Method for improving safety and performance of identification analysis system

Abstract

The invention discloses a method for improving security and performance of an identifier analysis system, relates to the technical field of identifier analysis, and solves the problems that the security problem of identified data is not necessarily considered in the existing method, so that the identified data is possibly tampered, the data feasibility is relatively low, and the system performance is poor. And the identification data is easy to be repeatedly referenced with other identification data during modification, so that the problem of non-single direction of the identification data is solved. A method for improving security and performance of an identification analysis system comprises the following steps: analyzing a port which receives an identification analysis request and sends out, performing identification analysis processing on a target identification request in the identification analysis request through the identification analysis system in different modes according to the sent port so as to obtain a target object identifier required by the target identification request, and sending the target object identifier to the identification analysis system. And the data is transmitted and returned to the request sending port. Through security verification of the first-level security module and the second-level security module, the problem that the data is easily tampered is solved while direct access of the identification system data is avoided.

Description

Technical Field

[0001] The present invention relates to the technical field of identity resolution, and in particular to a method for improving the security and performance of an identity resolution system. Background Art

[0002] The identification resolution system centralizes the resource entity information of industrial resource entities on the industrial Internet, which can better realize the management and scheduling of resource entities. In the industrial Internet, the industrial Internet identifier is usually used to uniquely identify a resource entity information, and the corresponding resource entity information can be obtained by resolving the industrial Internet identifier.

[0003] However, the existing methods lack the necessary consideration for the security issues of the identification data, resulting in the possibility of tampering of the identification data, low data feasibility, and the identification data is easily referenced repeatedly with other identification data when modified, resulting in the identification data pointing to multiple points; therefore, it does not meet the existing needs. In this regard, we propose a method to improve the security and performance of the identification resolution system. Summary of the invention

[0004] The purpose of the present invention is to provide a method for improving the security and performance of an identification resolution system, so as to solve the problem that the existing methods proposed in the above background technology lack necessary consideration for the security issues of identification data, resulting in the possibility of tampering of identification data, low data feasibility, and the identification data is easily repeated with other identification data when modified, resulting in the identification data pointing to non-single points, etc.

[0005] To achieve the above object, the present invention provides the following technical solution: a method for improving the security and performance of an identity resolution system, comprising the following steps:

[0006] Step (1), analyzing the port from which the identity resolution request is received, and performing identity resolution processing on the target identity request in the identity resolution request through the identity resolution system in different ways according to the port from which the request is issued, so as to obtain the target object identity required by the target identity request, and transmit the target object identity back to the port from which the request is issued;

[0007] Step (2), while returning the target object identifier to the port from which the request was sent, the IP address of the port from which the request was sent is recorded through the identifier resolution system;

[0008] Step (3), recording the operation behavior of the port in different ways according to the port from which the message is sent, and synchronously returning the IP address, the operation behavior and the target object identifier to the enterprise client through the identifier resolution system so that the enterprise can record and view it.

[0009] Preferably, the identification resolution system includes an international root node, a national top-level node, a secondary node, an enterprise node and a recursive node.

[0010] Preferably, the step (1) comprises the following steps:

[0011] Step (1.1), analyzing the port from which the identity resolution request is sent. When the port from which the identity resolution request is sent is a management port, it is necessary to verify whether the person requesting the port is a real person through a random code security module to avoid invalid requests and slowing down the operation performance of the identity resolution request;

[0012] Step (1.2), after the random code is confirmed, the identity of the requester of the management layer port is identified through the primary security module, and the identity of the requester of the management layer port is identified and confirmed with the unique identity code of each management layer;

[0013] After step (1.3) is confirmed to be correct, the target identification request in the identification resolution request is subjected to identification resolution processing by the identification resolution system.

[0014] Preferably, the step (1) further comprises the following steps:

[0015] Step (1.1), analyzing the port from which the identity resolution request is sent. When the port from which the identity resolution request is sent is a read-only layer, i.e., an external client port, it is necessary to verify through a random code security module whether the person requesting the port is a real person, so as to avoid invalid requests and slow down the operation performance of the identity resolution request;

[0016] Step (1.2), after the random code is confirmed, the target identification request in the identification resolution request is subjected to identification resolution processing by the identification resolution system;

[0017] Step (1.3), transmitting the obtained target object identification back to the port from which the request was issued in a read-only form to prevent outsiders from tampering with the identification data.

[0018] Preferably, the step (3) comprises the following steps:

[0019] Step (3.1), when the port from which the identity resolution request is sent is a management level port, if the management level port requester makes a request to modify the identity, the identity of the requester of the management level port is identified through the primary security module, and the identity of the requester of the management level port is identified and confirmed with the unique identity code of each management level;

[0020] Step (3.2), after confirmation by the primary security module, the identity of the requester at the management port is identified through the secondary security module, and the identity of the person is double-secured with the Internet security key and the offline security key;

[0021] Step (3.3), after confirmation, the identification data to be modified is transmitted to the information duplication module through the identification resolution system, and the information duplication module confirms whether the data requested for modification is repeated with the existing identification data in the existing database, so as to avoid the identification data pointing to the same identification unit;

[0022] Step (3.4), when the information duplication module detects that the modified data is not repeated, the modified data is sent to the change confirmation client, waiting for the modification request confirmation of the remaining management level ports. When the number of modification request confirmations exceeds half of the total number of management level ports, the modified identification data is uploaded to the database and the identification data before the modification is replaced;

[0023] Step (3.5), upload the data records of this modification to the enterprise client so that personnel can view and record them.

[0024] Preferably, the first-level security module includes facial recognition and personnel identification code. The facial recognition records the facial data of each management port personnel and uses it as security verification. The personnel identification code is a unique identification code for each management port personnel to confirm the identity of the personnel.

[0025] Preferably, the Internet security key is a key updated in real time by a random function in the management port and is viewed by personnel at each management port, and the offline security key is a key generated by a random function at the enterprise client every other day and is viewed by enterprise personnel.

[0026] Preferably, the information duplication module includes an information comparison system, an information identification system and an information update system, the information comparison system compares each data separately, the information identification system identifies the modified identification data, and the information update system is connected to the database via a cloud network.

[0027] Compared with the prior art, the present invention has the following beneficial effects:

[0028] 1. The present invention cooperates with the primary security module and the secondary security module so that when the request port requests to modify the identification data, it needs to pass the security verification of the primary security module and the secondary security module, thereby avoiding direct access to the identification system data and solving the problem that the data is easily tampered with;

[0029] 2. The present invention cooperates with the information repetition module and the database so that when the request port requests to modify the identification data, it needs to repeatedly confirm the modified data through the information repetition module to avoid duplication of the identification data. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 It is a schematic diagram of the overall process of the present invention;

[0031] Figure 2 A flowchart diagram of the request for viewing for the present invention;

[0032] Figure 3 A flowchart of a modification request for the present invention. DETAILED DESCRIPTION

[0033] The technical solutions in the embodiments of the present invention will be described clearly and completely below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments.

[0034] See also Figures 1 to 3 , an embodiment of the present invention provides: a method for improving the security and performance of an identity resolution system, comprising the following steps:

[0035] Step (1), analyzing the port from which the identity resolution request is received, and performing identity resolution processing on the target identity request in the identity resolution request through the identity resolution system in different ways according to the port from which the request is issued, so as to obtain the target object identity required by the target identity request, and transmit it back to the port from which the request is issued;

[0036] Step (2), while returning the target object identifier to the port from which the request was sent, the IP address of the port from which the request was sent is recorded through the identifier resolution system;

[0037] Step (3), recording the operation behavior of the port in different ways according to the port from which the message is sent, and synchronously returning the IP address, operation behavior and target object identification to the enterprise client through the identification resolution system so that the enterprise can record and view it.

[0038] The identity resolution system includes international root nodes, national top-level nodes, secondary nodes, enterprise nodes and recursive nodes.

[0039] An international root node refers to the highest-level service node managed by an identification system, which provides public root-level identification services to the global community and is not limited to a specific country or region.

[0040] The national top-level node refers to the top-level identification service node within a country or region, which can provide top-level identification resolution services nationwide, as well as management capabilities such as identification filing and identification certification. The national top-level node must be connected to the international root nodes of various identification systems, and also to various second-level and lower identification service nodes in China.

[0041] The secondary node is a public node that provides identification services for a specific industry or multiple industries. The secondary node must not only connect with the national top-level node, but also allocate identification codes to industrial enterprises and provide identification registration, identification resolution, identification data services, etc., while meeting the requirements of security, stability and scalability. As the main tool to promote the large-scale development of identification industry applications, the secondary node is the key to creating valuable industry-level identification applications and exploring sustainable development business models.

[0042] An enterprise node refers to an identity service node within an enterprise, which can provide identity registration, identity resolution services, identity data services, etc. for a specific enterprise. It can be deployed independently or as a component of an enterprise information system.

[0043] Recursive nodes refer to the key entry facilities of the identity resolution system, which can improve the overall service performance through caching and other technical means. When receiving an identity resolution request from a client, the recursive node will first check whether there is a query result in the local cache. If not, it will query through the response path returned by the identity resolution server until it finally finds the address or information associated with the identity, returns it to the client, and caches the request result.

[0044] Step (1) comprises the following steps:

[0045] Step (1.1), analyzing the port from which the identity resolution request is sent. When the port from which the identity resolution request is sent is a management port, it is necessary to verify whether the person requesting the port is a real person through a random code security module to avoid invalid requests and slowing down the operation performance of the identity resolution request;

[0046] Step (1.2), after the random code is confirmed, the identity of the requester of the management layer port is identified through the primary security module, and the identity of the requester of the management layer port is identified and confirmed with the unique identity code of each management layer;

[0047] After step (1.3) is confirmed to be correct, the target identification request in the identification resolution request is processed through the identification resolution system.

[0048] Step (1) also includes the following steps:

[0049] Step (1.1), analyzing the port from which the identity resolution request is sent. When the port from which the identity resolution request is sent is a read-only layer, i.e., an external client port, it is necessary to verify through a random code security module whether the person requesting the port is a real person, so as to avoid invalid requests and slow down the operation performance of the identity resolution request;

[0050] Step (1.2), after the random code is confirmed, the target identification request in the identification resolution request is processed by the identification resolution system;

[0051] Step (1.3), the obtained target object identification is transmitted back to the port from which the request was issued in a read-only form to prevent external personnel from tampering with the identification data.

[0052] Step (3) comprises the following steps:

[0053] Step (3.1), when the port from which the identity resolution request is sent is a management level port, if the management level port requester makes a request to modify the identity, the identity of the requester of the management level port is identified through the primary security module, and the identity of the requester of the management level port is identified and confirmed with the unique identity code of each management level;

[0054] Step (3.2), after confirmation by the primary security module, the identity of the requester at the management port is identified through the secondary security module, and the identity of the person is double-secured with the Internet security key and the offline security key;

[0055] Step (3.3), after confirmation, the identification data to be modified is transmitted to the information duplication module through the identification resolution system, and the information duplication module confirms whether the data requested for modification is repeated with the existing identification data in the existing database, so as to avoid the identification data pointing to the same identification unit;

[0056] Step (3.4), when the information duplication module detects that the modified data is not repeated, the modified data is sent to the change confirmation client, waiting for the modification request confirmation of the remaining management level ports. When the number of modification request confirmations exceeds half of the total number of management level ports, the modified identification data is uploaded to the database and the identification data before the modification is replaced;

[0057] Step (3.5), upload the data records of this modification to the enterprise client so that personnel can view and record them.

[0058] Through the cooperation of the primary security module and the secondary security module, the request port needs to pass the security verification of the primary security module and the secondary security module when requesting to modify the identification data, which avoids direct access to the identification system data and solves the problem of easy data tampering.

[0059] The first-level security module includes face recognition and personnel identification code. Face recognition records the face data of each management port personnel and uses it as security verification. The personnel identification code is a unique identification code for each management port personnel to confirm the identity of the personnel.

[0060] The Internet security key is a key that is updated in real time by a random function in the management port and is viewed by personnel at each management port. The offline security key is a key that is generated by a random function on the enterprise client every other day and is viewed by enterprise personnel.

[0061] The information duplication module includes an information comparison system, an information identification system and an information update system. The information comparison system compares each data separately, the information identification system identifies the modified identification data, and the information update system is connected to the database through a cloud network.

[0062] Through the cooperation between the information duplication module and the database, when the request port requests to modify the identification data, it is necessary to repeat the confirmation of the modified data through the information duplication module to avoid duplication of the identification data.

[0063] It will be apparent to those skilled in the art that the invention is not limited to the details of the exemplary embodiments described above and that the invention can be implemented in other specific forms without departing from the spirit or essential features of the invention. Therefore, the embodiments should be considered exemplary and non-limiting in all respects, and the scope of the invention is defined by the appended claims rather than the foregoing description, and it is intended that all variations falling within the meaning and scope of the equivalent elements of the claims be included in the invention. Any reference numeral in a claim should not be considered as limiting the claim to which it relates.

Claims

1. A method for improving the security and performance of an identity resolution system, characterized by: The following steps are involved: Step (1), analyzing the port from which the identity resolution request is received, and performing identity resolution processing on the target identity request in the identity resolution request through the identity resolution system in different ways according to the port from which the request is issued, so as to obtain the target object identity required by the target identity request, and transmit the target object identity back to the port from which the request is issued; Step (2), while returning the target object identifier to the port from which the request was sent, the IP address of the port from which the request was sent is recorded through the identifier resolution system; Step (3), recording the operation behavior of the port in different ways according to the port from which the message is sent, and synchronously returning the IP address, the operation behavior and the target object identifier to the enterprise client through the identifier resolution system so that the enterprise can record and view it.

2. A method for improving the security and performance of an identity resolution system according to claim 1, characterized in that: The identification resolution system includes an international root node, a national top-level node, a secondary node, an enterprise node and a recursive node.

3. The method for improving the security and performance of an identity resolution system according to claim 1, characterized in that: The step (1) comprises the following steps: Step (1.1), analyzing the port from which the identity resolution request is sent. When the port from which the identity resolution request is sent is a management port, it is necessary to verify whether the person requesting the port is a real person through a random code security module to avoid invalid requests and slowing down the operation performance of the identity resolution request; Step (1.2), after the random code is confirmed, the identity of the requester of the management layer port is identified through the primary security module, and the identity of the requester of the management layer port is identified and confirmed with the unique identity code of each management layer; After step (1.3) is confirmed to be correct, the target identification request in the identification resolution request is subjected to identification resolution processing by the identification resolution system.

4. The method for improving the security and performance of an identity resolution system according to claim 1, characterized in that: The step (1) further comprises the following steps: Step (1.1), analyzing the port from which the identity resolution request is sent. When the port from which the identity resolution request is sent is a read-only layer, i.e., an external client port, it is necessary to verify through a random code security module whether the person requesting the port is a real person, so as to avoid invalid requests and slow down the operation performance of the identity resolution request; Step (1.2), after the random code is confirmed, the target identification request in the identification resolution request is subjected to identification resolution processing by the identification resolution system; Step (1.3), transmitting the obtained target object identification back to the port from which the request was issued in a read-only form to prevent outsiders from tampering with the identification data.

5. The method for improving the security and performance of an identity resolution system according to claim 1, characterized in that: The step (3) comprises the following steps: Step (3.1), when the port from which the identity resolution request is sent is a management level port, if the management level port requester makes a request to modify the identity, the identity of the requester of the management level port is identified through the primary security module, and the identity of the requester of the management level port is identified and confirmed with the unique identity code of each management level; Step (3.2), after confirmation by the primary security module, the identity of the requester at the management port is identified through the secondary security module, and the identity of the person is double-secured with the Internet security key and the offline security key; Step (3.3), after confirmation, the identification data to be modified is transmitted to the information duplication module through the identification resolution system, and the information duplication module confirms whether the data requested for modification is repeated with the existing identification data in the existing database, so as to avoid the identification data pointing to the same identification unit; Step (3.4), when the information duplication module detects that the modified data is not repeated, the modified data is sent to the change confirmation client, waiting for the modification request confirmation of the remaining management level ports. When the number of modification request confirmations exceeds half of the total number of management level ports, the modified identification data is uploaded to the database and the identification data before the modification is replaced; Step (3.5), upload the data records of this modification to the enterprise client so that personnel can view and record them.

6. A method for improving the security and performance of an identity resolution system according to claim 3, characterized in that: The first-level security module includes face recognition and personnel identity code. The face recognition records the face data of each management port personnel and uses it as security verification. The personnel identity code is a unique identity code for each management port personnel to confirm the identity of the personnel.

7. A method for improving the security and performance of an identity resolution system according to claim 5, characterized in that: The Internet security key is a key that is updated in real time by a random function in the management port and is viewed by personnel at each management port. The offline security key is a key that is generated by a random function on the enterprise client every other day and is viewed by enterprise personnel.

8. The method for improving the security and performance of an identity resolution system according to claim 5, characterized in that: The information duplication module includes an information comparison system, an information identification system and an information update system. The information comparison system compares each data separately, the information identification system identifies the modified identification data, and the information update system is connected to the database through a cloud network.

Images