(The picture shows the basic information interface of Tianyancha Patent)
What is the consideration for Tencent to develop this patent? What scenario will it be applied to? Can it achieve the effect of improving information security and avoiding information leakage?
accordingly, Tencent told Nandu Privacy Guard that the starting point of the patent is for personal information file management and other scenarios, hoping to improve the efficient circulation and autonomous controllability of personal information files on the basis of protecting data security with the help of blockchain technology. Another expert said that this technology can ensure that information is difficult to tamper with, but it is not very innovative in preventing information leakage.
1
Tencent's new patent is approved, and there are similar technologies in many fields
According to the patent abstract of Tianyancha, the invention provides a method for processing student identity information in a blockchain network, as well as an information processing device, electronic equipment and storage medium. The patent can store all the student identity information of users at different stages in the blockchain network, which can not only ensure the fairness and integrity of student identity information, but also effectively improve information security and avoid information leakage.
(The picture shows the structure of patent abstract)
It is reported that blockchain is a new application mode of computer technology such as distributed data storage, point-to-point transmission, * * * recognition mechanism and encryption algorithm. It has rich application scenarios, which can realize cooperation, trust and concerted action among multiple subjects and solve information asymmetry and other problems.
Nandu Privacy Guard combed and found that Tencent is not the first enterprise to apply for the patent of identity information processing method and device in blockchain network. Since 218, more than ten companies have applied for similar patents, involving medical care, finance, e-commerce and other fields.
According to public information, in November 219, Shenzhen Xiongdi Technology Co., Ltd. applied for a patent authorization entitled "Blockchain-based digital identity information management method and system"; In January 219, Yibao Internet Medical Information Technology (Beijing) Co., Ltd. applied for the patent authorization of "Multidimensional Dynamic Identification Method, Device and System Based on Blockchain".
most of these enterprises first obtain the identity information of the target users, and after verification, they get the public key that matches their authority information (which refers to half of the secret in the key pair used with the "public key algorithm" * * *) and encrypt it, and then complete the verification of the identity data information in the blockchain network.
2
Inventor: It can improve the autonomous controllability of information files
The research of Nandu Privacy Guard found that using blockchain network to process personal identity information provided new ideas and methods for establishing a safer and more efficient electronic file management system. It is understood that the traditional student electronic file management system is a central information platform, and information management depends on the management platforms of the educational institutions under it, which can easily become the targets of cyber attacks.
At the same time, Internet application operators are the actual controllers of users' personal information. They can analyze, use or sell users' personal information to earn profits, and users' personal information security is facing various threats.
It is reported that in December 214, a data packet containing 1.3 million personal information of students who took the postgraduate entrance examination in that year was sold on the Internet for 15, yuan, involving sensitive information such as mobile phone number, ID number, home address and school major. In September 218, the information of more than 2,6 students in Huaide College of Changzhou University in Jiangsu was leaked and used by illegal enterprises to falsely distribute wages and evade taxes.
Some people think that only when the school file system with detailed student information is attacked can such a large-scale information leakage result be caused.
so, what is Tencent's consideration for developing this patent? What application scenario will it be used for?
Nandu Privacy Guard contacted Zhuang Xiaozhao, the inventor of the patent and a senior engineer of Tencent Cloud Blockchain. He said that the starting point of this patent is for personal information file management and other scenarios, and student identity information is only one branch. He hopes to improve the efficient circulation and autonomous controllability of personal information files on the basis of protecting data security with the help of blockchain technology.
When introducing the application scenario of patent, Zhuang Xiaozhao gave an example. Assuming that student A opens his personal student file on the blockchain and encrypts it before he goes to primary school, he can authorize the primary school to maintain the authority of his file through the contract until he graduates from primary school; When he was promoted to junior high school, A also authorized the middle school to maintain the archives through the contract until he graduated from junior high school. At this time, the primary school authority has automatically expired.
"In the same way, A needs authorization to manage when he is promoted to high school, university or transferred to other places. At the same time, students only have authorization or viewing rights and do not have file maintenance rights. " Zhuang Xiaozhao also said that due to the lack of efficient data circulation, there is no specific application of patents at present. Taking student information files as an example, only by opening up the data circulation system of the whole entrance chain can landing applications be produced, which is a long-term and gradual process.
3
Can Tencent's new patent prevent information leakage?
So, what is the principle of the patent claiming to improve information security and avoid information leakage? Can this effect be achieved?
"Information security or privacy protection is not the main function of blockchain. We usually combine cryptography technology with blockchain technology to achieve the purpose of protecting data security on blockchain." Zhuang Xiaozhao analyzed, "And the blockchain has become a natural data circulation bridge with its' distributed accounting mode' and data non-tampering."
Peng Gen, general manager of Beijing Hanhua Feitian Principal Technology Co., Ltd., cited an example, saying that the technical principle of blockchain is decentralized "distributed account book", which can be understood as that many people have the same account book. If someone initiates a transfer, the transfer action needs 51% people's approval before it can be successful and recorded in a block. In other words, if you want to tamper with the data inside, you need to tamper with 51% of the account books at the same time to succeed.
When talking about the effect of this patent in improving information security, Peng Gen bluntly said that due to decentralization, distributed account books can really ensure information fairness and justice, and it is difficult to tamper with it. If you want to tamper, you must tamper with more than 51% to succeed, which is very difficult to achieve. However, it is not very innovative in preventing information leakage.
"The innovation of this patent is that it combines encryption algorithms such as public key and private key with blockchain, and it is used in the new field of student identity information processing." Peng Gen said.
Written by Fan Wenyang, researcher of Nandu Personal Information Protection Research Group.