Sensitive information submission method and system and sensitive information acquisition method

Abstract

The invention discloses a sensitive information submission method and system and a sensitive information acquisition method. The sensitive information submitting method comprises the steps that a secret key request is sent to an application server, and the application server generates an encryption secret key according to the secret key request and returns the encryption secret key after authorization of a remote trusted service platform; receiving the encryption key returned by the application server; encrypting sensitive information by using the encryption key to obtain transmission information; and sending the transmission information to the application server. According to the sensitive information submission method and system and the sensitive information acquisition method provided by the embodiment of the invention, the security of the sensitive information in the transmission process is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of sensitive information transmission, and in particular to a sensitive information submission method and system, and a sensitive information acquisition method. Background Art

[0002] In the digital age, secure storage and transmission of personal information is essential to protecting user privacy and preventing identity theft. With the widespread use of mobile devices and IoT devices, the security of user identity information faces unprecedented challenges. Traditional storage solutions usually store user data in vulnerable local storage, which makes the data vulnerable to malware, hacker attacks and other security threats.

[0003] To address these challenges, the industry has adopted a variety of security measures, including data encryption, security tokens, and multi-factor authentication. However, these measures often rely on the security of the operating system. Once the operating system is compromised, the data stored on it will also be threatened. In addition, existing solutions lack strict control over access rights, resulting in unauthorized applications being able to access sensitive user identity information. Existing methods for submitting sensitive information need to be improved in terms of reducing the risk of data leakage, reducing operating system dependence, enhancing access control, and reducing the complexity of authorization mechanisms.

[0004] Therefore, it is hoped that there will be a new sensitive information submission method and system, and a sensitive information acquisition method that can overcome the above problems. Summary of the invention

[0005] In view of the above problems, the purpose of the present invention is to provide a method and system for submitting sensitive information, a method for obtaining sensitive information, and particularly a method and system for submitting real-person information based on user authorization, so as to ensure the security of sensitive information during transmission.

[0006] According to one aspect of the present invention, a method for submitting sensitive information is provided, comprising:

[0007] Sending a key request to an application server, wherein the application server generates an encryption key according to the key request and returns the encryption key after authorization by a remote trusted service platform;

[0008] Receiving the encryption key returned by the application server;

[0009] Encrypt the sensitive information using the encryption key to obtain the transmitted information; and

[0010] The transfer information is sent to the application server.

[0011] Optionally, the sensitive information submission method further includes:

[0012] The device sends a key request to the application server;

[0013] The remote trusted service platform verifies the corresponding application service status, and if the application service status is normal, uses the signature key to sign the encryption key to obtain a service authorization package;

[0014] The device receives the service authorization package,

[0015] The device has a pre-stored signature verification key that matches the signature key.

[0016] The device verifies the signature of the service authorization package to verify whether the encryption key is credible.

[0017] Optionally, the sensitive information submission method further includes:

[0018] Calling the security carrier in the device to obtain a device random number;

[0019] Obtaining the service authorization package according to the device random number request;

[0020] Receiving a service authorization package including a random number signature for the device fed back by the remote trusted service platform;

[0021] The service authorization package is signature-verified to verify whether the device random number is consistent.

[0022] Optionally, the sensitive information submission method further includes:

[0023] Using the signature key to sign the encryption key and the generated timestamp to obtain the service authorization package;

[0024] The device verifies the signature of the service authorization package to verify whether the encryption key and the timestamp are credible;

[0025] A time validity period is determined based on the timestamp, and if the time validity period has not expired, the device uses the encryption key to encrypt the sensitive information.

[0026] Optionally, the sensitive information submission method includes:

[0027] The application running on the device calls a service that requires submission of sensitive information;

[0028] The application receives the service authorization package provided by the application server, and sends the service authorization package to the security carrier of the device to request the sensitive information;

[0029] The security element uses the signature verification key to verify the signature of the service authorization package to verify whether the encryption key is credible, and after obtaining the encryption key, uses the encryption key to encrypt the sensitive information to obtain the transfer information;

[0030] The application receives the transfer information generated by the secure element, and sends the transfer information to the application server.

[0031] Optionally, the application server generates an asymmetric encryption key pair according to the key request; the asymmetric encryption key pair includes the encryption key and a decryption key matching the encryption key;

[0032] The application server uses the decryption key to decrypt the transferred information to obtain the sensitive information, and performs business operations based on the sensitive information.

[0033] Optionally, the sensitive information submission method further includes:

[0034] Request user authorization;

[0035] After obtaining the user's authorization, the transfer information is sent to the application server.

[0036] Optionally, the sensitive information submission method further includes:

[0037] Acquire the submitted information, and obtain the sensitive information according to at least a portion of the submitted information; store the sensitive information in the device end,

[0038] After obtaining the authorization of the user, the sensitive information in the device is called to generate the transfer information.

[0039] Optionally, the sensitive information is stored in a secure carrier;

[0040] The security carrier includes at least one selected from the group consisting of a TEE environment, a SE environment, and a system KeyStore;

[0041] The sensitive information includes identity information.

[0042] According to another aspect of the present invention, a method for obtaining sensitive information is provided, comprising:

[0043] Generate encryption keys;

[0044] Requesting authorization from a remote trusted service platform, and after obtaining authorization from the remote trusted service platform, sending the encryption key;

[0045] receiving a transmission encrypted using the encryption key;

[0046] The transmitted information is decrypted using a decryption key that matches the encryption key to obtain sensitive information.

[0047] According to another aspect of the present invention, a sensitive information submission system is provided, comprising:

[0048] The device sends a key request to the application server and receives the encryption key returned by the application server;

[0049] The device end encrypts the sensitive information using the encryption key to obtain the transfer information, and sends the transfer information to the application server.

[0050] The application server generates an encryption key according to the key request, and returns the encryption key after authorization by the remote trusted service platform.

[0051] The present invention provides a sensitive information submission method and system, and a sensitive information acquisition method. The sensitive information is encrypted by an encryption key of an application server before transmission, thereby ensuring the security of the sensitive information during transmission.

[0052] Furthermore, the encryption key is signed by the remote trusted service platform, which ensures the authenticity and trusted source of the encryption key and prevents the encryption key from being tampered with or abused. Sensitive information is protected by an encryption key signed by the remote trusted service platform before transmission. The corresponding decryption key is required to decrypt the plaintext of the sensitive information, ensuring the confidentiality of the sensitive information. Even if the sensitive information is intercepted during transmission, it cannot be decrypted by unauthorized parties.

[0053] Furthermore, the use of device random numbers effectively prevents attackers from using intercepted data to perform replay attacks, thereby enhancing the security of the system.

[0054] Furthermore, the validity period is determined based on the timestamp, which enhances the authenticity, timeliness and credibility of the encryption key, can effectively prevent replay attacks, enhance the security of the system, and ensure the security of sensitive information transmission.

[0055] Furthermore, the use of asymmetric encryption technology ensures the security of sensitive information during transmission.

[0056] Furthermore, after obtaining the user's authorization, the transmission information is sent, ensuring the user's control over their sensitive data, enhancing user privacy protection, and preventing unauthorized access.

[0057] Furthermore, sensitive information is obtained based on the submitted information, and sensitive information can be reused by submitting the information only once, which simplifies the process and improves efficiency.

[0058] Furthermore, by utilizing the hardware-level security features of TEE or SE, sensitive information can be effectively protected from malware and hacker attacks; by utilizing the hardware-level security features of TEE or SE, the risk of sensitive information being intercepted by malware on the client is reduced, the security issues of local storage and processing are resolved, and the confidentiality and integrity of sensitive information is ensured.

[0059] Furthermore, this solution allows most security operations to be completed locally, reducing the reliance on a continuous network connection. It is suitable for environments where the network is unstable or unavailable, and reduces the amount of data that must be uploaded to the cloud. Since sensitive information is encrypted before being sent, the privacy risk of cloud storage is reduced.

[0060] Furthermore, through the introduction of the remote trusted service platform, it can adapt to different application scenarios and different security requirements, has good versatility and flexibility, and can be used across platforms and fields.

[0061] Furthermore, communication with the remote trusted service platform is carried out through a secure communication protocol, which ensures the security of various data transmission processes and effectively reduces the possibility of data being intercepted and deciphered during transmission in the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] The above and other objects, features and advantages of the present invention will become more apparent through the following description of the embodiments of the present invention with reference to the accompanying drawings, in which:

[0063] Figure 1 A schematic diagram showing a process flow of a method for submitting sensitive information according to Embodiment 1 of the present invention is shown;

[0064] Figure 2 A schematic diagram showing a process flow of a method for submitting sensitive information according to Embodiment 2 of the present invention is shown;

[0065] Figure 3 A schematic diagram of a process of obtaining sensitive information according to an embodiment of the present invention is shown;

[0066] Figure 4 A schematic structural diagram of a sensitive information submission system according to an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0067] Various embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. In each of the accompanying drawings, identical elements are represented by identical or similar reference numerals. For the sake of clarity, the various parts in the accompanying drawings are not drawn to scale. In addition, some well-known parts may not be shown in the drawings.

[0068] The specific implementation of the present invention is further described in detail below in conjunction with the accompanying drawings and examples. Many specific details of the present invention, such as the structure, materials, dimensions, processing technology and techniques of the components are described below to provide a clearer understanding of the present invention. However, as those skilled in the art will appreciate, the present invention may be implemented without following these specific details.

[0069] It should be understood that when describing the structure of a component, when a layer or a region is referred to as being "on" or "over" another layer or another region, it may mean that it is directly on the other layer or another region, or that other layers or regions are included between it and the other layer or another region. Moreover, if the component is turned over, the layer or a region will be "below" or "beneath" another layer or another region.

[0070] Figure 1 The flowchart of the sensitive information submission method according to the first embodiment of the present invention is shown. The execution subject of the sensitive information submission method according to the first embodiment of the present invention is, for example, a device end (smartphone, smart watch, etc.). Figure 1 As shown, the sensitive information submission method according to the first embodiment of the present invention includes the following steps:

[0071] In step S101, a key request is sent to an application server;

[0072] (Device side) sends a key request to the application server. After receiving the key request, the application server generates an encryption key based on the key request, and returns the encryption key to the device side after obtaining authorization from the remote trusted service platform.

[0073] In step S102, receiving the encryption key returned by the application server;

[0074] (Device side) Receive the encryption key returned by the application server.

[0075] In step S103, the sensitive information is encrypted using the encryption key to obtain the transmission information;

[0076] (Device side) Encrypt sensitive information using encryption key to obtain transmission information. Optionally, sensitive information is stored in a secure carrier. The secure carrier includes at least one selected from TEE (Trusted Execution Environment) environment, SE (Secure Element) environment and system KeyStore. Sensitive information includes identity (certificate) information, etc.

[0077] In step S104, the transfer information is sent to the application server.

[0078] (Device side) Send the delivery information to the application server.

[0079] In an optional embodiment of the present invention, the sensitive information submission method further includes:

[0080] The device sends a key request to the application server;

[0081] The remote trusted service platform verifies the corresponding application business status, and if the application business status is normal, uses the signature key to sign the encryption key to obtain a business authorization package;

[0082] The device receives the service authorization package, wherein a signature key matching the signature key is pre-stored in the device. The device verifies the signature of the service authorization package to verify whether the encryption key is credible.

[0083] Optionally, the sensitive information submission method also includes: calling the security carrier in the device end to obtain the device random number; obtaining the service authorization package according to the device random number request; receiving the service authorization package containing the signature of the device random number fed back by the remote trusted service platform; and verifying the signature of the service authorization package to verify whether the device random number is consistent. Specifically, the ordinary application calls the security carrier to obtain the device random number; the ordinary application then sends the device random number as a parameter to the application server to request the application server to obtain the service authorization package; the application server generates an asymmetric encryption key pair IEK, and sends the IEK public key and the device random number to the remote trusted service platform server to request encryption public key authorization. The remote trusted service platform server uses ABA-SK to sign the IEK public key and the device random number, generates a service authorization package, responds to the application server, and then returns to the ordinary application. The ordinary application requests the user identity data through the security carrier, and uses ABA-PK to verify the service authorization package. If the verification fails, the request is rejected, and then the random number is compared with the previously generated random number to see if it is consistent. If it is inconsistent, it is judged to be illegally attacked.

[0084] Optionally, the sensitive information submission method further includes:

[0085] The encryption key and the generated timestamp are signed with the signature key to obtain a service authorization package; the device verifies the signature of the service authorization package to verify whether the encryption key and timestamp are credible;

[0086] The validity period is determined based on the timestamp. If the validity period has not expired, the device uses the encryption key to encrypt sensitive information. Specifically, when signing with the signature key, the time point corresponding to the signature (signature timestamp) is signed; after the device verifies the signature and verifies that the signature timestamp is credible, the device compares the time point of the signature timestamp with the time point corresponding to the signature verification (signature verification timestamp), and compares the time interval between the time point corresponding to the signature verification timestamp and the time point corresponding to the signature timestamp with the validity period (the time interval of the set time length). If the time interval between the signature verification timestamp and the signature timestamp is less than or equal to the validity period, the device is allowed to use the encryption key to encrypt sensitive information.

[0087] Optionally, the sensitive information submission method further includes:

[0088] Applications running on the device call services that require the submission of sensitive information;

[0089] The application receives the service authorization package provided by the application server and sends the service authorization package to the security carrier on the device to request sensitive information;

[0090] The security carrier uses the signature verification key to verify the signature of the service authorization package to verify whether the encryption key is credible. After obtaining the encryption key, it uses the encryption key to encrypt the sensitive information to obtain the transmitted information;

[0091] The application receives the delivery information generated by the security bearer and sends the delivery information to the application server.

[0092] In an optional embodiment of the present invention, the application server generates an asymmetric key pair (IEK) according to the key request; wherein the asymmetric encryption key pair includes an encryption key and a decryption key matching the encryption key;

[0093] The application server uses the decryption key to decrypt the transmitted information to obtain sensitive information and perform business operations based on the sensitive information.

[0094] In an optional embodiment of the present invention, the sensitive information submission method further includes:

[0095] Request user authorization;

[0096] After obtaining the user's authorization, the transfer information is sent to the application server.

[0097] Optionally, the sensitive information submission method further includes:

[0098] Obtain the submitted information, and obtain the sensitive information based on at least a portion of the submitted information; store the sensitive information in the device. Obtaining the submitted information is, for example, asking the user to manually enter the identity information in the App interface, or using OCR technology to locally or online parse the information in the ID card photo. At least a portion of the submitted information (identity information) is sensitive information.

[0099] After obtaining the authorization of the user, the sensitive information in the device is called to generate the transfer information.

[0100] The sensitive information submission method according to the embodiment of the present invention provides a safe, reliable and user-friendly solution to protect user identity information from unauthorized access and abuse, while providing users with fine-grained control over their data; in addition, the solution of the present application simplifies the application authorization process, reduces the complexity of managing authorization, and improves the security and trust of the entire system.

[0101] The solution of this application uses TEE or SE to securely store user identity information, and combines user authorization and application authorization mechanisms to ensure that only applications that have been strictly reviewed and authorized can access user identity information stored in TEE or SE; through an authorization method similar to a license, application authorization verification can be performed in TEE or SE, thereby providing a higher level of security.

[0102] Figure 2 FIG. 2 shows a flow chart of a method for submitting sensitive information according to Embodiment 2 of the present invention. Figure 2 As shown, the sensitive information submission method according to the second embodiment of the present invention occurs between the common application 120 (for example, the common application 120 is running on the device end), the secure carrier 110 (for example, the secure carrier is set in the device end), the application server 200 and the remote trusted service platform server 300, and specifically includes the following steps:

[0103] Step 1: Operate an application program. A user operates a common application program 120 .

[0104] Step 1.1: Calling a service that requires user identity information to be submitted. A user calls a service that requires user identity information to be submitted through a common application 120 .

[0105] Step 1.1.1: Obtaining a device random number. A common application calls the secure element 110 to obtain a device random number.

[0106] Step 1.2: Obtaining a service authorization package. The common application 120 sends the device random number as a parameter to the application server 200 to request the application server 200 to obtain a service authorization package.

[0107] Step 1.2.1: Generate an asymmetric IEK. The common application 120 requests the application server 200 to generate an asymmetric encryption key pair IEK. The application server 200 generates an asymmetric encryption key pair IEK.

[0108] Step 1.2.2: Requesting for encryption public key authorization (IEK). The application server 200 sends the IEK public key and the device random number to the remote trusted service platform server 300 to request encryption public key authorization.

[0109] Step 1.2.2.1: Check application service status. The remote trusted service platform server 300 checks the service status of the application program that initiated the request.

[0110] Step 1.2.2.2: Business authorization package = Signature of IEK public key, device random number and timestamp (ABA-SK). The remote trusted service platform server 300 uses ABA-SK to sign the IEK public key, device random number and timestamp, generates a business authorization package, responds to the application server 200, and then returns to the general application 120. After that, the remote trusted service platform server 300 sends the business authorization package to the application server 200. The application server 200 sends the business authorization package to the general application 120.

[0111] Step 1.3: Requesting user identity data (service authorization package). The common application 120 requests user identity data through the secure element 110 .

[0112] Step 1.3.1: Use ABA-PK public key verification (service authorization package). The security element 110 uses ABA-PK to verify the service authorization package. If the verification fails, the request is rejected. Then the random number is compared with the random number generated in 1.1.1 to see if it is consistent and the validity of the timestamp is verified.

[0113] Step 1.3.2: A service prompt pops up to inform the application that the user identity data is being requested and user authorization is required. The secure carrier 110 pops up a service prompt through the secure display interface to inform the application that the user identity data is being requested and user authorization is required. The user confirms the prompt content and uses a password or system authentication authorization. Optionally, the user identity is confirmed by password input, fingerprint recognition, etc., and user authorization is then achieved. Optionally, the above authorization step can also be completed through the REE environment.

[0114] Step 1.3.3: Use the IEK public key in the service authorization package to encrypt the user identity information. The security carrier 110 uses the IEK public key in the service authorization package to encrypt the user identity information and generate the user identity information ciphertext. Afterwards, the security carrier 110 returns the user identity information ciphertext to the general application 120. Optionally, a digital envelope method is used for encryption, for example, a symmetric encryption key is first randomly generated, the data is directly encrypted using the symmetric key, and then the encryption key is encrypted using the application public key, and the data ciphertext and the encryption key ciphertext are exchanged together. The application server 200 first uses the private key to decrypt the encryption key ciphertext to obtain the encryption key, and then uses the encryption key to decrypt the user identity data ciphertext to obtain the original user identity data.

[0115] Step 1.4: Submitting the encrypted user information. The common application 120 submits the encrypted user identity information to the application server 200.

[0116] Step 1.4.1: Decrypt (user identity information ciphertext) using the IEK private key. The application server 200 decrypts the user identity information ciphertext using the IEK private key.

[0117] Step 1.4.2: Use user identity information to carry out subsequent business.

[0118] The application server 200 uses the user identity information to carry out subsequent services.

[0119] Figure 3 FIG. 1 is a flow chart of a sensitive information acquisition method according to an embodiment of the present invention. The execution subject of the sensitive information acquisition method according to an embodiment of the present invention is, for example, an application server. Figure 3 As shown, the sensitive information acquisition method according to an embodiment of the present invention includes the following steps:

[0120] In step S101, an encryption key is generated;

[0121] The application server generates encryption keys based on requests from ordinary applications running on the device.

[0122] In step S102, request authorization from the remote trusted service platform, and after obtaining authorization from the remote trusted service platform, send the encryption key;

[0123] The application server requests authorization from the remote trusted service platform. After obtaining authorization from the remote trusted service platform, the application server returns the encryption key to the device. Optionally, the application server returns a service authorization package signed by the remote trusted service platform for the encryption key.

[0124] In step S103, receiving the transmission information encrypted using the encryption key;

[0125] The application server receives the transmission information sent by the device end and encrypted using the encryption key.

[0126] In step S104, the transmission information is decrypted using a decryption key that matches the encryption key to obtain sensitive information.

[0127] The application server uses a decryption key that matches the encryption key to decrypt the transmitted information to obtain the sensitive information. Further, the application server processes subsequent services based on the sensitive information.

[0128] According to another aspect of the present invention, a sensitive information submission system is provided. The sensitive information submission system according to an embodiment of the present invention is, for example, used to implement the sensitive information submission method and / or sensitive information acquisition method as described above. The sensitive information submission system according to an embodiment of the present invention includes, for example, a device end. The device end sends a key request to an application server, and receives an encryption key returned by the application server. The device end encrypts the sensitive information using the encryption key, obtains the transfer information, and sends the transfer information to the application server. The application server generates an encryption key based on the key request, and returns the encryption key after authorization by the remote trusted platform.

[0129] Figure 4 FIG. 2 shows a schematic diagram of the structure of a sensitive information submission system according to an embodiment of the present invention. Figure 4 As shown, in a specific embodiment of the present invention, the sensitive information submission system includes a device end 100, an application server 200 and a remote trusted service platform server 300. The device end 100 includes a secure carrier 110, and a common application 120 runs on the device end 100.

[0130] Specifically, the common application 120 sends a key request to the application server 200. The secure element 110 encrypts the sensitive information using the encryption key to obtain the transmission information.

[0131] The remote trusted service platform (RTSP) is a set of service systems required to complete the required business. It may include signature services, real-person identity verification functions, etc. It may also include encryption machines, TSM (Trusted Service Manager), and may need to call other authoritative institutions such as real-person verification platforms, CAs, etc.

[0132] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0133] According to the embodiments of the present invention as described above, these embodiments do not describe all the details in detail, nor do they limit the invention to the specific embodiments described. Obviously, many modifications and changes can be made based on the above description. This specification selects and specifically describes these embodiments in order to better explain the principles and practical applications of the present invention, so that those skilled in the art can make good use of the present invention and the modified use based on the present invention. The present invention is limited only by the claims and their full scope and equivalents.

Claims

1. A method for submitting sensitive information, comprising: Sending a key request to an application server, wherein the application server generates an encryption key according to the key request and returns the encryption key after authorization by a remote trusted service platform; Receiving the encryption key returned by the application server; Encrypt the sensitive information using the encryption key to obtain the transmitted information; and The transfer information is sent to the application server.

2. The sensitive information submission method according to claim 1, wherein: The sensitive information submission method further includes: The device sends a key request to the application server; The remote trusted service platform verifies the corresponding application service status, and if the application service status is normal, uses the signature key to sign the encryption key to obtain a service authorization package; The device receives the service authorization package, The device has a pre-stored signature verification key that matches the signature key. The device verifies the signature of the service authorization package to verify whether the encryption key is credible.

3. The sensitive information submission method according to claim 2, wherein: The sensitive information submission method further includes: Calling the security carrier in the device to obtain a device random number; Obtaining the service authorization package according to the device random number request; Receiving a service authorization package including a random number signature for the device fed back by the remote trusted service platform; The service authorization package is signature-verified to verify whether the device random number is consistent.

4. The sensitive information submission method according to claim 2, wherein: The sensitive information submission method further includes: Using the signature key to sign the encryption key and the generated timestamp to obtain the service authorization package; The device verifies the signature of the service authorization package to verify whether the encryption key and the timestamp are credible; A time validity period is determined based on the timestamp, and if the time validity period has not expired, the device uses the encryption key to encrypt the sensitive information.

5. The sensitive information submission method according to claim 2, wherein: The sensitive information submission method includes: The application running on the device calls a service that requires submission of sensitive information; The application receives the service authorization package provided by the application server, and sends the service authorization package to the security carrier of the device to request the sensitive information; The security element uses the signature verification key to verify the signature of the service authorization package to verify whether the encryption key is credible, and after obtaining the encryption key, uses the encryption key to encrypt the sensitive information to obtain the transfer information; The application receives the transfer information generated by the secure element, and sends the transfer information to the application server.

6. The sensitive information submission method according to claim 1, wherein: The application server generates an asymmetric encryption key pair according to the key request; the asymmetric encryption key pair includes the encryption key and a decryption key matching the encryption key; The application server uses the decryption key to decrypt the transferred information to obtain the sensitive information, and performs business operations based on the sensitive information.

7. The sensitive information submission method according to claim 1, wherein: The sensitive information submission method further includes: Request user authorization; After obtaining the user's authorization, the transfer information is sent to the application server.

8. The sensitive information submission method according to claim 7, wherein: The sensitive information submission method further includes: Acquire the submitted information, and obtain the sensitive information according to at least a portion of the submitted information; store the sensitive information in the device end, After obtaining the authorization of the user, the sensitive information in the device is called to generate the transfer information.

9. The sensitive information submission method according to claim 1, wherein: The sensitive information is stored in a secure carrier; The security carrier includes at least one selected from the group consisting of a TEE environment, a SE environment, and a system KeyStore; The sensitive information includes identity information.

10. A method for obtaining sensitive information, comprising: Generate encryption keys; Requesting authorization from a remote trusted service platform, and after obtaining authorization from the remote trusted service platform, sending the encryption key; receiving a transmission encrypted using the encryption key; The transmitted information is decrypted using a decryption key that matches the encryption key to obtain sensitive information.

11. A sensitive information submission system, comprising: The device sends a key request to the application server and receives the encryption key returned by the application server; The device end encrypts the sensitive information using the encryption key to obtain the transfer information, and sends the transfer information to the application server. The application server generates an encryption key according to the key request, and returns the encryption key after authorization by the remote trusted service platform.

Images