Method and apparatus for automatic information auditing having time validity verification

Abstract

Disclosed are a method and apparatus for automatic information auditing having time validity verification. The method comprises: S1, comparing a digest value of acquired information to be audited with those of information in a certificate database one by one, determining whether completely consistent matching information exists, and if completely consistent matching information exists, entering S2, or if completely consistent matching information does not exist, entering S4; S2, determining whether an information submission date of the information to be audited is within an information reuse validity period, and if the information submission date of the information to be audited is within the information reuse validity period, entering S3, or if information submission date of the information to be audited is not within the information reuse validity period, entering S4; S3, keeping corresponding audit information in the certificate database unchanged, releasing a current information submission date, continue to keep an "original audit passing date", and automatically passing and completing the auditing process; and S4, re-auditing the information, directly comparing queryable audit information with a third-party reliable data source, and storing a new audit information passing date and audit information into the database. According to the method, key information of auditing can be effectively identified and extracted, redundant information processing is reduced, the auditing process is accelerated, and the audit efficiency is remarkably improved.

Description

An automated information review method and device with time validity verification Technical Field

[0001] The present invention relates to the field of network communication security technology, and in particular to an automated information review method and device with time validity verification. Background Art

[0002] With the development of the digital age, cybersecurity has become a national priority. As the cornerstone of cybersecurity, digital certificates have seen explosive growth in usage. To ensure the authenticity and legitimacy of digital certificate users, multiple types of information must be reviewed and authenticated. Technical issues

[0003] Traditional digital certificate information authentication methods mostly rely on manual review, which has problems such as low efficiency, prone to errors, and high costs. Even with digital review, when processing the same information review multiple times, procedural operations are performed again, resulting in constant duplication of work content and low work efficiency. Technical Solutions

[0004] To address the above issues, the present invention aims to provide an automated information review method with time validity verification. While ensuring data security, this method can reduce redundant information processing, lower the cost and error rate of multiple reviews, significantly improve review efficiency, and expedite the review process.

[0005] Other features and advantages of the present disclosure will become apparent from the following detailed description, or may be learned in part by practice of the present disclosure.

[0006] According to one aspect of the present disclosure, there is provided an automated information review method with time validity verification, comprising:

[0007] S1, compare the digest values ​​of the obtained information to be reviewed with the information in the certificate database one by one to determine whether there is completely consistent matching information. If yes, proceed to step S2; if not, proceed to step S4;

[0008] S2, determine whether the information submission date of the information to be reviewed is within the information reuse validity period. If yes, proceed to step S3; if not, proceed to step S4;

[0009] S3: The corresponding audit information in the certificate database remains unchanged, the current information submission date is released, and the "original audit approval date" is retained, and the audit process is automatically passed and completed;

[0010] S4, re-audit the information, compare the searchable audit information directly with the third-party reliable data source, and store the new audit information in the database through the daily audit information.

[0011] In some embodiments, before comparing the summary values ​​of the acquired information to be audited with the information in the certificate database one by one, it is necessary to fill in the required audit information, or import the previously existing audit information, and encrypt and submit all the information required for the audit to the server. The server successfully receives the information, and the time of submission of the request is the date of entry into the server as the information submission date.

[0012] In some embodiments, all information required for the review is encrypted and submitted to the server, and the server successfully receives the information, including: the server extracts the information to be reviewed (except the information submission date), and performs a hash operation on the review information to obtain a summary value, and signs the information to be reviewed according to the information encryption rules stored in the server database.

[0013] In some embodiments, the information to be reviewed includes but is not limited to subscriber name, country, province, city, business license number, company address, contact name, ID number, mobile phone number, position, and email address.

[0014] In some embodiments, the information encryption rules stored in the server database include but are not limited to AES algorithm and ECC algorithm.

[0015] In some embodiments, determining whether the information submission date of the information to be reviewed is within the validity period of information reuse includes: calculating the difference between the current "information submission date" and the "original review approval date" of the corresponding information in the certificate database, and determining whether the difference is within the validity period of information reuse.

[0016] In some embodiments, the queryable audit information is directly compared with a third-party reliable data source, and the new audit information passing date and audit information are stored in the database, including: when there is inconsistency between the audit information and the third-party database information, the inconsistent information is marked and fed back to manual review. After all the audit information has passed the review, the audit information passing time is recorded, and the data of this "audit information passing date" is stored in the database together with all the information after the review is passed to complete the review.

[0017] According to another aspect of the present disclosure, there is provided an automated information review device with time validity verification, comprising:

[0018] The information matching module is used to compare the digest values ​​of the acquired information to be reviewed with the information in the certificate database one by one to determine whether there is completely consistent matching information. If so, it enters the time judgment module; if not, it is considered that the information needs to be reviewed again and enters the third-party verification and review module;

[0019] The time judgment module is used to judge whether the information submission date of the information to be reviewed is within the information reuse validity period. If yes, it will enter the general review module; if not, it will enter the third-party verification review module;

[0020] The general audit module is used to receive the time judgment result instruction and automatically pass and complete the audit process;

[0021] The third-party verification and audit module is used to receive information matching result instructions and time judgment result instructions, enter the audit process to audit information, directly compare the queryable audit information with the third-party reliable data source, and store the new audit information in the database through the daily audit information.

[0022] According to another aspect of the present disclosure, an electronic device is provided, comprising: a memory storing a plurality of instructions; and a processor loading instructions from the memory to execute steps in any one of the automated information review methods with time validity verification provided in the embodiments of the present application.

[0023] According to another aspect of the present disclosure, a computer-readable storage medium is provided, including: the computer-readable storage medium stores multiple instructions, and the instructions are suitable for a processor to load to execute the steps in any one of the automated information review methods with time validity verification provided in the embodiments of the present application. Beneficial effects

[0024] The present invention can effectively identify and extract key information for auditing and reduce redundant information processing.

[0025] Based on historical audit records, the present invention formulates an automatic identification strategy, reduces the cost and error probability of multiple audits, and significantly improves audit efficiency.

[0026] The present invention provides audit personnel with audit result feedback of important information, thereby speeding up the audit process.

[0027] The present invention ensures the confidentiality and integrity of information during the audit process and prevents information leakage and tampering. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0029] FIG1 is an architecture diagram of an automated information review method with time validity verification provided by an embodiment of the present application;

[0030] FIG2 is a specific flow chart of an automated information review method with time validity verification provided by an embodiment of the present application;

[0031] FIG3 is a schematic diagram of the structure of an automated information review device with time validity verification provided by an embodiment of the present application;

[0032] FIG4 is a schematic structural diagram of an electronic device provided in an embodiment of the present application. Modes for Carrying Out the Invention

[0033] Exemplary embodiments of the present invention will now be described more fully with reference to the accompanying drawings. However, exemplary embodiments can be implemented in various forms, and it should not be understood that the present invention is limited to the embodiments set forth herein. On the contrary, providing these exemplary embodiments enables the present invention to be more comprehensive and complete, making it easier to fully convey the inventive concept to those skilled in the art. In the figures, the same reference numerals represent the same or similar elements, components or parts, and thus their repeated description will be omitted.

[0034] Under the premise of being consistent with the technical concept of the present invention, the features, structures, characteristics or other details described in a specific embodiment do not exclude that they can be combined in one or more other embodiments in a suitable manner.

[0035] In the description of specific embodiments, the features, structures, characteristics, or other details of the present invention are described to enable those skilled in the art to fully understand the embodiments. However, this does not preclude those skilled in the art from practicing the technical solutions of the present invention without one or more of the specific features, structures, characteristics, or other details.

[0036] The flowcharts shown in the accompanying drawings are for illustrative purposes only and do not necessarily include all contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps may be decomposed, while others may be combined or partially combined. Therefore, the actual execution order may vary depending on the actual situation.

[0037] The term "and / or" or "and / or" includes all combinations of any one or more of the associated listed items.

[0038] The embodiments of the present application provide an automated information review method and device with time validity verification.

[0039] Specifically, the automated information review device with time validity verification can be integrated into an electronic device, such as a terminal or server. The terminal can be a mobile phone, tablet computer, smart Bluetooth device, laptop computer, or personal computer (PC); the server can be a single server or a server cluster consisting of multiple servers.

[0040] In some embodiments, the server may also be implemented in the form of a terminal.

[0041] It should be noted that the serial numbers of the following embodiments are not intended to limit the preferred order of the embodiments.

[0042] In this embodiment, an automated information review method with time validity verification is provided, as shown in FIG2 . The specific process of the method can be as follows:

[0043] S1, compare the digest values ​​of the obtained information to be reviewed with the information in the certificate database one by one to determine whether there is completely consistent matching information. If yes, proceed to step S2; if not, proceed to step S4;

[0044] In some instances, when a subscriber applies for a digital certificate, they encrypt and submit relevant information, including their organization name (O), registered country (N), registered province (S), registered address (A), registered agency code (Code), phone number (T), contact person (C), phone number (M), ID (ID), position (JD), and email address (Email), to a certificate authentication or registration system. Upon receiving the request, the system records the current date as the submission date (Date'). The system then obtains relevant audit information (excluding Date') (O, N, S, A, Code, T, C, M, ID, JD, and Email), signs it using an ECC algorithm, and stores it as Info. The system then performs a hash operation on the audit information to generate a digest value (Hash'), which is then compared against the digest values ​​of existing audit information in the system database. If the two values ​​match (i.e., Hash equals Hash'), the information is considered valid and the process proceeds to step S2. Otherwise, the process proceeds to step S4.

[0045] S2, determine whether the information submission date of the information to be reviewed is within the information reuse validity period. If yes, proceed to step S3; if not, proceed to step S4;

[0046] In some instances, assuming that the public unanimously believes that information that has previously passed the review does not need to be verified again within 365 days (that is, 365 days is considered to be the validity period for information reuse), the system will obtain Date', calculate the difference between it and the information review date corresponding to the summary value Hash in the database, and determine whether the information submission date is within the validity period for information reuse. If so, proceed to step S3; if not, proceed to step S4.

[0047] S3: The corresponding audit information in the certificate database remains unchanged, the current information submission date is released, and the "original audit approval date" is retained, and the audit process is automatically passed and completed;

[0048] In some instances, when the difference between Date' and Date is within 365 days, the system will directly reuse the existing summary value Hash and all information corresponding to the Hash (including Date and original signature information Info), and will not store Date', automatically passing the information review process.

[0049] S4, re-audit the information, compare the searchable audit information directly with the third-party reliable data source, and store the new audit information in the database through the daily audit information.

[0050] In some cases, if the difference between Date' and Date is 365 days or more, the existing audit information in the database will be deemed invalid by the system and require re-audit. The system connects to third-party trusted data sources through API interfaces to verify the audit information. For example, the system verifies the authenticity of O, N, S, A, Code, and T information through integration with Qichacha and the National Enterprise Credit Information Publicity System, and verifies the authenticity of C, M, and ID information through integration with Databao. When the information submitted by the subscriber is completely consistent with that of the third-party reliable data source, the new audit information approval date is recorded and stored in the database along with the new audit information after signature and hash calculation. When the information submitted by the subscriber is partially inconsistent with that of the third-party reliable data source (for example, if some values ​​cannot be captured through the third-party source, the system will deem them null), the system will mark the inconsistent information and feedback it to manual review. After the manual review is passed, the new audit information approval date is recorded and stored in the database along with the new audit information after signature and hash calculation.

[0051] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments and methods, the present application also provides an automated information review device with time validity verification. Referring to FIG3 , an embodiment of the automated information review device with time validity verification in an embodiment of the present invention includes:

[0052] The information matching module 301 is used to compare the digest values ​​of the acquired information to be reviewed with the information in the certificate database one by one to determine whether there is completely consistent matching information. If so, the process proceeds to the time judgment module; if not, the process considers that the information needs to be reviewed again and proceeds to the third-party verification and review module;

[0053] The time determination module 302 is used to determine whether the information submission date of the information to be reviewed is within the information reuse validity period. If yes, the process enters the general review module; if not, the process enters the third-party verification review module.

[0054] The general review module 303 is used to receive the time judgment result instruction and automatically pass and complete the review process;

[0055] The third-party verification and audit module 304 is used to receive information matching result instructions and time judgment result instructions, enter the audit process to audit information, directly compare the searchable audit information with the third-party reliable data source, and store the new audit information in the database through the daily audit information.

[0056] The specific implementation of the device in the above embodiment can be found in the method embodiment, and has the corresponding beneficial effects of the method embodiment, which will not be repeated here.

[0057] In some embodiments, the information matching module 301 includes an information input module and an information verification module, wherein the information generation module is configured to: fill in the required audit information, or import previously existing audit information, and encrypt and submit all the information required for the audit to the server. The server successfully receives the information, and the time of submission of the request is the date of entry into the server as the information submission date;

[0058] The information verification module is configured at: the server extracts the information to be reviewed (excluding the information submission date), performs a hash operation on the review information to obtain a summary value, and signs the information to be reviewed according to the information encryption rules stored in the server database.

[0059] In some embodiments, the information to be reviewed includes but is not limited to subscriber name, country, province, city, business license number, company address, contact name, ID number, mobile phone number, position, and email address.

[0060] In some embodiments, the information encryption rules stored in the server database include but are not limited to AES algorithm and ECC algorithm.

[0061] In some embodiments, the time judgment module 302 includes a time difference calculation module, which is configured to: calculate the difference between the current "information submission date" and the "original review approval date" of the corresponding information in the certificate database, and determine whether the difference is within the information reuse validity period.

[0062] In some embodiments, the third-party verification and review module 304 includes an automated third-party information comparison module, which is configured to: when there is inconsistency between the review information and the third-party database information, the inconsistent information is marked and fed back to manual review. After all the review information passes the review, the review information passing time is recorded, and the data of this "review information passing date" is stored in the database together with all the information after the review passes to complete the review.

[0063] The present application also provides an electronic device, as shown in FIG4 , which is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. In FIG4 , the electronic device may include: a processor 401, a memory 402, an input / output interface 403, a communication interface 404, and a bus 405. The processor 401, the memory 402, the input / output interface 403, and the communication interface 404 are connected to each other within the device via the bus 405.

[0064] The memory 402 stores machine-readable instructions executable by the processor 401. When the electronic device is running, the processor 401 communicates with the memory 402 through the bus 405. When the machine-readable instructions are executed by the processor 401, the steps of the automated information review method with time validity verification in the method embodiments shown in Figures 1, 2 and 3 above can be executed.

[0065] The input / output interface 403 is used to connect to an input / output module to implement information input and output. The input / output module can be configured as a component within the device (not shown) or can be externally connected to the device to provide corresponding functions. Input devices may include a keyboard, mouse, touch screen, various sensors, etc., while output devices may include a display, speaker, vibrator, indicator light, etc.

[0066] The communication interface 404 is used to connect to a communication module (not shown) to enable communication between the device and other devices. The communication module can communicate via a wired method (such as USB, network cable, etc.) or a wireless method (such as mobile network, WiFi, Bluetooth, etc.).

[0067] The bus 405 comprises a pathway for transmitting information between various components of the device (eg, the processor 401 , the memory 402 , the input / output interface 403 , and the communication interface 404 ).

[0068] It should be noted that although the above device only shows the processor 401, the memory 402, the input / output interface 403, the communication interface 404, and the bus 405, in a specific implementation, the device may also include other components necessary for normal operation. In addition, it will be understood by those skilled in the art that the above device may only include the components necessary to implement the embodiments of this specification, and does not necessarily include all the components shown in the figure.

[0069] The specific implementation of the electronic device of the above embodiment can be found in the method embodiment, and has the corresponding beneficial effects of the method embodiment, which will not be repeated here.

[0070] An embodiment of the present application also provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the steps of the automated information review method with time validity verification in the method embodiments shown in Figures 1, 2 and 3 above can be executed. The specific implementation method can be found in the method embodiments and will not be repeated here.

[0071] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the methods, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0072] In the several embodiments provided in this application, it should be understood that the disclosed methods and devices can be implemented in other ways. The device embodiments described above are merely illustrative. For example, the division of the units is merely a logical function division, and other division methods may be used in actual implementation.

[0073] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0074] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0075] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a non-volatile computer-readable storage medium that is executable by a processor. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk, and other media that can store program codes.

[0076] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present application, which are used to illustrate the technical solutions of the present application, rather than to limit them. The scope of protection of the present application is not limited thereto. Although the present application has been described in detail with reference to the above-mentioned embodiments, those skilled in the art should understand that any person skilled in the art can modify or easily conceive of changes to the technical solutions described in the above-mentioned embodiments within the technical scope disclosed in the present application, or perform equivalent replacements for some of the technical features thereof. These modifications, changes, or replacements do not deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the scope of protection of the present application. Therefore, the scope of protection of the present application should be based on the scope of protection of the claims.

Claims

1. An automated information auditing method with time validity verification, characterized in that, The method includes: S1. Compare the obtained information to be audited with the information in the certificate database one by one for the digest value, and determine whether there is exactly the same matching information. If so, go to step S2; if not, go to step S4; S2. Determine whether the information submission date of the information to be audited is within the information reuse validity period. If so, go to step S3; if not, go to step S4; S3. The corresponding audit information in the certificate database remains unchanged, release the current information submission date, continue to retain the "original audit passed date", and automatically pass and complete the audit process; S4. Re-audit the information, directly compare the queryable audit information with a third-party reliable data source, and store the new audit information passed date and audit information in the database.

2. The automated information auditing method with time validity verification according to claim 1, characterized in that, Before comparing the obtained information to be audited with the information in the certificate database one by one for the digest value, it includes: It is necessary to fill in the information required for audit, or import the previously existing audit information, and encrypt and submit all the information required for audit to the server. When the server successfully receives the information, the request submission time takes the date of entering the server as the information submission date.

3. An automated information review method with time validity verification as claimed in claim 2, characterized in that, The encrypting and submitting all the information required for audit to the server and the server successfully receiving the information includes: The server extracts the information to be audited (excluding the information submission date), performs a hash operation on the audit information to obtain a digest value, and signs the information to be audited according to the information encryption rules stored in the server database.

4. The automated information auditing method with time validity verification according to claim 3, wherein The information to be audited includes but is not limited to subscriber name, country, province, city, business license number, company address, contact person name, ID number, mobile phone number, position, and email address.

5. The automated information review method with time validity verification as claimed in claim 3, wherein The information encryption rules stored in the server database include but are not limited to the AES algorithm and the ECC algorithm.

6. The automated information auditing method with time validity verification as claimed in claim 1, wherein, Determining whether the information submission date of the information to be audited is within the information reuse validity period includes: Calculate the difference between the current "information submission date" and the "original audit passed date" of the corresponding information in the certificate database, and determine whether the difference is within the information reuse validity period.

7. An automated information auditing method with time validity verification as claimed in claim 1, characterized in that Directly comparing the queryable audit information with a third-party reliable data source and storing the new audit information passed date and audit information in the database includes: When there is an inconsistency between the audit information and the information in the third-party database, mark the inconsistent information and feedback it to the manual for re-review. After all the information to be audited passes the audit, record the audit information passing time, and store the data of the current "audit information passed date" and all the information after passing the audit in the database together to complete the audit.

8. An automated information auditing device with time validity verification, characterized in that, It includes: An information matching module, used to compare the obtained information to be audited with the information in the certificate database one by one for the digest value, and determine whether there is exactly the same matching information. If so, enter the time judgment module; if not, it is considered that the information needs to be re-audited and enter the third-party verification audit module; A time judgment module, used to determine whether the information submission date of the information to be audited is within the information reuse validity period. If so, enter the normal audit module; if not, enter the third-party verification audit module; The general review module is used to receive the time judgment result instruction, automatically pass and complete the review process; The third-party verification review module is used to receive the information matching result instruction and the time judgment result instruction, enter the review process to review the information, directly compare the queryable review information with the third-party reliable data source, and store the new review information and the review information by date in the database.

9. An electronic device, characterized in that, It includes a processor and a memory, and the memory stores multiple instructions; the processor loads the instructions from the memory to execute the steps in an automated information review method with time validity verification as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores multiple instructions, and the instructions are suitable for being loaded by the processor to execute the steps in an automated information review method with time validity verification as described in any one of claims 1 to 7.

Images