Customer CRM maintenance management system based on digital identity information security storage

By using a distributed key management system based on blockchain and quantum keys, and combining biometrics and device hardware fingerprint information for multi-factor authentication, the system solves the problems of vulnerability of information authentication and insufficient security of cross-domain data sharing in existing CRM systems, and achieves highly secure user identity management and data transmission.

CN120979637APending Publication Date: 2025-11-18JIANGSU PUSHANG NETWORK TECH CO LTD
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202510789476.6
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-06-13
Publication Date
2025-11-18

AI Technical Summary

Technical Problem

In existing CRM systems, information authentication systems are vulnerable to internal leaks or external attacks. The quantum cryptography cloud service system is not deeply integrated with identity authentication, resulting in the identity verification process relying on traditional encryption methods, which cannot resist the risk of man-in-the-middle attacks in the quantum computing era, and the security of cross-domain data sharing is insufficient.

Method used

It adopts a zone-based and technology-based distributed key management system, which interacts with the cross-system interaction module for data exchange, combines the quantum-enhanced identity authentication module for multi-factor authentication, uses quantum key generation and blockchain technology to generate and store keys, realizes dynamic key negotiation and encryption, and combines biometrics and device hardware fingerprint information for identity verification.

Benefits of technology

It improves the security of user identity management, reduces the risk of internal leakage, prevents man-in-the-middle attacks in quantum computing environments, and enhances the security and anti-attack capabilities of cross-domain data transmission.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120979637A_ABST
    Figure CN120979637A_ABST
Patent Text Reader

Abstract

The invention relates to the technical field of identity information security storage, discloses a customer CRM maintenance management system based on digital identity information security storage, and solves the problem of low key management and cross-system cooperation efficiency in the prior art. A secret key for identity authentication is generated by means of quantum secret key distribution equipment, and an authentication result is generated through operation according to a quantum-enhanced identity authentication algorithm formula in combination with user biological feature recognition information, equipment hardware fingerprint information and input identity information; meanwhile, the distributed key management module provides support for overall data security based on the architecture concept of the block chain technology, quantum cryptography and identity authentication are deeply fused in the quantum enhanced identity authentication module, the man-in-the-middle attack risk in the quantum computing era is resisted, and the security of the whole data is improved. And a dynamic key negotiation mechanism based on combination of elliptic curve cryptography and a quantum key distribution technology is established in the cross-system interaction module.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to the field of secure identity information storage technology, specifically a customer CRM maintenance and management system based on secure storage of digital identity information. Background Technology

[0002] In today's digital business environment, enterprises face increasingly fierce market competition, and customer resources have become a key element for their survival and development. CRM (Customer Relationship Management) systems have emerged as a result. As a software system specifically designed to help enterprises manage and track customer relationships, its importance is becoming increasingly prominent. In the early days, enterprises relied heavily on traditional manual records and simple spreadsheets for managing customer relationships. Sales staff tracked customer information, sales opportunities, and communication status based on personal memory and paper notes. This method was inefficient, information was scattered and easily lost, and it severely limited enterprises' ability to deeply explore and effectively maintain customer relationships. As enterprises have expanded and market demands have diversified, this primitive customer relationship management model has become difficult to meet the needs of refined enterprise operations.

[0003] A Chinese patent with publication number CN119030706A discloses a quantum cryptography security application system and method for CRM. Upon receiving an authorization token, the CRM management system controls user access to system resources based on the permission information in the token, ensuring that only users with the appropriate permissions can perform specific operations. Secure communication between the CRM management system and the quantum cryptography cloud service system is achieved through an encrypted channel. When the CRM management system needs to send sensitive data, it first sends an encryption request to the quantum cryptography cloud service system. The quantum key distribution module of the quantum cryptography cloud service system generates a pair of quantum keys and securely sends the public key to the CRM management system. The CRM management system uses the received public key to encrypt the sensitive data and sends the encrypted data to the receiving system (which may be another internal system or an external partner) through the encrypted channel. The receiving system obtains the corresponding private key from the quantum cryptography cloud service system, decrypts the encrypted data, and recovers the original data.

[0004] The existing technology has the following two problems: 1. Information authentication systems rely on traditional databases to store user identity data, which is vulnerable to internal leaks or external attacks.

[0005] 2. The quantum cryptography cloud service system focuses on communication encryption, but it is not deeply integrated with identity authentication. As a result, the identity authentication process still relies on traditional encryption methods, which cannot resist the risk of man-in-the-middle attacks in the era of quantum computing. When interacting with external certification authorities or third-party systems, it relies on plaintext transmission or simple token verification, lacks a dynamic key negotiation mechanism, and has insufficient security for cross-domain data sharing. Summary of the Invention

[0006] The technical problem to be solved by this invention is to overcome the defects of the existing technology. This invention proposes a customer CRM maintenance and management system based on secure storage of digital identity information to solve the problem of low efficiency in key management and cross-system collaboration in the existing technology.

[0007] To solve the above-mentioned technical problems, the technical solution adopted by the present invention is: a customer CRM maintenance and management system based on secure storage of digital identity information, including... Distributed key management module: responsible for generating, storing, and managing keys based on blockchain technology; By interacting with blockchain nodes and executing smart contracts, keys are generated according to the aforementioned key generation algorithm formula, and the relevant key information is stored on the blockchain to ensure key security and traceability. Data exchange is conducted with the identity authentication module and the cross-system interaction module to provide them with secure key services. When calculating the key, data such as CPU usage, memory usage, and the number of blockchain network transactions need to be collected from each node. This involves data exchange with the node status monitoring module (which can be considered part of the blockchain-related infrastructure).

[0008] Quantum-enhanced identity authentication module: It interacts with the distributed key management module to obtain quantum keys, integrates a quantum key distribution device, and uses quantum keys to generate keys for identity verification; It receives the user's input identity information, combines biometric identification information and device hardware fingerprint information, calculates according to the quantum-enhanced identity authentication algorithm formula, generates an identity authentication result, and communicates with the customer information management module and the cross-system interaction module to verify the legitimacy of the user's identity.

[0009] Cross-system interaction module: When interacting with external certification authorities and third-party systems, it negotiates keys with the other system according to the cross-system dynamic key negotiation protocol formula to generate a shared key; The system uses a shared key to encrypt and decrypt transmitted data, ensuring the security of cross-domain data transmission. It also obtains key-related information from the distributed key management module and collaborates with the quantum-enhanced identity authentication module to verify the legitimacy of the other party's system.

[0010] Customer Information Management Module: Responsible for storing and managing customers' basic information and digital identity information; Interacts with the quantum-enhanced identity authentication module to verify user access rights to customer information; collaborates with the cross-system interaction module to ensure secure transmission of customer information during cross-system data sharing. Data analysis and decision support module: Analyzes key usage records, identity authentication logs, and cross-system interaction data generated in the system; The analysis results provide decision support for system optimization, such as adjusting the key generation cycle and optimizing the identity authentication process. It also interacts with other modules to obtain the data required for analysis. At the same time, when analyzing blockchain-related data, it also involves analyzing the resource usage of each node and the number of network transactions, providing a basis for decision-making to adjust the parameters in the key generation algorithm, so as to further optimize the security and adaptability of key generation.

[0011] The formula for the blockchain-based key generation algorithm is as follows: in, For the generated key, A hash function is used to convert input data into a fixed-length hash value, ensuring data integrity and immutability. The initial seed for the system, set by the system administrator during initialization, is a random string of sufficient length and complexity to ensure the randomness of key generation. n represents the number of blockchain nodes participating in key generation, and G is the base point on the elliptic curve, a fixed, known point. Let be the private key of the i-th node, which is randomly generated by the node itself. The random number generated for the i-th node. Each node generates a unique random number during each key generation process to increase the randomness of key generation. t is the current system time in milliseconds. This represents a timestamp, recording the time the key was generated to ensure that each generated key is time-sensitive and unique. The square brackets [] represent the floor function. The current CPU utilization of the i-th node, with a value ranging from [0, 100], represents the proportion of CPU resources currently being used by that node. The maximum CPU utilization across all participating nodes is calculated again before each key generation computation. This value is used to normalize the CPU utilization of each node, ensuring that the impact of CPU resource usage on different nodes is measured on a uniform scale. The CPU utilization impact factor index is a preset constant used to adjust the weight of CPU utilization on key generation. By adjusting this index, the importance of CPU resources in the key generation process can be changed. For example, if... If the value is 2, then the impact of CPU utilization will be amplified more significantly as the value increases. Let be the current memory utilization rate of the i-th node, with a value ranging from [0, 100], representing the proportion of memory resources currently used by this node. The maximum memory usage across all participating nodes is recalculated before each key generation calculation. Similarly, it is used to normalize the memory usage of each node. This is the memory utilization impact factor index, which is also a preset constant that affects... Similarly, weights are used to adjust the impact of memory usage on key generation, for example, when... =1.5, the impact of memory usage on key generation will be scaled accordingly based on this index. This represents the number of transactions on the current blockchain network within a specific historical period, reflecting the network's activity level. The maximum number of blockchain network transactions in the past period (e.g., the past 24 hours) is used to normalize the current number of transactions so that the influence of network activity can be reasonably reflected in the key generation formula. ν is the transaction quantity influence factor index, a preset constant used to adjust the influence weight of the number of blockchain network transactions on key generation. For example, if ν=3, the influence of the number of transactions on key generation will fluctuate more drastically as its value changes. This formula not only integrates the product of the system's initial seed, node public keys (generated based on private keys), and random numbers, but also incorporates dynamic factors such as the CPU utilization, memory utilization, and transaction volume of each node and the blockchain network. By performing complex exponential operations and weighting on these factors, and combining them with timestamps, a high-strength and more dynamically changing key is generated. Each node's private key determines its public key. The different resource usage of numerous nodes and the activity of network transactions participate in the calculation, greatly increasing the complexity and security of key generation, making the key more difficult to crack.

[0012] The quantum-enhanced identity authentication module calculates the identity authentication result using the quantum-enhanced identity authentication algorithm formula, and communicates with the customer information management module and the cross-system interaction module to verify the legitimacy of the user's identity. The formula for quantum-enhanced identity authentication algorithm is as follows: For the final identity verification result, This is a quantum key distribution function that uses the principles of quantum mechanics to generate secure keys. In the quantum key distribution process, the sender and receiver exchange quantum states through a quantum channel and generate a shared key based on the measurement results of the quantum states. , The password or other authentication information entered by the user is encrypted before being used in the calculation. ⊕ is the XOR operation, used to encrypt and fuse different pieces of information to improve security. B represents the user's biometric identification information, such as fingerprints or facial recognition features, after digitization. H is the hash function, similar to the hash function in the key generation algorithm mentioned above, used to ensure data integrity and immutability. A unique identifier for the user, such as username or ID number. User equipment model Operating system version The formula uses the network address as a reference. It integrates the key generated by quantum key distribution, user input information, biometric identification information, and device hardware fingerprint hash value to generate the final identity authentication result, effectively resisting man-in-the-middle attacks in the era of quantum computing.

[0013] When storing customer information, the customer information management module encrypts sensitive information using an RSA algorithm that matches the key generated by the distributed key management module. When a user accesses the information, access permissions are determined based on the authentication result of the quantum-enhanced identity authentication module.

[0014] When analyzing blockchain-related data, the data analysis and decision support module may adjust the key generation algorithm if it finds that node resource usage is unstable and its impact on key security is unpredictable. , Parameters, if the number of network transactions is found Fluctuations have a significant impact on key security, and the ν parameter can be adjusted.

[0015] When the distributed key management module stores the generated key on the blockchain, it also records the key's generation time, validity period, usage records, and metadata of the nodes involved in its generation, so as to facilitate subsequent traceability and management.

[0016] The quantum-enhanced identity authentication module collects and stores the user's biometric identification information B and the device's hardware fingerprint information during user registration, which are then used for identity authentication comparison during subsequent logins.

[0017] Cross-system interaction modules using shared keys When encrypting transmitted data, the AES algorithm adapted to the shared key is used, and the shared key used in this case is destroyed in a timely manner after the data transmission is completed.

[0018] Compared with the prior art, the beneficial effects of the present invention are as follows: 1. This invention proposes a customer CRM maintenance and management system based on secure storage of digital identity information. It manages user identity through a quantum-enhanced identity authentication module. This module integrates a quantum key distribution device, using quantum keys to generate keys for identity verification. Combining user-input identity information, biometric identification information, and device hardware fingerprint information, it incorporates user biometric identification information and device hardware fingerprint information into the identity authentication system, achieving multi-factor authentication. Even if an attacker obtains some user identity data, they cannot pass identity verification due to the lack of corresponding biometric and device fingerprint information, reducing the security risk caused by internal leaks. Simultaneously, the distributed key management module generates, stores, and manages keys based on blockchain technology. The key generation process involves the participation of numerous blockchain nodes, and key-related information is stored on the blockchain, ensuring data security and traceability.

[0019] 2. This invention proposes a customer CRM maintenance and management system based on secure storage of digital identity information. The non-eavesdropping and non-copying characteristics of quantum keys make it difficult for man-in-the-middle attacks to be carried out in a quantum computing environment. This prevents attackers from using quantum computing capabilities to crack traditional encrypted authentication information and impersonate legitimate users. The shared key generated by the cross-system dynamic key negotiation mechanism is used for cross-domain data transmission encryption. Compared with plaintext transmission or simple token verification, the dynamically generated shared key, combined with a powerful encryption algorithm, greatly improves the security of cross-domain data transmission. Each cross-system interaction generates a new shared key, reducing the risk of key cracking. At the same time, the negotiation process based on elliptic curve cryptography and quantum key distribution further enhances the security and resistance to attacks of the key, ensuring the security of cross-domain data sharing. Attached Figure Description

[0020] The disclosure of this invention is illustrated with reference to the accompanying drawings. It should be understood that the drawings are for illustrative purposes only and are not intended to limit the scope of protection of this invention. In the drawings, the same reference numerals refer to the same parts. Figure 1 The flowchart of a customer CRM maintenance management system based on secure storage of digital identity information, according to an embodiment of the present invention, is illustrated schematically. Figure 2 The schematic diagram illustrates a system initialization flowchart according to an embodiment of the present invention; Figure 3 The schematic diagram illustrates a user registration and authentication flowchart according to an embodiment of the present invention; Figure 4 The schematic diagram illustrates a key generation and management flowchart according to one embodiment of the present invention; Figure 5The diagram illustrates a cross-system data interaction flowchart according to an embodiment of the present invention. Figure 6 The diagram illustrates a data analysis and system optimization flowchart according to an embodiment of the present invention. Detailed Implementation

[0021] It is readily understood that, based on the technical solution of this invention, those skilled in the art can propose various interchangeable structural methods and implementations without altering the essential spirit of the invention. Therefore, the following detailed embodiments and accompanying drawings are merely illustrative examples of the technical solution of this invention and should not be considered as the entirety of the invention or as limitations or restrictions on the technical solution of this invention.

[0022] To further understand the content of this invention, a detailed description of the invention will be provided in conjunction with the accompanying drawings.

[0023] like Figure 1-6 As shown, the following preferred technical solutions are provided: including Distributed key management module: responsible for generating, storing, and managing keys based on blockchain technology; By interacting with blockchain nodes and executing smart contracts, keys are generated according to the aforementioned key generation algorithm formula. The key's relevant information is stored on the blockchain to ensure its security and traceability. Data exchange is conducted with the identity authentication module and the cross-system interaction module to provide them with secure key services. During key calculation, data such as CPU usage, memory usage, and the number of blockchain network transactions need to be collected from each node. This involves data exchange with the node status monitoring module (which can be considered part of the blockchain-related infrastructure).

[0024] Quantum-enhanced identity authentication module: It interacts with the distributed key management module to obtain quantum keys, integrates a quantum key distribution device, and uses quantum keys to generate keys for identity verification; It receives the user's input identity information, combines biometric identification information and device hardware fingerprint information, calculates according to the quantum-enhanced identity authentication algorithm formula, generates an identity authentication result, and communicates with the customer information management module and the cross-system interaction module to verify the legitimacy of the user's identity.

[0025] Cross-system interaction module: When interacting with external certification authorities and third-party systems, it negotiates keys with the other system according to the cross-system dynamic key negotiation protocol formula to generate a shared key; The system uses a shared key to encrypt and decrypt transmitted data, ensuring the security of cross-domain data transmission. It also obtains key-related information from the distributed key management module and collaborates with the quantum-enhanced identity authentication module to verify the legitimacy of the other party's system.

[0026] Customer Information Management Module: Responsible for storing and managing customers' basic information and digital identity information; Interacts with the quantum-enhanced identity authentication module to verify user access rights to customer information; collaborates with the cross-system interaction module to ensure secure transmission of customer information during cross-system data sharing. Data analysis and decision support module: Analyzes key usage records, identity authentication logs, and cross-system interaction data generated in the system; The analysis results provide decision support for system optimization, such as adjusting the key generation cycle and optimizing the identity authentication process. It also interacts with other modules to obtain the data required for analysis. At the same time, when analyzing blockchain-related data, it also involves analyzing the resource usage of each node and the number of network transactions, providing a basis for decision-making to adjust the parameters in the key generation algorithm, so as to further optimize the security and adaptability of key generation.

[0027] The formula for the blockchain-based key generation algorithm is as follows: in, For the generated key, A hash function is used to convert input data into a fixed-length hash value, ensuring data integrity and immutability. The initial seed for the system, set by the system administrator during initialization, is a random string of sufficient length and complexity to ensure the randomness of key generation. n represents the number of blockchain nodes participating in key generation, and G is the base point on the elliptic curve, a fixed, known point. Let be the private key of the i-th node, which is randomly generated by the node itself. The random number generated for the i-th node. Each node generates a unique random number during each key generation process to increase the randomness of key generation. t is the current system time in milliseconds. This represents a timestamp, recording the time the key was generated to ensure that each generated key is time-sensitive and unique. The square brackets [] represent the floor function. The current CPU utilization of the i-th node, with a value ranging from [0, 100], represents the proportion of CPU resources currently being used by that node. The maximum CPU utilization across all participating nodes is calculated again before each key generation computation. This value is used to normalize the CPU utilization of each node, ensuring that the impact of CPU resource usage on different nodes is measured on a uniform scale. The CPU utilization impact factor index is a preset constant used to adjust the weight of CPU utilization on key generation. By adjusting this index, the importance of CPU resources in the key generation process can be changed. For example, if... If the value is 2, then the impact of CPU utilization will be amplified more significantly as the value increases. Let be the current memory utilization rate of the i-th node, with a value ranging from [0, 100], representing the proportion of memory resources currently used by this node. The maximum memory usage across all participating nodes is recalculated before each key generation calculation. Similarly, it is used to normalize the memory usage of each node. This is the memory utilization impact factor index, which is also a preset constant that affects... Similarly, weights are used to adjust the impact of memory usage on key generation, for example, when... =1.5, the impact of memory usage on key generation will be scaled accordingly based on this index. This represents the number of transactions on the current blockchain network within a specific historical period, reflecting the network's activity level. The maximum number of blockchain network transactions in the past period (e.g., the past 24 hours) is used to normalize the current number of transactions so that the influence of network activity can be reasonably reflected in the key generation formula. ν is the transaction quantity influence factor index, a preset constant used to adjust the influence weight of the number of blockchain network transactions on key generation. For example, if ν=3, the influence of the number of transactions on key generation will fluctuate more drastically as its value changes. This formula not only integrates the product of the system's initial seed, node public keys (generated based on private keys), and random numbers, but also incorporates dynamic factors such as the CPU utilization, memory utilization, and transaction volume of each node and the blockchain network. By performing complex exponential operations and weighting on these factors, and combining them with timestamps, a high-strength and more dynamically changing key is generated. Each node's private key determines its public key. The different resource usage of numerous nodes and the activity of network transactions participate in the calculation, greatly increasing the complexity and security of key generation, making the key more difficult to crack.

[0028] The quantum-enhanced identity authentication module calculates the identity authentication result using the quantum-enhanced identity authentication algorithm formula, and communicates with the customer information management module and the cross-system interaction module to verify the legitimacy of the user's identity. The formula for quantum-enhanced identity authentication algorithm is as follows: For the final identity verification result, This is a quantum key distribution function that uses the principles of quantum mechanics to generate secure keys. In the quantum key distribution process, the sender and receiver exchange quantum states through a quantum channel and generate a shared key based on the measurement results of the quantum states. , The password or other authentication information entered by the user is encrypted before being used in the calculation. ⊕ is the XOR operation, used to encrypt and fuse different pieces of information to improve security. B represents the user's biometric identification information, such as fingerprints or facial recognition features, after digitization. H is the hash function, similar to the hash function in the key generation algorithm mentioned above, used to ensure data integrity and immutability. A unique identifier for the user, such as username or ID number. User equipment model Operating system version The formula uses the network address as a reference. It integrates the key generated by quantum key distribution, user input information, biometric identification information, and device hardware fingerprint hash value to generate the final identity authentication result, effectively resisting man-in-the-middle attacks in the era of quantum computing.

[0029] When storing customer information, the customer information management module encrypts sensitive information using an RSA algorithm that matches the key generated by the distributed key management module. When a user accesses the information, access permissions are determined based on the authentication result of the quantum-enhanced identity authentication module.

[0030] When analyzing blockchain-related data, the data analysis and decision support module may adjust the key generation algorithm if it finds that node resource usage is unstable and its impact on key security is unpredictable. , Parameters, if the number of network transactions is found Fluctuations have a significant impact on key security, and the ν parameter can be adjusted.

[0031] When the distributed key management module stores the generated key on the blockchain, it also records the key's generation time, validity period, usage records, and metadata of the nodes involved in its generation, so as to facilitate subsequent traceability and management.

[0032] The quantum-enhanced identity authentication module collects and stores the user's biometric identification information B and the device's hardware fingerprint information during user registration, which are then used for identity authentication comparison during subsequent logins.

[0033] Cross-system interaction modules using shared keys When encrypting transmitted data, the AES algorithm adapted to the shared key is used, and the shared key used in this case is destroyed in a timely manner after the data transmission is completed.

[0034] The specific implementation steps of a customer CRM maintenance management system based on secure storage of digital identity information are as follows: Step 1: Initialize the blockchain network through the distributed key management module and set the initial seed of the system. It also establishes connections with various blockchain nodes, and each node generates its own private key. At the same time, initialize the node status monitoring mechanism so as to collect data such as CPU usage and memory usage of each node in the future; Initialize the quantum key distribution device using the quantum-enhanced identity authentication module and configure the relevant parameters; The cross-system interaction module configures interaction parameters with external certification authorities and third-party systems, including possible public key information of the other party's system (which is essentially generated based on its private key).

[0035] Step 2: Users register in the customer information management module by entering their username, password, and other information. The quantum enhanced identity authentication module then collects the user's biometric identification information and device hardware fingerprint information (device model, operating system version, network address, etc.). When a user logs in, the quantum-enhanced identity authentication module calculates the user's identity based on the information entered by the user, combined with the key generated by quantum key distribution, and according to the quantum-enhanced identity authentication algorithm formula. If the authentication is successful, an authorization token is generated for the user, allowing the user to access system resources.

[0036] Step 3: The distributed key management module executes the smart contract according to a preset time period or event triggering conditions, and each node generates random numbers. The module collects the current CPU utilization of each node. Memory usage And obtain the number of transactions on the current blockchain network within a specific time period. At the same time, statistics are collected from all participating nodes. , and the past period of time ; Based on blockchain node information (base point G, node private key) Random numbers Based on the collected and statistical data mentioned above, a new key K is generated according to the key generation algorithm formula; The generated key is stored on the blockchain, and relevant key management information, such as key validity period and usage records, is updated. At the same time, the new key is synchronized to the modules that need to use it, such as the quantum-enhanced identity authentication module and the cross-system interaction module.

[0037] Step 4: When the cross-system interaction module needs to exchange data with external certification authorities or third-party systems, both parties first use their own private keys ( , Generate public key ( , And generate quantum keys through quantum key distribution technology. ; The shared key is calculated according to the formula of the cross-system dynamic key negotiation protocol; Use shared keys The transmitted data is encrypted and sent to the other system. After receiving the data, the other system obtains the shared key using the same key negotiation process and decrypts the data.

[0038] Step 5: Regularly collect data generated by each module through the data analysis and decision support module, such as key usage frequency, identity authentication success rate, cross-system interaction data, etc. At the same time, conduct in-depth analysis of blockchain-related data, including long-term trends in resource usage of each node and changing patterns in the number of network transactions. Based on the analysis results, system optimization strategies can be formulated. For example, if it is found that the frequency of key usage is too high within a certain period of time, which may pose a security risk, the key generation cycle can be adjusted. If it is found that the identity authentication failure rate is high, it may be necessary to optimize the identity authentication process or strengthen user security education. Based on the analysis of blockchain-related data, if it is found that the resource usage of certain nodes has an unstable impact on the security of key generation, the parameters such as λ and μ in the key generation algorithm can be adjusted. If it is found that the fluctuation of the number of network transactions has a significant impact on key security, the ν parameter can be adjusted. The optimization strategy is fed back to relevant modules, such as the distributed key management module and the quantum-enhanced identity authentication module, to implement system optimization measures.

[0039] The technical scope of this invention is not limited to the content described above. Those skilled in the art can make various modifications and variations to the above embodiments without departing from the technical concept of this invention, and all such modifications and variations should fall within the protection scope of this invention.

Claims

1. A customer CRM maintenance and management system based on secure storage of digital identity information, characterized in that: include Key Management Module: Responsible for generating, storing, and managing keys based on blockchain technology; Identity authentication module: interacts with key management module to obtain quantum key, integrates quantum key distribution device, and uses quantum key to generate key for identity verification; Cross-system interaction module: When interacting with external certification authorities and third-party systems, it negotiates keys with the other system according to the cross-system dynamic key negotiation protocol formula to generate a shared key; Customer Information Management Module: Responsible for storing and managing customers' basic information and digital identity information; Data Analysis and Decision Support Module: Analyzes key usage records, identity authentication logs, and cross-system interaction data generated in the system.

2. The customer CRM maintenance and management system based on secure storage of digital identity information according to claim 1, characterized in that: The formula for the blockchain-based key generation algorithm is as follows: in, For the generated key, For hash functions, Let n be the initial seed of the system, n be the number of blockchain nodes participating in key generation, and G be the base point on the elliptic curve. Let be the private key of the i-th node. A random number is generated for the i-th node, where t is the current system time in milliseconds. Represents a timestamp, and [] represents the round-down function. The current CPU utilization of the i-th node. This represents the maximum CPU utilization across all participating nodes. The CPU utilization impact factor index. Let i be the current memory usage of the i-th node. This represents the maximum memory usage among the participating nodes. This is the memory utilization impact factor index. This represents the number of transactions on the current blockchain network within a specific historical period. ν represents the maximum number of transactions on the blockchain network over a past period, and ν is the transaction volume impact factor index.

3. The customer CRM maintenance management system based on secure storage of digital identity information according to claim 2, characterized in that: The identity authentication module calculates the identity authentication result using a quantum-enhanced identity authentication algorithm formula, communicates with the customer information management module and the cross-system interaction module, and then verifies the legitimacy of the user's identity.

4. The customer CRM maintenance and management system based on secure storage of digital identity information according to claim 2, characterized in that: The formula for the quantum-enhanced authentication algorithm is as follows: in, For the final identity verification result, This is a quantum key distribution function that generates a shared key based on the measurement results of the quantum state. , The input password and identity information are provided by the user; ⊕ represents the XOR operation; B represents the user's biometric identification information; and H represents the hash function. A unique identifier for the user. User equipment model Operating system version This is a network address.

5. The customer CRM maintenance management system based on secure storage of digital identity information according to claim 1, characterized in that: The formula for the cross-system dynamic key negotiation protocol is as follows: in, The shared key generated through negotiation between the two parties. For hash functions, The base point on the elliptic curve, The local system's private key is [private key], and the local system's public key is [public key]. , For remote systems, the public key of the remote system is The quantum key is generated using quantum key distribution technology.

6. The customer CRM maintenance management system based on secure storage of digital identity information according to claim 1, characterized in that: When storing customer information, the customer information management module encrypts sensitive information using an RSA algorithm that matches the key generated by the key management module. When a user accesses the information, the access permission is determined based on the authentication result of the identity authentication module.

7. The customer CRM maintenance management system based on secure storage of digital identity information according to claim 1, characterized in that: When analyzing blockchain data, if the data analysis and decision support module finds that the impact of node resource usage on key security is unstable, it adjusts the key generation algorithm. , Parameters, if the number of network transactions is found Fluctuations can affect key security; adjust the ν parameter.

8. The customer CRM maintenance management system based on secure storage of digital identity information according to claim 1, characterized in that: When the key management module stores the generated key on the blockchain, it also records the key's generation time, validity period, usage records, and metadata of the nodes involved in the generation.

9. The customer CRM maintenance management system based on secure storage of digital identity information according to claim 1, characterized in that: The identity authentication module collects and stores the user's biometric identification information B and device hardware fingerprint information during user registration for identity authentication comparison during subsequent login.

10. The customer CRM maintenance management system based on secure storage of digital identity information according to claim 1, characterized in that: The cross-system interaction module uses a shared key. When encrypting transmitted data, the AES algorithm adapted to the shared key is used, and the shared key used in this case is destroyed in a timely manner after the data transmission is completed.

Citation Information

Patent Citations

  • Quantum cryptography security application system and method applied to CRM

    CN119030706A