Acquired information sharing method and system based on dual authentication and multiple protection measures

Abstract

The invention discloses an acquired information sharing method and a system based on dual authentication multiple protection measures, and relates to an acquired information sharing method. In the prior art, head information is used for transmitting user identity verification information, and user information is easy to intercept in the method. The method comprises the following steps: a client initiates an account authentication request; if the authentication is passed, randomly generating a temporary token, and returning the temporary token to the receiver; initiating the data request againafter obtaining the temporary token by the receiver, and decrypting the token by the sender after receiving the request and judging the validity of the token and the timeliness of the token; if the verification is passed, entering links of extracting data and assembling the data; the server extracts the acquired data and performs data desensitization; signing the data and encrypting the data; andsending the original text and the encrypted abstract to a receiver together. According to the method, an authentication method combining account authentication and token authentication is used, identity authentication service and data providing service are separated, and the security of interface interaction is greatly improved.

Description

technical field [0001] The invention relates to a collection information sharing method, in particular to a collection information sharing method and system based on double authentication and multiple protection measures. Background technique [0002] With the rapid advancement of the construction of the electricity consumption information collection system, the electricity consumption information collection system has fully entered the stage of deepening the application, and the information interaction and sharing between the electricity consumption information collection system and other business application systems is becoming more and more frequent, and the collected data is relatively sensitive. This also puts forward higher requirements for the security of collecting data, publishing and sharing. [0003] At present, the methods of data interaction and sharing between heterogeneous systems mainly include Web Service technology, message middleware, FTP / file sharing serv...

AI Technical Summary

Problems solved by technology

[0004] In terms of security authentication, traditional Web Service interface interactions mostly use header information (SoapHeader) to transmit user authentication information. This authentication method is easy to intercept user information and has certain security risks; the size of transmitted data is limited, and the There is a bottleneck in the interaction and sharing of big data information

In addition, in terms of data sharing, most of the source data is directly provided on demand, and technical means such as data signature or watermarking are not adopted. If the data is tampered with during transmission, post-verification cannot be performed, and the source of the data cannot be traced.

Images