CN107104969B - Method for protecting personal privacy information in express by applying dynamic encryption mechanism - Google Patents

Abstract

The invention provides a method for protecting personal privacy information in express by using a dynamic encryption mechanism, belongs to the field of information security, and aims to solve the problems of low security, high information leakage risk and the like in the conventional mode. The method comprises the following steps: a public terminal or a user terminal of an express initiating station acquires personal privacy information and address information of express and sends the information to a server; the method comprises the steps that a server receives personal privacy information and address information, determines an express destination and selects an algorithm number to determine a target encryption algorithm, obtains a first type of key of the express destination and a second type of key of the target encryption algorithm, encrypts the number of the target encryption algorithm by using a public key PK1 in the first type of key, and encrypts the personal privacy information by using a public key PK2 and/or a key K in the second type of key; the public terminal or the user terminal generates and prints the express bill; each express station transports the express according to the address information; and after the express delivery terminal is reached, the courier uses the handheld device to scan the two-dimensional code, and obtains the personal privacy information according to the scanning result.

Description

A method of using dynamic encryption mechanism to protect personal privacy information in express delivery

technical field

The invention relates to the technical field of logistics information security, in particular to a method for protecting personal privacy information in express delivery by using a dynamic encryption mechanism.

Background technique

With the rapid development of the Internet and the logistics industry, express delivery, as an important way of delivering goods, has become an important part of people's lives. According to statistics from the State Post Bureau, in 2016, the national express delivery business volume exceeded 30 billion, a year-on-year increase of 53%, and the accumulated business income exceeded 390 billion yuan, a year-on-year increase of 39%. There is still room for further improvement in the industrial scale and market prospects of the logistics industry. However, with the rapid development of the express delivery industry, the security of users' personal privacy information has also attracted more and more attention. In recent years, there have been numerous news reports that personal privacy information such as user names, phone numbers and address information has been leaked through the discarded express delivery receipts of some express delivery companies, which casts a shadow over the security of personal privacy information. In the era of digitalization and networking, the leakage of customer information will not only infringe on personal privacy, but also interfere with the normal life of individuals, such as frequent harassment of users receiving a large number of spam text messages, commercial advertisements, etc., and even Personal property and personal safety will also be threatened. Therefore, the exposure of information in the express delivery business has made consumers' "private" information face the crisis of "publicization". Whether postal express can make consumers regain a sense of security, and how to protect the safety of personal privacy information in consumer express delivery has also attracted widespread attention from the industry and academia.

In recent years, there have been some patents and methods for protecting personal privacy information in express delivery. Some of these patents and methods encrypt all the information of the sender and recipient (including address information and express tracking number) using a fixed algorithm. ; Some divide the express receipt into encrypted and non-encrypted two copies. The encrypted express receipt is pasted to the surface of the package and transported by the logistics company, and the non-encrypted express receipt is handed over to the sender as a certificate for sending express delivery. Logistics information can be inquired at any time; some need to manually enter the information of the sender and the recipient in a specific handheld device before the information can be encrypted; while some encrypt the information of the sender and the recipient, However, in the process of express logistics and distribution, as long as the employees in the logistics enterprise hold handheld devices, regardless of whether they are dispatched by them, they can scan the code to crack the information, thus causing hidden dangers and risks of information leakage.

By comparison, it can be found that the above patents and methods will greatly increase the cost and delivery time of logistics distribution. For example, the address information of the recipient and the sender is encrypted. When the express delivery is in transit, the express transporter must scan the code to obtain the address information, which will increase the express delivery time and increase the labor intensity of the relevant practitioners. . If the express receipt is divided into encrypted and non-encrypted, it will increase the cost of the express. In addition, the sender may discard the unencrypted express receipt, which will also increase the uncertainty of express information security. If the information that needs to be encrypted is manually entered, it will also consume a lot of time and cost. In the Internet era, this method also has certain limitations in applicable scenarios. In addition, the existing methods usually use a fixed encryption algorithm when encrypting personal privacy information, and the scope of application is relatively single. To sum up, the current methods of protecting personal privacy information in express delivery will greatly increase the cost and delivery time of logistics distribution, increase the labor intensity of express delivery practitioners, and protect personal privacy information due to the use of fixed encryption algorithms. However, the security is not high, and any courier can scan the code with a handheld device to crack the information, which may easily lead to the risk of information leakage.

SUMMARY OF THE INVENTION

In order to solve the problems existing in the current method of protecting personal privacy information in express delivery, the cost and delivery time of logistics distribution will be greatly increased, and the labor intensity of express delivery practitioners will be increased. The way of protecting personal privacy information is due to the use of fixed encryption algorithms. However, the security is not high, and any courier can scan the code with a handheld device to decipher the information, which may easily cause the risk of information leakage. The present invention provides a method for protecting personal privacy information in express delivery by using a dynamic encryption mechanism.

The technical scheme of the present invention is:

A method for protecting personal privacy information in express delivery using a dynamic encryption mechanism, comprising the following steps:

Step 1, the public terminal or user terminal of the express delivery station obtains the personal privacy information and address information of the sender and recipient of the express delivery to be sent, and sends the personal privacy information and address information to the server of the logistics enterprise;

Step 2, the server receives the personal privacy information and address information, and generates the express delivery number to be sent out according to the preset tracking number generation rule, records the generation time of the express delivery number, and determines the express delivery terminal to which the express delivery to be sent out;

Step 3, the server calculates the number and sum of these numbers according to the last two digits of the courier number, the numbers of the starting province and destination province of the address information to be sent out, and the number of the date in the generation time of the courier number. ; The server uses numbers and sum to calculate the remainder of the total number of algorithms in the encryption algorithm library, obtains the remainder n, and determines the remainder n as the number of the target encryption algorithm, and the encryption algorithm corresponding to the number is determined as the target encryption algorithm; The generation The number of the date in the time is: the last two digits of the year, the two digits of the month and day;

Step 4: The server obtains the private key SK1 and the public key PK1 in the first type key of the express terminal according to the express terminal to which the express to be sent will arrive, and obtains the private key in the second type key of the target encryption algorithm. SK2, public key PK2 and/or key K;

Step 5, the server encrypts the number of the target encryption algorithm using the public key PK1 in the first type key of the express terminal, and uses the public key PK2 and/or key K pair in the second type key of the target encryption algorithm Encrypt personal privacy information;

Step 6: The server sends the information required to generate the express delivery receipt to the public terminal or the user terminal of the express delivery starting station according to the arrangement order of the various information in the express delivery receipt. address information of the sender and recipient, a part of the personal privacy information displayed in plain text, the express tracking number displayed in the form of barcode and at least one QR code, the QR code includes the express tracking number, encrypted The number of the target encryption algorithm and the encrypted personal privacy information;

Step 7: After the public terminal or the user terminal of the express delivery starting station generates and prints the express delivery form according to the received information required for generating the express delivery form, each express station of the logistics enterprise matches the express delivery form with the address information displayed in plain text on the express delivery form. courier for transportation;

Step 8: When the express arrives at the express delivery terminal, the dispatcher at the express terminal scans the QR code with the handheld device, and obtains personal privacy information according to the scanning result, so that the dispatcher notifies the recipient to receive it according to the personal privacy information. express delivery.

Preferably, the personal privacy information includes name and phone number.

Preferably, in the step 3, the method for the server to determine the target encryption algorithm for the express to be sent may also be: the server randomly selects a number for the express to be sent from a pre-stored encryption algorithm library, and the number corresponding to the The encryption algorithm is determined as the target encryption algorithm.

Preferably, in the step 2, the method for the server to determine the express delivery terminal to be reached by the express delivery to be sent is:

The server determines the terminal selected by the user in the user terminal or the public terminal of the express starting station as the express terminal to be reached by the express to be sent;

Or, the server selects the express station nearest to the address of the recipient as the express delivery terminal according to the address information of the recipient to be sent out.

Preferably, in the step 5, the server uses the public key PK2 and/or the key K in the second type of key of the target encryption algorithm to encrypt the personal privacy information means:

When the target encryption algorithm used by the server is a symmetric encryption algorithm, use the key K in the second type of key of the target encryption algorithm to encrypt personal privacy information;

When the target encryption algorithm used by the server is an asymmetric encryption algorithm, use the public key PK2 in the second type of key of the target encryption algorithm to encrypt personal privacy information;

When the target encryption algorithm used by the server is a hybrid encryption algorithm, use the public key PK2 in the second type key of the target encryption algorithm to encrypt the second type key K, and store the encrypted key K in the server or handheld In the device, when encrypting personal privacy information, the server uses the private key SK2 in the second type of key of the target encryption algorithm to decrypt the encrypted key K, and uses the decrypted key K to decrypt the personal privacy information. to encrypt.

Preferably, a part of the personal privacy information in the step 6 refers to the surname in the name and the first three digits and the last four digits of the mobile phone number; or, a part of the personal privacy information refers to the name in the name surname, the area code in the landline number, and the last four digits of the landline number other than the area code.

Preferably, in the step 8, when the handheld device obtains personal privacy information according to the scanning result, the following three methods are included:

The first method: After scanning the QR code with the handheld device, obtain the private key SK1 in the first type of key pre-stored locally, and use the private key SK1 in the first type of key to decrypt the number of the target encryption algorithm, Then, query the private key SK2 and/or the key K in the second type key corresponding to the number of the target encryption algorithm in the locally pre-stored second type key of each encryption algorithm, and use the queried second type key The private key SK2 and/or the key K in the key decrypt the personal privacy information to obtain the personal privacy information; wherein, the second type keys of various encryption algorithms are pre-generated by the server and sent to the handheld device, and The second type of key for each encryption algorithm remains unchanged until the next regeneration by the server;

The second way: After the handheld device scans the QR code to obtain the courier number, and obtains the private key SK1 in the locally pre-stored first-class key, use the obtained private key SK1 in the first-class key to pair the target. The number of the encryption algorithm is decrypted, and after the number of the target encryption algorithm is obtained, the express order number and the number of the target encryption algorithm are sent to the server, and the server queries the SK2 and SK2 in the second type key of the target encryption algorithm corresponding to the express order number. / or key K, and decrypt the personal privacy information using SK2 and/or key K in the queried second type of keys, and then send the personal privacy information to the handheld device; wherein, the second key of the target encryption algorithm The class key is calculated after the server generates the express order number and determines the target encryption algorithm and is stored locally on the server, and each express corresponds to a different second class key;

The third way: After the handheld device scans the QR code to obtain the express tracking number, and obtains the private key SK1 in the locally pre-stored first-class key, use the obtained private key SK1 in the first-class key to pair the target The number of the encryption algorithm is decrypted, and after the number of the target encryption algorithm is obtained, the express order number and the number of the target encryption algorithm are sent to the server, and the server queries the SK2 and SK2 in the second type key of the target encryption algorithm corresponding to the express order number. /or key K, and send SK2 and/or key K in the second type of key queried to the handheld device, and the handheld device receives the SK2 and/or key in the second type of key queried by the server After K, use SK2 and/or key K in the received second type key to decrypt the personal privacy information to obtain the personal privacy information; wherein, the second type key of the target encryption algorithm is for the server to generate the express tracking number and After determining the target encryption algorithm, it is calculated and stored locally on the server, and each express corresponds to a different second type of key.

Preferably, it also includes: the server regularly updates the encryption algorithm selection rules, and/or the encryption algorithm library, and/or the first type key of each express station and the second type key of each encryption algorithm; the encryption algorithm The update of the library includes the update of the number, kind or number of each encryption algorithm in it.

The beneficial effects of the present invention are:

The sender can directly fill in the information and place an order through the WeChat public account on the user terminal, the APP of the logistics company, or log in to the delivery system of the express company. The address information of the sender can be picked up and inspected, and then the express is delivered to the transit station for transportation. There is no need to manually enter the information on a specific handheld device, and the operation is simple. When encrypting personal privacy information, the present invention utilizes the first type key of the express delivery terminal. When the express delivery arrives at the express delivery terminal, the handheld device first uses the first type key to obtain the number of the target encryption algorithm, so that if the decrypted If the operator is not a relevant staff member of the express terminal, he cannot decrypt the personal privacy information, thereby reducing the possibility of non-related personnel obtaining personal privacy information and improving the security of personal privacy information. In the present invention, the express delivery form pasted on the express delivery surface and the express delivery form kept on the sender are the same, and are not differentiated. Because the sender only needs to know the express tracking number to query relevant logistics information, and the express tracking number is not encrypted, which can effectively save costs and better adapt to existing logistics companies. For each courier, the encryption algorithm of the present invention is selected from the encryption algorithm library, different couriers use different encryption algorithms, or even if different couriers may use the same encryption algorithm, its key can be different, so the encryption algorithm The uncertainty increases the difficulty and cost of cracking. The dynamic selection rule of the encryption algorithm in the present invention can be formulated according to the address information of the sender and the recipient, the courier number and other information, combined with the situation of the courier company itself, which further increases the uncertainty and increases the cracking of the information. difficulty. In addition, the dynamic encryption algorithm library is not limited to fixed encryption algorithms, and existing encryption algorithms or newly invented encryption algorithms and their improved algorithms can be nested. The encryption algorithm library can be continuously improved and expanded, making the entire encryption system more flexible and secure. The express order number of the present invention is based on the way of generating the express order number in the current logistics enterprise's own system. Each transit express point scans the barcode to obtain the express order number through the existing method, and updates and uploads the express logistics information to the server for the sender or the sender. The recipient inquires the logistics information according to the express tracking number. The present invention can effectively protect the user's personal privacy information under the premise of not greatly increasing the cost of the logistics enterprise and changing the operation mode. Therefore, compared with the background art, the present invention not only can safely protect personal privacy information in express delivery, but also does not greatly increase the cost, delivery time and labor intensity of express delivery practitioners, and has the advantages of simple operation and the like.

Description of drawings

Figure 1 is a flow chart of the present invention.

FIG. 2 is a schematic diagram of an express delivery bill of the present invention.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention clearer, the embodiments of the present invention are further described in detail below with reference to the accompanying drawings.

As shown in Figure 1, the method for protecting personal privacy information in express delivery using a dynamic encryption mechanism in this embodiment includes the following steps:

Step 1: The public terminal or user terminal of the express delivery station obtains the personal privacy information and address information of the sender and recipient of the express delivery to be sent, and sends the personal privacy information and address information to the server of the logistics enterprise.

Step 2: The server receives personal privacy information and address information, and generates the express delivery number to be sent out according to the preset tracking number generation rule, records the generation time of the express delivery number, and determines the express delivery destination to which the express delivery to be sent.

For the preset tracking number generation rule, reference may be made to the existing express tracking number generation rule, which is not described in detail in this embodiment.

Step 3, the server calculates the number and sum of these numbers according to the last two digits of the courier number, the numbers of the starting province and destination province of the address information to be sent out, and the number of the date in the generation time of the courier number. ; The server uses numbers and sum to calculate the remainder of the total number of algorithms in the encryption algorithm library, obtains the remainder n, and determines the remainder n as the number of the target encryption algorithm, and the encryption algorithm corresponding to the number is determined as the target encryption algorithm; The generation The digits of the date in the time are: year with last two digits, month and day with two digits.

The encryption algorithm library stores the correspondence between encryption algorithms and numbers.

In addition, the method of selecting the number described in this step does not constitute a limitation to the present invention. The present invention can also be based on the express order number, the number of the starting province and the destination province in the address information of the express to be sent, and the express order number. One or a combination of at least two of the generation times, and other methods are used to determine a number as the number of the target encryption algorithm.

Step 4: The server obtains the private key SK1 and the public key PK1 in the first type key of the express terminal according to the express terminal to which the express to be sent will arrive, and obtains the private key in the second type key of the target encryption algorithm. SK2, public key PK2 and/or key K.

Wherein, the server will pre-calculate the first type key for each express station which is different from other express stations. In addition, the server calculates a second type of key for the encryption algorithm. Specifically, when calculating the second type key of the encryption algorithm, the server may calculate and obtain the second type key for various encryption algorithms in advance; After the target encryption algorithm is determined, the second type key of the target encryption algorithm adopted by the express is calculated.

Regarding the way that the server calculates the first type key of the express station, the key calculation method of the asymmetric encryption algorithm is usually adopted. When the server calculates the second type key of the encryption algorithm, the calculation method of the second type key adopts different key calculation methods according to different types of encryption algorithms. For example, when the encryption algorithm is the symmetric encryption algorithm DES, the server uses the key calculation method of DES to calculate the second type key of the encryption algorithm. Regarding the key calculation method of the encryption algorithm, reference may be made to the existing key calculation method, and the symmetry of the present invention will not be described in detail.

Step 5, the server encrypts the number of the target encryption algorithm using the public key PK1 in the first type key of the express terminal, and uses the public key PK2 and/or key K pair in the second type key of the target encryption algorithm Personal privacy information is encrypted.

Step 6: The server sends the information required to generate the express delivery receipt to the public terminal or the user terminal of the express delivery starting station according to the arrangement order of the various information in the express delivery receipt. address information of the sender and recipient, a part of the personal privacy information displayed in plain text, the express tracking number displayed in the form of barcode and at least one QR code, the QR code includes the express tracking number, encrypted The number of the target encryption algorithm and the encrypted personal privacy information.

In this step, the various information required for generating the express receipt includes the express order number, the barcode formed by the express order number, a part of the sender's name displayed in plain text, and a part of the sender's name displayed in dark text , the sender's address information, part of the sender's phone in plaintext and part of the sender's phone in dark text, part of the recipient's name in clear text and part of the recipient's name in dark text part of the recipient's name, the recipient's address information, part of the recipient's phone number displayed in plaintext and part of the recipient's phone number displayed in dark text, item name, weight, quantity and additional information and other item information, cost information such as insured price, payment method, total cost, at least one QR code, etc.

Further, when the server sends the information to the public terminal or the user terminal of the express originating station, the information may be sent according to the above arrangement sequence. Of course, other arrangements may also be used for sending, which is not specifically limited in this embodiment.

Step 7: After the public terminal or the user terminal of the express delivery starting station generates and prints the express delivery form according to the received information required for generating the express delivery form, each express station of the logistics enterprise matches the express delivery form with the address information displayed in plain text on the express delivery form. Express shipping.

Wherein, after receiving the above information, the public terminal or user terminal of the express delivery starting station embeds the above various information into the corresponding positions in the express delivery form template according to the receiving order and the preset express delivery form template, and obtains the express delivery form. As shown in FIG. 2 , it is a schematic diagram of an express delivery receipt provided in this embodiment.

Step 8: When the express arrives at the express delivery terminal, the dispatcher at the express terminal scans the QR code with the handheld device, and obtains personal privacy information according to the scanning result, so that the dispatcher notifies the recipient to receive it according to the personal privacy information. express delivery.

Wherein, the personal privacy information includes name and phone number. The phone number includes mobile and landline numbers.

Optionally, in the step 3, the method for the server to determine the target encryption algorithm for the express to be sent may also be: the server randomly selects a number for the express to be sent from a pre-stored encryption algorithm library, and the number corresponding to the Encryption algorithm as the target encryption algorithm. Of course, different express companies can also formulate other different encryption algorithm selection rules according to their own needs, which are not specifically limited in this embodiment.

Optionally, the step 3 is illustrated as follows. For example, each province is assigned a 2-digit number, and the number of each province is fixed. The number can refer to the order of the provinces on the map of China. For example, Shanxi Province is 04, and Zhejiang Province is 11. When selecting the target encryption algorithm, the last two digits of the express order number, the number corresponding to the express starting station and express destination province, and the delivery time, that is, the generation time of the express order number (the year is represented by the last two digits) Add to get the numbers and sum. Assuming that there are m algorithms in the server encryption algorithm library, use the number and sum to take the remainder of m to obtain the remainder n, whose value range is [0, m-1]. The remainder n corresponds to the number of the selected target encryption algorithm, and the encryption algorithm corresponding to the number is determined as the target encryption algorithm.

If you receive a courier from Shanxi Province to Zhejiang Province on February 3, 2017, and its courier number is 979100001, the corresponding numbers are 17 (the last two digits of the year of delivery) and 02 (the month of delivery) , 03 (delivery date), 04 (Shanxi province number), 11 (Zhejiang province number) and 01 (the last two digits of the courier bill), the sum of the sum is 38. If there are 3 encryption algorithms in the encryption algorithm library, the sum is 38, and the remainder n is 2, the number of the target encryption algorithm is 2.

Optionally, in the step 2, the method for the server to determine the express delivery terminal to which the express to be sent will arrive includes the following two methods:

The first way: the server determines the terminal selected by the user in the user terminal or the public terminal of the express starting station as the express terminal to be reached by the express to be sent.

Specifically, after the user fills in the personal privacy information and address information of the sender and the recipient on the user terminal or the public terminal of the express delivery starting station, the user selects the express delivery terminal, and the server sends the express delivery terminal selected by the user to the express delivery terminal. Determine the express destination to be reached by the express to be sent.

The second way: the server determines the express station closest to the address of the recipient as the express delivery terminal according to the address information of the recipient to be sent out.

Optionally, in the step 5, the server uses the public key PK2 and/or the key K in the second type of key of the target encryption algorithm to encrypt the personal privacy information refers to the following three situations:

The first case: when the target encryption algorithm used by the server is a symmetric encryption algorithm, use the key K in the second type of key of the target encryption algorithm to encrypt personal privacy information.

For example, when the target encryption algorithm is a symmetric encryption algorithm such as DES, AES, or IDEA, after the express information is sent to the server, the server uses the key K in the second type of keys of these symmetric encryption algorithms to encrypt personal privacy information.

The second case: when the target encryption algorithm used by the server is an asymmetric encryption algorithm, the personal privacy information is encrypted by using the public key PK2 in the second type of key of the target encryption algorithm.

For example, when the target encryption algorithm is an asymmetric encryption algorithm such as RSA, Elgamal or ECC, after the express information is sent to the server, the server uses the public key PK2 in the second type of key of these asymmetric encryption algorithms to encrypt personal privacy information .

The third case: when the target encryption algorithm used by the server is a hybrid encryption algorithm, use the public key PK2 in the second type key of the target encryption algorithm to encrypt the second type key K, and encrypt the encrypted key K Stored in the server or handheld device, and then when encrypting personal privacy information, the server decrypts the encrypted key K using the private key SK2 in the second type of key of the target encryption algorithm, and uses the decrypted key K encrypts personal privacy information.

For example, when the target encryption algorithm is a hybrid encryption algorithm of DES and RSA, the key K is stored in the server in the form of PK2 encryption in the second type of key. After the express information is sent to the server, the server uses the target encryption The private key SK2 in the second type of key of the algorithm decrypts the encrypted key K, and then uses the decrypted key K to encrypt personal privacy information. Among them, using different target encryption algorithms, the private key SK2, the public key PK2 and the key K in the second type of key are different.

In particular, when the adopted encryption algorithm is a hybrid encryption algorithm, the key K can be stored in the handheld device in addition to being stored in the server in the form of PK2 encryption.

Optionally, in the step 6, a part of the information in the personal privacy information refers to the surname in the name and the first three digits and the last four digits in the mobile phone number; or, a part of the information in the personal privacy information refers to the name. Last name in , the area code in a landline number, and the last four digits of a landline number other than the area code. That is to say, on the express delivery form of the present invention, the surname in the name and the first three digits and the last four digits of the mobile phone number are displayed in plain text, and the middle four digits of the first name other than the surname and the mobile phone number in the name are displayed in plain text. Displayed in dark text. Or, on the express delivery form, the last name in the name and the area code in the fixed telephone number and the last four digits of the fixed telephone number except the area code are displayed in plain text, the first name in the name except the surname and the other digits in the fixed telephone number Displayed in dark text. For example, when the fixed phone number is 01087654321, the area codes 010 and 4321 on the express delivery slip are displayed in plain text, and 8765 is replaced by other symbols such as "*". In addition, in the present invention, the address information of the sender and the recipient is not encrypted, so that the corresponding addresses can be quickly inquired during delivery or return, and delivery errors can be found and corrected in time during the logistics and delivery process.

Optionally, in the step 8, when the handheld device decrypts the personal privacy information according to the scanning result, the following three methods are included:

The first method: After scanning the QR code with the handheld device, obtain the private key SK1 in the first type of key pre-stored locally, and use the private key SK1 in the first type of key to decrypt the number of the target encryption algorithm, Then, query the private key SK2 and/or the key K in the second type key corresponding to the number of the target encryption algorithm in the locally pre-stored second type key of each encryption algorithm, and use the queried second type key The private key SK2 and/or the key K in the key decrypt the personal privacy information to obtain the personal privacy information; wherein, the second type keys of various encryption algorithms are pre-generated by the server and sent to the handheld device, and The second type of key for each encryption algorithm remains unchanged until the next regeneration by the server.

In this way, each handheld device pre-stores the first type key of the express station to which it belongs and the second type key of various encryption algorithms. On this basis, the handheld device obtains the private key SK1 in the first type of key locally, and then uses the private key SK1 in the first type of key to decrypt the number of the target encryption algorithm. Query the private key SK2 and/or the key K in the second type key of the target encryption algorithm locally, and use the queried private key SK2 and/or the key K in the second type key to perform the personal privacy information decrypt. In this way, the first type key of the express station to which the handheld device belongs and the second type key of various encryption algorithms stored locally can be pre-calculated by the server and sent to the handheld device, or it can be calculated by the server. After delivery to each express station, each express station will send it to each handheld device within its range.

In this way, the keys of the first type and the keys of the second type remain unchanged for a period of time. When the server recalculates the first type key of each express station and the second type key of each encryption algorithm, and re-distributes it to each express station or handheld device, the handheld device updates the first type key and the second type key. class key.

The second way: After the handheld device scans the QR code to obtain the courier number, and obtains the private key SK1 in the locally pre-stored first-class key, use the obtained private key SK1 in the first-class key to pair the target. The number of the encryption algorithm is decrypted, and after the number of the target encryption algorithm is obtained, the express order number and the number of the target encryption algorithm are sent to the server, and the server queries the SK2 and SK2 in the second type key of the target encryption algorithm corresponding to the express order number. / or key K, and decrypt the personal privacy information using SK2 and/or key K in the queried second type of keys, and then send the personal privacy information to the handheld device; wherein, the second key of the target encryption algorithm The class key is calculated after the server generates the express order number and determines the target encryption algorithm and is stored locally on the server, and each express corresponds to a different second class key.

In this way, the private key SK1 in the first type key of the express station is also stored locally on the handheld device. After the handheld device scans the QR code, it first obtains the private key SK1 in the first type key of the express station locally. .

In this way, the second type key of the target encryption algorithm is calculated by the server after generating the express order number and determining the target encryption algorithm. The second type key corresponding to each express is different, which increases the uncertainty. It increases the difficulty of cracking and improves the security of personal privacy information.

The third way: After the handheld device scans the QR code to obtain the express tracking number, and obtains the private key SK1 in the locally pre-stored first-class key, use the obtained private key SK1 in the first-class key to pair the target The number of the encryption algorithm is decrypted, and after the number of the target encryption algorithm is obtained, the express order number and the number of the target encryption algorithm are sent to the server, and the server queries the SK2 and SK2 in the second type key of the target encryption algorithm corresponding to the express order number. /or key K, and send SK2 and/or key K in the second type of key queried to the handheld device, and the handheld device receives the SK2 and/or key in the second type of key queried by the server After K, use SK2 and/or key K in the received second type key to decrypt the personal privacy information to obtain the personal privacy information; wherein, the second type key of the target encryption algorithm is for the server to generate the express tracking number and After determining the target encryption algorithm, it is calculated and stored locally on the server, and each express corresponds to a different second type of key.

The difference between this method and the above-mentioned second method is that in the second method, the server decrypts and obtains personal privacy information and sends it to the handheld device. Or the key K is sent to the handheld device, and the handheld device decrypts the personal privacy information using SK2 and/or the key K in the received second type of keys to obtain the personal privacy information. In addition, in this method, for each express, the server generates the second type key of the target encryption algorithm and stores it locally on the server, and when receiving the express tracking number and the number of the target encryption algorithm sent by the handheld device, The second type key of the target encryption algorithm is sent to the handheld device.

In this way, the second type key required by the target encryption algorithm is calculated by the server after generating the express order number and determining the target encryption algorithm, that is, the second type key corresponding to each express delivery is different. It increases the uncertainty, increases the difficulty of cracking, and improves the security of personal privacy information.

The encryption algorithm selection rule in the above-mentioned embodiment, and/or the encryption algorithm library, and/or the first type key of each express station and the second type key of each encryption algorithm need to be updated regularly; the encryption algorithm library The update includes the number, type of encryption algorithm or the update of the number of each encryption algorithm. By updating the encryption algorithm selection rules, the encryption algorithm library and/or the first type key of each express station and the second type key of each encryption algorithm, the security and reliability of the encryption algorithm can be strengthened, and the user's Personal privacy information leaked.

In addition, in the first implementation manner of the above-mentioned step 8, each express station may also periodically update its first-type key and its stored second-type keys of various encryption algorithms. For example, weekly updates, monthly updates, etc. The updated public key and private key in the first type key and the second type key are randomly generated by the server and sent to each express station, and then sent by each express station to each handheld device or server within its range. Send directly to each handheld device. After updating the public-private key pair, each handheld device will store the updated public-private key pair and the previous public-private key pair together. The purpose of regularly updating the public-private key pair is to further strengthen the security and reliability of the encryption algorithm, and the preservation of the public-private key pair before the update is mainly to prevent the express delivery sent some time ago from reaching the express destination after the public-private key pair is updated. The handheld device at the courier terminal could not decode correctly when it was stopped.

In the present invention, the public terminal of the express starting station refers to a device provided by the express starting station to facilitate the sender (user) to fill in the personal privacy information and address information of the sender and the recipient when sending express delivery, Such as PC, laptop, etc. A user terminal refers to a user's personal device that can be used to fill in the sender's and recipient's personal privacy information and address information, such as a mobile phone, laptop computer, tablet, etc. Users can fill in the personal privacy information and address information of the sender and recipient through the official account of the social platform such as WeChat on the user terminal or the service website or APP of the logistics company in any place.

Various types of encryption algorithms and their corresponding numbers are stored in the encryption algorithm library pre-stored by the server. Specifically, the encryption algorithm library includes a series of encryption algorithms such as symmetric encryption algorithms, asymmetric encryption algorithms, and hybrid encryption algorithms. Each encryption algorithm has a unique number. For example, the corresponding number of the DES algorithm is 0, the corresponding number of the RSA algorithm is 1, and the corresponding number of the hybrid encryption algorithm of the DES and RSA algorithms is 2, etc. In the subsequent decryption process, the corresponding decryption key is searched by the number corresponding to the encryption algorithm, or the number corresponding to the encryption algorithm and the express order number, and then the encrypted personal privacy information is obtained.

In step 5, the server encrypts the number of the target encryption algorithm by using the public key PK1 in the first type of key of the express destination station, so as to avoid that the couriers of other express stations during the operation of the express delivery can scan the number of the target encryption algorithm through their handheld devices. The dimensional code obtains the target encryption algorithm number, and if it further interacts with the server, it will be easier to obtain the decryption key, thus increasing the risk of leakage of personal privacy information.

In step 6, the express delivery receipt includes two identical QR codes. For example, there is a QR code in the middle and the upper right corner of the printed express delivery form. The purpose is to prevent the contamination of the express delivery form during the express delivery process and make the QR code incomplete, which makes it impossible to scan and decrypt the code. Setting up multiple QR codes at the location provides a certain security guarantee.

Further, when the two QR codes in the express receipt are all defaced and cannot be scanned or delivered normally, the express to be sent will be returned to the express station where the express administrator with advanced authority is located. The courier administrator checks the relevant information of the recipient and the sender on the server through its special equipment and the express tracking number displayed in the clear code, so as to continue the delivery of the express package. If the courier is delivered to the wrong terminal, because its decoding key is incorrect, it can only be returned to the superior station for delivery to the correct terminal, thus effectively protecting the user's private information.

In step 7, when the sender fills in the personal privacy information and address information at the public terminal of the express starting station, the express delivery form can be printed directly through the public terminal of the express starting station or a device connected to it; When the user terminal fills in personal privacy information and address information, the express face slip can be printed through the user terminal or a device connected to the user terminal. In addition, in the present invention, if the sender is the express delivery form printed at the express delivery starting station, the picker can visit the door to check the express delivery according to the unencrypted address information, or check the delivery at the express starting station. Check the courier to be sent brought by the sender; if the sender prints the courier receipt on the user terminal or the device connected to it, the sender will come to the door to prepare the delivery after confirming the sender's address information. The courier can be inspected.

In the present invention, the whole information of the personal privacy information is encrypted during encryption, so that the handheld device can directly obtain all the information of the personal privacy information during decryption. In the express delivery slip, only a part of the personal privacy information is displayed. For example, as shown in Figure 2, the names of the sender and recipient in the express delivery slip are replaced by "*". The 4 to 7 digits of the mobile phone number are replaced by "*", and the last four digits of the mobile phone number are displayed in plain code, in order to quickly identify the recipient during the delivery process. For example, the name: Zhang Sanfeng, the mobile phone number: 13812345678, the printed electronic express face sheet shows: Zhang**, the mobile phone number: 138****5678. The address information of the recipient and the sender is displayed in clear text on the printed express delivery slip, in order to quickly query the corresponding address during delivery or return. In addition, the middle part of the printed express delivery form is marked with the city names of the express starting station and express destination station, and it is marked with emphasis, such as using large black bold fonts to highlight it, in order to prevent express delivery during transportation. When there is a delivery error in the delivery, the relevant staff will be reminded in time, thereby reducing the possibility of delivery errors in express delivery. The printed courier receipt also includes the courier number displayed in the form of a barcode. The purpose is to update the logistics information in time by scanning the barcode under the existing logistics distribution system, so as to facilitate the user to query the logistics information according to the courier number. Specifically, when the express arrives at any express transit station, the express transit station scans the express tracking number, submits the current logistics information to the server, and the server updates the logistics information. When subsequent users need to query the logistics information, the express tracking number is Can achieve.

Further, after printing the express delivery form, the express starting station will print and paste the express delivery form containing the express information and the QR code on the surface of the express package to be sent, so as to facilitate delivery according to the above address information.

Optionally, in step 8, when notifying the recipient to pick up the express, the dispatcher can control the handheld device to call the phone number in the personal privacy information, and dial the phone number or send a message to the number to notify the recipient. Pickup by the person. Specifically, the handheld device can have a built-in communication control module. For example, after installing the SIM card, the dispatcher can scan the QR code with the handheld device to obtain the recipient's phone number, and can automatically dial the phone or send a short message.

Claims (7)

1. A method for protecting personal privacy information in express delivery by using a dynamic encryption mechanism is characterized by comprising the following steps:

step 1, a public terminal or a user terminal of an express starting station acquires personal privacy information and address information of a sender and a receiver to be sent out an express, and sends the personal privacy information and the address information to a server of a logistics enterprise;

step 2, the server receives the personal privacy information and the address information, generates an express bill number of the express to be sent out according to a preset bill number generation rule, records the generation time of the express bill number, and determines an express terminal station to which the express to be sent out arrives;

step 3, the server calculates the number and sum of the last two digits of the express bill number, the serial numbers of the start province and the end province of the address information of the express to be sent out and the digits of the date in the generation time of the express bill number; the server uses the numbers and sum to complement the total number of the algorithms in the encryption algorithm library to obtain a remainder n, determines the remainder n as the number of the target encryption algorithm, and determines the encryption algorithm corresponding to the number as the target encryption algorithm; the number of dates in the generation time is: taking two digits after year, month and day;

step 4, the server acquires a private key SK1 and a public key PK1 in a first type of key of the express destination according to the express destination to which the express to be sent out arrives, and acquires a private key SK2, a public key PK2 and/or a key K in a second type of key of a target encryption algorithm;

step 5, the server encrypts the serial number of the target encryption algorithm by using a public key PK1 in the first type of key of the express destination, and encrypts the personal privacy information by using a public key PK2 and/or a key K in the second type of key of the target encryption algorithm;

step 6, the server sends each piece of information required for generating the express bill to a public terminal or a user terminal of an express starting station according to the arrangement sequence of each piece of information in the express bill, wherein the express bill comprises address information of a sender and a receiver displayed in a plaintext, part of information in personal privacy information displayed in the plaintext, an express bill number displayed in a bar code form and at least one two-dimensional code, and the two-dimensional code comprises the express bill number, the number of an encrypted target encryption algorithm and the encrypted personal privacy information;

step 7, after the public terminal or the user terminal of the express initiating station generates and prints the express bill according to the received information required for generating the express bill, each express station of the logistics enterprise transports the express according to the address information displayed in the plain text on the express bill;

step 8, when the express reaches an express terminal, a dispatcher of the express terminal scans the two-dimensional code by using a handheld device, and obtains personal privacy information according to a scanning result, so that the dispatcher informs a receiver to take the express according to the personal privacy information;

in step 8, when the handheld device obtains the private information according to the scanning result, the method includes the following three ways:

the first mode is as follows: after the handheld device scans the two-dimensional code, a private key SK1 in a first type of key stored locally in advance is obtained, the number of a target encryption algorithm is decrypted by using the private key SK1 in the first type of key, then the private key SK2 and/or the key K in a second type of key corresponding to the number of the target encryption algorithm are inquired in second types of keys of various encryption algorithms stored locally in advance, and personal privacy information is decrypted by using the private key SK2 and/or the key K in the inquired second type of key, so that personal privacy information is obtained; the second-class keys of various encryption algorithms are pre-calculated by the server and sent to the handheld device, and the second-class keys of each encryption algorithm are kept unchanged before the server recalculates next time;

the second mode is as follows: the handheld device scans the two-dimensional code to obtain an express bill number, after a private key SK1 in a first type key stored locally in advance is obtained, the private key SK1 in the obtained first type key is used for decrypting the number of a target encryption algorithm, after the number of the target encryption algorithm is obtained, the express bill number and the number of the target encryption algorithm are sent to the server, the server inquires SK2 and/or a key K in a second type key of the target encryption algorithm corresponding to the express bill number, and after the personal privacy information is decrypted by the SK2 and/or the key K in the inquired second type key, the personal privacy information is sent to the handheld device; the second type key of the target encryption algorithm is used for generating an express bill number for the server, determining the target encryption algorithm, calculating, obtaining and storing the second type key in the local server, and each express corresponds to a different second type key;

the third mode is as follows: the handheld device scans the two-dimensional code to obtain an express bill number, after a private key SK1 in a first type key stored locally in advance is obtained, the private key SK1 in the obtained first type key is used for decrypting the number of a target encryption algorithm, after the number of the target encryption algorithm is obtained, the express bill number and the number of the target encryption algorithm are sent to the server, the server inquires SK2 and/or a key K in a second type key of the target encryption algorithm corresponding to the express bill number, and sends the inquired SK2 and/or the key K in the second type key to the handheld device, after the handheld device receives the SK2 and/or the key K in the second type key inquired by the server, the received SK2 and/or the key K in the second type key are used for decrypting the personal privacy information, and the personal privacy information is obtained; the second type key of the target encryption algorithm is obtained by calculation after the server generates the express bill number and determines the target encryption algorithm, and is sent to the handheld device, and each express corresponds to a different second type key.

2. The method for protecting personal privacy information in courier by applying dynamic encryption mechanism as claimed in claim 1, wherein the personal privacy information includes name and phone.

3. The method for protecting private information in courier by using dynamic encryption mechanism as claimed in claim 1 or 2, wherein in step 3, the method for the server to determine the target encryption algorithm for the courier to be sent out is further: the server randomly selects a number for the express to be sent from a pre-stored encryption algorithm library, and determines an encryption algorithm corresponding to the number as a target encryption algorithm.

4. The method for protecting the private information in the courier by using the dynamic encryption mechanism as claimed in claim 1 or 2, wherein in the step 2, the method for the server to determine the courier destination to which the courier is to be sent out is as follows:

the server determines a terminal station selected by a user from a user terminal or a public terminal of an express initial station as an express terminal station to which express is to be sent out;

or the server selects the express station closest to the address of the addressee as an express destination station according to the address information of the addressee of the express to be sent out.

5. The method for protecting personal privacy information in courier by using dynamic encryption mechanism as claimed in claim 1 or 2, wherein in the step 5, the server uses the public key PK2 and/or the secret key K in the second type of key of the target encryption algorithm to encrypt the personal privacy information means:

when the target encryption algorithm used by the server is a symmetric encryption algorithm, encrypting the personal privacy information by using a key K in a second type of key of the target encryption algorithm;

when the target encryption algorithm used by the server is an asymmetric encryption algorithm, the public key PK2 in the second type of key of the target encryption algorithm is used for encrypting the personal privacy information;

when the target encryption algorithm used by the server is a mixed encryption algorithm, the public key PK2 in the second type of key of the target encryption algorithm is used for encrypting the key K in the second type of key, the encrypted key K is stored in the server or the handheld device, and then when the personal privacy information is encrypted, the server decrypts the encrypted key K by using the private key SK2 in the second type of key of the target encryption algorithm and encrypts the personal privacy information by using the decrypted key K.

6. The method for protecting the personal privacy information in the express delivery by applying the dynamic encryption mechanism as claimed in claim 1 or 2, wherein a part of the information in the personal privacy information in the step 6 refers to the first three digits and the last four digits in the last name and the mobile phone number in the name; alternatively, a part of the private information may be a last name in the name, an area code in the fixed telephone number, and the last four digits in the fixed telephone number except the area code.

7. The method for protecting private information of express delivery by using dynamic encryption mechanism as claimed in claim 1 or 2, further comprising:

the server regularly updates an encryption algorithm selection rule and/or an encryption algorithm library and/or a first type key of each express delivery station and a second type key of each encryption algorithm; the updating of the encryption algorithm library includes updating the number, kind or number of each encryption algorithm therein.

Images