A sensitive information viewing method and system based on a two-dimensional code

Abstract

The application discloses a sensitive information viewing method and system based on a two-dimensional code. The system comprises a first server and a second server which are independent of each other, wherein the first server is used for storing information content, and the second server is used for authorizing sensitive information viewing permission. When a user needs to view sensitive information, the first server encrypts the information content and returns the information content to a client through a two-dimensional code, then the user accesses the second server through the two-dimensional code, the second server performs authentication, and after the authentication is passed, the information content is decrypted and then returned in a plaintext mode. The application maximally guarantees the safety of sensitive information in a separated mode of information content and permission setting, and the application allows the first server and the second server to be physically isolated in networks, and desensitization information is faithful.

Description

Technical Field

[0001] This invention relates to information security, and more particularly to the security of sensitive information. Background Technology

[0002] Sensitive data desensitization is a technology that protects personal privacy. It involves encrypting or transforming sensitive data to make the original data unidentifiable or unrecoverable.

[0003] The existing desensitization technologies mainly include the following methods: Random value replacement desensitization: Replacing original sensitive information with random characters, numbers, or strings. This method can protect privacy, but may cause data to lose its authenticity and integrity.

[0004] De-identification involves removing or replacing sensitive information from the original dataset with anonymous identifiers. This method can protect privacy but may cause the data to lose some relevance and interpretability.

[0005] Perturbation-based encryption desensitization: Sensitive information is processed using techniques such as adding noise, perturbation, or encryption to prevent it from being read or decrypted without authorization. This method can protect privacy while maintaining the authenticity and integrity of the data.

[0006] Compression: This involves compressing sensitive information into shorter strings while retaining its basic characteristics. This method can reduce data size but may result in data loss.

[0007] The existing desensitization methods mentioned above are mainly divided into two categories. One type desensitizes data at the cost of invalidating it, and ultimately the original data cannot be restored. The other type can be restored, but the process requires tools for decryption, which is more complicated and not conducive to dissemination. Summary of the Invention

[0008] The problem this invention aims to solve is to desensitize information in a faithful manner while ensuring the security of sensitive information.

[0009] To solve the above problems, the present invention adopts the following solution: According to a method for viewing sensitive information based on a QR code according to the present invention, the method includes the following steps: Step S1: When the first server receives the information viewing request sent by the first client, the first server determines whether the information content to be viewed contains sensitive information. If it contains sensitive information, the first server encrypts the content of the sensitive information with its own private key and the public key of the second server to obtain the ciphertext of the sensitive information. Then, the first server combines the ciphertext of the sensitive information, the information ownership, and the link information of the second server into a QR code and returns it to the first client. Step S2: After receiving the QR code information, the first client displays the QR code information as a QR code image; Step S3: The second client obtains the QR code information by scanning the QR code image, then connects to the second server based on the second server link information in the QR code information, and sends a sensitive information desensitization request to the second server by combining the encrypted text of the sensitive information in the QR code information and the information ownership. Step S4: The second server verifies the user's identity through the interaction of identity authentication with the second client. After the user's identity is verified, the server determines whether the user has the right to view the sensitive information by consulting the preset information ownership configuration library according to the information ownership in the sensitive information desensitization request. If the user has the right to view the sensitive information, the server decrypts the ciphertext of the sensitive information according to the public key of the first server and its own private key, and then returns the decrypted plaintext to the second client. Step S5: After receiving the returned plaintext, the second client displays the received plaintext.

[0010] Furthermore, according to the QR code-based sensitive information viewing method of the present invention, step S1 includes the following steps: Step SA11: When the first server receives the information viewing request from the first client, if the information to be viewed contains sensitive information items, when returning the viewed information content to the first client, the sensitive information tag and sensitive information item identification code shall be used as the information content of the sensitive information item. Step SA12: When the first client receives the information content to be viewed, if the information item content contains a sensitive information mark, then the information item content is displayed with the sensitive information mark, and waits to receive the user's instruction to view the information item content containing sensitive information; Step SA13: When the first client receives an instruction from the user to view the content of a sensitive information item, it constructs a sensitive information content viewing request based on the sensitive information item identification code corresponding to the information item and sends it to the first server; Step SA14: When the first server receives a request to view sensitive information, it extracts the content of the sensitive information based on the sensitive information item identification code in the request. Then, it encrypts the content of the sensitive information with its own private key and the public key of the second server to obtain the ciphertext of the sensitive information. Finally, it returns the ciphertext of the sensitive information, the information ownership, and the address of the second server to the first client as a QR code.

[0011] Furthermore, according to the QR code-based sensitive information viewing method of the present invention, step S1 specifically comprises: when the first server receives the information viewing request sent by the first client, if the information to be viewed contains sensitive information items, if it contains sensitive information items, the content of the sensitive information of each sensitive information item contained in the information to be viewed is encrypted with its own private key and the public key of the second server to obtain the corresponding ciphertext of the sensitive information, and then the ciphertext of these sensitive information is combined with the information ownership and the address of the second server to obtain the corresponding QR code information. When returning the viewed information content to the first client, the sensitive information mark and the corresponding QR code information are used as the information content of the sensitive information item. Step S2 specifically involves the following steps: When the first client receives the information content to be viewed, if the information item contains sensitive information markers, the QR code information contained in the information item is directly displayed as an image.

[0012] According to a QR code-based sensitive information viewing system of the present invention, the system includes a first server and a second server; the first server includes the following modules: This module is used to receive information viewing requests sent by the first client; Module M1 is used to: when receiving an information viewing request from the first client, the first server determines whether the information content to be viewed contains sensitive information. If it contains sensitive information, the first server encrypts the content of the sensitive information with its own private key and the public key of the second server to obtain the ciphertext of the sensitive information. Then, the first server returns the ciphertext of the sensitive information, the information ownership, and the address of the second server to the first client as a QR code. The second server includes the following modules: The authentication module is used for: user authentication interaction with a second client; Module M2 is used to: receive sensitive information de-identification requests sent by the second client; Module M3 is used to: when receiving a sensitive information de-identification request from the second client, determine whether the user has permission to view the sensitive information by consulting the preset information ownership configuration library based on the information ownership in the sensitive information de-identification request. If the user has permission to view the sensitive information, then decrypt the ciphertext of the sensitive information based on the public key of the first server and its own private key, and then return the decrypted plaintext to the second client.

[0013] Furthermore, according to the QR code-based sensitive information viewing system of the present invention, module M1 includes the following modules: Module MA11 is used to: when receiving an information viewing request from the first client, if the information to be viewed contains sensitive information items, when returning the viewed information content to the first client, use the sensitive information tag and the sensitive information item identification code as the information content of the sensitive information item; Module MA12 is used to: receive a request to view sensitive information content from the first client; when receiving the request, extract the content of the sensitive information according to the sensitive information item identification code in the request; then encrypt the content of the sensitive information with its own private key and the public key of the second server to obtain the ciphertext of the sensitive information; and then return the ciphertext of the sensitive information, the information ownership, and the address of the second server to the first client as a QR code.

[0014] Furthermore, in the QR code-based sensitive information viewing system according to the present invention, module M1 specifically comprises: When a request to view information is received from the first client, if the information being viewed contains sensitive information items, the content of the sensitive information in each sensitive information item in the viewed information is encrypted using the client's own private key and the public key of the second server to obtain the corresponding ciphertext of the sensitive information. Then, these ciphertexts of the sensitive information are combined with the information ownership and the address of the second server to obtain the corresponding QR code information. When returning the viewed information content to the first client, the sensitive information marker and the corresponding QR code information are used as the information content of the sensitive information item.

[0015] The technical effects of this invention are as follows: The present invention uses a first server to store information content and a second server to authenticate information viewing permissions. By separating information content and permission settings, the security of sensitive information is guaranteed to the maximum extent.

[0016] The first server in this invention is typically a server within a local area network (LAN), while the second server is typically connected to the Internet. Under the technical solution of this invention, the LAN where the first server is located is isolated from the Internet, ensuring the security of sensitive information.

[0017] Under the technical solution of the present invention, the sensitive information to be viewed is encrypted in an asymmetric encryption method and carried by a QR code, which ensures that the sensitive information is desensitized and preserved, and is easy to spread to third parties. As long as the third party is authorized by the second server, he or she can also view the corresponding sensitive information through the QR code. Attached Figure Description

[0018] Figure 1 This is a schematic diagram of the overall structure of an embodiment of the present invention. Implementation

[0019] The present invention will now be described in further detail with reference to the accompanying drawings.

[0020] Figure 1 An example of a sensitive information viewing system is provided, comprising a first server 101 and a second server 102. The first server 101 is located within a local area network (LAN) 301 and stores sensitive information in a database. A first client 201 can access the first server 101 via the LAN 301 to view the sensitive information. The second server 102 is located on the Internet 302 and stores the authorization configuration for the sensitive information in a database. The LAN 301 and the Internet 302 are typically physically isolated. This sensitive information viewing system can be applied to, for example, a student record viewing system in a school or a household registration record viewing system in a public security system. When applied to a student record viewing system in a school, the sensitive information is the student's personal privacy information in the student's file; the LAN 301 is typically the school's campus LAN, and the first server 101 is a server configured within the school. When applied to a household registration record viewing system in a public security system, the sensitive information is the resident's personal privacy information in their household registration information; the LAN 301 is the public security system's internal network, and the first server 101 is an internal server of the public security bureau. The definition of sensitive information varies depending on the application of this sensitive information retrieval system. For example, in the aforementioned applications, names are generally not considered sensitive information, while private information such as phone numbers, ID numbers, and addresses are typically considered sensitive. Therefore, the sensitive information retrieval referred to in this invention refers to the retrieval of sensitive information within the context of general information retrieval. Of course, sensitive information is not necessarily limited to private information; anything that is generally considered to have confidentiality significance can be considered sensitive information.

[0021] Furthermore, the first server 101 and the second server 102, as well as the connected first client 201 and the second client 202 in the above system, are general-purpose computer devices composed of processors and memory. Their respective functions are achieved by the processor loading the computer program instruction set stored in the memory. Moreover, the first server 101 and the second server 102 can be a single physical computing device, a server cluster composed of multiple physical computing devices, or even a cloud service. In practical applications, the first client 201 is typically a desktop computer, and the second client 202 is typically a mobile phone or other handheld smart mobile device. In another optional embodiment, the first client 201 and the second client 202 may also be the same device. In this case, the local area network 301 where the first server 101 is located is generally connected to the Internet 302.

[0022] The QR code-based sensitive information viewing system mentioned above in this invention refers to the system implemented by the first server 101 and the second server 102 within the aforementioned sensitive information viewing system, involving the first client 201 and the second client 202 but not including the first client 201 and the second client 202. The QR code-based sensitive information viewing method of this invention is a process of interaction between the first server 101, the first client 201, the second server 102, and the second client 202 through the execution of computer program instructions, mainly including the following steps: the first server encrypts sensitive information to generate a QR code; the second client scans the QR code to connect to the second server and request viewing; and the second server authenticates and decrypts the information, returning plaintext.

[0023] The step of encrypting sensitive information and generating a QR code on the first server is specifically the aforementioned step S1. When the first server 101 receives an information viewing request from the first client 201, the first server 101 determines whether the information content to be viewed contains sensitive information. If it does, the first server 101 encrypts the sensitive information content using its own private key and the public key of the second server 102 to obtain ciphertext of the sensitive information. Then, the ciphertext of the sensitive information, the information ownership, and the second server link information are combined to form QR code information and returned to the first client 201. Obviously, this implicitly includes the step of the first client 201 sending an information viewing request to the first server 101. The first client 201 usually accesses the first server 101 through a browser. Before the first client 201 sends an information viewing request to the first server 101, there is usually a process in which the first client 201 logs into the first server 101 through a browser and performs identity verification. The specific details of this process are familiar to those skilled in the art and are not within the scope of this invention, so this specification will not elaborate on them.

[0024] Typically, the first client 201 sends an information viewing request to the first server 101. The requested information usually contains multiple information items, rather than one item at a time. These information items include, for example, name, age, place of origin, contact number, home address, ID number, and academic performance. Some of these items are considered sensitive information, while others are considered non-sensitive. For instance, among the aforementioned information items, contact number, home address, and ID number might be considered sensitive information, but the others are not. Therefore, when the first server 101 determines whether the viewed information contains sensitive information, it usually does so by judging whether each information item is sensitive. In other words, when the first client 201 sends an information viewing request to the first server 101, the information returned by the first server 101 may typically contain multiple sensitive information items. In practical applications, this can be achieved by returning one QR code for a sensitive information item at a time, or by returning multiple QR codes for sensitive information items at once. The former implementation can be achieved through the following steps: Step SA11: When the first server 101 receives the information viewing request sent by the first client 201, if the information to be viewed contains sensitive information items, when returning the viewed information content to the first client 201, the sensitive information tag and sensitive information item identification code shall be used as the information content of the sensitive information item. Step SA12: When the first client 201 receives the information content to be viewed, if the information item content contains a sensitive information mark, then the information item content is displayed with the sensitive information mark, and waits to receive the user's instruction to view the information item content containing sensitive information; Step SA13: When the first client 201 receives an instruction from the user to view the content of a sensitive information item, it forms a sensitive information content viewing request based on the sensitive information item identification code corresponding to the information item and sends it to the first server 101. Step SA14: When the first server 101 receives a request to view sensitive information content, it extracts the content of the sensitive information according to the sensitive information item identification code in the request, and then encrypts the content of the sensitive information with its own private key and the public key of the second server 102 to obtain the ciphertext of the sensitive information. Then, it returns the ciphertext of the sensitive information, the information ownership, and the address of the second server to the first client 201 as a QR code.

[0025] The latter implementation method step S1 is as follows: When the first server receives the information viewing request sent by the first client, if the information to be viewed contains sensitive information items, the server encrypts the content of the sensitive information of each sensitive information item in the information to be viewed using its own private key and the public key of the second server to obtain the corresponding ciphertext of the sensitive information. Then, the ciphertext of the sensitive information is combined with the information ownership and the address of the second server to obtain the corresponding QR code information. When returning the viewed information content to the first client, the sensitive information mark and the corresponding QR code information are used as the information content of the sensitive information item.

[0026] After receiving the QR code information, the first client 201 displays the QR code information as a QR code image, which is the aforementioned step S2. When the first server 101 returns multiple QR codes for sensitive information items at once, step S2 can also be further specified as follows: when the first client 201 receives the information content it is viewing, if the information item contains sensitive information markers, then the QR code information contained in that information item is directly displayed as an image.

[0027] Furthermore, it should be noted that when the first server 101 sends QR code information to the first client 201, it can be in image or text format. When the first server 101 sends QR code information in image format to the first client 201, the first server 101 converts the QR code information into an image QR code; when the first server 101 sends QR code information in text format to the first client 201, the first client 201 converts the QR code information into an image QR code. This embodiment preferably uses the former, that is, it is preferable for the first server 101 to convert the QR code information into a QR code image.

[0028] The step of the second client scanning the QR code to connect to the second server and request viewing is the aforementioned step S3. The second client 202 obtains the QR code information by scanning the QR code image displayed by the first client 201, then connects to the second server 102 based on the second server link information in the QR code information, and sends a sensitive information desensitization request to the second server 102, consisting of the encrypted text of the sensitive information and the information ownership in the QR code information. Obviously, the second client 202 is an electronic device equipped with a camera, and therefore, it is usually a mobile terminal such as a mobile phone or PDA. In this embodiment, the second client 202 scans the QR code image through a third-party application and connects to the second server 102 through the third-party application, which can be, for example, WeChat, DingTalk, Alipay, etc. Therefore, in this embodiment, the second server link information is an HTTP address, and the encrypted text of the sensitive information and the information ownership are used as HTTP parameters of the HTTP address.

[0029] The steps of authentication and decryption of the returned plaintext by the second server are the aforementioned step S4. The second server 102 verifies the user's identity through interaction with the second client 202 for authentication. After the user's identity verification is successful, the server determines whether the user has permission to view the sensitive information by consulting a preset information ownership configuration library based on the information ownership in the sensitive information desensitization request. If the user has permission to view the sensitive information, the server decrypts the ciphertext of the sensitive information using the public key of the first server 101 and its own private key, and then returns the decrypted plaintext to the second client 202. After receiving the returned plaintext, the second client 202 displays the received plaintext for the user to view; the displayed plaintext is the sensitive information content that the user wants to view.

[0030] Since this embodiment connects to the second server 102 through a third-party application, the authentication process is also implemented by the third-party application. The specific process is familiar to those skilled in the art and will not be described in detail here.

[0031] The configuration of user access rights for corresponding information in the information ownership configuration library is completed by the corresponding auxiliary system of this system. In practical applications, when a user needs to view specific sensitive information, a certain process must first be followed. For example, when this system is applied to the public security household registration file access system, a lawyer's authorization letter stamped by the court is usually required. The public security department then completes the information ownership permission configuration in the corresponding auxiliary system based on this authorization letter. These auxiliary processes for permission configuration are not within the scope of this invention and will not be elaborated upon. In this embodiment, information ownership is represented by a corresponding identification code.

[0032] Furthermore, in this embodiment, the encryption and decryption algorithms for sensitive information content adopt the national standard SM2 algorithm. The specific algorithm is familiar to those skilled in the art and requires no further explanation. Additionally, the storage of the public key of the first server 101 on the second server 102 and the storage of the public key of the second server 102 on the first server 101 are achieved through pre-defined trust configurations.

[0033] Furthermore, it should be noted that the modules in the QR code-based sensitive information viewing system are virtual devices corresponding to the aforementioned method steps, and will not be described again in this specification.

Claims

1. A method for viewing sensitive information based on QR codes, characterized in that, Includes the following steps: Step S1: When the first server receives the information viewing request sent by the first client, the first server determines whether the information content to be viewed contains sensitive information. If it contains sensitive information, the first server encrypts the content of the sensitive information with its own private key and the public key of the second server to obtain the ciphertext of the sensitive information. Then, the first server combines the ciphertext of the sensitive information, the information ownership, and the link information of the second server into a QR code and returns it to the first client. Step S2: After receiving the QR code information, the first client displays the QR code information as a QR code image; Step S3: The second client obtains the QR code information by scanning the QR code image, then connects to the second server based on the second server link information in the QR code information, and sends a sensitive information desensitization request to the second server by combining the encrypted text of the sensitive information in the QR code information and the information ownership. Step S4: The second server verifies the user's identity through the interaction of identity authentication with the second client. After the user's identity is verified, the server determines whether the user has the right to view the sensitive information by consulting the preset information ownership configuration library according to the information ownership in the sensitive information desensitization request. If the user has the right to view the sensitive information, the server decrypts the ciphertext of the sensitive information according to the public key of the first server and its own private key, and then returns the decrypted plaintext to the second client. Step S5: After receiving the returned plaintext, the second client displays the received plaintext.

2. The method for viewing sensitive information based on QR codes according to claim 1, characterized in that, Step S1 includes the following steps: Step SA11: When the first server receives the information viewing request from the first client, if the information to be viewed contains sensitive information items, when returning the viewed information content to the first client, the sensitive information tag and sensitive information item identification code shall be used as the information content of the sensitive information item. Step SA12: When the first client receives the information content to be viewed, if the information item content contains a sensitive information mark, then the information item content is displayed with the sensitive information mark, and waits to receive the user's instruction to view the information item content containing sensitive information; Step SA13: When the first client receives an instruction from the user to view the content of a sensitive information item, it constructs a sensitive information content viewing request based on the sensitive information item identification code corresponding to the information item and sends it to the first server; Step SA14: When the first server receives a request to view sensitive information, it extracts the content of the sensitive information based on the sensitive information item identification code in the request. Then, it encrypts the content of the sensitive information with its own private key and the public key of the second server to obtain the ciphertext of the sensitive information. Finally, it returns the ciphertext of the sensitive information, the information ownership, and the address of the second server to the first client as a QR code.

3. The method for viewing sensitive information based on QR codes according to claim 1, characterized in that, Step S1 specifically involves: When the first server receives an information viewing request from the first client, if the information being viewed contains sensitive information items, it encrypts the content of the sensitive information of each sensitive information item in the information being viewed using its own private key and the public key of the second server to obtain the corresponding ciphertext of the sensitive information. Then, it combines the information ownership and the address of the second server to obtain the corresponding QR code information. When returning the viewed information content to the first client, the sensitive information marker and the corresponding QR code information are used as the information content of the sensitive information item. Step S2 specifically involves: When the first client receives the information content to be viewed, if the information item contains sensitive information markers, it will directly display the QR code information contained in the information item as an image.

4. A sensitive information viewing system based on QR codes, characterized in that, The system includes a first server and a second server; the first server includes the following modules: This module is used to receive information viewing requests sent by the first client; Module M1 is used to: when receiving an information viewing request from the first client, the first server determines whether the information content to be viewed contains sensitive information. If it contains sensitive information, the first server encrypts the content of the sensitive information with its own private key and the public key of the second server to obtain the ciphertext of the sensitive information. Then, the first server returns the ciphertext of the sensitive information, the information ownership, and the address of the second server to the first client as a QR code. The second server includes the following modules: The authentication module is used for: user authentication interaction with a second client; Module M2 is used to: receive sensitive information de-identification requests sent by the second client; Module M3 is used to: when receiving a sensitive information de-identification request from the second client, determine whether the user has permission to view the sensitive information by consulting the preset information ownership configuration library based on the information ownership in the sensitive information de-identification request. If the user has permission to view the sensitive information, then decrypt the ciphertext of the sensitive information based on the public key of the first server and its own private key, and then return the decrypted plaintext to the second client.

5. The sensitive information viewing system based on QR codes according to claim 4, characterized in that, Module M1 includes the following modules: Module MA11 is used to: when receiving an information viewing request from the first client, if the information to be viewed contains sensitive information items, when returning the viewed information content to the first client, use the sensitive information tag and the sensitive information item identification code as the information content of the sensitive information item; Module MA12 is used to: receive a request to view sensitive information content from the first client; when receiving the request, extract the content of the sensitive information according to the sensitive information item identification code in the request; then encrypt the content of the sensitive information with its own private key and the public key of the second server to obtain the ciphertext of the sensitive information; and then return the ciphertext of the sensitive information, the information ownership, and the address of the second server to the first client as a QR code.

6. The sensitive information viewing system based on QR codes according to claim 4, characterized in that, The module M1 Specifically, when receiving an information viewing request from the first client, if the information being viewed contains sensitive information items, the content of the sensitive information in each sensitive information item in the viewed information is encrypted using the client's private key and the public key of the second server to obtain the corresponding ciphertext of the sensitive information. Then, these ciphertexts of the sensitive information are combined with the information ownership and the address of the second server to obtain the corresponding QR code information. When returning the viewed information content to the first client, the sensitive information marker and the corresponding QR code information are used as the information content of the sensitive information item.

Images