A blockchain-based trust service architecture and method

Abstract

The present invention provides a blockchain-based trust service architecture, including an identity authentication interface layer and a service layer; the identity authentication interface layer is connected to the service layer; the identity authentication interface layer is used to provide a blockchain operation interface, It can provide basic identity registration and authentication functions externally, and interface with the identity provider to realize initial identity registration, identification, registration and subsequent authentication; the service layer triggers the internal collaborative work of the service layer through the event flow to provide blockchain services . In the present invention, the valid personal data of the user is stored in the user terminal after authentication, and there is no risk of a central database; when the merchant authenticates the user, whether the user shares information and what information to share is determined by the user; The certification does not need to carry the original certification materials, which simplifies the certification process and realizes the transfer of trust.

Description

technical field [0001] The invention relates to a blockchain-based trust service architecture and method, and belongs to the technical field of blockchain applications. Background technique [0002] Trust service is one of the key technologies of information security. The mainstream identity authentication is an online authentication technology based on passwords, but the diversification of terminal applications makes trust services more and more important. People have multiple applications on the Internet and have multiple virtual identities; with the increasing number of IoT devices, these devices It is becoming more and more untenable to hand over data to a centralized identity provider. Once data leaks, it will not only cause a loss of privacy for a large number of users, but also have catastrophic consequences for the tangible infrastructure, and users do not know that their data is in the center. Who uses, modifies, deletes, etc. the database. [0003] OAuth sets up ...

AI Technical Summary

Problems solved by technology

The mainstream identity authentication is an online authentication technology based on passwords, but the diversification of terminal applications makes trust services more and more important. People have multiple applications on the Internet and have multiple virtual identities; with the increasing number of IoT devices, these devices Handing over data to a centralized identity provider is becoming more and more untenable. Once data leaks, it will not only cause a loss of privacy for a large number of users, but also have catastrophic consequences for the tangible infrastructure, and users do not know that their data is in the center. Who uses, modifies, deletes, etc. the database

[0003] OAuth sets up an authorization layer between the user end and the service provider, allowing third-party websites to access the user's data stored in the service provider under the authorization of the user, but still use the centralized database; FIDO uses the UAF standard and two-factor experience without password experience The U2F standard can reduce the user's dependence on passwords and authentication risks, such as excessive concentration and inconvenient input, but it also fails to solve the problem of centralized database

[0004] In the prior art, a variety of protection methods are provided for information security, but information security cannot be effectively realized, such as the Chinese patent "A Method for Autonomous Interconnection of Internet of Things Devices Based on Blockchain (Publication No.: CN107819848A, Publication Date: 2018.3.20) "public self-governing interconnection method, which uses smart contracts to issue device identities, and realizes the expansion of trust anchors (smart contracts) and trust expansion methods without a center. There is no mention of any possible solutions in this patent. Centralized database management pressure, technology to protect user privacy needs

Images