Privacy protection method and device, equipment, medium and product

Abstract

The invention discloses a privacy protection method and device, equipment, a medium and a product, and relates to the technical field of privacy security, and the method comprises the steps: determining a shared account corresponding to an account use application based on a pre-established number permission sharing relation in response to the received account use application of a business system; sending a use permission information instruction corresponding to the shared account to a service platform client, so that the service platform client returns use permission information to the service platform server through a super SIM card according to the use permission information instruction; and receiving the use permission information, and forwarding the use permission information to the service system, so that the service system executes a service operation process according to the use permission information, and effective management and control of the use permission information are realized through a shared account and a super SIM (Subscriber Identity Module) card. And the business process efficiency can be improved while the privacy security of the user is ensured.

Description

Technical Field

[0001] The present application relates to the field of privacy security technology, and in particular to a privacy protection method, device, equipment, medium and product. Background Art

[0002] In order to protect consumer privacy, various industries (such as express delivery, food delivery, and taxi-hailing) often encrypt users' real information and use virtual numbers to display or contact users. However, due to incomplete information or system incompatibility, identity verification failures often occur, resulting in reduced business process efficiency.

[0003] Therefore, it is necessary to come up with a solution to improve the efficiency of business processes.

[0004] The above contents are only used to assist in understanding the technical solution of the present application and do not constitute an admission that the above contents are prior art. Summary of the invention

[0005] The main purpose of this application is to provide a privacy protection method, device, equipment, medium and product, aiming to improve the efficiency of business processes.

[0006] To achieve the above purpose, the present application provides a privacy protection method, which is applied to a business platform server and includes:

[0007] In response to receiving an account use application from a business system, determining a shared account corresponding to the account use application based on a pre-established number authority sharing relationship;

[0008] Sending a usage permission information instruction corresponding to the shared account to the service platform client, so that the service platform client returns the usage permission information to the service platform server through the super SIM card according to the usage permission information instruction;

[0009] The use permission information is received, and the use permission information is forwarded to the business system, so that the business system executes a business operation process according to the use permission information.

[0010] In one embodiment, before the step of determining the shared account corresponding to the account usage application based on the pre-established number authority sharing relationship, the step further includes:

[0011] In response to identifying the account creation request, determining a user mobile phone number corresponding to the account creation request;

[0012] Generate a virtual number corresponding to the user's mobile phone number by calling a virtual number generation platform;

[0013] The shared account is created according to the virtual number.

[0014] In one embodiment, after the step of creating the shared account according to the virtual number, the step further includes:

[0015] Obtaining service data associated with the virtual number;

[0016] generating a temporary user key based on the random number and the virtual number;

[0017] The business data is encrypted and stored in a data block corresponding to the shared account through the temporary user key, wherein the usage permission information instruction includes the virtual number and the temporary user key.

[0018] In addition, to achieve the above purpose, the present application also proposes a privacy protection method, which is applied to a service platform client and includes:

[0019] Receiving a usage permission information instruction corresponding to a shared account sent by a service platform server, wherein the shared account is determined by the service platform server in response to receiving an account usage application from a service system, based on a pre-established number permission sharing relationship and according to the account usage application;

[0020] The super SIM card returns the usage permission information to the business platform server according to the usage permission information instruction, so that the business platform server forwards the usage permission information to the business system for the business system to execute the business operation process according to the usage permission information.

[0021] In one embodiment, the usage permission information instruction includes a virtual number and a temporary user key, and the step of returning the usage permission information to the service platform server according to the usage permission information instruction through the super SIM card includes:

[0022] Parsing the usage permission information instruction according to the public key of the service platform server stored in the super SIM card to obtain the virtual number and temporary user key;

[0023] Performing rule verification on the virtual number through the super SIM card;

[0024] In the case where it is determined that the virtual number is a non-physical mobile phone number, matching the usage permission information corresponding to the temporary user key;

[0025] The matched usage permission information is encrypted using the public key of the business platform server, and the encrypted usage permission information is sent to the business platform server.

[0026] In addition, to achieve the above purpose, the present application also proposes a privacy protection method, which is applied to a business system and includes:

[0027] Sending an account use application to a service platform server, so that the service platform server, in response to receiving the account use application, determines a shared account corresponding to the account use application based on a pre-established number authority sharing relationship, and sends a use authority information instruction corresponding to the shared account to a service platform client, so that the service platform client returns use authority information to the service platform server through a super SIM card according to the use authority information instruction, and the service platform server forwards the use authority information to the service system;

[0028] The business operation process is executed according to the usage permission information.

[0029] In one embodiment, the usage permission information includes a temporary user key, and the step of executing the service operation process according to the usage permission information includes:

[0030] Decrypt and read the business data stored in the shared account according to the temporary user key in the usage permission information to obtain the decrypted business data;

[0031] The business operation process is executed according to the decrypted business data.

[0032] In one embodiment, the method further comprises:

[0033] In response to obtaining the service data update information, an update service data instruction is sent to the service platform server, so that the service platform server determines the corresponding shared account and user mobile phone number according to the virtual number in the update service data instruction, and stores the updated service data in the update service data instruction in the data block corresponding to the shared account, and sends the service data update instruction to the super SIM card corresponding to the user mobile phone number, so that the super SIM card generates a reminder pop-up window according to the service data update instruction.

[0034] In addition, to achieve the above purpose, the present application also proposes a privacy protection device, which is applied to a service platform server, and includes:

[0035] A response module, configured to respond to receiving an account use application from a business system and determine a shared account corresponding to the account use application based on a pre-established number authority sharing relationship;

[0036] A sending module, used for sending a usage permission information instruction corresponding to the shared account to the service platform client, so that the service platform client returns the usage permission information to the service platform server through the super SIM card according to the usage permission information instruction;

[0037] The receiving module is used to receive the usage permission information and forward the usage permission information to the business system so that the business system can execute the business operation process according to the usage permission information.

[0038] In addition, to achieve the above-mentioned purpose, the present application also proposes a privacy protection device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the privacy protection method described above.

[0039] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the privacy protection method described above are implemented.

[0040] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the steps of the privacy protection method described above.

[0041] One or more technical solutions proposed in this application have at least the following technical effects:

[0042] In response to receiving an account use application from a business system, the business platform service end determines a shared account corresponding to the account use application based on a pre-established number authority sharing relationship; sends a usage authority information instruction corresponding to the shared account to the business platform client, so that the business platform client returns the usage authority information to the business platform service end through the super SIM card according to the usage authority information instruction; receives the usage authority information, and forwards the usage authority information to the business system, so that the business system executes the business operation process according to the usage authority information. Effective management and control of the usage authority information is achieved through the shared account and the super SIM card, which can improve the efficiency of the business process while ensuring the privacy and security of the user. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0044] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0045] Figure 1This is a flowchart of the first embodiment of the privacy protection method of this application;

[0046] Figure 2 This is a flowchart of the second embodiment of the privacy protection method of this application;

[0047] Figure 3 A schematic diagram of the interaction timing in an embodiment of the present application;

[0048] Figure 4 This is a flowchart of the fourth embodiment of the privacy protection method of this application;

[0049] Figure 5 This is a flowchart of the fifth embodiment of the privacy protection method of this application;

[0050] Figure 6 This is a schematic diagram of the module structure of the privacy protection device according to an embodiment of the present application;

[0051] Figure 7 This is a schematic diagram of the device structure of the hardware operating environment involved in the privacy protection method in the embodiment of the present application.

[0052] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0053] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0054] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0055] The main solution of the embodiment of the present application is: the service platform service end determines the shared account corresponding to the account use application based on the pre-established number authority sharing relationship in response to receiving the account use application from the service system; sends the use authority information instruction corresponding to the shared account to the service platform client, so that the service platform client returns the use authority information to the service platform service end through the super SIM card according to the use authority information instruction; receives the use authority information, and forwards the use authority information to the service system, so that the service system executes the service operation process according to the use authority information, and realizes effective management and control of the use authority information through the shared account and the super SIM card, which can improve the efficiency of the business process while ensuring the privacy and security of the user.

[0056] In this embodiment, for the convenience of description, the privacy protection device is used as the execution subject for explanation below.

[0057] In an embodiment of the present application, a system is provided for implementing virtual number data sharing and identity authentication through a super SIM card, which can be applied to a variety of scenarios where user privacy and security need to be protected, such as express delivery services, taxi services, and meal delivery services. In this application, a more complex express delivery service scenario is used as an example for illustration.

[0058] With the explosive growth of express delivery business volume, the terminal delivery method is completely different from the past. The popularity of self-pickup at post stations has also caused virtual numbers to bring many inconveniences to consumers, post stations and couriers.

[0059] For consumers,

[0060] Scenario 1: The consumer fails to receive the pickup code, resulting in the courier missing the item

[0061] Generally, consumers can see the logistics details and pickup code when they shop in person on the shopping platform, but due to the privacy of the delivery note, there may be incomplete information and system incompatibility. If consumers do not pay attention to the logistics information, they may miss the courier. If they do not shop in person, they may not receive the pickup code, so it will be more time-consuming and laborious to find their own courier. What's worse, they may not know about the courier sent to them at all, so the courier may end up being a headless item.

[0062] Scenario 2: The phone numbers are similar, the text messages are sent to the wrong address, and the courier is picked up by the wrong address.

[0063] In the process of communicating with consumers, it is often the case that the wrong courier is picked up due to receiving a pickup code that is not the person's own. With the same surname and the same virtual last number, it is easy to pick up the wrong courier. In particular, the privacy labels on some platforms currently hide consumer information to a high degree. The labels do not display the phone number and name, and most of the address is hidden. The courier puts the courier in the designated location, and the consumer cannot find it when he comes, or even if he finds it, it is difficult to confirm that it is his own courier. As a result, the probability of picking up the wrong courier has risen sharply. When consumers pick up the wrong courier or lose it due to virtual numbers, the ultimate responsibility often falls on the post station and the courier.

[0064] For couriers, privacy labels and virtual numbers first lead to reduced delivery efficiency. Due to the incomplete information and virtual number problems caused by privacy labels, couriers need to spend more time and energy to verify the information. Each additional call takes at least 5 seconds, which greatly reduces delivery efficiency. Secondly, it will increase consumer complaints and result in fines. Once the courier is placed in the post station, consumers cannot receive the pickup code due to the problem of the virtual number and contact customer service for inquiries; if there is a problem with the courier, consumers will be dissatisfied and complain, resulting in an increase in the courier complaint rate, which will not only affect the courier's service quality assessment, but also result in fines, and all these fines will be borne by the courier.

[0065] For the post station, when the staff are warehousing the express, since the privacy labels use virtual numbers, these numbers are difficult to remember and dial. Once the virtual number expires or cannot be dialed, the post station staff will need to spend a lot of time looking for the real phone number, which may even cause express delivery delays. At the same time, since the privacy labels hide some of the information on the labels, sometimes the post station staff cannot obtain the complete recipient's name and address information from the express delivery slip. This results in repeated verification when signing for the delivery, wasting a lot of time and energy. In addition, there are incompatibilities between the systems of some e-commerce platforms and express companies. When dialing a virtual number, sometimes the extension number will be wrong, and the recipient cannot be contacted, etc.

[0066] As can be seen from the above, the shortcomings of the existing technology include: (1) consumers cannot directly receive the virtual number delivery bill pickup code information; (2) the express station or express delivery platform cannot accurately verify the authenticity of the recipient's identity.

[0067] The present application provides a solution and proposes a method for sharing virtual number data through a super SIM card. Based on the existing business system, the super SIM card is used as an identity credential carrier to achieve strong binding of the business data of the virtual number with the entity identity information, and complete the authenticity verification of the identity information in the business operation process, thereby solving the above-mentioned technical problems existing in the prior art.

[0068] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a privacy protection device, etc. The following takes the privacy protection device as an example to illustrate this embodiment and the following embodiments.

[0069] Based on this, the present application embodiment provides a privacy protection method, referring to Figure 1 , Figure 1 This is a flowchart of the first embodiment of the privacy protection method of this application.

[0070] In this embodiment, the privacy protection method includes steps S10 to S30:

[0071] Step S10, in response to receiving an account use application from the business system, determining a shared account corresponding to the account use application based on a pre-established number authority sharing relationship;

[0072] Exemplarily, when the business platform server receives an application for use of an account for a business system, it can determine the shared account corresponding to the account use application based on a pre-established number permission sharing relationship. The business system can be an express delivery system, a food delivery system, a taxi-hailing system, etc. Users can log in to the express delivery system using their mobile phone number to perform pickup operations. The express delivery system submits an application for use of a shared account to the business platform server with the user's mobile phone number.

[0073] Exemplarily, a shared account is a sub-account of the business account corresponding to the user's mobile phone number in the business platform. Each user's mobile phone number corresponds to a business account, each virtual mobile phone number corresponds to a shared account, and each virtual mobile phone number corresponds to a piece of logistics data. A business account can include multiple shared accounts.

[0074] Exemplarily, the express delivery system will synchronize the logistics data to the business platform server, and establish a number authority sharing relationship between the user's mobile number and the virtual number in the business platform server corresponding to the logistics data. For example, the virtual number with shared account authority is used as the lender, and the mobile phone number with the account authority is used as the borrower. In the business platform server, the order information managed in the shared account is shared with the account in the APP that logs in to the express delivery system through the user's mobile number.

[0075] Exemplarily, the application for shared account use includes the user's mobile phone number information. When the business platform server receives the application request, it will search for the order data associated with the user's mobile phone number and the bound shared account based on the user's mobile phone number. The order data specifically includes the order number, product information, recipient information, and logistics data, and only the logistics data including the pickup code data is stored in the shared account through a temporary user key, that is, the pickup code is stored in the shared account in the form of a temporary user key, and the data block corresponding to the shared account includes the pickup code.

[0076] Step S20, sending the usage permission information instruction corresponding to the shared account to the service platform client, so that the service platform client returns the usage permission information to the service platform server through the super SIM card according to the usage permission information instruction;

[0077] Furthermore, in response to receiving an account usage application from the business system, the business platform server determines the shared account corresponding to the account usage application based on a pre-established number authority sharing relationship, and then sends a usage authority information instruction corresponding to the shared account to the business platform client, so that the business platform client returns the usage authority information to the business platform server through the super SIM card according to the usage authority information instruction.

[0078] Exemplarily, the service platform server carries the shared account and sends a command to the service platform client to obtain the usage authority information of the shared account. After receiving the service platform command, the service platform client forwards it to the super SIM card.

[0079] Exemplarily, the super SIM card uses the public key of the service platform server stored locally on the card to decrypt the received instruction for obtaining the usage permission information of the shared account, and obtains the virtual mobile phone number included in the instruction. Then the virtual mobile phone number is checked by rules. When it is determined to be a non-physical mobile phone number, the super SIM card matches the usage permission information of the corresponding temporary user key based on the shared account information, and then uses the public key of the service platform server to encrypt and send it to the service platform server.

[0080] Step S30, receiving the usage permission information, and forwarding the usage permission information to the business system, so that the business system executes the business operation process according to the usage permission information.

[0081] Exemplarily, the business platform server receives the usage permission information returned by the super SIM card and feeds it back to the business system (express delivery system). The business system decrypts the logistics data associated with the shared account by using the usage permission information to obtain the logistics data, and the express delivery system performs the pickup operation based on the logistics data.

[0082] Through the above scheme, the present embodiment specifically comprises the following steps: the service platform service end determines the shared account corresponding to the account use application based on the pre-established number authority sharing relationship in response to receiving the account use application from the service system; sends the use authority information instruction corresponding to the shared account to the service platform client, so that the service platform client returns the use authority information to the service platform service end through the super SIM card according to the use authority information instruction; receives the use authority information, and forwards the use authority information to the service system, so that the service system executes the service operation process according to the use authority information, and realizes effective management and control of the use authority information through the shared account and the super SIM card, which can improve the efficiency of the business process while ensuring the privacy and security of the user.

[0083] Based on the first embodiment of the present application, the second embodiment of the present application is proposed. In the second embodiment of the present application, the same or similar contents as those of the above-mentioned embodiment 1 can be referred to the above introduction and will not be repeated later. Figure 2 Before step S10, the privacy protection method further includes steps S01 to S03:

[0084] Step S01: In response to identifying an account creation request, determining a user mobile phone number corresponding to the account creation request;

[0085] Step S02: Generate a virtual number corresponding to the user's mobile phone number by calling a virtual number generation platform;

[0086] Step S03: Create the shared account according to the virtual number.

[0087] Exemplarily, after the step of creating the shared account according to the virtual number, the step further includes:

[0088] Obtaining service data associated with the virtual number;

[0089] generating a temporary user key based on the random number and the virtual number;

[0090] The business data is encrypted and stored in a data block corresponding to the shared account through the temporary user key, wherein the usage permission information instruction includes the virtual number and the temporary user key.

[0091] Exemplarily, in an embodiment of the present application, after the user completes the order payment of the business platform, the business platform server will connect to the virtual number generation platform, assign a corresponding virtual number to the user's mobile phone number, and return the virtual number to the business platform server; the business platform server creates a shared account for the user's mobile phone number based on the virtual number, and stores the logistics data associated with the virtual number in the shared account. In addition, it is necessary to set usage conditions for the shared account, and the usage conditions are as follows: the logistics data is encrypted and stored by a user temporary key generated based on a random number and a virtual password, and the logistics data is decrypted and read by a user temporary key generated based on a random number and a virtual password.

[0092] Exemplarily, after the virtual number is generated, the service platform will simultaneously generate a temporary user key based on the random number and the virtual number, and then send the temporary user key to the super SIM card corresponding to the mobile phone number bound to the virtual number through the service platform. After receiving the key, the super SIM card will decrypt it through the public key of the service platform to obtain the temporary user key and store it.

[0093] Exemplarily, a shared account is a sub-account of the business account corresponding to the user's mobile phone number in the business platform. Each user's mobile phone number corresponds to a business account, each virtual mobile phone number corresponds to a shared account, and each virtual mobile phone number corresponds to a piece of logistics data. A business account can include multiple shared accounts.

[0094] For example, the express delivery system will synchronize the logistics data to the business platform server, and establish a number authority sharing relationship between the user's mobile number and the virtual number in the business platform server corresponding to the logistics data; for example, the virtual number with shared account authority is used as the lender, and the mobile number with the account authority is used as the borrower. In other words, the order information managed in the shared account needs to be shared in the business platform server with the account in the APP that logs in to the express delivery system through the user's mobile number.

[0095] This embodiment adopts the above scheme, specifically by responding to identifying an account establishment request, determining the user mobile phone number corresponding to the account establishment request; generating a virtual number corresponding to the user mobile phone number by calling a virtual number generation platform; creating the shared account according to the virtual number, using the super SIM card as an identity credential carrier, and strongly binding the business data of the virtual number with the entity identity information, thereby enabling data sharing between the virtual number data and the hidden mobile phone number, while improving data security in completing the business operation process.

[0096] Based on any of the foregoing embodiments of the present application, a third embodiment of the present application is proposed. In the third embodiment of the present application, the same or similar contents as any of the foregoing embodiments can be referred to the above introduction and will not be described in detail later. Figure 3 , Figure 3 is a schematic diagram of the interaction timing in the embodiment of the present application, such as Figure 3 As shown, the virtual number data sharing process in the embodiment of the present application includes:

[0097] (1) The user logs into the express delivery system using his / her mobile phone number and performs the pickup operation;

[0098] (2) The express delivery system submits a shared account application to the business platform (i.e., the business platform server) with the user's mobile phone number;

[0099] (3) The business platform sends a command to the business platform client to obtain the usage permission information of the shared account;

[0100] (4) The service platform client sends a command to the super SIM card to obtain the usage permission information of the shared account;

[0101] Exemplarily, the public key of the service platform is stored in the super SIM card, and at the same time, the permission information (i.e., temporary user key) for the express system to log in to the shared account is also stored. The permission information is specifically a plurality of temporary user keys matching the shared account stored in the super SIM card. There is a one-to-one correspondence between the shared account and the virtual mobile phone number.

[0102] (5) The super SIM card uses the service platform public key to decrypt the received instruction and returns the usage permission information of the shared account based on the virtual mobile phone number;

[0103] For example, in the pickup process, the service platform carries the shared account and sends a command to the service platform client to obtain the usage permission information of the shared account. After the service platform client receives the service platform command, it forwards it to the super SIM card.

[0104] Exemplarily, the super SIM card uses the service platform public key stored locally on the card to decrypt the received instruction for obtaining the usage permission information of the shared account, and obtains the virtual mobile phone number included in the instruction. Then the virtual mobile phone number is checked by rules. When it is determined to be a non-physical mobile phone number, the super SIM card matches the usage permission information of the corresponding temporary user key based on the shared account information, and then uses the service platform public key to encrypt and send it to the service platform.

[0105] (6) The business platform receives the usage permission information returned by the super SIM card and feeds it back to the express delivery system. The express delivery system decrypts the logistics data associated with the shared account using the usage permission information to obtain the logistics data;

[0106] (7) The express delivery system executes the pickup operation based on the logistics data.

[0107] This embodiment uses the above solution to establish a shared account of the user's mobile phone number and the virtual number in the business platform, and stores the logistics data associated with the virtual number in the shared account. When the user picks up the item, the SIM card is used to authenticate the user and obtain the key for decrypting the logistics data, and the pickup code is obtained based on the key. The super SIM card is used to strongly bind the business data of the virtual number with the entity's identity information, and the authenticity verification of the identity information in the business operation process is completed.

[0108] Based on any of the foregoing embodiments of the present application, a fourth embodiment of the present application is proposed. In the fourth embodiment of the present application, the same or similar contents as any of the foregoing embodiments can be referred to the above introduction and will not be described in detail later. Figure 4 , Figure 4 This is a flowchart of the fourth embodiment of the privacy protection method of this application.

[0109] In this embodiment, the privacy protection method includes steps A10 to A20:

[0110] Step A10, receiving a usage permission information instruction corresponding to a shared account sent by the service platform server, wherein the shared account is determined by the service platform server in response to receiving an account usage application from a service system, based on a pre-established number permission sharing relationship and according to the account usage application;

[0111] Step A20, returning the usage permission information to the business platform server according to the usage permission information instruction through the super SIM card, so that the business platform server forwards the usage permission information to the business system, so that the business system can execute the business operation process according to the usage permission information.

[0112] Exemplarily, the usage permission information instruction includes a virtual number and a temporary user key, and the step of returning the usage permission information to the service platform server according to the usage permission information instruction through the super SIM card includes:

[0113] Parsing the usage permission information instruction according to the public key of the service platform server stored in the super SIM card to obtain the virtual number and temporary user key;

[0114] Performing rule verification on the virtual number through the super SIM card;

[0115] In the case where it is determined that the virtual number is a non-physical mobile phone number, matching the usage permission information corresponding to the temporary user key;

[0116] The matched usage permission information is encrypted using the public key of the business platform server, and the encrypted usage permission information is sent to the business platform server.

[0117] Exemplarily, the service platform server carries the shared account and sends a command to the service platform client to obtain the usage authority information of the shared account. After receiving the service platform command, the service platform client forwards it to the super SIM card.

[0118] Exemplarily, the super SIM card uses the public key of the service platform server stored locally on the card to decrypt the received instruction for obtaining the usage permission information of the shared account, and obtains the virtual mobile phone number included in the instruction. Then the virtual mobile phone number is checked by rules. When it is determined to be a non-physical mobile phone number, the super SIM card matches the usage permission information of the corresponding temporary user key based on the shared account information, and then uses the public key of the service platform server to encrypt and send it to the service platform server.

[0119] Exemplarily, when a user picks up a package using a pickup code, the user terminal clicks on a pop-up window to obtain the pickup code and displays it to the express delivery system. The express delivery system determines the privacy bill based on the pickup code, and then obtains the virtual number corresponding to the privacy bill. While displaying the pickup code, the express delivery system obtains identity information and a temporary user key through the super SIM card in the user terminal. The express delivery system logs in to the service platform based on the virtual number obtained from the virtual bill and the temporary user key obtained through the super SIM card, obtains the real mobile phone number corresponding to the virtual number, and when the identity information corresponding to the real mobile phone number obtained from the service platform is consistent with the identity information in the super SIM card, the pickup is executed.

[0120] Through the above scheme, this embodiment specifically receives the usage permission information instruction corresponding to the shared account sent by the business platform server through the business platform client, wherein the shared account is determined by the business platform server in response to receiving the account usage application of the business system, based on the pre-established number permission sharing relationship and according to the account usage application; the usage permission information is returned to the business platform server through the super SIM card according to the usage permission information instruction, so that the business platform server forwards the usage permission information to the business system, so that the business system can execute the business operation process according to the usage permission information, and the usage permission information is effectively managed and controlled through the shared account and the super SIM card, which can improve the business process efficiency while ensuring the privacy and security of users, and the virtual identity verification of the privacy label based on the super SIM card avoids the identity information exposure problem caused by identity verification through other means, and solves the problem of inconvenience and insecurity in the prior art that the privacy label can only be verified through a virtual mobile phone number.

[0121] Based on any of the foregoing embodiments of the present application, a fifth embodiment of the present application is proposed. In the fifth embodiment of the present application, the same or similar contents as any of the foregoing embodiments can be referred to the above introduction and will not be described in detail later. Figure 5 , Figure 5 This is a flowchart of the fifth embodiment of the privacy protection method of the present application.

[0122] In this embodiment, the privacy protection method includes steps B10 to B20:

[0123] Step B10, sending the account use application to the service platform server, so that the service platform server, in response to receiving the account use application, determines the shared account corresponding to the account use application based on the pre-established number authority sharing relationship, and sends the use authority information instruction corresponding to the shared account to the service platform client, so that the service platform client returns the use authority information to the service platform server through the super SIM card according to the use authority information instruction, and the service platform server forwards the use authority information to the service system;

[0124] Step B20: executing the business operation process according to the usage permission information.

[0125] Exemplarily, the usage permission information includes a temporary user key, and the step of executing the service operation process according to the usage permission information includes:

[0126] Decrypt and read the business data stored in the shared account according to the temporary user key in the usage permission information to obtain the decrypted business data;

[0127] The business operation process is executed according to the decrypted business data.

[0128] Exemplarily, when the business platform server receives an application for use of an account for a business system, it can determine the shared account corresponding to the account use application based on a pre-established number permission sharing relationship. The business system can be an express delivery system, a food delivery system, a taxi-hailing system, etc. Users can log in to the express delivery system using their mobile phone number to perform pickup operations. The express delivery system submits an application for use of a shared account to the business platform server with the user's mobile phone number.

[0129] Exemplarily, a shared account is a sub-account of the business account corresponding to the user's mobile phone number in the business platform. Each user's mobile phone number corresponds to a business account, each virtual mobile phone number corresponds to a shared account, and each virtual mobile phone number corresponds to a piece of logistics data. A business account can include multiple shared accounts.

[0130] Exemplarily, the express delivery system will synchronize the logistics data to the business platform server, and establish a number authority sharing relationship between the user's mobile number and the virtual number in the business platform server corresponding to the logistics data. For example, the virtual number with shared account authority is used as the lender, and the mobile phone number with the account authority is used as the borrower. In the business platform server, the order information managed in the shared account is shared with the account in the APP that logs in to the express delivery system through the user's mobile number.

[0131] Exemplarily, the application for shared account use includes the user's mobile phone number information. When the business platform server receives the application request, it will search for the order data associated with the user's mobile phone number and the bound shared account based on the user's mobile phone number. The order data specifically includes the order number, product information, recipient information, and logistics data. Only the logistics data including the pickup code data is stored in the shared account through a temporary user key, and the pickup code is stored in the shared account in the form of a temporary user key. The data block corresponding to the shared account includes the pickup code.

[0132] Exemplarily, the business platform server receives the usage permission information returned by the super SIM card and feeds it back to the business system. The business system decrypts the logistics data associated with the shared account by using the usage permission information to obtain the logistics data, and the business system performs the pickup operation based on the logistics data.

[0133] Exemplarily, the method further includes:

[0134] In response to obtaining the service data update information, an update service data instruction is sent to the service platform server, so that the service platform server determines the corresponding shared account and user mobile phone number according to the virtual number in the update service data instruction, and stores the updated service data in the update service data instruction in the data block corresponding to the shared account, and sends the service data update instruction to the super SIM card corresponding to the user mobile phone number, so that the super SIM card generates a reminder pop-up window according to the service data update instruction.

[0135] Exemplarily, the virtual number associated data update process in the embodiment of the present application includes: the express system obtains the logistics status of the order; after obtaining the logistics status update message, it sends an update logistics data instruction to the business platform; the business platform receives the update logistics data instruction and obtains the virtual number and order data included in the instruction; the business platform determines the corresponding shared account and the user's mobile phone number based on the virtual number; the user's temporary key is generated by the virtual number and random number to encrypt the logistics data uploaded by the express system and store it in the data block corresponding to the shared account; at the same time, the logistics update instruction is sent to the super SIM card corresponding to the user's mobile phone number; after the super SIM card receives the logistics update instruction, a reminder pop-up window is generated, and the pop-up window includes the latest logistics status information. When the latest logistics status information is the generated pickup code, the information in the pop-up window includes the pickup code content.

[0136] Through the above scheme, this embodiment specifically sends an account use application to the business platform server through the business system, so that the business platform server, in response to receiving the account use application, determines the shared account corresponding to the account use application based on the pre-established number authority sharing relationship, and sends the use authority information instruction corresponding to the shared account to the business platform client, so that the business platform client returns the use authority information to the business platform server through the super SIM card according to the use authority information instruction, and the business platform server forwards the use authority information to the business system; executes the business operation process according to the use authority information, combines the business platform and the super SIM card, and realizes the encrypted storage of the data uploaded by the express delivery system based on the user temporary key generated by the virtual number and the random number through the business platform, and can use the message pop-up function of the super SIM card to realize the push of logistics status data of the virtual number.

[0137] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the privacy protection method of the present application. More simple transformations based on this technical concept are all within the protection scope of the present application.

[0138] This application also provides a privacy protection device, please refer to Figure 6 , the privacy protection device comprises:

[0139] A response module 10, configured to respond to receiving an account use application from a business system and determine a shared account corresponding to the account use application based on a pre-established number authority sharing relationship;

[0140] The sending module 20 is used to send the usage permission information instruction corresponding to the shared account to the service platform client, so that the service platform client returns the usage permission information to the service platform server through the super SIM card according to the usage permission information instruction;

[0141] The receiving module 30 is used to receive the usage permission information and forward the usage permission information to the business system so that the business system can execute the business operation process according to the usage permission information.

[0142] The privacy protection device provided by the present application adopts the privacy protection method in the above embodiment to solve the technical problem of privacy protection. Compared with the prior art, the beneficial effects of the privacy protection device provided by the present application are the same as the beneficial effects of the privacy protection method provided by the above embodiment, and the other technical features in the privacy protection device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0143] The present application provides a privacy protection device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the privacy protection method in the above-mentioned embodiment one.

[0144] Reference below Figure 7 , which shows a schematic diagram of the structure of a privacy protection device suitable for implementing the embodiments of the present application. The privacy protection device in the embodiments of the present application may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 7 The privacy protection device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0145] like Figure 7 As shown, the privacy protection device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the privacy protection device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touchpad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the privacy protection device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows a privacy protection device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or provided instead.

[0146] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0147] The privacy protection device provided by the present application adopts the privacy protection method in the above embodiment to solve the technical problem of privacy protection. Compared with the prior art, the beneficial effects of the privacy protection device provided by the present application are the same as the beneficial effects of the privacy protection method provided by the above embodiment, and the other technical features in the privacy protection device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0148] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0149] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0150] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the privacy protection method in the above-mentioned embodiment.

[0151] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0152] The computer-readable storage medium may be included in the privacy protection device; or may exist independently without being assembled into the privacy protection device.

[0153] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the privacy protection device, the privacy protection device: in response to receiving an account use application from a business system, determines the shared account corresponding to the account use application based on a pre-established number authority sharing relationship; sends a usage authority information instruction corresponding to the shared account to the business platform client, so that the business platform client returns the usage authority information to the business platform server through the super SIM card according to the usage authority information instruction; receives the usage authority information, and forwards the usage authority information to the business system, so that the business system executes the business operation process according to the usage authority information, and realizes effective management and control of the usage authority information through the shared account and the super SIM card, which can improve the business process efficiency while ensuring the privacy security of the user.

[0154] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0155] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0156] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0157] The readable storage medium provided in this application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned privacy protection method, and can solve the technical problem of privacy protection. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in this application are the same as the beneficial effects of the privacy protection method provided in the above-mentioned embodiment, and will not be repeated here.

[0158] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned privacy protection method when executed by a processor.

[0159] The computer program product provided by this application can solve the technical problem of privacy protection. Compared with the prior art, the beneficial effects of the computer program product provided by this application are the same as the beneficial effects of the privacy protection method provided by the above embodiment, which will not be repeated here.

[0160] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A privacy protection method, characterized in that: The method is applied to the service platform server, and includes: In response to receiving an account use application from a business system, determining a shared account corresponding to the account use application based on a pre-established number authority sharing relationship; Sending a usage permission information instruction corresponding to the shared account to the service platform client, so that the service platform client returns the usage permission information to the service platform server through the super SIM card according to the usage permission information instruction; The use permission information is received, and the use permission information is forwarded to the business system, so that the business system executes a business operation process according to the use permission information.

2. The method according to claim 1, characterized in that Before the step of determining the shared account corresponding to the account use application based on the pre-established number authority sharing relationship, the step further includes: In response to identifying the account creation request, determining a user mobile phone number corresponding to the account creation request; Generate a virtual number corresponding to the user's mobile phone number by calling a virtual number generation platform; The shared account is created according to the virtual number.

3. The method according to claim 2, characterized in that After the step of creating the shared account according to the virtual number, the following step is further included: Obtaining service data associated with the virtual number; generating a temporary user key based on the random number and the virtual number; The business data is encrypted and stored in a data block corresponding to the shared account through the temporary user key, wherein the usage permission information instruction includes the virtual number and the temporary user key.

4. A privacy protection method, characterized in that: The method is applied to a service platform client, and includes: Receiving a usage permission information instruction corresponding to a shared account sent by a service platform server, wherein the shared account is determined by the service platform server in response to receiving an account usage application from a service system, based on a pre-established number permission sharing relationship and according to the account usage application; The super SIM card returns the usage permission information to the business platform server according to the usage permission information instruction, so that the business platform server forwards the usage permission information to the business system for the business system to execute the business operation process according to the usage permission information.

5. The method according to claim 4, characterized in that The usage permission information instruction includes a virtual number and a temporary user key, and the step of returning the usage permission information to the service platform server according to the usage permission information instruction through the super SIM card includes: Parsing the usage permission information instruction according to the public key of the service platform server stored in the super SIM card to obtain the virtual number and temporary user key; Performing rule verification on the virtual number through the super SIM card; In the case where it is determined that the virtual number is a non-physical mobile phone number, matching the usage permission information corresponding to the temporary user key; The matched usage permission information is encrypted using the public key of the business platform server, and the encrypted usage permission information is sent to the business platform server.

6. A privacy protection method, characterized in that: The method is applied to a business system and includes: Sending an account use application to a service platform server, so that the service platform server, in response to receiving the account use application, determines a shared account corresponding to the account use application based on a pre-established number authority sharing relationship, and sends a use authority information instruction corresponding to the shared account to a service platform client, so that the service platform client returns use authority information to the service platform server through a super SIM card according to the use authority information instruction, and the service platform server forwards the use authority information to the service system; The business operation process is executed according to the usage permission information.

7. The method according to claim 6, characterized in that The use permission information includes a temporary user key, and the step of executing the service operation process according to the use permission information includes: Decrypt and read the business data stored in the shared account according to the temporary user key in the usage permission information to obtain the decrypted business data; The business operation process is executed according to the decrypted business data.

8. The method according to claim 7, characterized in that The method further comprises: In response to obtaining the service data update information, an update service data instruction is sent to the service platform server, so that the service platform server determines the corresponding shared account and user mobile phone number according to the virtual number in the update service data instruction, and stores the updated service data in the update service data instruction in the data block corresponding to the shared account, and sends the service data update instruction to the super SIM card corresponding to the user mobile phone number, so that the super SIM card generates a reminder pop-up window according to the service data update instruction.

9. A privacy protection device, characterized in that: The device is applied to a service platform server, and comprises: A response module, configured to respond to receiving an account use application from a business system and determine a shared account corresponding to the account use application based on a pre-established number authority sharing relationship; A sending module, used for sending a usage permission information instruction corresponding to the shared account to the service platform client, so that the service platform client returns the usage permission information to the service platform server through the super SIM card according to the usage permission information instruction; The receiving module is used to receive the usage permission information and forward the usage permission information to the business system so that the business system can execute the business operation process according to the usage permission information.

10. A privacy protection device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the privacy protection method according to any one of claims 1 to 8.

11. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the privacy protection method according to any one of claims 1 to 8 are implemented.

12. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the privacy protection method according to any one of claims 1 to 8 are implemented.

Images