Privacy-protecting electronic identity certificate making and using method, device or system

Abstract

The invention discloses a privacy-protecting electronic identity certificate making and using method, device or system. An electronic identity certificate comprises a user information verification model; when correct and / or real user information is input into the verification model, the output of the user information verification model is correct or successful, otherwise, the output is wrong or failed; the user information is information indicating and / or proving a user identity; when an electronic identity certificate of a user is made, the electronic identity certificate making device or system uses user information to train and generate a user information verification model of the electronic identity certificate; when the user information is verified, the user information verification device or system obtains the user information verification model from the electronic identity certificate, information which is submitted by a user and indicates the identity of the user is input into the user information verification model, and the user information verification model outputs a verification result.

Description

Technical Field

[0001] The present invention belongs to the field of information security technology, and in particular to a method, device or system for making and using an electronic identity certificate for protecting privacy. Background Art

[0002] An electronic identity credential is an electronic data that proves the identity of a user. Electronic identity credentials are often used for user identification and / or verification in public / open systems. Commonly used electronic identity credentials, such as X509 digital certificates, usually contain user identity information, such as name, ID number, email address, work unit, etc., which are private or confidential information of the user. Using such electronic identity credentials in public / open systems may expose unnecessary user information. In addition, some electronic identity credentials, such as X509 digital certificates, can be obtained through public channels (such as LDAP), which may also cause the leakage and exposure of user privacy information. How to maintain the electronic identity credential's function of user identification and verification while not exposing the user's privacy information is a seemingly contradictory practical technical problem that needs to be solved. Summary of the invention

[0003] The purpose of the present invention is to propose a solution to the technical problem of how to maintain the electronic identity certificate for the identification and verification functions of the user identity while not exposing the user's privacy information.

[0004] In view of the purpose of the present invention, the technical solution proposed by the present invention is a method and device or system for making and using an electronic identity credential that protects privacy, wherein the method for making and using an electronic identity credential that protects privacy is specifically as follows.

[0005] The electronic identity credential is electronic data that can verify and / or prove the identity of the user; the electronic identity credential is owned by the user; the electronic identity credential includes a user information verification model; the user information verification model is model data and / or parameters based on a theoretical model that can verify the authenticity of user information through calculation (for example, model data and / or parameters of an actual model based on various artificial neural network theoretical models that can realize user information verification, not an abstract theoretical model); when correct and / or real (corresponding to the electronic identity credential) user information is input into the user information verification model, the user information verification model outputs a result indicating correctness or success, otherwise, it outputs a result indicating error or failure; the user information is information that indicates and / or proves the identity of the user, and / or information owned by the user (such as human biometric information); the user information is provided and used in the form of electronic or digital information (data); the user information verification model completes calculations through a computing device or system;

[0006] When making an electronic identity certificate of a user, the electronic identity certificate making device or system uses the user information to train and generate a user information verification model, and then generates the user's electronic identity certificate;

[0007] When verifying user information, the user submits information used to indicate and / or prove the user's identity (the user also submits an electronic identity certificate, or the application system or business system has pre-stored the user's electronic identity certificate), the user information verification device or system obtains a user information verification model from the user's electronic identity certificate, inputs the information submitted by the user into the user information verification model, and the user information verification model outputs a verification result (correct or incorrect, successful or failed, true or false);

[0008] The electronic identity certificate making device or system is a software or hardware or a combination of software and hardware components or devices or systems that generates a user information verification model based on user information training and generates a user electronic identity certificate;

[0009] The user information verification device or system is a software or hardware or a combination of software and hardware components or devices or systems that uses an electronic identity credential and its user information verification model to verify whether the information submitted or provided by the user indicating and / or proving his or her identity is correct.

[0010] Regarding the above-mentioned method for producing and using an electronic identity credential that protects privacy, the user information includes text information (such as name, ID number, work unit, educational background type, degree type, etc.) and / or human biometric information (such as fingerprints, faces, handwritten signatures, etc.); the text information appears in the form of digitally encoded (binary encoded) text, and the human biometric information appears in the form of an electronic image / picture or video; the two types of user information correspond to a user text information verification model and a user human biometric information verification model, respectively.

[0011] For the above-mentioned method for making and using an electronic identity credential that protects privacy, the sample data used for training the user information verification model includes the correct and real (identity) information of the user corresponding to the electronic identity credential and the wrong or false (identity) information (such as the wrong or false information generated by humans); the wrong or false information is used as the input of the user information verification model, and the corresponding output result is error or failure;

[0012] In addition to the information of the user corresponding to the electronic identity credential, the sample data used for training the user information verification model is also allowed to include the information of the user corresponding to the non-electronic identity credential; the information of the user corresponding to the non-electronic identity credential refers to the information of a person other than the user corresponding to the electronic identity credential or artificially generated information that does not belong to a specific person, that is, it includes real, false and fictitious information of people other than the user corresponding to the electronic identity credential, including fictitious information of real and fictitious people; the information of the user corresponding to the non-electronic identity credential is used as the input of the user information verification model, and the corresponding output result is error or failure.

[0013] Regarding the above-mentioned method for making and using an electronic identity credential that protects privacy, the electronic identity credential also includes non-confidential and non-private data (such as the electronic identity credential serial number).

[0014] With respect to the above-described method for producing and using an electronic identity credential that protects privacy, the sample data used for training the user information verification model is also allowed to include random data that is merged with the user information as a component of the input data of the user information verification model (i.e., the input data of the user information verification model is generated by merging the user information and the random data, and is used to increase the randomness of the model parameters), and the random data includes randomly generated text and / or randomly generated images and / or videos; the random data is included in the electronic identity credential as non-confidential and non-private data.

[0015] Regarding the above-mentioned method of making and using electronic identity credentials that protect privacy, the electronic identity credential is issued to the user after authentication (such as digital signature, network professional system authentication); when the electronic identity credential is used, the user information verification device or system verifies the validity of the electronic identity credential through authentication data (such as digital signature) or verification system.

[0016] With regard to the above-mentioned method for making and using electronic identity credentials that protect privacy, optionally, the electronic identity credential is bound to a public key of the user and is issued to the user after authentication (such as digital signature, network professional system authentication); when the electronic identity credential is used, the user information verification device or system verifies the validity of the electronic identity credential through authentication data (such as digital signature) or a verification system, and determines that the user is the owner of the electronic identity credential through the user public key bound to the electronic identity credential (determining whether the user has the private key corresponding to the bound public key through verification, thereby determining that the user is the owner of the electronic identity credential).

[0017] If the verifiable user information includes the user's biometric information, it is not necessary to bind the electronic identity certificate to the user's public key when used for user identity authentication.

[0018] For the above-mentioned method for making and using an electronic identity certificate that protects privacy, one way of binding and authenticating the electronic identity certificate with the user's public key is: the hash value (hash value, hash value) of the electronic identity certificate is included in an anonymous X509 digital certificate of the user that is digitally signed by the issuer, or the electronic identity certificate is included in the anonymous X509 digital certificate as extension data of the X509 digital certificate;

[0019] If the hash value of the electronic identity credential is included in the anonymous X509 digital certificate, when the electronic identity credential is used, the user information verification device or system verifies the validity of the digital signature of the issuer of the anonymous X509 digital certificate and verifies whether the hash value of the electronic identity credential included in the anonymous X509 digital certificate is consistent with the hash value of the electronic identity credential to be verified, thereby determining the validity of the electronic identity credential to be verified, and verifies that the user is the owner of the electronic identity credential through the subject public key verification corresponding to the anonymous X509 digital certificate (determines whether the user has the private key corresponding to the subject public key of the anonymous X509 digital certificate through verification);

[0020] If the electronic identity credential is included in an anonymous X509 digital certificate as extension data of the X509 digital certificate, then when the electronic identity credential is used, the user information verification device or system determines the validity of the electronic identity credential to be verified by verifying the validity of the digital signature of the issuer of the anonymous X509 digital certificate, and determines that the user is the owner of the electronic identity credential through verification of the subject public key corresponding to the anonymous X509 digital certificate.

[0021] Optionally, if the hash value of the electronic identity credential is included in the anonymous X509 digital certificate, the anonymous X509 digital certificate also includes the method and address (such as URI / URL) for obtaining the electronic identity credential, and the hash value of the electronic identity credential is allowed to be included in the acquisition address.

[0022] Based on the above-mentioned method for making and using electronic identity credentials that protect privacy, a device or system for making electronic identity credentials that protect privacy can be constructed. The electronic identity credential making device or system generates a user information verification model according to the above-mentioned method for making and using electronic identity credentials that protect privacy, and generates an electronic identity credential for the user.

[0023] Based on the above-mentioned method for making and using an electronic identity credential that protects privacy, a device or system for using an electronic identity credential that protects privacy can be constructed. The electronic identity credential using device or system uses the user's electronic identity credential and the user information verification model in the electronic identity credential according to the above-mentioned method for making and using an electronic identity credential that protects privacy.

[0024] Based on the technical solution of the present invention, the user's (identity) information will not appear in the user's electronic identity certificate in plain text, and therefore, direct leakage of user information will not occur; when it is necessary to identify and verify the user's identity, the identifying and verifying party verifies whether the identity information submitted by the user is true through the electronic identity certificate, thereby determining the user's identity and information; since the electronic identity certificate is authenticated (for example, a digital signature), the validity of the electronic identity certificate and the authenticity of the information submitted by the user can be ensured by verifying the validity of the electronic identity certificate; since the electronic identity certificate can be bound to a user's public key, the public key bound to the electronic identity certificate can be used to verify whether the user has the corresponding private key, thereby determining whether the user is the owner of the electronic identity certificate; therefore, the technical solution of the present invention not only maintains the electronic identity certificate for the identification and verification functions of the user's identity, but also does not expose the user's privacy information. DETAILED DESCRIPTION

[0025] The following is a description of the specific implementation of the present invention. The following content is only a description of possible implementations of the present invention, does not represent all possible implementations, and is not intended to limit the scope of protection of the present invention.

[0026] The user information verification model of the present invention is actually a binary classification model. In the specific implementation, any applicable binary classification model can be selected, such as support vector machine (SVN), various artificial neural networks that can realize text, picture, video classification, etc.

[0027] In a specific implementation, user information may include only text information (such as name, ID number, work unit, educational background type, degree type, etc.), or only human biometric information (such as fingerprint, face, handwritten signature, etc.), and may also include both text information and human biometric information; the text information appears in the form of digitally encoded (binary encoded) text, and the human biometric information appears in the form of electronic images / pictures or videos; in a specific implementation, the two types of user information usually use different user information verification models, such as a user text information verification model and a user human biometric information verification model (the theoretical models and implementation technologies used by the two are usually different); if in a specific implementation, the user information includes both text information and human biometric information, the electronic identity certificate includes data from both verification models.

[0028] In a specific implementation, the sample data used for training the user information verification model includes the correct and real (identity) information of the user corresponding to the electronic identity certificate and the wrong or false (identity) information (such as artificially generated wrong or false information). When the wrong or false information is used as the input of the user information verification model, the corresponding output result is error or failure;

[0029] In addition to the information of the user corresponding to the electronic identity credential, the sample data used for training the user information verification model is also allowed to include the information of the user corresponding to the non-electronic identity credential; the information of the user corresponding to the non-electronic identity credential refers to the information of a person other than the user corresponding to the electronic identity credential or artificially generated information that does not belong to a specific person, that is, it includes real, false and fictitious information of people other than the user corresponding to the electronic identity credential, including fictitious information of real and fictitious people; the information of the user corresponding to the non-electronic identity credential is used as the input of the user information verification model, and the corresponding output result is error or failure.

[0030] In a specific implementation, if the user information includes user text information, as long as the input text information is not completely the same as the correct user text information, the probability that the output result of the user text information verification model is wrong or failed is extremely high, and the extremely high probability means that it is greater than a predetermined probability; specifically, when training the user text information verification model, some wrong or information that is not completely the same as the user text information can be artificially generated on the basis of the correct user text information, such as user text information that is partially the same, partially different, or even only has individual characters different, as sample data with an output result of error or failure; taking into account that some information is correct, but the user input may not be exactly the same each time (such as order, capitalization, etc.), when training the user text information verification model, some correct but not completely the same user text information can be artificially transformed and generated on the basis of the correct user text information, as sample data with a correct or successful output result.

[0031] In a specific implementation, the electronic identity credential may also include non-confidential and non-private data (such as the electronic identity credential serial number) in plain text.

[0032] In a specific implementation, in order to increase the randomness of the model parameters, the sample data used for training the user information verification model is also allowed to include random data that is merged with the user information as a component of the input data of the user information verification model (that is, the input data of the user information verification model is generated by merging the user information and the random data, and is used to increase the randomness of the model parameters), and the random data includes randomly generated text and / or randomly generated pictures and / or videos; the random data is included in the electronic identity credential in plain text as non-confidential and non-private data.

[0033] In specific implementations, in order to prevent the forgery and misuse (unauthorized use) of electronic identity credentials, the electronic identity credentials are issued to users after authentication (such as digital signature, network professional system authentication); when the electronic identity credentials are used, the user information verification device or system verifies the validity of the electronic identity credentials through authentication data (such as digital signature) or verification system.

[0034] Furthermore, in a specific implementation, the electronic identity credential may be bound to a public key of the user and issued to the user after authentication (such as digital signature, network professional system authentication); when the electronic identity credential is used, the user information verification device or system verifies the validity of the electronic identity credential through authentication data (such as digital signature) or a verification system, and determines that the user is the owner of the electronic identity credential through the user public key bound to the electronic identity credential (determining whether the user has the private key corresponding to the bound public key through verification, thereby determining that the user is the owner of the electronic identity credential).

[0035] Of course, if the verifiable user information includes the user's biometric information, it is not necessary to bind the electronic identity certificate to the user's public key when used for user identity authentication. By verifying the biometric information submitted by the user through the user information verification model in the electronic identity certificate, it is possible to simultaneously verify and determine that the user to be authenticated and verified is the owner of the electronic identity certificate.

[0036] In a specific implementation, one way to bind and authenticate the electronic identity certificate with the user's public key is: the hash value (hash value, hash value) of the electronic identity certificate is included in an anonymous X509 digital certificate of the user that is digitally signed by the issuer, or the electronic identity certificate is included in the anonymous X509 digital certificate as an extension item data of the X509 digital certificate;

[0037] If the hash value of the electronic identity credential is included in the anonymous X509 digital certificate, when the electronic identity credential is used, the user information verification device or system verifies the validity of the digital signature of the issuer of the anonymous X509 digital certificate and verifies whether the hash value of the electronic identity credential included in the anonymous X509 digital certificate is consistent with the hash value of the electronic identity credential to be verified, thereby determining the validity of the electronic identity credential to be verified, and verifies that the user is the owner of the electronic identity credential through the subject public key verification corresponding to the anonymous X509 digital certificate (determines whether the user has the private key corresponding to the subject public key of the anonymous X509 digital certificate through verification);

[0038] If the electronic identity credential is included in an anonymous X509 digital certificate as extension data of the X509 digital certificate, then when the electronic identity credential is used, the user information verification device or system determines the validity of the electronic identity credential to be verified by verifying the validity of the digital signature of the issuer of the anonymous X509 digital certificate, and determines that the user is the owner of the electronic identity credential through verification of the subject public key corresponding to the anonymous X509 digital certificate.

[0039] In a specific implementation, optionally, if the hash value of the electronic identity credential is included in an anonymous X509 digital certificate, the anonymous X509 digital certificate also includes the method and address (such as URI / URL) for obtaining the electronic identity credential, and the hash value of the electronic identity credential is allowed to be included in the acquisition address.

[0040] On the basis of the aforementioned method for producing and using electronic identity credentials that protect privacy, a device or system for producing electronic identity credentials that protect privacy can be implemented. This electronic identity credential producing device or system can be implemented as a component or device or system that is a combination of software or hardware or software and hardware; the implemented electronic identity credential producing device or system generates a user information verification model according to the aforementioned method for producing and using electronic identity credentials that protect privacy, and generates an electronic identity credential for the user.

[0041] Based on the aforementioned method for making and using an electronic identity credential that protects privacy, a device or system for using an electronic identity credential that protects privacy can be implemented. This device or system for using an electronic identity credential can be implemented as a component or device or system that is software or hardware or a combination of software and hardware. The implemented device or system for using an electronic identity credential uses the user's electronic identity credential and the user information verification model in the electronic identity credential according to the aforementioned method for making and using an electronic identity credential that protects privacy.

[0042] Other specific technical implementations not described belong to the prior art or public knowledge and are well-known and self-evident to technicians in the relevant fields.

Claims

1. A method for making and using an electronic identity certificate that protects privacy, characterized by: The electronic identity credential is electronic data that can verify and / or prove the identity of a user; the electronic identity credential is owned by the user; the electronic identity credential includes a user information verification model; the user information verification model is model data and / or parameters that are based on a theoretical model and can verify the authenticity of user information through calculation; when correct and / or authentic user information is input into the user information verification model, the user information verification model outputs a result indicating correctness or success, otherwise, it outputs a result indicating error or failure; the user information is information that indicates and / or proves the identity of a user, and / or information owned by the user; The user information is provided and used in the form of electronic or digital information; the user information verification model is calculated by a computing device or system; When making an electronic identity certificate of a user, the electronic identity certificate making device or system uses the user information to train and generate a user information verification model, and then generates the user's electronic identity certificate; When verifying user information, the user submits information used to indicate and / or prove the user's identity, the user information verification device or system obtains a user information verification model from the user's electronic identity certificate, inputs the information submitted by the user into the user information verification model, and the user information verification model outputs a verification result; The electronic identity certificate making device or system is a software or hardware or a combination of software and hardware components or devices or systems that generates a user information verification model based on user information training and generates a user electronic identity certificate; The user information verification device or system is a software or hardware or a combination of software and hardware components or devices or systems that uses an electronic identity credential and its user information verification model to verify whether the information submitted or provided by the user indicating and / or proving his or her identity is correct.

2. The method for making and using a privacy-protecting electronic identity credential according to claim 1, wherein: The user information includes text information and / or human biometric information; the text information appears in the form of digitally encoded text, and the human biometric information appears in the form of electronic images / pictures or videos; the two types of user information correspond to user text information verification models and user human biometric information verification models respectively.

3. The method for making and using a privacy-protecting electronic identity credential according to claim 1, wherein: The sample data used for training the user information verification model includes the correct and real information of the user corresponding to the electronic identity certificate and the wrong or false information; the wrong or false information is used as the input of the user information verification model, and the corresponding output result is error or failure; In addition to the information of the user corresponding to the electronic identity credential, the sample data used for training the user information verification model is also allowed to include the information of the user corresponding to the non-electronic identity credential; the information of the user corresponding to the non-electronic identity credential refers to the information of a person other than the user corresponding to the electronic identity credential or artificially generated information that does not belong to a specific person, that is, it includes real, false and fictitious information of people other than the user corresponding to the electronic identity credential, including fictitious information of real and fictitious people; the information of the user corresponding to the non-electronic identity credential is used as the input of the user information verification model, and the corresponding output result is error or failure.

4. The method for making and using a privacy-protecting electronic identity credential according to claim 1, wherein: The electronic identity certificate also includes non-confidential and non-private data.

5. The method for making and using a privacy-protecting electronic identity credential according to claim 1, wherein: The sample data used for training the user information verification model is also allowed to include random data that is merged with the user information as part of the input data of the user information verification model, wherein the random data includes randomly generated text and / or randomly generated pictures and / or videos; the random data is included in the electronic identity credential as non-confidential and non-private data.

6. The method for making and using a privacy-protecting electronic identity credential according to claim 1, characterized in that: The electronic identity credential is issued to the user after authentication; when the electronic identity credential is used, the user information verification device or system verifies the validity of the electronic identity credential through the authentication data or verification system.

7. The method for making and using a privacy-protecting electronic identity credential according to claim 1, characterized in that: The electronic identity credential is bound to a public key of the user and is issued to the user after authentication; when the electronic identity credential is used, the user information verification device or system verifies the validity of the electronic identity credential through the authentication data or verification system, and verifies that the user is the owner of the electronic identity credential through the user public key bound to the electronic identity credential.

8. The method for making and using a privacy-protecting electronic identity credential according to claim 1, wherein: One way to bind and authenticate the electronic identity certificate with the user's public key is: the hash value of the electronic identity certificate is included in an anonymous X509 digital certificate of the user that is digitally signed by the issuer, or the electronic identity certificate is included in the anonymous X509 digital certificate as an extension item data of the X509 digital certificate; If the hash value of the electronic identity credential is contained in the anonymous X509 digital certificate, when the electronic identity credential is used, the user information verification device or system verifies the validity of the digital signature of the issuer of the anonymous X509 digital certificate and verifies whether the hash value of the electronic identity credential contained in the anonymous X509 digital certificate is consistent with the hash value of the electronic identity credential to be verified, thereby determining the validity of the electronic identity credential to be verified, and verifies that the user is the owner of the electronic identity credential through the subject public key verification corresponding to the anonymous X509 digital certificate; If the electronic identity credential is included in an anonymous X509 digital certificate as extension data of the X509 digital certificate, then when the electronic identity credential is used, the user information verification device or system determines the validity of the electronic identity credential to be verified by verifying the validity of the digital signature of the issuer of the anonymous X509 digital certificate, and determines that the user is the owner of the electronic identity credential through verification of the subject public key corresponding to the anonymous X509 digital certificate.

9. The method for making and using a privacy-protecting electronic identity credential according to claim 1, characterized in that: If the hash value of the electronic identity credential is included in the anonymous X509 digital certificate, the anonymous X509 digital certificate also includes the method and address for obtaining the electronic identity credential, and the hash value of the electronic identity credential is allowed to be included in the acquisition address.

10. An electronic identity credential production and use system based on the privacy-protecting electronic identity credential production and use method according to any one of claims 1 to 9, characterized in that: The electronic identity credential production and use system includes an electronic identity credential production device or system, and an electronic identity credential use device or system, wherein: the electronic identity credential production device or system generates a user information verification model according to the aforementioned privacy-protecting electronic identity credential production and use method, and generates the user's electronic identity credential; the electronic identity credential use device or system uses the user's electronic identity credential and the user information verification model in the electronic identity credential according to the aforementioned privacy-protecting electronic identity credential production and use method.