(The picture shows the basic information interface of Tian Yue patent)
What is Tencent's consideration for developing this patent? What scenario will it be applied to? Can it achieve the effect of improving information security and avoiding information leakage?
On this basis, Tencent told Du Nan Privacy Guardian that the starting point of the patent is aimed at personal information file management and other scenarios, hoping to improve the efficient circulation and autonomous controllability of personal information files on the basis of protecting data security with the help of blockchain technology. Another expert said that this technology can ensure that information is difficult to be tampered with, but there is not much innovation in preventing information leakage.
1
Tencent's new patent has been approved, and there are similar technologies in many fields.
According to the patent abstract of Tianyancha, the invention provides a method, information processing equipment, electronic equipment and storage medium for processing student identity information in a blockchain network. The patent can store all the student identity information of users at different stages in the blockchain network, which can not only ensure the fairness and integrity of student identity information, but also effectively improve information security and avoid information leakage.
(The picture shows the structure of the patent abstract)
It is reported that blockchain is a new application mode of computer technology such as distributed data storage, point-to-point transmission, identification mechanism and encryption algorithm. It has rich application scenarios, which can realize cooperation, trust and concerted action among multiple subjects and solve problems such as information asymmetry.
Du Nan Privacy Guard combed and found that Tencent was not the first enterprise to apply for the patent of identity information processing method and equipment in blockchain network. 20 18 so far, more than ten companies have applied for similar patents, involving medical, financial, e-commerce and other fields.
According to public information, on 20 19 1 1, Shenzhen Brother Technology Co., Ltd. applied for a patent authorization named "Blockchain-based digital identity information management method and system"; 20 19, 1 June, 2006, Epro Internet Medical Information Technology (Beijing) Co., Ltd. applied for the patent authorization of "Multidimensional Dynamic Identification Method, Device and System Based on Blockchain".
Most of these enterprises first obtain the identity information of the target users, and after verification, they get the public key (referring to the half secret of China and Africa, and the "public key algorithm" * * *) and encrypt it, and then complete the verification of identity data information in the blockchain network.
2
Inventor: It can improve the autonomous controllability of information files.
Du Nan Privacy Guard's research found that using blockchain network to process personal identity information provided new ideas and methods for establishing a safer and more efficient electronic document management system. It is understood that the traditional student electronic file management system is a central information platform, and information management depends on the management platform of its subordinate educational institutions, and it is easy to become the target of cyber attacks.
At the same time, Internet application operators are the actual controllers of users' personal information. They can analyze, use or sell users' personal information to earn profits, and users' personal information security is facing various threats.
It is reported that in February, 2065438+2004, a data packet containing10.3 million pieces of personal information of students who took the postgraduate entrance examination in that year was sold online at the price of10.5 million yuan, involving sensitive information such as mobile phone number, ID number, home address and school major. 2065438+September 2008, the information of more than 2,600 students in Huaide College of Changzhou University, Jiangsu Province was leaked, which was used by illegal enterprises to falsely distribute wages and evade taxes.
Some people think that only when the school file system with detailed student information is attacked can such a large-scale information disclosure result be caused.
So, what is Tencent's consideration for developing this patent? What application scenario will it be used for?
Privacy Guardian contacted Zhuang Xiaozhao, the inventor of the patent and a senior engineer of Tencent Cloud Blockchain. He said that the starting point of this patent is for personal information file management and other scenarios, and student identity information is only one branch. He hopes to improve the efficient circulation and autonomous controllability of personal information files on the basis of protecting data security with the help of blockchain technology.
When introducing the application scenario of patent, Zhuang cited an example. Assuming that student A opens his personal student file on the blockchain and encrypts it before going to primary school, he can authorize the primary school to maintain the authority of his file through the contract until he graduates from primary school; When he was promoted to junior high school, A also authorized the middle school to maintain files through the contract until he graduated from junior high school. At this point, the primary school authority has automatically expired.
"In the same way, A needs authorization management when entering high school, university or transferring to other places. At the same time, students only have the right to authorize or view, and have no right to maintain files. " Zhuang also said that due to the lack of efficient data circulation, there is no specific patent application at present. Taking students' information files as an example, only by opening up the data circulation system of the whole entrance chain can landing applications be produced, which is a long-term and gradual process.
three
Can Tencent's new patent prevent information leakage?
Then, what is the principle that patents advocate improving information security and avoiding information leakage? Can you achieve this effect?
"Information security or privacy protection is not the main function of blockchain. We usually combine cryptography technology with blockchain technology to achieve the purpose of protecting data security on the blockchain. " Zhuang analyzed, "The blockchain has become a natural data circulation bridge because of its' distributed charging mode' and data non-tampering."
For example, Peng Gen, general manager of Beijing Hanhua Tianfei Xin 'an Technology Co., Ltd. said that the technical principle of blockchain is decentralized "distributed ledger", which can be understood as many people have the same ledger. If someone initiates a transfer, the transfer action needs the consent of 5 1% people to be successful and recorded in a block. In other words, if you want to tamper with the data inside, you need to tamper with the 5 1% account book at the same time to succeed.
Talking about the effect of this patent in improving information security, Peng Gen bluntly said that due to decentralization, distributed account books can really ensure information fairness and justice, and it is difficult to be tampered with. If you want to tamper with it, you must tamper with more than 5 1% to succeed, which is difficult to achieve. But there is not much innovation in preventing information leakage.
"The innovation of this patent lies in the combination of encryption algorithms such as public key and private key with blockchain, which is used in a new field of student identity information processing." Peng Gen said.
Written by Fan Wenyang, a researcher of Du Nan Personal Information Protection Research Group.