Cross-platform user information integration method and system

Abstract

The invention belongs to the field of user information management, and discloses a cross-platform user information integration method and system, and the method comprises the steps: constructing a user identity authentication mechanism based on a cross-platform authentication protocol; unified management is carried out on user identity information among different platforms by utilizing a user identity authentication mechanism; a centralized user data management system is used for uniformly storing user data, and real-time updating of the user data is ensured through an incremental synchronization mechanism; through a single sign-on technology and a differential privacy technology, a user identity authentication process is optimized in the aspect of experience, and privacy enhancement of user identity information is realized; encrypting the user data by adopting an encryption technology; and through a multi-security technology, the security of cross-platform user data is enhanced. According to the cross-platform data synchronization method and device, the problem that user information is dispersed and repeated is solved, the real-time performance and consistency of cross-platform data synchronization are improved, the consistency and convenience of user experience are improved, and the safety of cross-platform user data is ensured.

Description

Technical Field

[0001] The present invention relates to the field of user information management, and particularly to a cross-platform user information integration method and system. Background Art

[0002] With the rapid development of information technology, in modern society, more and more enterprises and application systems manage user information across different platforms. For example, users need to perform registration, login, and identity authentication operations on multiple platforms such as the PC side, mobile side, and Web side. However, due to different technical architectures and protocols adopted by different platforms, user information cannot be effectively shared, and user management becomes cumbersome and complex.

[0003] Currently, most cross-platform user system integration frameworks achieve the exchange and sharing of user data between platforms through APIs or centralized authentication servers. Although these solutions have solved the problem of cross-platform integration to a certain extent, due to problems such as platform differences, technical incompatibilities, and user data redundancy, existing solutions have great limitations in terms of efficiency, flexibility, and user experience. Specifically as follows:

[0004] 1. Scattered and duplicate user information: Users need to create accounts and maintain personal information on each platform, and this information is usually stored in independent platform databases, resulting in duplicate filling of personal information by users across different platforms, which brings inconvenience to users. In addition, it may be difficult for users to synchronize and update their data, resulting in inconsistent information.

[0005] 2. Inconsistent user authentication and experience: Different platforms adopt different identity authentication methods, such as OAuth, JWT, etc., resulting in users often needing to re-authenticate, or even repeat the input of account passwords when switching between different platforms, causing interruptions and inefficiencies in the user experience.

[0006] 3. Delayed data synchronization between platforms: Even if a user updates personal information or performs some actions on a certain platform, these changes often cannot be immediately synchronized to other platforms, resulting in inconsistent experiences for users across different platforms and even possible data conflicts.

[0007] 4. Security issues: Cross-platform user data exchange often involves sensitive information. Without a unified security protection and encryption mechanism, it may lead to data leakage or unauthorized access, threatening the privacy and security of user information.

[0008] Therefore, how to provide a cross-platform user information integration method and system is an urgent problem to be solved at present. Summary of the Invention

[0009] The embodiments of the present invention provide a cross-platform user information integration method and system to solve the problems of scattered and duplicate user information, inconsistent user authentication and experience, lagging data synchronization between platforms, and insufficient user data security in the prior art.

[0010] To provide a basic understanding of some aspects of the disclosed embodiments, a simple summary is given below. This summary part is not a general review, nor is it intended to identify key / important constituent elements or delineate the protection scope of these embodiments. Its sole purpose is to present some concepts in a simple form as a prelude to the subsequent detailed description.

[0011] According to the first aspect of the embodiments of the present invention, a cross-platform user information integration method is provided.

[0012] In one embodiment, a cross-platform user information integration method includes:

[0013] Based on a cross-platform authentication protocol, construct a user identity authentication mechanism; use the user identity authentication mechanism to uniformly manage user identity information between different platforms;

[0014] Use a centralized user data management system to uniformly store user data and ensure real-time update of user data through an incremental synchronization mechanism;

[0015] Optimize the user identity authentication process in terms of experience through single sign-on technology and differential privacy technology to achieve enhanced privacy of user identity information;

[0016] Adopt encryption technology to encrypt user data; enhance the security of cross-platform user data through multiple security technologies.

[0017] In one embodiment, based on a cross-platform authentication protocol, constructing a user identity authentication mechanism includes:

[0018] Select a cross-platform authentication protocol and define the roles and functions of each component;

[0019] Configure the interaction process and communication protocol between each component; determine the authentication process of the selected cross-platform authentication protocol.

[0020] In one embodiment, using the user identity authentication mechanism to uniformly manage user identity information between different platforms includes:

[0021] Construct an identity management server and uniformly store and manage user identity information through the identity management server;

[0022] Through the user identity authentication mechanism and in combination with the identity management server, complete the unified management of user identity information between different platforms.

[0023] In one embodiment, a centralized user data management system is utilized to uniformly store user data, and an incremental synchronization mechanism is adopted to ensure real-time update of user data, including:

[0024] Collect user data and store it in the centralized user data management system, where the user data includes registration information, personal profiles, and behavioral data;

[0025] Determine the triggering conditions, synchronization policies, and synchronization algorithms of the incremental synchronization mechanism, and synchronize the incremental data to the centralized user data management system.

[0026] In one embodiment, the single sign-on technology and differential privacy technology are used to optimize the user identity authentication process in terms of experience, and enhance the privacy of user identity information, including:

[0027] Configure a single sign-on server, including an identity provider and a service provider; use the single sign-on server to complete user identity authentication;

[0028] Preprocess the user identity information, and use differential privacy technology to protect the privacy of the preprocessed user identity information.

[0029] In one embodiment, configure a single sign-on server, including an identity provider and a service provider; use the single sign-on server to complete user identity authentication, including:

[0030] Verify the user's credentials through the configured identity provider. If the verification passes, generate a token containing user identity and permission information;

[0031] The user accesses the service provider through the token containing user identity and permission information. The service provider verifies the validity of the token containing user identity and permission information by communicating with the identity provider;

[0032] If the token verification passes, the service provider allows the user to access the requested resources;

[0033] The service provider creates a session locally and stores the user's session information in the local server; when the user accesses other resources in the service provider, the service provider verifies the user's identity through the session information.

[0034] In one embodiment, preprocess the user identity information, and use differential privacy technology to protect the privacy of the preprocessed user identity information, including:

[0035] Encrypt the personal identification information in the user identity information; determine the privacy parameters according to actual requirements;

[0036] Add noise to the user identity information through the Laplace mechanism, and the noise includes random numbers, perturbation values, and values with a specific distribution;

[0037] Use the information entropy model to evaluate the privacy protection effect, calculate the evaluation result of the protection effect, and adjust the privacy parameters according to the evaluation result.

[0038] In one embodiment, using the information entropy model to evaluate the privacy protection effect, calculating the evaluation result of the protection effect, and adjusting the privacy parameters according to the evaluation result includes:

[0039] Construct an information entropy model, and the calculation formula of the information entropy is:

[0040]

[0041] In the formula, P(x i ) represents the probability that the random variable X of the user identity information takes the value x i , x i represents the i-th value of the random variable X of the user identity information, and n represents the total number of all values of the random variable X of the user identity information;

[0042] Use the information entropy of the user identity information after adding noise to subtract the information entropy of the user identity information before adding noise to obtain a quantization result, and the larger the quantization result, the better the privacy protection effect;

[0043] Preset the target value of the information entropy. If the quantization result is lower than the target value of the information entropy, increase the privacy parameter. If the quantization result is higher than the target value of the information entropy, increase the privacy parameter. If the quantization result is equal to the target value of the information entropy, the privacy parameter remains unchanged.

[0044] In one embodiment, enhancing the security of cross-platform user data through multiple security technologies includes:

[0045] Determine the authentication factors, and protect the cross-platform user data through multiple authentication factors. The authentication factors include passwords, SMS verification codes, biometrics, and hardware tokens;

[0046] Collect the user's behavior data, and use machine learning algorithms to establish the user's behavior baseline to identify abnormal behaviors and activate the protection mechanism for cross-platform user data.

[0047] According to the second aspect of the embodiments of the present invention, a cross-platform user information integration system is provided.

[0048] In one embodiment, the cross-platform user information integration system includes:

[0049] The user identity information management module is used to build a user identity authentication mechanism based on a cross-platform authentication protocol; and use the user identity authentication mechanism to uniformly manage user identity information across different platforms;

[0050] The user data synchronization module is used to uniformly store user data by using a centralized user data management system, and ensure the real-time update of user data through an incremental synchronization mechanism;

[0051] The cross-platform experience optimization module is used to optimize the experience of the user identity authentication process through single sign-on technology and differential privacy technology, and enhance the privacy of user identity information;

[0052] The user data protection module is used to encrypt user data by using encryption technology; and enhance the security of cross-platform user data through multiple security technologies.

[0053] According to the third aspect of the embodiments of the present invention, a computer device is provided.

[0054] In some embodiments, the computer device includes a memory and a processor. The memory stores a computer program, and when the processor executes the computer program, the steps of the above method are implemented.

[0055] According to the fourth aspect of the embodiments of the present invention, a computer-readable storage medium is provided.

[0056] In one embodiment, a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of the above method are implemented.

[0057] The technical solutions provided by the embodiments of the present invention may include the following beneficial effects:

[0058] (1) Solve the problem of scattered and repeated user information: By implementing unified user data management and centralized data storage, the problem of scattered storage of user information across different platforms is eliminated. Multiple platforms such as Platform A, Platform B, and Platform C all access and update user information through a unified system framework, thus avoiding the cumbersome steps of users having to repeatedly fill in personal information on each platform in the traditional way. The centralized management of user information makes the data more consistent and does not require repeated maintenance and update on each platform, thus effectively improving the user experience.

[0059] (2) Improved real-time and consistency of cross-platform data synchronization: By introducing a data synchronization mechanism, data on all platforms can be synchronized in real time. This solves the problem of data synchronization lag between platforms in traditional technologies. When a user updates personal information on one platform (such as changing an email address, nickname, etc.), the cross-platform user information integration system can instantly synchronize these changes to other platforms to ensure that user data on all platforms remains consistent. This not only improves the user experience, but also avoids data inconsistencies on different platforms, reducing user confusion and operational errors caused by information asynchrony.

[0060] (3) Improved consistency and convenience of user experience: Through the cross-platform user integration framework, users do not need to repeatedly authenticate or update information on other platforms after logging in or updating information on one platform. This seamless cross-platform user experience greatly reduces the complexity of operations when users switch between different platforms. Whether it is the web, mobile or desktop, users can enjoy a consistent operating experience without having to repeatedly enter personal information or re-authenticate, which improves user efficiency. At the same time, differential privacy technology is used to pre-process and protect user identity information, which can not only effectively enhance privacy protection, but also maintain the practicality of data and provide a flexible adjustment mechanism.

[0061] (4) Enhanced flexibility and scalability of the cross-platform user information integration system: With a modular design, each module such as user information management, data synchronization, and authentication operates independently and can be customized and expanded according to actual needs. For example, if a new platform is added or a new authentication protocol needs to be supported, the cross-platform user information integration system can be easily adjusted, which has high flexibility and scalability. This flexibility enables the cross-platform user information integration system to adapt to different application scenarios and technological developments, avoiding the limitations of hard coding and difficult expansion of traditional systems.

[0062] (5) Ensure the security of user data across platforms: The use of encryption and security mechanisms also effectively solves the security risks existing in traditional cross-platform systems. Through data encryption, permission control, behavior analysis and other means, it ensures that user data will not be leaked or tampered with when exchanged between multiple platforms. In addition, centralized data management and synchronization also facilitates unified monitoring and management of data access rights, thereby improving overall data security.

[0063] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0065] Figure 1 is a flowchart of a cross-platform user information integration method shown according to an exemplary embodiment;

[0066] Figure 2 is a schematic block diagram of a cross-platform user information integration system shown according to an exemplary embodiment;

[0067] Figure 3 is a schematic structural diagram of a computer device shown according to an exemplary embodiment;

[0068] Figure 4 is a user integration management diagram shown according to an exemplary embodiment;

[0069] Figure 5 is a composition architecture diagram of a cross-platform user information integration system shown according to an exemplary embodiment. Detailed implementation manners

[0070] The following description and the drawings fully illustrate the specific implementation manners herein, enabling those skilled in the art to practice them. Parts and features of some embodiments may be included in or replace parts and features of other embodiments. The scope of the embodiments herein includes the entire scope of the claims and all available equivalents of the claims. Herein, the terms "first", "second", etc. are only used to distinguish one element from another element, and do not require or imply any actual relationship or order between these elements. In fact, the first element can also be called the second element, and vice versa. Moreover, the term "including", "comprising" or any other variant thereof is intended to cover non-exclusive inclusion, so that a structure, device or equipment including a series of elements not only includes those elements, but also includes other elements not expressly listed, or also includes elements inherent to such structure, device or equipment. Without further limitation, an element defined by the statement "including one..." does not exclude the existence of another identical element in the structure, device or equipment including the said element. The embodiments herein are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts among the embodiments can be referred to each other.

[0071] As used herein, the terms "longitudinal", "lateral", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", etc. indicate the orientation or positional relationship based on the orientation or positional relationship shown in the drawings. They are only for the convenience of describing the present disclosure and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation. Therefore, they should not be construed as limiting the present invention. In the description of the present disclosure, unless otherwise specified and defined, the terms "mounted", "connected", and "coupled" shall be understood in a broad sense. For example, they may be mechanical connections or electrical connections, or may be the communication inside two elements. They may be directly connected or indirectly connected through an intermediate medium. For those of ordinary skill in the art, the specific meanings of the above terms can be understood according to specific circumstances.

[0072] As used herein, unless otherwise specified, the term "plurality" means two or more.

[0073] As used herein, the character " / " indicates that the objects before and after are in an "or" relationship. For example, D / E means: D or E.

[0074] As used herein, the term "and / or" is an associative relationship describing an object, indicating that there can be three relationships. For example, D and / or E means: D or E, or, D and E, these three relationships.

[0075] It should be understood that although each step in the flowchart is displayed sequentially as indicated by the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless there is a clear indication in the present disclosure, the execution of these steps has no strict order limitation, and these steps can be executed in other orders. Moreover, at least a part of the steps in the figure may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be executed alternately or in turn with at least a part of other steps or sub-steps or stages of other steps.

[0076] Each module in the device or system of the present application can be implemented in whole or in part by software, hardware, and their combination. The above-mentioned modules can be embedded in the processor of the computer device in hardware form or be independent of it, or can be stored in the memory of the computer device in software form, so as to facilitate the processor to call and execute the operations corresponding to the above-mentioned respective modules.

[0077] Without conflict, the embodiments in the present invention and the features in the embodiments can be combined with each other.

[0078] Figure 1An embodiment of a cross-platform user information integration method of the present invention is shown.

[0079] In this alternative embodiment, the cross-platform user information integration method includes:

[0080] S101. Based on a cross-platform authentication protocol, construct a user identity authentication mechanism; use the user identity authentication mechanism to uniformly manage user identity information between different platforms;

[0081] S102. Use a centralized user data management system to uniformly store user data, and ensure real-time update of user data through an incremental synchronization mechanism;

[0082] S103. Optimize the user identity authentication process in terms of experience through single sign-on technology and differential privacy technology, and achieve enhanced privacy of user identity information;

[0083] S104. Encrypt user data using encryption technology; enhance the security of cross-platform user data through multiple security technologies.

[0084] In this alternative embodiment, constructing a user identity authentication mechanism based on a cross-platform authentication protocol includes:

[0085] Select a cross-platform authentication protocol and define the roles and functions of each component (such as an authentication server, a resource server, a client).

[0086] Configure the interaction process and communication protocol between each component; determine the authentication process of the selected cross-platform authentication protocol, including steps such as user login, token acquisition, token verification, and refresh.

[0087] In this alternative embodiment, using the user identity authentication mechanism to uniformly manage user identity information between different platforms includes:

[0088] Construct an identity management server, and uniformly store and manage user identity information through the identity management server.

[0089] Through the user identity authentication mechanism and in combination with the identity management server, complete the unified management of user identity information between different platforms.

[0090] Among them, the authentication process includes:

[0091] (1) User login

[0092] The client redirects the user to the login page of the authorization server. The user enters credentials on the authorization server for identity verification.

[0093] (2) Obtain an authorization code

[0094] After the user agrees to authorize, the authorization server generates an authorization code. The authorization code is passed back to the client through a redirected Uniform Resource Identifier (URI).

[0095] (3) Exchange Tokens

[0096] The client uses the authorization code to request an access token from the authorization server. The request includes the client ID, client secret, authorization code, and redirect URI. The authorization server verifies the above information and returns an access token and a refresh token.

[0097] (4) Token Verification

[0098] The client uses the access token to request resources on the resource server. The resource server verifies the validity and permissions of the token. The resource server returns the resource data.

[0099] (5) Token Refresh

[0100] After the access token expires, the client uses the refresh token to request a new access token. The authorization server verifies the refresh token and returns a new access token.

[0101] In this optional embodiment, a centralized user data management system is used to uniformly store user data, and an incremental synchronization mechanism is used to ensure real-time updates of user data, including:

[0102] Collect user data and store it in the centralized user data management system, and the user data includes registration information, personal profiles, and behavioral data.

[0103] Determine the trigger conditions, synchronization policies, and synchronization algorithms of the incremental synchronization mechanism, and synchronize the incremental data to the centralized user data management system.

[0104] Among them, the incremental synchronization mechanism includes:

[0105] (1) Trigger Conditions

[0106] Data change: When user data changes (for example, the user updates personal information, completes a transaction, etc.), trigger incremental synchronization.

[0107] Timed trigger: Set a timed task to check and synchronize incremental data at specific time intervals.

[0108] Event-driven: Based on an event architecture, monitor and respond to user behavior events in real time to trigger data synchronization.

[0109] (2) Synchronization Policies

[0110] Real-time synchronization: Synchronize immediately when data changes to ensure that user data is up-to-date.

[0111] Bulk synchronization: Synchronize the accumulated change data at one time within a specified time interval.

[0112] Hybrid synchronization: Combine the advantages of real-time and bulk synchronization and flexibly select according to different data types and business requirements.

[0113] (3) Synchronization algorithm

[0114] Incremental data identification: Use methods such as log analysis, timestamp comparison, or version control to identify the change data since the last synchronization.

[0115] Data conflict resolution: When synchronizing multi-source data, define conflict resolution strategies (such as last modification priority, user confirmation, etc.) to ensure data consistency.

[0116] Data fusion: During the synchronization process, integrate duplicate information in multiple data sources to ensure data integrity and redundancy-free.

[0117] In this alternative embodiment, through single sign-on technology and differential privacy technology, the user identity authentication process is optimized in terms of experience, and the privacy enhancement of user identity information is achieved, including:

[0118] Configure a single sign-on server, including an identity provider and a service provider; use the single sign-on server to complete user identity authentication.

[0119] Preprocess the user identity information, and use differential privacy technology to protect the preprocessed user identity information.

[0120] In this alternative embodiment, configuring a single sign-on server, including an identity provider and a service provider; using the single sign-on server to complete user identity authentication includes:

[0121] Verify the user's credentials through the configured identity provider. If the verification passes, generate a token containing the user identity and permission information.

[0122] The user accesses the service provider through the token containing the user identity and permission information. The service provider verifies the validity of the token containing the user identity and permission information by communicating with the identity provider.

[0123] If the token verification passes, the service provider allows the user to access the requested resources.

[0124] The service provider creates a session locally and stores the user's session information in the local server; when the user accesses other resources in the service provider, the service provider verifies the user identity through the session information.

[0125] In this alternative embodiment, preprocessing the user identity information and protecting the privacy of the preprocessed user identity information using differential privacy technology includes:

[0126] Encrypting the personal identification information in the user identity information; determining privacy parameters according to actual requirements.

[0127] Adding noise to the user identity information through the Laplace mechanism, and the noise includes random numbers, perturbation values, and numerical values with a specific distribution.

[0128] Using an information entropy model to evaluate the privacy protection effect, calculating the evaluation result of the protection effect, and adjusting the privacy parameters according to the evaluation result. Ensure that even if an attacker has all the data except the target data, the specific identity information of the user cannot be inferred from the token.

[0129] It should be noted that the privacy parameter is used to control the strength of differential privacy. Choosing an appropriate privacy parameter value is very important. A small privacy parameter value provides stronger privacy protection but affects the accuracy of the data. A large privacy parameter value provides weaker privacy protection but higher data accuracy.

[0130] Differential privacy protects privacy by adding noise to the data. The Laplace mechanism is a commonly used noise addition method, and the distribution of the noise is usually a Laplace distribution.

[0131] The information entropy model is used to evaluate the effectiveness of privacy measures. The higher the information entropy, the greater the uncertainty and the better the privacy protection effect.

[0132] In this alternative embodiment, using an information entropy model to evaluate the privacy protection effect, calculating the evaluation result of the protection effect, and adjusting the privacy parameters according to the evaluation result includes:

[0133] Constructing an information entropy model, and the calculation formula of the information entropy is:

[0134]

[0135] In the formula, P(x i ) represents the probability that the random variable X of the user identity information takes the value x i , x i represents the i-th value (a possible value) of the random variable X of the user identity information, and n represents the total number of all values of the random variable X of the user identity information.

[0136] Using the information entropy of the user identity information after adding noise, subtracting the information entropy of the user identity information before adding noise, to obtain a quantization result, and the larger the quantization result, the better the privacy protection effect.

[0137] Set the target value of the preset information entropy. If the quantization result is lower than the target value of the information entropy, increase the privacy parameter; if the quantization result is higher than the target value of the information entropy, increase the privacy parameter; if the quantization result is equal to the target value of the information entropy, the privacy parameter remains unchanged.

[0138] In this alternative embodiment, enhancing the security of cross-platform user data through multiple security technologies includes:

[0139] Determine the authentication factors and protect cross-platform user data through multiple authentication factors, and the authentication factors include passwords, SMS verification codes, biometrics, and hardware tokens.

[0140] Collect the user's behavior data and use machine learning algorithms to establish the user's behavior baseline to identify abnormal behaviors and activate the protection mechanism for cross-platform user data.

[0141] Among them, multi-factor authentication ensures the authenticity of the user's identity by combining multiple different types of authentication factors (such as passwords, SMS verification codes, biometrics, and hardware tokens). Even if one authentication factor is obtained by an attacker, the account cannot be fully accessed. For example:

[0142] Password: A traditional knowledge factor that the user needs to remember.

[0143] SMS verification code: A dynamically generated time-sensitive code sent to the user's mobile phone, belonging to the possession factor.

[0144] Biometrics: Such as fingerprints and facial recognition, belonging to the inherent factor, which is difficult to be copied or stolen.

[0145] Hardware token: Such as a USB key or a smart card, also belonging to the possession factor.

[0146] Using multi-factor authentication in a cross-environment can effectively prevent the leakage of user data due to vulnerabilities in a single platform. Even if an attacker breaks into one platform, they cannot provide all the authentication factors at the same time, thus protecting user data.

[0147] By collecting the user's behavior data and using machine learning algorithms to establish the user's behavior baseline, the normal behavior patterns of the user can be identified. Once an abnormal behavior deviating from this baseline is detected, a security alarm can be triggered in real time or measures can be taken. This can work together on multiple platforms to identify potential security threats.

[0148] Behavior baseline: A personalized behavior model that improves the detection ability of abnormal activities.

[0149] Cross-platform application: No matter which platform the user operates on, the behavior data will be uniformly collected and analyzed, thus providing consistent security protection.

[0150] By implementing user behavior analysis on multiple platforms, abnormal activities can be detected in a timely manner. No matter which platform the attacker launches an attack on, a timely response can be made to protect user data.

[0151] Figure 2 Fig. 4 shows an embodiment of a cross-platform user information integration system of the present invention.

[0152] In this alternative embodiment, the cross-platform user information integration system includes:

[0153] The user identity information management module 201 is used to construct a user identity authentication mechanism based on a cross-platform authentication protocol; and use the user identity authentication mechanism to uniformly manage user identity information between different platforms.

[0154] The user data synchronization module 202 is used to uniformly store user data by using a centralized user data management system, and ensure the real-time update of user data through an incremental synchronization mechanism.

[0155] The cross-platform experience optimization module 203 is used to optimize the experience of the user identity authentication process through single sign-on technology and differential privacy technology, and realize the privacy enhancement of user identity information.

[0156] The user data protection module 204 is used to encrypt user data by using encryption technology; and enhance the security of cross-platform user data through multiple security technologies.

[0157] To facilitate the understanding of the above technical solutions of the present invention, the above technical solutions of the present invention will be further described from the perspectives of architecture and principle.

[0158] The present invention provides a cross-platform user system integration framework, specifically as follows:

[0159] I. Unified identity authentication and unified user information management

[0160] Provide a unified user identity authentication mechanism that supports multiple mainstream authentication protocols (such as OAuth 2.0, JWT, OpenID Connect, etc.). Through this mechanism, the identity information of users between different platforms can be uniformly managed, avoiding the trouble of users registering and logging in repeatedly on multiple platforms. No matter which platform the user authenticates on, the system will identify and uniformly manage their identity information, ensuring that users do not need to fill in account information repeatedly.

[0161] II. Centralized management and real-time synchronization of user data

[0162] Through the centralized user data management system, the situation of decentralized storage of user data is broken. The user registration information, personal profiles, behavior data, etc. are stored uniformly, and the real-time update of information is ensured through the incremental synchronization mechanism. When a user modifies personal information or behavior data on one platform, the system will automatically synchronize it to other platforms, ensuring that the user data on all platforms is always consistent and avoiding data redundancy and inconsistency issues.

[0163] III. Consistent cross-platform user experience

[0164] By designing a unified user authentication process and interface, the differences in authentication methods and experiences between different platforms are eliminated. Whether the user is on the Web side, mobile side or other platforms, they will go through a consistent login authentication process, reducing the operation complexity when logging in to multiple platforms. Through the single sign-on (SSO) technology, after the user authenticates successfully on one platform, they can directly access other platforms without having to log in repeatedly, improving the user's usage efficiency and experience.

[0165] IV. Perfect security protection mechanism

[0166] By introducing a unified data encryption and security authentication mechanism, the security of user information during transmission and storage is ensured. Encryption technology is used to encrypt user data to prevent data leakage. At the same time, the system also supports security means such as multi-factor authentication and behavior analysis to ensure the security of cross-platform data exchange and user identity verification and protect user privacy.

[0167] V. Flexible expansion and high availability

[0168] The framework adopts a modular design, supporting flexible function expansion and customization. Each module can be replaced or expanded according to actual needs to ensure that the system can adapt to the needs of different platforms and applications, with good adaptability and high availability.

[0169] In addition, as Figure 4 shown, by configuring the framework, providing interfaces, and completing system integration through multiple platforms (such as Platform A, Platform B, and Platform C), a cross-platform user system integration framework is constructed. Through the cross-platform user system integration framework, the user information synchronization and identity information credential update of multiple platforms are realized.

[0170] As Figure 5 shown, the cross-platform user system integration framework includes a user information maintenance module, an identity credential maintenance module, a data synchronization module, an encryption and decryption module, a permission control module, a user behavior audit module, and an API interface and service call module.

[0171] In one embodiment, a computer device is provided. The computer device can be a server, and its internal structure diagram can be as Figure 3As shown in the figure. The computer device includes a processor, a memory, and a network interface connected via a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store static information and dynamic information data. The network interface of the computer device is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, it implements the steps in the above method embodiments.

[0172] Those skilled in the art can understand that Figure 3 the structure shown in the figure is only a block diagram of some structures related to the solution of the present invention, and does not constitute a limitation on the computer device to which the solution of the present invention is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine some components, or have different component arrangements.

[0173] In addition, the present invention also provides a computer device, including a memory and a processor. A computer program is stored in the memory. When the processor executes the computer program, it implements the steps in the above method embodiments.

[0174] In addition, the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by the processor, it implements the steps in the above method embodiments.

[0175] Those of ordinary skill in the art can understand that all or part of the processes in the above method embodiments can be completed by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the above method embodiments. Among them, any reference to a memory, storage, database, or other medium used in the various embodiments provided by the present invention can include at least one of non-volatile and volatile memories. Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory, or optical memory, etc. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc.

[0176] The present invention is not limited to the structures already described above and shown in the drawings, and various modifications and changes can be made without departing from its scope. The scope of the present invention is limited only by the appended claims.

Claims

1. A cross-platform user information integration method, characterized in that: The method includes: Build a user identity authentication mechanism based on the cross-platform authentication protocol; use the user identity authentication mechanism to uniformly manage user identity information across different platforms; Use a centralized user data management system to uniformly store user data and ensure real-time updates of user data through an incremental synchronization mechanism; Through single sign-on technology and differential privacy technology, the user authentication process is optimized in terms of experience, and the privacy of user identity information is enhanced; Encryption technology is used to encrypt user data; multiple security technologies are used to enhance the security of user data across platforms.

2. A cross-platform user information integration method according to claim 1, characterized in that: The user identity authentication mechanism based on the cross-platform authentication protocol includes: Select a cross-platform authentication protocol and define the roles and functions of each component; Configure the interaction process and communication protocol between various components; determine the authentication process of the selected cross-platform authentication protocol.

3. A cross-platform user information integration method according to claim 1, characterized in that: The unified management of user identity information between different platforms using the user identity authentication mechanism includes: Build an identity management server and use it to uniformly store and manage user identity information; Through the user identity authentication mechanism and combined with the identity management server, unified management of user identity information between different platforms is completed.

4. A cross-platform user information integration method according to claim 1, characterized in that: The centralized user data management system is used to uniformly store user data and ensure real-time update of user data through an incremental synchronization mechanism, including: Collect user data and store it in a centralized user data management system. User data includes registration information, personal information, and behavioral data; Determine the triggering conditions, synchronization strategy and synchronization algorithm of the incremental synchronization mechanism, and synchronize the incremental data to the centralized user data management system.

5. A cross-platform user information integration method according to claim 1, characterized in that: The optimization of the user authentication process in terms of experience through single sign-on technology and differential privacy technology to enhance the privacy of user identity information includes: Configure the single sign-on server, including the identity provider and service provider; use the single sign-on server to complete user identity authentication; The user identity information is preprocessed, and the differential privacy technology is used to protect the privacy of the preprocessed user identity information.

6. A cross-platform user information integration method according to claim 5, characterized in that: The configuration single sign-on server includes an identity provider and a service provider; Using the single sign-on server to complete user identity authentication includes: The user's credentials are verified through the configured identity provider. If the verification succeeds, a token containing the user's identity and permission information is generated; The user accesses the service provider through a token containing the user's identity and permission information. The service provider verifies the validity of the token containing the user's identity and permission information by communicating with the identity provider. If the token is verified, the service provider allows the user to access the requested resource; The service provider creates a session locally and stores the user's session information in the local server; when the user accesses other resources in the service provider, the service provider verifies the user's identity through the session information.

7. A cross-platform user information integration method according to claim 6, characterized in that: The preprocessing of the user identity information and the use of differential privacy technology to protect the privacy of the preprocessed user identity information include: Encrypt personal identification information in user identity information; determine privacy parameters based on actual needs; Add noise to the user identity information through the Laplace mechanism, and the noise includes random numbers, perturbation values ​​and values ​​with specific distribution; The information entropy model is used to evaluate the privacy protection effect, calculate the evaluation results of the protection effect, and adjust the privacy parameters based on the evaluation results.

8. A cross-platform user information integration method according to claim 7, characterized in that: The use of the information entropy model to evaluate the privacy protection effect, calculating the evaluation result of the protection effect, and adjusting the privacy parameters according to the evaluation result includes: An information entropy model is constructed, and the calculation formula of information entropy is: In the formula, P(x i ) represents the random variable X of user identity information, taking the value x i The probability of x i represents the i-th value of the random variable X of the user identity information, and n represents the total number of all values ​​of the random variable X of the user identity information; Use the information entropy of the user identity information after adding noise to subtract the information entropy of the user identity information before adding noise to get a quantitative result. The larger the quantitative result, the better the privacy protection effect. A target value of information entropy is preset. If the quantization result is lower than the target value of information entropy, the privacy parameter is increased. If the quantization result is higher than the target value of information entropy, the privacy parameter is increased. If the quantization result is equal to the target value of information entropy, the privacy parameter remains unchanged.

9. A cross-platform user information integration method according to claim 1, characterized in that: The method of enhancing the security of user data across platforms through multiple security technologies includes: Identify authentication factors and protect user data across platforms using multiple authentication factors, including passwords, SMS verification codes, biometrics, and hardware tokens; Collect user behavior data and use machine learning algorithms to establish user behavior baselines to identify abnormal behaviors and initiate cross-platform user data protection mechanisms.

10. A cross-platform user information integration system, characterized in that: The system includes: The user identity information management module is used to build a user identity authentication mechanism based on a cross-platform authentication protocol; using the user identity authentication mechanism, the user identity information between different platforms is uniformly managed; The user data synchronization module is used to utilize a centralized user data management system to uniformly store user data and ensure real-time updating of user data through an incremental synchronization mechanism; The cross-platform experience optimization module is used to optimize the user identity authentication process in terms of experience through single sign-on technology and differential privacy technology, thereby enhancing the privacy of user identity information; The user data protection module is used to encrypt user data using encryption technology and enhance the security of user data across platforms through multiple security technologies.

Images