissions of the city platform accessing the system. Traffic control relies on the authorization data of the access management backend service to control the access traffic of the city platform accessing the system. Anti-replay is used to prevent repeated requests for the same data packet from consuming service and application resources. Signature verification is used to check whether the data packet has been tampered with. The Access Gateway Module is an important module in the network system, responsible for forwarding data traffic from terminal user devices to upper-layer networks and servers. It is an essential part of Internet of Things systems, mobile communication systems, and enterprise networks. Some common functions of the Access Gateway Module include: Connection Management: The Access Gateway Module is responsible for managing session and state information for connected terminal devices. When a terminal device initiates a connection request to the gateway, the gateway will perform identity verification on the connection based on device identity information and maintain internal device connection state information. Data Forwarding: The Access Gateway Module is responsible for forwarding data traffic from terminal devices to upper-layer networks and servers. By using protocol conversion and data format conversion technologies, different types of data traffic can be forwarded to different target systems, achieving unified access and forwarding of data. Security Policy: The Access Gateway Module is responsible for implementing security policies and access control to protect the security of terminal devices and upper-layer systems. This includes identity verification, data encryption, firewall, intrusion detection, and other functions. Network Optimization: The Access Gateway Module can optimize and compress traffic to reduce network bandwidth usage and improve network performance and efficiency. Statistical Analysis: The Access Gateway Module can collect and analyze network traffic and device state information to help administrators better understand network conditions and optimize and adjust the network. In summary, the Access Gateway Module is an important module in the network system, responsible for implementing data exchange and communication between terminal devices and upper-layer systems, while also having data security, network optimization, and statistical analysis functions.

[0014] Comprehensive code module: The comprehensive code module mainly implements functions such as comprehensive code generation, comprehensive code verification, digital identity segment generation, and digital identity segment verification. The comprehensive code service relies on a cross-domain trust system based on a trusted digital identity. The cross-domain trust system provides digital identity segment generation and verification services for the comprehensive code service. The comprehensive code has a designed code structure, which includes A segment, O segment, B segment, and S segment. The A segment contains the user's personal identity, the O segment represents public information, including code type, code issuing area, validity period, and personal attributes, the B segment represents business information, including digital identity, function status, and data authorization, and the S segment is the signature of the A, O, and B segments. The digital identity segment is part of the B segment of the comprehensive code. The generation and verification of the comprehensive code and the digital identity segment are requested by the access management front-end module, verified by the access gateway module for access authentication, traffic control, anti-replay, and signature verification, and then processed by the access management back-end module and distributed to the comprehensive code module for completion.

[0015] Access management front-end module: The access management front-end module provides a user-friendly and reasonable visual web interface, providing a modular function interface for users to use system functions. The main functions of the access management front-end interface include access registration and authorization management. Access registration provides user registration functions to facilitate user login, and authorization management manages different user permissions to use different function modules through a configuration comprehensive code function status request. The access management front-end mainly initiates access registration and authorization management requests on the front-end page, and then sends them to the access management back-end for processing, with verification by the access gateway module in between.

[0016] Access management back-end module: The access management back-end module provides standardized network service interfaces for the access management front-end interface, enabling remote invocation of system network services. The main functions of the access management back-end service include access registration and authorization management. Access management back-end requests are sent by the access management front-end to the access gateway module for filtering and delivery, and interact with the comprehensive code module to process comprehensive code configuration, comprehensive code, and digital identity segment generation and verification.

[0017] Blockchain technology can provide higher security and credibility for the generation and verification of digital identity. A common way is to use a distributed ledger on the blockchain to store and manage the relevant information of digital identity, such as public key, encryption certificate, identity verification record, etc. Through the decentralized nature of the blockchain, it can prevent personal identity information from being tampered with or forged, ensuring the reliability and security of the data. Here are some common steps to generate digital identity based on blockchain technology: Generate public and private key pairs: Use encryption algorithms to generate public and private key pairs for digital identity, store the public key on the blockchain for identity verification and encrypted communication. Identity registration: Associate identity information with the public key and register it on the blockchain. Identity information can include name, date of birth, ID number, contact information, etc. Identity authentication: In scenarios where identity authentication is required, the user provides their public key to the service provider, who verifies the public key with the identity information stored on the blockchain to confirm the user's identity. Record identity verification: After successful verification, the service provider can record the identity verification result on the blockchain as an unalterable identity verification record. These records can be used by other service providers for identity authentication, improving the credibility of identity verification. Identity authorization: In scenarios where identity authorization is required, the user can use their private key to sign the authorization request and send the signature to the service provider. The service provider can verify the legality of the signature through the public key to confirm the user's authorization. In summary, by combining blockchain technology to generate digital identity, the credibility and security of identity authentication and authorization can be improved, providing better digital identity solutions for users and service providers.

[0018] The application can integrate multiple two-dimensional codes to realize a comprehensive code by using the technology of multi-code fusion and multi-code mapping. Only the comprehensive code needs to be presented to obtain the information of the multiple two-dimensional codes.

[0019] The specific structure and implementation of the comprehensive code module are as follows:

[0020] (1) The code structure of the comprehensive code includes A segment, O segment, B segment, and S segment. The A segment contains the personal identity of the user, the O segment represents public information including code type, code issuing area, validity period, and reserved area, the B segment represents business information including digital identity segment, function status segment, and self-defined segment, and the S segment is the signature of the A, O, and B segments. The user can use the comprehensive code by applying for a digital identity to the comprehensive code engine and managing the function status. The generation and verification of the comprehensive code and the digital identity segment are based on the code structure of the comprehensive code.

[0021] (2) The comprehensive code engine includes a blockchain module. The blockchain module stores the generation and verification of the user's code, registers and authorizes the access service management, traces the data throughout the life cycle, and ensures data security.

[0022] (3) The use of a digital identity segment, which is part of the comprehensive code B segment, is generated and verified by the comprehensive code module. The use of a digital identity facilitates user authentication, greatly improves efficiency, and maximizes user value.

[0023] The application is a comprehensive code engine code generation and verification method, comprising the following steps:

[0024] (1) The user first submits an identity card, name, etc. information to the comprehensive code engine through the front-end page, and the comprehensive code engine verifies the information to the national online identity authentication infrastructure. After successful verification, the A segment identity information of the comprehensive code is generated.

[0025] (2) The comprehensive code engine generates a distributed digital identity using the A segment identity information. The comprehensive code engine first verifies the identity to the national online identity authentication infrastructure, and after passing the verification, creates a public and private key pair, and then submits the public key to the distributed digital identity management service platform. After receiving the public key, the distributed digital identity management service platform creates a distributed digital identity document, and then returns the distributed digital identity identification to the comprehensive code engine after the document is chained.

[0026] (3) The comprehensive code is generated. The user selects the function state and defines the required code function, and sends it to the comprehensive code engine. The comprehensive code engine first verifies the identity of the user, and then determines whether the code can be generated according to the current registered business and authorization information of the comprehensive code engine. If it can, the comprehensive code is generated, the user code generation process is chained by the block chain module, and the comprehensive code is returned to the user after the chaining is successful.

[0027] (4) The user presents the comprehensive code, the scanning end analyzes the comprehensive code and sends a request to the comprehensive code engine. The comprehensive code engine first verifies the identity of the user, then analyzes the code information required by the user, and the comprehensive code engine verifies the authorization information to determine whether the user's application function is legal. If it is legal, the digital identity segment and the business parameter are routed to the corresponding code end through the comprehensive code engine. The corresponding code end verifies the identity of the user, then analyzes the business parameter and returns the corresponding request parameter content. After receiving the data sent by the code segment, the comprehensive code engine chains the entire code verification process of the user through the block chain, and returns the data to the client.

[0028] Compared with the prior art, the application combines blockchain technology and comprehensive code technology to improve the security and reliability of the comprehensive code. The application has the following advantages:

[0029] (1) The application is a comprehensive code engine that can comprehensively feedback multiple code information, which is more convenient than multiple code applications.

[0030] (2) It can be used across domains and can be used across applications and regions to comprehensively display comprehensive code information.

[0031] (3) More secure and reliable, applying blockchain technology to store and trace the data of users throughout their life cycle, ensuring data security;

[0032] (4) Digital identity facilitates user authentication, greatly improves efficiency, and maximizes user value.

[0033] Strong anti-counterfeiting: The comprehensive code is encrypted and verified using blockchain technology, effectively preventing tampering or counterfeiting of the comprehensive code.

[0034] High traceability: The comprehensive code is traced using blockchain technology, allowing the source and history of the comprehensive code to be queried to achieve product traceability and traceability.

[0035] Good information integration: The comprehensive code can integrate multiple information types, such as product information, production information, and logistics information, to facilitate product tracking and management. BRIEF DESCRIPTION OF DRAWINGS

[0036] Figure 1 A comprehensive code engine architecture diagram of the present application;

[0037] Figure 2 An access gateway module structure diagram of the present application;

[0038] Figure 3 An access management front-end module structure diagram of the present application;

[0039] Figure 4 A comprehensive code module structure diagram of the present application;

[0040] Figure 5 An access management back-end module structure diagram of the present application;

[0041] Figure 6 A comprehensive code code structure diagram of the present application;

[0042] Figure 7 A distributed digital identity application flowchart of the present application;

[0043] Figure 8 A comprehensive code generation flowchart of the present application;

[0044] Figure 9 A comprehensive code verification flowchart of the present application. DETAILED DESCRIPTION

[0045] The specific architecture and prediction method of the present application will be further described below in conjunction with the drawings:

[0046] As shown in Figure 1 A comprehensive code engine architecture diagram, from top to bottom, includes access management front-end, access gateway, access management back-end, comprehensive code module, database, and blockchain.

[0047] As shown in Figure 2 , the access gateway module mainly implements access authentication, traffic control, anti-replay and signature verification functions. Access authentication relies on the authorization management data of the access management backend service to verify the permissions of the city platform accessing the system; traffic control relies on the authorization data of the access management backend service to control the access traffic of the city platform accessing the system; anti-replay is used to prevent the same data packet from repeatedly requesting service and application resources; signature verification is used to check whether the data packet has been tampered with.

[0048] As shown in Figure 3 , the comprehensive code module: the comprehensive code module mainly implements comprehensive code generation, comprehensive code verification, digital identity segment generation and digital identity segment verification functions, and the comprehensive code service relies on the cross-domain trust system based on trusted digital identity. The cross-domain trust system provides digital identity segment generation and verification services for the comprehensive code service; the comprehensive code has a designed code structure, which includes A segment, O segment, B segment and S segment, wherein the A segment contains the personal identity of the user, the O segment represents public information, including code type, code issuing area, validity period and reserved area, the B segment represents business information, including digital identity segment, function status segment, custom segment, and the S segment is the signature of A, O and B segments. The generation and verification of comprehensive code and digital identity segment are requested by the access management front-end module, and after a series of checks of access authentication, traffic control, anti-replay and signature verification through the access gateway module, they reach the access management backend module for processing and distribution to the comprehensive code module for completion.

[0049] As shown in Figure 4 , the access management front-end module: the access management front-end module provides a visual web interface with friendly interface and reasonable operation, and provides a modularized function interface for users to use system functions conveniently. The main functions of the access management front-end interface include access registration and authorization management. Access registration provides user registration function to facilitate user login, and authorization management is managed in the form of authorization, which manages the permissions of different users using different function modules through the configuration of comprehensive code function status request. The access management front-end mainly initiates access registration and authorization management requests on the front-end page, and then sends them to the access management backend for processing, and the access gateway module is verified in the middle.

[0050] As shown in Figure 5 , the access management backend module: the access management backend module provides standardized network service interface for the access management front-end interface, and realizes remote calling of system network service. The main functions of the access management backend service include access registration and authorization management. The access management backend request is sent by the access management front-end to the access gateway module for filtering and reaching, and interacts with the comprehensive code module to process the configuration of comprehensive code, the generation and verification of comprehensive code and digital identity segment.

[0051] As shown in Figure 6 , the code structure of the comprehensive code includes A section, O section, B section and S section, with a total length of 240 bytes. Among them:

[0052] The A section represents personal identity, which is composed of network certificate data and needs to be obtained after real-name and real-person authentication, representing the identity of the personal information subject. This section is used to realize network identity authentication and cross-domain identity mutual trust, and the length is 24 bytes.

[0053] The O section is a public information section, which is used to support cross-domain interconnection, and the length is 22 bytes. Among them: the first part is the code type identification section, which is composed of no more than 4 letters or numbers, with a length of 4 bytes, such as the comprehensive code “ZHM”; the second part is the code issuing area identification section, which generally uses the administrative division code specified in GB / T2260, with a length of 6 bytes; the third part is the validity period section, which represents the validity period cutoff time (UTC time) of the comprehensive code, with a length of 4 bytes; the fourth part is the reserved area, with a length of 8 bytes.

[0054] The B section is a business information section, which is used for identity recognition, open business recognition and business offline verification, with a length of 122 bytes. Among them: the first part is the digital identity section, which is generated by the one-code universal platform for users, with a length of 32 bytes; the second part is the open business function status section, with each 1 bit representing the opening state of 1 business function (0 represents not opened, and 1 represents opened), with a length of 8 bytes; the third part is the self-defined section, with a length of 82 bytes.

[0055] The S section is a signature section for the contents of A, O and B sections. When signing, an algorithm that meets the requirements of national password management should be used, as specified in GB / T33560-2017, which is identified as “1.2.156.10197.1.501”.

[0056] As shown in Figure 7 , the digital identity center sends the network identity code to the distributed digital identity management service platform, and then the distributed digital identity management service platform forwards it to the national identity authentication infrastructure. The national identity authentication infrastructure performs identity verification and then returns the authoritative network identity identifier to the distributed digital identity management service platform. After receiving the verification, the digital identity center informs the verification, and then generates the distributed digital identity. First, create a public and private key pair, and submit the public key to the distributed digital identity management service platform. After receiving it, the platform creates a distributed digital identity document and sends it to the digital identity service chain for blockchain on-chain operation. Finally, return the distributed digital identity identifier to the digital identity center.

[0057] As shown in Figure 8As shown, the process of generating a comprehensive code involves the user selecting a functional state, defining the required code function, and sending it to the comprehensive code engine. The comprehensive code engine first verifies the user's identity, and then determines whether a code can be generated based on the currently registered businesses and authorization information. If so, a comprehensive code is generated, and the blockchain module records the user's code application process on the blockchain. After successful on-chain recording, the comprehensive code is returned to the user.

[0058] like Figure 9 As shown, the user presents a comprehensive code, the scanning terminal parses the comprehensive code and sends a request to the comprehensive code engine. The comprehensive code engine first verifies the user's identity, then parses the code information the user needs to obtain, and verifies the authorization information to determine whether the user's application for the function is legitimate. If legitimate, the comprehensive code engine sends the identity segment and business parameters to the corresponding code terminal. The corresponding code terminal verifies the user's identity, then parses the business parameters and returns the content of the corresponding request parameters. After the comprehensive code engine receives the data sent by the code segment, the blockchain records the entire code verification process for the user and returns the data to the client.

[0059] Those skilled in the art will readily understand that the above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A comprehensive code engine system, characterized by: The engine comprises an access gateway module, a comprehensive code module, an access management front-end module, an access management back-end module and a blockchain module; The access gateway module realizes access authentication, traffic control, anti-replay and signature verification functions. The access authentication relies on the authorization management data of the access management back-end service to verify the permissions of the city platform accessing the system. The traffic control relies on the authorization data of the access management back-end service to control the access traffic of the city platform accessing the system. The anti-replay is used to prevent the same data packet from repeatedly requesting service and application resources. The signature verification is used to check whether the data packet is tampered with. The comprehensive code module realizes the functions of comprehensive code generation, comprehensive code verification, digital identity segment generation and digital identity segment verification. The comprehensive code contains A segment, O segment, B segment and S segment. The A segment contains the personal identity of the user. The O segment represents public information, including code type, code issuing area, validity period and reserved area. The B segment represents business information, including digital identity segment, function status segment and custom segment. The S segment is the signature of A, O and B segments. The generation and verification of comprehensive code and digital identity segment are requested by the access management front-end module, checked by the access authentication, traffic control, anti-replay and signature verification of the access gateway module, and then processed by the access management back-end module and distributed to the comprehensive code module for completion. The access management front-end module provides a visual web interface and provides a modular function interface for users to use system functions. The functions of the access management front-end interface include access registration and authorization management. The access registration provides user registration function for user login. The authorization management manages the permissions of different users using different function modules in the form of authorization. The function status configuration request is realized by initiating a request. After the user initiates the access registration and authorization management request on the front-end page, the access management front-end module verifies it through the access gateway module and then sends it to the access management back-end for processing. The access management back-end module provides standardized network service interfaces for the access management front-end interface and realizes remote calling of system network services. The functions of the access management back-end service include access registration and authorization management. The access management back-end request is sent by the access management front-end to the access gateway module for filtering and reaching the comprehensive code module for processing the configuration of comprehensive code, the generation and verification of comprehensive code and digital identity segment. The blockchain module stores the evidence of user code generation and verification, access service registration and authorization management, and traces the data throughout its life cycle. Users use comprehensive code by applying for digital identity segment and managing function status to the comprehensive code engine. The generation and verification of comprehensive code and digital identity segment are based on the code system of comprehensive code. The digital identity segment is part of the B segment of the comprehensive code, which is generated and verified by the comprehensive code module.

2. The method of claim 1, wherein the method further comprises: The method comprises the following steps: (1) The user first submits the ID card, name information to the integrated code engine through the access management front-end interface, and reaches the access management back-end module through the access gateway module for processing. The access management back-end module applies for verification to the national online identity authentication infrastructure, and generates the A section identity information of the integrated code after the verification is successful; (2) The integrated code engine generates a distributed digital identity using the A section identity information. The integrated code engine first verifies the identity to the national online identity authentication infrastructure, creates a public and private key pair after the verification is passed, and then submits the public key to the distributed digital identity management service platform. After receiving the public key, the distributed digital identity management service platform creates a distributed digital identity document, and then returns the distributed digital identity identification to the integrated code engine after the distributed digital identity document is chained; (3) The user defines the code function of the demand through the access management front-end module, and sends it to the integrated code module. The integrated code module first verifies the identity of the user, and then judges whether the code can be generated according to the registered business and authorization information of the integrated code module. If it can, the integrated code is generated. The block chain module chains the user code record, and returns the integrated code to the user after the chaining is successful; (4) The user presents the integrated code, and the code scanning end analyzes the integrated code and sends a request to the integrated code engine. The integrated code engine first verifies the identity of the user, and then analyzes the code information that the user needs to obtain. The integrated code engine verifies the authorization information to judge whether the user's application function is legal. If it is legal, the digital identity section and the business parameter are routed to the corresponding code end through the integrated code engine. The corresponding code end verifies the identity of the user, and then analyzes the business parameter to return the corresponding request parameter content. After receiving the data sent by the code end, the integrated code engine chains the entire code verification process of the user through the block chain module, and returns the data to the user.

Images