CN114462072A - A privacy data protection system and method - Google Patents

Abstract

The present application relates to the field of blockchain technology, and in particular, to a privacy data protection system and method, an electronic bill generation module, which is used to generate an electronic bill containing information of each electronic bill, and send the information of each electronic bill to a parsing processing module; The parsing and processing module is used to respectively determine the data type of each electronic bill information, and send each electronic bill information to the privacy protection platform; the privacy protection platform is used to obtain the billing request information sent by the client, and send the billing request information to the billing request information. The bill information is transmitted to the electronic bill generation module, the encrypted data type transmitted by the hardware encryption module is privacy electronic bill information, the encrypted electronic bill information is stored in the privacy collection, and the non-private electronic bill information is stored in the non-private electronic bill information. Privacy collection; hardware encryption module, used to encrypt private electronic bill information, so that the security of electronic bill information stored in the blockchain can be improved.

Description

A privacy data protection system and method

technical field

The present application relates to the field of blockchain technology, and in particular, to a privacy data protection system and method.

Background technique

At present, when companies issue bills, they usually issue them through special tax control equipment. Since tax control equipment needs to be purchased and maintained, the traditional method of bill issuance is costly and inefficient.

With the development of blockchain technology, when issuing bills, electronic bills can be issued through blockchain, which can reduce the cost of bill issuance. However, due to the characteristics of decentralization, openness and transparency of blockchain, the The electronic bill information is stored in the blockchain, and any node can view the stored electronic bill information at will, which may cause the leakage of personal privacy information contained in the electronic bill information. The security of stored electronic bill information has become an urgent problem to be solved.

SUMMARY OF THE INVENTION

The embodiments of the present application provide a privacy data protection system and method, so as to improve the security of electronic bill information stored in the blockchain.

The specific technical solutions provided by the embodiments of the present application are as follows:

A privacy data protection system comprising:

an electronic bill generation module, configured to generate electronic bills containing information of various electronic bills according to the bill information sent by the privacy protection platform, and send the information of each electronic bill to the analysis processing module;

a parsing and processing module, configured to respectively determine the data types of the electronic bill information, and send the electronic bill information to the privacy protection platform, wherein the data type is privacy or non-privacy;

The privacy protection platform is used to obtain the billing request information sent by the client, and transmit the bill information in the billing request information to the electronic bill generation module, and send the electronic bill information whose data type is privacy to hardware encryption The module receives the encrypted electronic bill information whose data type is privacy, stores the encrypted electronic bill information whose data type is privacy in a privacy collection, and stores the encrypted data type as non-private electronic bill information. The ticket information is stored in a non-private collection;

The hardware encryption module is used for encrypting the electronic bill information whose data type is privacy.

Optionally, if the billing request information further includes user information, the privacy protection platform further includes:

An endorsement node, configured to verify the validity of the signature in the user information according to the public key of the client, and if it is determined that the verification is passed, send the ticket information to the signature verification module in the privacy protection platform;

The signature verification module is used to verify the validity of the ticket information. If it is determined that the verification is passed, the ticket information is sent to the consensus node. If the verification is determined to be unsuccessful, the issuance failure information is generated, and the issuance failed information is sent to the client;

The consensus node is used to add the ticket information to the ticket issuance queue for sorting, and when it is determined that the time when the ticket information is added to the ticket issuance queue is greater than the time threshold, the ticket information is packaged into blocks, and Broadcast the block to each node of the blockchain.

Optionally, the privacy protection platform further includes:

The electronic bill mapping module is configured to perform a mapping calculation on the encrypted electronic bill information whose data type is privacy and the user information based on a preset mapping algorithm, determine the mapped privacy information identifier, and determine the and a non-privacy information identifier mapped with the data type of non-private electronic bill information and the user information, and sending the private information identifier and the non-privacy information identifier to the client.

Optionally, the privacy protection platform is also used for:

receiving a query request sent by the client, wherein the query request at least includes a privacy information identifier and a non-privacy information identifier;

According to the privacy information identifier, determine the user information mapped with the privacy information identifier and the encrypted electronic bill information whose data type is privacy, and determine the data type corresponding to the privacy information identifier according to the non-privacy information identifier. The user information mapped by the non-privacy information identifier and the electronic bill information whose data type is non-privacy;

The encrypted electronic bill information whose data type is privacy is transmitted to the hardware encryption module, and the electronic bill information whose data type is privacy is transmitted by the hardware encryption module is received.

Optionally, the hardware encryption module is also used for:

Decrypt the encrypted electronic bill information, obtain the electronic bill information whose data type is privacy, and send the electronic bill information whose data type is privacy to the privacy protection platform.

Optionally, if the query request also includes user query information;

Then the endorsement node is further configured to verify the validity of the signature in the user query information according to the public key of the client, and if it is determined that the verification is passed, send the user query information to the signature verification module;

The signature verification module is also used to verify the validity of the private information identifier and the non-private information identifier. If it is determined that the verification is passed, the query request is sent to the consensus node. If it is determined that the verification is not passed, the query fails to be generated. information, and send the query failure information to the client;

The consensus node is further configured to add the query request to the query queue for sorting, and when it is determined that the time when the query request is added to the query queue is greater than a time threshold, the query request is packaged into blocks, and Broadcast the block to each node of the blockchain.

Optionally, the privacy protection platform is also used for:

Assemble according to the electronic bill information whose data type is non-private and the electronic bill information whose data type is private to generate an electronic bill;

Sending the electronic ticket to the client, so that the client displays the electronic ticket in a preset display manner.

A privacy data protection method comprising:

According to the bill information sent by the client, an electronic bill containing the information of each electronic bill is generated;

Respectively determine the data type of each electronic bill information, wherein the data type is privacy or non-privacy;

Encrypting the electronic bill information whose data type is private, storing the encrypted electronic bill information with private data type in a privacy set, and storing the electronic bill information with non-privacy data type in non-privacy gather.

Optionally, if the billing request information further includes user information, before generating an electronic ticket including information on each electronic ticket, the method further includes:

Verify the validity of the signature in the user information according to the public key of the client;

If it is determined that the verification is passed, the validity of the ticket information is verified;

If it is determined that the verification of the ticket information is passed, the ticket information is added to the ticket issuance queue for sorting, and when it is determined that the time when the ticket information is added to the ticket issuance queue is greater than the time threshold, the ticket information is packaged A block is formed, and the block is broadcast to each node of the block chain. If it is determined that the verification of the ticket information fails, the issuance failure information is generated, and the issuance failure information is sent to the client.

Optionally, after encrypting the electronic bill information whose data type is privacy, the method further includes:

Based on a preset mapping algorithm, perform a mapping calculation on the encrypted electronic bill information whose data type is privacy and the user information, and determine the mapped privacy information identifier;

Determine the non-privacy information identifier mapped with the electronic bill information whose data type is non-private and the user information, and send the private information identifier and the non-privacy information identifier to the client.

Optionally, after storing the electronic bill information whose data type is non-privacy in the non-privacy set, the method further includes:

receiving a query request sent by the client, wherein the query request at least includes a privacy information identifier and a non-privacy information identifier;

According to the privacy information identifier, determine the user information mapped with the privacy information identifier and the encrypted electronic bill information whose data type is privacy, and determine the data type corresponding to the privacy information identifier according to the non-privacy information identifier. The user information mapped by the non-privacy information identifier and the electronic bill information whose data type is non-privacy;

Decrypt the encrypted electronic bill information to obtain the electronic bill information whose data type is privacy.

Optionally, if the query request further includes user query information, after receiving the query request sent by the client, the query request further includes:

Verify the validity of the signature in the user query information according to the public key of the client;

If it is determined that the verification is passed, the legality verification is performed on the privacy information identifier and the non-privacy information identifier;

If it is determined that the verification of the private information identifier and the non-private information identifier is passed, the query request is added to the query queue for sorting, and when it is determined that the time when the query request was added to the query queue is greater than the time threshold, all The query request is packaged into blocks, and the blocks are broadcast to each node of the blockchain. If it is determined that the verification fails, query failure information is generated, and the query failure information is sent to the client.

Optionally, after decrypting the encrypted electronic bill information to obtain the electronic bill information whose data type is privacy, the method further includes:

Assemble according to the electronic bill information whose data type is non-private and the electronic bill information whose data type is private to generate an electronic bill;

Sending the electronic ticket to the client, so that the client displays the electronic ticket in a preset display manner.

An electronic device includes a memory, a processor, and a computer program stored on the memory and running on the processor. The processor implements the steps of the above privacy data protection method when the processor executes the program.

A computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, implements the steps of the above privacy data protection method.

In the embodiment of the present application, the electronic bill generation module is configured to generate electronic bills including the information of each electronic bill according to the bill information sent by the privacy protection platform, and send the information of each electronic bill to the parsing and processing module, and the parsing and processing module uses To determine the data type of each electronic bill information, and send each electronic bill information to the privacy protection platform, the privacy protection platform is used to obtain the billing request information sent by the client, and transmit the bill information in the billing request information to the electronic The bill generation module sends the electronic bill information whose data type is privacy to the hardware encryption module, receives the encrypted electronic bill information whose data type is privacy, and stores the encrypted electronic bill information whose data type is privacy in the privacy collection, The electronic bill information whose data type is non-privacy is stored in the non-privacy collection, and the hardware encryption module is used to encrypt the electronic bill information whose data type is private. To protect the data, encrypt the electronic bill information whose data type is private in the electronic bill, and store the encrypted personal privacy data in the privacy collection, so that the personal privacy data in the electronic bill information can be kept confidential to achieve For the purpose of protecting personal privacy data, the privacy data protection system in the embodiment of the present application can not only convert the traditional electronic bill issuance method to the blockchain-based electronic bill issuance method, improve the efficiency of bill issuance, but also improve the efficiency of bill issuance. It improves the security and reliability of electronic bill issuance.

Description of drawings

1 is a schematic structural diagram of a privacy data protection system in an embodiment of the application;

2 is another schematic structural diagram of a privacy data protection system in an embodiment of the application;

3 is a flowchart of a method for issuing an electronic bill in an embodiment of the application;

FIG. 4 is a flowchart of an electronic bill query method in an embodiment of the application;

5 is a functional diagram of a privacy protection platform in an embodiment of the application;

FIG. 6 is a schematic structural diagram of an electronic device in an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

At present, when companies issue bills, they usually issue them through special tax control equipment. Since tax control equipment needs to be purchased and maintained, the traditional method of bill issuance is costly and inefficient.

Blockchain is a term in the field of information technology. In essence, it is a shared database, and the data or information stored in it has the characteristics of "unforgeable", "full traces", "traceable", "open and transparent" and "collective maintenance". Based on these characteristics, blockchain technology has laid a solid "trust" foundation, created a reliable "cooperation" mechanism, and has broad application prospects.

With the development of blockchain technology, when issuing bills, electronic bills can be issued through the blockchain, and the electronic bill information can be stored in the blockchain, which can reduce the cost of bill issuance. However, at present, the bottom layer of the blockchain Most data storage technologies use file form and NoSql storage to improve reading performance. From an application perspective, blockchain is a distributed shared ledger and database, which is decentralized, non-tamperable, traceable throughout the process, traceable, Collective maintenance, openness and transparency and other characteristics, although these characteristics ensure the "honesty" and "transparency" of the blockchain, and lay the foundation for the creation of trust in the blockchain, however, when electronic bill information is stored in the blockchain, any one Nodes can view the stored electronic bill information at will, which may cause the leakage of personal privacy information contained in the electronic bill information. Therefore, how to improve the security of the electronic bill information stored in the blockchain has become a problem. Problems to be solved.

The electronic bill generation module is used to generate electronic bills including the information of each electronic bill according to the bill information sent by the privacy protection platform, and send the information of each electronic bill to the analysis processing module, and the analysis processing module is used to determine the electronic bills respectively. The data type of the information, and each electronic bill information is sent to the privacy protection platform. The privacy protection platform is used to obtain the billing request information sent by the client, and transmit the bill information in the billing request information to the electronic bill generation module. The electronic bill information whose type is privacy is sent to the hardware encryption module, the encrypted electronic bill information whose data type is privacy is received, and the encrypted electronic bill information whose data type is privacy is stored in the privacy collection, and the data type is non-private. The private electronic bill information is stored in the non-private collection, and the hardware encryption module is used to encrypt the electronic bill information whose data type is private. In this way, the electronic bill information obtained by issuing can be synchronized to the In each node of the blockchain, the data related to personal privacy information in the electronic bill information is encrypted, and the encrypted electronic bill information is stored in the privacy collection, which can prevent the leakage of personal privacy information and overcome personal privacy information. There is a risk of leakage, and the hardware encryption module is used to complete the hardware encryption and decryption of personal privacy data. The digital certificate is stored in the hardware encryption module and cannot be read to prevent the private key from being stolen, which can improve the security protection of privacy data.

Based on the above embodiment, referring to FIG. 1 , which is a schematic structural diagram of a privacy data protection system in an embodiment of the present application, at least including an electronic bill generation module, a parsing processing module, a privacy protection platform and a hardware encryption module.

1) The electronic bill generation module is used for generating electronic bills including the information of each electronic bill according to the bill information sent by the privacy protection platform, and sending the information of each electronic bill to the analysis processing module.

In the embodiment of the present application, the electronic bill generation module is configured to receive bill information sent by the privacy protection platform, and generate electronic bills containing the information of various electronic bills according to the bill information, and then generate the electronic bill information contained in the electronic bill information It is transmitted to the parsing processing module.

Wherein, the electronic ticket generation module can be, for example, a microservice.

Wherein, the ticket information is the information related to the ticket input by the user in the client, for example, it may be the amount of the ticket, the duration of the ticket, the issuer of the ticket and the transfer information of the ticket rights, which is not limited in this embodiment of the present application.

The electronic bill information is the information contained in the electronic bill generated according to the bill information, such as the amount of the electronic bill, the duration of the electronic bill, the issuer of the electronic bill, and the transfer information of the electronic bill, which is not performed in this embodiment of the application. limit.

2) A parsing and processing module, used for respectively determining the data type of each electronic bill information, and sending each electronic bill information to the privacy protection platform.

where the data type is private or non-private.

In the embodiment of the present application, after receiving the electronic bill information transmitted by the electronic bill generating module, the analysis processing module identifies the data type of each electronic bill information based on the pre-configured electronic bill information data items, and determines each electronic bill The data type of the information, the data type is private or non-private, that is to say, the data type of some electronic bill information of the electronic bill is private, and the data type of other electronic bill information is non-private, and the electronic bill information is classified as non-private The data and privacy data are divided into two parts, and then each electronic bill information is sent to the privacy protection platform.

3) The privacy protection platform is used to obtain the billing request information sent by the client, and transmit the bill information in the billing request information to the electronic bill generation module, and send the electronic bill information whose data type is privacy to the hardware encryption module, and receive encryption. The resulting data type is private electronic bill information, and the encrypted data type is private electronic bill information is stored in a private set, and the data type is non-private electronic bill information is stored in a non-private set.

In the embodiment of the present application, when the user needs to issue an electronic ticket, the ticket information is input to the client, and the client generates billing request information according to the bill information and user information input by the user, and sends the billing request information to the privacy protection platform, and then The privacy protection platform obtains the billing request information sent by the client, and sends the bill information in the billing request information to the electronic bill generating module.

Then, the electronic bill generation module generates the electronic bill information of the electronic bill, and after the analysis processing module determines the data type of each electronic bill information, the privacy protection platform obtains the electronic bill information transmitted by the analysis processing module, and sets the data type as private The electronic bill information is sent to the hardware encryption module, and the encrypted data type returned by the hardware encryption module is privacy electronic bill information.

Finally, the privacy protection platform stores the encrypted electronic bill information whose data type is private in a private collection, and stores the electronic bill information whose data type is non-privacy in a non-private collection.

Among them, the privacy set is located in the privacy area, and the non-private set is located in the non-privacy area.

Further, in order to improve the security of the system, in the embodiment of the present application, the privacy protection platform further includes if the billing request information also includes user information, the privacy protection platform also includes an endorsement node, a signature verification module and a consensus node. Specifically, for:

1. The endorsement node is used to verify the validity of the signature in the user information according to the client's public key. If the verification is determined to pass, the ticket information will be sent to the signature verification module in the privacy protection platform.

In the embodiment of this application, when the billing request information also includes user information, when the privacy protection platform receives the user information, the endorsement node in the privacy protection platform will also receive the user information. Therefore, the endorsement node is based on the endorsement mechanism requirements. , to perform endorsement verification on the user information, that is, the endorsement node verifies the validity of the signature contained in the user information according to the client's public key, and if it is determined that the verification is passed, the electronic ticket information is sent to the verification platform in the privacy protection platform. If it is determined that the verification fails, the issuance failure information will be generated, and the issuance failure information will be sent to the client for display, so that the user can re-issue the electronic ticket.

It should be noted that, in the embodiment of this application, the endorsement node is used to verify the validity of the user's identity. If the user's identity validity verification fails, it is determined that the user is an illegal user, and there is no need to verify the obtained user's identity. The ticket information is verified again, which can improve the performance of the system and reduce the amount of calculation.

2. The signature verification module is used to verify the validity of the bill information. If it is determined that the verification is passed, the bill information will be sent to the consensus node. If it is determined that the verification has not passed, the issuance failure information will be generated, and the issuance failure information will be sent to the customer. end.

In the embodiment of the present application, the signature verification module is used to verify the validity of the signature in the ticket information, and determine whether the ticket information is legal information. If it is determined that the verification is passed, the ticket information is sent to the consensus node. If passed, the issuance failure information is generated, and the issuance failure information is sent to the client for display, so that the user can re-issue the electronic ticket.

It should be noted that, in this embodiment of the present application, the signature verification module is used to verify the validity of the bill information transmitted by the client. In this way, before issuing an electronic bill, the validity of the bill information is checked, which can improve the system reliability. safety.

3. The consensus node is used to add the bill information to the bill issuance queue for sorting. When it is determined that the time when the bill information is added to the bill issuance queue is greater than the time threshold, the bill information is packaged into blocks and the block is broadcast to the district. Each node of the blockchain.

In the embodiment of the present application, since there may be multiple bill issuance transactions in the blockchain at the same time, the bill information needs to be added to the bill issuance queue for sorting. If it is determined that the time when the bill information is added to the bill issuance queue is greater than the time threshold When the ticket information is packaged into blocks, the block is broadcast to each node of the blockchain, and then the ticket information is processed according to the order.

Further, in the embodiment of the present application, after adding the bill information to the bill issuing queue for sorting, it can also be determined whether the number of bill information in the bill issuing queue is greater than the preset number threshold, if it is determined that the bill information in the bill issuing queue is determined. When the number is greater than the preset number threshold, the bill information is packaged into blocks, and the block is broadcast to each node of the blockchain, and then the bill information is processed according to the order.

For example, assuming that the preset quantity threshold is 1k, and the quantity of bill information contained in the bill issuance queue is 1k, then after the bill information is added to the bill issuance queue, the number of bill information contained in the bill issuance queue will be 1k. It is 1001. At this time, it is determined that the number of bill information in the bill issuance queue is greater than the quantity threshold, then the bill information is packaged into blocks, and the packaged blocks are broadcast to each point solution of the blockchain, and the bill issuance queue is based on Electronic bills are issued according to the order of each bill information in the system.

Further, in the embodiment of the present application, in order to facilitate the user to query the encrypted privacy data, the privacy protection platform in the embodiment of the present application further includes an electronic bill mapping module.

The electronic bill mapping module is used to perform mapping calculation on the encrypted electronic bill information and user information whose data type is private based on a preset mapping algorithm, determine the mapped private information identifier, and determine the data type is non-private The e-ticket information and the non-private information identifier mapped by the user information, and send the private information identifier and the non-private information identifier to the client.

In the embodiment of the present application, the electronic bill mapping module is first used to perform a mapping calculation on the encrypted data type of electronic bill information and user information based on a preset mapping algorithm, and determine that the encrypted data type is private electronic bill information. The unique privacy information identifier of bill information and user information, that is to say, the encrypted electronic bill information and user information whose data type is privacy corresponds to a privacy information identifier, and the determined encrypted data type is privacy electronic The correspondence between bill information, user information and privacy information identifiers is stored in the privacy set, so that when the encrypted data type is privacy electronic ticket information and user information need to be queried, they can be queried according to the privacy information identifiers.

In addition, the mapping calculation is performed on the electronic bill information whose data type is non-private and user information, and the mapping relationship between the blockchain between the electronic bill information whose data type is non-privacy and user information and the corresponding non-private information are determined. logo.

For example, the calculated non-privacy information identifier is A, which is not limited in this embodiment of the present application.

Finally, the private information identifier and the non-privacy information identifier are sent to the client, so that the user can query the required electronic bill according to the private information identifier and the non-privacy information identifier.

4) The hardware encryption module is used to encrypt the electronic bill information whose data type is privacy.

In the embodiment of the present application, the hardware encryption module is configured to encrypt electronic bill information whose data type is privacy based on a preset encryption algorithm, obtain encrypted electronic bill information whose data type is privacy, and encrypt the encrypted data type Send the private electronic bill information to the privacy protection platform.

Further, in the embodiment of this application, the user can also query the generated electronic bill, and the privacy protection platform is also used for:

First, receive the query request sent by the client.

Wherein, the query request includes at least a privacy information identifier and a non-privacy information identifier.

In the embodiment of the present application, since the user has already learned the privacy information identifier and the non-privacy information identifier corresponding to the electronic bill to be queried, the user can then query the required electronic bill according to these two identifiers. Therefore, the query request includes at least privacy information. Information Identification and Non-Privacy Information Identification.

Then, according to the privacy information identification, determine the user information mapped with the privacy information identification and the encrypted electronic bill information whose data type is privacy, and determine the user information and data mapped with the non-privacy information identification according to the non-privacy information identification. Type of non-private electronic ticket information.

In the embodiment of the present application, according to the privacy information identifier, the user information mapped to the privacy information identifier corresponding to the privacy information identifier and the encrypted electronic bill information whose data type is privacy are queried from the privacy collection, and according to the non-privacy information identifier, The user information mapped to the non-privacy information identifier corresponding to the non-privacy information identifier and the electronic bill information whose data type is non-private are queried from the non-privacy set.

Finally, the encrypted electronic bill information whose data type is privacy is transmitted to the hardware encryption module, and the electronic bill information whose data type is privacy transmitted by the hardware encryption module is received.

Therefore, in the embodiment of the present application, the hardware encryption module is also used to decrypt the encrypted electronic bill information, and the hardware encryption module is specifically used for:

Decrypt the encrypted electronic bill information, obtain electronic bill information whose data type is privacy, and send the electronic bill information whose data type is privacy to the privacy protection platform.

Further, in this embodiment of the present application, if the query request also includes user query information;

The endorsement node is also used to verify the validity of the signature in the user query information according to the client's public key, and if it is determined that the verification is passed, the user query information is sent to the signature verification module.

In the embodiment of this application, when the query request further includes user query information, when the privacy protection platform receives the user query information, the endorsement node in the privacy protection platform will also receive the user query information. Therefore, the endorsement node is based on the endorsement The mechanism requires that the user information be endorsed and verified, that is, the endorsement node verifies the validity of the signature contained in the user information according to the client's public key. If the verification is determined to pass, the user query information will be sent to the privacy protection platform. If it is determined that the verification fails, the signature verification module will generate query failure information, and send the query failure information to the client for display, so that the user can re-query the electronic ticket.

It should be noted that, in the embodiment of this application, the endorsement node is used to verify the validity of the user's identity. If the user's identity validity verification fails, it is determined that the user is an illegal user, and there is no need to verify the obtained user's identity. Users query information and then verify, which can improve the performance of the system and reduce the amount of calculation.

The signature verification module is also used to verify the legitimacy of the private information identifier and the non-private information identifier. If the verification is determined to pass, the query request will be sent to the consensus node. If the verification is determined to be unsuccessful, the query failure information will be generated and the query will fail. information is sent to the client.

In the embodiment of this application, the signature verification module is used to verify the legality of the private information identifier and the non-private information identifier in the query request, and determine whether the private information identifier and the non-private information identifier are legal information, and if it is determined that the verification is passed, The query request is sent to the consensus node. If it is determined that the verification fails, the issuance failure information is generated, and the issuance failure information is sent to the client for display, so that the user can re-query the electronic ticket.

It should be noted that, in the embodiment of this application, the signature verification module is used to verify the legitimacy of the private information identifier and the non-privacy information identifier transmitted by the client. The validity of the information identification is verified, which can improve the security of the system.

The consensus node is also used to add query requests to the query queue for sorting. When it is determined that the time when the query request is added to the query queue is greater than the time threshold, the query request is packaged into blocks, and the block is broadcast to each block of the blockchain. node.

Further, after decrypting and obtaining the electronic bill information whose data type is private and the electronic bill information whose data type is non-privacy, the privacy protection platform can also combine the two types of information to generate a message, then the privacy protection platform can also be used for :

First, assemble according to the electronic bill information whose data type is non-private and the electronic bill information whose data type is private to generate an electronic bill.

In the embodiment of the present application, according to the preset electronic bill template, the electronic bill information whose data type is non-private is added to the electronic bill template, and the electronic bill information whose data type is private is added to the electronic bill template, so as to generate an electronic bill. bill.

Then, the electronic bill is sent to the client, so that the client displays the electronic bill in a preset display manner.

Specifically, after the electronic ticket is generated, the electronic ticket is sent to the client, and the client can display the electronic ticket to the user, and then the user can query the electronic ticket to be viewed.

In the embodiment of the present application, the electronic bill generation module is configured to generate electronic bills including the information of each electronic bill according to the bill information sent by the privacy protection platform, and send the information of each electronic bill to the parsing and processing module, and the parsing and processing module uses To determine the data type of each electronic bill information, and send each electronic bill information to the privacy protection platform, the privacy protection platform is used to obtain the billing request information sent by the client, and transmit the bill information in the billing request information to the electronic The bill generating module sends the electronic bill information whose data type is privacy to the hardware encryption module, receives the encrypted electronic bill information whose data type is privacy, and stores the encrypted electronic bill information whose data type is privacy in the privacy collection, The electronic bill information whose data type is non-privacy is stored in the non-privacy collection, and the hardware encryption module is used to encrypt the electronic bill information whose data type is private, so as to realize the encryption of data involving personal privacy in the blockchain. The purpose of encryption signature storage to prevent leakage, it is proposed to use hardware encryption card to complete hardware encryption and decryption of personal privacy data, digital certificate is stored in hardware encryption card and cannot be read to prevent the private key from being stolen, improve privacy data security protection, and propose privacy data analysis and processing The module analyzes and processes the personal information of electronic bills, divides it into two parts: private data and non-private data, and creates mapping indexes for private data and non-private data to facilitate quick query and recovery of data.

Based on the above embodiment, referring to FIG. 2 , it is another schematic structural diagram of the privacy data protection system in the embodiment of the present application, which specifically includes:

1. The electronic bill generation module is used to call the underlying application of the blockchain to issue electronic bills.

2. The analysis and processing module is used to respectively determine the data type of each electronic bill information, and send each electronic bill information to the privacy protection platform.

3. Privacy protection platform.

The privacy protection platform includes at least endorsement nodes, consensus nodes, electronic bill mapping modules, privacy storage areas and non-privacy storage areas.

1) The endorsement node is used to verify the validity of the signature in the user information according to the client's public key. If it is determined that the verification is passed, the ticket information is sent to the signature verification module in the privacy protection platform.

2) The consensus node is used to add the ticket information to the ticket issuance queue for sorting, and when it is determined that the time when the ticket information is added to the ticket issuance queue is greater than the time threshold, the ticket information is packaged into blocks, and the block is broadcast to the district. Each node of the blockchain.

3) The privacy storage area is used to store the encrypted electronic bill information whose data type is privacy.

4) The non-privacy storage area is used to store the electronic bill information whose data type is non-privacy.

4. The hardware encryption module is used to encrypt the electronic bill information whose data type is privacy.

In the embodiment of the present application, it can be realized that only users with authority can read the personal privacy data in the electronic bill information in the distributed storage of the blockchain, so as to effectively protect the personal privacy data and prevent the data from being directly read, so as to achieve safe and effective protection. Purpose of personal privacy data.

Based on the above embodiment, referring to FIG. 3 , it is a flowchart of the method for issuing electronic bills in the embodiment of the present application, which specifically includes:

Step 300: Start.

Step 301: Obtain the billing request information sent by the client.

The billing request information includes at least bill information and user information.

Step 302: Verify the validity of the signature in the user information according to the public key of the client.

Step 303: Determine whether the verification is passed, if yes, go to Step 304, if not, go to Step 306.

Step 304: Verify the validity of the ticket information.

Step 305 : determine whether the verification is passed, if yes, go to step 307 , if not, go to step 306 .

Step 306: Generate the issuance failure information, and send the issuance failure information to the client.

Step 307: Add the bill information to the bill issuance queue for sorting, and when it is determined that the time when the bill information is added to the bill issuance queue is greater than the time threshold, the bill information is packaged into blocks, and the block is broadcast to each block in the blockchain. node.

Step 308 : According to the bill information, generate an electronic bill including the information of each electronic bill.

Step 309: Determine the data type of each electronic bill information respectively.

where the data type is private or non-private.

Step 310: Encrypt the electronic bill information whose data type is privacy, and obtain the encrypted electronic bill information whose data type is privacy.

Step 311: Based on a preset mapping algorithm, perform a mapping calculation on the encrypted electronic bill information whose data type is privacy and user information, and determine the mapped privacy information identifier.

Step 312: Based on a preset mapping algorithm, determine a non-privacy information identifier mapped with the electronic bill information whose data type is non-private and user information, and send the private information identifier and the non-privacy information identifier to the client.

Step 313: Store the encrypted electronic bill information whose data type is privacy in the privacy area.

Step 314: Store the electronic bill information whose data type is non-privacy in the non-privacy area.

Step 315: Generate electronic bill issuance success information, and send the electronic bill issuance success information to the client.

Step 316: End.

In the embodiment of the present application, the electronic bill information is parsed and processed into electronic bill information whose data type is private and electronic bill information whose data type is non-privacy, and the electronic bill information whose data type is non-privacy is encrypted and stored. In this way, the security of private data can be improved.

Based on the above embodiment, referring to FIG. 4, it is a flowchart of an electronic bill query method in the embodiment of the present application, which specifically includes:

Step 400: Start.

Step 401: Receive a query request sent by the client.

Wherein, the query request includes at least a privacy information identifier, a non-privacy information identifier and user query information.

Step 402: Verify the validity of the signature in the user query information according to the public key of the client.

Step 403 : determine whether the verification is passed, if yes, go to step 404 , if not, go to step 406 .

Step 404: Verify the legality of the private information identifier and the non-private information identifier.

Step 405 : determine whether the verification is passed, if yes, go to step 407 , if not, go to step 406 .

Step 406: Generate query failure information, and send the query failure information to the client.

Step 407: Add the query request to the query queue for sorting, and when it is determined that the time when the query request is added to the query queue is greater than the time threshold, the query request is packaged into blocks, and the block is broadcast to each node of the blockchain.

Step 408: According to the privacy information identifier, determine the user information mapped with the privacy information identifier and the encrypted electronic bill information whose data type is privacy.

Step 409: According to the non-privacy information identifier, determine the user information mapped with the non-privacy information identifier and the electronic bill information whose data type is non-private.

Step 410: Decrypt the encrypted electronic bill information to obtain electronic bill information whose data type is privacy.

Step 411: Assemble according to the electronic bill information whose data type is non-private and the electronic bill information whose data type is private, to generate an electronic bill.

Step 412: Send the electronic ticket to the client, so that the client can display the electronic ticket in a preset display manner.

Step 413: End.

In the embodiment of the present application, a mapped privacy information identifier and non-privacy information identifier are created, so that when inquiring about an electronic bill, the required electronic ticket can be quickly queried according to the private information identifier and the non-privacy information identifier. Data recovery.

Based on the above embodiment, referring to FIG. 5 , which is a functional diagram of the privacy protection platform in the embodiment of the present application, specifically including:

1. Digital certificate management module.

In this embodiment of the present application, the digital certificate management module is used to store the digital certificate.

2. Signature verification module.

In the embodiment of the present application, the signature verification module is used to verify the validity of the ticket information. If it is determined that the verification is passed, the ticket information is sent to the consensus node. If it is determined that the verification is not passed, the issuance failure information is generated, and the issuance failure information is sent to the consensus node. sent to the client.

The signature verification module is also used to verify the legitimacy of the private information identifier and the non-private information identifier. If the verification is determined to pass, the query request will be sent to the consensus node. If the verification is determined to be unsuccessful, the query failure information will be generated and the query will fail. information is sent to the client.

3. Analysis and processing module.

In the embodiment of the present application, the parsing and processing module may not only be set outside the privacy protection platform, but also may be set in the privacy protection platform.

4. Electronic bill receiving module.

In the embodiment of the present application, the electronic bill receiving module is used to obtain the billing request information sent by the client.

5. Electronic bill query module.

In this embodiment of the present application, the electronic bill query module is configured to receive a query request sent by the client.

6. Electronic bill mapping module.

In the embodiment of the present application, the electronic bill mapping module is configured to perform a mapping calculation on the encrypted electronic bill information whose data type is privacy and user information based on a preset mapping algorithm, determine the mapped privacy information identifier, and determine The non-privacy information identifier mapped with the electronic bill information and user information whose data type is non-private is generated, and the private information identifier and the non-privacy information identifier are sent to the client.

7. Non-private storage area for electronic bills.

In this embodiment of the present application, the electronic bill non-privacy storage area is used to store electronic bill information whose data type is non-privacy.

8. Electronic bill privacy storage area.

In this embodiment of the present application, the electronic bill privacy storage area is used to store electronic bill information whose data type is privacy.

Based on the above-mentioned embodiment, referring to FIG. 6 , a schematic structural diagram of an electronic device in an embodiment of the present application is shown.

The embodiment of the present application provides an electronic device, the electronic device may include a processor 610 (Center Processing Unit, CPU), a memory 620, an input device 630, an output device 640, etc., and the input device 630 may include a keyboard, a mouse, a touch screen, etc., The output device 640 may include a display device such as a Liquid Crystal Display (LCD), a Cathode Ray Tube (CRT), and the like.

Memory 620 may include read only memory (ROM) and random access memory (RAM) and provide processor 610 with program instructions and data stored in memory 620 . In the embodiments of the present application, the memory 620 may be used to store the programs of any privacy data protection method in the embodiments of the present application.

The processor 610 invokes the program instructions stored in the memory 620, and the processor 610 is configured to execute any privacy data protection method in the embodiments of the present application according to the obtained program instructions.

Based on the foregoing embodiments, in the embodiments of the present application, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, implements the privacy data protection method in any of the foregoing method embodiments.

As will be appreciated by those skilled in the art, the embodiments of the present application may be provided as a method, a system, or a computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to the present application. It will be understood that each flow and/or block in the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in a flow or flow of a flowchart and/or a block or blocks of a block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions The apparatus implements the functions specified in the flow or flow of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in the flow or blocks of the flowcharts and/or the block or blocks of the block diagrams.

Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims (10)

1. A private data protection system, comprising:

the electronic bill generating module is used for generating electronic bills containing the electronic bill information according to the bill information sent by the privacy protection platform and sending the electronic bill information to the analysis processing module;

the analysis processing module is used for respectively determining the data types of the electronic bill information and sending the electronic bill information to the privacy protection platform, wherein the data types are privacy or non-privacy;

the privacy protection platform is used for acquiring billing request information sent by a client, transmitting bill information in the billing request information to the electronic bill generation module, sending the electronic bill information with the data type of privacy to the hardware encryption module, receiving the encrypted electronic bill information with the data type of privacy, storing the encrypted electronic bill information with the data type of privacy to a privacy set, and storing the electronic bill information with the data type of non-privacy to a non-privacy set;

and the hardware encryption module is used for encrypting the electronic bill information with the data type being privacy.

2. The system of claim 1, wherein if the billing request information further includes user information, the privacy protection platform further includes:

the endorsement node is used for carrying out validity verification on the signature in the user information according to the public key of the client, and if the verification is confirmed to be passed, the bill information is sent to a signature verification module in the privacy protection platform;

the signature checking module is used for carrying out validity verification on the bill information, sending the bill information to a consensus node if the verification is confirmed to be passed, generating issuing failure information if the verification is confirmed to be failed, and sending the issuing failure information to the client;

and the consensus node is used for adding the bill information into a bill making queue for sequencing, packing the bill information into blocks when the time for adding the bill information into the bill making queue is determined to be greater than a time threshold value, and broadcasting the blocks to each node of a block chain.

3. The system of claim 1, wherein the privacy preserving platform further comprises:

and the electronic bill mapping module is used for carrying out mapping calculation on the encrypted electronic bill information with the data type being privacy and the user information based on a preset mapping algorithm, determining a mapped privacy information identifier, determining the electronic bill information with the data type being non-privacy and a non-privacy information identifier mapped by the user information, and sending the privacy information identifier and the non-privacy information identifier to the client.

4. The system of claim 3, wherein the privacy preserving platform is further to:

receiving a query request sent by the client, wherein the query request at least comprises a private information identifier and a non-private information identifier;

according to the private information identifier, determining the user information mapped with the private information identifier and the encrypted electronic bill information of which the data type is private, and according to the non-private information identifier, determining the user information mapped with the non-private information identifier and the electronic bill information of which the data type is non-private;

and transmitting the encrypted electronic bill information with the data type of privacy to the hardware encryption module, and receiving the electronic bill information with the data type of privacy transmitted by the hardware encryption module.

5. The system of claim 4, wherein the hardware encryption module is further to:

and decrypting the encrypted electronic bill information to obtain the electronic bill information with the data type being privacy, and sending the electronic bill information with the data type being privacy to the privacy protection platform.

6. The system of claim 5, wherein if the query request further includes user query information;

the endorsement node is further used for carrying out validity verification on the signature in the user query information according to the public key of the client, and if the verification is confirmed to be passed, the user query information is sent to the signature verification module;

the signature verification module is further used for carrying out validity verification on the private information identifier and the non-private information identifier, if the verification is confirmed to be passed, the query request is sent to a consensus node, and if the verification is confirmed to be not passed, query failure information is generated and sent to the client;

and the consensus node is further used for adding the query request into a query queue for sequencing, and when the time for adding the query request into the query queue is determined to be greater than a time threshold, the query request is packed into blocks and the blocks are broadcasted to each node of a block chain.

7. The system of claim 6, wherein the privacy preserving platform is further to:

assembling the electronic bill information with the data type being non-private and the electronic bill information with the data type being private to generate an electronic bill;

and sending the electronic bill to the client so that the client displays the electronic bill according to a preset display mode.

8. A method for protecting private data, comprising:

generating electronic bills containing the electronic bill information according to the bill information sent by the client;

respectively determining the data type of each piece of electronic bill information, wherein the data type is private or non-private;

encrypting the electronic bill information with the data type of privacy, storing the encrypted electronic bill information with the data type of privacy into a privacy set, and storing the electronic bill information with the data type of non-privacy into a non-privacy set.

9. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the steps of the method of claim 8 are performed when the program is executed by the processor.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that: the computer program when executed by a processor performs the steps of the method of claim 8.

Images