Data check methods, apparatuses, and devices

Patent metadata

Field	Value
Publication number	US-11270029-B2
Application number	US-202117364528-A
Country	US
Kind code	B2
Filing date	Jun 30, 2021
Priority date	Aug 31, 2020
Publication date	Mar 8, 2022
Grant date	Mar 8, 2022

Abstract

Examples in this application disclose data check computer-implemented methods, media, and systems. One example computer-implemented method includes retrieving, by a trusted execution environment (TEE), a check-triggering instruction from a server, where the check-triggering instruction is configured to trigger the TEE to perform a consistency check on basic data of a user to be identified, in response to the check-triggering instruction, retrieving, by the TEE, encrypted standard basic data of the user from a trusted institution, retrieving, by the TEE, encrypted basic data of the user from a first institution, retrieving, by the TEE, the basic data of the user by decrypting the encrypted basic data, performing, by the TEE, the consistency check on the basic data of the user based on the encrypted standard basic data to obtain a check result, and sending, from the TEE, the check result to a second institution.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
retrieving, by a trusted execution environment (TEE) on an off-chain computer, a check-triggering instruction from a server, wherein
the check-triggering instruction triggers the TEE to perform a consistency check on basic data of a user to be identified, wherein the basic data of the user comprises user identification information of the user, and
the TEE on the off-chain computer is verified as trustworthy by a trusted institution that is an authentication server;

in response to the check-triggering instruction, retrieving, by the TEE, encrypted standard basic data of the user from the trusted institution;
retrieving, by the TEE, encrypted basic data of the user from a first institution;
retrieving, by the TEE, the basic data of the user by decrypting the encrypted basic data;
performing, by the TEE, the consistency check on the basic data of the user based on the encrypted standard basic data to obtain a check result, wherein the consistency check comprises know your customer (KYC) check; and
in response to receiving an acquisition request from a second institution, sending, from the TEE, the check result to the second institution.

2. The computer-implemented method of claim 1 , comprising:
retrieving, by the TEE, the encrypted basic data based on the user identification information of the user from a cloud storage server, wherein the encrypted basic data is uploaded by the first institution to the cloud storage server.

3. The computer-implemented method of claim 2 , wherein the user identification information comprises an account registered by the user at the first institution or assigned to the user by the first institution in response to an operation initiated by the user at the first institution.

4. The computer-implemented method of claim 1 , comprising:
decrypting the encrypted standard basic data of the user to obtain standard basic data.

5. The computer-implemented method of claim 4 , wherein performing the consistency check on the basic data of the user based on the encrypted standard basic data comprises:
comparing the basic data of the user with the standard basic data; and
determining that the basic data is real data in response to the check result indicating that the basic data is the same as the standard basic data, or determining that the basic data is false data in response to the check result indicating that the basic data is not the same as the standard basic data.

6. The computer-implemented method of claim 1 , comprising:
receiving, by the TEE, a check result acquisition request from the second institution, wherein the check result acquisition request is configured to request the check result.

7. The computer-implemented method of claim 6 , wherein the check result acquisition request comprises the user identification information of the user.

8. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
retrieving, by a trusted execution environment (TEE) on an off-chain computer, a check-triggering instruction from a server, wherein
the check-triggering instruction triggers the TEE to perform a consistency check on basic data of a user to be identified, wherein the basic data of the user comprises user identification information of the user, and
the TEE on the off-chain computer is verified as trustworthy by a trusted institution that is an authentication server;

in response to the check-triggering instruction, retrieving, by the TEE, encrypted standard basic data of the user from the trusted institution;
retrieving, by the TEE, encrypted basic data of the user from a first institution;
retrieving, by the TEE, the basic data of the user by decrypting the encrypted basic data;
performing, by the TEE, the consistency check on the basic data of the user based on the encrypted standard basic data to obtain a check result, wherein the consistency check comprises know your customer (KYC) check; and
in response to receiving an acquisition request from a second institution, sending, from the TEE, the check result to the second institution.

9. The non-transitory, computer-readable medium of claim 8 , wherein the operations comprise:
retrieving, by the TEE, the encrypted basic data based on the user identification information of the user from a cloud storage server, wherein the encrypted basic data is uploaded by the first institution to the cloud storage server.

10. The non-transitory, computer-readable medium of claim 9 , wherein the user identification information comprises an account registered by the user at the first institution or assigned to the user by the first institution in response to an operation initiated by the user at the first institution.

11. The non-transitory, computer-readable medium of claim 8 , wherein the operations comprise:
decrypting the encrypted standard basic data of the user to obtain standard basic data.

12. The non-transitory, computer-readable medium of claim 11 , wherein performing the consistency check on the basic data of the user based on the encrypted standard basic data comprises:
comparing the basic data of the user with the standard basic data; and
determining that the basic data is real data in response to the check result indicating that the basic data is the same as the standard basic data, or determining that the basic data is false data in response to the check result indicating that the basic data is not the same as the standard basic data.

13. The non-transitory, computer-readable medium of claim 8 , wherein the operations comprise:
receiving, by the TEE, a check result acquisition request from the second institution, wherein the check result acquisition request is configured to request the check result.

14. The non-transitory, computer-readable medium of claim 13 , wherein the check result acquisition request comprises the user identification information of the user.

15. A computer-implemented system, comprising:
one or more computers; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
retrieving, by a trusted execution environment (TEE) on an off-chain computer, a check-triggering instruction from a server, wherein
the check-triggering instruction triggers the TEE to perform a consistency check on basic data of a user to be identified, wherein the basic data of the user comprises user identification information of the user, and
the TEE on the off-chain computer is verified as trustworthy by a trusted institution that is an authentication server;

in response to the check-triggering instruction, retrieving, by the TEE, encrypted standard basic data of the user from the trusted institution;
retrieving, by the TEE, encrypted basic data of the user from a first institution;
retrieving, by the TEE, the basic data of the user by decrypting the encrypted basic data;
performing, by the TEE, the consistency check on the basic data of the user based on the encrypted standard basic data to obtain a check result, wherein the consistency check comprises know your customer (KYC) check; and
in response to receiving an acquisition request from a second institution, sending, from the TEE, the check result to the second institution.

16. The computer-implemented system of claim 15 , wherein the one or more operations comprise:

Assignees

• Alipay Hangzhou Inf Tech Co Ltd

Inventors

• Yang Renhui
• Wang Xinmin
• Chen Yuan
• Yang Wenyu
• Qian Feng
• Guo Qianting
• Li Shubo

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• G06Q20/401

  Transaction verification · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/02

  involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] · CPC title

• G06F2221/2137

  Time limited access, e.g. to a computer or data · CPC title