A personal information security protection method and device

Abstract

This invention discloses a method and apparatus for protecting personal information security, belonging to the field of personal information security protection technology. The method includes: verifying the identity information of the information collector and determining whether the information collector has the necessary authorization based on the identity information; verifying the compliance of the collection request through a compliance check algorithm, and requesting authorization from the user after successful verification; encrypting the data in the data card using a data card encryption algorithm, and decrypting and connecting the data by an encryption center after the user authorizes access; monitoring the information collector's collection behavior in real time, and immediately issuing a warning to the user and terminating the collection behavior if abnormal collection behavior is detected; and regularly updating the compliance check algorithm and the data card encryption algorithm. This automatically identifies and verifies the legitimacy of the data collector, while strengthening the protection barrier for the user's data card, thereby improving the security and privacy of the user's personal information.

Description

Technical Field

[0001] The present invention relates to the technical field of personal information security protection, and in particular to a personal information security protection method and device. Background Art

[0002] With the rapid development of the Internet, a huge amount of personal information data is collected and analyzed, which has brought new challenges to personal information security. The development of the Internet has changed the way we live and work, and it has also made the issue of personal information security protection more complicated. To this end, people in this field have developed a personal information security protection method based on big data technology to automatically identify the legitimacy of the collector and strengthen the protection of user data cards to avoid illegal collection by special means. Summary of the invention

[0003] The present invention provides a method for protecting personal information security, comprising:

[0004] Step 1: Verify the identity information of the information collector and determine whether the information collector has the collection license qualification based on the identity information;

[0005] Step 2: Verify the compliance of the collection request through the compliance check algorithm, and request authorization from the user after the verification is passed;

[0006] Step 3: Encrypt the data in the data card using the data card encryption algorithm, and after the user authorizes access, the encryption center completes the decryption and connection of the data;

[0007] Step 4: Monitor the information collection behavior of the information collector in real time. If any abnormal collection behavior is found, immediately issue a warning to the user and terminate the collection behavior;

[0008] Step 5. Regularly update the compliance check algorithm and data card encryption algorithm.

[0009] A personal information security protection method as described above, wherein the identity information of the information collector is verified, and whether the information collector has the collection license qualification is determined based on the identity information, specifically includes the following sub-steps:

[0010] Verify whether the digital certificate of the collector is authentic and valid;

[0011] After the digital certificate is verified, the corporate registration information and comprehensive credit rating of the collector are cross-verified.

[0012] A personal information security protection method as described above, wherein the compliance of the collection request is verified by a compliance check algorithm, specifically comprising the following sub-steps:

[0013] Process the collection items and collection purposes in the collection request into data pairs and organize them into an input set;

[0014] Use the compliance check algorithm to give the check results for the collection items and collection purpose data pairs in the input set;

[0015] The decision on whether to issue a warning notice or an authorization notice will be based on the inspection results.

[0016] A personal information security protection method as described above, wherein the compliance check algorithm includes a legal and regulatory database and a correlation analysis model, the legal and regulatory database is used to query whether the collection items in the input set are within the scope permitted by laws and regulations; the correlation analysis model is used to check whether there is a direct correlation between the collection items in the input set and the collection purpose.

[0017] In the above-mentioned method for protecting personal information security, the training process of the correlation analysis model includes the following sub-steps:

[0018] Create training and validation datasets based on standard acquisition protocols;

[0019] Design a loss function for the correlation analysis model;

[0020] Use the training data set to train the correlation analysis model, and adjust the model parameters based on the loss function during the training process;

[0021] The validation data set is combined to achieve convergence of the correlation analysis model.

[0022] A personal information security protection method as described above, wherein the data in the data card is encrypted using a data card encryption algorithm, specifically comprising the following sub-steps:

[0023] Export the data in the data card to the encryption center;

[0024] The encryption center uses the data card encryption algorithm to encrypt the data in the data card;

[0025] Performing cyclic shift on the encrypted data according to the encryption parameter to form a new data sequence;

[0026] Import the new data series into the data card for storage.

[0027] The present invention also provides a personal information security protection device, including: a collector identity authentication module, a compliance check module, a collection behavior monitoring module, and a data card protection module;

[0028] The collector identity verification module is used to verify the identity information of the information collector and determine whether the information collector has the collection license qualification based on the identity information;

[0029] The compliance check module is used to verify the compliance of the collection request using the compliance check algorithm, and request authorization from the user after the verification is passed;

[0030] The collection behavior monitoring module is used to monitor the collection behavior of the information collector in real time. If abnormal collection behavior is found, it will immediately issue an early warning to the user and terminate the collection behavior;

[0031] The data card protection module is used to protect the data in the data card using the data card encryption algorithm.

[0032] A personal information security protection device as described above, wherein the collector identity verification module includes a digital certificate verification submodule and a credit comprehensive verification submodule;

[0033] The digital certificate verification submodule is used to verify whether the digital certificate of the collector is authentic and valid;

[0034] The credit comprehensive verification submodule is used to cross-verify the corporate registration information and comprehensive credit of the collector.

[0035] A personal information security protection device as described above, wherein the compliance check module includes a collection range check submodule, a correlation analysis submodule, and a compliance check algorithm update submodule;

[0036] The collection scope check submodule is used to check whether the collection items in the collection request are within the scope permitted by laws and regulations;

[0037] The correlation analysis submodule is used to check whether the collection items in the collection request are directly correlated with the collection purpose;

[0038] The compliance check algorithm update submodule is used to regularly update the compliance check algorithm according to the updated terms of laws and regulations and new collection agreements.

[0039] A personal information security protection device as described above, wherein the data card protection module includes an encryption center submodule, a data import and export submodule, and an encryption algorithm update submodule;

[0040] The encryption center submodule is used to encrypt and decrypt the data in the data card using the data card encryption algorithm;

[0041] The data import and export submodule is used to realize the import and export of data between the data card and the encryption center;

[0042] The encryption algorithm update submodule is used to update the encryption parameters in the encryption algorithm.

[0043] The beneficial effects achieved by the present invention are as follows: automatically identifying and verifying the legitimacy of the data collector, while enhancing the protection barrier for user data cards, resisting and preventing illegal data collection activities using advanced technical means or special methods, and improving the security and privacy of user personal information. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0045] Figure 1 This is a flow chart of a personal information security protection method provided in Example 1 of the present invention. DETAILED DESCRIPTION

[0046] The following is a clear and complete description of the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0047] Embodiment 1

[0048] like Figure 1 As shown, Embodiment 1 of the present invention provides a method for protecting personal information security, including:

[0049] Step S10: verifying the identity information of the information collector, and judging whether the information collector has the collection license qualification according to the identity information;

[0050] When the collector sends a collection request, first determine whether it has the collection license qualification. If it does, proceed to the next step of verification. If not, intercept the collection request and send a warning notification to the user. The judgment conditions are: the collector must be real-name authenticated, that is, its registration information can be queried from official channels, and the registered company has a good credit. These data can be obtained from the identity information of the collector. Of course, the premise is the authenticity of the identity information. Verifying the identity information of the information collector is specifically divided into the following sub-steps:

[0051] Step S11: Verify whether the digital certificate of the collector is authentic and valid;

[0052] The digital certificate is obtained during the SSL / TLS handshake process. Its integrity is confirmed by checking the certificate chain, verifying that the domain name in the certificate is consistent with the current access domain name, confirming that the certificate is within the validity period, and using the CA public key to verify the digital signature on the certificate. After this series of verification processes, it can be determined that the digital certificate of the collector is authentic and valid.

[0053] Step S12: After the digital certificate is verified, cross-verify the enterprise registration information and comprehensive credit of the collector;

[0054] First, obtain the enterprise registration information of the collector from official channels and other third-party enterprise information platforms, compare the registration information from different sources, and check whether there are inconsistent information items. Then, combine the credit rating of the collector on different platforms and the litigation disputes under the name of the enterprise to comprehensively assess its creditworthiness. The formula for comprehensive credit assessment is expressed as:

[0055] , where C is the comprehensive credit of the collector, The number of information items in the collection party’s registration information on the third-party enterprise information platform that are inconsistent with the registration information on the official channel. is the total number of registered information items in the official channels, It represents the credit score of the collector in the qth platform with credit rating. q ranges from 1 to Q, where Q is the number of platforms with credit rating. Indicates the number of litigation cases under the name of the collector, is an adjustable parameter, Indicates the number of lawsuits involving personal information security in the name of the collector. , , They are the impact weights of inconsistent registration information, third-party ratings, and lawsuits on the credit rating of the collector.

[0056] A verification domain is set for the comprehensive credit. When the calculation result C exceeds the scope of the verification domain, or the verification of the digital certificate fails, it is deemed that the collector does not have the collection license qualification.

[0057] Step S20: Verify the compliance of the collection request through a compliance check algorithm, and request authorization from the user after the verification is passed;

[0058] The compliance of the collection items requested by the information collector is verified through the compliance check algorithm, which specifically includes the following sub-steps:

[0059] Step S21: processing the collection items and collection purposes in the collection request into data pairs, and arranging them into an input set;

[0060] The collection items and collection purposes are extracted from the privacy policy or user agreement provided by the collector. When collating the data set, it is necessary to ensure that the collection items and their collection purposes are in the form of data pairs for easy inspection. For example, if the collection item is a mobile phone number, the reason is to meet the real identity information authentication requirements stipulated by relevant laws, which is expressed as , Indicates the collection item mobile phone number, Indicates the reason for collection, and the subscript 1 indicates the first collection item.

[0061] Step S22: using a compliance check algorithm, providing check results for each pair of collection items and collection purpose data in the input set;

[0062] The compliance check algorithm includes a legal and regulatory database and a correlation analysis model. The legal and regulatory database stores the data items that are allowed to be collected. Based on the legal and regulatory database, it can be queried whether the collection items in the input set are within the scope of collection allowed by laws and regulations; the correlation analysis model is used to check the direct correlation between the collection items in the input set and the collection purpose. The training process of the correlation analysis model includes the following sub-steps:

[0063] Step S221: Create a training data set and a verification data set based on a standard acquisition party protocol;

[0064] The collection items and their collection purposes in the standard collection party agreement are extracted. The data pairs formed by these collection items and collection purposes are known positive samples with direct correlation, so their classification label is 1. If the collection purpose in the positive sample is replaced with the collection purpose of other collection items, it constitutes a negative sample, and the classification label of the negative sample is 0. The training data set contains a large number of positive and negative samples. The data type in the verification data set is consistent with the training data set, but the content must be relatively independent, that is, the collection items that appear in the verification data set do not appear in the training data set. Such a verification data set can reflect the fitting ability of the model.

[0065] Step S222: designing a loss function for the correlation analysis model;

[0066] The goal of the loss function is to enable the model to distinguish which collection items are directly relevant to the collection purpose (positive samples) and which are not directly relevant (negative samples). The loss function designed with this secondary goal is expressed as:

[0067] ,in is the i-th sample of the input model, is the collection item in the i-th sample, For the collection purpose in the i-th sample, Represents the true classification label of the i-th sample, 1 for positive samples and 0 for negative samples. Represents the model's response to the input sample The output predicted classification label, Is the sigmoid function, used to return the predicted classification label The output probability of .

[0068] Step S223: training the correlation analysis model using the training data set, and adjusting the model parameters based on the loss function during the training process;

[0069] The total loss value of a training batch is expressed as: [1], where [2] is a sample The loss function is is the collection item in the i-th sample, For the collection purpose in the i-th sample, Represents the true classification label of the i-th sample, i ranges from 1 to N, N is the size of a training batch, and then the gradient descent method is used to adjust the model parameters to minimize the total loss value .

[0070] Step S224: achieving convergence of the correlation analysis model in combination with the validation data set;

[0071] During the training process, it is also necessary to use the loss function to calculate the loss value of the correlation model on the validation data set, and observe the changing trends of the loss function curve on the training set and the validation set respectively to ensure that the changing trends caused by the adjusted model parameters are consistent until the loss function no longer decreases.

[0072] Step S23: Determine whether to issue a warning notification or an authorization notification based on the inspection result;

[0073] If the output check result indicates that the collection items in the collection request do not exceed the standards of laws and regulations, and all the collection items are directly related to the collection purpose, an authorization notice will be issued; if at least one of the collection items exceeds the standards of laws and regulations, or at least one collection item and its collection purpose are not directly related, a warning notice will be issued.

[0074] Step S30: encrypt the data in the data card using the data card encryption algorithm, and after the user authorizes access, the encryption center completes the decryption and connection of the data;

[0075] Data cards can be various types of storage devices, such as smart cards, SIM cards, SD cards, etc. They are usually used to store sensitive information, such as communication information, personal identity information, financial information, etc. Using data card encryption algorithms to protect data in data cards specifically includes the following sub-steps:

[0076] Step S31: exporting the data in the data card to the encryption center;

[0077] The encryption center is local, and the flight model will be automatically enabled during the export and import process to physically isolate it from external intrusion.

[0078] Step S32: the encryption center encrypts the data in the data card using the data card encryption algorithm, and then re-imports the data into the data card;

[0079] The encryption formula of the data card encryption algorithm is expressed as: ,in For data items The encrypted data, is the jth original data in the encryption queue, The first Item original data, is the encryption parameter, and % is the modulo operation.

[0080] After all exported data is encrypted, The data items in different storage areas are shifted backwards cyclically to form a new data sequence, that is, the original j-th data is actually in j+ The last item is at the beginning and the last item is at the end. The new data item sequence is then re-imported into the data card.

[0081] Step S33: After the user authorizes the data card access behavior, the encryption center completes the decryption and connection of the data;

[0082] First, the data in the storage area pointed to by the access behavior is exported to the encryption center, and the encryption center uses the encryption parameters Restore the data item queue, then perform the inverse operation on the data card encryption algorithm to obtain the original data item, and finally return the restored data to the access interface.

[0083] Step S40: monitor the collection behavior of the information collector in real time, and immediately issue a warning to the user and terminate the collection behavior if abnormal collection behavior is found;

[0084] After the collection behavior begins, the collection behavior of the collector will still be monitored to detect whether the collection behavior exceeds the collection scope specified in the privacy policy or user agreement given by the collector. If it exceeds the scope, it will be regarded as abnormal collection behavior, and the collection behavior will be terminated immediately and a warning notification will be issued to the user.

[0085] Step S50: regularly updating the compliance check algorithm and the data card encryption algorithm;

[0086] Updating the compliance detection algorithm is to update the legal and regulatory database according to the updated terms of the permitted collection scope of laws and regulations, and to incrementally train the correlation analysis model using the privacy policy or user agreement documents provided by the known and recognized standard collectors;

[0087] Updating the data card encryption algorithm refers to updating the encryption parameters therein to avoid using the same encryption parameters to encrypt data for a long time, thereby reducing the probability of being cracked.

[0088] Embodiment 2

[0089] Embodiment 2 of the present invention provides a personal information security protection device, including: a collection party identity authentication module, a compliance check module, a collection behavior monitoring module, and a data card protection module;

[0090] (1) The collector identity verification module is used to verify the identity information of the information collector and determine whether the information collector has the collection license qualification based on the identity information, including the digital certificate verification submodule and the credit comprehensive verification submodule;

[0091] 1. Digital certificate verification submodule, used to verify whether the digital certificate of the collector is authentic and valid;

[0092] The digital certificate is obtained during the SSL / TLS handshake process. Its integrity is confirmed by checking the certificate chain, verifying that the domain name in the certificate is consistent with the current access domain name, confirming that the certificate is within the validity period, and using the CA public key to verify the digital signature on the certificate. After this series of verification processes, it can be determined that the digital certificate of the collector is authentic and valid.

[0093] 2. Credit comprehensive verification submodule, used to cross-verify the enterprise registration information and comprehensive credit of the collector;

[0094] First, obtain the enterprise registration information of the collector from official channels and other third-party enterprise information platforms, compare the registration information from different sources, and check whether there are inconsistent information items. Then, combine the credit rating of the collector on different platforms and the litigation disputes under the name of the enterprise to comprehensively assess its creditworthiness. The formula for comprehensive credit assessment is expressed as:

[0095] , where C is the comprehensive credit of the collector, The number of information items in the collection party’s registration information on the third-party enterprise information platform that are inconsistent with the registration information on the official channel. is the total number of registered information items in the official channels, It represents the credit score of the collector in the qth platform with credit rating. q ranges from 1 to Q, where Q is the number of platforms with credit rating. Indicates the number of litigation cases under the name of the collector, is an adjustable parameter, Indicates the number of lawsuits involving personal information security in the name of the collector, , , They are the impact weights of inconsistent registration information, third-party ratings, and lawsuits on the credit rating of the collector.

[0096] A verification domain is set for the comprehensive credit. When the calculation result C exceeds the scope of the verification domain, or the verification of the digital certificate fails, it is deemed that the collector does not have the collection license qualification.

[0097] (2) A compliance check module, which is used to verify the compliance of the collection request using a compliance check algorithm and request authorization from the user after the verification is passed. It includes a collection scope check submodule, a correlation analysis submodule, and a compliance check algorithm update submodule;

[0098] 1. The collection scope check submodule is used to check whether the collection items in the collection request are within the scope permitted by laws and regulations;

[0099] The compliance check algorithm includes a legal and regulatory database and a correlation analysis model. The legal and regulatory database stores data items that are allowed to be collected. Based on the legal and regulatory database, it is possible to query whether the collection items in the input set are within the scope of collection permitted by laws and regulations.

[0100] 2. The correlation analysis submodule is used to check whether the collection items in the collection request are directly correlated with the collection purpose;

[0101] The correlation analysis model in the compliance check algorithm is used to check the direct correlation between the collection items and the collection purpose in the input set. First, the collection items and collection purposes in the collection request are sorted into data pairs and sorted into an input set. Then, the correlation analysis model is used to output the check results for each pair of collection items and collection purposes.

[0102] The training process of the correlation analysis model includes the following sub-steps:

[0103] I. Create training and validation datasets based on standard acquisition protocols;

[0104] The collection items and their collection purposes in the standard collection party agreement are extracted. The data pairs formed by these collection items and collection purposes are known positive samples with direct correlation, so their classification label is 1. If the collection purpose in the positive sample is replaced with the collection purpose of other collection items, it constitutes a negative sample, and the classification label of the negative sample is 0. The training data set contains a large number of positive and negative samples. The data type in the verification data set is consistent with the training data set, but the content must be relatively independent, that is, the collection items that appear in the verification data set do not appear in the training data set. Such a verification data set can reflect the fitting ability of the model.

[0105] II. Design a loss function for the correlation analysis model;

[0106] The goal of the loss function is to enable the model to distinguish which collection items are directly relevant to the collection purpose (positive samples) and which are not directly relevant (negative samples). The loss function designed with this secondary goal is expressed as:

[0107] ,in is the i-th sample of the input model, is the collection item in the i-th sample, For the collection purpose in the i-th sample, Represents the true classification label of the i-th sample, 1 for positive samples and 0 for negative samples. Represents the model's response to the input sample The output predicted classification label, Is the sigmoid function, used to return the predicted classification label The output probability of .

[0108] III. Use the training data set to train the correlation analysis model and adjust the model parameters based on the loss function during the training process;

[0109] The total loss value of a training batch is expressed as: ,in [3] is a sample The loss function is is the collection item in the i-th sample, For the collection purpose in the i-th sample, Represents the true classification label of the i-th sample, i ranges from 1 to N, N is the size of a training batch, and then the gradient descent method is used to adjust the model parameters to minimize the total loss value .

[0110] IV. Combine the validation data set to achieve the convergence of the correlation analysis model;

[0111] During the training process, it is also necessary to use the loss function to calculate the loss value of the correlation model on the validation data set, and observe the changing trends of the loss function curve on the training set and the validation set respectively to ensure that the changing trends caused by the adjusted model parameters are consistent until the loss function no longer decreases.

[0112] If the inspection results of the collection scope inspection submodule and the correlation analysis submodule indicate that the collection items in the collection request do not exceed the standards of laws and regulations, and the collection items are all directly related to the collection purpose, an authorization notice is issued; if at least one of the collection items exceeds the standards of laws and regulations, or at least one collection item and its collection purpose are not directly related, an early warning notice is issued.

[0113] 3. Compliance check algorithm update submodule, used to regularly update the compliance check algorithm according to the updated terms of laws and regulations and new collection agreements;

[0114] Update the legal and regulatory database in the compliance check algorithm according to the updated terms of the permitted collection scope in laws and regulations, and use the privacy policy or user agreement documents provided by known and recognized standard collection parties to incrementally train the relevance analysis model.

[0115] (3) Collection behavior monitoring module, which is used to monitor the collection behavior of the information collector in real time. If abnormal collection behavior is found, it will immediately issue a warning to the user and terminate the collection behavior;

[0116] After the collection behavior begins, the collection behavior of the collector will still be monitored to detect whether the collection behavior exceeds the collection scope specified in the privacy policy or user agreement given by the collector. If it exceeds the scope, it will be regarded as abnormal collection behavior, and the collection behavior will be terminated immediately and a warning notification will be issued to the user.

[0117] (4) a data card protection module, which is used to protect the data in the data card using a data card encryption algorithm, including an encryption center submodule, a data import and export submodule, and an encryption algorithm update submodule;

[0118] 1. The encryption center submodule is used to encrypt and decrypt the data in the data card using the data card encryption algorithm;

[0119] The encryption formula of the data card encryption algorithm is expressed as: ,in For data items The encrypted data, is the jth original data in the encryption queue, The first Item original data, is the encryption parameter, and % is the modulo operation.

[0120] When all data is encrypted, The data items in different storage areas are shifted backwards cyclically to form a new sequence of data items, that is, the original j-th data is actually in j+ The last item is at the beginning and the last item is at the end. The location of the item data.

[0121] After the user authorizes the data card access behavior, the encryption center will complete the decryption and connection of the data;

[0122] First, the data in the storage area pointed to by the access behavior is exported to the encryption center, and the encryption center uses the encryption parameters Restore the data item queue, then perform the inverse operation on the data card encryption algorithm to obtain the original data item, and finally return the restored data to the access interface.

[0123] 2. Data import and export submodule, used to realize the import and export of data between the data card and the encryption center;

[0124] The flight model will be automatically turned on during the export and import process to physically isolate it from external intrusion.

[0125] 3. Encryption algorithm update submodule, used to update encryption parameters in the encryption algorithm;

[0126] Updating the data card encryption algorithm refers to updating the encryption parameters therein to avoid using the same encryption parameters to encrypt data for a long time, thereby reducing the probability of being cracked.

[0127] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made on the basis of the technical solution of the present invention should be included in the scope of protection of the present invention.

Claims

1. A method for protecting personal information security, characterized in that: The method comprises: Step 1: Verify the identity information of the information collector and determine whether the information collector has the collection license qualification based on the identity information; Step 2: Verify the compliance of the collection request through the compliance check algorithm, and request authorization from the user after the verification is passed; Verify the compliance of the collection request through the compliance check algorithm, which includes the following sub-steps: Process the collection items and collection purposes in the collection request into data pairs and organize them into an input set; Using a compliance check algorithm, check results are given for the data pairs of the collection items and the collection purpose in the input set. The compliance check algorithm includes a legal and regulatory database and a correlation analysis model. The legal and regulatory database is used to query whether the collection items in the input set are within the scope of collection permitted by laws and regulations. The correlation analysis model is used to check whether there is a direct correlation between the collection items in the input set and the collection purpose. Determine whether to issue a warning notice or an authorization notice based on the inspection results; Step 3: Encrypt the data in the data card using the data card encryption algorithm, and after the user authorizes access, the encryption center completes the decryption and connection of the data; Step 4: Monitor the information collection behavior of the information collector in real time. If any abnormal collection behavior is found, immediately issue a warning to the user and terminate the collection behavior; Step 5. Regularly update the compliance check algorithm and data card encryption algorithm.

2. A personal information security protection method according to claim 1, characterized in that: Verify the identity information of the information collector and determine whether the information collector has the collection license qualification based on the identity information, which specifically includes the following sub-steps: Verify whether the digital certificate of the collector is authentic and valid; After the digital certificate is verified, the corporate registration information and comprehensive credit rating of the collector are cross-verified.

3. A personal information security protection method according to claim 1, characterized in that: The training process of the correlation analysis model includes the following sub-steps: Create training and validation datasets based on standard acquisition protocols; Design a loss function for the correlation analysis model; Use the training data set to train the correlation analysis model, and adjust the model parameters based on the loss function during the training process; The validation data set is combined to achieve convergence of the correlation analysis model.

4. A personal information security protection method according to claim 1, characterized in that: The data in the data card is encrypted using the data card encryption algorithm, which specifically includes the following sub-steps: Export the data in the data card to the encryption center; The encryption center uses the data card encryption algorithm to encrypt the data in the data card; Performing cyclic shift on the encrypted data according to the encryption parameter to form a new data sequence; Import the new data series into the data card for storage.

5. A personal information security protection device, characterized in that: The device comprises: a collector identity verification module, a compliance checking module, a collection behavior monitoring module, and a data card protection module; The collector identity verification module is used to verify the identity information of the information collector and determine whether the information collector has the collection license qualification based on the identity information; The compliance check module is used to verify the compliance of the collection request using the compliance check algorithm, and request authorization from the user after the verification is passed; The collection behavior monitoring module is used to monitor the collection behavior of the information collector in real time. If abnormal collection behavior is found, it will immediately issue an early warning to the user and terminate the collection behavior; A data card protection module, used to protect the data in the data card using a data card encryption algorithm; The compliance check module includes a collection range check submodule, a correlation analysis submodule, and a compliance check algorithm update submodule; The collection scope check submodule is used to check whether the collection items in the collection request are within the scope permitted by laws and regulations; The correlation analysis submodule is used to check whether the collection items in the collection request are directly correlated with the collection purpose; The compliance check algorithm update submodule is used to regularly update the compliance check algorithm according to the updated terms of laws and regulations and new collection agreements; the compliance check algorithm includes a legal and regulatory database and a correlation analysis model. The legal and regulatory database is used to query whether the collection items in the input set are within the scope of collection permitted by laws and regulations; the correlation analysis model is used to check whether there is a direct correlation between the collection items in the input set and the collection purpose.

6. A personal information security protection device according to claim 5, characterized in that: The identity verification module of the collector includes a digital certificate verification submodule and a credit comprehensive verification submodule; The digital certificate verification submodule is used to verify whether the digital certificate of the collector is authentic and valid; The credit comprehensive verification submodule is used to cross-verify the corporate registration information and comprehensive credit of the collector.

7. A personal information security protection device according to claim 5, characterized in that: The data card protection module includes an encryption center submodule, a data import and export submodule, and an encryption algorithm update submodule; The encryption center submodule is used to encrypt and decrypt the data in the data card using the data card encryption algorithm; The data import and export submodule is used to realize the import and export of data between the data card and the encryption center; The encryption algorithm update submodule is used to update the encryption parameters in the encryption algorithm.

Images