ETC (Electronic Toll Collection) issuing service customer data protection method, device, equipment, medium and product

Abstract

The invention discloses an ETC (Electronic Toll Collection) issuing service customer data protection method, device, equipment, medium and product, and relates to the technical field of data security. The method comprises the following steps: according to a personal unique identifier of a target customer and a data type field and a data version number field in ETC issuing service personal data, performing encryption processing based on an SM4 algorithm to obtain a first index value for retrieval, and binding the personal data and the index value and storing the personal data and the index value in a database; when an accessible customer information list of a target customer is obtained, aiming at each piece of first plaintext index data in the list, according to the individual unique identifier of the target customer and corresponding data, performing encryption processing based on an SM4 algorithm to obtain another corresponding first index value for retrieval, and finally, according to the index values, obtaining a second index value for retrieval; according to the method, the corresponding personal information field is inquired from the database through the inquiry statement, so that storage can be safely expanded, rapid batch retrieval of the personal information of the target customer can be realized, and the retrieval efficiency is greatly improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of data security, and particularly relates to a method, device, equipment, medium and product for protecting customer data in the ETC issuing business. Background Art

[0002] At present, in the field of secure storage of customer personal data, there are several common solutions. One is to encrypt the customer personal data itself, and the other is to encrypt the index of the customer personal data. The above two solutions can effectively meet their own needs in their respective application scenarios, but they also have their own defects and deficiencies.

[0003] For the solution of encrypting the customer personal data itself, the following problems will exist: one is that it is not conducive to using the customer personal data as a retrieval basis, and the other is that encrypting all customer personal data will consume excessive computing resources of the encryption device.

[0004] For the solution of encrypting the index of the customer personal data, generally, a digest algorithm (such as MD5, SHA-1, SHA-256 or SM3 algorithm, etc.) is used to process the index information of the customer personal data to obtain a one-way ciphertext as the index of the customer personal information data and perform key-value K-V storage. This structure ensures one-way fast retrieval when the customer personal ID (Identity Document, which is the abbreviation of words such as identity card identification number, account number, unique code or exclusive number, etc.) is known, but it cannot support the requirement of reverse retrieval of the customer personal ID through known information. In addition, under the requirements of the application of compliant cryptographic algorithms, to query multiple personal information data of a customer, the encryption device needs to be called repeatedly, which will reduce the retrieval efficiency.

[0005] In daily life, except for sensitive information such as customer passwords, personal data such as name, ID number, birthday, phone number and bank card number are not necessarily confidential content, but measures must be taken to protect the association relationship between them to prevent them from being aggregated and inferred to obtain the association relationship between them, and then using the association relationship for other social engineering means to implement various illegal infringements.

[0006] As the ETC (Electronic Toll Collection, which is automatically charged for highways or bridges) issuance business continues to expand in depth, the complexity of the business involved in ETC issuance enterprises is increasing day by day. In this process, the scope of customer personal data included in the CRM (Customer Relationship Management) system of ETC issuing units continues to expand, and the data richness is increasing day by day. Organizing personal data with the customer as the core, it will be found that customer personal data presents a multi-dimensional and multi-level tree structure, such as Figure 1 shown, it is very difficult to ensure the correct storage and application expansion of data while storing data in a conventional structured relational database table. Therefore, how to provide a data security protection solution that can perform secure extended storage and efficient retrieval for ETC issuance business customer data is an urgent research topic for those skilled in the art. Summary of the Invention

[0007] The purpose of the present invention is to provide a method, device, computer device, computer-readable storage medium and computer program product for protecting ETC issuance business customer data, so as to solve the problem that the existing customer personal data security storage solutions are limited in both data security extended storage capabilities and data retrieval efficiency when facing ETC issuance business customer data.

[0008] To achieve the above purpose, the present invention adopts the following technical solutions:

[0009] In the first aspect, a method for protecting ETC issuance business customer data is provided, including:

[0010] Obtain the personal data of the ETC issuance business of the target customer, where the personal data of the ETC issuance business includes a data type field, a data version number field, and a personal information field;

[0011] Based on the personal unique identifier of the target customer and the data type field and data version number field in the personal data of the ETC issuance business, perform encryption processing based on the SM4 algorithm to obtain a first index value for retrieval;

[0012] Bind and store the personal data of the ETC issuance business of the target customer and the first index value in a database;

[0013] Obtain an accessible customer information list for the target customer, where the accessible customer information list includes N first plaintext index data, N represents a positive integer, and different first plaintext index data represent different data type fields and data version number fields;

[0014] For each first plaintext index data in the accessible customer information list, based on the personal unique identifier of the target customer and the corresponding data, another first index value for retrieval is obtained through encryption processing based on the SM4 algorithm.

[0015] Based on the another first index value of each first plaintext index data, each personal information field corresponding one by one to each first plaintext index data is retrieved from the database through a query statement.

[0016] Based on the above invention content, a new data security protection solution for secure extended storage and efficient retrieval of ETC issuance business customer data is provided. That is, first, based on the personal unique identifier of the target customer, the data type field and the data version number field in the ETC issuance business personal data, a first index value for retrieval is obtained through encryption processing based on the SM4 algorithm, and the personal data is bound and stored in the database with this index value. Then, when obtaining the accessible customer information list of the target customer, for each first plaintext index data in the table, based on the personal unique identifier of the target customer and the corresponding data, another first index value for retrieval is obtained through encryption processing based on the SM4 algorithm. Finally, based on these index values, the corresponding personal information fields are retrieved from the database through a query statement. Thus, not only can independent secure extended storage be performed on the new ETC issuance business personal data of the target customer, but also fast batch retrieval of the target customer's personal information can be realized, greatly improving the retrieval efficiency and facilitating practical application and promotion.

[0017] In a possible design, obtaining a first index value for retrieval based on the personal unique identifier of the target customer, the data type field and the data version number field in the ETC issuance business personal data through encryption processing based on the SM4 algorithm includes:

[0018] In an encryption machine, a first working key is obtained through diffusion processing based on the SM4 algorithm on an eight-byte data block preprocessed based on the personal unique identifier of the target customer using a first root key, where the first root key refers to a certain key in a compliant cryptographic medium.

[0019] In the encryption machine, the first working key is used to perform encryption processing based on the SM4 algorithm on a sixteen-byte data block obtained by concatenating the data type field and the data version number field in the ETC issuance business personal data, to obtain a first string with a length of sixteen bytes.

[0020] The first string is subjected to Base64 encoding processing to obtain a first index value for retrieval.

[0021] In a possible design, after obtaining the personal data of the ETC issuance service for the target customer, the method further includes:

[0022] Based on the personal unique identifier of the target customer, as well as the data type field and data version number field in the ETC issuance service personal data, perform encryption processing based on the SM4 algorithm to obtain a second index value used as retrieval data and for reverse inferring the customer's personal unique identifier;

[0023] After obtaining the list of accessible customer information for the target customer, the method further includes:

[0024] Obtain the second plaintext index data for the target customer, where the second plaintext index data represents the data type field and data version number field in the ETC issuance service personal data;

[0025] Based on the second plaintext index data and the second index value, perform decryption processing based on the SM4 algorithm to obtain the personal unique identifier of the target customer.

[0026] In a possible design, based on the personal unique identifier of the target customer, as well as the data type field and data version number field in the ETC issuance service personal data, performing encryption processing based on the SM4 algorithm to obtain a second index value used as retrieval data and for reverse inferring the customer's personal unique identifier includes:

[0027] In the encryption machine, use the second key to perform dispersion processing based on the SM4 algorithm on the eight-byte data block obtained by concatenating the data type field and data version number field in the ETC issuance service personal data to obtain a second working key, where the second key refers to any key in the compliant cryptographic medium;

[0028] In the encryption machine, use the second working key to perform encryption processing based on the SM4 algorithm on the sixteen-byte data block obtained by preprocessing the personal unique identifier of the target customer to obtain a second string with a length of sixteen bytes;

[0029] Perform Base64 encoding processing on the second string to obtain a second index value used as retrieval data and for reverse inferring the customer's personal unique identifier.

[0030] In a possible design, based on the second plaintext index data and the second index value, performing decryption processing based on the SM4 algorithm to obtain the personal unique identifier of the target customer includes:

[0031] Perform Base64 decoding processing on the second index value to obtain the second string with a length of sixteen bytes;

[0032] In the encryption machine, the eight-byte data block obtained by preprocessing based on the second plaintext index data is subjected to diffusion processing based on the SM4 algorithm using the second key to obtain the second working key;

[0033] In the encryption machine, the second string is decrypted based on the SM4 algorithm using the second working key to obtain the personal unique identifier of the target customer.

[0034] In a second aspect, an ETC issuing service customer data protection device is provided, including a service data acquisition unit, a first encryption processing unit, a data binding storage unit, an access information acquisition unit, a second encryption processing unit, and a query statement application unit;

[0035] The service data acquisition unit is configured to acquire the ETC issuing service personal data of the target customer, where the ETC issuing service personal data includes a data type field, a data version number field, and a personal information field;

[0036] The first encryption processing unit is communicatively connected to the service data acquisition unit, and is configured to encrypt and process based on the SM4 algorithm according to the personal unique identifier of the target customer and the data type field and data version number field in the ETC issuing service personal data to obtain a first index value for retrieval;

[0037] The data binding storage unit is communicatively connected to the service data acquisition unit and the first encryption processing unit respectively, and is configured to bind and store the ETC issuing service personal data of the target customer and the first index value in a database;

[0038] The access information acquisition unit is configured to acquire an accessible customer information list for the target customer, where the accessible customer information list includes N first plaintext index data, N represents a positive integer, and different first plaintext index data represent different data type fields and data version number fields;

[0039] The second encryption processing unit is communicatively connected to the access information acquisition unit, and is configured to, for each first plaintext index data in the accessible customer information list, encrypt and process based on the SM4 algorithm according to the personal unique identifier of the target customer and the corresponding data to obtain another corresponding first index value for retrieval;

[0040] The query statement application unit is communicatively connected to the data binding storage unit and the second encryption processing unit respectively, and is configured to query and obtain each personal information field corresponding to each first plaintext index data from the database through a query statement according to the another first index value of each first plaintext index data.

[0041] In a possible design, a third encryption processing unit and a decryption processing unit are further included;

[0042] The third encryption processing unit is communicatively connected to the service data acquisition unit, and is configured to perform encryption processing based on the SM4 algorithm according to the personal unique identifier of the target customer and the data type field and data version number field in the ETC issuing service personal data, so as to obtain a second index value used as retrieval data and for inversely deducing the personal unique identifier of the customer;

[0043] The access information acquisition unit is further configured to acquire second plaintext index data for the target customer, where the second plaintext index data represents the data type field and data version number field in the ETC issuing service personal data;

[0044] The decryption processing unit is communicatively connected to the third encryption processing unit and the access information acquisition unit respectively, and is configured to perform decryption processing based on the SM4 algorithm according to the second plaintext index data and the second index value to obtain the personal unique identifier of the target customer.

[0045] In a third aspect, the present invention provides a computer device, including a memory, a processor, and a transceiver that are communicatively connected in sequence, where the memory is configured to store a computer program, the transceiver is configured to send and receive messages, and the processor is configured to read the computer program and execute the ETC issuing service customer data protection method as described in the first aspect or any possible design in the first aspect.

[0046] In a fourth aspect, the present invention provides a computer-readable storage medium, on which instructions are stored, and when the instructions are run on a computer, the ETC issuing service customer data protection method as described in the first aspect or any possible design in the first aspect is executed.

[0047] In a fifth aspect, the present invention provides a computer program product, including a computer program or instructions, and when the computer program or the instructions are executed by a computer, the ETC issuing service customer data protection method as described in the first aspect or any possible design in the first aspect is implemented.

[0048] Beneficial effects of the above solution:

[0049] (1) The present invention creatively provides a new data security protection solution for securely expanding the storage and efficiently retrieving customer data in the ETC issuing business. Specifically, first, based on the personal unique identifier of the target customer, as well as the data type field and data version number field in the personal data of the ETC issuing business, the first index value for retrieval is obtained through encryption processing based on the SM4 algorithm. Then, the personal data is bound and stored in the database together with this index value. Next, when obtaining the list of accessible customer information of the target customer, for each piece of first plaintext index data in the table, another first index value corresponding to and for retrieval is obtained through encryption processing based on the personal unique identifier of the target customer and the corresponding data using the SM4 algorithm. Finally, based on these index values, the corresponding personal information fields are retrieved from the database through a query statement. Thus, not only can the new personal data of the ETC issuing business of the target customer be independently and securely expanded for storage, but also the rapid batch retrieval of the personal information of the target customer can be achieved, greatly improving the retrieval efficiency.

[0050] (2) It is also possible to reverse - retrieve the customer's personal unique identifier through known information, so as to realize the function of restoring and querying the entire customer's personal information by means such as name retrieval or mobile phone number retrieval, further improving the retrieval efficiency.

[0051] (3) A dual - index management relationship protection and fast - retrieval structure is constructed based on three elements: the customer's personal unique identifier, personal data type, and data version. After being applied in the secondary issuance management system of Guizhou Expressway Qiantong Zhilian Company, good results have been achieved, which is convenient for practical application and promotion. Description of the Drawings

[0052] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the following - described drawings are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0053] Figure 1 It is a schematic diagram of the tree - like structure of the ETC customer's personal data provided by the prior art.

[0054] Figure 2 It is a schematic flowchart of the method for protecting ETC issuing business customer data provided by the embodiments of the present application.

[0055] Figure 3 It is a schematic diagram of the structure of the device for protecting ETC issuing business customer data provided by the embodiments of the present application.

[0056] Figure 4 It is a schematic diagram of the structure of the computer device provided by the embodiments of the present application. Detailed implementation manners

[0057] To more clearly illustrate the technical solutions in the embodiments of the present invention or in the prior art, the following will briefly introduce the present invention in combination with the accompanying drawings and the description of the embodiments or the prior art. Obviously, the following description of the structures of the accompanying drawings is only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other embodiments can be obtained based on these embodiments. It should be noted here that the description of these embodiments is used to help understand the present invention, but does not constitute a limitation to the present invention.

[0058] It should be understood that although terms such as first and second etc. may be used herein to describe various objects, these objects should not be limited by these terms. These terms are only used to distinguish one object from another. For example, the first object can be called the second object, and similarly, the second object can be called the first object, without departing from the scope of the exemplary embodiments of the present invention.

[0059] It should be understood that for the term "and / or" that may appear in this article, it is only a description of the association relationship of associated objects, indicating that three relationships can exist. For example, A and / or B can represent: A exists alone, B exists alone, or A and B exist simultaneously, etc. For another example, A, B and / or C can represent any one of A, B and C or any combination of them; for the term " / and" that may appear in this article, it is a description of another association object relationship, indicating that two relationships can exist. For example, A / and B can represent: A exists alone or A and B exist simultaneously, etc. In addition, for the character " / " that may appear in this article, generally it represents that the front and back associated objects are an "or" relationship.

[0060] Embodiment

[0061] As Figure 2 shown, the ETC issuing business customer data protection method provided in the first aspect of this embodiment can be, but is not limited to, executed by a computer device with certain computing resources, such as an ETC issuing business server, a personal computer (Personal Computer, PC, referring to a multi-purpose computer suitable for personal use in terms of size, price and performance; desktop computers, laptops to small laptops, tablet computers and ultrabooks, etc. all belong to personal computers), a smart phone, a personal digital assistant (Personal Digital Assistant, PDA) or a wearable device and other electronic devices. As Figure 2 shown, the ETC issuing business customer data protection method can be, but is not limited to, including the following steps S1 to S6.

[0062] S1. Obtain the personal data of the ETC issuance business of the target customer. Among them, the personal data of the ETC issuance business includes, but is not limited to, data type fields, data version number fields, personal information fields, etc.

[0063] In the step S1, the personal data of the ETC issuance business is a data object to be protected that is applicable regardless of various different storage forms such as relational databases (SQL) and non-relational databases (NoSQL); the data type field is used to describe the specific type of the personal data of the ETC issuance business, such as name, ID number, contact phone number, license plate, vehicle type, external dimensions, ECT card application number, ECT card balance, and / or OBU (OnBoard Unit, in-vehicle electronic tag) contract serial number, etc.; the data version number field is used to distinguish multiple different personal information of the same customer with the same data type. For example, when there are multiple mobile phone numbers, the version number can be used for distinction; the personal information field is used to record the specific content of the corresponding data type, and applicable encryption protection measures and decryption and reading measures can be adopted for security protection according to the access requirements of the corresponding data type. For example, if the corresponding data type is a password, the encrypted ciphertext form is used, and in other cases, the plaintext form is generally used. In addition, the personal data of the ETC issuance business may also include, but is not limited to, a status field to mark whether the corresponding personal information is invalid (for example, using the value "0" to represent valid and the value "1" to represent invalid). In addition, the personal data of the ETC issuance business can be obtained by accessing the existing ETC issuance business system in a conventional manner.

[0064] S2. Based on the personal unique identifier of the target customer and the data type field and data version number field in the personal data of the ETC issuance business, perform encryption processing based on the SM4 algorithm to obtain a first index value for retrieval.

[0065] In the step S2, the personal unique identifier can specifically be, but is not limited to, an ID card identification number, account number, unique code, exclusive number, etc. The SM4 algorithm is a commercial block cipher algorithm that uses a 128-bit block length and a 128-bit key length to implement encryption and decryption functions based on the Feistel structure. Specifically, based on the personal unique identifier of the target customer and the data type field and data version number field in the personal data of the ETC issuance business, performing encryption processing based on the SM4 algorithm to obtain a first index value for retrieval includes, but is not limited to, the following steps S21 to S23.

[0066] S21. Use the first key in the encryption machine to perform a dispersion process based on the SM4 algorithm on the eight-byte data block obtained by preprocessing based on the personal unique identifier of the target customer, to obtain the first working key, where the first key refers to one of the keys in the compliant cryptographic medium.

[0067] In step S21, the encryption machine is an existing trusted security module built into the local device. The eight-byte data block is the result of performing a dispersion factor process on the personal unique identifier of the target customer; for example, if the personal unique identifier is a numerical string of 16 bits or less, it can be compressed into the eight-byte data block according to the BCD (Binary-Coded Decimal, using 4-bit binary numbers to represent the 10 digits 0 to 9 in 1-bit decimal numbers, which is a binary digital coding form, binary-coded decimal code) coding method (pad with 0x00 on the right if it is less than eight bytes). In addition, the dispersion process based on the SM4 algorithm can be implemented according to the following general processing method in the financial industry: first perform an exclusive OR operation on the 8-byte dispersion factor to obtain another 8-byte dispersion factor; then splice these two dispersion factors into a 16-byte data block; finally, use the root key to perform an encryption process based on the SM4 algorithm on this data block, and the result obtained is used as the working key for subsequent services.

[0068] S22. Use the first working key in the encryption machine to perform an encryption process based on the SM4 algorithm on the sixteen-byte data block obtained by splicing the data type field and the data version number field in the personal data of the ETC issuing business, to obtain the first string with a length of sixteen bytes.

[0069] In step S22, the specific process of the splicing process includes, but is not limited to: directly splicing the strings of the data type field and the data version number field in the personal data of the ETC issuing business to obtain a spliced string; if the total length of the spliced string is not a multiple of 16 bytes, pad with 0x00 on the right until the total length is equal to a multiple of 16 bytes; and when the total length of the spliced string exceeds 16 bytes, split it into several segments with 16 bytes as a segment, and perform an exclusive OR operation on each segment with the first segment bit by bit, and finally form the sixteen-byte data block. In addition, the encryption process based on the SM4 algorithm is prior art and will not be elaborated here.

[0070] S23. Perform a Base64 encoding process on the first string to obtain the first index value for retrieval.

[0071] In step S23, the Base64 encoding process is one of the existing encoding methods and will not be elaborated here.

[0072] S3. Bind and store the ETC issuance business personal data of the target customer in the database with the first index value.

[0073] In step S23, the aforementioned binding storage method is to store in accordance with the key-value K-V structure, which is conducive to realizing fast data retrieval and meeting the protection requirements for sensitive data in relevant laws such as the Personal Information Protection Law and the Data Security Law.

[0074] S4. Obtain an accessible customer information list for the target customer, where the accessible customer information list includes but is not limited to N first plaintext index data, N represents a positive integer, and different first plaintext index data represent different data type fields and data version number fields.

[0075] In step S4, the accessible customer information list is the retrieval requirement proposed by the visitor, requiring the return of N different ETC issuance business personal data corresponding one-to-one to the target customer and the N first plaintext index data. It can generally meet the three condition restrictions regarding the visitor, business requirements, and the retrieved customer through the existing permission control function. Specifically, the first plaintext index data can be but is not limited to a sixteen-byte data block obtained by splicing and processing based on the represented data type field and data version number field.

[0076] S5. For each first plaintext index data in the accessible customer information list, based on the personal unique identifier and corresponding data of the target customer, perform encryption processing using the SM4 algorithm to obtain another first index value for retrieval.

[0077] In step S5, the first plaintext index data is equivalent to the data type field and data version number field in step S2. Therefore, the encryption processing process for obtaining the other first index value can be specifically derived conventionally with reference to the aforementioned steps S21 - S23, and will not be elaborated here.

[0078] S6. According to the other first index value of each first plaintext index data, query from the database to obtain each personal information field corresponding one-to-one to each first plaintext index data.

[0079] In step S6, for example, if the database is an SQL (Structured Query Language) database, the following SQL query statement can be used to query from the database to obtain each valid personal information field corresponding one-to-one to each first plaintext index data:

[0080] SELECT Category, Value, Version FROM UserDataSets WHERE Key1 IN (Key1, Key2…, KeyN) AND Status = 0。

[0081] In the above statement, Key1, Key2…, KeyN respectively represent another first index value of each of the first plaintext index data, and Status represents the status bit. Since multiple pieces of customer personal information of the target customer with authorized access can be obtained at one time.

[0082] Based on the ETC issuing business customer data protection method described in the foregoing steps S1 to S6, a new data security protection solution capable of securely expanding storage and efficiently retrieving ETC issuing business customer data is provided. That is, first, according to the personal unique identifier of the target customer, as well as the data type field and data version number field in the ETC issuing business personal data, the first index value for retrieval is obtained through encryption processing based on the SM4 algorithm, and the personal data is bound to this index value and stored in the database. Then, when obtaining the list of accessible customer information of the target customer, for each first plaintext index data in the table, according to the personal unique identifier of the target customer and the corresponding data, another first index value corresponding to and used for retrieval is obtained through encryption processing based on the SM4 algorithm. Finally, according to these index values, the corresponding personal information fields are queried from the database through a query statement. Thus, not only can the new ETC issuing business personal data of the target customer be independently and securely expanded for storage, but also the rapid batch retrieval of the target customer's personal information can be realized, greatly improving the retrieval efficiency and facilitating practical application and promotion. In addition, considering that customer personal data protection is only a very small part of business applications in actual business scenarios, the entire ETC issuing business customer data protection solution can specifically appear in the actual application system in the form of a module, plug-in, or microservice, and the specific deployment form can be finally determined by the application scenario.

[0083] Based on the technical solution of the foregoing first aspect, this embodiment also provides a possible design for reverse retrieving the customer's personal unique identifier through known information. That is, considering that in some scenarios, functions such as retrieving through name or mobile phone number to restore and query the entire customer's personal information are necessary. Therefore, in order to achieve the reverse retrieval of personal information, after obtaining the ETC issuing business personal data of the target customer, the method further includes but is not limited to: according to the personal unique identifier of the target customer, as well as the data type field and data version number field in the ETC issuing business personal data, the second index value used for retrieving data and reverse inferring the customer's personal unique identifier is obtained through encryption processing based on the SM4 algorithm, which specifically includes but is not limited to the following steps S201 to S203.

[0084] S201. Use the second key in the encryption machine to perform a dispersion process based on the SM4 algorithm on the eight-byte data block obtained by splicing and processing the data type field and the data version number field in the ETC issuing business personal data, to obtain a second working key, where the second key refers to any key in the compliant cryptographic medium.

[0085] In the step S201, the encryption machine is an existing trusted security module built into the local device. The eight-byte data block is the result of performing a dispersion factor process on the data type field and the data version number field in the ETC issuing business personal data; specifically including but not limited to: directly splicing the strings of the data type field and the data version number field in the ETC issuing business personal data together to obtain a spliced string; if the total length of the spliced string is not a multiple of 8 bytes, right-pad with 0x00 until the total length is equal to a multiple of 8 bytes; and when the total length of the spliced string exceeds 8 bytes, split it into several segments by 8 bytes per segment, and perform bitwise exclusive OR on each segment with the first segment, and finally form the eight-byte data block. In addition, the second key needs to be different from the first key; the dispersion process based on the SM4 algorithm is prior art and will not be elaborated here.

[0086] S202. Use the second working key in the encryption machine to perform an encryption process based on the SM4 algorithm on the sixteen-byte data block obtained by preprocessing the personal unique identifier of the target customer, to obtain a second string with a length of sixteen bytes.

[0087] In the step S202, the preprocessing is specifically exemplified as: if the personal unique identifier of the target customer selects a numeric string of 16 bits or less, directly use the numeric string as the sixteen-byte data block (right-pad with 0x20 if it is less than sixteen bytes). In addition, the encryption process based on the SM4 algorithm is prior art and will not be elaborated here.

[0088] S203. Perform a Base64 encoding process on the second string to obtain a second index value for use as retrieval data and reverse-infer the customer's personal unique identifier.

[0089] After the step S203, the second index value and the ETC issuing business personal data of the target customer can also be bound and stored in the database for subsequent retrieval of the second index value based on the known ETC issuing business personal data.

[0090] And after obtaining the accessible customer information list for the target customer, the method further includes but is not limited to the following steps S501 - S502.

[0091] S501. Obtain the second plaintext index data for the target customer, where the second plaintext index data represents the data type field and the data version number field in the ETC issuance business personal data.

[0092] In the step S501, the second plaintext index data is the known information provided by the visitor, which can be but is not limited to an eight-byte data block obtained by splicing and processing based on the data type field and the data version number field in the ETC issuance business personal data.

[0093] S502. Based on the second plaintext index data and the second index value, decrypt and process using the SM4 algorithm to obtain the personal unique identifier of the target customer.

[0094] In the step S502, the second index value can be obtained by querying in the database based on the known ETC issuance business personal data provided by the visitor. Specifically, based on the second plaintext index data and the second index value, decrypt and process using the SM4 algorithm to obtain the personal unique identifier of the target customer, including but not limited to the following steps S5021 to S5023.

[0095] S5021. Perform Base64 decoding on the second index value to obtain the second string with a length of sixteen bytes.

[0096] In the step S5021, the Base64 decoding is also one of the existing decoding methods, and the specific process will not be elaborated here.

[0097] S5022. In the encryption machine, use the second root key to perform dispersion processing on the eight-byte data block preprocessed based on the second plaintext index data using the SM4 algorithm to obtain the second working key.

[0098] In the step S5022, the preprocessing can be obtained by conventional derivation with reference to the foregoing step S201, and will not be elaborated here.

[0099] S5023. In the encryption machine, use the second working key to perform decryption processing on the second string using the SM4 algorithm to obtain the personal unique identifier of the target customer.

[0100] In the step S5023, the decryption processing process using the SM4 algorithm is also an existing technical means, and will not be elaborated here. In addition, when decrypting to obtain the personal unique identifier of the target customer, it is necessary to remove the previously supplemented 0x00 according to the preset length for subsequent direct application to step S5.

[0101] Based on the aforementioned possible design 1, it is also possible to retrieve the customer's personal unique identifier in reverse through known information, so as to realize the function of restoring and querying the entire customer's personal information by means such as name retrieval or mobile phone number retrieval, further improving the retrieval efficiency.

[0102] As Figure 3 As shown in the figure, in the second aspect of this embodiment, a virtual device for implementing the ETC issuing business customer data protection method described in the first aspect or possible design 1 is provided, including a service data acquisition unit, a first encryption processing unit, a data binding storage unit, an access information acquisition unit, a second encryption processing unit, and a query statement application unit;

[0103] The service data acquisition unit is used to acquire the personal data of the ETC issuing business of the target customer. Among them, the personal data of the ETC issuing business includes a data type field, a data version number field, and a personal information field;

[0104] The first encryption processing unit is communicatively connected to the service data acquisition unit, and is used to encrypt and process based on the SM4 algorithm according to the personal unique identifier of the target customer and the data type field and data version number field in the personal data of the ETC issuing business to obtain a first index value for retrieval;

[0105] The data binding storage unit is communicatively connected to the service data acquisition unit and the first encryption processing unit respectively, and is used to bind and store the personal data of the ETC issuing business of the target customer and the first index value in the database;

[0106] The access information acquisition unit is used to acquire an accessible customer information list for the target customer. Among them, the accessible customer information list includes N first plaintext index data, N represents a positive integer, and different first plaintext index data represent different data type fields and data version number fields;

[0107] The second encryption processing unit is communicatively connected to the access information acquisition unit, and is used to encrypt and process each first plaintext index data in the accessible customer information list based on the SM4 algorithm according to the personal unique identifier of the target customer and the corresponding data to obtain another corresponding first index value for retrieval;

[0108] The query statement application unit is communicatively connected to the data binding storage unit and the second encryption processing unit respectively, and is used to query and obtain each personal information field corresponding to each first plaintext index data from the database through a query statement according to the another first index value of each first plaintext index data.

[0109] In a possible design, it further includes a third encryption processing unit and a decryption processing unit;

[0110] The third encryption processing unit is communicatively connected to the service data acquisition unit, and is configured to, according to the personal unique identifier of the target customer, and the data type field and data version number field in the ETC issuing service personal data, perform encryption processing based on the SM4 algorithm to obtain a second index value used as retrieval data and for reverse derivation of the customer's personal unique identifier;

[0111] The access information acquisition unit is further configured to acquire second plaintext index data for the target customer, where the second plaintext index data represents the data type field and data version number field in the ETC issuing service personal data;

[0112] The decryption processing unit is communicatively connected to the third encryption processing unit and the access information acquisition unit respectively, and is configured to, according to the second plaintext index data and the second index value, perform decryption processing based on the SM4 algorithm to obtain the personal unique identifier of the target customer.

[0113] For the working process, working details and technical effects of the foregoing device provided in the second aspect of this embodiment, reference may be made to the ETC issuing service customer data protection method described in the first aspect or possible design one, which will not be elaborated herein.

[0114] As Figure 4 shown, in the third aspect of this embodiment, a computer device for executing the ETC issuing service customer data protection method described in the first aspect or possible design one is provided, including a memory, a processor, and a transceiver that are communicatively connected in sequence, where the memory is used to store a computer program, the transceiver is used to send and receive messages, and the processor is used to read the computer program and execute the ETC issuing service customer data protection method described in the first aspect or possible design one. Specifically, for example, the memory may include, but is not limited to, a random access memory (RAM), a read-only memory (ROM), a flash memory, a first input first output (FIFO) memory, and / or a first input last output (FILO) memory, etc.; the processor may be, but is not limited to, a microprocessor of the STM32F105 series. In addition, the computer device may further include, but is not limited to, a power module, a display screen, and other necessary components.

[0115] For the working process, working details and technical effects of the aforementioned computer device provided in the third aspect of this embodiment, reference can be made to the ETC issuing business customer data protection method described in the first aspect or as may be designed in one, and details will not be elaborated herein.

[0116] In the fourth aspect of this embodiment, there is provided a computer-readable storage medium storing instructions including the ETC issuing business customer data protection method described in the first aspect or as may be designed in one, that is, instructions are stored on the computer-readable storage medium, and when the instructions run on a computer, the ETC issuing business customer data protection method described in the first aspect or as may be designed in one is executed. Among them, the computer-readable storage medium refers to a carrier for storing data, and may include, but is not limited to, computer-readable storage media such as floppy disks, optical discs, hard disks, flash memories, USB flash drives, and / or Memory Sticks. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.

[0117] For the working process, working details and technical effects of the aforementioned computer-readable storage medium provided in the fourth aspect of this embodiment, reference can be made to the ETC issuing business customer data protection method described in the first aspect or as may be designed in one, and details will not be elaborated herein.

[0118] In the fifth aspect of this embodiment, there is provided a computer program product including a computer program or instructions, and when the computer program or the instructions are executed by a computer, the ETC issuing business customer data protection method described in the first aspect or as may be designed in one is implemented. Among them, the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.

[0119] Finally, it should be noted that the above are only preferred embodiments of the present invention and are not used to limit the protection scope of the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for protecting customer data in the ETC issuing business, characterized in that Including: Obtain the ETC issuance business personal data of the target customer, where the ETC issuance business personal data includes a data type field, a data version number field, and a personal information field; Based on the personal unique identifier of the target customer, as well as the data type field and the data version number field in the ETC issuance business personal data, perform encryption processing based on the SM4 algorithm to obtain a first index value for retrieval; Bind and store the ETC issuance business personal data of the target customer and the first index value in a database; Obtain an accessible customer information list for the target customer, where the accessible customer information list includes N first plaintext index data, N represents a positive integer, and different first plaintext index data represent different data type fields and data version number fields; For each first plaintext index data in the accessible customer information list, based on the personal unique identifier of the target customer and the corresponding data, perform encryption processing based on the SM4 algorithm to obtain another corresponding first index value for retrieval; According to the other first index values of the respective first plaintext index data, use a query statement to query from the database the respective personal information fields corresponding one-to-one to the respective first plaintext index data.

2. The ETC issuing service customer data protection method according to claim 1, wherein Based on the personal unique identifier of the target customer, as well as the data type field and the data version number field in the ETC issuance business personal data, performing encryption processing based on the SM4 algorithm to obtain a first index value for retrieval includes: In an encryption machine, use a first root key to perform a diffusion process based on the SM4 algorithm on an eight-byte data block obtained by preprocessing the personal unique identifier of the target customer to obtain a first working key, where the first root key refers to a certain key in a compliant cryptographic medium; In the encryption machine, use the first working key to perform encryption processing based on the SM4 algorithm on a sixteen-byte data block obtained by concatenating the data type field and the data version number field in the ETC issuance business personal data to obtain a first string with a length of sixteen bytes; Perform Base64 encoding processing on the first string to obtain a first index value for retrieval.

3. The ETC issuing service customer data protection method according to claim 1, characterized in that, After obtaining the ETC issuance business personal data of the target customer, the method further includes: Based on the personal unique identifier of the target customer, as well as the data type field and the data version number field in the ETC issuance business personal data, perform encryption processing based on the SM4 algorithm to obtain a second index value for retrieving data and reverse-inferring the personal unique identifier of the customer; After obtaining the accessible customer information list for the target customer, the method further includes: Obtain second plaintext index data for the target customer, where the second plaintext index data represents the data type field and the data version number field in the ETC issuance business personal data; Based on the second plaintext index data and the second index value, perform decryption processing based on the SM4 algorithm to obtain the personal unique identifier of the target customer.

4. The ETC issuing service customer data protection method according to claim 3, characterized in that, Based on the personal unique identifier of the target customer, as well as the data type field and data version number field in the personal data of the ETC issuance business, a second index value used for retrieving data and reverse inferring the customer's personal unique identifier is obtained through encryption processing based on the SM4 algorithm, including: In an encryption machine, the second working key is obtained by performing diffusion processing based on the SM4 algorithm on an eight-byte data block obtained by concatenating the data type field and the data version number field in the personal data of the ETC issuance business using the second key, where the second key refers to any key in the compliant cryptographic medium; In the encryption machine, the second working key is used to perform encryption processing based on the SM4 algorithm on a sixteen-byte data block obtained by preprocessing the personal unique identifier of the target customer, to obtain a second string with a length of sixteen bytes; The second string is subjected to Base64 encoding processing to obtain a second index value used for retrieving data and reverse inferring the customer's personal unique identifier.

5. The ETC issuing service customer data protection method according to claim 4, characterized in that Based on the second plaintext index data and the second index value, the personal unique identifier of the target customer is obtained through decryption processing based on the SM4 algorithm, including: The second index value is subjected to Base64 decoding processing to obtain the second string with a length of sixteen bytes; In the encryption machine, the second working key is obtained by performing diffusion processing based on the SM4 algorithm on an eight-byte data block obtained by preprocessing the second plaintext index data using the second key; In the encryption machine, the second working key is used to perform decryption processing based on the SM4 algorithm on the second string to obtain the personal unique identifier of the target customer.

6. An ETC issuing service customer data protection device, characterized in that, It includes a service data acquisition unit, a first encryption processing unit, a data binding storage unit, an access information acquisition unit, a second encryption processing unit, and a query statement application unit; The service data acquisition unit is used to acquire the personal data of the target customer in the ETC issuance business, where the personal data of the ETC issuance business includes a data type field, a data version number field, and a personal information field; The first encryption processing unit, communicatively connected to the service data acquisition unit, is used to obtain a first index value for retrieval through encryption processing based on the SM4 algorithm according to the personal unique identifier of the target customer, as well as the data type field and the data version number field in the personal data of the ETC issuance business; The data binding storage unit, communicatively connected to the service data acquisition unit and the first encryption processing unit respectively, is used to bind and store the personal data of the target customer in the ETC issuance business and the first index value in a database; The access information acquisition unit is used to acquire a list of accessible customer information for the target customer, where the list of accessible customer information includes N first plaintext index data, N represents a positive integer, and different first plaintext index data represent different data type fields and data version number fields; The second encryption processing unit is communicatively connected to the access information acquisition unit, and is configured to perform encryption processing on each first plaintext index data in the accessible customer information list based on the SM4 algorithm according to the personal unique identifier of the target customer and the corresponding data, so as to obtain another first index value corresponding thereto and used for retrieval. The query statement application unit is communicatively connected to the data binding storage unit and the second encryption processing unit respectively, and is configured to query each personal information field corresponding to each first plaintext index data from the database through a query statement according to the another first index value of each first plaintext index data.

7. The ETC issuing service customer data protection device according to claim 6, characterized in that, It further includes a third encryption processing unit and a decryption processing unit. The third encryption processing unit is communicatively connected to the service data acquisition unit, and is configured to perform encryption processing on the personal unique identifier of the target customer, the data type field and the data version number field in the ETC issuing service personal data based on the SM4 algorithm, so as to obtain a second index value used as retrieval data and for inversely deducing the personal unique identifier of the customer. The access information acquisition unit is further configured to acquire second plaintext index data for the target customer, where the second plaintext index data represents the data type field and the data version number field in the ETC issuing service personal data. The decryption processing unit is communicatively connected to the third encryption processing unit and the access information acquisition unit respectively, and is configured to perform decryption processing on the personal unique identifier of the target customer based on the second plaintext index data and the second index value according to the SM4 algorithm.

8. A computer device, characterized in that, It includes a memory, a processor and a transceiver that are communicatively connected in sequence. Among them, the memory is used to store a computer program, the transceiver is used to send and receive messages, and the processor is used to read the computer program and execute the ETC issuing service customer data protection method according to any one of claims 1 to 5.

9. A computer-readable storage medium, characterized in that , An instruction is stored on the computer-readable storage medium, and when the instruction runs on a computer, it executes the ETC issuing service customer data protection method according to any one of claims 1 to 5.

10. A computer program product comprising a computer program or instructions, characterized in that, The computer program or the instruction, when executed by a computer, implements the ETC issuing service customer data protection method according to any one of claims 1 to 5.

Images