Product testing method, device and equipment and storage medium

By standardizing the six-member authentication data of the crowd test personnel, credible portraits are generated, and combining the three-dimensional radar map to select the test participants, the problem of intricacies in crowd tests is solved, ensuring the smooth progress of security crowd tests and system security.

CN120493231APending Publication Date: 2025-08-15HANGZHOU DBAPPSECURITY CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202510745204.6
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-06-05
Publication Date
2025-08-15

AI Technical Summary

Technical Problem

In the field of security crowd testing, the identity authentication of public test personnel in the existing technology is not rigorous enough to fully and accurately understand the real background and credit status, resulting in malicious personnel being infiltrated, causing economic losses and privacy risks, affecting the effectiveness of security crowd testing and user trust.

Method used

By obtaining the initial six-member authentication data of the target object, including identity information, biometric identification, financial information, background innocence records, invitation endorsement and confidentiality agreement authentication data, preset standardization processing is carried out to generate a trusted portrait of the personnel, and a three-dimensional radar map is generated based on the product to be tested and historical test data is generated to determine the credible value of the test, and select the appropriate test participants.

Benefits of technology

It has achieved strict certification and reasonable choice of crowd test personnel, ensured the smooth progress of security crowd test activities and network system security, reduced the risk of malicious behavior, and improved user trust.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120493231A_ABST
    Figure CN120493231A_ABST
Patent Text Reader

Abstract

The invention discloses a product testing method, device and equipment and a storage medium, and relates to the field of safety public testing, and the method comprises the steps: carrying out the preset standardization processing of initial six-element authentication data, obtaining processed six-element authentication data, and generating a personnel credible portrait based on the processed six-element authentication data; the initial six-element authentication data comprises identity information authentication data, biological characteristic identification information authentication data, financial information authentication data, background clearness record authentication data, invitation endorsement authentication data and confidentiality protocol authentication data; generating a to-be-tested product portrait according to the data of the to-be-tested product and the historical product test data, and generating a historical test effect portrait based on the historical test effect data; and generating a three-dimensional radar map according to the personnel credible portrait, the to-be-tested product portrait and the historical test effect portrait, determining a test credible value based on the three-dimensional radar map, and determining a test participation object according to the test credible value so that the test participation object can test the to-be-tested product. And the safety public test activity is ensured.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of secure crowd testing, and in particular to a product testing method, apparatus, device, and storage medium. Background Art

[0002] In today's era of rapid internet development, crowd-testing, as a crucial means of ensuring network system security, is finding increasingly widespread application. However, insufficiently rigorous identity authentication of testers is a common problem. Typically, simple real-name authentication alone fails to fully and accurately capture a tester's true background and creditworthiness. Malicious actors could exploit this to infiltrate testing teams, obtain sensitive system information, or even deliberately create security vulnerabilities, resulting in significant financial losses and privacy risks for businesses and users.

[0003] If this problem persists, the effectiveness of public security testing will be greatly reduced, making it impossible to effectively discover and resolve security issues in the system. User trust in related services will also decline significantly, affecting the healthy development of the entire industry.

[0004] To sum up, how to ensure the smooth progress of safe crowd testing activities and the security of network systems is an urgent problem that needs to be solved. Summary of the Invention

[0005] In view of this, the purpose of the present invention is to provide a product testing method, device, equipment, and storage medium that can ensure the smooth progress of safe public testing activities and the security of network systems. The specific solution is as follows:

[0006] In a first aspect, the present application provides a product testing method, comprising:

[0007] Obtaining initial six-element authentication data of a target object, performing a preset standardization process on the initial six-element authentication data to obtain processed six-element authentication data, and generating a credible person profile corresponding to the target object based on the processed six-element authentication data; wherein the initial six-element authentication data includes identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data;

[0008] Acquire data of the product to be tested and historical product test data of the target object, generate a portrait of the product to be tested based on the data of the product to be tested and the historical product test data of the target object, determine historical test effect data of the target object, and generate a corresponding historical test effect portrait based on the historical test effect data of the target object;

[0009] A three-dimensional radar chart of the target object is generated based on the personnel credibility portrait, the product to be tested portrait and the historical test effect portrait, and the test credibility value of the target object is determined based on the three-dimensional radar chart. The test participants of the product to be tested are determined according to the test credibility value of the target object, so that the test participants can test the product to be tested.

[0010] Optionally, obtaining initial six-element authentication data of the target object includes:

[0011] Obtaining identity information and financial information of the target object;

[0012] authenticating the identity information of the target object to obtain a first authentication result;

[0013] authenticating the financial information of the target object according to the first authentication result to obtain a second authentication result;

[0014] Obtaining biometric identification information, clean background record information, invitation endorsement information, and confidentiality agreement of the target subject, and integrating the biometric identification information, clean background record information, invitation endorsement information, and confidentiality agreement of the target subject to obtain integrated multivariate data;

[0015] authenticating the integrated multivariate data to obtain a third authentication result;

[0016] Initial six-element authentication data of the target object is determined based on the first authentication result, the second authentication result, and the third authentication result.

[0017] Optionally, performing a preset standardization process on the initial six-element authentication data to obtain processed six-element authentication data includes:

[0018] Determine whether the identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data in the initial six-element authentication data meet preset pass conditions;

[0019] The authentication data that meets the preset pass condition in the initial six-element authentication data is converted into a first preset value, and the authentication data that does not meet the preset pass condition in the initial six-element authentication data is converted into a second preset value to obtain processed six-element authentication data.

[0020] Optionally, generating a credible person portrait corresponding to the target object based on the processed six-element authentication data includes:

[0021] Obtain authentication data trust values corresponding to identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data in the initial six-element authentication data respectively;

[0022] Determining an average value of the authentication data credibility values;

[0023] A credible portrait of the person corresponding to the target object is determined based on the average value of the credible values of the authentication data.

[0024] Optionally, the historical product test data includes the number of industries tested by historical products, the types of vulnerabilities tested by historical products, the manufacturers tested by historical products, and the devices tested by historical products;

[0025] Accordingly, generating a portrait of the product to be tested based on the data of the product to be tested and the historical product test data of the target object includes:

[0026] Determining a first matching degree between the target object and the product to be tested based on the number of industries of the product to be tested and the number of industries of the historical product tests;

[0027] Determining a second degree of matching between the target object and the product to be tested based on the number of vulnerability types in the product to be tested and the vulnerability types of the historical product tests;

[0028] determining a third matching degree between the target object and the product to be tested based on the manufacturer of the product to be tested and the manufacturer of the historical product tests;

[0029] Determining a fourth matching degree between the target object and the product to be tested based on the device of the product to be tested and the device of the historical product test;

[0030] Generate a portrait of the product to be tested based on the determined first matching degree, the second matching degree, the third matching degree, and the fourth matching degree.

[0031] Optionally, determining the historical test effect data of the target object and generating a corresponding historical test effect portrait based on the historical test effect data of the target object includes:

[0032] Determining historical test performance data of the target object;

[0033] Determine a historical vulnerability level in the historical test effect data of the target object using a preset level classification condition, and determine the contribution of the target object according to the historical vulnerability level in the historical test effect data;

[0034] Determine the accuracy of the target object based on the number of historical vulnerability submissions and the number of historical vulnerability passes in the historical test effect data of the target object;

[0035] Determine the activity level of the target object based on the number of historical test item participations in the historical test effect data of the target object;

[0036] Generate a corresponding historical test effect portrait based on the contribution, accuracy and activity of the target object.

[0037] Optionally, determining the test participant of the product to be tested according to the test credibility value of the target object includes:

[0038] Obtain the test trust value of each target object;

[0039] Sorting the test credibility values of the respective target objects to obtain a list of the target objects in a preset arrangement order;

[0040] The test participants of the product to be tested are determined according to the target object list and the preset number of test participants, so that the test participants can test the product to be tested.

[0041] In a second aspect, the present application provides a product testing device, comprising:

[0042] A personnel trustworthy profile generation module is configured to obtain initial six-element authentication data of a target subject, perform a preset standardization process on the initial six-element authentication data to obtain processed six-element authentication data, and generate a trustworthy profile of the target subject based on the processed six-element authentication data; wherein the initial six-element authentication data includes identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data;

[0043] A historical test effect portrait generation module is used to obtain data of the product to be tested and historical product test data of the target object, generate a portrait of the product to be tested based on the data of the product to be tested and the historical product test data of the target object, determine the historical test effect data of the target object, and generate a corresponding historical test effect portrait based on the historical test effect data of the target object;

[0044] A test participant determination module is used to generate a three-dimensional radar chart of the target object based on the personnel credibility portrait, the product to be tested portrait and the historical test effect portrait, determine the test credibility value of the target object based on the three-dimensional radar chart, and determine the test participant of the product to be tested based on the test credibility value of the target object, so that the test participant can test the product to be tested.

[0045] In a third aspect, the present application provides an electronic device, comprising:

[0046] Memory, used to store computer programs;

[0047] The processor is configured to execute the computer program to implement the aforementioned product testing method.

[0048] In a fourth aspect, the present application provides a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the product testing method as described above is implemented.

[0049] In summary, the present application obtains the initial six-element authentication data of the target object, and performs preset standardization processing on the initial six-element authentication data to obtain processed six-element authentication data, and generates a credible portrait of the person corresponding to the target object based on the processed six-element authentication data; wherein, the initial six-element authentication data includes identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data and confidentiality agreement authentication data; obtains the data of the product to be tested and the historical product test data of the target object, generates a portrait of the product to be tested based on the data of the product to be tested and the historical product test data of the target object, determines the historical test effect data of the target object, and generates a corresponding historical test effect portrait based on the historical test effect data of the target object; generates a three-dimensional radar map of the target object based on the credible portrait of the person, the portrait of the product to be tested and the historical test effect portrait, determines the test credibility value of the target object based on the three-dimensional radar map, and determines the test participants of the product to be tested based on the test credibility value of the target object, so that the test participants can test the product to be tested. From the above, it can be seen that this application obtains the initial six-element authentication data of the target object, which includes identity information, biometric identification information, financial information, background clean record, invitation endorsement and confidentiality agreement authentication data, obtains the processed six-element authentication data through preset standardization and generates a credible portrait of the person; obtains the data of the product to be tested and the historical product test data of the target object to generate a portrait of the product to be tested, determines the historical test effect data of the target object and generates a historical test effect portrait; combines the credible portrait of the person, the portrait of the product to be tested and the historical test effect portrait to generate a three-dimensional radar map, based on which the test credibility value of the target object is determined, and then the test participants of the product to be tested are determined according to the test credibility value to carry out the test. In this way, by uploading the six-element authentication data to the chain and tracking the supply chain, the security risks caused by traditional crowd testing relying only on simple real-name authentication and the problem of difficulty in selecting suitable testers are solved. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are merely embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0051] Figure 1 This is a flow chart of a product testing method disclosed in this application;

[0052] Figure 2 A schematic diagram of a specific three-dimensional radar disclosed in this application;

[0053] Figure 3 This is a specific product testing method architecture diagram disclosed in this application;

[0054] Figure 4 A specific six-element authentication flow chart disclosed in this application;

[0055] Figure 5 A specific personnel reputation evaluation flow chart disclosed in this application;

[0056] Figure 6 This is a schematic structural diagram of a product testing device disclosed in this application;

[0057] Figure 7 This is a structural diagram of an electronic device disclosed in this application. DETAILED DESCRIPTION

[0058] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0059] At present, as an important means to ensure the security of network systems, security crowd testing has an increasingly wide range of application scenarios. In the field of security crowd testing, it is often found that the identity authentication of crowd testers is not rigorous enough. Usually, only simple real-name authentication is performed, and it is impossible to fully and accurately understand the true background and credit status of crowd testers. Malicious personnel may use this to infiltrate the crowd testing team, obtain sensitive information of the system, or even deliberately create security vulnerabilities, causing huge economic losses and privacy leakage risks to enterprises and users. In order to solve the above technical problems, the present application discloses a product testing method, device, equipment and storage medium, which can ensure the smooth progress of security crowd testing activities and the security of network systems.

[0060] See also Figure 1 As shown, an embodiment of the present invention discloses a product testing method, including:

[0061] Step S11: Obtain the initial six-element authentication data of the target object, and perform preset standardization processing on the initial six-element authentication data to obtain processed six-element authentication data, and generate a credible portrait of the person corresponding to the target object based on the processed six-element authentication data; wherein, the initial six-element authentication data includes identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data and confidentiality agreement authentication data.

[0062] In this embodiment, it is necessary to obtain the initial six-element authentication data of the target object, and the identity information and financial information of the target object can be obtained first; the identity information of the target object is authenticated to obtain a first authentication result; the financial information of the target object is authenticated based on the first authentication result to obtain a second authentication result; the biometric identification information, background clean record information, invitation endorsement information and confidentiality agreement of the target object are obtained, and the biometric identification information, background clean record information, invitation endorsement information and confidentiality agreement of the target object are integrated to obtain integrated multivariate data; the integrated multivariate data is authenticated to obtain a third authentication result; the initial six-element authentication data of the target object is determined based on the first authentication result, the second authentication result and the third authentication result. Specifically, the target object is verified. The first step is to verify the identity card and financial information, obtain identity authentication data and financial information authentication data, confirm the authenticity of the identity, and prevent false registration. The second step is to authenticate biometric information and obtain biometric authentication data to prevent identity misuse and ensure that the target object is a genuine user. The third step is to authenticate and verify the target object's clean background record, obtain background authentication data, screen compliant personnel, and reduce the risk of internal crime. The fourth step is to add invitation endorsement and obtain invitation endorsement authentication data. By obtaining the target object's social relationship chain, trust is enhanced and the probability of malicious user infiltration is reduced. The fifth step is to sign a confidentiality agreement and obtain confidentiality agreement authentication data to legally bind the target object and prevent data leakage. After verifying the target object in different dimensions, the corresponding initial six-element authentication data is obtained.

[0063] Furthermore, after obtaining the initial six-element authentication data, it is determined whether the identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data in the initial six-element authentication data meet the preset pass conditions; the authentication data in the initial six-element authentication data that meet the preset pass conditions are converted into a first preset numerical value, and the authentication data in the initial six-element authentication data that do not meet the preset pass conditions are converted into a second preset numerical value to obtain processed six-element authentication data. Specifically, it is determined whether the identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data in the initial six-element authentication data meet the preset pass conditions, and the authentication results of the initial six-element authentication data are converted into numerical data, for example, authentication pass is recorded as 1, and authentication failure is recorded as 0, and finally, the processed six-element authentication data is obtained.

[0064] Then, after processing the initial six-element authentication data, obtain the authentication data trust values corresponding to the identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data in the initial six-element authentication data; determine the average value of the authentication data trust values; and determine the trustworthy person portrait corresponding to the target object based on the average value of the authentication data trust values. Specifically, after processing the initial six-element authentication data, obtain the identity information authentication dimension, , biometric identification information authentication dimension , Financial Information Authentication Dimension , clean background record certification dimension , invitation endorsement certification dimension And the confidentiality agreement certification dimension The corresponding authentication data credibility value. For example, if the identity information is accurate and complete, the authentication data credibility value can be 10 points. If there are partial errors or omissions, the points will be deducted proportionally, with a minimum of 0 points. If the biometric identification is passed, 10 points will be awarded, and if it is not passed, 0 points will be awarded. If the financial information is accurate and has no bad records, 10 points will be awarded. If there are risks or incomplete information, the points will be deducted proportionally, with a minimum of 0 points. If a clean background record can be provided, 10 points will be awarded, and if it cannot be provided, 0 points will be awarded. If there is an endorsement from a well-known and reliable inviter, 10 points will be awarded. If the endorsement is weak or there is no endorsement, the points will be deducted proportionally, with a minimum of 0 points. If a valid confidentiality agreement is signed, 10 points will be awarded, and if it is not signed, 0 points will be awarded. Then, determine the average value of the authentication data credibility value of each dimension, and construct a credibility profile of the target person based on this average value:

[0065] ;

[0066] in, It is the trusted value of authentication data in the identity information authentication dimension; It is the authentication data trust value of the biometric identification information authentication dimension; The authentication data trust value of the financial information authentication dimension; The authentication data trust value of the background clean record authentication dimension, The trusted value of the authentication data for the invitation endorsement authentication dimension; Credible value of authentication data in the dimension of confidentiality agreement authentication; Create a credible portrait of the personnel.

[0067] Step S12: Obtain the data of the product to be tested and the historical product test data of the target object, generate a portrait of the product to be tested based on the data of the product to be tested and the historical product test data of the target object, determine the historical test effect data of the target object, and generate a corresponding historical test effect portrait based on the historical test effect data of the target object.

[0068] In this embodiment, it is first necessary to obtain the historical product test data of the target object, wherein the historical product test data includes the number of industries tested by historical products, the types of vulnerabilities tested by historical products, the manufacturers tested by historical products, and the equipment tested by historical products. Then, based on the number of industries of the product to be tested and the number of industries tested by historical products, the first matching degree between the target object and the product to be tested is determined; based on the number of vulnerability types in the product to be tested and the types of vulnerabilities tested by historical products, the second matching degree between the target object and the product to be tested is determined; based on the manufacturer of the product to be tested and the manufacturer tested by historical products, the third matching degree between the target object and the product to be tested is determined; based on the equipment of the product to be tested and the equipment tested by historical products, the fourth matching degree between the target object and the product to be tested is determined; and a portrait of the product to be tested is generated based on the determined first matching degree, second matching degree, third matching degree, and fourth matching degree. Specifically, the number of historical product test items of the target object that are the same as the industry to which the product to be tested belongs is counted. , and the total number of items the target subjects participated in the test ,according to and Determine the matching degree between the target object and the industry category of the product to be tested , that is, the first matching degree:

[0069] ;

[0070] in, The number of historical product testing projects that is the same as the industry to which the product to be tested belongs; The total number of items that the target subjects participated in the test; It is the industry type matching degree, that is, the first matching degree.

[0071] Then, count the vulnerability types found in historical product tests of the target object and the possible vulnerability types of this project to obtain the number of matching vulnerability types. , the total number of vulnerability types that may exist in this project ,according to and Obtain the vulnerability matching degree between the target object and the product to be tested , that is, the second matching degree:

[0072] ;

[0073] in, The number of vulnerabilities that match the vulnerability types tested for historical products and the possible vulnerability types of this project; The total number of vulnerability types that may exist in this project; It is the vulnerability matching degree between the target object and the product to be tested.

[0074] Next, count the number of manufacturers of the target object's historical product testing who belong to the same category as the manufacturer of this project , and the total number of manufacturers the target has tested ,according to and Get the manufacturer category matching , that is, the third matching degree:

[0075] ;

[0076] in, The number of manufacturers tested for historical products that fall into the same category as the manufacturers in this project; The total number of manufacturers tested for the target audience; It is the manufacturer category matching degree, that is, the third matching degree.

[0077] Then, count the number of devices with the same type as the equipment in this project in the target object's historical product testing , and the total number of device types the target has been tested on ,according to and Get device type matching , that is, the fourth matching degree:

[0078] ;

[0079] in, The number of devices tested for the historical product that are of the same type as the current project's devices; The total number of device types tested for the target object; It is the device type matching degree, that is, the fourth matching degree.

[0080] Finally, the first, second, third, and fourth matching degrees are weighted averaged to generate the required product profile:

[0081] ;

[0082] in, Create a profile for the product to be tested; is the weight corresponding to the first matching degree; is the first matching degree; is the weight corresponding to the second matching degree; is the second matching degree; is the weight corresponding to the third matching degree; is the third matching degree; is the weight corresponding to the fourth matching degree; The fourth matching degree.

[0083] In this embodiment, in order to obtain the historical test effect portrait of the target object, it is necessary to determine the historical test effect data of the target object; use the preset level division conditions to determine the historical vulnerability level in the historical test effect data of the target object, and determine the contribution of the target object according to the historical vulnerability level in the historical test effect data; determine the accuracy of the target object based on the number of historical submitted vulnerabilities and the number of historical vulnerability passes in the historical test effect data of the target object; determine the activity of the target object based on the number of historical test projects participated in in the historical test effect data of the target object; generate the corresponding historical test effect portrait based on the contribution, accuracy and activity of the target object. Specifically, first count the number of high, medium and low severity vulnerabilities found in all past projects of the target object, obtain the number of high severity vulnerabilities, the number of medium severity vulnerabilities and the number of low severity vulnerabilities, and assign different weights according to vulnerabilities of different severity. For example, the weights of high severity, medium severity and low severity are 5, 3 and 1 respectively. The total contribution score of the target object is obtained based on the number of vulnerabilities of different levels and the corresponding weights. , and then determine the benchmark total score based on historical data or experience , get the contribution of the target object :

[0084] ;

[0085] in, Contribution to the target object; Total contribution score for the target object; The total score for the benchmark.

[0086] Then, count the total number of vulnerabilities submitted historically for the target object , and the number of vulnerabilities that have been reviewed ,according to and Get the accuracy score :

[0087] ;

[0088] in, Contribution to the target object; The total number of vulnerabilities submitted for the target object; is the number of vulnerabilities passed by the target object. In addition, if =0, the default =5.

[0089] At the same time, obtain the number of times the target object has participated in the project in history , and set a maximum number of participation benchmarks ,according to and Get the activity of the target object :

[0090] ;

[0091] in, The activity level of the target object; The number of times the target person has participated in the project in the past; This is the maximum number of participation benchmarks.

[0092] Finally, based on the target object's contribution, accuracy, activity, and corresponding weights, a historical test performance profile of the target object is generated:

[0093] ;

[0094] in, is the weight corresponding to the contribution; is the weight corresponding to the accuracy; is the weight corresponding to the activity; Contribution to the target object; Contribution to the target object; The activity level of the target object; Create a profile of the historical test results for the target object.

[0095] Step S13: Generate a three-dimensional radar chart of the target object based on the personnel credibility portrait, the product to be tested portrait, and the historical test effect portrait; determine the test credibility value of the target object based on the three-dimensional radar chart; and determine the test participants of the product to be tested based on the test credibility value of the target object, so that the test participants can test the product to be tested.

[0096] In this embodiment, the following image is generated based on the obtained trustworthy portrait of the personnel, the portrait of the product to be tested, and the historical test effect portrait: Figure 2 The three-dimensional radar chart shown above is then used to determine the test credibility value S of the target object for the product to be tested based on the scores of the above three dimensions:

[0097] ;

[0098] Among them, S is the test credibility value of the target object; Create a credible portrait of the personnel; Create a profile for the product to be tested; Create a profile of the historical test results for the target object.

[0099] Next, the test credibility value of each target object is obtained; the test credibility values of each target object are sorted to obtain the target object list in a preset order; and test participants for the product under test are determined based on the target object list and the preset number of test participants, so that the test participants can test the product under test. Specifically, the test credibility values of all target objects are sorted by numerical value and a preset order, and the top N target objects after sorting are selected as test participants, where N is the preset number of test participants. Finally, after the test participants are selected, the test participants test the product under test.

[0100] As can be seen from the above, the embodiment of the present application obtains the initial six-element authentication data of the target object including identity information, biometric identification information, financial information, background clean record, invitation endorsement and confidentiality agreement authentication data, obtains the processed six-element authentication data through preset standardization and generates a credible portrait of the person; obtains the data of the product to be tested and the historical product test data of the target object to generate a portrait of the product to be tested, determines the historical test effect data of the target object and generates a historical test effect portrait; combines the credible portrait of the person, the portrait of the product to be tested and the historical test effect portrait to generate a three-dimensional radar chart, based on which the test credibility value of the target object is determined, and then the test participants of the product to be tested are determined according to the test credibility value to carry out the test. In this way, by uploading the six-element authentication data to the chain and tracking the supply chain, the security risks and the difficulty in selecting suitable testers caused by the traditional crowd testing relying only on simple real-name authentication are solved.

[0101] Based on the previous embodiment, this application discloses a product testing method that can ensure the smooth progress of security crowd-testing activities and the security of the network system. In addition, this application constructs a trusted data governance method of "blockchain-supply chain-evaluation system" in a trinity, with blockchain technology as the cornerstone of trust, supply chain data as the analysis object, and three-dimensional portraits as decision-making tools, to achieve a closed loop of the entire process from identity verification to product testing. Figure 3 The product testing methods shown are described in detail.

[0102] First, if Figure 4 As shown, from a blockchain perspective, six-factor authentication of a target entity is performed. The first step is to verify the identity card and financial information; the second step is to authenticate biometric information; the third step is to verify and verify the target entity's background; the fourth step is to add an invitation endorsement; and the fifth step is to sign a confidentiality agreement. After verifying the target entity across different dimensions, the corresponding initial six-factor authentication data is obtained. This initial six-factor authentication data is then subjected to a pre-set standardization process to obtain the processed six-factor authentication data. Based on the processed six-factor authentication data, a trustworthy profile of the target entity is generated.

[0103] Then, if Figure 5 As shown, the data of the product to be tested and the historical product test data of the target object are obtained from the perspective of the supply chain, and a portrait of the product to be tested and a portrait of the historical test effect of the target object are generated based on the data of the product to be tested and the historical product test data of the target object. Finally, a corresponding three-dimensional radar chart is generated based on the obtained personnel credibility portrait, the portrait of the product to be tested and the historical test effect portrait of the target object, and the test credibility value of the target object for the product to be tested is determined by the numerical values in the above three-dimensional radar chart. Test participants are selected based on the test credibility values of all target objects, and the selected test participants test the product to be tested. By uploading the six-element authentication data to the chain and tracking the supply chain, the security risks caused by relying solely on simple real-name authentication and the problem of difficulty in selecting suitable testers are solved.

[0104] See also Figure 6 As shown, an embodiment of the present invention discloses a product testing device, comprising:

[0105] The personnel trustworthy profile generation module 11 is configured to obtain initial six-element authentication data of a target object, perform a preset standardization process on the initial six-element authentication data to obtain processed six-element authentication data, and generate a trustworthy profile of the target object based on the processed six-element authentication data; wherein the initial six-element authentication data includes identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data;

[0106] A historical test effect portrait generation module 12 is configured to obtain data of the product to be tested and historical product test data of the target object, generate a portrait of the product to be tested based on the data of the product to be tested and the historical product test data of the target object, determine historical test effect data of the target object, and generate a corresponding historical test effect portrait based on the historical test effect data of the target object;

[0107] The test participant determination module 13 is used to generate a three-dimensional radar chart of the target object based on the personnel credibility portrait, the product to be tested portrait and the historical test effect portrait, determine the test credibility value of the target object based on the three-dimensional radar chart, and determine the test participant of the product to be tested based on the test credibility value of the target object, so that the test participant can test the product to be tested.

[0108] As can be seen from the above, the embodiment of the present application obtains the initial six-element authentication data of the target object including identity information, biometric identification information, financial information, background clean record, invitation endorsement and confidentiality agreement authentication data, obtains the processed six-element authentication data through preset standardization and generates a credible portrait of the person; obtains the data of the product to be tested and the historical product test data of the target object to generate a portrait of the product to be tested, determines the historical test effect data of the target object and generates a historical test effect portrait; combines the credible portrait of the person, the portrait of the product to be tested and the historical test effect portrait to generate a three-dimensional radar chart, based on which the test credibility value of the target object is determined, and then the test participants of the product to be tested are determined according to the test credibility value to carry out the test. In this way, by uploading the six-element authentication data to the chain and tracking the supply chain, the security risks and the difficulty in selecting suitable testers caused by the traditional crowd testing relying only on simple real-name authentication are solved.

[0109] In some specific implementations, the personnel trustworthy portrait generation module 11 may specifically include:

[0110] An information acquisition unit, configured to acquire identity information and financial information of the target object;

[0111] a first authentication result obtaining unit, configured to authenticate the identity information of the target object to obtain a first authentication result;

[0112] a second authentication result obtaining unit, configured to authenticate the financial information of the target object according to the first authentication result to obtain a second authentication result;

[0113] an integrated multivariate data acquisition unit, configured to acquire the target subject's biometric identification information, clean background record information, invitation endorsement information, and confidentiality agreement, and to integrate the target subject's biometric identification information, clean background record information, invitation endorsement information, and confidentiality agreement to obtain integrated multivariate data;

[0114] a third authentication result obtaining unit, configured to authenticate the integrated multivariate data to obtain a third authentication result;

[0115] An initial six-element authentication data determining unit is configured to determine initial six-element authentication data of the target object based on the first authentication result, the second authentication result, and the third authentication result.

[0116] In some specific implementations, the personnel trustworthy portrait generation module 11 may specifically include:

[0117] An initial six-element authentication data judgment unit, configured to determine whether the identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data in the initial six-element authentication data meet preset pass conditions;

[0118] The processed six-element authentication data acquisition unit is used to convert the authentication data that meets the preset pass condition in the initial six-element authentication data into a first preset value, and convert the authentication data that does not meet the preset pass condition in the initial six-element authentication data into a second preset value to obtain the processed six-element authentication data.

[0119] In some specific implementations, the personnel trustworthy portrait generation module 11 may specifically include:

[0120] an authentication data trustworthy value acquisition unit, configured to respectively acquire authentication data trustworthy values corresponding to the identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data in the initial six-element authentication data;

[0121] an average value obtaining unit, configured to determine an average value of the authentication data trustworthy value;

[0122] A personnel trustworthy portrait determining unit is used to determine the personnel trustworthy portrait corresponding to the target object based on the average value of the authentication data trustworthy value.

[0123] In some specific implementations, the historical product test data includes the number of industries tested by historical products, the types of vulnerabilities tested by historical products, the manufacturers tested by historical products, and the devices tested by historical products;

[0124] Accordingly, the historical test effect portrait generation module 12 may specifically include:

[0125] A first matching degree determining unit, configured to determine a first matching degree between the target object and the product to be tested based on the number of industries of the product to be tested and the number of industries of the historical product tests;

[0126] a second matching degree determining unit, configured to determine a second matching degree between the target object and the product to be tested based on the number of vulnerability types in the product to be tested and the vulnerability types of the historical product tests;

[0127] a third matching degree determining unit, configured to determine a third matching degree between the target object and the product to be tested based on the manufacturer of the product to be tested and the manufacturer of the historical product test;

[0128] a fourth matching degree determining unit, configured to determine a fourth matching degree between the target object and the product to be tested based on the device of the product to be tested and the device of the historical product test;

[0129] The product portrait generation unit to be tested is used to generate a product portrait to be tested based on the determined first matching degree, second matching degree, third matching degree and fourth matching degree.

[0130] In some specific implementations, the historical test effect portrait generation module 12 may specifically include:

[0131] A historical test effect data determining unit, configured to determine the historical test effect data of the target object;

[0132] a contribution determination unit, configured to determine a historical vulnerability level in the historical test effect data of the target object using a preset level classification condition, and determine a contribution of the target object according to the historical vulnerability level in the historical test effect data;

[0133] An accuracy determination unit, configured to determine the accuracy of the target object based on the number of historical vulnerability submissions and the number of historical vulnerability passes in the historical test effect data of the target object;

[0134] an activity determination unit, configured to determine the activity of the target object according to the number of historical test item participations in the historical test effect data of the target object;

[0135] A historical test effect portrait generation unit is used to generate a corresponding historical test effect portrait based on the contribution, accuracy and activity of the target object.

[0136] In some specific implementations, the test participant determination module 13 may specifically include:

[0137] A test credibility value acquisition unit, used to acquire a test credibility value of each target object;

[0138] a target object list acquiring unit, configured to sort the test credibility values of the target objects to obtain the target object list in a preset arrangement order;

[0139] The test participant determination unit is configured to determine the test participants of the product to be tested according to the target object list and a preset number of test participants, so that the test participants can test the product to be tested.

[0140] Furthermore, the embodiment of the present application also discloses an electronic device, Figure 7 This is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content in the diagram should not be considered as any limitation to the scope of application of the present application.

[0141] Figure 7 This is a schematic diagram of the structure of an electronic device 20 provided in an embodiment of the present application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, which is loaded and executed by the processor 21 to implement the relevant steps of the product testing method disclosed in any of the aforementioned embodiments. Furthermore, the electronic device 20 in this embodiment may specifically be an electronic computer.

[0142] In this embodiment, the power supply 23 is used to provide operating voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device. The communication protocol it follows is any communication protocol that can be applied to the technical solution of this application and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world. Its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0143] In addition, the memory 22, as a carrier for resource storage, can be a read-only memory, random access memory, disk or CD, etc. The resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0144] The operating system 221 is used to manage and control the hardware devices on the electronic device 20 and the computer program 222, and can be Windows Server, Netware, Unix, Linux, etc. In addition to including a computer program capable of implementing the product testing method performed by the electronic device 20 disclosed in any of the aforementioned embodiments, the computer program 222 can further include a computer program capable of implementing other specific tasks.

[0145] Furthermore, this application also discloses a computer-readable storage medium for storing a computer program; wherein, when executed by a processor, the computer program implements the aforementioned product testing method. The specific steps of this method can be referred to the corresponding contents disclosed in the aforementioned embodiments and will not be repeated here.

[0146] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from the other embodiments. Reference can be made to the descriptions of the identical or similar parts between the various embodiments. For the devices disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the descriptions are relatively simple, and the relevant parts can be referred to the descriptions of the methods.

[0147] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0148] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0149] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or device comprising the element.

[0150] The above is a detailed introduction to the technical solution provided by the present application. Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for those skilled in the art, according to the ideas of the present application, there may be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A product testing method, characterized in that: include: Obtaining initial six-element authentication data of a target object, performing a preset standardization process on the initial six-element authentication data to obtain processed six-element authentication data, and generating a credible person profile corresponding to the target object based on the processed six-element authentication data; wherein the initial six-element authentication data includes identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data; Acquire data of the product to be tested and historical product test data of the target object, generate a portrait of the product to be tested based on the data of the product to be tested and the historical product test data of the target object, determine historical test effect data of the target object, and generate a corresponding historical test effect portrait based on the historical test effect data of the target object; A three-dimensional radar chart of the target object is generated based on the personnel credibility portrait, the product to be tested portrait and the historical test effect portrait, and the test credibility value of the target object is determined based on the three-dimensional radar chart. The test participants of the product to be tested are determined according to the test credibility value of the target object, so that the test participants can test the product to be tested.

2. The product testing method according to claim 1, characterized in that: The obtaining of the initial six-element authentication data of the target object includes: Obtaining identity information and financial information of the target object; authenticating the identity information of the target object to obtain a first authentication result; authenticating the financial information of the target object according to the first authentication result to obtain a second authentication result; Obtaining biometric identification information, clean background record information, invitation endorsement information, and confidentiality agreement of the target subject, and integrating the biometric identification information, clean background record information, invitation endorsement information, and confidentiality agreement of the target subject to obtain integrated multivariate data; authenticating the integrated multivariate data to obtain a third authentication result; Initial six-element authentication data of the target object is determined based on the first authentication result, the second authentication result, and the third authentication result.

3. The product testing method according to claim 1, characterized in that: The performing a preset standardization process on the initial six-element authentication data to obtain processed six-element authentication data includes: Determine whether the identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data in the initial six-element authentication data meet preset pass conditions; The authentication data that meets the preset pass condition in the initial six-element authentication data is converted into a first preset value, and the authentication data that does not meet the preset pass condition in the initial six-element authentication data is converted into a second preset value to obtain processed six-element authentication data.

4. The product testing method according to claim 1, characterized in that: Generating a credible person portrait corresponding to the target object based on the processed six-element authentication data includes: Obtain authentication data trust values corresponding to identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data in the initial six-element authentication data respectively; Determining an average value of the authentication data credibility values; A credible portrait of the person corresponding to the target object is determined based on the average value of the credible values of the authentication data.

5. The product testing method according to claim 1, characterized in that: The historical product testing data includes the number of industries tested by historical products, the types of vulnerabilities tested by historical products, the manufacturers tested by historical products, and the devices tested by historical products; Accordingly, generating a portrait of the product to be tested based on the data of the product to be tested and the historical product test data of the target object includes: Determining a first matching degree between the target object and the product to be tested based on the number of industries of the product to be tested and the number of industries of the historical product tests; Determining a second degree of matching between the target object and the product to be tested based on the number of vulnerability types in the product to be tested and the vulnerability types of the historical product tests; determining a third matching degree between the target object and the product to be tested based on the manufacturer of the product to be tested and the manufacturer of the historical product tests; Determining a fourth matching degree between the target object and the product to be tested based on the device of the product to be tested and the device of the historical product test; Generate a portrait of the product to be tested based on the determined first matching degree, the second matching degree, the third matching degree, and the fourth matching degree.

6. The product testing method according to claim 1, characterized in that: The determining of the historical test effect data of the target object and generating a corresponding historical test effect portrait based on the historical test effect data of the target object includes: Determining historical test performance data of the target object; Determine a historical vulnerability level in the historical test effect data of the target object using a preset level classification condition, and determine the contribution of the target object according to the historical vulnerability level in the historical test effect data; Determine the accuracy of the target object based on the number of historical vulnerability submissions and the number of historical vulnerability passes in the historical test effect data of the target object; Determine the activity level of the target object based on the number of historical test item participations in the historical test effect data of the target object; Generate a corresponding historical test effect portrait based on the contribution, accuracy and activity of the target object.

7. The product testing method according to any one of claims 1 to 6, characterized in that: The determining of the test participant of the product to be tested according to the test credibility value of the target object includes: Obtain the test trust value of each target object; Sorting the test credibility values of the respective target objects to obtain a list of the target objects in a preset arrangement order; The test participants of the product to be tested are determined according to the target object list and the preset number of test participants, so that the test participants can test the product to be tested.

8. A product testing device, characterized in that: include: A personnel trustworthy profile generation module is configured to obtain initial six-element authentication data of a target subject, perform a preset standardization process on the initial six-element authentication data to obtain processed six-element authentication data, and generate a trustworthy profile of the target subject based on the processed six-element authentication data; wherein the initial six-element authentication data includes identity information authentication data, biometric identification information authentication data, financial information authentication data, background clean record authentication data, invitation endorsement authentication data, and confidentiality agreement authentication data; A historical test effect portrait generation module is used to obtain data of the product to be tested and historical product test data of the target object, generate a portrait of the product to be tested based on the data of the product to be tested and the historical product test data of the target object, determine the historical test effect data of the target object, and generate a corresponding historical test effect portrait based on the historical test effect data of the target object; A test participant determination module is used to generate a three-dimensional radar chart of the target object based on the personnel credibility portrait, the product to be tested portrait and the historical test effect portrait, determine the test credibility value of the target object based on the three-dimensional radar chart, and determine the test participant of the product to be tested based on the test credibility value of the target object, so that the test participant can test the product to be tested.

9. An electronic device, characterized in that: include: Memory, used to store computer programs; A processor, configured to execute the computer program to implement the product testing method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that Used to store a computer program; wherein, when the computer program is executed by a processor, the product testing method according to any one of claims 1 to 7 is implemented.