CN104933371B - Logistics personal information intimacy protection system based on multi-layer security Quick Response Code - Google Patents

Abstract

The invention discloses a privacy protection system for personal information in the logistics process based on two-dimensional code multi-layer encryption technology. The invention combines two-dimensional code encryption technology and layered extraction technology to solve the problem of personal information leakage on the logistics platform. The privacy protection system it belongs to mainly includes the following modules: the two-dimensional code layered encryption printing module of the shipping service department, the layered two-dimensional code decryption information extraction and scanning module during the logistics transfer process, and the personal information verification module at the logistics distribution end. The invention realizes the logistics information query authentication mechanism, and solves the contradiction between the leakage of address information and the inability to query after encryption in the logistics order number query.

Description

Logistics personal information privacy protection system based on multi-layer encrypted two-dimensional code

technical field

The invention relates to a personal privacy protection system in the logistics field, in particular to a logistics personal information privacy protection system based on a multi-layer encrypted two-dimensional code.

Background technique

According to reports, on websites such as "Taodan 114" and "Single Number Bar", the courier tracking number information is clearly marked with a price ranging from 0.4 yuan to 2 yuan, and it is accompanied by "generated bottom slip (sending copy)" etc. supporting services. These trading websites show that the courier tracking numbers being traded come from multiple courier companies including STO, YTO, Zhongtong, and Yunda. "Taodan 114" also states that "the tracking numbers come from couriers from all over the world." What is worrying is that these leaked courier tracking number information, in addition to being used to "post" on Taobao, may also be used to create "fake packages" for fraud and other illegal activities. In reality, cases of burglary caused by the leakage of courier tracking number information appear in the newspapers from time to time.

QR code is the fastest-growing retrieval method in recent query usage. Compared with one-dimensional codes, two-dimensional codes have high-density coding, large storage capacity, wide coding range, strong fault tolerance, and high decoding reliability. They are widely used in combination with other technologies such as encryption measures, and two-dimensional codes can be used in common Paper printing, low production cost and so on. QR codes can also store various information such as Chinese characters, letters, and numbers.

With the development of Internet technology, more and more users, merchants, and platforms use QR code scanning and retrieval technology. At present, the main application areas of QR codes include: ①Identification: such as business cards, meeting sign-in; ②Product traceability: such as recording the logistics information of goods such as pork and dairy products; ③Electronic ticketing: Many cinemas, train tickets and other systems have adopted QR code technology; ④ E-commerce: such as scanning QR codes on posters to obtain product links and discounts; ⑤ Life and entertainment: such as scanning QR codes to directly obtain music and video download links.

The Quick Response (QR) two-dimensional code is the most representative type and is also the most widely used. The design concept of QR two-dimensional code is to solve the problem of carrying information and information error correction. However, the "Quick Response Matrix Code" standard issued by the State Bureau of Technical Supervision does not describe data encryption in detail. With the deepening of the application market and the expansion of application fields, QR two-dimensional codes have been widely used in encryption technology fields such as payment, transfer of secret keys, and recording of personal sensitive information.

There are 40 versions of the QR code from 1 to 40, and the data capacity of each version varies from 26 to 3706 codewords. From version 1 with side length 21, each version after that increases by 1 and side length increases by 4, to version 40 with side length 177. There are 4 error correction levels in QR codes, L (low), M (medium), Q (standard), and H (high), respectively. The proportion of recoverable code words is 7%, 15%, 25% and 30% %. The higher the number of error-correcting codewords for different error-correction levels, the fewer codewords are used to encode information.

Two-dimensional code encryption technology refers to the use of cryptography principles to connect encryption technology and two-dimensional code technology on the existing basis of various two-dimensional codes, so as to realize the encrypted transmission of information in two-dimensional codes. At present, the main encryption algorithm is to encrypt the information and the generated QR code image. QR two-dimensional code encryption is still in its infancy. In 2007, "Technology and Application of Two-Dimensional Codes" compiled by China Article Numbering Center proposed several schemes for encrypting two-dimensional codes. In 2012, Liu Yunlong and others implemented DES-encrypted QR codes on Android phones. Ren Yongjin studied the Rijndae algorithm and the QR two-dimensional code encryption of XOR operation. In 2013, Gao Yanshou studied the RC4 encrypted QR code. Zhou Qing and others studied the QR two-dimensional code encryption algorithm based on the Ising model. Shan Li'an gave a set of QR two-dimensional code watermark encryption technology. In 2014, Yu Yingzheng and others proposed a multi-layer encryption technology for two-dimensional code information.

To sum up, the existing algorithms for information encryption are not closely combined with the generation process of QR codes, but are simply a combination of encryption and QR code generation. It cannot meet the privacy protection function of information interaction and segmented extraction of each link in the logistics information system.

Contents of the invention

The present invention mainly solves the problem that the courier order number covers all the plain code information of all consignors and consignees in the logistics link, which leads to the problem that the personal privacy information of both parties is very easy to obtain, and technically realizes the functions of express delivery process information separation, cargo flow security authentication query, etc. .

In order to achieve the above object, the technical scheme provided by the invention is as follows:

A logistics personal information privacy protection system based on multi-layer encrypted two-dimensional codes, including:

an input terminal for users to input information;

The information generation module will fill in the information input by the terminal to generate two-dimensional code information;

The transmission authorization extraction module extracts the transmission information from the two-dimensional code information generated by the information generation terminal;

The distribution information extraction module extracts the distribution information from the two-dimensional code information generated by the information generation terminal;

Verify the cloud platform module, generate a digital verification code according to the information in the information generation module, transmission authorization extraction module and delivery information extraction module, and send it to the information receiver.

The information generation module includes an input terminal, an information segmentation encryption module, a two-dimensional code generator and a two-dimensional code printer. The input terminal receives information from the input terminal and sends it to the information segmentation encryption module. The two-dimensional code generator generates two-dimensional codes and outputs them through the two-dimensional code printer.

The transmission authorization extraction module includes a two-dimensional code scanning module and an authority decoding module. The two-dimensional code scanning module transmits the scanned two-dimensional code information to the authority decoding module, and the authority decoding module decodes the information in the two-dimensional code according to the user's authority.

The distribution information extraction module includes a two-dimensional code scanning module, an authority decoding module and a verification decoding module. The two-dimensional code scanning module transmits the scanned two-dimensional code information to the authority decoding module, and the authority decoding module decodes the two-dimensional code according to the user's authority The verification decoding module sends the information in the permission decoding module and field information to the verification cloud platform module.

The verification cloud platform module includes an information collection module, a digital verification code generator, a push platform, and an online data query platform; the information collection module collects and summarizes the information in the information generation module, transmission authorization extraction module, and distribution information extraction module, and sends it to the online data collection module. Query the platform and the digital verification code, generate the extraction code through the digital verification code generator, and send it to the information receiver through the push platform.

The beneficial effects of the present invention are:

Based on multi-layer encryption technology, the invention directly generates two-dimensional code image information through the electronic input of the tracking number information, and adopts segment extraction technology to solve the information leakage problem caused by the visibility of the tracking number information in the logistics distribution process. At the same time, the project introduces the single number to generate unique authentication SMS information, realizes the logistics information query authentication mechanism, and solves the contradiction between the leakage of address information and the inability to query after encryption in the logistics single number query.

Description of drawings

The accompanying drawings are used to provide a further understanding of the present invention, and constitute a part of the description, and are used together with the embodiments of the present invention to explain the present invention, and do not constitute a limitation to the present invention. In the attached picture:

Fig. 1 is a multi-layer information encryption core algorithm and a decryption process diagram of a preferred embodiment of the present invention;

Figure 2 is a sample diagram of the logistics order after encryption;

Fig. 3 is a flow chart of the express delivery process in a preferred embodiment of the present invention.

Detailed ways

The invention discloses a logistics personal information privacy protection system based on a multi-layer encrypted two-dimensional code, including:

an input terminal for users to input information;

The information generation module will fill in the information input by the terminal to generate two-dimensional code information;

The transmission authorization extraction module extracts the transmission information from the two-dimensional code information generated by the information generation terminal;

The distribution information extraction module extracts the distribution information from the two-dimensional code information generated by the information generation terminal;

Verify the cloud platform module, generate a digital verification code according to the information in the information generation module, transmission authorization extraction module and delivery information extraction module, and send it to the information receiver.

The information generation module includes an input terminal, an information segmentation encryption module, a two-dimensional code generator and a two-dimensional code printer. The input terminal receives information from the input terminal and sends it to the information segmentation encryption module. The two-dimensional code generator generates two-dimensional codes and outputs them through the two-dimensional code printer.

The transmission authorization extraction module includes a two-dimensional code scanning module and an authority decoding module. The two-dimensional code scanning module transmits the scanned two-dimensional code information to the authority decoding module, and the authority decoding module decodes the information in the two-dimensional code according to the user's authority.

The distribution information extraction module includes a two-dimensional code scanning module, an authority decoding module and a verification decoding module. The two-dimensional code scanning module transmits the scanned two-dimensional code information to the authority decoding module, and the authority decoding module decodes the two-dimensional code according to the user's authority The verification decoding module sends the information in the permission decoding module and field information to the verification cloud platform module.

The verification cloud platform module includes an information collection module, a digital verification code generator, a push platform, and an online data query platform; the information collection module collects and summarizes the information in the information generation module, transmission authorization extraction module, and distribution information extraction module, and sends it to the online data collection module. Query the platform and the digital verification code, generate the extraction code through the digital verification code generator, and send it to the information receiver through the push platform.

The present invention will be described in detail below in conjunction with a preferred embodiment.

As shown in Figure 1, during the logistics process, the sorting center needs to manually check the final destination of the express delivery. If the general two-dimensional code generation technology is used, the logistics personnel can still obtain the complete information of the recipient and sender after scanning with a scanning device. The present invention extracts the data in the courier bill through formatting to form multiple areas, such as fields such as "city", "street", "house number", "name" and "telephone". Before generating the QR code, the plaintext address information is divided into words through coding and encryption technologies such as Hash coding, and then each field is encrypted with a different secret key. For example, the source recipient information "Zhangsan 18088886666, No. 9 Wenyuan Road, Qixia District, Nanjing City" is encrypted by multiple layers to form the ciphertext "xyaxygtuedoutdiv"

As shown in Figure 2, the obtained ciphertext is formed into a ciphertext two-dimensional code express delivery number through the general QR two-dimensional code encryption technology. The tracking number includes the multi-layer ciphertext QR code generated by the ciphertext information mentioned in the previous paragraph, and also contains logistics company information such as "encrypted express" and a structured logistics tracking number such as "8888888888", so that the sender and receiver sender inquiries. In order to ensure that the authority to inquire about the courier tracking number is not known to general logistics personnel, the more detailed data flow structure designed by the invention is introduced below.

As shown in Figure 3, it includes the entire two-dimensional code multi-layer encrypted logistics personal information privacy protection method and each use role of the system (sender, logistics staff, distribution staff and recipients), and the information generation of the four major modules of the system module, transmission authorization extraction module, distribution information extraction module, and verification cloud platform module (respectively called courier number generation, physical transportation, distribution and consignee verification, and verification cloud platform in this embodiment). The specific process is as follows:

Step 1: The personnel at the express receiving station start the terminal of the information collection system, and after confirming that the network connection is smooth, use the employee account and password to log in to the system, generate a unified QR two-dimensional code public key, and save it to the information collection terminal. The terminal holds a small local database, so after communicating with the verification cloud platform and logging in, subsequent offline operations can be performed.

Step 2: The sender uses the information collection terminal to input the courier information. The format of the information is like the existing courier number, including: address, name, and contact number of the recipient; address, name, and contact number of the sender; other information, etc.

Step 3: The core encryption algorithm conducts structured word segmentation of the sender's input information into fields such as city, street, house number, name, phone number, etc., and then uses different encryption algorithms with private keys for encryption. For example, the city adopts the DES encryption algorithm, the street adopts the RC encryption algorithm, the name adopts the IDEA encryption algorithm, and the telephone adopts the RSA encryption algorithm. The encryption algorithm and secret key here are not unique. In the specific implementation process, it is set separately according to the terminal hardware equipment. After encryption, ciphertext 1, ciphertext 2, and ciphertext 3 of the recipient, sender, and other information are generated.

Step 4: The information collection terminal uses general QR encryption to generate a ciphertext two-dimensional code, including steps such as information encoding, error correction encoding, and image generation. In this step, the general QR two-dimension code coding technology can be used, and no detailed introduction will be made here.

Step 5: Synthesize the generated QR code, logistics company information, and current logistics manifest number into a new output QR code, as shown in Figure 1. And print three copies by the QR code printer directly connected to the information collection terminal. One copy is kept by the sender. The other two are pasted on the courier package.

Step 6: If the information collection terminal can communicate with the verification cloud platform, send the generated ciphertext QR code to the cloud server. If the information collection terminal is offline, the generated ciphertext QR code is saved in the local database.

Step 7: After the verification cloud platform receives the cipher text QR code manifest from the information collection terminal, it decodes the QR code and decodes the cipher text of the sender's phone number. Then generate a random verification code based on the express tracking number, for example, the tracking number "8888888888" generates the verification code "123456". Send to the sender via SMS to view the courier route online.

Step 8: The staff of the express delivery distribution center log in to the verification cloud platform through a special QR code scanning terminal to obtain the initial information scanning authority. After the scanning device is initialized, it has a certain effective working time limit and does not need to be verified online at all times.

Step 9: The logistics staff of the distribution center use the authorized QR code scanning terminal to scan the courier, and obtain information such as the sorting center, city, and distribution center where the courier will arrive. According to the number of logistics links of each logistics enterprise, the scanning terminal only shows the destination of the next link. For example, if it is sent from a certain courier from a street in Songjiang, Shanghai through STO Express, the destination is No. 9 Wenyuan Road, Qixia District, Nanjing. The entire logistics chain node is "Songjiang→Shanghai→Nanjing→Yadong Xianlin→Delivery". The staff of the Songjiang distribution center can only see "Shanghai" after scanning; the staff of the Shanghai distribution center can only see "Nanjing" after scanning; the staff of the Nanjing distribution center can only see "Yadong Xianlin" after scanning.

Step 10: The staff of the distribution center scans the courier through the scanning terminal each time, and after placing the terminal in an environment with a network, the terminal will record the scanned courier number such as "8888888888" or connect with the database of the distribution center in real time, or upload Verify the cloud platform.

Step 11: The delivery personnel use the delivery QR code scanning terminal to log in to the verification cloud platform to obtain the delivery authority. The delivery personnel scan the QR code through the delivery terminal before delivery, and the terminal generates the recipient's detailed address, surname (not including the first name), and part of the mobile phone number (the last 4 digits). Print a small strip and paste it on the reserved place of the recipient's QR code of the courier.

Step 12: While printing the recipient's detailed address, verify the cloud platform to confirm the delivery of the courier, and send a delivery verification code from the background. That is, the verification cloud platform generates the delivery verification code "112233" of the courier tracking number "8888888888", and sends it to the recipient by SMS.

Step 13: After the delivery personnel meet the recipient, the recipient enters the delivery verification code "112233" on the accessory personnel terminal device, generates the full name of the recipient, extracts the decryption key, and scans the QR code. If the display is wrong, the accessories will not be given; if the display is correct, the recipient will be allowed to pick it up. A QR code affixed with the address of the recipient will be handed over to the recipient together with the courier.

Step 14: The recipient signs the surname (not including the first name) and part of the phone number (the last 4 digits) in the place reserved for the QR code information of the accessory personnel receipt as the receipt. In order for the logistics company to keep the bottom line, the background administrator will be used to check and verify after an emergency.

To sum up, the present invention aims at that all the information of the courier tracking number in the logistics link can be seen in plain text, causing some illegal couriers to use the courier tracking number information for market transactions, and even track and harass the recipient and sender according to the courier tracking number information. criminal cases. The two-dimensional code multi-layer encryption technology proposed by the present invention can effectively protect the confidentiality of the courier tracking number information in the entire logistics circulation process, increase the safety and sparseness of customers, and reduce the problem of dishonesty and compensation brought by bad employees to the courier company.

The above description is only a preferred embodiment of the present invention, and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art can still understand the foregoing embodiments The recorded technical solutions are modified, or some of the technical features are equivalently replaced. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (4)

1. a kind of logistics personal information intimacy protection system based on multi-layer security Quick Response Code, which is characterized in that including：

Input terminal inputs information, use information acquisition terminal input express delivery information for user；

Information generating module will fill in the information generation 2 D code information of terminal input；

Transmission authorizes extraction module, and transmission information is extracted from the 2 D code information of information generation terminal generation；

Distribution information extraction module extracts distribution information from the 2 D code information of information generation terminal generation；

It verifies cloud platform module, the letter in extraction module and distribution information extraction module is authorized according to information generating module, transmission Cease and receive the ciphertext Quick Response Code of information acquisition terminal, Quick Response Code is decoded, and to sender's telephone number ciphertext into Row decoding, generates a Digital verification code, and be sent to information recipient；Verify cloud platform module include information acquisition module, Digital verification code generator, push platform and online data searching platform；Information acquisition module awards information generating module, transmission Information collection in power extraction module and distribution information extraction module summarizes, and is sent to online data searching platform and digital verification Code generates extraction code by digital verification code generator, and passes through to push platform and issue information and collect people.

2. the logistics personal information intimacy protection system according to claim 1 based on multi-layer security Quick Response Code, feature It is, information generating module includes input terminal, information segmenting encrypting module, two-dimension code generator and quick response code printer, input The information that end receives input terminal is sent to information segmenting encrypting module, passes through by the encrypted information of information segmenting encrypting module Two-dimension code generator generates Quick Response Code, and is exported by quick response code printer.

3. the logistics personal information intimacy protection system according to claim 1 based on multi-layer security Quick Response Code, feature It is, transmission authorizes extraction module to arrive scanning including Response Code scan module and permission decoder module, Response Code scan module 2 D code information be transferred to permission decoder module, permission decoder module decodes the letter in Quick Response Code according to the permission of user Breath.

4. the logistics personal information intimacy protection system according to claim 1 based on multi-layer security Quick Response Code, feature It is, distribution information extraction module includes Response Code scan module, permission decoder module and verification decoder module, two-dimensional code scanning The 2 D code information scanned is transferred to permission decoder module by module, and permission decoder module decodes two according to the permission of user The information in code is tieed up, the information in permission decoder module and on the spot information are sent to verification cloud platform mould by verification decoder module Block.