User information analysis and authorization authentication verification method based on homomorphic encryption

Abstract

The invention relates to a computer network technology, in particular to a user information analysis and authorization authentication verification method based on homomorphic encryption. Comprising the following steps: formulating standards of parameter normalization and parameter integrity in the two-dimensional code; a user displays the two-dimensional code through the terminal, and the service end analyzes the two-dimensional code information to obtain user information, service authorization information and a timestamp corresponding to the two-dimensional code; the system background performs authenticity verification and validity verification of the information according to the user information, the service authorization information and the timestamp corresponding to the two-dimensional code in the step S2; the verification result in the step S3 is returned to the system background, and the system background instructs the service end to carry out front-end prompting and hardware equipment operation. According to the user information analysis and authorization authentication verification method based on homomorphic encryption, the working cost of service system access can be reduced, the system complexity can be reduced, the information security risk can be reduced, and the leakage problem that information is intercepted and captured can be avoided.

Description

Technical Field

[0001] The present invention relates to computer network technology, and in particular to a user information parsing and authorization authentication verification method based on homomorphic encryption. Background Art

[0002] In the prior art, the QR code parsing and authorization authentication verification service mainly provides authenticity verification and validity verification of the information carried by the QR code, and forwards it to the next business scenario after verification. At present, domestic software platforms provide code services such as personal user codes, collection codes, and payment codes. For example, the medical industry provides medical insurance codes and health cards, and the transportation industry provides bus codes and subway codes. The main problems include: First, when launching code services, various industries and fields mainly consider the application scenario characteristics of the industry, and customize and personalize the information carried by the QR code. Due to different data standards and formats, if the business end needs to adapt to multiple business scenarios and identify and verify QR codes of different standards, it is necessary to classify and compare the information obtained by the QR code parsing, and select the correct verification method. If the system has been built and operated, it needs to be adapted and modified; second, some business scenarios require authenticity verification of the user's identity information. If the user's name, identity document information, contact information and other personal privacy data are transmitted in plain text, there is a risk of information leakage; at the same time, considering that the application scenarios of QR codes are relatively wide, if the user's personal privacy data is transmitted and verified in plain text, there is a certain information security risk. Summary of the invention

[0003] In order to solve the above problems, the present invention provides a user information parsing and authorization authentication verification method based on homomorphic encryption, which can reduce the working cost of business system access, reduce system complexity, reduce information security risks, and avoid the problem of information leakage caused by interception.

[0004] In order to achieve the above object, the technical solution adopted by the present invention is:

[0005] A method for user information parsing and authorization authentication verification based on homomorphic encryption includes the following steps:

[0006] S1 Establish the standard for parameter standardization and parameter integrity in the QR code so that the QR code contains user information, service authorization information and timestamp;

[0007] S2 The user displays the QR code through the terminal, and the service end parses the QR code information to obtain the user information, service authorization information and timestamp corresponding to the QR code;

[0008] S3 The system backend verifies the authenticity and validity of the information according to the user information, business authorization information and timestamp corresponding to the QR code in step S2;

[0009] S4 returns the verification result of step S3 to the system background, and the system background instructs the business end to perform front-end prompts and hardware device operations.

[0010] 2. According to a method for user information parsing and authorization authentication verification based on homomorphic encryption according to claim 1, it is characterized in that: in step S2, the parsing step of the two-dimensional code information includes:

[0011] S2.1 Identify the information contained in the QR code to obtain parsing parameters;

[0012] S2.2 determines whether the parsing parameters meet the verification specifications and are complete, and if the parsing parameters meet the verification specifications and are complete, obtains user information, service authorization information and timestamp; otherwise, terminates the parsing.

[0013] Furthermore, in step S2.2, the format of the parsing parameters is compared with the parameter standard to determine whether the parsing parameters meet the verification specifications; when the name information, ID number and ID type information, and scene type authorization information of the parsing parameters are not empty values, the parsing parameters are complete.

[0014] Further, in step S3, the verification step includes:

[0015] S3.1 randomly extracts an encryption algorithm and a decryption algorithm from the database, and generates two random numbers by the system background;

[0016] S3.2 Obtain correct user information, service authorization information, and code service timestamp based on user information in the database;

[0017] S3.3 Additively homomorphically encrypt the user information, business authorization information corresponding to the QR code in step S2 and the user information and business authorization information in the database to verify the authenticity of the information. If the verification passes, the information is true; if the verification fails, the information is false, and the failed result is sent to the front end;

[0018] S3.4 performs multiplication homomorphic encryption operation on the encryption algorithm, decryption algorithm, random number, and timestamp corresponding to the QR code of step S3.1 to verify the validity of the information. When the verification passes, it means that the authenticity check and validity check of the information have passed. When the verification fails, it means that the information is false, and the failed result is sent to the front end.

[0019] Furthermore, in step S3.3, the authenticity verification step of the information includes:

[0020] S3.3.1 The user information and service authorization information corresponding to the QR code are converted into information a, and the encryption algorithm X is used to operate the information a and the random number z respectively, and the results are added to obtain X(a)+X(z);

[0021] S3.3.2 decrypt the result of step S3.3.1 using decryption algorithm Y to obtain Y(X(a)+X(z));

[0022] S3.3.3 The user information and business authorization information of the database are formed into information b. When Y(X(a)+X(z))=b+z, the authenticity verification passes; when Y(X(a)+X(z))≠b+z, the authenticity verification passes.

[0023] Furthermore, in step S3.4, the information validity verification step includes:

[0024] S3.4.1 The timestamp of the QR code is converted into information c, and the information c and the random number i are respectively operated using the encryption algorithm X, and the results are multiplied to obtain X(c)*X(i);

[0025] S3.4.2 decrypt the result of step S2.4.1 using decryption algorithm Y to obtain Y(X(c)+X(i));

[0026] S3.4.3 performs a QR code parsing service on the user information that has passed the authenticity verification in step S2.2 to obtain a service timestamp and form information d. When Y(X(c)+X(i))=d+i, the validity verification passes; when Y(X(c)+X(i))≠d+i, the validity verification fails.

[0027] Furthermore, the service end includes a display and a speaker.

[0028] Furthermore, in step S4, the system background is also used to parse the records for archiving, and encrypt and store the user information, service authorization information and timestamp.

[0029] The beneficial effects of the present invention are:

[0030] Unified standards for the standardization and integrity of parameters carried by QR codes are formulated, so that the information carried by the QR code must include user information, business authorization information, and timestamp; other optional information includes code number, version number, label, etc. The QR code is scanned and identified through business terminals such as gates, scanners, and code scanning screens. The business system verifies the information after parsing the QR code in a unified data format, reducing the work cost of business system access; new business systems only need to consider normal parsing of QR codes to obtain corresponding information, thereby reducing the complexity of the system; in the process of QR code information transmission and verification, ciphertext is used to reduce information security risks and avoid information leakage caused by interception. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 It is a flowchart of a method for user information parsing and authorization authentication verification based on homomorphic encryption according to a preferred embodiment of the present invention.

[0032] Figure 2 It is a verification flow chart of a user information parsing and authorization authentication verification method based on homomorphic encryption according to a preferred embodiment of the present invention. DETAILED DESCRIPTION

[0033] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0034] It should be noted that when a component is referred to as being "fixed to" another component, it may be directly on the other component or there may also be a component centered. When a component is considered to be "connected to" another component, it may be directly connected to the other component or there may also be a component centered. When a component is considered to be "set on" another component, it may be directly set on the other component or there may also be a component centered. The terms "vertical", "horizontal", "left", "right" and similar expressions used herein are for illustrative purposes only.

[0035] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art of the present invention. The terms used herein in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. The term "and / or" used herein includes any and all combinations of one or more related listed items.

[0036] Please also see Figure 1 and Figure 2 A method for user information parsing and authorization authentication verification based on homomorphic encryption according to a preferred embodiment of the present invention comprises the following steps:

[0037] S1 Establish the standard for parameter standardization and parameter integrity in the QR code so that the QR code contains user information, service authorization information and timestamp;

[0038] S2 users display the QR code through the terminal, and the business end parses the QR code information to obtain the user information, business authorization information and timestamp corresponding to the QR code. The terminal is a mobile application terminal such as an app or a mini program, and the business end uses a gate, a scanner, a code scanning screen and other devices to parse the QR code information.

[0039] In this embodiment, the specifications of the QR code information include:

[0040] The size of the QR code should not exceed 7cm*7cm and should not be less than 2cm*2cm;

[0041] The information carried by the QR code includes user information, business authorization information, and timestamp; other optional information includes code number, version number, label, etc.

[0042] In step S2, the step of parsing the two-dimensional code information includes:

[0043] S2.1 Identify the information contained in the QR code to obtain parsing parameters;

[0044] S2.2 determines whether the parsing parameters meet the verification specifications and are complete, and when the parsing parameters meet the verification specifications and are complete, obtains user information, service authorization information and timestamp; otherwise, terminates the parsing.

[0045] In step S2.2, the format of the parsing parameters is compared with the parameter standard to determine whether the parsing parameters meet the verification specifications; when the name information, ID number and ID type information, and scene type authorization information of the parsing parameters are not empty values, the parsing parameters are complete.

[0046] When the parsing parameters are in the following format, the parsing parameters of the QR code meet the verification specifications

[0047] "name":"XXX",

[0048] "cardNum":"XXX",

[0049] "codeType":"XXX",

[0050] "sceneType":"XXX",

[0051] "appSystemName":"XXX"

[0052] When the parsing parameters meet the following requirement that no empty values ​​are allowed, the parsing parameters of the QR code are complete and can be verified later.

[0053] "name" is the name, expressed in Chinese character string, which belongs to user information, ciphertext, and cannot be empty;

[0054] "cardNum" represents the ID number and ID type, which is user information, encrypted, and cannot be empty;

[0055] "codeType" is the code type, which belongs to the business authorization information, plain text, and can be empty;

[0056] "sceneType" refers to the scene type authorization, which belongs to the business authorization information, is encrypted, and cannot be empty;

[0057] "appSystemName" is the scene system name, which belongs to the business authorization information, is plain text, and can be empty.

[0058] After the parameter normalization verification is passed, the parameter integrity verification is carried out, mainly to make non-empty judgments on the name, ID number and ID type, business authorization information, etc. If the corresponding non-empty standards are met, the parameters are considered complete; otherwise, they are incomplete.

[0059] The S3 system backend verifies the authenticity and validity of the information based on the user information, business authorization information and timestamp corresponding to the QR code in step S2.

[0060] In step S3, the verification step includes:

[0061] S3.1 randomly extracts an encryption algorithm and a decryption algorithm from the database, and generates two random numbers by the system background. In this embodiment, the random numbers are z and i respectively.

[0062] S3.2 obtains the correct user information, service authorization information, and code service timestamp based on the user information in the database.

[0063] S3.3 performs additive homomorphic encryption on the user information, business authorization information corresponding to the QR code in step S2 and the user information and business authorization information in the database to verify the authenticity of the information. When the verification passes, it indicates that the information is true; when the verification fails, it indicates that the information is false, and the failed result is sent to the front end.

[0064] In step S3.3, the authenticity verification step of the information includes:

[0065] S3.3.1 The user information and service authorization information corresponding to the QR code are converted into information a, and the encryption algorithm X is used to operate the information a and the random number z respectively, and the results are added to obtain X(a)+X(z);

[0066] S3.3.2 decrypt the result of step S3.3.1 using decryption algorithm Y to obtain Y(X(a)+X(z));

[0067] S3.3.3 converts the user information and business authorization information of the database into information b. When Y(X(a)+X(z))=b+z, the authenticity verification passes; when Y(X(a)+X(z))≠b+z, the authenticity verification passes.

[0068] S3.4 performs multiplication homomorphic encryption operation on the encryption algorithm, decryption algorithm, random number, and timestamp corresponding to the QR code in step S2.1 to verify the validity of the information. When the verification passes, it means that the authenticity check and validity check of the information have passed. When the verification fails, it means that the information is false, and the failed result is sent to the front end.

[0069] In step S3.4, the information validity verification step includes:

[0070] S3.4.1 The timestamp of the QR code is converted into information c, and the encryption algorithm X is used to perform operations on the information c and the random number i respectively, and the results are multiplied to obtain X(c)*X(i);

[0071] S3.4.2 decrypt the result of step S3.4.1 using decryption algorithm Y to obtain Y(X(c)+X(i));

[0072] S3.4.3 Performs a QR code parsing service on the user information that has passed the authenticity verification in step S2.2 to obtain a service timestamp and form information d. When Y(X(c)+X(i))=d+i, the validity verification passes and the timestamp of the QR code is within the validity period; when Y(X(c)+X(i))≠d+i, the validity verification fails.

[0073] Information validity verification is to verify the timestamp of the QR code. The randomly selected encryption algorithm, decryption algorithm, random number, code service timestamp and other information are subjected to multiplication homomorphic encryption operation to verify the validity.

[0074] S4 returns the verification result of step S3 to the system background, and the system background instructs the business end to perform front-end prompts and hardware device operations to inform the user of the clear verification result. In step S3, the system background is also used to parse the records for archiving, and encrypt and store user information, business authorization information and timestamps.

[0075] In this embodiment, a unified standard for the standardization and integrity of the parameters carried by the QR code is formulated, so that the information carried by the QR code must include user information, business authorization information, and a timestamp; other optional information includes code number, version number, label, etc. The QR code is scanned and identified through business terminals such as gates, scanners, and code scanning screens, and the business system verifies the information after the QR code is parsed in a unified data format, thereby reducing the work cost of business system access; and the newly built business system only needs to consider the normal parsing of the QR code to obtain the corresponding information, thereby reducing the complexity of the system; in the process of QR code information transmission and verification, ciphertext is used to reduce information security risks and avoid the problem of information being intercepted and leaked.

Claims

1. A method for user information parsing and authorization authentication verification based on homomorphic encryption, characterized in that: The steps include: S1 Establish the standard for parameter standardization and parameter integrity in the QR code so that the QR code contains user information, service authorization information and timestamp; S2 The user displays the QR code through the terminal, and the service end parses the QR code information to obtain the user information, service authorization information and timestamp corresponding to the QR code; S3 The system backend verifies the authenticity and validity of the information according to the user information, business authorization information and timestamp corresponding to the QR code in step S2; S4 returns the verification result of step S3 to the system background, and the system background instructs the business end to perform front-end prompts and hardware device operations.

2. According to a method for user information parsing and authorization authentication verification based on homomorphic encryption according to claim 1, it is characterized in that: In step S2, the parsing step of the two-dimensional code information includes: S2.1 Identify the information contained in the QR code to obtain parsing parameters; S2.2 determines whether the parsing parameters meet the verification specifications and are complete, and if the parsing parameters meet the verification specifications and are complete, obtains user information, service authorization information and timestamp; otherwise, terminates the parsing.

3. According to claim 2, a method for user information parsing and authorization authentication verification based on homomorphic encryption is characterized in that: In step S2.2, the format of the parsing parameters is compared with the parameter standard to determine whether the parsing parameters meet the verification specifications; when the name information, ID number and ID type information, and scene type authorization information of the parsing parameters are not empty values, the parsing parameters are complete.

4. According to a method for user information parsing and authorization authentication verification based on homomorphic encryption according to claim 1, it is characterized in that: In step S3, the verification step includes: S3.1 randomly extracts an encryption algorithm and a decryption algorithm from the database, and generates two random numbers by the system background; S3.2 Obtain correct user information, service authorization information, and code service timestamp based on user information in the database; S3.3 Additively homomorphically encrypt the user information, business authorization information corresponding to the QR code in step S2 and the user information and business authorization information in the database to verify the authenticity of the information. If the verification passes, the information is true; if the verification fails, the information is false, and the failed result is sent to the front end; S3.4 performs multiplication homomorphic encryption operation on the encryption algorithm, decryption algorithm, random number, and timestamp corresponding to the QR code of step S3.1 to verify the validity of the information. When the verification passes, it means that the authenticity check and validity check of the information have passed. When the verification fails, it means that the information is false, and the failed result is sent to the front end.

5. According to claim 4, a method for user information parsing and authorization authentication verification based on homomorphic encryption is characterized in that: In step S3.3, the authenticity verification step of the information includes: S3.3.1 The user information and service authorization information corresponding to the QR code are converted into information a, and the encryption algorithm X is used to operate the information a and the random number z respectively, and the results are added to obtain X(a)+X(z); S3.3.2 decrypt the result of step S3.3.1 using decryption algorithm Y to obtain Y(X(a)+X(z)); S3.3.3 The user information and business authorization information of the database are formed into information b. When Y(X(a)+X(z))=b+z, the authenticity verification passes; when Y(X(a)+X(z))≠b+z, the authenticity verification passes.

6. According to claim 5, a method for user information parsing and authorization authentication verification based on homomorphic encryption is characterized in that: In step S3.4, the information validity verification step includes: S3.4.1 The timestamp of the QR code is converted into information c, and the information c and the random number i are respectively operated using the encryption algorithm X, and the results are multiplied to obtain X(c)*X(i); S3.4.2 decrypt the result of step S2.4.1 using decryption algorithm Y to obtain Y(X(c)+X(i)); S3.4.3 performs a QR code parsing service on the user information that has passed the authenticity verification in step S2.2 to obtain a service timestamp and form information d. When Y(X(c)+X(i))=d+i, the validity verification passes; when Y(X(c)+X(i))≠d+i, the validity verification fails.

7. According to claim 1, a method for user information parsing and authorization authentication verification based on homomorphic encryption is characterized in that: The service end includes a display and a speaker.

8. According to claim 1, a method for user information parsing and authorization authentication verification based on homomorphic encryption is characterized in that: In step S4, the system background is also used to parse the records for archiving, and encrypt and store the user information, service authorization information and timestamp.

Images