License security management method, system and device and storage medium

Abstract

The embodiment of the invention discloses a security management method, system and device for a license and a storage medium, and relates to the field of computer technology and finance, and the method comprises the steps: obtaining the biological feature information of an associated license holding user of a target license, comparing the biological feature information with the registered biological feature information, and sending the comparison result to a server; and under the condition that the comparison result indicates that the biological characteristic information is matched with the registered biological characteristic information, acquiring first position information and second position information of the target license. According to the first position information and the second position information, the risk level of the target license is determined, and the corresponding security management measures are determined based on the risk level, so that the security management of the license can be improved, and the financial risk caused by the abnormality of the license is reduced.

Description

Technical Field

[0001] The present application relates to the fields of computer technology and finance, and in particular to a method, system, device and storage medium for secure management of certificates and licenses. Background Art

[0002] With the continuous progress of the financial industry, the mortgage and release of financial assets are key operating procedures in the financial market, which are of great significance for ensuring the security of transactions, promoting capital flow and maintaining market order. Taking financial leasing companies as an example, in key operating procedures such as mortgage and release of mortgage, users need to provide corresponding certificates such as business licenses, registration and filing certificates, etc. However, in related technologies, there is a lack of security management measures for the certificates provided by financial leasing companies, which brings serious security risks to financial assets.

[0003] Application Contents

[0004] In view of this, one of the purposes of this application is to provide a method, system, device and storage medium for the safe management of certificates, which can achieve the safe management of certificates and reduce the security risks to users' financial assets caused by improper certificate management.

[0005] To achieve the above purpose, the technical solution of this application is implemented as follows:

[0006] In a first aspect, an embodiment of the present application provides a method for secure management of a certificate, including:

[0007] Obtain biometric information of the user associated with the target certificate;

[0008] Comparing the biometric information with the registered biometric information to obtain a comparison result;

[0009] When the comparison result indicates that the biometric information matches the registered biometric information, obtaining first location information and second location information of the target certificate, wherein the first location information includes location information of a mobile terminal used by the associated certificate holder to upload the biometric information, and the second location information includes location information of a positioning module in a folder storing the target certificate;

[0010] Determining a risk level of the target certificate based on the first location information and the second location information;

[0011] Based on the risk level, determine the corresponding security management measures. The risk level is used to characterize the degree of risk in the use of the target license.

[0012] In a possible implementation, obtaining the first location information and the second location information of the target certificate includes:

[0013] Get the target certificate number;

[0014] According to the certificate number and a preset mapping relationship, the first location information and the second location information are determined from the target cache area, wherein the preset mapping relationship includes a mapping relationship between the certificate number and the first location information and the second location information, and the target cache area is used to store the first location information and the second location information.

[0015] In a possible implementation, a short-distance communication sensing tag is attached to the target certificate, and the certificate number is stored in the short-distance communication sensing tag. Obtaining the certificate number of the target certificate includes:

[0016] Acquire sensing information obtained by the associated licensed user controlling the mobile terminal to approach the short-range communication sensing tag;

[0017] Determine the certificate number based on the sensing information.

[0018] In a possible implementation, determining the risk level of the target certificate according to the first location information and the second location information includes:

[0019] determining a relative distance between the first position information and the second position information;

[0020] Determine the risk level of the target certificate based on the relative distance and the preset distance threshold range.

[0021] In a possible implementation, determining the risk level of the target certificate according to the relative distance and the preset distance threshold range includes:

[0022] If the relative distance is less than or equal to the upper limit of the preset distance threshold range, the risk level is determined to be the first risk level;

[0023] If the relative distance is greater than the upper limit of the preset distance threshold range, the risk level is determined to be the second risk level;

[0024] The risk level of the first risk level is lower than the risk level of the second risk level.

[0025] In a possible implementation, the positioning module includes a first positioning module and a second positioning module, the first positioning module and the second positioning module are both arranged in a folder, and a location information transmission frequency of the first positioning module is greater than a location information transmission frequency of the second positioning module;

[0026] Determining a relative distance between the first position information and the second position information includes:

[0027] Acquire first sub-location information of the first positioning module and second sub-location information of the second positioning module;

[0028] Determining a first relative distance between the first sub-location information and the first location information, and a second relative distance between the second sub-location information and the first location information;

[0029] A relative distance is determined according to the first relative distance and the second relative distance.

[0030] In a possible implementation, a short-distance communication sensing tag is attached to the target certificate, and the relative distance is determined according to the first relative distance and the second relative distance, including:

[0031] Acquire sensing information obtained by the associated licensed user controlling the mobile terminal to approach the short-range communication sensing tag;

[0032] Determine the tag category of the short-range communication sensing tag according to the sensing information;

[0033] According to the label category, determine the target coefficient;

[0034] The relative distance is determined according to the first relative distance, the second relative distance and the target coefficient; wherein the target coefficient when the tag category is an NFC tag is greater than the target coefficient when the tag category is an RFID tag.

[0035] In a second aspect, an embodiment of the present application provides a security management system for certificates and licenses, the system comprising:

[0036] A first acquisition module is used to acquire biometric information of a user associated with a target certificate;

[0037] A comparison module, used to compare the biometric information with the registered biometric information to obtain a comparison result;

[0038] A second acquisition module is used to acquire first location information and second location information of the target certificate when the comparison result indicates that the biometric information matches the registered biometric information, wherein the first location information includes location information of a mobile terminal used by the associated certificate holder to upload the biometric information, and the second location information includes location information of a positioning module in a folder storing the target certificate;

[0039] A first determination module, used to determine the risk level of the target certificate according to the first location information and the second location information;

[0040] The second determination module is used to determine corresponding security management measures based on the risk level, and the risk level is used to characterize the degree of risk of using the target certificate.

[0041] In a third aspect, an embodiment of the present application provides an electronic device, the electronic device comprising a memory and a processor, the memory storing a computer program, and when the computer program is executed by the processor, the method for secure management of certificates provided in the first aspect is implemented.

[0042] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by one or more processors, it implements the method for secure management of certificates and licenses provided in the first aspect.

[0043] The embodiment of the present application provides a security management method for certificates, which obtains the biometric information of the associated certificate holder of the target certificate, compares the biometric information with the registered biometric information, and obtains the first position information and the second position information of the target certificate when the comparison result indicates that the biometric information matches the registered biometric information. According to the first position information and the second position information, the risk level of the target certificate is determined, and based on the risk level, the corresponding security management measures are determined, which can improve the security management of the certificate and reduce the financial risks caused by abnormal certificates. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. It should be understood that the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0045] Figure 1 A flowchart of a method for secure management of certificates and licenses provided in an embodiment of the present application;

[0046] Figure 2 A flowchart for obtaining location information included in a method for secure management of a license provided in an embodiment of the present application;

[0047] Figure 3 A brief schematic diagram of a target certificate included in a certificate security management method provided in an embodiment of the present application;

[0048] Figure 4 A flowchart of determining a relative distance included in a method for secure management of a license provided in an embodiment of the present application;

[0049] Figure 5 A schematic diagram of the functional modules of a security management system for certificates and licenses provided in an embodiment of the present application;

[0050] Figure 6A diagram of the internal structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0051] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various different configurations.

[0052] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application for which protection is sought, but merely represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0053] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0054] In various embodiments of the present application, the expression "or" or "at least one of A or / and B" includes any combination or all combinations of the words listed at the same time. For example, the expression "A or B" or "at least one of A or / and B" may include A, may include B, or may include both A and B.

[0055] In the description of the present application, it should be noted that if the terms "upper", "lower", "inside", "outside", etc. appear to indicate an orientation or position relationship, it is based on the orientation or position relationship shown in the drawings, or is the orientation or position relationship in which the product of the invention is usually placed when used. It is only for the convenience of describing the present application and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application.

[0056] In addition, the terms “first”, “second”, etc., if used, are merely used to distinguish between the descriptions and should not be understood as indicating or implying relative importance.

[0057] It should be noted that, in the absence of conflict, the features in the embodiments of the present application may be combined with each other.

[0058] Furthermore, in the embodiments of the present application, the term "connection" may refer to "electrical connection" or "direct connection". "Electrical connection" may refer to direct electrical connection between two components or electrical connection between two components via one or more normally open tubes or other components.

[0059] To facilitate a better understanding of the solutions of the embodiments of the present application, the relevant technologies are first introduced below.

[0060] Artificial intelligence (AI) is a new technical science that studies and develops theories, methods, technologies and application systems for simulating, extending and expanding human intelligence. AI is a branch of computer science that attempts to understand the essence of intelligence and produce a new type of intelligent machine that can respond in a similar way to human intelligence. Research in this field includes robotics, speech recognition, image recognition, natural language processing and expert systems. AI can simulate the information process of human consciousness and thinking. AI is also a theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0061] Natural language processing (NLP): NLP uses computers to process, understand and apply human languages ​​(such as Chinese, English, etc.). NLP is a branch of artificial intelligence and an interdisciplinary subject between computer science and linguistics. It is often referred to as computational linguistics. Natural language processing includes grammatical analysis, semantic analysis, and text understanding. Natural language processing is often used in technical fields such as machine translation, handwritten and printed character recognition, speech recognition and text-to-speech conversion, information intent recognition, information extraction and filtering, text classification and clustering, public opinion analysis and opinion mining. It involves data mining related to language processing, machine learning, knowledge acquisition, knowledge engineering, artificial intelligence research, and linguistic research related to language computing.

[0062] Information Extraction: A text processing technology that extracts specified types of entity, relationship, event and other factual information from natural language text and forms structured data output. Information extraction is a technology that extracts specific information from text data. Text data is composed of some specific units, such as sentences, paragraphs, and chapters. Text information is composed of some small specific units, such as characters, words, phrases, sentences, paragraphs, or a combination of these specific units. Extracting noun phrases, names, place names, etc. from text data are all text information extraction. Of course, the information extracted by text information extraction technology can be various types of information.

[0063] In order to solve the technical problems in the background technology, the embodiments of the present application provide a method, system, device and storage medium for secure management of certificates. The following first introduces the method for secure management of certificates provided by the embodiments of the present application.

[0064] See also Figure 1 , Figure 1 The flowchart of a certificate security management method provided in the embodiment of the present application can be applied to the certificate security management system and electronic devices in the following embodiments, wherein the electronic devices include personal computers, servers, mobile devices, cloud computing platforms, and supercomputers. The certificate security management method will be introduced from the perspective of application to electronic devices, and the method specifically includes the following steps:

[0065] Step 110, obtaining biometric information of the user associated with the target certificate.

[0066] Step 120, comparing the biometric information with the registered biometric information to obtain a comparison result.

[0067] Step 130, when the comparison result indicates that the biometric information matches the registered biometric information, obtain the first location information and the second location information of the target certificate, wherein the first location information includes the location information of the mobile terminal used by the associated certificate holder to upload the biometric information, and the second location information includes the location information of the positioning module in the folder where the target certificate is stored.

[0068] Step 140: Determine the risk level of the target certificate based on the first location information and the second location information.

[0069] Step 150, based on the risk level, determine the corresponding security management measures, the risk level is used to characterize the degree of risk of using the target certificate.

[0070] The embodiment of the present application provides a security management method for certificates, which obtains the biometric information of the associated certificate holder of the target certificate, compares the biometric information with the registered biometric information, and obtains the first position information and the second position information of the target certificate when the comparison result indicates that the biometric information matches the registered biometric information. According to the first position information and the second position information, the risk level of the target certificate is determined, and based on the risk level, the corresponding security management measures are determined, which can improve the security management of the certificate and reduce the financial risks caused by abnormal certificates.

[0071] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Among them, AI is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0072] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0073] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0074] It should be noted that in each specific implementation of the present application, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0075] The following will be Figure 1 Each step of the method is described in detail.

[0076] In step 110, the target certificates include all types of certificates used in the process of mortgaging and releasing mortgages of financial assets, such as a copy of a business license, a Class III medical device business license, a registration approval certificate, a foreign investment registration certificate, etc., which are not shown in more detail here.

[0077] Associated licensed users are users who have applied for and obtained the target license with an enterprise such as a financial leasing company.

[0078] Biometric information includes facial feature information, fingerprint information, iris information, retinal information, palm print information, etc. The embodiment of the present application can use biometric information with high recognition convenience and recognition security. In some embodiments, the biometric information is facial feature information.

[0079] The electronic device can actively obtain the biometric information of the associated certificate holder. Specifically, when the associated certificate holder has obtained the target certificate, the electronic device can send a verification instruction to the mobile terminal used by the associated certificate holder at a preset time interval. The verification instruction can be used to remind the associated certificate holder to upload the biometric information of the associated certificate holder, such as facial feature information, through the mobile terminal. The electronic device can further process the biometric information uploaded by the associated certificate holder through the mobile terminal.

[0080] The preset time interval can be set according to the security management level. For example, the higher the security management level, the shorter the corresponding preset time interval, and the lower the security management level, the longer the corresponding preset time interval. In some embodiments, the preset time interval corresponding to the high security management level is 2 hours, and the preset time interval corresponding to the low security management level is 12 hours.

[0081] In some embodiments, the associated certificate holder uploads the associated certificate holder's biometric information through a mobile terminal, including any of the following:

[0082] Upload the biometric information of the associated certificate holder through the application installed on the mobile terminal;

[0083] Open the corresponding applet through the mobile terminal to upload the biometric information of the associated certificate holder;

[0084] Open the corresponding WeChat public account through a mobile terminal and upload the biometric information of the associated certificate holder.

[0085] Specifically, financial leasing companies can independently develop corresponding applications, mini-programs, or WeChat public accounts to obtain biometric information uploaded by associated licensed users. Among them, the use of applications to obtain biometric information has higher performance requirements for the mobile terminal used by the associated licensed user, while the use of mini-programs or WeChat public accounts to obtain biometric information has lower performance requirements for the mobile terminal used by the associated licensed user.

[0086] In step 120, the registered biometric information corresponds to the biometric information introduced in the aforementioned step 110, and may also include facial feature information, fingerprint information, iris information, retina information, palm print information, etc.

[0087] For example, if the registered biometric information is facial feature information, the corresponding biometric information of the associated certified user obtained by the electronic device is also facial feature information. If the registered biometric information is fingerprint information, the corresponding biometric information of the associated certified user obtained by the electronic device is also fingerprint information.

[0088] It should be noted that the associated licensed user needs to apply for the target license from the financial leasing company before obtaining the target license. The financial leasing company can issue the target license applied for by the associated licensed user to the associated licensed user after reviewing the associated information of the associated licensed user, such as identity information, asset information, credit information, etc. In addition, during this process, the financial leasing company can obtain the biometric information of the associated licensed user and register it with the consent of the associated licensed user, and obtain the registered biometric information.

[0089] The electronic device will compare the acquired biometric information of the associated certificate holder with the registered biometric information, and can determine whether the target certificate is with the associated certificate holder, thereby playing a role in the security management of the target certificate.

[0090] Specifically, an identification code may be attached to the target certificate, and the identification code is stored in an associated relationship with the certificate number of the target certificate. The associated certificate holder needs to scan the identification code through a mobile terminal before uploading the biometric information. After successfully scanning and obtaining the identification code information associated with the certificate number, the biometric information collection phase is entered. Moreover, when the mobile terminal uploads the biometric information, the identification code information is also uploaded synchronously. In other words, the electronic device can obtain the identification code information of the identification code and the biometric information of the associated certificate holder.

[0091] In step 130, the comparison result indicates that the biometric information matches the registered biometric information, which may mean that the biometric information comparison is successful and the identity information of the associated certificate holder is successfully verified.

[0092] The first location information is the location information of the mobile terminal introduced in the above steps, and the second location information is the location information of the positioning module. In general, in order to avoid damage or breakage of the target license, financial leasing companies often place the target license in a folder and issue it to the associated licensee. The positioning module can be fixed in the folder, such as by clamping it in the folder, or by sticking it in the folder. To a certain extent, the location of the target license can be represented by the location of the positioning module.

[0093] The first location information is the location information of the mobile terminal uploaded when the mobile terminal uploads the biometric information.

[0094] In some embodiments, the positioning module includes a Global Positioning System (GPS) module or a Beidou positioning module.

[0095] In step 140, the risk level may be used to characterize the degree of risk of using the target certificate. The electronic device may determine the risk level of the target certificate based on the first location information and the second location information determined in the above steps.

[0096] Specifically, if the electronic device detects that the distance between the first location information and the second location information is far, such as more than 5 kilometers, it can mean that the target certificate is not with the associated certificate holder, and the target certificate may be at risk of being used by others. The electronic device can determine the risk level of the target certificate based on the distance between the first location information and the second location information. The farther the distance between the first location information and the second location information, the higher the risk level of the target certificate. Conversely, the risk level is lower or there is no risk level.

[0097] In step 150, the security management measures can achieve security management of the target certificate to a large extent, avoiding financial risks caused by the target certificate being used by users other than the associated certificate holder.

[0098] Specifically, electronic equipment can formulate corresponding security management measures based on different risk levels, which can realize graded management of possible usage risks of target certificates and licenses, thereby improving the rational security management of target certificates and licenses.

[0099] See also Figure 2 , Figure 2 A flowchart for obtaining location information included in a method for secure management of certificates and licenses provided in an embodiment of the present application.

[0100] In a possible implementation, obtaining the first location information and the second location information of the target certificate in step 130 includes but is not limited to steps 210 to 220:

[0101] Step 210, obtaining the certificate number of the target certificate;

[0102] Step 220, determine the first location information and the second location information from the target cache area according to the certificate number and the preset mapping relationship, wherein the preset mapping relationship includes the mapping relationship between the certificate number and the first location information and the second location information, and the target cache area is used to store the first location information and the second location information.

[0103] The embodiment of the present application can relieve the data processing pressure of the electronic device by storing the first location information and the second location information in the target buffer area in the above embodiment. In addition, the electronic device can decide whether to obtain the first location information and the second location information based on the pre-filtering condition of the certificate number, that is, if the electronic device does not obtain the certificate number of the target certificate, it does not need to determine the first location information and the second location information from the target buffer area, which further relieves the data processing pressure of the electronic device.

[0104] Specifically, each target license corresponds to a license number, and the license number is unique and non-repetitive. In addition, if the target license is a copy of a license, such as a copy of a business license, there may be a situation where the license numbers of multiple target licenses are the same.

[0105] The method for obtaining the certificate number can be as described in the above-mentioned embodiment, that is, the associated certificate holder uses a mobile terminal to scan the identification code affixed to the target certificate to obtain the identification code information, and there is an association between the identification code information and the certificate number of the target certificate. Through this association, the certificate number of the target certificate can be determined.

[0106] The preset mapping relationship includes a one-to-many mapping relationship between the certificate number and the first location information and the second location information.

[0107] In some embodiments, the preset mapping relationship may also be constrained by setting a time feature.

[0108] Specifically, the first location information and the second location information are uploaded separately. The electronic device can obtain the upload timestamp of the first location information and the upload timestamp of the second location information. If the interval between the two upload timestamps is greater than 12 hours, it can indicate that the time interval between the first location information and the second location information is too long. The location information uploaded first of the two location information can be deemed invalid. There is no mapping relationship between the license number and the location information uploaded first, and there is only a mapping relationship between the license number and the location information uploaded later of the two location information.

[0109] In a possible implementation, a short-distance communication sensing tag is attached to the target certificate, and the certificate number is stored in the short-distance communication sensing tag. Obtaining the certificate number of the target certificate includes:

[0110] Acquire sensing information obtained by the associated licensed user controlling the mobile terminal to approach the short-range communication sensing tag;

[0111] Determine the certificate number based on the sensing information.

[0112] In this embodiment, by attaching a short-distance communication sensing tag on the target certificate, the associated certificate-holding user only needs to place the mobile terminal within the sensing range of the short-distance communication sensing tag to obtain sensing information including the certificate number of the target certificate. As mentioned above, after obtaining the identification code information associated with the certificate number, the biometric information collection stage is entered. Accordingly, this embodiment can enter the biometric information collection stage after obtaining the sensing information including the certificate number, which improves the convenience of users uploading biometric information.

[0113] It should be noted that the mobile terminal has the function of sensing the short-range communication sensing tag.

[0114] In some embodiments, the near-field communication sensing tag includes at least one of an NFC tag and an RFID tag. In addition, both the NFC tag and the RFID tag can be attached to the back of the target certificate, without blocking the target certificate and affecting the normal use of the target certificate. Specifically, both the NFC tag and the RFID tag can be fragile tags. If the fragile tag is torn, it will be invalid and cannot be sensed by a mobile terminal with a sensing function to obtain sensing information. On the other hand, it also indicates that the target certificate is at risk of being damaged, and the electronic device can formulate corresponding security management measures accordingly.

[0115] See also Figure 3 , Figure 3 A simplified schematic diagram of a target certificate included in a certificate security management method provided in an embodiment of the present application. The S area, i.e., the dotted box area, is the back of the target certificate, and the S area can be used to attach a short-range communication sensing tag. "xxx" can represent the certificate number of the target certificate.

[0116] In some embodiments, when the sensing information is encrypted, the electronic device can identify the encryption method and determine a suitable decryption method, and after decrypting the sensing information, the certificate number of the target certificate can be obtained.

[0117] In a possible implementation, determining the risk level of the target certificate according to the first location information and the second location information includes:

[0118] determining a relative distance between the first position information and the second position information;

[0119] Determine the risk level of the target certificate based on the relative distance and the preset distance threshold range.

[0120] This embodiment determines the risk level of the target license by the relative distance between the first position information and the second position information. The distance realization process can refer to the introduction of determining the risk level of the target license according to the distance between the first position information and the second position information in the aforementioned embodiment, which will not be repeated here.

[0121] The preset threshold range can be set according to actual conditions and is not limited in this embodiment.

[0122] In a possible implementation, determining the risk level of the target certificate according to the relative distance and the preset distance threshold range includes:

[0123] If the relative distance is less than or equal to the upper limit of the preset distance threshold range, the risk level is determined to be the first risk level;

[0124] If the relative distance is greater than the upper limit of the preset distance threshold range, the risk level is determined to be the second risk level;

[0125] The risk level of the first risk level is lower than the risk level of the second risk level.

[0126] This embodiment makes a specific classification by risk level to obtain a first risk level and a second risk level, which can achieve refined security management of the target certificate.

[0127] In some embodiments, the security management measures corresponding to the first risk level include notifying the associated certificate holder of the target certificate that the target certificate is in an abnormal use state and the associated certificate holder needs to perform self-management. The security management measures corresponding to the second risk level include dispatching relevant staff to reclaim the target certificate.

[0128] See also Figure 4 , Figure 4 A flowchart for determining relative distance included in a method for secure management of a certificate provided in an embodiment of the present application.

[0129] In a possible implementation, the positioning module includes a first positioning module and a second positioning module, the first positioning module and the second positioning module are both arranged in a folder, and a location information transmission frequency of the first positioning module is greater than a location information transmission frequency of the second positioning module;

[0130] Determining the relative distance between the first location information and the second location information includes but is not limited to the following steps 410 to 430:

[0131] Step 410, obtaining first sub-location information of the first positioning module and second sub-location information of the second positioning module;

[0132] Step 420, determining a first relative distance between the first sub-location information and the first location information, and a second relative distance between the second sub-location information and the first location information;

[0133] Step 430: Determine the relative distance according to the first relative distance and the second relative distance.

[0134] This embodiment jointly determines the relative distance through the three position information of the first positioning module, the second positioning module, and the mobile terminal, thereby improving the accuracy of determining the relative distance, and further improving the accuracy and reliability of determining the risk level of the target certificate.

[0135] Specifically, the first positioning module includes a Huawei mobile phone product: HUAWEI Tag positioning module, or an Apple mobile phone product: Air Tag positioning module. Taking the Air Tag positioning module as an example, it does not use satellite positioning, but is mainly based on Bluetooth and Ultra Wide Band (UWB) technology. For details, please refer to the introduction of related products, which will not be repeated here.

[0136] The second positioning module includes a Beidou positioning module or a GPS positioning module.

[0137] In this embodiment, the relative distance ΔL can be determined by the following formula (1), formula (2) and formula (3):

[0138]

[0139]

[0140] ΔL=(L1+L2) / 2, (3)

[0141] Wherein, P0(x0, y0, z0) represents the first position information of the mobile terminal;

[0142] P1(x1, y1, z1) represents the first sub-location information of the first positioning module;

[0143] P2(x2, y2, z2) represents the second sub-location information of the second positioning module;

[0144] L1 represents a first relative distance, and L2 represents a second relative distance.

[0145] In a possible implementation, a short-distance communication sensing tag is attached to the target certificate, and the relative distance is determined according to the first relative distance and the second relative distance, including:

[0146] Acquire sensing information obtained by the associated licensed user controlling the mobile terminal to approach the short-range communication sensing tag;

[0147] Determine the tag category of the short-range communication sensing tag according to the sensing information;

[0148] According to the label category, determine the target coefficient;

[0149] The relative distance is determined according to the first relative distance, the second relative distance and the target coefficient; wherein the target coefficient when the tag category is an NFC tag is greater than the target coefficient when the tag category is an RFID tag.

[0150] The embodiment of the present application determines the target coefficient for different types of short-range communication sensing tags, and determines the relative distance in combination with the first relative distance and the second relative distance determined in the above-mentioned embodiment, thereby further improving the accuracy and reliability of determining the relative distance.

[0151] Specifically, considering that the recognition distance of an NFC tag is usually a few centimeters, the mobile terminal is closest to the location of the target certificate, while the recognition distance of an RFID tag is usually 3 to 10 meters, or even farther, and the mobile terminal is slightly farther from the location of the target certificate. By making the target coefficient in the case where the tag category is an NFC tag greater than the target coefficient in the case where the tag category is an RFID tag, the accuracy and reliability of determining the relative distance can be further improved.

[0152] When the tag type is an RFID tag, the relative distance △L can be determined by the following formula (4):

[0153] ΔL=(aL1+aL2) / 2, (4)

[0154] When the tag type is an NFC tag, the relative distance △L can be determined by the following formula (5):

[0155] ΔL=(bL1+bL2) / 2, (5)

[0156] Among them, a and b are target coefficients, and a <b。

[0157] Corresponding to the above method embodiment, the present application embodiment also provides a certificate security management system, see Figure 5 , Figure 5 A functional module diagram of a certificate security management system provided in an embodiment of the present application, wherein the certificate security management system 500 includes:

[0158] A first acquisition module 510 is used to acquire biometric information of a user associated with a target certificate;

[0159] A comparison module 520, used to compare the biometric information with the registered biometric information to obtain a comparison result;

[0160] A second acquisition module 530 is used to acquire first location information and second location information of the target certificate when the comparison result indicates that the biometric information matches the registered biometric information, wherein the first location information includes location information of a mobile terminal used by the associated certificate holder to upload the biometric information, and the second location information includes location information of a positioning module in a folder storing the target certificate;

[0161] A first determination module 540, configured to determine a risk level of a target certificate based on the first location information and the second location information;

[0162] The second determination module 550 is used to determine corresponding security management measures based on the risk level, where the risk level is used to characterize the degree of risk of using the target certificate.

[0163] The certificate security management system provided in the embodiment of the present application obtains the biometric information of the associated certificate holder of the target certificate through the first acquisition module, and compares the biometric information with the registered biometric information through the comparison module, and obtains the first position information and the second position information of the target certificate through the second acquisition module when the comparison result indicates that the biometric information matches the registered biometric information. Then, the risk level of the target certificate is determined according to the first position information and the second position information through the first determination module, and the corresponding security management measures are determined based on the risk level through the second determination module, which can improve the security management of the certificate and reduce the financial risks caused by abnormal certificates.

[0164] In a possible implementation manner, the second acquisition module 530 is specifically configured to:

[0165] Get the target certificate number;

[0166] According to the certificate number and a preset mapping relationship, the first location information and the second location information are determined from the target cache area, wherein the preset mapping relationship includes a mapping relationship between the certificate number and the first location information and the second location information, and the target cache area is used to store the first location information and the second location information.

[0167] The embodiment of the present application can relieve the data processing pressure of the electronic device by storing the first location information and the second location information in the target buffer area in the above embodiment. In addition, the electronic device can decide whether to obtain the first location information and the second location information based on the pre-filtering condition of the certificate number, that is, if the electronic device does not obtain the certificate number of the target certificate, it does not need to determine the first location information and the second location information from the target buffer area, which further relieves the data processing pressure of the electronic device.

[0168] In a possible implementation, a short-distance communication sensing tag is attached to the target certificate, and the certificate number is stored in the short-distance communication sensing tag. The second acquisition module 530 includes a second acquisition submodule, and the second acquisition submodule is used to:

[0169] Acquire sensing information obtained by the associated licensed user controlling the mobile terminal to approach the short-range communication sensing tag;

[0170] Determine the certificate number based on the sensing information.

[0171] In this embodiment, by attaching a short-distance communication sensing tag on the target certificate, the associated certificate-holding user only needs to place the mobile terminal within the sensing range of the short-distance communication sensing tag to obtain sensing information including the certificate number of the target certificate. As mentioned above, after obtaining the identification code information associated with the certificate number, the biometric information collection stage is entered. Accordingly, this embodiment can enter the biometric information collection stage after obtaining the sensing information including the certificate number, which improves the convenience of users uploading biometric information.

[0172] In a possible implementation manner, the first determining module 540 is specifically configured to:

[0173] determining a relative distance between the first position information and the second position information;

[0174] Determine the risk level of the target certificate based on the relative distance and the preset distance threshold range.

[0175] This embodiment determines the risk level of the target license by the relative distance between the first position information and the second position information. The distance realization process can refer to the introduction of determining the risk level of the target license according to the distance between the first position information and the second position information in the aforementioned embodiment, which will not be repeated here.

[0176] In a possible implementation, the first determining module 540 includes a first determining submodule, and the first determining submodule is used to:

[0177] If the relative distance is less than or equal to the upper limit of the preset distance threshold range, the risk level is determined to be the first risk level;

[0178] If the relative distance is greater than the upper limit of the preset distance threshold range, the risk level is determined to be the second risk level;

[0179] The risk level of the first risk level is lower than the risk level of the second risk level.

[0180] This embodiment makes a specific classification by risk level to obtain a first risk level and a second risk level, which can achieve refined security management of the target certificate.

[0181] In some embodiments, the security management measures corresponding to the first risk level include notifying the associated certificate holder of the target certificate that the target certificate is in an abnormal use state and the associated certificate holder needs to perform self-management. The security management measures corresponding to the second risk level include dispatching relevant staff to reclaim the target certificate.

[0182] In a possible implementation, the positioning module includes a first positioning module and a second positioning module, the first positioning module and the second positioning module are both arranged in a folder, and a location information transmission frequency of the first positioning module is greater than a location information transmission frequency of the second positioning module;

[0183] The first determination module 540 includes a second determination submodule, and the second determination submodule is used to:

[0184] Acquire first sub-location information of the first positioning module and second sub-location information of the second positioning module;

[0185] Determining a first relative distance between the first sub-location information and the first location information, and a second relative distance between the second sub-location information and the first location information;

[0186] A relative distance is determined according to the first relative distance and the second relative distance.

[0187] This embodiment jointly determines the relative distance through the three position information of the first positioning module, the second positioning module, and the mobile terminal, thereby improving the accuracy of determining the relative distance, and further improving the accuracy and reliability of determining the risk level of the target certificate.

[0188] In a possible implementation, a short-distance communication sensing tag is attached to the target certificate, and the second determination submodule includes a first determination unit, which is used to:

[0189] Acquire sensing information obtained by the associated licensed user controlling the mobile terminal to approach the short-range communication sensing tag;

[0190] Determine the tag category of the short-range communication sensing tag according to the sensing information;

[0191] According to the label category, determine the target coefficient;

[0192] The relative distance is determined according to the first relative distance, the second relative distance and the target coefficient; wherein the target coefficient when the tag category is an NFC tag is greater than the target coefficient when the tag category is an RFID tag.

[0193] The embodiment of the present application determines the target coefficient for different types of short-range communication sensing tags, and determines the relative distance in combination with the first relative distance and the second relative distance determined in the above-mentioned embodiment, thereby further improving the accuracy and reliability of determining the relative distance.

[0194] The present application also provides an electronic device. The present application also provides an electronic device. Figure 6 , Figure 6 An internal structure diagram of an electronic device provided for an embodiment of the present application. The electronic device includes a processor, a memory, and a network interface connected via a system bus. The memory includes a non-volatile storage medium and an internal memory. The non-volatile storage medium of the electronic device stores an operating system and may also store a computer program, which, when executed by the processor, enables the processor to implement the security management method for certificates and licenses applied to the electronic device in the above-mentioned embodiment. The internal memory may also store a computer program, which, when executed by the processor, enables the processor to execute the security management method for certificates and licenses. Those skilled in the art will appreciate that Figure 6 The structure shown in the figure is merely a block diagram of a partial structure related to the scheme of the present application, and does not constitute a limitation on the electronic device to which the scheme of the present application is applied. The specific electronic device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0195] The embodiment of the present application also discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, a method for secure management of certificates and licenses as in the method embodiment is implemented.

[0196] An embodiment of the present application provides a computer program product, which is stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the embodiment of the security management method for certificates and licenses as described above, and can achieve similar or identical technical effects. To avoid repetition, it will not be described here.

[0197] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0198] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0199] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0200] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0201] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0202] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0203] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0204] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.

[0205] The preferred embodiments of the present invention are described above with reference to the accompanying drawings, but the scope of the rights of the present invention is not limited thereto. Any modification, equivalent substitution and improvement made by a person skilled in the art without departing from the scope and essence of the present invention should be within the scope of the rights of the present invention.

Claims

1. A method for secure management of certificates, characterized in that: The method comprises: Obtain biometric information of the user associated with the target certificate; Comparing the biometric information with the registered biometric information to obtain a comparison result; When the comparison result indicates that the biometric information matches the registered biometric information, obtaining first location information and second location information of the target certificate, wherein the first location information includes location information of a mobile terminal used by the associated certificated user to upload the biometric information, and the second location information includes location information of a positioning module in a folder storing the target certificate; Determining a risk level of the target certificate according to the first location information and the second location information; Based on the risk level, corresponding security management measures are determined, and the risk level is used to characterize the degree of risk of license use of the target license.

2. The method according to claim 1, characterized in that The step of obtaining the first location information and the second location information of the target certificate includes: Obtain the certificate number of the target certificate; According to the certificate number and a preset mapping relationship, the first location information and the second location information are determined from a target cache area, wherein the preset mapping relationship includes a mapping relationship between the certificate number and the first location information and the second location information, and the target cache area is used to store the first location information and the second location information.

3. The method according to claim 2, characterized in that The target certificate is affixed with a short-distance communication sensing tag, the certificate number is stored in the short-distance communication sensing tag, and the step of obtaining the certificate number of the target certificate includes: Acquire sensing information obtained by the associated certified user controlling the mobile terminal to approach the short-range communication sensing tag; The certificate number is determined according to the sensing information.

4. The method according to claim 1, characterized in that The determining the risk level of the target certificate according to the first location information and the second location information includes: determining a relative distance between the first position information and the second position information; The risk level of the target certificate is determined based on the relative distance and a preset distance threshold range.

5. The method according to claim 4, characterized in that The determining the risk level of the target certificate according to the relative distance and the preset distance threshold range includes: If the relative distance is less than or equal to the upper limit of the preset distance threshold range, determining that the risk level is the first risk level; If the relative distance is greater than the upper limit of the preset distance threshold range, determining that the risk level is the second risk level; The risk level of the first risk level is lower than the risk level of the second risk level.

6. The method according to claim 4, characterized in that The positioning module includes a first positioning module and a second positioning module, the first positioning module and the second positioning module are both arranged in the folder, and the location information transmission frequency of the first positioning module is greater than the location information transmission frequency of the second positioning module; The determining a relative distance between the first position information and the second position information includes: Acquire first sub-location information of the first positioning module and second sub-location information of the second positioning module; Determining a first relative distance between the first sub-location information and the first location information, and a second relative distance between the second sub-location information and the first location information; The relative distance is determined according to the first relative distance and the second relative distance.

7. The method according to claim 6, characterized in that The target certificate is affixed with a short-distance communication sensing tag, and the relative distance is determined according to the first relative distance and the second relative distance, including: Acquire sensing information obtained by the associated certified user controlling the mobile terminal to approach the short-range communication sensing tag; Determining the tag category of the short-range communication sensing tag according to the sensing information; Determining a target coefficient according to the label category; The relative distance is determined according to the first relative distance, the second relative distance and the target coefficient; wherein the target coefficient when the tag category is an NFC tag is greater than the target coefficient when the tag category is an RFID tag.

8. A security management system for certificates and licenses, characterized in that: The system comprises: A first acquisition module is used to acquire biometric information of a user associated with a target certificate; A comparison module, used to compare the biometric information with the registered biometric information to obtain a comparison result; A second acquisition module is used to acquire first location information and second location information of the target certificate when the comparison result indicates that the biometric information matches the registered biometric information, wherein the first location information includes location information of a mobile terminal used by the associated certificated user to upload the biometric information, and the second location information includes location information of a positioning module in a folder storing the target certificate; A first determination module, configured to determine a risk level of the target certificate according to the first location information and the second location information; The second determination module is used to determine corresponding security management measures based on the risk level, and the risk level is used to characterize the degree of risk of using the target certificate.

9. An electronic device, characterized in that: The electronic device comprises a memory and a processor, wherein a computer program is stored in the memory, and the computer program implements the method according to any one of claims 1 to 7 when executed by the processor.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by one or more processors, the method according to any one of claims 1 to 7 is implemented.

Images