Electronic certificate code scanning real-name authentication service method, device and equipment and storage medium

Abstract

The invention relates to the technical field of information processing, in particular to an electronic license code scanning real-name authentication service method, device and equipment and a storage medium, a salesman carries a mobile service terminal equipped with a code scanning recognition technology when going to a door, the terminal can directly scan two-dimensional code scanning information on a user electronic license, and the two-dimensional code scanning information is stored in the mobile service terminal. The information of the user is quickly identified and read, so that the process of real-name authentication is completed, the user does not need to go to a service window to queue and wait, the service process is simplified, the time and energy of the user are saved, the user experience is improved, related information is subjected to security encryption processing and transmitted to a service system, and the user experience is improved. The security risk in the information transmission process is effectively reduced, the integrity and confidentiality of the data are ensured, data management by a management department is facilitated, real-name authentication transactions of each time are recorded by adopting a block chain technology, the data are ensured not to be tampered, and the requirements of supervision transparency and traceability are met.

Description

Technical Field

[0001] The present invention relates to the field of information processing technology, and in particular to a method, device, equipment and storage medium for electronic certificate scanning real-name authentication service. Background Art

[0002] At present, the newly added electronic certificate type is designed to meet the public's demand for electronic certification documents in specific fields or scenarios. In order to ensure that this new type of electronic certificate can be smoothly integrated into the existing government service system, users need to go to the service window in person to queue up and wait, and they also need to prepare identity documents, application forms, photos and other materials for real-name authentication, ensure that the submitted application materials and information are complete, and ensure that all information is filled in accurately, otherwise the real-name authentication will fail. After the application is submitted, the relevant departments still need to review and verify it. The process is very cumbersome and complicated, which reduces the efficiency of real-name authentication and the user experience. The user's information privacy is easily leaked, the information security is low, and it is not convenient for the management department to manage the data. It cannot record each real-name authentication process, and the traceability is low. Summary of the invention

[0003] In order to overcome the shortcomings of the prior art, the purpose of the present invention is to provide an electronic certificate scanning real-name authentication service method, device, equipment and storage medium that simplifies business processes, saves users' time and energy, improves users' experience, effectively reduces security risks in the information transmission process, ensures data integrity and confidentiality, and facilitates management departments to manage data and improves traceability.

[0004] The first aspect of the present invention provides an electronic certificate scanning real-name authentication service method, comprising: building a cloud-based verification platform connected to an official database to obtain QR code scanning information on a user's electronic certificate; uploading the QR code scanning information to the cloud-based verification platform for information comparison to obtain a comparison result, and verifying the authenticity and validity of the user's electronic certificate based on the comparison result; when the user's electronic certificate is authentic and valid, extracting personal information from the user's electronic certificate, encrypting the personal information to obtain encrypted information; transmitting the encrypted information to a business system, decrypting the encrypted information to obtain decrypted information; generating real-name authentication information based on the decrypted information, and recording the generation process of the real-name authentication information to obtain a real-name authentication record.

[0005] Optionally, in a first implementation method of the first aspect of the present invention, the construction of a cloud-based verification platform connected to an official database to obtain the QR code scanning information on the user's electronic certificate includes: selecting a distributed database architecture, and constructing a cloud-based verification platform based on the distributed database architecture; connecting the cloud-based verification platform to the official database through an API interface; and obtaining the QR code scanning information on the user's electronic certificate.

[0006] Optionally, in a second implementation method of the first aspect of the present invention, the QR code scan information is uploaded to the cloud-based verification platform for information comparison to obtain a comparison result, and the authenticity and validity of the user's electronic certificate is verified based on the comparison result, including: preprocessing the QR code scan information using a hash function to obtain preprocessed information; generating a unique identifier based on the preprocessed information; uploading the unique identifier to the cloud-based verification platform; using a fuzzy matching algorithm to compare the unique identifier with the corresponding hash value stored in the official database to obtain a comparison result; and verifying the authenticity and validity of the user's electronic certificate based on the comparison result.

[0007] Optionally, in a third implementation method of the first aspect of the present invention, when the user electronic certificate is authentic and valid, personal information in the user electronic certificate is extracted, and the personal information is encrypted to obtain encrypted information, including: when the user electronic certificate is authentic and valid, identifying text information in the user electronic certificate; using natural language processing technology to perform semantic understanding and structured processing on the text information to obtain structured semantic information; obtaining a blank template for personal information, filling the structured semantic information into corresponding fields in the blank template for personal information to obtain personal information; based on an encryption algorithm, using a public key in a preset key pair to encrypt the personal information to obtain encrypted information.

[0008] Optionally, in a fourth implementation method of the first aspect of the present invention, the encrypted information is transmitted to the business system, and the encrypted information is decrypted to obtain decrypted information, including: transmitting the encrypted information to the business system, and identifying the business certificate provided by the business system; determining whether the business certificate has decryption authority; if so, sending the private key in the key pair to the business system, using the private key to decrypt the encrypted information to obtain decrypted information; and performing integrity verification on the decrypted information.

[0009] Optionally, in a fifth implementation method of the first aspect of the present invention, real-name authentication information is generated based on the decrypted information, and the generation process of the real-name authentication information is recorded to obtain a real-name authentication record, including: determining the target parameter format in the business system; generating real-name authentication information that conforms to the target parameter format based on the decrypted information; and recording the generation process of the real-name authentication information to obtain a real-name authentication record.

[0010] Optionally, in a sixth implementation method of the first aspect of the present invention, the real-name authentication information is generated according to the decrypted information, and the generation process of the real-name authentication information is recorded. After obtaining the real-name authentication record, it also includes: obtaining a timestamp from a timestamp service platform based on the generation time of the real-name authentication information; receiving the real-name authentication result fed back by the business system; determining whether the real-name authentication result is a successful authentication; and if so, uploading the timestamp and the real-name authentication record to the blockchain.

[0011] The second aspect of the present invention provides an electronic certificate scanning real-name authentication service device, including: a construction and acquisition module, used to build a cloud-based verification platform connected to an official database, and obtain the QR code scanning information on the user's electronic certificate; a comparison and verification module, used to upload the QR code scanning information to the cloud-based verification platform for information comparison, obtain the comparison result, and verify the authenticity and validity of the user's electronic certificate based on the comparison result; an extraction and encryption module, used to extract the personal information in the user's electronic certificate when the user's electronic certificate is authentic and valid, encrypt the personal information, and obtain encrypted information; a transmission and decryption module, used to transmit the encrypted information to a business system, decrypt the encrypted information, and obtain decrypted information; a generation record module, used to generate real-name authentication information based on the decrypted information, and record the generation process of the real-name authentication information to obtain a real-name authentication record.

[0012] Optionally, in a first implementation method of the second aspect of the present invention, the construction and acquisition module includes: a construction unit for selecting a distributed database architecture and building a cloud-based verification platform based on the distributed database architecture; a docking unit for docking the cloud-based verification platform with an official database through an API interface; and an acquisition unit for acquiring the QR code scan information on the user's electronic certificate.

[0013] Optionally, in a second implementation method of the second aspect of the present invention, the comparison and verification module includes: a preprocessing unit, used to preprocess the QR code scanning information using a hash function to obtain preprocessed information; a first generation unit, used to generate a unique identifier based on the preprocessed information; an upload unit, used to upload the unique identifier to the cloud verification platform; a comparison unit, used to compare the unique identifier with the corresponding hash value stored in the official database using a fuzzy matching algorithm to obtain a comparison result; and a verification unit, used to verify the authenticity and validity of the user's electronic certificate based on the comparison result.

[0014] Optionally, in a third implementation method of the second aspect of the present invention, the extraction and encryption module includes: an identification unit, used to identify text information in the user's electronic certificate when the user's electronic certificate is authentic and valid; an understanding and processing unit, used to perform semantic understanding and structured processing on the text information using natural language processing technology to obtain structured semantic information; an acquisition and filling unit, used to obtain a blank template of personal information, and fill the structured semantic information into corresponding fields in the blank template of personal information to obtain personal information; an encryption unit, used to encrypt the personal information based on an encryption algorithm using a public key in a preset key pair to obtain encrypted information.

[0015] Optionally, in a fourth implementation method of the second aspect of the present invention, the transmission decryption module includes: a transmission identification unit, used to transmit the encrypted information to the business system and identify the business certificate provided by the business system; a judgment unit, used to judge whether the business certificate has decryption authority; a sending decryption unit, used to send the private key in the key pair to the business system if so, and use the private key to decrypt the encrypted information to obtain decrypted information; a verification unit, used to perform integrity verification on the decrypted information.

[0016] Optionally, in the fifth implementation method of the second aspect of the present invention, the record generation module includes: a determination unit, used to determine the target parameter format in the business system; a second generation unit, used to generate real-name authentication information that conforms to the target parameter format based on the decrypted information; and a recording unit, used to record the generation process of the real-name authentication information to obtain a real-name authentication record.

[0017] Optionally, in a sixth implementation method of the second aspect of the present invention, it also includes: a generation and acquisition module, used to obtain a timestamp from a timestamp service platform based on the generation time of the real-name authentication information; a receiving module, used to receive the real-name authentication result fed back by the business system; a judgment module, used to judge whether the real-name authentication result is a successful authentication; and an uploading module, used to upload the timestamp and the real-name authentication record to the blockchain if so.

[0018] The third aspect of the present invention provides an electronic certificate code scanning real-name authentication service device, which includes: a memory and at least one processor, wherein the memory stores instructions; at least one of the processors calls the instructions in the memory to enable the electronic certificate code scanning real-name authentication service device to perform each step of the electronic certificate code scanning real-name authentication service method described in any one of the above items.

[0019] A fourth aspect of the present invention provides a computer-readable storage medium having instructions stored thereon, which, when executed by a processor, implement the various steps of any of the above-mentioned electronic certificate scanning real-name authentication service methods.

[0020] In the technical solution of the present invention, the salesperson will carry a mobile service terminal equipped with code scanning and recognition technology when visiting the customer's home. The terminal can directly scan the QR code information on the user's electronic certificate, quickly identify and read the user's information, and thus complete the real-name authentication process. The user does not need to go to the service window in person to queue up and wait, which simplifies the business process, saves the user's time and energy, and improves the user's experience. The relevant information is securely encrypted and transmitted to the business system, which effectively reduces the security risks in the information transmission process, ensures the integrity and confidentiality of the data, and facilitates data management by the management department. Blockchain technology is used to record each real-name authentication transaction to ensure that the data cannot be tampered with, meeting the requirements of regulatory transparency and traceability. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 A first flow chart of the electronic certificate scanning real-name authentication service method provided by an embodiment of the present invention;

[0022] Figure 2 A second flow chart of the electronic certificate scanning real-name authentication service method provided by an embodiment of the present invention;

[0023] Figure 3 A third flow chart of the electronic certificate scanning real-name authentication service method provided by an embodiment of the present invention;

[0024] Figure 4 A fourth flow chart of the electronic certificate scanning real-name authentication service method provided by an embodiment of the present invention;

[0025] Figure 5 A schematic diagram of the structure of an electronic certificate scanning real-name authentication service device provided by an embodiment of the present invention;

[0026] Figure 6 Another structural diagram of the electronic certificate scanning real-name authentication service device provided by an embodiment of the present invention;

[0027] Figure 7 A schematic diagram of the structure of an electronic certificate scanning real-name authentication service device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0028] The present invention provides a method, device, equipment and storage medium for real-name authentication service by scanning a code for an electronic certificate, which simplifies the business process, saves users' time and energy, improves users' sense of experience, effectively reduces security risks in the process of information transmission, ensures the integrity and confidentiality of data, and facilitates management departments to manage data and improves traceability.

[0029] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "including" or "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0030] For ease of understanding, the specific process of the embodiment of the present invention is described below. Figure 1 An embodiment of the electronic certificate scanning real-name authentication service method in the embodiment of the present invention includes:

[0031] 101. Build a cloud-based verification platform connected to the official database to obtain the QR code scan information on the user's electronic certificate;

[0032] In this embodiment, a suitable cloud platform is selected according to demand, and the organization and configuration of cloud servers, storage, databases and other resources are determined to ensure scalability and security. An API interface is established with the official database to securely obtain and update data, and a QR code scanning and parsing function is developed. When the salesperson scans the QR code scanning information on the user's electronic certificate, the QR code scanning information on the user's electronic certificate is obtained.

[0033] 102. Upload the QR code scan information to the cloud verification platform for information comparison, obtain the comparison result, and verify the authenticity and validity of the user's electronic certificate based on the comparison result;

[0034] In this embodiment, the QR code scanning information is parsed to obtain data information contained in the QR code scanning information, such as identity card number, name, expiration date, etc. The scanned QR code information is uploaded to the cloud server via an encrypted transmission protocol (such as HTTPS). The cloud server receives the data and stores it in a secure data storage system. The cloud verification platform accesses the official database or data source, performs real-time query based on the uploaded QR code information, and uses a pre-defined comparison algorithm or logic to compare the uploaded QR code information with the corresponding records in the database to verify its authenticity and validity, and generates corresponding verification results based on the comparison results, such as authentication passed, authentication failed, and other states.

[0035] 103. When the user's electronic certificate is authentic and valid, extract the personal information in the user's electronic certificate, encrypt the personal information, and obtain encrypted information;

[0036] In this embodiment, when the user's electronic certificate is authentic and valid, personal information that needs to be encrypted, such as name, ID number, validity period, etc., is extracted from the verified electronic certificate, and the data is formatted to ensure that the extracted personal information complies with the specified data format and standards for subsequent encryption processing. A suitable encryption algorithm is selected according to security requirements, such as AES (Advanced Encryption Standard), RSA (asymmetric encryption algorithm), etc., and a suitable encryption key is generated or selected to ensure the secure storage and management of the key. The extracted personal information is encrypted using the selected encryption algorithm and key, and the encrypted personal information is converted into ciphertext form in preparation for storage or transmission.

[0037] 104. Transmit the encrypted information to the business system, decrypt the encrypted information, and obtain decrypted information;

[0038] In this embodiment, a secure transmission channel is used to package or encapsulate the encrypted information, and an appropriate network protocol and a secure transport layer are used to ensure the secure transmission of data to prevent man-in-the-middle attacks or data tampering. After the business system receives the encrypted data packet, it unpacks or parses it to extract the encrypted information. According to the algorithm and key selected during encryption, the corresponding decryption algorithm is used to perform decryption operations, and a special decryption service or module is called to pass the encrypted data and the key required for decryption. The decryption service uses the correct key and decryption algorithm to decrypt the received encrypted data.

[0039] 105. Generate real-name authentication information according to the decrypted information, and record the generation process of the real-name authentication information to obtain a real-name authentication record;

[0040] In this embodiment, data required for real-name authentication, such as name, ID number, date of birth, etc., is extracted from the decrypted information to ensure that the data extracted from the decrypted information is complete and valid and meets the requirements of real-name authentication. The information required for real-name authentication (such as name, ID number, authentication time, authentication results, etc.) is recorded in the system's real-name authentication record database or log, and a unique identifier is generated for each real-name authentication record or the unique identifier in the decrypted information is used to facilitate subsequent query and management.

[0041] In an embodiment of the present invention, the salesperson will carry a mobile service terminal equipped with code scanning and recognition technology when visiting the customer's home. The terminal can directly scan the QR code information on the user's electronic certificate, quickly identify and read the user's information, and thus complete the real-name authentication process. The user does not need to go to the service window in person to queue up and wait, which simplifies the business process, saves the user's time and energy, and improves the user's experience. The relevant information is securely encrypted and transmitted to the business system, which effectively reduces the security risks in the information transmission process, ensures the integrity and confidentiality of the data, and facilitates data management by the management department. Blockchain technology is used to record each real-name authentication transaction to ensure that the data cannot be tampered with, meeting the requirements of regulatory transparency and traceability.

[0042] See also Figure 2 The second embodiment of the electronic certificate scanning real-name authentication service method in the embodiment of the present invention includes:

[0043] 201. Select a distributed database architecture and build a cloud verification platform based on the distributed database architecture;

[0044] In this embodiment, the functional requirements of the cloud verification platform are determined, such as user authentication, data storage, access control, etc., the number of users that the platform needs to support, the concurrent access volume, and the response time requirements are defined, and a suitable data model is designed according to the demand analysis, such as a relational, document, or graph database. A distributed database technology suitable for the platform requirements is selected, such as Cassandra, MongoDB, Amazon DynamoDB, etc., and it is determined how to split and distribute data to improve read and write efficiency and load balancing. The consistency level (strong consistency, eventual consistency, etc.) and fault-tolerant mechanism of the distributed database are designed to ensure high availability. Data replication strategies and backup plans are formulated to ensure data security and recoverability. A cloud service provider suitable for business needs is selected (such as AWS, Azure, Google Cloud, etc.), and the database services, computing resources, and network services provided by the cloud platform are used to support the implementation of the distributed database architecture. The cloud verification platform is constructed and deployed.

[0045] 202. Connect the cloud verification platform with the official database through the API interface;

[0046] In this embodiment, it is clear which data the cloud verification platform needs to obtain from the official database or which operations it needs to perform, such as user information, authorization status, etc., and an API interface is designed according to the requirements, including request methods (GET, POST, etc.), parameters (such as authentication tokens), return data formats (JSON, XML, etc.), etc., to ensure that the cloud verification platform can only access necessary official database data to avoid data leakage or abuse. API interface endpoints are developed to process requests from the cloud verification platform and interact with the official database to ensure data format compatibility between the cloud verification platform and the official database, and data conversion or mapping is required.

[0047] 203. Obtain the QR code scanning information on the user's electronic certificate;

[0048] In this embodiment, it is determined which electronic certificates need to be obtained, such as identity cards, driver's licenses, etc., obtain the QR code scanning information from the scanning device, use the HTTPS protocol to encrypt data transmission to prevent data from being eavesdropped or tampered with during transmission, extract data from the scanned QR code scanning information, and perform necessary format verification and parsing.

[0049] 204. Preprocess the QR code scan information using a hash function to obtain preprocessed information;

[0050] In this embodiment, a suitable hash function is selected. For example, SHA-256 is a commonly used and highly secure hash algorithm, which can convert input data of any length into a hash value of a fixed length (256 bits or 32 bytes). The original information obtained from the QR code scan is used as input, and hash calculation is performed through the selected hash function. For example, the SHA-256 hash function is used to convert the QR code scan information into a hash value of a fixed length. The hash function can perform an irreversible conversion on the data, which means that the original data cannot be reversely derived from the hash value. Therefore, even if the hashed information is leaked, the original QR code scan information will not be leaked. The hash function can detect whether the data has been tampered with. The integrity of the data can be verified by recalculating the hash value and comparing it with the stored hash value.

[0051] 205. Generate a unique identifier based on the preprocessing information;

[0052] In this embodiment, from the previous steps, the QR code scanning information has been preprocessed using a hash function to obtain a hash value or preprocessed information, and a unique identifier is generated based on the preprocessed information. This identifier can be a string, UUID (Universally Unique Identifier), hash value, etc., and the generated identifier must be unique in the entire system. This can be ensured by using a globally unique identifier (such as UUID) or combining the preprocessed information with a timestamp, etc. Specifically, a unique identifier is generated by combining the preprocessed hash value with the current timestamp, which can ensure that the identifier generated at the same time is unique.

[0053] 206. Upload the unique identifier to the cloud verification platform;

[0054] In this embodiment, in the previous steps, a unique identifier has been generated, which can be a string, UUID or other form of identifier. A suitable cloud verification platform is selected to ensure that the platform can meet the requirements of security, performance and scalability. The generated unique identifier is sent to the cloud verification platform through the API or upload interface provided by the platform. After receiving the identifier, the cloud verification platform will perform corresponding verification operations.

[0055] 207. Use a fuzzy matching algorithm to compare the unique identifier with the corresponding hash value stored in the official database to obtain a comparison result;

[0056] In this embodiment, the stored hash value is obtained from the official database, and a suitable fuzzy matching algorithm is selected to compare the unique identifier and the hash value in the official database, including edit distance, Jaccard similarity, cosine similarity, etc. The unique identifier is compared with the hash value in the official database, and the fuzzy matching algorithm calculates the similarity or distance between them. According to the specific application scenario and algorithm characteristics, a threshold is set to determine the degree of matching. For example, a similarity threshold is set, and the match is considered successful only when the similarity is higher than the threshold, and the actual situation of successful or unsuccessful matching is generated as a comparison result.

[0057] 208. Verify the authenticity and validity of the user's electronic certificate based on the comparison results;

[0058] In this embodiment, a corresponding verification report or status is generated based on the comparison result, which can be a simple pass or fail result. When the comparison result is pass, the user's electronic certificate is authentic and valid.

[0059] In the embodiment of the present invention, selecting a distributed database architecture can improve the scalability and fault tolerance of the system, can process large-scale data and support high concurrent access, enhance the stability and performance of the system, connect the cloud verification platform with the official database through the API interface, ensure that the system can obtain the latest official data in real time, use a hash function to pre-process the QR code scan information, and generate a unique identifier. This method effectively converts the information provided by the user into a format that the system can process, ensures the uniqueness and consistency of the information, uploads it to the cloud verification platform using a hash function and a unique identifier, and compares it with the hash value in the official database through a fuzzy matching algorithm, ensuring the security and tamper-proof ability of the data, verifies the authenticity and validity of the user's electronic certificate based on the comparison results, and improves the user's operational convenience and experience through an automated verification process.

[0060] See also Figure 3 The third embodiment of the electronic certificate scanning real-name authentication service method in the embodiment of the present invention includes:

[0061] 301. When the user's electronic certificate is authentic and valid, identify the text information in the user's electronic certificate;

[0062] In this embodiment, when the user's electronic certificate is authentic and valid, various necessary text information is extracted from the electronic certificate, such as name, certificate number, validity period, issuing agency and other key data. The extracted text information needs to be further verified for accuracy and consistency, which can be achieved by comparing it with a known standard format and performing format conversion to ensure that the identified data matches the expected structure and format.

[0063] 302. Use natural language processing technology to perform semantic understanding and structural processing on text information to obtain structured semantic information;

[0064] In this embodiment, the original text is cleaned and preprocessed, which includes operations such as removing special characters, stop words (such as meaningless words like "de", "shi", etc.), word lemmatization or stemming, etc., to reduce noise and simplify subsequent processing steps. Then syntactic analysis is performed, that is, the process of analyzing the sentence structure, including identifying the various components in the sentence (such as the subject, predicate, object, etc.) and the relationships between them. This step helps to understand the basic structure and grammar rules of the sentence. Then semantic role labeling is carried out, specifically referring to identifying the core verb in the sentence and the related semantic roles (such as the agent, patient, time, place, etc.) to help understand the semantic content of the sentence. Then entity recognition is performed, which means identifying the named entities with specific meanings in the text, such as person names, place names, organization names, dates, etc., and identifying and extracting the relationships between entities in the text, such as "X is a part of Y", "X occurs after Y", etc., to construct a deeper semantic understanding, and outputting the text information that has undergone semantic understanding and structured processing into a structured data format.

[0065] 303. Obtain a blank template for personal information, and fill the structured semantic information into the corresponding fields in the blank template for personal information to obtain personal information.

[0066] In this embodiment, a blank template for personal information is prepared, which is a table or form containing various fields for recording personal information, such as name, gender, birthday, address, contact information, educational background, work experience, etc. The structured information extracted from the text is filled into the corresponding fields according to the predefined personal information template. For example, the name is filled into the name field of the template, the birthday is filled into the birthday field, the contact information is filled into the contact information field, and so on. After completing the information filling, structured data containing complete personal information is generated.

[0067] 304. Based on the encryption algorithm, use the public key in the preset key pair to encrypt the personal information to obtain encrypted information.

[0068] In this embodiment, a suitable encryption algorithm is selected, such as RSA (asymmetric encryption algorithm), to generate a key pair, including a public key and a private key. The private key is used to decrypt the information, and the public key is used to encrypt the personal information. The encryption process takes the plaintext data (unencrypted data) and the public key as inputs and generates encrypted text (ciphertext).

[0069] 305. Transmit the encrypted information to the business system and identify the business certificate provided by the business system.

[0070] In this embodiment, the encrypted information is transmitted to the business system using a secure transmission protocol, such as HTTPS, to ensure that the data is encrypted and protected during transmission. The business system will provide a list of certificates issued by a certificate authority or a trusted root certificate for identity verification and authorization.

[0071] 306. Determine whether the business certificate has decryption authority;

[0072] In this embodiment, the detailed information of the business certificate is checked to determine whether the certificate is issued by a trusted certificate authority. This can be achieved by verifying the certificate chain (certificate authority signature chain) to ensure the legitimacy and validity of the certificate and determine whether the business certificate has decryption authority.

[0073] 307. If yes, the private key in the key pair is sent to the business system, and the encrypted information is decrypted using the private key to obtain the decrypted information;

[0074] In this embodiment, if the business certificate has decryption authority, the private key in the key pair is sent to the business system, and the encrypted information is decrypted using the private key to obtain the decrypted information.

[0075] 308. Perform integrity check on the decrypted information;

[0076] In this embodiment, the integrity check of the decrypted information is intended to verify whether the data remains intact after decryption and has not been modified without authorization. Specifically, a message authentication code (MAC) or a digital signature is used to ensure the integrity of the decrypted data. A MAC is a fixed-length value calculated by using a key and a hash function, and is used to verify whether the data has been tampered with. A digital signature is a signature of the hash value of the data using a private key. The recipient can use a public key to verify the integrity and authenticity of the signature.

[0077] In the embodiment of the present invention, it is ensured that only authentic and valid electronic certificates will continue to be processed, invalid information is prevented from entering the system, and the reliability and security of the system are improved. Natural language processing technology is used to convert text information into structured semantic information, which improves the readability and processability of the information and reduces the need for manual processing. The semantic information is filled into the personal information template, and personal information is generated in a standardized manner to ensure the consistency and accuracy of the information. An encryption algorithm is used to encrypt the personal information to protect the security of private data and prevent the information from being illegally obtained or tampered with during transmission and storage. The encrypted information is transmitted to the business system and the authority is verified according to the business certificate to ensure that only the system with decryption authority can perform the decryption operation, thereby enhancing the security and controllability of the system. If the decryption authority is authorized, the encrypted information is decrypted using the private key, and then an integrity check is performed to ensure that the decrypted data is consistent with the original data to prevent data tampering or damage.

[0078] See also Figure 4 The fourth embodiment of the electronic certificate scanning real-name authentication service method in the embodiment of the present invention includes:

[0079] 401. Determine the target parameter format in the business system;

[0080] In this embodiment, a target parameter format in the business system is determined, and the target parameter format is predefined.

[0081] 402. Generate real-name authentication information that complies with the target parameter format based on the decrypted information;

[0082] In this embodiment, based on the specification of the target parameter format, the real-name authentication information is generated according to the decrypted information.

[0083] 403. Record the generation process of the real-name authentication information to obtain a real-name authentication record;

[0084] In this embodiment, the content of the real-name authentication information is determined, including which fields are recorded (such as name, ID number, authentication time, etc.), the data format and data type of each field, and the format and structure of the real-name authentication record are defined. You can choose to use JSON, XML, CSV and other formats to store the records. For each record field, provide detailed instructions and definitions, and record the specific logic and algorithm for generating the real-name authentication information, including how to extract information from decrypted information or other sources, how to clean and verify data, how to handle abnormal situations, etc. Record abnormal situations and error handling strategies that occur in the process of generating real-name authentication information. For example, if the decrypted information is incomplete or in the wrong format, record the remedial measures taken or the strategy of requesting more information from the user.

[0085] 404. Based on the generation time of the real-name authentication information, obtain a timestamp from the timestamp service platform;

[0086] In this embodiment, the time point when the real-name authentication information is generated, that is, the time when the authentication information is completed, is simultaneously sending a timestamp request to the selected timestamp service platform, receiving and processing the response returned by the timestamp service platform, and obtaining the timestamp of the authentication information completion time.

[0087] 405. Receive the real-name authentication result fed back by the business system;

[0088] In this embodiment, an interface for the business system to return the real-name authentication result is determined, and the real-name authentication result fed back by the business system is received.

[0089] 406. Determine whether the real-name authentication result is successful;

[0090] In this embodiment, after receiving the real-name authentication result data from the business system, information related to the authentication result is extracted, including the authentication status (success, failure, etc.), authentication time, verification details, etc., and parsed according to the authentication status field returned by the business system, such as success or failure, and the parsed authentication status is compared with the predefined authentication success standard to determine whether the real-name authentication result is successful.

[0091] 407. If yes, upload the timestamp and the real-name authentication record to the blockchain;

[0092] In this embodiment, if the real-name authentication result is successful, a blockchain platform suitable for the business needs is selected, and a new transaction is created on the selected blockchain. The timestamp and real-name authentication record data are used as part of the transaction. The transaction is signed using the relevant authentication key to ensure the legality and security of the transaction. The signed transaction is broadcast to the selected blockchain network, and the miner nodes in the blockchain network are waited for to confirm the transaction. After confirmation, the transaction will be added to the block of the blockchain and become an unalterable record on the blockchain. The hash value of the transaction is obtained, which is the unique identifier of the transaction on the blockchain. The hash value can be used to verify whether the transaction is successful and retrieve the authentication record stored on the blockchain. Once the transaction is confirmed and the data is uploaded to the blockchain, the authentication record can be accessed and verified through the blockchain browser or a specific query interface, which provides a guarantee of the unalterability and openness and transparency of the data.

[0093] In the embodiment of the present invention, the target parameter format in the business system is determined, indicating that a clear business goal is set at the beginning of the entire process. Real-name authentication information that conforms to the target parameter format is generated based on the decrypted information, and the generation process is recorded to obtain a real-name authentication record. This recording and traceability capability is very important for subsequent review, audit and error correction, and helps to maintain the integrity and reliability of the data. Timestamp and blockchain technology provide a high degree of security and tamper-proof capabilities, ensuring the immutability and time proof of real-name authentication information. Timely feedback and result judgment can ensure that users obtain accurate feedback in a timely manner during the real-name authentication process, improving user experience and convenience of operation. Timestamps and real-name authentication records are uploaded to the blockchain. By utilizing the scalability and security of blockchain technology, a large number of real-name authentication records can be effectively managed and stored, while ensuring the security and reliability of the data.

[0094] The electronic certificate code scanning real-name authentication service method in the embodiment of the present invention is described above. The electronic certificate code scanning real-name authentication service device in the embodiment of the present invention is described below. Figure 5 In one embodiment of the present invention, an electronic certificate scanning real-name authentication service device includes:

[0095] Constructing an acquisition module 501, which is used to construct a cloud verification platform connected to an official database to obtain the QR code scanning information on the user's electronic certificate;

[0096] The comparison and verification module 502 is used to upload the QR code scan information to the cloud verification platform for information comparison, obtain the comparison result, and verify the authenticity and validity of the user's electronic certificate according to the comparison result;

[0097] The extraction and encryption module 503 is used to extract the personal information in the user's electronic certificate when the user's electronic certificate is authentic and valid, and encrypt the personal information to obtain encrypted information;

[0098] The transmission decryption module 504 is used to transmit the encrypted information to the business system, decrypt the encrypted information, and obtain the decrypted information;

[0099] The record generation module 505 is used to generate real-name authentication information according to the decrypted information, and record the generation process of the real-name authentication information to obtain a real-name authentication record.

[0100] In this embodiment, the salesperson will carry a mobile service terminal equipped with code scanning and recognition technology when visiting the customer's home. The terminal can directly scan the QR code information on the user's electronic certificate, quickly identify and read the user's information, and thus complete the real-name authentication process. The user does not need to go to the service window in person to queue up and wait, which simplifies the business process, saves the user's time and energy, and improves the user experience. The relevant information is securely encrypted and transmitted to the business system, which effectively reduces the security risks in the information transmission process, ensures the integrity and confidentiality of the data, and facilitates data management by the management department. Blockchain technology is used to record each real-name authentication transaction to ensure that the data cannot be tampered with, meeting the requirements of regulatory transparency and traceability.

[0101] See also Figure 6 Another embodiment of the electronic certificate scanning real-name authentication service device in the embodiment of the present invention includes:

[0102] Constructing an acquisition module 501, which is used to construct a cloud verification platform connected to an official database to obtain the QR code scanning information on the user's electronic certificate;

[0103] The comparison and verification module 502 is used to upload the QR code scan information to the cloud verification platform for information comparison, obtain the comparison result, and verify the authenticity and validity of the user's electronic certificate according to the comparison result;

[0104] The extraction and encryption module 503 is used to extract the personal information in the user's electronic certificate when the user's electronic certificate is authentic and valid, and encrypt the personal information to obtain encrypted information;

[0105] The transmission decryption module 504 is used to transmit the encrypted information to the business system, decrypt the encrypted information, and obtain the decrypted information;

[0106] A record generation module 505 is used to generate real-name authentication information according to the decrypted information, and record the generation process of the real-name authentication information to obtain a real-name authentication record;

[0107] In this embodiment, constructing the acquisition module 501 includes: selecting a construction unit 5011, which is used to select a distributed database architecture and construct a cloud verification platform based on the distributed database architecture; a docking unit 5012, which is used to dock the cloud verification platform with the official database through an API interface; and an acquisition unit 5013, which is used to obtain the QR code scan information on the user's electronic certificate.

[0108] In this embodiment, the comparison and verification module 502 includes: a preprocessing unit 5021, which is used to preprocess the QR code scanning information using a hash function to obtain preprocessed information; a first generation unit 5022, which is used to generate a unique identifier based on the preprocessed information; an upload unit 5023, which is used to upload the unique identifier to the cloud verification platform; a comparison unit 5024, which is used to compare the unique identifier with the corresponding hash value stored in the official database using a fuzzy matching algorithm to obtain a comparison result; a verification unit 5025, which is used to verify the authenticity and validity of the user's electronic certificate based on the comparison result.

[0109] In this embodiment, the extraction encryption module 503 includes: an identification unit 5031, which is used to identify the text information in the user's electronic certificate when the user's electronic certificate is authentic and valid; an understanding processing unit 5032, which is used to use natural language processing technology to perform semantic understanding and structured processing on the text information to obtain structured semantic information; an acquisition and filling unit 5033, which is used to obtain a blank template of personal information, fill the structured semantic information into the corresponding fields in the blank template of personal information, and obtain personal information; an encryption unit 5034, which is used to encrypt the personal information based on an encryption algorithm using a public key in a preset key pair to obtain encrypted information.

[0110] In this embodiment, the transmission decryption module 504 includes: a transmission identification unit 5041, which is used to transmit encrypted information to the business system and identify the business certificate provided by the business system; a judgment unit 5042, which is used to judge whether the business certificate has decryption authority; a sending decryption unit 5043, which is used to send the private key in the key pair to the business system if so, and use the private key to decrypt the encrypted information to obtain decrypted information; a verification unit 5044, which is used to perform integrity verification on the decrypted information.

[0111] In this embodiment, the generation record module 505 includes: a determination unit 5051, used to determine the target parameter format in the business system; a second generation unit 5052, used to generate real-name authentication information that conforms to the target parameter format based on the decrypted information; a recording unit 5053, used to record the generation process of the real-name authentication information to obtain a real-name authentication record.

[0112] In this embodiment, it also includes: a generation and acquisition module 506, which is used to obtain a timestamp from a timestamp service platform based on the generation time of the real-name authentication information; a receiving module 507, which is used to receive the real-name authentication result fed back by the business system; a judgment module 508, which is used to judge whether the real-name authentication result is a successful authentication; and an upload module 509, which is used to upload the timestamp and real-name authentication record to the blockchain if so.

[0113] above Figure 5 and Figure 6 The electronic certificate code scanning real-name authentication service device in the embodiment of the present invention is described in detail from the perspective of modular functional entities. The electronic certificate code scanning real-name authentication service device in the embodiment of the present invention is described in detail from the perspective of hardware processing.

[0114] Figure 7 6 is a structural diagram of an electronic certificate code scanning real-name authentication service device provided by an embodiment of the present invention. The electronic certificate code scanning real-name authentication service device 600 may have relatively large differences due to different configurations or performances, and may include one or more processors (central processing units, CPU) 610 (for example, one or more processors) and a memory 620, and one or more storage media 630 (for example, one or more mass storage devices) storing application programs 633 or data 632. Among them, the memory 620 and the storage medium 630 can be temporary storage or permanent storage. The program stored in the storage medium 630 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations in the electronic certificate code scanning real-name authentication service device 600. Furthermore, the processor 610 can be configured to communicate with the storage medium 630, and execute a series of instruction operations in the storage medium 630 on the electronic certificate code scanning real-name authentication service device 600 to implement the steps of the electronic certificate code scanning real-name authentication service method provided by the above-mentioned various method embodiments.

[0115] The electronic certificate scanning real-name authentication service device 600 may also include one or more power supplies 640, one or more wired or wireless network interfaces 650, one or more input and output interfaces 660, and / or one or more operating systems 631, such as Windows Serve, Mac OS X, Unix, Linux, FreeBSD, etc. Those skilled in the art will appreciate that Figure 7 The structure of the electronic certificate code scanning real-name authentication service device shown does not constitute a limitation on the electronic certificate code scanning real-name authentication service device, and may include more or fewer components than shown in the figure, or a combination of certain components, or a different arrangement of components.

[0116] The present invention also provides a computer-readable storage medium, which may be a non-volatile computer-readable storage medium or a volatile computer-readable storage medium. Instructions are stored in the computer-readable storage medium. When the instructions are executed on a computer, the computer executes the steps of the electronic certificate scanning real-name authentication service method.

[0117] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the above-described system, device, or unit can refer to the corresponding process in the aforementioned method embodiment and will not be repeated here.

[0118] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program codes.

[0119] Finally, it should be noted that the above description is only a preferred example of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A real-name authentication service method for electronic certificate scanning, characterized in that: include: Build a cloud-based verification platform connected to the official database to obtain the QR code scan information on the user's electronic certificate; Upload the QR code scan information to the cloud verification platform for information comparison to obtain a comparison result, and verify the authenticity and validity of the user's electronic certificate based on the comparison result; When the user electronic certificate is authentic and valid, extracting personal information from the user electronic certificate, encrypting the personal information, and obtaining encrypted information; Transmitting the encrypted information to a business system, decrypting the encrypted information, and obtaining decrypted information; Real-name authentication information is generated according to the decrypted information, and a generation process of the real-name authentication information is recorded to obtain a real-name authentication record.

2. The electronic certificate scanning real-name authentication service method according to claim 1 is characterized in that: The cloud verification platform connected to the official database is constructed to obtain the QR code scanning information on the user's electronic certificate, including: Select a distributed database architecture and build a cloud verification platform based on the distributed database architecture; Connect the cloud verification platform to the official database via an API interface; Get the QR code scan information on the user's electronic certificate.

3. The electronic certificate scanning real-name authentication service method according to claim 1, characterized in that: The uploading of the QR code scan information to the cloud verification platform for information comparison to obtain a comparison result, and verifying the authenticity and validity of the user's electronic certificate according to the comparison result, includes: Preprocessing the two-dimensional code scanning information by using a hash function to obtain preprocessing information; generating a unique identifier based on the preprocessed information; Uploading the unique identifier to the cloud verification platform; Using a fuzzy matching algorithm, the unique identifier is compared with a corresponding hash value stored in the official database to obtain a comparison result; The authenticity and validity of the user's electronic certificate are verified based on the comparison result.

4. The electronic certificate scanning real-name authentication service method according to claim 1, characterized in that: When the user electronic certificate is authentic and valid, extracting personal information from the user electronic certificate, encrypting the personal information to obtain encrypted information, including: When the user electronic certificate is authentic and valid, identifying text information in the user electronic certificate; Using natural language processing technology to perform semantic understanding and structural processing on the text information to obtain structured semantic information; Obtaining a blank template of personal information, and filling the structured semantic information into corresponding fields in the blank template of personal information to obtain personal information; Based on the encryption algorithm, the personal information is encrypted using the public key in the preset key pair to obtain encrypted information.

5. The electronic certificate scanning real-name authentication service method according to claim 1, characterized in that: The step of transmitting the encrypted information to the business system and decrypting the encrypted information to obtain decrypted information includes: Transmitting the encrypted information to a business system and identifying a business certificate provided by the business system; Determine whether the business certificate has decryption authority; If yes, the private key in the key pair is sent to the business system, and the encrypted information is decrypted using the private key to obtain decrypted information; An integrity check is performed on the decrypted information.

6. The electronic certificate scanning real-name authentication service method according to claim 1, characterized in that: Generating the real-name authentication information according to the decrypted information, and recording the generation process of the real-name authentication information to obtain the real-name authentication record, includes: Determining a target parameter format in the business system; Generate real-name authentication information that conforms to the target parameter format according to the decrypted information; The generation process of the real-name authentication information is recorded to obtain a real-name authentication record.

7. The electronic certificate scanning real-name authentication service method according to claim 1, characterized in that: The method further comprises: generating the real-name authentication information according to the decrypted information, and recording the generation process of the real-name authentication information, and obtaining the real-name authentication record; Obtaining a timestamp from a timestamp service platform based on the generation time of the real-name authentication information; Receiving the real-name authentication result fed back by the business system; Determine whether the real-name authentication result is successful; If yes, the timestamp and the real-name authentication record are uploaded to the blockchain.

8. An electronic certificate scanning real-name authentication service device, characterized in that: include: Build an acquisition module to build a cloud-based verification platform connected to the official database to obtain the QR code scan information on the user's electronic certificate; A comparison and verification module, used to upload the QR code scan information to the cloud verification platform for information comparison, obtain a comparison result, and verify the authenticity and validity of the user's electronic certificate according to the comparison result; An extraction and encryption module, used for extracting personal information from the user's electronic certificate when the user's electronic certificate is authentic and valid, and encrypting the personal information to obtain encrypted information; A transmission and decryption module, used to transmit the encrypted information to the business system, decrypt the encrypted information, and obtain decrypted information; The record generation module is used to generate real-name authentication information according to the decrypted information, and record the generation process of the real-name authentication information to obtain a real-name authentication record.

9. An electronic certificate scanning real-name authentication service device, characterized in that: The electronic certificate scanning real-name authentication service device comprises: a memory and at least one processor, wherein the memory stores instructions; At least one of the processors calls the instructions in the memory to enable the electronic certificate code scanning real-name authentication service device to perform each step of the electronic certificate code scanning real-name authentication service method as described in any one of claims 1-7.

10. A computer-readable storage medium having instructions stored thereon, characterized in that: When the instruction is executed by the processor, each step of the electronic certificate scanning real-name authentication service method as described in any one of claims 1 to 7 is implemented.

Images