Identity information secure transmission method and system

Abstract

The embodiment of the invention discloses a secure transmission method and system for identity information, which are used for improving the transmission security of the identity information. The scheme provided by the invention comprises the following steps: providing a public key of the super SIM card for communication equipment, wherein the public key and a private key locally stored in the super SIM card are a key pair; receiving a first hash value and a ciphertext of a communication device through a quantum channel, the first hash value being obtained by performing hash calculation on identity information by the communication device, and the ciphertext being obtained by performing encryption on the identity information by the communication device using the public key; decrypting the ciphertext by using a locally stored private key to obtain identity information to be verified; performing hash verification on the identity information to be verified by using the first hash value; and if the hash verification is passed, storing the identity information.

Description

Technical Field

[0001] The present application relates to the field of communications, and in particular to a method and system for securely transmitting identity information. Background Art

[0002] In the field of communication technology, it is difficult to ensure the security of user identity information transmission. On the one hand, identity information may be monitored during transmission, resulting in sensitive information leakage. On the other hand, the source of identity information is difficult to verify, and it is impossible to ensure that the identity information is authentic and reliable.

[0003] In actual scenarios such as phone calls, unreliable identity information may expose users to the risk of phone fraud. Although fraudulent calls can be identified and handled through user tagging, this method has a certain lag and poor user experience.

[0004] How to improve the security of identity information transmission is the technical problem to be solved by this application. Summary of the invention

[0005] The purpose of the embodiments of the present application is to provide a method and system for securely transmitting identity information, so as to improve the security of identity information transmission.

[0006] In a first aspect, a method for securely transmitting identity information is provided, which is applied to a super SIM card, comprising: Providing a public key of a super SIM card to a communication device, wherein the public key and a private key locally stored in the super SIM card form a key pair; receiving a first hash value and a ciphertext of a communication device through a quantum channel, wherein the first hash value is obtained by the communication device performing a hash calculation on identity information, and the ciphertext is obtained by the communication device performing encryption on the identity information using the public key; Decrypt the ciphertext using the locally stored private key to obtain the identity information to be verified; Using the first hash value to perform a hash check on the identity information to be checked; If the hash check passes, the identity information is stored.

[0007] In a second aspect, a method for securely transmitting identity information is provided, which is applied to a communication device and includes: Obtaining a public key of a super SIM card and identity information to be transmitted, wherein the public key and a private key locally stored in the super SIM card form a key pair; Performing a hash calculation on the identity information to be transmitted to obtain a first hash value; Using the public key to encrypt the identity information to be transmitted to obtain a ciphertext; The first hash value and the ciphertext are sent to the super SIM card based on a quantum channel.

[0008] In a third aspect, a system for secure transmission of identity information is provided, including a super SIM card and a communication device; The super SIM card is used to implement a method for securely transmitting identity information as described in the first aspect; The communication device is used to implement a method for securely transmitting identity information as described in the second aspect.

[0009] In a fourth aspect, a device for securely transmitting identity information is provided, which is applied to a super SIM card, and includes: A module is provided to provide a public key of a super SIM card to a communication device, wherein the public key and a private key locally stored in the super SIM card form a key pair; A receiving module receives a first hash value and a ciphertext of a communication device through a quantum channel, wherein the first hash value is obtained by the communication device performing a hash calculation on the identity information, and the ciphertext is obtained by the communication device performing encryption on the identity information using the public key; A decryption module, which uses a locally stored private key to decrypt the ciphertext to obtain the identity information to be verified; A verification module, using the first hash value to perform a hash check on the identity information to be verified; The storage module stores the identity information if the hash check passes.

[0010] In a fifth aspect, a device for securely transmitting identity information is provided, which is applied to a communication device, including: An acquisition module is used to acquire a public key of a super SIM card and identity information to be transmitted, wherein the public key and a private key locally stored in the super SIM card form a key pair; A calculation module, performing a hash calculation on the identity information to be transmitted to obtain a first hash value; An encryption module, using the public key to encrypt the identity information to be transmitted to obtain a ciphertext; A sending module sends the first hash value and the ciphertext to the super SIM card based on a quantum channel.

[0011] In a sixth aspect, an electronic device is provided, comprising a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the method of the first aspect or the second aspect.

[0012] In a seventh aspect, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method of the first aspect or the second aspect are implemented.

[0013] In an eighth aspect, a computer program product is provided, which includes a non-transitory computer-readable storage medium storing a computer program, wherein the computer program is operable to cause a computer to execute part or all of the steps of the method of the first aspect or the second aspect.

[0014] In an embodiment of the present application, first, the public key of the super SIM card is provided to the communication device, and the public key and the private key locally stored in the super SIM card are a pair of key pairs; then, the first hash value and the ciphertext of the communication device are received through the quantum channel, the first hash value is obtained by the communication device performing hash calculation on the identity information, and the ciphertext is obtained by the communication device using the public key to encrypt the identity information; then, the ciphertext is decrypted using the locally stored private key to obtain the identity information to be verified; then, the first hash value is used to perform hash verification on the identity information to be verified; if the hash verification passes, the identity information is stored. Through the scheme provided by the embodiment of the present application, transmission is performed based on the quantum channel, which effectively improves the security and privacy of the transmitted information. Among them, the ciphertext is encrypted by the communication device using the public key of the super SIM card, which can ensure that the ciphertext can only be decrypted by the private key of the super SIM card, thereby improving the transmission security of the identity information. In addition, the first hash value can facilitate the super SIM card to perform verification on the decrypted identity information, and further verify the security of the identity information. This scheme improves the transmission security of identity information from multiple aspects such as transmission channel, encryption method, and verification method. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings: Figure 1 This is one of the flow charts of a method for securely transmitting identity information applied to a super SIM card according to an embodiment of the present application; Figure 2 This is a second flow chart of a method for securely transmitting identity information applied to a super SIM card according to an embodiment of the present application; Figure 3 This is a flowchart of a method for securely transmitting identity information applied to a super SIM card according to an embodiment of the present application; Figure 4a This is a fourth flow chart of a method for securely transmitting identity information applied to a super SIM card according to an embodiment of the present application; Figure 4b This is a flowchart of a method for securely transmitting identity information applied to a super SIM card according to an embodiment of the present application; Figure 5This is a sixth flow chart of a method for securely transmitting identity information applied to a super SIM card according to an embodiment of the present application; Figure 6 This is a flowchart of a method for securely transmitting identity information applied to a super SIM card according to an embodiment of the present application, No. 7; Figure 7 This is a flowchart of an embodiment of the present application applied to a super SIM card for secure transmission of identity information, No. 8; Figure 8 This is a ninth flow chart of a method for securely transmitting identity information applied to a super SIM card according to an embodiment of the present application; Fig. 9 This is one of the flowcharts of a method for securely transmitting identity information applied to a communication device according to an embodiment of the present application; Fig.10 This is one of the flowcharts of a method for securely transmitting identity information applied to a communication device according to an embodiment of the present application; Fig.11 This is a second flow chart of a method for securely transmitting identity information applied to a communication device according to an embodiment of the present application; Fig.12 This is a flowchart of a method for securely transmitting identity information applied to a communication device according to an embodiment of the present application; Fig.13 This is a fourth flow chart of a method for securely transmitting identity information applied to a communication device according to an embodiment of the present application; Fig.14 This is a flowchart of a method for securely transmitting identity information applied to a communication device according to an embodiment of the present application; Fig.15 This is a sixth flow chart of a method for securely transmitting identity information applied to a communication device according to an embodiment of the present application; Fig.16a This is a schematic diagram of the structure of a system for securely transmitting identity information in accordance with an embodiment of the present application; Fig.16b This is a schematic diagram of an interaction process based on a secure identity information transmission system according to an embodiment of the present application; Fig.17 This is a schematic diagram of a structure of an identity information secure transmission device applied to a super SIM card according to an embodiment of the present application; Fig.18 It is a structural diagram of an identity information secure transmission device applied to a communication device according to an embodiment of the present application. DETAILED DESCRIPTION

[0016] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application. The numbering of the drawings in this application is only used to distinguish the various steps in the scheme, and is not used to limit the execution order of the various steps. The specific execution order is subject to the description in the specification.

[0017] In the field of communication technology, 5G (5th Generation Mobile Communication Technology) new calls can provide data interaction channels such as video channels, audio channels, signaling channels, and DC (Data Channel), making the interaction between users more and more abundant, and the corresponding communication security requirements are getting higher and higher. Although users can show the identity of the other party by sending and receiving business cards in scenarios such as calls, there are still security flaws in the credibility of identity business cards, business card reach, and call consistency. In actual applications, there may be a situation where the dialing event and the SMS arrival time are inconsistent, resulting in a poor communication user experience.

[0018] In order to solve the problems existing in the related technologies, the embodiments of the present application provide a method for securely transmitting identity information. The solution provided by the embodiments of the present application can be applied to the 5G new call application scenario to improve the security of identity information transmission, which is conducive to timely and accurate identity verification for call users, providing reliable data information to protect communication security, and is conducive to realizing reliable and trustworthy 5G new calls. Figure 1 As shown, the solution provided in the embodiment of the present application is applied to a super SIM card, including: S11: providing a public key of a super SIM card to a communication device, wherein the public key and a private key locally stored in the super SIM card form a key pair.

[0019] The Super SIM (Subscriber Identity Module) card is a SIM card with multiple practical functions. It can not only be used for communication, but also for storing information. Based on 5G technology, the Super SIM card can not only realize user identity recognition, but also provide users with a variety of service functions.

[0020] In this step, the super SIM card may be inserted into a user terminal, which may be, for example, an electronic device such as a mobile phone or a tablet computer.

[0021] The super SIM card can generate a key pair including a public key and a private key by itself, or obtain a key pair through a third-party key platform. In this step, the super SIM card can send its own public key directly to the communication device, or forward it to the communication device through a third-party platform such as a key management platform, thereby providing the public key to the communication device.

[0022] S12: Receive a first hash value and a ciphertext of a communication device through a quantum channel, where the first hash value is obtained by the communication device performing a hash calculation on identity information, and the ciphertext is obtained by the communication device performing encryption on the identity information using the public key.

[0023] A quantum channel is a transmission channel based on quantum communication. In this solution, information sent by a communication device is received through a quantum channel to obtain a first hash value and a ciphertext. For example, information can be received through a quantum channel in the form of a single photon signal to ensure information security during transmission.

[0024] Optionally, the first hash value may be received through a public channel, and the ciphertext may be received through a quantum channel in the form of a single photon signal.

[0025] The first hash value is obtained by the communication device performing a hash calculation on the identity information to be transmitted, and the ciphertext is obtained by the communication device using the public key of the super SIM card to encrypt the identity information. The first hash value obtained by the hash calculation can facilitate the super SIM card to perform hash verification, and the ciphertext obtained by public key encryption can ensure that only the private key of the super SIM card can be used to decrypt the identity information. Thus, the security of the identity information is improved from the two aspects of encryption and verification.

[0026] S13: Decrypt the ciphertext using the locally stored private key to obtain the identity information to be verified.

[0027] In this step, the ciphertext is decrypted using its own private key. Since the ciphertext is encrypted by the communication device using the public key pre-provided by the super SIM card, the super SIM card can use its own private key to perform secure decryption to obtain the identity information to be verified.

[0028] S14: Use the first hash value to perform hash verification on the identity information to be verified.

[0029] In this step, the first hash value is used to perform a hash check on the identity information to be verified obtained by the decryption. Specifically, in this step, a hash calculation is performed on the identity information to be verified, and the calculated result is compared with the received first hash value. If they match, the hash check passes.

[0030] S15: If the hash verification passes, the identity information is stored.

[0031] If the hash check passes, the identity information can be determined to be safe and then stored. The identity information can be used to display during a call or other communication event, so that the user can quickly learn the identity of the other party.

[0032] Through the scheme provided by the embodiment of the present application, transmission is performed based on the quantum channel, which effectively improves the security and privacy of the transmitted information. Among them, the ciphertext is obtained by encrypting the super SIM card's public key by the communication device, which can ensure that the ciphertext can only be decrypted by the super SIM card's private key, thereby improving the transmission security of the identity information. In addition, the first hash value can facilitate the super SIM card to verify the decrypted identity information, further verifying the security of the identity information. This scheme improves the transmission security of identity information from multiple aspects, including transmission channel, encryption method, and verification method.

[0033] Optionally, after the hash check passes, the identity information can be stored in the key pool S, and the key pool S is stored in the auxiliary security domain to achieve the storage of trusted business card identity information. In one application scenario, the user terminal can query the communication platform for identity information based on the mobile phone number that needs to be queried, and the communication platform will securely transmit the identity information corresponding to the mobile phone number that needs to be queried to the user terminal through the solution provided in the above embodiment of the present application, so that the user terminal can know whether the user identity of the communication counterpart is credible. The solution provided by the embodiment of the present application can effectively prove the user identity of the communication counterpart, which is conducive to identifying fraudulent calls, especially in the scenario where the fraudulent user imitates relatives and friends to conduct telephone fraud and reduces the risk of users being deceived.

[0034] Based on the solution provided in the above embodiment, optionally, Figure 2 As shown, in the above step S14, using the first hash value to perform hash verification on the identity information to be verified includes: S21: Perform hash calculation on the identity information to be verified to obtain a second hash value.

[0035] In this step, a hash calculation is performed on the decrypted identity information to be verified, wherein the adopted hash algorithm may be an algorithm pre-negotiated between the super SIM card and the communication device. The communication device also uses the pre-negotiated hash algorithm in the process of generating the first hash value.

[0036] S22: Checking the consistency between the first Hash value and the second Hash value.

[0037] Since the hash algorithm used by the communication device to generate the first hash value is the same as the hash algorithm used by the super SIM card to perform hash calculation on the identity information to be verified, when the identity information provided by the communication device is the same as the identity information to be verified decrypted by the super SIM card, the first hash value and the second hash value should be consistent. Based on this, the consistency of the first hash value and the second hash value is checked in this step to check whether the identity information has been tampered with during the transmission process, or in other words, whether the identity information to be verified obtained by decryption is the same as the identity information used when the communication terminal generates the first hash value.

[0038] S23: If they are consistent, it is determined that the hash check passes.

[0039] If they are consistent, it means that the decrypted identity information to be verified is the same as the identity information used by the communication terminal to generate the first hash value, that is, the identity information has not been tampered with during the transmission process, and it can be determined that the identity information is safe and the hash verification passes.

[0040] Through the solution provided in the embodiment of the present application, the security of the identity information is checked based on the hash check to determine whether the identity information has been tampered with during the transmission process, thereby verifying the credibility of the above-mentioned identity information to be checked.

[0041] Based on the solution provided in the above embodiment, optionally, Figure 3 As shown, in the above step S15, if the hash check passes, the identity information is stored, including: S31: Determine a starting position of an encryption key based on a first preset position of the second Hash value, and determine a length of the encryption key based on a second preset position of the second Hash value.

[0042] In the solution provided in the embodiment of the present application, an encryption key is generated based on the second hash value. The starting position of the encryption key is determined based on the first preset position, and the length of the encryption key is determined based on the second preset position. The first preset position and the second preset position may be the same or different, and the first preset position and the second preset position may be pre-set according to actual needs.

[0043] S32: Extracting the encryption key from the second hash value based on the starting position and length of the encryption key.

[0044] In this step, the starting position is determined based on the value of the first preset bit of the second hash value, and the starting position refers to the starting position for extracting the encryption key from the second hash value. The extraction length is determined based on the value of the second preset bit of the second hash value, that is, the characters of the above length are extracted from the above starting position as the encryption key.

[0045] S33: Use the encryption key to perform symmetric encryption on the identity information, and store the symmetric encrypted identity information.

[0046] In this step, the identity information is symmetrically encrypted based on the encryption key extracted above, so as to store the encrypted identity information. Through the scheme provided by the embodiment of the present application, the identity information can be stored in ciphertext form, further improving the security of identity information storage and reducing the risk of identity information leakage.

[0047] Based on the solution provided in the above embodiment, optionally, the identity information includes a telephone number, and the first hash value is obtained by the communication device performing a hash calculation on the telephone number in the identity information; As shown in FIG. 4 , in the above step S21, performing a hash calculation on the identity information to be verified to obtain a second hash value includes: S41: Perform hash calculation on the telephone number in the identity information to be verified to obtain the second hash value.

[0048] In this step, a telephone number is identified from the identity information to be verified, and the telephone number can be identified based on a preset format. For example, it can be identified from a preset telephone number digit in the decrypted identity information, or it can be identified according to the format of the telephone number. Subsequently, a hash calculation is performed on the telephone number according to a preset hash algorithm to obtain a second hash value.

[0049] In the above step S33, storing the symmetrically encrypted identity information includes: S42: The telephone number and the encrypted identity information are associated and stored in a local storage domain.

[0050] In this step, the phone number and the encrypted identity information are stored in association. On the one hand, when a communication event corresponding to the phone number occurs, the encrypted identity information can be quickly queried through the phone number, thereby realizing the display of the identity information. On the other hand, the above-mentioned identity information is obtained by symmetric encryption based on the phone number. By means of associated storage, it is convenient to generate an encryption key according to the phone number to decrypt the encrypted identity information. Therefore, the solution provided by the embodiment of the present application can realize the secure storage of identity information, improve the efficiency of identity information query based on the method of associated storage of the phone number, and can efficiently decrypt the identity information in plain text for display.

[0051] The present invention is further described below with reference to an example.

[0052] See also Figure 4b The solution provided in the embodiment of the present application can be applied to a super SIM card inserted in a mobile phone. The above communication device can specifically be a communication platform ( Figure 4bThe process of the platform sending identity information to the super SIM card is as follows: Step 1: The platform encrypts the identity information through the public key of the super SIM card and sends the encrypted information to the mobile phone. The identity information may include the mobile phone number and user identity information (name username, ID userno, company company, position, etc.).

[0053] Step 2: The mobile phone receives the encrypted identity information through SDK (Software Development Kit), and uses the machine-card channel to transmit the information sent by the platform to the super SIM card, and the private key in the card is used to decrypt the original text.

[0054] Step 3: The super SIM card performs hash calculation on the decrypted mobile phone number to obtain a hash string hash, and takes the first digit as the starting position N of the key pool to extract the symmetric encryption key, and then takes the last 2 digits as the length of the symmetric encryption key. Thus, the encryption key encrypt is obtained. In this example, the first digit is the first preset digit described in the above embodiment, and the last 2 digits are the second preset digits described in the above embodiment.

[0055] Step 4: The super SIM card uses the encryption key to symmetrically encrypt the identity information and returns it to the SDK, which is stored in the secure local storage region specified by the SDK. The storage data format is, for example, phone:encryptData.

[0056] At this point, the trusted identity information corresponding to the mobile phone number verified in the platform is sent to the mobile phone and securely stored.

[0057] Based on the solution provided in the above embodiment, optionally, Figure 5 As shown, before the above step S12, that is, before receiving the first hash value and ciphertext of the communication device through the quantum channel, it also includes: S51: Monitor incoming call events.

[0058] The above incoming call event may be a communication event based on the mobile phone number of the calling user, and the incoming call event may specifically be a voice call, video call, etc. The incoming call event carries at least the calling number that initiated the event, and may also carry the type information of the incoming call event.

[0059] S52: Query the corresponding user information in the local storage domain based on the calling number carried in the incoming call event.

[0060] In this step, a query is performed in the local storage domain based on the caller number carried in the incoming call event. If the user information associated with the caller number can be found, the stored user information can be decrypted and displayed to allow the user to know the identity of the calling user who initiated the call event.

[0061] S53: If the user information corresponding to the calling number is not found locally, an identity information acquisition request is sent to the communication device based on the calling number.

[0062] If the user information corresponding to the calling number is not found locally, the communication event comes from an unknown user and the security of the incoming call event cannot be determined. In this step, if the user information corresponding to the calling number cannot be found locally, an identity information acquisition request is sent to the communication device based on the calling number to request the communication device to send the credible identity information corresponding to the calling number. The identity information acquisition request may carry the calling number.

[0063] Based on the solution provided in the above embodiment, optionally, Figure 6 As shown, in the above step S51, monitoring the incoming call event includes: S61: monitoring incoming call events through the software development kit SDK of the mobile phone terminal to which the super SIM card is inserted.

[0064] In this example, the super SIM card monitors incoming call events through the SDK of the plugged-in mobile terminal, wherein the monitoring rules can be flexibly set according to actual needs.

[0065] Based on the solution provided in the above embodiment, optionally, the first hash value is obtained by the communication device performing a hash calculation on the identity information corresponding to the calling number, and the ciphertext is obtained by the communication device using the public key to encrypt the identity information corresponding to the calling number.

[0066] In this example, the communication device can send the corresponding identity information to the terminal to which the super SIM card is plugged based on the identity information acquisition request. The communication device can extract the calling number from the identity information acquisition request, and then encrypt and transmit the identity information corresponding to the calling number using the scheme provided in the above embodiment, so that the super SIM card can obtain the identity information corresponding to the calling number.

[0067] Based on the solution provided in the above embodiment, optionally, Figure 7 As shown, in the above step S15, if the hash check passes, the identity information is stored, including: S71: The calling number and the corresponding identity information are associated and stored in a local storage area.

[0068] In the solution provided by the embodiment of the present application, the super SIM card performs decryption and hash verification on the received information, and if the verification is passed, the calling number and the corresponding identity information are associated and stored in the local storage domain. If a call event initiated by the calling number is received later, the super SIM card can query the identity information corresponding to the calling number from the local storage domain, and then decrypt the identity information and display it to the user, without having to request the communication device to obtain the identity information corresponding to the calling number.

[0069] Based on the solution provided in the above embodiment, optionally, Figure 8 As shown, if the hash check passes, it also includes: S81: Generate and display incoming call information corresponding to the calling number based on the identity information.

[0070] In this step, when the calling number calls, the display can be performed based on the verified identity information. The call information includes, for example, the calling number and the corresponding identity information, which may specifically include attribute information such as the name that can identify the identity of the caller. This makes it easy for the user to intuitively see the identity of the caller, which can help the user quickly identify whether the call is safe and reliable, thereby reducing the risk of telecommunications fraud.

[0071] In order to solve the problems existing in the related art, the embodiment of the present application also provides a method for securely transmitting identity information, such as Fig. 9 As shown, it is applied to communication equipment, including: S91: Acquire a public key of the super SIM card and identity information to be transmitted, wherein the public key and a private key locally stored in the super SIM card form a key pair.

[0072] The super SIM card can generate a key pair including a public key and a private key by itself, or obtain a key pair through a third-party key platform. In this step, the communication device can directly communicate with the super SIM card to obtain the public key, or obtain the public key through a third-party platform such as a key management platform.

[0073] S92: Perform hash calculation on the identity information to be transmitted to obtain a first hash value.

[0074] In this step, the first hash value is obtained by the communication device performing a hash calculation on the identity information to be transmitted, and the first hash value obtained by the hash calculation can facilitate the super SIM card to perform a hash check, thereby improving the security of the identity information from the verification method.

[0075] S93: Use the public key to encrypt the identity information to be transmitted to obtain a ciphertext.

[0076] The above ciphertext is obtained by the communication device using the public key of the super SIM card to encrypt the identity information. The ciphertext encrypted by the public key can ensure that the identity information can only be decrypted using the private key of the super SIM card. Thus, the security of the identity information is improved from the encryption method.

[0077] S94: Sending the first hash value and the ciphertext to the super SIM card based on the quantum channel.

[0078] A quantum channel is a transmission channel based on quantum communication. In this scheme, information is sent through the quantum channel. Specifically, the transmission can be performed through the quantum channel in the form of a single photon signal to ensure the security of information during the transmission process.

[0079] Through the scheme provided by the embodiment of the present application, transmission is performed based on the quantum channel, which effectively improves the security and privacy of the transmitted information. Among them, the ciphertext is obtained by encrypting the super SIM card's public key by the communication device, which can ensure that the ciphertext can only be decrypted by the private key of the super SIM card, thereby improving the transmission security of the identity information. In addition, the first hash value can facilitate the super SIM card to verify the decrypted identity information, and further verify the security of the identity information. This scheme improves the transmission security of identity information from multiple aspects such as transmission channel, encryption method, and verification method.

[0080] Based on the solution provided in the above embodiment, optionally, Fig.10 As shown, in the above step S94, sending the first hash value and the ciphertext to the super SIM card based on the quantum channel includes: S101: Sending the first hash value to the super SIM card through a public channel.

[0081] In this step, the first hash value is sent through a public channel. The first hash value is used for hash verification by the super SIM card. Since the first hash value is irreversible, it is difficult to restore the identity information from the first hash value even if it is leaked. Therefore, the first hash value can be transmitted through a public channel to reduce the cost of information transmission.

[0082] S102: Perform a binary operation on the ciphertext, and send the binary operation result to the super SIM card via a single photon signal.

[0083] In this step, binary operations are performed on the ciphertext to convert it into binary form so that it can be sent to the super SIM card through the quantum channel in the form of a single photon signal. Transmission through the quantum channel in the form of a single photon signal can effectively improve the security of ciphertext transmission and reduce the risk of ciphertext leakage.

[0084] Based on the solution provided in the above embodiment, optionally, Fig.11As shown, in the above step S91, obtaining the public key of the super SIM card and the identity information to be transmitted includes: S111: Acquire identity information to be stored, where the identity information to be stored includes a telephone number and corresponding user information.

[0085] In this step, the identity information to be transmitted can be provided by any identity information platform or terminal. For example, the super SIM card is plugged into terminal A, and in this example, the public key of the super SIM card can be obtained from terminal A. The identity information to be transmitted can be the identity information of terminal B.

[0086] For example, the identity information to be stored obtained in this step may be the identity information of the super SIM card plugged into terminal B. The identity information to be stored can be used to distinguish the identities of different communication users. In this step, the identity information to be stored may be obtained by directly communicating with terminal B, or by obtaining the identity information to be stored through a third-party device such as an identity information management platform.

[0087] S112: Perform identity authentication on the user corresponding to the phone number based on the identity information to be stored.

[0088] In this step, the acquired identity information to be stored is verified, specifically, the user corresponding to the identity information is authenticated to check whether the identity information matches the real user information corresponding to the phone number. For example, for the identity information provided by terminal B, terminal B can be instructed to perform facial recognition, fingerprint recognition or other types of identity authentication to check whether the user using terminal B matches the above-mentioned identity information to be stored.

[0089] S113: After the identity authentication is passed, the identity information to be stored is stored.

[0090] If the identity authentication is successful, it indicates that the user of terminal B matches the identity information to be stored, so the identity information can be stored. The identity information is used to indicate the identity of the user using the corresponding phone number.

[0091] Next, we will further explain this solution with an example. The transmission and display process of trusted identity information is as follows: Step 1: Mobile phone user K uses facial recognition and three elements of the number (mobile phone number, identity ID, name) to authenticate his personal trusted identity through the platform, and authenticates his relevant personal professional identity information to obtain the user trusted identity information corresponding to the mobile phone number and store it in the platform.

[0092] Step 2: Mobile phone user K clicks to make a trusted 5G new call, activates facial recognition, SIM shield identity verification and other security authentication, and after the authentication is passed, performs the call sign operation.

[0093] Step 3: The mobile phone user L receives the incoming call information from K. The SDK monitors the incoming call event and searches the local storage region for the storage data of the mobile phone number. If not, based on the solution provided in any of the above embodiments, the user information of the mobile phone K on the platform is obtained through the data channel and displayed in the caller ID. If yes, the user information of the mobile phone number is directly obtained from the region, and is transferred to the card for decryption to obtain the plaintext user information, which is displayed in the caller ID.

[0094] In this way, the function of real-time display of trusted business cards can be realized.

[0095] Based on the solution provided in the above embodiment, optionally, Fig.12 As shown, before the above step S92, that is, before performing the hash calculation on the identity information to be transmitted, it also includes: S121: Receive an identity information acquisition request from a called terminal, where the identity information acquisition request carries a calling number of a calling terminal.

[0096] In this example, the communication device can send corresponding identity information to the terminal to which the super SIM card is plugged based on the identity information acquisition request. In this step, the communication device can obtain the identity information acquisition request sent by the called terminal, and then extract the calling number from it.

[0097] In the above step S92, performing a hash calculation on the identity information to be transmitted to obtain a first hash value includes: S122: Perform hash calculation on the user information corresponding to the calling number to obtain a first hash value.

[0098] In this step, the corresponding user information is obtained based on the calling number query, and a hash calculation is performed on the user information to obtain a first hash value, which can facilitate the super SIM card of the called terminal to perform hash verification.

[0099] Among them, in the above step S93, the identity information to be transmitted is encrypted using the public key to obtain a ciphertext, including: S123: Encrypt the user information corresponding to the calling number using the public key of the called terminal to obtain a ciphertext.

[0100] In this step, the user information corresponding to the calling number is encrypted using the public key of the super SIM card plugged into the called terminal, thereby obtaining a ciphertext, which can safely transmit the identity information and improve the security of identity information transmission.

[0101] Wherein, in the above step S94, sending the first hash value and the ciphertext to the super SIM card based on the quantum channel includes: S124: Sending the first hash value and the ciphertext to the super SIM card of the called terminal based on the quantum channel.

[0102] In this step, the first hash value and ciphertext are transmitted to the super SIM card based on the quantum channel, so that the super SIM card can perform decryption and hash verification on the identity information, thereby obtaining the identity information corresponding to the calling number.

[0103] Based on the solution provided in the above embodiment, optionally, Fig.13 As shown, in the above step S112, identity authentication is performed on the user corresponding to the phone number based on the identity information to be stored, including: S131: Acquire the telephone number and corresponding user information.

[0104] In an embodiment of the present application, a telephone number and corresponding user information are first obtained, wherein the telephone number may be a telephone number corresponding to a super SIM card, and the user information may be user information corresponding to a super SIM card.

[0105] S132: Perform biometric identity authentication on the user corresponding to the phone number.

[0106] In this step, biometric identity authentication can be performed through the user terminal to which the super SIM card corresponding to the phone number is inserted. Biometric identity authentication can effectively verify the identity of the user using the terminal, avoiding the situation where the user's identity information does not match the user who actually uses the terminal.

[0107] Among them, in the above step S113, after the identity authentication is passed, storing the identity information to be stored includes: S133: After the biometric identity authentication is passed, the telephone number and the corresponding user information are associated and stored.

[0108] If the biometric identity authentication is passed, it means that the user using the terminal matches the identity information and the identity information is credible, and the phone number and the corresponding user information can be associated and stored. Through biometric identity authentication, the authenticity of the verification of user identity information can be effectively improved to ensure that the identity information is credible.

[0109] Based on the solution provided in the above embodiment, optionally, Fig.14 As shown, after the above step S113, that is, after storing the identity information to be stored, it also includes: S141: If a call request initiated by a calling terminal is received, an identity verification is performed on the calling terminal.

[0110] In an embodiment of the present application, the communication device can be a platform for realizing communication between terminals. After the calling terminal initiates a call request, an identity verification is first performed on the calling terminal to verify whether the user using the calling terminal matches the identity information corresponding to the telephone number of the calling terminal.

[0111] S142: If the identity verification is passed, respond to the call request of the calling terminal.

[0112] If the identity verification is passed, it indicates that the user initiating the call matches the identity information corresponding to the phone number of the calling terminal, and then responds to the call request of the calling terminal to continue the call event. For example, after the identity verification is passed, a call request is sent to the called terminal based on the call request of the calling terminal, thereby establishing a call connection between the calling terminal and the called terminal.

[0113] Based on the solution provided in the above embodiment, optionally, Fig.15 As shown, in the above step S141, performing identity verification on the calling terminal includes: S151: Performing biometric identity verification and / or SIM shield identity verification on the calling terminal.

[0114] In this example, every time the calling terminal initiates a call request, it performs identity verification based on biometric identity verification and SIM shield identity verification, and then initiates a call to the called terminal after the verification passes. This solution can effectively improve the security of identity verification and ensure that the user who initiates a call request each time matches the stored identity information.

[0115] In order to solve the problems existing in the related art, the embodiment of the present application provides a system for secure transmission of identity information, such as Fig.16a As shown, it includes a super SIM card 161 and a communication device 162; The super SIM card 161 is used to implement a method for securely transmitting identity information as described in any of the above embodiments applied to the super SIM card; The communication device 162 is used to implement a method for securely transmitting identity information as described in any embodiment of the above-mentioned application to a communication device.

[0116] Among them, the super SIM card is communicatively connected with the communication device. Specifically, the super SIM card can be communicatively connected with the communication device through a plugged-in mobile phone, tablet computer or other user terminal. Specifically, the communication device can be a communication platform. Next, we will further explain the system provided by this solution with an example. Fig.16b The communication device is shown as quantum device A, and the super SIM card is shown as super SIM card B.

[0117] Step 1: Quantum device A generates an initial random string RS, calculates a hash value based on RS, and transmits it to B through a public channel. The random string RS can be a string used to represent identity information. The random string RS and hash value can be expressed as: RS=Random(A) Hash=Hash / sm3(RS) Step 2: A uses the public key publicKeyB of B's ​​super SIM card to encrypt RS to obtain the ciphertext encryptData. The ciphertext can be expressed as: encryptData=sm2 / RSA(RS,publicKeyB) Step 3: A performs binary operation on encryptData to obtain byteData0, which A sends to B using a single photon signal. The binary ciphertext can be expressed as: byteData0=toByte(encryptData) Step 4: B receives the signal data byteData0.

[0118] Step 5: B uses B's private key privateKeyB to calculate byteData0 to obtain the decrypted data decryptData1, and performs a hash operation on decryptData1 to obtain hash1, and compares the directly received hash with the value of hash1 obtained by the hash operation. If they are consistent, it means that it has not been monitored, and the random string RS can be added to the initial key pool S, and the initial key pool S can be stored in the auxiliary security domain of the super SIM card, and then used for subsequent encrypted communications; if they are inconsistent, it means that it has been tampered with or monitored, the data is incomplete and wrong, and the random string RS is discarded, and A is notified through the public channel to regenerate and exchange the random string.

[0119] At this point, the secure distribution and storage of the random string in the super SIM card is completed.

[0120] Based on the system described in the above embodiment, optionally, the communication device is a quantum communication device, and the quantum communication device is used to realize a call function between multiple terminals.

[0121] The system provided by the embodiment of the present application, based on quantum communication and super SIM card, can ensure the secure transmission and secure storage of trusted identity information. This solution uses a key pool and utilizes the randomness of the target number hash to achieve a high security effect of one number and one secret in identity information application scenarios. This solution can effectively solve the problem of limited storage capacity of super SIM cards, improve external storage security, and reduce computing performance requirements by using super SIM cards, symmetric keys, and SDK external data storage. In addition, this solution can monitor incoming call events in real time on the SDK side, solving the problem of untimely and inaccurate platform monitoring of business card display.

[0122] In order to solve the problems existing in the related art, the embodiment of the present application also provides an identity information secure transmission device 170, such as Fig.17 As shown, it is applied to a super SIM card, including: A providing module 171 provides a public key of a super SIM card to a communication device, wherein the public key and a private key locally stored in the super SIM card form a key pair; A receiving module 172 receives a first hash value and a ciphertext of a communication device through a quantum channel, wherein the first hash value is obtained by the communication device performing a hash calculation on the identity information, and the ciphertext is obtained by the communication device performing encryption on the identity information using the public key; The decryption module 173 uses the locally stored private key to decrypt the ciphertext to obtain the identity information to be verified; A verification module 174 performs a hash verification on the identity information to be verified using the first hash value; The storage module 175 stores the identity information if the hash check passes.

[0123] Through the scheme provided by the embodiment of the present application, transmission is performed based on the quantum channel, which effectively improves the security and privacy of the transmitted information. Among them, the ciphertext is obtained by encrypting the super SIM card's public key by the communication device, which can ensure that the ciphertext can only be decrypted by the super SIM card's private key, thereby improving the transmission security of the identity information. In addition, the first hash value can facilitate the super SIM card to verify the decrypted identity information, further verifying the security of the identity information. This scheme improves the transmission security of identity information from multiple aspects, including transmission channel, encryption method, and verification method.

[0124] In order to solve the problems existing in the related art, the embodiment of the present application also provides an identity information secure transmission device 180, such as Fig.18 As shown, it is applied to communication equipment, including: An acquisition module 181 is configured to acquire a public key of a super SIM card and identity information to be transmitted, wherein the public key and a private key locally stored in the super SIM card form a key pair; The calculation module 182 performs a hash calculation on the identity information to be transmitted to obtain a first hash value; The encryption module 183 uses the public key to encrypt the identity information to be transmitted to obtain a ciphertext; The sending module 184 sends the first hash value and the ciphertext to the super SIM card based on the quantum channel.

[0125] Through the scheme provided by the embodiment of the present application, transmission is performed based on the quantum channel, which effectively improves the security and privacy of the transmitted information. Among them, the ciphertext is obtained by encrypting the super SIM card's public key by the communication device, which can ensure that the ciphertext can only be decrypted by the super SIM card's private key, thereby improving the transmission security of the identity information. In addition, the first hash value can facilitate the super SIM card to verify the decrypted identity information, further verifying the security of the identity information. This scheme improves the transmission security of identity information from multiple aspects, including transmission channel, encryption method, and verification method.

[0126] Among them, the above modules in the device provided by the embodiment of the present application can also implement the method steps provided by the above method embodiment. Alternatively, the device provided by the embodiment of the present application can also include other modules in addition to the above modules to implement the method steps provided by the above method embodiment. And the device provided by the embodiment of the present application can achieve the technical effects that can be achieved by the above method embodiment.

[0127] Preferably, an embodiment of the present application also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned method for securely transmitting identity information applied to a super SIM card or the embodiment of a method for securely transmitting identity information applied to a communication device are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0128] The embodiment of the present application also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, each process of the above-mentioned method for securely transmitting identity information applied to a super SIM card or a method for securely transmitting identity information applied to a communication device is implemented, and the same technical effect can be achieved. To avoid repetition, it is not repeated here. The computer-readable storage medium is, for example, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0129] An embodiment of the present application also provides a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program. The computer program can be operated to enable a computer to execute part or all of the steps of the above-mentioned method for securely transmitting identity information applied to a super SIM card or an embodiment of a method for securely transmitting identity information applied to a communication device, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0130] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0131] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0132] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0133] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0134] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0135] Memory may include non-permanent storage in a computer-readable medium, in the form of random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0136] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0137] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0138] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0139] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A method for securely transmitting identity information, characterized in that: Applied to super SIM cards, including: Providing a public key of a super SIM card to a communication device, wherein the public key and a private key locally stored in the super SIM card form a key pair; receiving a first hash value and a ciphertext of a communication device through a quantum channel, wherein the first hash value is obtained by the communication device performing a hash calculation on identity information, and the ciphertext is obtained by the communication device performing encryption on the identity information using the public key; Decrypt the ciphertext using the locally stored private key to obtain the identity information to be verified; Using the first hash value to perform a hash check on the identity information to be checked; If the hash check passes, the identity information is stored.

2. The method according to claim 1, characterized in that Using the first hash value to perform hash verification on the identity information to be verified includes: Performing a hash calculation on the identity information to be verified to obtain a second hash value; Verifying the consistency of the first Hash value and the second Hash value; If they are consistent, the hash check is determined to pass.

3. The method according to claim 2, characterized in that If the hash check passes, the identity information is stored, including: determining a starting position of an encryption key based on a first preset position of the second hash value, and determining a length of the encryption key based on a second preset position of the second hash value; extracting the encryption key from the second hash value based on a starting position and a length of the encryption key; The identity information is symmetrically encrypted using the encryption key, and the symmetrically encrypted identity information is stored.

4. The method according to claim 3, characterized in that The identity information includes a telephone number, and the first hash value is obtained by the communication device performing a hash calculation on the telephone number in the identity information; The step of performing a hash calculation on the identity information to be verified to obtain a second hash value includes: Performing a hash calculation on the telephone number in the identity information to be verified to obtain the second hash value; The identity information stored after symmetrical encryption includes: The telephone number and the encrypted identity information are associated and stored in a local storage domain.

5. The method according to any one of claims 1 to 4, characterized in that Before receiving the first hash value and ciphertext of the communication device through the quantum channel, the method further includes: Monitor incoming call events; Based on the caller number carried in the incoming call event, query the corresponding user information in the local storage domain; If the user information corresponding to the calling number is not found locally, an identity information acquisition request is sent to the communication device based on the calling number.

6. The method according to claim 5, characterized in that Monitor incoming call events, including: The incoming call event is monitored by the software development kit SDK of the mobile phone terminal to which the super SIM card is inserted.

7. The method according to claim 5, characterized in that The first hash value is obtained by the communication device performing a hash calculation on the identity information corresponding to the calling number, and the ciphertext is obtained by the communication device using the public key to encrypt the identity information corresponding to the calling number.

8. The method according to claim 7, characterized in that If the hash check passes, the identity information is stored, including: The calling number and the corresponding identity information are associated and stored in a local storage domain.

9. The method according to claim 7, characterized in that If the hash check passes, it also includes: Incoming call information corresponding to the calling number is generated based on the identity information and displayed.

10. A method for securely transmitting identity information, characterized in that: Applied to communication equipment, including: Obtaining a public key of a super SIM card and identity information to be transmitted, wherein the public key and a private key locally stored in the super SIM card form a key pair; Performing a hash calculation on the identity information to be transmitted to obtain a first hash value; Using the public key to encrypt the identity information to be transmitted to obtain a ciphertext; The first hash value and the ciphertext are sent to the super SIM card based on a quantum channel.

11. The method according to claim 10, characterized in that Sending the first hash value and the ciphertext to the super SIM card based on the quantum channel includes: Sending the first hash value to the super SIM card through a public channel; A binary operation is performed on the ciphertext, and the binary operation result is sent to the super SIM card via a single photon signal.

12. The method according to claim 11, characterized in that Obtain the public key of the super SIM card and the identity information to be transmitted, including: Acquire identity information to be stored, wherein the identity information to be stored includes a telephone number and corresponding user information; Performing identity authentication on the user corresponding to the phone number based on the identity information to be stored; After the identity authentication is passed, the identity information to be stored is stored.

13. The method according to claim 12, characterized in that Before performing hash calculation on the identity information to be transmitted, the method further includes: Receiving an identity information acquisition request from a called terminal, wherein the identity information acquisition request carries a calling number of a calling terminal; The step of performing a hash calculation on the identity information to be transmitted to obtain a first hash value includes: Performing hash calculation on the user information corresponding to the calling number to obtain a first hash value; The public key is used to encrypt the identity information to be transmitted to obtain a ciphertext, including: Using the public key of the called terminal to encrypt the user information corresponding to the calling number to obtain a ciphertext; The step of sending the first hash value and the ciphertext to the super SIM card based on the quantum channel includes: The first hash value and the ciphertext are sent to the super SIM card of the called terminal based on the quantum channel.

14. The method according to claim 12, characterized in that Performing identity authentication on the user corresponding to the phone number based on the identity information to be stored includes: Obtaining the telephone number and corresponding user information; Performing biometric identity authentication on the user corresponding to the telephone number; After the identity authentication is passed, the identity information to be stored is stored, including: After the biometric identity authentication is passed, the telephone number and the corresponding user information are associated and stored.

15. The method according to claim 12, characterized in that After storing the identity information to be stored, the method further includes: If a call request initiated by a calling terminal is received, performing identity verification on the calling terminal; If the identity verification is passed, the call request of the calling terminal is responded to.

16. The method according to claim 15, characterized in that Performing identity verification on the calling terminal includes: Performing biometric identity verification and / or SIM shield identity verification on the calling terminal.

17. A system for secure transmission of identity information, characterized in that: Including super SIM cards and communication equipment; The super SIM card is used to implement a method for securely transmitting identity information as claimed in any one of claims 1 to 9; The communication device is used to implement a method for securely transmitting identity information as described in any one of claims 10 to 16.

18. The system of claim 17, wherein: The communication device is a quantum communication device, and the quantum communication device is used to realize a call function between multiple terminals.

Images