Blockchain-based inspection and logging method, equipment, electronic device, and storage medium

Abstract

The present application relates to a blockchain-based patrol login method, equipment, electronic device, and storage medium, wherein the blockchain-based patrol login method includes: identifying the entity certificate corresponding to the patrol personnel and obtaining the encrypted authentication information stored in the entity certificate; decrypting the authentication information based on pre-stored decryption information to obtain the private key corresponding to the patrol personnel in the authentication information; signing the patrol personnel's account with the private key, and determining whether the patrol personnel is allowed to log in based on the signed account through the blockchain. Through this application, the problem of patrol equipment needing to store a large number of electronic certificates in related technologies, resulting in unnecessary memory consumption, is solved, thereby reducing the memory consumption of the patrol equipment.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a blockchain-based patrol login method, equipment, electronic device, and storage medium. Background Art

[0002] Offline locations such as shopping malls, office buildings, schools, factories, hotels, and residences all require regular and ongoing patrol inspections for fire safety and other issues. Currently, this inspection process is primarily manual, with on-duty personnel arriving at designated inspection locations at designated times or frequencies to verify the safety of the venue. Furthermore, inspection equipment installed at the inspection locations verifies the identity of the inspectors.

[0003] In related technologies, identity authentication of patrol personnel can be achieved by storing electronic certificates corresponding to patrol personnel in patrol equipment. However, since patrol equipment is usually a small terminal device with limited memory, the storage of electronic certificates will consume a large amount of memory in the patrol equipment, affecting the normal operation of other services in the patrol equipment.

[0004] Currently, no effective solution has been proposed for the problem in related technologies that inspection equipment needs to store a large number of electronic certificates, resulting in unnecessary consumption of memory. Summary of the Invention

[0005] The embodiments of the present application provide a blockchain-based inspection and login method, equipment, electronic device, and storage medium to at least solve the problem in the related art that inspection equipment needs to store a large number of electronic certificates, resulting in unnecessary consumption of memory.

[0006] In a first aspect, an embodiment of the present application provides a blockchain-based inspection login method, comprising:

[0007] Identify the entity certificate corresponding to the inspection personnel and obtain the encrypted authentication information stored in the entity certificate;

[0008] Decrypting the authentication information based on pre-stored decryption information to obtain a private key corresponding to the inspection personnel in the authentication information;

[0009] The patrol officer's account is signed using the private key, and whether the patrol officer is allowed to log in is determined through the blockchain based on the signed account.

[0010] In some embodiments, before identifying the entity certificate corresponding to the inspection personnel, the method further includes:

[0011] Obtaining the encryption status of the entity certificate;

[0012] When the encryption state of the entity certificate is encrypted, the inspection personnel are instructed to decrypt the entity certificate using a biometric identifier.

[0013] In some embodiments, decrypting the authentication information based on pre-stored decryption information includes:

[0014] Obtaining the decryption validity period of the biometric identifier in the physical certificate;

[0015] The authentication information is decrypted based on pre-stored decryption information within the decryption validity period.

[0016] In some embodiments, the method for obtaining the entity certificate includes:

[0017] Obtaining the inspection personnel's application request for the entity certificate, and approving the application request according to the inspection personnel's authority;

[0018] If the application request is approved, sending a physical certificate production command, wherein the authentication information stored in the physical certificate includes the private key of the inspector;

[0019] After the physical certificate is prepared, a physical certificate distribution command is sent to distribute the physical certificate to the corresponding inspection personnel.

[0020] In some embodiments, identifying the entity certificate corresponding to the inspection personnel includes:

[0021] When the inspection personnel are on a preset inspection route, identifying the physical certificate;

[0022] The method for obtaining the inspection route includes:

[0023] Obtaining an electronic certificate of an administrator through a first management system, and obtaining an administrator account of the administrator through a second management system, wherein the electronic certificate is in an encrypted state;

[0024] After decrypting the electronic certificate, signing the administrator account according to the private key in the electronic certificate;

[0025] The signed administrator account is verified, and after the signed administrator account verification passes, the administrator is allowed to log in to the second management system to plan the inspection route.

[0026] In some embodiments, after allowing the administrator to log in to the second management system to plan the inspection route, the method includes:

[0027] Delete the electronic certificate of the administrator.

[0028] In some embodiments, after determining whether the patrol officer is allowed to log in based on the signed account through the blockchain, the method includes:

[0029] The inspection information is stored in the blockchain, wherein the inspection information includes at least one of the following: inspection location information, inspection duration of the inspection personnel, signed account, and identification information of the entity certificate.

[0030] In a second aspect, an embodiment of the present application provides a blockchain-based patrol and login device, which includes an identification module, a decryption module, and a signature module:

[0031] The identification module is used to identify the entity certificate corresponding to the inspection personnel and obtain the encrypted authentication information stored in the entity certificate;

[0032] The decryption module is used to decrypt the authentication information based on pre-stored decryption information to obtain the private key corresponding to the inspection personnel in the authentication information;

[0033] The signature module is used to sign the patrol officer's account using the private key, and determine whether the patrol officer is allowed to log in based on the signed account through the blockchain.

[0034] In a third aspect, an embodiment of the present application provides an electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor. When the processor executes the computer program, the blockchain-based inspection and login method as described in the first aspect above is implemented.

[0035] In a fourth aspect, an embodiment of the present application provides a storage medium on which a computer program is stored. When the program is executed by a processor, the steps of the blockchain-based inspection and login method as described in the first aspect above are implemented.

[0036] Compared to related technologies, the blockchain-based patrol login method provided by the embodiments of this application identifies the physical certificate corresponding to the patrol personnel and obtains the encrypted authentication information stored in the physical certificate. The authentication information is decrypted based on pre-stored decryption information to obtain the private key corresponding to the patrol personnel in the authentication information. The patrol personnel's account is signed using the private key, and the blockchain determines whether the patrol personnel is allowed to log in based on the signed account. This solves the problem in related technologies where patrol equipment needs to store a large number of electronic certificates, resulting in unnecessary memory consumption, and reduces the memory consumption of patrol equipment.

[0037] The details of one or more embodiments of the present application are set forth in the following drawings and description to make other features, objects, and advantages of the present application more readily apparent. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0039] Figure 1 Schematic diagram of the application environment of the blockchain-based inspection login method according to an embodiment of the present application;

[0040] Figure 2 This is a flowchart of a blockchain-based inspection login method according to an embodiment of the present application;

[0041] Figure 3 is a flowchart of a method for obtaining an entity certificate according to an embodiment of the present application;

[0042] Figure 4 is a flowchart of a method for obtaining an inspection route according to an embodiment of the present application;

[0043] Figure 5 This is a hardware structure diagram of a terminal for the blockchain-based inspection login method according to an embodiment of the present application;

[0044] Figure 6 This is a structural block diagram of a blockchain-based inspection and login device according to an embodiment of the present application. DETAILED DESCRIPTION

[0045] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application is described and illustrated below in conjunction with the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application. Based on the embodiments provided in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application. In addition, it can also be understood that although the efforts made in this development process may be complex and lengthy, for ordinary technicians in the field related to the contents disclosed in the present application, some changes such as design, manufacturing or production based on the technical contents disclosed in the present application are only conventional technical means and should not be understood as the contents disclosed in the present application being insufficient.

[0046] References to "embodiments" in this application mean that a particular feature, structure, or characteristic described in connection with the embodiment may be included in at least one embodiment of the application. The appearance of this phrase in various places in the specification does not necessarily refer to the same embodiment, nor does it refer to independent or alternative embodiments that are mutually exclusive of other embodiments. It is understood, both explicitly and implicitly, by those skilled in the art that the embodiments described in this application may be combined with other embodiments unless there is a conflict.

[0047] Unless otherwise defined, the technical or scientific terms used in this application should have the ordinary meaning understood by a person of ordinary skill in the technical field to which this application belongs. The words "one", "a", "the" and the like used in this application do not indicate a limit on quantity and may indicate the singular or plural. The terms "include", "comprise", "have" and any variations thereof used in this application are intended to cover non-exclusive inclusions; for example, a process, method, system, product or device that includes a series of steps or modules (units) is not limited to the listed steps or units, but may also include steps or units that are not listed, or may also include other steps or units that are inherent to these processes, methods, products or devices. The words "connect", "connected", "coupled" and the like used in this application are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. The word "multiple" used in this application means greater than or equal to two. "And / or" describes the association relationship of associated objects, indicating that three relationships can exist. For example, "A and / or B" can mean: A exists alone, A and B exist at the same time, and B exists alone. The terms "first", "second", "third" and the like involved in this application are merely used to distinguish similar objects and do not represent a specific ordering of the objects.

[0048] The blockchain-based inspection login method provided in this application can be applied to Figure 1 In the application environment shown, Figure 1 This is a schematic diagram of the application environment of the blockchain-based inspection login method according to an embodiment of the present application, such as Figure 1 As shown. During the inspection process, the inspection personnel can implement inspection clocking in through data exchange between the physical certificate 102 and the inspection device 104. Specifically, the inspection device 104 identifies the physical certificate 102 corresponding to the inspection personnel and obtains the encrypted authentication information stored in the physical certificate 102. The inspection device 104 decrypts the authentication information based on pre-stored decryption information to obtain the private key corresponding to the inspection personnel in the authentication information. The inspection device 104 signs the inspection personnel's account using the private key and verifies the signed account based on the blockchain. If the verification is successful, the inspection personnel is allowed to log in.

[0049] This embodiment provides a blockchain-based inspection login method. Figure 2 This is a flowchart of the blockchain-based inspection login method according to an embodiment of the present application, such as Figure 2 As shown, the method includes the following steps:

[0050] Step S210: Identify the entity certificate corresponding to the inspection personnel and obtain the encrypted authentication information stored in the entity certificate.

[0051] The patrol personnel in this application are staff members who conduct security patrols in public places such as shopping malls, office buildings, and hotels. When the patrol personnel arrive at the designated inspection equipment, they need to punch in to record their actual inspection route, inspection location, inspection time and other inspection information.

[0052] In this application, the inspection personnel use a physical certificate to punch in at the inspection equipment, where the physical certificate is a physical card that corresponds one-to-one to the inspection personnel and can be carried with them. The physical certificate in this embodiment can be made into an integrated circuit card (Integrated Circuit Card, referred to as IC card), or it can be a physical card based on near field communication (Near Field Communication, referred to as NFC) technology, or it can be a physical card with a universal serial bus (Universal Serial Bus, referred to as USB) interface.

[0053] Inspection personnel clock in on the inspection device using their physical credentials. The inspection device then identifies the physical credentials to facilitate data exchange and confirms the inspector's identity based on the acquired data. The inspection device is a terminal device installed at the inspection check-in point. Identification can be achieved through mobile networks, wireless networks, Bluetooth, or other communication methods, as well as NFC or USB technology.

[0054] In this embodiment, for security reasons, the information recognized by the inspection device from the entity certificate is encrypted authentication information, which can prove the identity of the inspection personnel. The encryption method of the authentication information must comply with the Advanced Encryption Standard (AES).

[0055] Step S220: decrypt the authentication information based on the pre-stored decryption information to obtain the private key corresponding to the inspection personnel in the authentication information.

[0056] Because the authentication information is encrypted, it must first be decrypted. In this embodiment, the decryption information is pre-stored on the inspection device. Therefore, after the inspection device recognizes the authentication information, it can directly decrypt it based on the decryption information. Furthermore, the authentication information in this embodiment includes the private key corresponding to the inspection personnel. This private key corresponds one-to-one with the inspection personnel, enabling verification of the inspection personnel's identity.

[0057] In step S230, the patrol officer's account is signed with a private key, and the blockchain is used to determine whether the patrol officer is allowed to log in based on the signed account.

[0058] After obtaining the private key, the inspection device uses the private key to sign the account entered by the inspector. Finally, the signed account is verified based on the blockchain. If the verification passes, the inspector is allowed to log in to the inspection device with the account password to clock in. If the verification fails, the inspector is deemed to have no permission to log in to the inspection device and cannot log in. Specifically, the blockchain verifies the signed account by decrypting the signed account using the public key corresponding to the private key to determine whether the account and private key used by the inspector when logging in are consistent. If they are consistent, it means that the private key, account, and inspector all correspond, and the verification is successful.

[0059] Through the above steps S210 to S230, the inspection personnel's certificate is set as a physical certificate in this application. During the clocking-in process, the inspection equipment can realize the inspection personnel's identity authentication by identifying and verifying the authentication information in the physical certificate. Therefore, it solves the problem in the related technology that the inspection equipment needs to store a large number of electronic certificates, causing unnecessary consumption of memory. Since there is no need to pre-store a large number of electronic certificates in the inspection equipment, the memory consumption of the inspection equipment is reduced.

[0060] This embodiment also provides a method for obtaining an entity certificate. Figure 3 is a flow chart of a method for obtaining an entity certificate according to an embodiment of the present application, such as Figure 3 As shown, the method includes the following steps:

[0061] Step S310: Obtain the application request for the physical certificate from the inspection personnel, and approve the application request according to the inspection personnel's authority.

[0062] If the inspectors want to obtain a physical certificate, they must first apply for it. In this embodiment, the inspectors can submit an application to the inspection equipment. In other embodiments, the inspectors can also apply to the inspection background. In this embodiment, the inspection equipment reviews the inspectors' application requests. Specifically, when reviewing and approving, the inspection equipment needs to review the inspectors' identities. At this time, the inspectors need to provide personal information such as their account, password, and work number, so that the inspection equipment can determine whether the inspectors have the authority to obtain the physical certificate. Furthermore, since the inspectors' inspection routes can be planned in advance, when the inspection equipment is equipped with a positioning module, the inspection equipment will also review and approve the matching of the inspectors and the inspection locations. Among them, the positioning module can be implemented based on the Global Positioning System (GPS) or the BeiDou Navigation Satellite System (BDS).

[0063] Step S320: When the application request is approved, a physical certificate production command is sent, wherein the authentication information stored in the physical certificate includes the private key of the inspector.

[0064] If the inspector has the authority to obtain the physical certificate, the inspector's application for the physical certificate is approved, or if the inspector has the authority to obtain the physical certificate and the physical certificate matches the inspection location, the application request is approved.

[0065] Then, the inspection device will send a physical certificate production command to the device that produces the physical certificate. When producing the physical certificate, the physical certificate will contain authentication information corresponding to the inspection personnel, such as a private key, and may further include biometric identifiers such as fingerprints.

[0066] Step S330: After the physical certificate is prepared, a physical certificate distribution command is sent to distribute the physical certificate to corresponding inspection personnel.

[0067] After the physical certificate is generated, the inspection device will receive a notification that the physical certificate has been generated. The inspection device can then send a physical certificate distribution command to the inspection backend to distribute the physical certificate to the inspection personnel. Specifically, the physical certificate can be sent to the inspection personnel by mail or the inspection personnel can claim it at a designated location.

[0068] Through the above steps S310 to S330, when producing the physical certificate, approval is required, and the inspection personnel are required to provide authentication information such as biometric identification and / or private key, which is conducive to increasing the security of the physical certificate.

[0069] In some embodiments, before identifying the entity certificate corresponding to the patrol officer, it is necessary to obtain the encryption status of the entity certificate, where the encryption status includes encrypted and decrypted. If the encryption status of the entity certificate is encrypted, the patrol officer needs to decrypt the entity certificate using a biometric identifier, where the biometric identifier is a unique identifier that corresponds to the patrol officer's identity and includes at least one of a fingerprint, iris, face, and voice. In this embodiment, an identification device is added to the entity certificate to identify the patrol officer's biometric identifier. The identification device pre-stores the patrol officer's biometric identifier. During the patrol check-in process, the entity certificate will only be decrypted and recognized by the patrol equipment if the identified biometric identifier is consistent with the pre-stored biometric identifier. Therefore, if the encryption status of the entity certificate is encrypted, the patrol equipment will not be able to recognize the authentication information in the entity certificate. At this time, the patrol equipment issues a command, instructing the patrol officer to decrypt the entity certificate. In this embodiment, the physical certificate is encrypted using the biometric identifier corresponding to the inspection personnel. Even if the physical certificate is stolen, the physical certificate cannot be decrypted using the biometric identifier and cannot be used. Therefore, the security of the physical certificate can be improved and the physical certificate can be prevented from being stolen.

[0070] Furthermore, when the inspection device identifies the physical certificate, it also needs to obtain the decryption validity period of the biometric identifier in the physical certificate, where the decryption validity period is a preset value. For example, the decryption validity period of a biometric identifier such as a fingerprint or iris can be pre-set to 5 minutes. Then, only within the decryption validity period can the authentication information be decrypted based on the pre-stored decryption information. If the decryption validity period exceeds, the physical certificate will be re-encrypted, and the re-encrypted physical certificate cannot be recognized by the inspection device. The inspection personnel must decrypt the physical certificate again using the biometric identifier before the inspection device can recognize the authentication information in the physical certificate. In this embodiment, adding a decryption validity period to the biometric identifier can further improve the security of the physical certificate and prevent the physical certificate from being misused.

[0071] In some embodiments, when a positioning module is present in the inspection device, the inspection device will first detect whether the inspection personnel matches its own inspection route. Only when the inspection personnel is on the preset inspection route will the inspection device identify the physical certificate. The inspection route in this embodiment can be planned and completed by the administrator on the inspection device. Specifically, the administrator needs to pass identity authentication before logging into the administrator system to plan the inspection route. The administrator can achieve identity authentication through his or her own physical certificate. The physical certificate can also be achieved through UKey, where UKey is a small storage device that is directly connected to the computer via USB, has a password verification function, is reliable and high-speed, and can achieve fingerprint verification function. On the other hand, the administrator can also achieve identity authentication through an electronic certificate.

[0072] Furthermore, Figure 4 is a flow chart of a method for obtaining an inspection route according to an embodiment of the present application, such as Figure 4 As shown, the method includes the following steps:

[0073] Step S410: obtaining the electronic certificate of the administrator through the first management system, and obtaining the administrator account of the administrator through the second management system, wherein the electronic certificate is in an encrypted state.

[0074] When an administrator authenticates their identity using an electronic certificate, the system from which the administrator obtains the electronic certificate is different from the system from which the administrator logs in. This ensures the security of the administrator's electronic certificate and prevents the electronic certificate from being misused if the administrator's account is compromised. Furthermore, the electronic certificate in this embodiment is encrypted, and encryption of the electronic certificate can also be accomplished using the AES encryption algorithm.

[0075] Step S420: After decrypting the electronic certificate, the administrator account is signed using the private key in the electronic certificate. Specifically, the inspection device decrypts the electronic certificate using pre-stored decryption information and then obtains the private key corresponding to the administrator in the electronic certificate.

[0076] Step S430: Verify the signed administrator account. After the signed administrator account verification passes, the administrator is allowed to log in to the second management system to plan the inspection route.

[0077] The verification of the signed administrator account can be completed based on the blockchain. The administrator's planning of the inspection route includes planning the inspection time, inspection location, and the order between multiple inspection locations. Therefore, each inspector can only punch in at the inspection equipment on the specified inspection route.

[0078] Through the above steps S410 to S430, the administrator account is signed based on the electronic certificate and the signed administrator account is verified. Only after the verification is passed can the administrator be allowed to log in to plan the inspection route, thereby improving the security and credibility of the administrator account.

[0079] Furthermore, after the administrator completes the planning of the inspection route and exits the inspection device, the inspection device will delete the administrator's electronic certificate, thereby saving storage space and preventing the administrator's electronic certificate from being stolen.

[0080] In some embodiments, after the inspector completes the inspection and clocks in, the inspection device will store the inspection information on the blockchain to achieve persistent storage and traceability of the inspection information. The inspection information includes at least one of the following: inspection location information, the inspection time of the inspector, the signed account, and the identification information of the entity certificate. The inspection location information includes the location information of the inspection device and the location information of multiple inspection clocks of the inspector. The inspection time of the inspector can be calculated by the time points on different clocking-in devices. The signed account is used to verify the identity of the inspector and achieve traceability. The identification information of the entity certificate can be the entity certificate number or the work number or identity ID corresponding to the inspector.

[0081] It should be noted that the steps shown in the above process or the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0082] The method embodiments provided in this application can be executed in a terminal, a computer or a similar computing device. Taking running on a terminal as an example, Figure 5 This is a hardware structure diagram of the terminal of the blockchain-based inspection login method according to an embodiment of the present application. Figure 5 As shown, the terminal 50 may include one or more ( Figure 5 Only one is shown) a processor 502 (the processor 502 may include but is not limited to a microprocessor MCU or a programmable logic device FPGA and other processing devices) and a memory 504 for storing data. Optionally, the terminal may also include a transmission device 506 and an input / output device 508 for communication functions. It will be understood by those skilled in the art that Figure 5 The structure shown is only for illustration and does not limit the structure of the above terminal. Figure 5 More or fewer components than shown, or with Figure 5 Different configurations shown.

[0083] The memory 504 can be used to store control programs, for example, software programs and modules of application software, such as the control program corresponding to the blockchain-based inspection and login method in the embodiment of the present application. The processor 502 executes the control program stored in the memory 504 to execute various functional applications and data processing, that is, to implement the above-mentioned method. The memory 504 may include high-speed random access memory and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 504 may further include a memory remotely located relative to the processor 502, and these remote memories can be connected to the terminal 50 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0084] Transmission device 506 is used to receive or send data via a network. A specific example of the aforementioned network may include a wireless network provided by the communications provider of terminal 50. In one embodiment, transmission device 506 includes a network interface controller (NIC), which can be connected to other network devices via a base station to enable communication with the Internet. In another embodiment, transmission device 506 may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0085] This embodiment also provides a blockchain-based inspection and logging device, which is used to implement the above-mentioned embodiments and preferred implementations. Details already described will not be repeated here. As used below, the terms "module," "unit," "subunit," etc. may refer to a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementation using hardware, or a combination of software and hardware, is also possible and contemplated.

[0086] Figure 6 This is a structural block diagram of a blockchain-based inspection and login device according to an embodiment of the present application, such as Figure 6 As shown, the inspection and login device includes an identification module 61, a decryption module 62 and a signature module 63:

[0087] Identification module 61, used to identify the entity certificate corresponding to the inspection personnel and obtain the encrypted authentication information stored in the entity certificate;

[0088] Decryption module 62, used to decrypt the authentication information based on pre-stored decryption information to obtain the private key corresponding to the inspection personnel in the authentication information;

[0089] The signature module 63 is used to sign the patrol officer's account using a private key, and determine whether the patrol officer is allowed to log in based on the signed account through the blockchain.

[0090] In this application, the inspector's certificate is set as a physical certificate. During the clocking-in process, the identification module 61 of the inspection device identifies the authentication information in the physical certificate, the decryption module 62 obtains the private key in the authentication information, and the signature module 63 signs the inspector's account. Finally, the signature is verified through the blockchain to realize the identity verification of the inspector. Therefore, it solves the problem in the related technology that the inspection device needs to store a large number of electronic certificates, resulting in unnecessary consumption of memory. Since there is no need to pre-store a large number of electronic certificates in the inspection device, the memory consumption of the inspection device is reduced.

[0091] The embodiments of the present application are described and illustrated below through preferred embodiments.

[0092] This embodiment provides a blockchain-based inspection system, which includes multiple inspection devices and an inspection backend. Since certificates in related technologies are all electronic certificates, storing them in the inspection devices consumes the inspection device's memory. Moreover, electronic certificates in related technologies are directly bound to accounts, making it impossible to verify the accounts, resulting in reduced account security. For example, account A may steal the certificate of account B and then send information. Therefore, in this application, the inspection devices are equipped with physical certificates for inspection personnel, which can reduce the memory consumption of the inspection devices. At the same time, the signature verification of the account based on the private key in the physical certificate avoids the direct binding of the certificate to the account, which can improve the security of the account. On the other hand, the inspection device can also provide the administrator with an electronic certificate, which stores the administrator's corresponding private key. When logging into the account, the administrator needs to sign the account with the private key. Only after the signature is verified by the blockchain can the administrator log in to the account and perform operations. Specifically, after logging into the account, the administrator can plan the inspection route and modify the permissions of the inspection personnel.

[0093] When inspectors clock in at multiple inspection devices along the inspection route, they need to first decrypt the physical certificate using their fingerprints. During the decryption validity period, each inspection device needs to identify the physical certificate. In addition to the private key and biometric identifier corresponding to the inspector, the physical certificate can also store the public key and information about the Certificate Authority (CA) issuing organization. After the inspection device identifies the private key in the physical certificate, it signs the account using the private key. When verifying the signed account, the signed account can be sent to the inspection backend first. The inspection backend verifies the signature based on the blockchain to determine whether the account, physical certificate, and private key are consistent.

[0094] Furthermore, inspection equipment can directly send received authentication information and various inspection information to the blockchain for storage, improving the reliability of the inspection equipment. The blockchain then sends the stored authentication information and inspection information to the inspection backend for storage. Conversely, the inspection backend can also upload various inspection and authentication information received to the blockchain for storage, ensuring data integrity.

[0095] The inspection backend in this embodiment is a centralized management platform. In other embodiments, the inspection backend may include both a centralized management platform and a storage center formed based on blockchain. Furthermore, the inspection backend itself may be formed based on blockchain. The inspection backend formed based on blockchain can realize decentralized management of inspection equipment, inspection personnel and entity certificates, as well as storage functions.

[0096] It should be noted that the acquisition of the entity certificate in this embodiment includes the following methods: 1. The inspection device receives the inspection personnel's application request for the entity certificate, and then sends the application request to the inspection background. The inspection background reviews the application request, and after approval, the inspection background issues the entity certificate production command; 2. The inspection device receives the inspection personnel's application request for the entity certificate and reviews it, and after approval, directly issues the entity certificate production command; 3. The inspection background receives the inspection personnel's application request for the entity certificate, and reviews the application request, and after approval, directly issues the entity certificate production command. This embodiment provides inspection personnel with a variety of ways to obtain entity certificates, which helps inspection personnel to obtain entity certificates more conveniently.

[0097] It should be further explained that each of the above modules can be a functional module or a program module, and can be implemented through software or hardware. For modules implemented through hardware, each of the above modules can be located in the same processor; or each of the above modules can be located in different processors in any combination.

[0098] This embodiment further provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0099] Optionally, the electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the processor, and the input / output device is connected to the processor.

[0100] Optionally, in this embodiment, the processor may be configured to execute the following steps through a computer program:

[0101] S1, identifying the entity certificate corresponding to the inspection personnel and obtaining the encrypted authentication information stored in the entity certificate;

[0102] S2, decrypting the authentication information based on the pre-stored decryption information to obtain the private key corresponding to the inspection personnel in the authentication information;

[0103] S3, signs the patrol personnel’s account with a private key, and determines whether the patrol personnel is allowed to log in based on the signed account through the blockchain.

[0104] It should be noted that the specific examples in this embodiment can refer to the examples described in the above embodiments and optional implementation modes, and this embodiment will not be repeated here.

[0105] In addition, in conjunction with the blockchain-based patrol login method in the above embodiments, the present application embodiment can provide a storage medium for implementation. The storage medium stores a computer program; when the computer program is executed by a processor, it implements any of the blockchain-based patrol login methods in the above embodiments.

[0106] The technical features of the above-mentioned embodiments can be combined arbitrarily. In order to make the description concise, not all possible combinations of the technical features in the above-mentioned embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0107] The above-described embodiments merely represent several implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that a person skilled in the art could make various modifications and improvements without departing from the spirit of the present application, all of which fall within the scope of protection of the present application. Therefore, the scope of protection of the present patent application shall be determined by the appended claims.

Claims

1. A blockchain-based inspection and login method, characterized in that: include: Identify the entity certificate corresponding to the inspection personnel and obtain the encrypted authentication information stored in the entity certificate; The physical certificate is a physical card that corresponds to the inspector and can be carried with him / her. Decrypting the authentication information based on pre-stored decryption information to obtain a private key corresponding to the inspection personnel in the authentication information; The patrol officer's account is signed using the private key, and the blockchain is used to determine whether the patrol officer is allowed to log in based on the signed account; Before identifying the physical certificate corresponding to the inspection personnel, the method further includes: Obtaining the encryption status of the entity certificate; In case the encryption state of the entity certificate is encrypted, instructing the inspection personnel to decrypt the entity certificate using a biometric identifier; The identification of the physical certificate corresponding to the inspection personnel includes: When the inspection personnel are on a preset inspection route, identifying the physical certificate; The method for obtaining the inspection route includes: Obtaining an electronic certificate of an administrator through a first management system, and obtaining an administrator account of the administrator through a second management system, wherein the electronic certificate is in an encrypted state; After decrypting the electronic certificate, signing the administrator account according to the private key in the electronic certificate; The signed administrator account is verified based on the blockchain. After the signed administrator account is verified, the administrator is allowed to log in to the second management system to plan the inspection route; The planning of the inspection route includes planning the inspection time, inspection location and the sequential relationship between multiple inspection locations of the inspection personnel.

2. The blockchain-based inspection and login method according to claim 1 is characterized in that: The decrypting the authentication information based on the pre-stored decryption information includes: Obtaining the decryption validity period of the biometric identifier in the physical certificate; The authentication information is decrypted based on pre-stored decryption information within the decryption validity period.

3. The blockchain-based inspection and login method according to claim 1 is characterized in that: The method for obtaining the entity certificate includes: Obtaining the inspection personnel's application request for the entity certificate, and approving the application request according to the inspection personnel's authority; If the application request is approved, sending a physical certificate production command, wherein the authentication information stored in the physical certificate includes the private key of the inspector; After the physical certificate is prepared, a physical certificate distribution command is sent to distribute the physical certificate to the corresponding inspection personnel.

4. The blockchain-based inspection and login method according to claim 1, characterized in that: After allowing the administrator to log in to the second management system to plan the inspection route, the method includes: Delete the electronic certificate of the administrator.

5. The blockchain-based inspection and login method according to claim 1 is characterized in that: After determining whether the patrol officer is allowed to log in based on the signed account through the blockchain, the method includes: The inspection information is stored in the blockchain, wherein the inspection information includes at least one of the following: inspection location information, inspection duration of the inspection personnel, signed account, and identification information of the entity certificate.

6. A blockchain-based patrol and logging device, characterized in that: The inspection and login device includes an identification module, a decryption module and a signature module: The identification module is used to identify the physical certificate corresponding to the inspection personnel and obtain the encrypted authentication information stored in the physical certificate; the physical certificate is a physical card that corresponds to the inspection personnel and can be carried with them; The decryption module is used to decrypt the authentication information based on pre-stored decryption information to obtain the private key corresponding to the inspection personnel in the authentication information; The signature module is used to sign the patrol officer's account using the private key, and determine whether the patrol officer is allowed to log in based on the signed account through the blockchain; Before identifying the physical certificate corresponding to the inspection personnel, the method further includes: Obtaining the encryption status of the entity certificate; In case the encryption state of the entity certificate is encrypted, instructing the inspection personnel to decrypt the entity certificate using a biometric identifier; The identification module is further configured to identify the physical certificate when the inspection personnel is on a preset inspection route; The method for obtaining the inspection route includes: Obtaining an electronic certificate of an administrator through a first management system, and obtaining an administrator account of the administrator through a second management system, wherein the electronic certificate is in an encrypted state; After decrypting the electronic certificate, signing the administrator account according to the private key in the electronic certificate; The signed administrator account is verified based on the blockchain. After the signed administrator account is verified, the administrator is allowed to log in to the second management system to plan the inspection route; The planning of the inspection route includes planning the inspection time, inspection location and the sequential relationship between multiple inspection locations of the inspection personnel.

7. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to run the computer program to execute the blockchain-based inspection and login method according to any one of claims 1 to 5.

8. A storage medium, characterized in that: The storage medium stores a computer program, wherein the computer program is configured to execute the steps of the blockchain-based inspection and login method according to any one of claims 1 to 5 when running.

Images