A qualification certification whole-process visual tracking and self-service query system and method
By separating user security levels and using a dynamic reversible obfuscation mechanism, the problem of sensitive information leakage in the qualification certification system has been solved, enabling secure full-process tracking and self-service query of qualification certification, thus improving data security and query efficiency.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- XIAN LINGHANG JINGCHENG TECHNOLOGY CO LTD
- Filing Date
- 2026-05-08
- Publication Date
- 2026-07-21
AI Technical Summary
The existing qualification certification tracking and query system has shortcomings in data security and access control. Users with low security levels can obtain the original certification data, static desensitization and fixed encryption methods are easily cracked, sensitive information is easily spread, and there is no self-inspection at each node during the review process.
An access separation mechanism based on user security level, a dynamic reversible obfuscation mechanism, and access limit are adopted. Users with low security level can only view the authentication status, while users with high security level can obtain data under obfuscation with sequential binding. The obfuscation result changes with the order, and the number of times can be accessed per day is limited.
It achieves substantial separation of user security levels, dynamically obfuscates to prevent the spread of sensitive information, resists batch sampling attacks, improves authentication efficiency and data security, provides self-service deobfuscation verification, and accurately protects high-risk nodes.
Abstract
Description
Technical Field
[0001] This invention relates to the field of query technology for qualification certification platforms, and more specifically, to a visual tracking and self-service query system and method for the entire qualification certification process. Background Technology
[0002] The enterprise qualification certification process involves multiple stages, including application acceptance, document review, on-site verification, and multi-level approval. With the digitalization of certification services, platforms generally provide enterprise users with end-to-end visual tracking capabilities. After logging in, users can view the status of each certification stage, such as not under review, under review, passed, or failed. They can also click on a stage to view previously uploaded certification materials. This self-service query mode improves transparency, enabling enterprises to promptly identify progress bottlenecks, verify feedback, and supplement materials, significantly improving certification efficiency.
[0003] However, existing qualification certification tracking and query systems still have significant shortcomings in terms of data security and access control. Firstly, the systems fail to achieve substantial separation of access for users with different security levels. Many platforms only make simple distinctions based on page function permissions. Low-security-level users (such as temporary agents, external collaborators, and restricted access personnel) and high-security-level users access the same query system and can obtain the original certification data corresponding to the nodes. This data often involves trade secrets such as technical design drawings, core processes, and financial statements. Once accounts are shared, stolen, or unauthorized internal operations occur, sensitive information can easily spread, and companies will find it difficult to trace.
[0004] Secondly, regarding data protection methods, existing techniques mostly involve static masking or fixed encryption. Static masking often uses irreversible masking (such as marking key fields with asterisks), making it impossible for companies to self-check when they need to verify the original submitted materials and review comments at the "under review" or "certification failed" stages because they cannot restore the plaintext. While fixed-key encryption can be restored, once the key or obfuscation rules are leaked, all historical returned data can be cracked. More importantly, static processing ensures that the same data outputs the same result every time it is queried. Attackers can use extensive sampling and comparison to perform piecemeal reconstruction, seriously threatening data confidentiality.
[0005] In summary, existing technologies lack protection against the leakage of sensitive information in certification materials. Therefore, how to enable enterprises to effectively verify the data at each stage while tracking the certification progress, and prevent the leakage of sensitive information during the query process, has become an urgent technical problem to be solved. Summary of the Invention
[0006] The purpose of this invention is to provide a visual tracking and self-service query system and method for the entire qualification certification process, so as to solve the technical problems mentioned above.
[0007] To achieve the above objectives, the present invention provides the following technical solution: A visualized tracking and self-service query system for the entire qualification certification process, integrated into an enterprise qualification certification platform to achieve full-process tracking and self-service query, wherein: The enterprise qualification certification platform receives user access requests, verifies the security level of the accessing enterprise user, and allows the user to access the first system when the user's security level is Level 1. After the user accesses the system, the first system receives query signals from its qualification certification nodes, retrieves the certification status of each node of the accessing enterprise's qualification certification, and presents it visually. When a user's security level is Level 2, the enterprise qualification platform obtains the user's historical access count to the second system for that day, determines the user's remaining access count N to the second system for that day, and allows the user to access the second system when N≥1. After the user accesses the system, the second system receives query signals from the qualification certification nodes, retrieves the certification status of each node of the access enterprise's qualification certification and displays it visually. For process nodes that are under review or have failed certification, the second system obtains the order in which the user accesses the second system for that day as the first order, and performs reversible obfuscation processing on the certification data of the corresponding node before outputting the first data. For the same certification data, the reversible obfuscation results are different for different orders of access to the second system on the same day. If the user has no remaining access count to the second system for that day, the user is transferred to the first system. The enterprise qualification certification platform has a deobfuscation program, which is used to obtain the first data output by the second system, receive the first sequence corresponding to the first data input by the user, deobfuscate the first data accordingly, and visualize the certification data obtained by deobfuscation.
[0008] Optionally, the second system, based on the obtained first sequence, performs reversible obfuscation processing on the sensitive data portion of the certification data of the corresponding review or failed process nodes, and outputs the reversibly obfuscated certification data as the first data. The sensitive data includes at least one of financial data, technical data, business information data, and personnel privacy data.
[0009] Optionally, reversible obfuscation processing includes at least one of numerical obfuscation processing and semantic obfuscation processing.
[0010] Optionally, the qualification platform obtains the authentication status of all process nodes in the entire qualification authentication process for all enterprise users. When the authentication status of a process node changes, a notification signal is generated for the corresponding user. The qualification platform generates and notifies the user of the first information based on the notification signal. The first information includes the change information of the authentication status of the corresponding process node. The change information includes the name of the enterprise applying for certification, the name of the qualification certification project, the name of the process node whose authentication status has changed, the authentication status before the change, the authentication status after the change, and the change time.
[0011] Optionally, for nodes whose authentication status changes from under review to approved, the first information also includes a prompt message, which includes the name of the next process node and the current authentication status of the next process node. If the current authentication status of the next process node does not change to under review in the order of priority, the platform confirms the reason for the non-change, and the prompt message also includes the reason for the non-change.
[0012] Optionally, if the reason for not changing is that the user has not provided the qualification certification materials for the next process node, the prompt information will also include the submission requirements for the qualification certification materials for the next process node, including the material name and the latest submission deadline.
[0013] Optionally, the qualification certification platform has user-defined notification time periods. During a notification time period, the first information generated can be directly notified to the user. Outside of a notification time period, the first information generated is retained and notified to the user during the first time period. If the first information includes the latest submission deadline, the earlier of the latest submission deadline and the latest time of the next notification time period is taken as the first time period. The first time period is from the present to the second time period, and the second time period is earlier than the first time period. If the first information does not include the latest submission deadline, the next notification time period is taken as the first time period.
[0014] According to another aspect of the present invention, a method for visual tracking and self-service query of the entire qualification certification process is provided, which allows for self-service query and visual tracking of the entire qualification certification process based on the aforementioned system for visual tracking and self-service query of the entire qualification certification process.
[0015] Compared with the prior art, the beneficial effects of the present invention are as follows: (1) This invention achieves substantial separation of access systems and isolation of sensitive data based on user security levels. For low-security personnel who are allowed to query node authentication status but restricted from viewing original authentication data, such as temporary agents, external collaborators, and restricted access personnel, enterprises can allow them to log in to the platform as enterprise users using their enterprise accounts. However, only keys sufficient to be assessed by the platform as the first security level are provided. For high-security personnel with higher trust levels and a limited number of users, they are not only allowed to log in to the platform as enterprise users, but are also given keys sufficient to be assessed by the platform as the second security level. During the access verification phase, the enterprise qualification authentication platform diverts users according to their security level. First-security level users only enter the first system, and their visual presentation content is limited to the authentication status of each node, without outputting any authentication data. Second-security level users enter the second system and are subject to additional access and obfuscation restrictions. This architecture-level diversion eliminates the shallow control that relies solely on account login permissions, fundamentally preventing low-security or restricted accounts from directly obtaining original authentication information through the same query system. This ensures that authentication information involving trade secrets such as design drawings, core processes, and financial statements is not accidentally exposed, greatly reducing the spread of sensitive information.
[0016] (2) This invention constructs a dynamic and reversible obfuscation mechanism bound to the access order of the day, effectively resisting batch sampling and jigsaw puzzle-style reconstruction attacks. For process nodes under review or authentication failure, the second system reversibly obfuscates the authentication data based on the first access order of the user to the second system on that day. The same original data outputs completely different first data under different orders. This dynamic obfuscation with order association makes it impossible for attackers to perform differential comparison or statistical accumulation to recover the original text even if they intercept the obfuscated results returned by multiple queries, due to the lack of a fixed mapping relationship between the results. This breaks the dilemma of traditional static desensitization and fixed encryption where a single leak exposes everything. At the same time, the obfuscation process is reversible, preserving a restoration channel for the data verification needs of legitimate users.
[0017] (3) Each login by high-security personnel must be reported to the enterprise to ensure accurate statistics of the first sequence at the enterprise level and to obtain accurate data for this node's data authentication. If high-security personnel log in and decode without reporting, they will obtain incorrect data due to the inaccuracy of the first sequence, rather than a leak. The content that can be reversibly obfuscated is more than just numerical / semantic obfuscation. Multiple errors during the verification process can help the enterprise determine whether the document is the original data that has been accurately deobfuscated. If multiple data points do not match the statistics confirmed by the enterprise from relevant personnel, it can be judged that the deobfuscation is incorrect and the first sequence input is presumed to be wrong. That is, the offline actual verification of obfuscated and erroneous content can reverse the verification of the accuracy of the first sequence, screen for abnormal concealment and omission behavior of high-security personnel, and standardize the operation behavior of personnel.
[0018] (4) This invention introduces a remaining access count constraint and a forced downgrade mechanism to completely cut off high-frequency malicious query paths. The platform monitors the historical access count of second-level users to the second system daily, calculates the remaining count N, and allows access only when N≥1; after the daily count is exhausted, the user is forcibly transferred to the first system and can only continue to track the authentication status but cannot obtain any material data. The daily login count of a single enterprise is limited, the total login count during the authentication period is limited, and the accounts, keys, and authentication data of different enterprises are different. This hard count constraint and dynamic obfuscation work together to make it impossible for attackers to attempt to decipher the obfuscation rules by automatically crawling obfuscated output samples through tens of thousands of requests, which significantly enhances the protection strength of the system at high-risk nodes such as review and authentication failure.
[0019] (5) This invention provides a user-friendly deobfuscation solution based on sequence parameters, achieving secure and convenient self-service verification. The deobfuscation program configured on the enterprise qualification certification platform, after obtaining the first data output by the second system, only requires the user to input the first sequence corresponding to that data to complete the deobfuscation locally and visually present the restored certification materials. The entire restoration process does not require users to log in to other websites to upload materials, protecting the privacy of user queries and reducing the security management risks of deobfuscation and certification materials. This allows enterprise users to independently verify the submitted supporting materials at review stages with minimal operational burden, significantly improving certification efficiency.
[0020] (6) This invention precisely focuses on high-risk process nodes for dynamic protection, balancing system performance and end-to-end tracking experience. This solution only implements order obfuscation and count for nodes that are under review or have failed certification. For nodes that are pending submission or have passed certification, the first or second system only presents status information and does not need to output sensitive data. This selective protection strategy concentrates security overhead on the time window when certification data is most easily spied on, effectively solving the pain point in the prior art where it is difficult to balance the need for verifiable data under review with the need to prevent the spread of sensitive information, without affecting the smoothness of normal use.
[0021] In summary, this invention forms a closed-loop protection system with visible authentication status, restricted data, dynamic obfuscation, and order deobfuscation, and possesses excellent auditability. Each output of data from the second system is bound to a unique first sequence, allowing enterprises or platforms to trace query behavior. In the event of a leak, the specific access sequence and account can be located, further deterring internal unauthorized access and malicious disclosure, and comprehensively improving the data security level during the entire qualification certification process tracking and self-service query. Detailed Implementation
[0022] The technical solutions in the embodiments of the present invention will be clearly and completely described below. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments.
[0023] This invention provides a visualized tracking and self-service query system for the entire qualification certification process, which is integrated into an enterprise qualification certification platform to achieve full-process tracking and self-service query, wherein: The enterprise qualification certification platform receives user access requests, verifies the security level of the accessing enterprise user, and allows the user to access the first system when the user's security level is Level 1. After the user accesses the system, the first system receives query signals from its qualification certification nodes, retrieves the certification status of each node of the accessing enterprise's qualification certification, and presents it visually. When a user's security level is Level 2, the enterprise qualification platform obtains the user's historical access count to the second system for that day, determines the user's remaining access count N to the second system for that day, and allows the user to access the second system when N≥1. After the user accesses the system, the second system receives query signals from the qualification certification nodes, retrieves the certification status of each node of the access enterprise's qualification certification and displays it visually. For process nodes that are under review or have failed certification, the second system obtains the order in which the user accesses the second system for that day as the first order, and performs reversible obfuscation processing on the certification data of the corresponding node before outputting the first data. For the same certification data, the reversible obfuscation results are different for different orders of access to the second system on the same day. If the user has no remaining access count to the second system for that day, the user is transferred to the first system. The enterprise qualification certification platform has a deobfuscation program, which is used to obtain the first data output by the second system, receive the first sequence corresponding to the first data input by the user, deobfuscate the first data accordingly, and visualize the certification data obtained by deobfuscation.
[0024] Compared with the prior art, the beneficial effects of the present invention are as follows: (1) This invention achieves substantial separation of access systems and isolation of sensitive data based on user security levels. For low-security personnel who are allowed to query node authentication status but restricted from viewing original authentication data, such as temporary agents, external collaborators, and restricted access personnel, enterprises can allow them to log in to the platform as enterprise users using their enterprise accounts. However, only keys sufficient to be assessed by the platform as the first security level are provided. For high-security personnel with higher trust levels and a limited number of users, they are not only allowed to log in to the platform as enterprise users, but are also given keys sufficient to be assessed by the platform as the second security level. During the access verification phase, the enterprise qualification authentication platform diverts users according to their security level. First-security level users only enter the first system, and their visual presentation content is limited to the authentication status of each node, without outputting any authentication data. Second-security level users enter the second system and are subject to additional access and obfuscation restrictions. This architecture-level diversion eliminates the shallow control that relies solely on account login permissions, fundamentally preventing low-security or restricted accounts from directly obtaining original authentication information through the same query system. This ensures that authentication information involving trade secrets such as design drawings, core processes, and financial statements is not accidentally exposed, greatly reducing the spread of sensitive information.
[0025] (2) This invention constructs a dynamic and reversible obfuscation mechanism bound to the access order of the day, effectively resisting batch sampling and jigsaw puzzle-style reconstruction attacks. For process nodes under review or authentication failure, the second system reversibly obfuscates the authentication data based on the first access order of the user to the second system on that day. The same original data outputs completely different first data under different orders. This dynamic obfuscation with order association makes it impossible for attackers to perform differential comparison or statistical accumulation to recover the original text even if they intercept the obfuscated results returned by multiple queries, due to the lack of a fixed mapping relationship between the results. This breaks the dilemma of traditional static desensitization and fixed encryption where a single leak exposes everything. At the same time, the obfuscation process is reversible, preserving a restoration channel for the data verification needs of legitimate users.
[0026] (3) Each login by high-security personnel must be reported to the enterprise to ensure accurate statistics of the first sequence at the enterprise level and to obtain accurate data for this node's data authentication. If high-security personnel log in and decode without reporting, they will obtain incorrect data due to the inaccuracy of the first sequence, rather than a leak. The content that can be reversibly obfuscated is more than just numerical / semantic obfuscation. Multiple errors during the verification process can help the enterprise determine whether the document is the original data that has been accurately deobfuscated. If multiple data points do not match the statistics confirmed by the enterprise from relevant personnel, it can be judged that the deobfuscation is incorrect and the first sequence input is presumed to be wrong. That is, the offline actual verification of obfuscated and erroneous content can reverse the verification of the accuracy of the first sequence, screen for abnormal concealment and omission behavior of high-security personnel, and standardize the operation behavior of personnel.
[0027] (4) This invention introduces a remaining access count constraint and a forced downgrade mechanism to completely cut off high-frequency malicious query paths. The platform monitors the historical access count of second-level users to the second system daily, calculates the remaining count N, and allows access only when N≥1; after the daily count is exhausted, the user is forcibly transferred to the first system and can only continue to track the authentication status but cannot obtain any material data. The daily login count of a single enterprise is limited, the total login count during the authentication period is limited, and the accounts, keys, and authentication data of different enterprises are different. This hard count constraint and dynamic obfuscation work together to make it impossible for attackers to attempt to decipher the obfuscation rules by automatically crawling obfuscated output samples through tens of thousands of requests, which significantly enhances the protection strength of the system at high-risk nodes such as review and authentication failure.
[0028] (5) This invention provides a user-friendly deobfuscation solution based on sequence parameters, achieving secure and convenient self-service verification. The deobfuscation program configured on the enterprise qualification certification platform, after obtaining the first data output by the second system, only requires the user to input the first sequence corresponding to that data to complete the deobfuscation locally and visually present the restored certification materials. The entire restoration process does not require users to log in to other websites to upload materials, protecting the privacy of user queries and reducing the security management risks of deobfuscation and certification materials. This allows enterprise users to independently verify the submitted supporting materials at review stages with minimal operational burden, significantly improving certification efficiency.
[0029] (6) This invention precisely focuses on high-risk process nodes for dynamic protection, balancing system performance and end-to-end tracking experience. This solution only implements order obfuscation and count for nodes that are under review or have failed certification. For nodes that are pending submission or have passed certification, the first or second system only presents status information and does not need to output sensitive data. This selective protection strategy concentrates security overhead on the time window when certification data is most easily spied on, effectively solving the pain point in the prior art where it is difficult to balance the need for verifiable data under review with the need to prevent the spread of sensitive information, without affecting the smoothness of normal use.
[0030] (7) In this invention, the first data output by the second system is data that has undergone reversible obfuscation. Users must be aware that the first data is not the original data and must actively apply for deobfuscation and input the accurate first sequence in order to restore it. For unauthorized external personnel who have not been informed offline, even if they successfully access the system and obtain the first data, they will only treat the obfuscated data as real data and use it directly, without realizing that they need to perform deobfuscation, thus treating the obfuscated text as valid authentication data, forming a further protection for sensitive information.
[0031] In summary, the present invention forms an overall closed-loop protection system with visible authentication status, restricted data, dynamic confusion, and order deconfusion, and has good auditability. Each output of the second system data is bound to a unique first order. Enterprises or platforms can trace query behaviors. Once a leak occurs, it is possible to locate the specific access order and account, further deterring internal over-authorization and malicious leakage behaviors, and comprehensively improving the data security level in the whole process tracking and self-service query of qualification authentication.
[0032] It should be noted that the present invention does not specifically limit the rules of reversible confusion processing and its deconfusion processing and the corresponding relationship with the order. It is possible to set only one set of reversible confusion rules. Different first orders will result in different confusion results, and it can be accurately deconfused into the real original data when the correct first order is input. It is also possible to set a set of reversible confusion rules for each first order, and the reversible confusion rules for different first orders are different. The number of times the second system is allowed to access per day for a single user can thus be selected as the former. In addition, the number of times the second system is allowed to access per day for a single user can be the upper limit set by the system itself, or the user can customize the number of times the second system is allowed to access per day for this user, as long as it is within the range allowed by the system. A single day refers to a natural day, from 00:00:00 to 23:59:59 of that day.
[0033] In a possible implementation manner, according to the obtained first order, the second system performs reversible confusion processing on the sensitive data part in the authentication material data of the corresponding process node under review or failed, and outputs the overall reversible confusion processed authentication material data as the first data. The sensitive data includes at least one of financial data, technical material data, business information data, and personnel privacy data. The specific data is not limited by the present invention and can be set correspondingly according to the data involved in the actual authentication project of the platform. For example: Financial data includes but is not limited to balance sheets, income statements, cash flow statements, audit reports, etc. Technical material data includes but is not limited to patent lists, software copyright lists, technical route descriptions, R & D investment descriptions, etc. Business information includes but is not limited to customer lists, supplier lists, major contracts, bids, etc. Personnel privacy data includes the names, ID numbers, contact numbers, addresses, educational background and professional title information, social security information, etc. of legal persons, technical leaders, and other important management personnel.
[0034] In one possible implementation, reversible obfuscation processing includes at least one of numerical obfuscation and semantic obfuscation. For example, the asset amounts, liability amounts, net profit amounts, R&D investment amounts, patent numbers in the patent list, software copyright registration numbers, transaction amounts in the customer list, and dates, amounts, personnel ID numbers, and contact numbers in major contracts uploaded by the node are obfuscated according to reversible obfuscation rules to create realistic fake data. Semantic reversible obfuscation is applied to semantic fields such as the names of primary accounts in the asset statement, the constituent items of the profit statement, the types of cash inflows and outflows, the types of audit opinions in the audit report, the names of auditing institutions, technical keywords in the technical roadmap description, the names of R&D investment directions, patent names, software names, personnel names, addresses (province and city), and educational and professional title information.
[0035] In one possible implementation, the qualification platform obtains the authentication status of all process nodes in the entire qualification certification process for all enterprise users. When the authentication status of a process node changes, a notification signal is generated for the corresponding user. The qualification platform generates and notifies the user of the first information based on the notification signal. The first information includes the change information of the authentication status of the corresponding process node. The change information includes the name of the enterprise applying for certification, the name of the qualification certification project, the name of the process node whose authentication status has changed, the authentication status before the change, the authentication status after the change, and the change time.
[0036] Optionally, for nodes whose authentication status changes from under review to approved, the first information also includes a prompt message, which includes the name of the next process node and the current authentication status of the next process node. If the current authentication status of the next process node does not change to under review in the order of priority, the platform confirms the reason for the non-change, and the prompt message also includes the reason for the non-change.
[0037] Optionally, if the reason for not changing is that the user has not provided the qualification certification materials for the next process node, the prompt information will also include the submission requirements for the qualification certification materials for the next process node, including the material name and the latest submission deadline.
[0038] Optionally, the qualification certification platform has user-defined notification time periods. During a notification time period, the first information generated can be directly notified to the user. Outside of a notification time period, the first information generated is retained and notified to the user during the first time period. If the first information includes the latest submission deadline, the earlier of the latest submission deadline and the latest time of the next notification time period is taken as the first time period. The first time period is from the present to the second time period, and the second time period is earlier than the first time period. If the first information does not include the latest submission deadline, the next notification time period is taken as the first time period.
[0039] According to another aspect of the present invention, a method for visual tracking and self-service query of the entire qualification certification process is provided, which allows for self-service query and visual tracking of the entire qualification certification process based on the aforementioned system for visual tracking and self-service query of the entire qualification certification process.
[0040] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely preferred examples and are not intended to limit the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the present invention as claimed. The scope of protection of the present invention is defined by the appended claims and their equivalents.
Claims
1. A visualized tracking and self-service query system for the entire qualification certification process, characterized in that, Integrated into the enterprise qualification certification platform to achieve end-to-end tracking and self-service inquiry, including: The enterprise qualification certification platform receives user access requests, verifies the security level of the accessing enterprise user, and allows the user to access the first system when the user's security level is Level 1. After the user accesses the system, the first system receives query signals from its qualification certification nodes, retrieves the certification status of each node of the accessing enterprise's qualification certification, and presents it visually. When a user's security level is Level 2, the enterprise qualification platform obtains the user's historical access count to the second system for that day, determines the user's remaining access count N to the second system for that day, and allows the user to access the second system when N≥1. After the user accesses the system, the second system receives the query signal from the qualification certification node, retrieves the certification status of each node of the access enterprise's qualification certification and displays it visually. For process nodes that are under review or have failed certification, the second system obtains the order in which the user accesses the second system for that day as the first order, and performs reversible obfuscation processing on the certification data of the corresponding node before outputting the first data. For the same certification data, the reversible obfuscation results are different for different orders of access to the second system on the same day. If the user has no remaining access count to the second system for that day, the user is transferred to the first system. The enterprise qualification certification platform is equipped with a deobfuscation program, which is used to obtain the first data output by the second system, receive the first sequence corresponding to the first data input by the user, deobfuscate the first data accordingly, and visually present the certification data obtained by deobfuscation.
2. The visual tracking and self-service query system for the entire qualification certification process as described in claim 1, characterized in that, The second system, based on the obtained first sequence, performs reversible obfuscation on the sensitive data portion of the authentication data of the corresponding review or failed process nodes, and outputs the overall reversibly obfuscated authentication data as the first data. The sensitive data includes at least one of financial data, technical data, business information data, and personnel privacy data.
3. The visual tracking and self-service query system for the entire qualification certification process as described in claim 1, characterized in that, The reversible obfuscation process includes at least one of numerical obfuscation and semantic obfuscation.
4. The visual tracking and self-service query system for the entire qualification certification process as described in claim 1, characterized in that, The qualification platform obtains the authentication status of all process nodes in the entire qualification authentication process for all enterprise users. When the authentication status of a process node changes, a notification signal is generated for the corresponding user. The qualification platform generates and notifies the user of first information based on the notification signal. The first information includes the change information of the authentication status of the corresponding process node. The change information includes the name of the enterprise applying for certification, the name of the qualification certification project, the name of the process node whose authentication status has changed, the authentication status before the change, the authentication status after the change, and the change time.
5. The visual tracking and self-service query system for the entire qualification certification process as described in claim 4, characterized in that, For nodes whose authentication status changes from under review to approved, the first information also includes a prompt message. The prompt message includes the name of the next process node and the current authentication status of the next process node. If the current authentication status of the next process node does not change to under review, the platform confirms the reason for the non-change, and the prompt message also includes the reason for the non-change.
6. The visual tracking and self-service query system for the entire qualification certification process as described in claim 5, characterized in that, If the reason for no change is that the user has not provided the qualification certification materials for the next process node, the prompt information will also include the submission requirements for the qualification certification materials for the next process node, including the material name and the latest submission deadline.
7. The visual tracking and self-service query system for the entire qualification certification process as described in claim 6, characterized in that, The qualification certification platform has user-defined notification time periods. During a notification time period, the first information generated can be directly notified to the user. Outside of a notification time period, the first information generated is retained and notified to the user during the first time period. If the first information includes the latest submission deadline, the earlier of the latest submission deadline and the latest time of the next notification time period is taken as the first time period. The first time period is from the present to the second time period, and the second time period is earlier than the first time period. If the first information does not include the latest submission deadline, the next notification time period is taken as the first time period.
8. A method for visual tracking and self-service query of the entire qualification certification process, characterized in that, Based on any one of claims 1-7, a visualization tracking and self-service query system for the entire qualification certification process allows users to query and visualize the entire qualification certification process.